Data Privacy
Privacy police – website
Privacy Policy
General Information
The following provides information about the collection of personal data when using this website. Personal data are all data that can be related to you personally, such as your name, address, email addresses, or user behavior.
1. Controller of Data Processing and Contact Person
Controller within the meaning of the GDPR:
IPT Institut für Prüftechnik Gerätebau GmbH & Co. KG
Schulstraße 3
86447 Todtenweis
Tel.: +49 8237 966 0
Fax: +49 8237 966 480
E-Mail: iptsales@iptnet.org
Represented by the Managing Director: Amadou Ba
Data Protection Officer
For questions regarding data protection, you can reach our data protection officer:
By email: datenschutz@iptnet.org
By post: at the above address with the note “Data Protection”
2. Your Rights When Using the Website
You have:
According to Art. 15 GDPR, the right to obtain information about your personal data stored with us that was collected during your visit to the website.
According to Art. 16 GDPR, the right to request the correction of inaccurate or incomplete personal data stored with us.
According to Art. 17 GDPR, the right to request deletion of your personal data, unless processing is necessary to comply with a legal obligation or to assert, exercise, or defend legal claims.
According to Art. 7(3) GDPR, the right to withdraw your consent to processing at any time. This means that processing based on this consent may no longer continue in the future. The lawfulness of processing until the withdrawal remains unaffected.
According to Art. 20 GDPR, the right to receive your personal data in a structured, commonly used, and machine-readable format or to request its transfer to another controller.
According to Art. 77 GDPR, the right to lodge a complaint with the competent data protection authority if you believe your right to informational self-determination has been violated. For IPT Institut für Prüftechnik Gerätebau GmbH & Co. KG, the competent authority is the Bavarian Data Protection Authority (BayLDA).
If your personal data are processed based on legitimate interests according to Art. 6(1) sentence 1 lit. f GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data, if there are reasons arising from your particular situation or if the objection relates to direct marketing. In the latter case, you have a general right of objection that will be implemented by us without specifying a particular situation.
3. Data Security
We maintain current technical measures to ensure data security, especially to protect your personal data during data transmission and against unauthorized access by third parties. These measures are adapted according to the current state of technology.
4. Processing of Personal Data
4.1 Collection of Personal Data When Visiting Our Website
General Website Use
When using the website for purely informational purposes, i.e., if you do not register or submit other information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary to display our website and ensure stability and security (legal basis is Art. 6(1) sentence 1 lit. f GDPR):
IP address
Date and time of request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status / HTTP status code
Transferred data volume
Website from which the request comes
Browser
Operating system and its interface
Language and version of browser software
Use of Cookies
In addition to the above-mentioned data, cookies are stored on your computer when using our website.
Cookies are small text files assigned to the browser you are using and through which the entity setting the cookie (in this case us) receives certain information. Cookies cannot execute programs or transmit viruses to your computer. They are used to make the internet offering more user-friendly and effective.
You can configure your browser settings according to your preferences. However, we point out that you may then not be able to use all functions of this website.
There are different types of cookies. Session cookies are temporary cookies stored in the user’s browser until the browser window is closed and the session cookies are deleted. Persistent cookies are used for repeated visits and stored in the user’s browser for a predefined period. First-party cookies are set by the website the user visits. Only this website may read information from these cookies. Third-party cookies are set by organizations that are not the operator of the website visited by the user. These cookies are, for example, used by marketing companies.
Cookies used on this website:
PHPSESSID: First-party session cookie to identify the current user session on our website. The storage duration corresponds to the current session.
4.2 Additional Functions and Services of Our Website
Contact via Email / Contact Form
For inquiries of any kind, we provide the option to contact us via the email address or contact form provided on the website. In this case, the personal data transmitted with the inquiry from the sender, i.e., the user, are stored.
The legal basis for processing this data transmitted during an inquiry is Art. 6(1) lit. f GDPR (legitimate interests of us as the controller).
If the inquiry aims at concluding a contract, an additional legal basis for processing is Art. 6(1) lit. b GDPR (performance of a contract).
Processing of this personal data serves exclusively to handle the inquiry.
The above-mentioned data will be deleted as soon as they are no longer required for achieving the purpose of their collection. For personal data transmitted by email or via the contact form, this is the case when the respective conversation with the user is concluded and no statutory retention periods apply. The conversation is also considered concluded if circumstances indicate that the matter has been definitively resolved.
The user has the option to object to the data processing. The objection should be addressed to the contact details specified under item 1. In this case, all personal data stored during the contact process will be deleted.
5. Use of Google reCAPTCHA
We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to prevent automated programs (so-called bots) from misusing forms (e.g., contact forms, comment sections, or registrations) on our website.
Purpose of data processing:
reCAPTCHA analyzes the behavior of website visitors to determine whether it is a human or a bot. The analysis begins automatically as soon as the user accesses the website or the contact form.
Data processed:
Various information is transmitted to Google, including:
The user’s IP address
Duration of stay and mouse movements on the website
Browser information and operating system
Referrer URL (previously visited page)
Google account information (if the user is logged in to Google at the time of use)
Legal basis:
Processing is based on Art. 6(1) lit. f GDPR (legitimate interest). Our legitimate interest is the protection of our website against spam, misuse, and automated attacks.
Consent and objection (GDPR compliance):
To comply with GDPR, we integrate reCAPTCHA so that data is transmitted only after active consent (e.g., clicking the “I am not a robot” button). You have the right to revoke your consent at any time with effect for the future.
More information: Google Privacy Policy
6. Use of Vimeo without Tracking
This website uses plugins from the video portal Vimeo. Provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages with Vimeo videos, a connection to Vimeo servers is established. This informs Vimeo which of our pages you have visited and also gives Vimeo your IP address. We have configured Vimeo so that Vimeo will not track your user activities and will not set cookies.
Use of Vimeo is in the interest of presenting our online offerings attractively. This constitutes a legitimate interest pursuant to Art. 6(1) lit. f GDPR. If consent is requested, processing is based exclusively on Art. 6(1) lit. a GDPR; consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on “legitimate business interests.” Details: Vimeo Privacy
Further information on handling user data is available in Vimeo’s privacy policy: https://vimeo.com/privacy
7. Google Fonts (Local Hosting)
We use Google Fonts of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The fonts are embedded locally on our web server. No connection to Google servers occurs, and no data (such as IP addresses) is transmitted or stored by Google.
8. Google Maps
We use Google Maps on this website to display interactive maps and enable convenient use of map functions. Visiting our website provides Google with information that you accessed the corresponding subpage. The data is transmitted whether or not a Google account is present. If logged in, the data is directly assigned to your account. If you do not wish this, you must log out of your Google account. Google stores data as usage profiles and uses it for advertising, market research, and/or tailored website design.
Legal basis: Art. 6(1) lit. f GDPR
Further information: Google Privacy
9. Obligation to Provide Data
There is no legal obligation to provide data. However, some functions of our website cannot be used without providing personal data.
10. Changes to the Privacy Policy
Due to further development of our website and offerings or changes in legal/regulatory requirements, it may be necessary to amend this privacy policy.
Privacy police – job applicant
Information on the processing of personal data of applicants pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR)
1. Definitions
This information is based on the terminology used by the European regulator when adopting the General Data Protection Regulation (GDPR). We would therefore refer you to the definitions in Article 4 GDPR. These can be viewed at https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN.
2. Name and address of the data controller and the data protection officer
The controller as defined by the GDPR is:
IPT Institut für Prüftechnik Gerätebau GmbH & Co. KG
Schulstrasse 3
86447 Todtenweis, Germany
Phone: +49 8237 966-0
Fax: +49 8237 966-480
E-mail: iptsales@iptnet.org
Represented by managing directors Sven Sommer and Amadou Ba
Our data protection officer can be contacted by
E-mail: datenschutz@iptnet.org
Mail: at the above address, with the additional line ‘Data Protection Officer’
3. Information on data processing
3.1. Scope of the processing of personal data
In accordance with the principles of data protection law, we process personal data only to the extent that this is necessary, is permitted by applicable legal provisions, or if we are obliged to do so.
3.2.Data sources/data types
We process personal data that we receive from you in connection with your application documents and interviews.
This specifically includes:
- general data about you personally (name, address, contact details)
- information on knowledge and skills, such as training and work certificates, curriculum vitae and assessments
Other relevant personal data might also include the following:
- health data, if relevant to your employment
- data published by the applicant on professional social networks such as LinkedIn and XING
3.3. Purpose of the processing and legal basis
We process your personal data to decide on the creation of an employment relationship. The legal basis for this is Article 88(1) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).
If necessary, we also process your data to protect our legitimate interests in accordance with Article 6(1)(f) GDPR.
This includes:
- identification of multiple applications
- assertion and defence of legal claims asserted within the context of the application procedure
If you have given us your consent to process your personal data in accordance with Article 6(1)(a) and Article 88(1) GDPR in conjunction with Section 26(2) BDSG, we will use your data to the extent and for the purpose described in the declaration of consent.
We process special categories of personal data in accordance with Article 9(1) GDPR for employment purposes if this is necessary for the exercising of rights or the fulfilment of legal obligations under labour law, social security and social protection legislation. The legal basis for this is Article 88(1) GDPR in conjunction with Section 26(3) BDSG. In addition, special categories of personal data may be processed on the basis of consent pursuant to Article 9(2)(a) GDPR in conjunction with Section 26 BDSG.
3.4. Recipients of the personal data
Within our company, the persons and departments that are involved in the decision on the creation of an employment relationship with you or that need access to your data to implement our legitimate interests, such as the human resources department, management, line managers, etc., have access to your data.
Personal data may also be transmitted for the above-mentioned purposes to the service providers and agents employed by us if this is necessary for the execution of their respective services, e.g. IT service companies. Where necessary, agreements have been concluded pursuant to Article 28 GDPR.
Data is also passed on to recipients outside the company, provided this is permitted or required by law or with your consent. Under these conditions, recipients of personal data may include the following, for example:
- lawyer
- service providers within the context of contract processing relationships
We do not transfer any personal data to entities in third countries (countries outside the European Economic Area).
3.5. Data storage period
Personal data of rejected applicants will be deleted or in individual cases returned six months after completion of the application procedure.
Where the storage of applications has been agreed for positions that may be filled at a later date, they will be stored for a maximum of 24 months.
Personal data processed by us on the basis of a legitimate interest will be erased as soon as a legitimate interest in the data processing no longer exists or as soon as you have effectively objected to it.
Personal data of successful applicants is transferred to the personnel file.
4. Automated decision making in individual cases
We do not use automated decision making or profiling to decide on the creation of employment relationships.
5. Obligation to provide data
As part of the application process, you are only required to provide personal data that is necessary for the decision on the creation of an employment relationship. Besides your name and contact details, this data is usually information about your knowledge and skills, such as training and work certificates, curriculum vitae and assessments. Without this information we cannot assess whether you have the necessary knowledge and skills for the position for which you have applied, and you will not be considered in the selection process.
6. Rights of data subjects
You are entitled to extensive rights with regard to the processing of your personal data. In the following we would like to familiarise you with these rights:
- Right to be informed You have the right to be informed about the data stored with us, in particular the purpose for which the data is processed and how long the data is stored (Article 15 GDPR).
- Right to rectification You have the right to ask us to rectify any personal data concerning you without undue delay if it is incorrect (Article 16 GDPR).
- Right of withdrawal You have the right to withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal. (Article 7(3) GDPR).
- Right to erasure You have the right to ask us to erase the personal data concerning you. The conditions stipulate that you can request the erasure of your data if, for example, we no longer need the personal data for the purposes for which it was collected or otherwise processed, if we have processed the data unlawfully, you have legitimately objected to its processing, or if there is a legal obligation to erase it (Article 17 GDPR).
- Right to data portability You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format (Article 20 GDPR), provided that it has not already been erased and the relevant requirements of Article 20 GDPR are met.
- Right to object You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation (Article 21 GDPR). We will cease processing your personal data unless we can demonstrate compelling legitimate grounds for this that override your interests, rights and freedoms, or unless the processing is being used to establish, exercise or defend legal claims.
- Right to lodge a complaint with the authorities You have the right to appeal to the above-mentioned data protection officer or to a data protection supervisory authority if you believe that the processing of personal data concerning you is in breach of the General Data Protection Regulation. (Article 77 GDPR) The competent data protection supervisory authority for us is:
- The Bavarian Data Protection Authority (Bayerische Landesamt für Datenschutzaufsicht – BayLDA)
- Promenade 18
Privacy police – supplier and customers
Information on the processing of personal data of business customers pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR)
1. Definitions
This information is based on the terminology used by the European regulator when adopting the General Data Protection Regulation (GDPR). We would therefore refer you to the definitions in Article 4 GDPR. These can be viewed at https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN.
2. Name and address of the data controller and the data protection officer
The controller as defined by the GDPR is:
IPT Institut für Prüftechnik Gerätebau GmbH & Co. KG
Schulstrasse 3
86447 Todtenweis, Germany
Phone: +49 8237 966-0
Fax: +49 8237 966-480
E-mail: iptsales@iptnet.org
Represented by managing directors Sven Sommer and Amadou Ba
Our data protection officer can be contacted by
E-mail: datenschutz@iptnet.org
Mail: at the above address, with the additional line ‘Data Protection Officer’
3. Information on data processing
3.1. Scope of the processing of personal data
In accordance with the principles of data protection law, we process personal data only to the extent that this is necessary, is permitted by applicable legal provisions, or if we are obliged to do so.
3.2.Data sources/data types
We process personal data that we receive from you in connection with your application documents and interviews.
This specifically includes:
- general data about you personally (name, address, contact details)
- information on knowledge and skills, such as training and work certificates, curriculum vitae and assessments
Other relevant personal data might also include the following:
- health data, if relevant to your employment
- data published by the applicant on professional social networks such as LinkedIn and XING
3.3. Purpose of the processing and legal basis
We process your personal data to decide on the creation of an employment relationship. The legal basis for this is Article 88(1) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).
If necessary, we also process your data to protect our legitimate interests in accordance with Article 6(1)(f) GDPR.
This includes:
- identification of multiple applications
- assertion and defence of legal claims asserted within the context of the application procedure
If you have given us your consent to process your personal data in accordance with Article 6(1)(a) and Article 88(1) GDPR in conjunction with Section 26(2) BDSG, we will use your data to the extent and for the purpose described in the declaration of consent.
We process special categories of personal data in accordance with Article 9(1) GDPR for employment purposes if this is necessary for the exercising of rights or the fulfilment of legal obligations under labour law, social security and social protection legislation. The legal basis for this is Article 88(1) GDPR in conjunction with Section 26(3) BDSG. In addition, special categories of personal data may be processed on the basis of consent pursuant to Article 9(2)(a) GDPR in conjunction with Section 26 BDSG.
3.4. Recipients of the personal data
Within our company, the persons and departments that are involved in the decision on the creation of an employment relationship with you or that need access to your data to implement our legitimate interests, such as the human resources department, management, line managers, etc., have access to your data.
Personal data may also be transmitted for the above-mentioned purposes to the service providers and agents employed by us if this is necessary for the execution of their respective services, e.g. IT service companies. Where necessary, agreements have been concluded pursuant to Article 28 GDPR.
Data is also passed on to recipients outside the company, provided this is permitted or required by law or with your consent. Under these conditions, recipients of personal data may include the following, for example:
- lawyer
- service providers within the context of contract processing relationships
We do not transfer any personal data to entities in third countries (countries outside the European Economic Area).
3.5. Data storage period
Personal data of rejected applicants will be deleted or in individual cases returned six months after completion of the application procedure.
Where the storage of applications has been agreed for positions that may be filled at a later date, they will be stored for a maximum of 24 months.
Personal data processed by us on the basis of a legitimate interest will be erased as soon as a legitimate interest in the data processing no longer exists or as soon as you have effectively objected to it.
Personal data of successful applicants is transferred to the personnel file.
4. Automated decision making in individual cases
We do not use automated decision making or profiling to decide on the creation of employment relationships.
5. Obligation to provide data
As part of the application process, you are only required to provide personal data that is necessary for the decision on the creation of an employment relationship. Besides your name and contact details, this data is usually information about your knowledge and skills, such as training and work certificates, curriculum vitae and assessments. Without this information we cannot assess whether you have the necessary knowledge and skills for the position for which you have applied, and you will not be considered in the selection process.
6. Rights of data subjects
You are entitled to extensive rights with regard to the processing of your personal data. In the following we would like to familiarise you with these rights:
- Right to be informed You have the right to be informed about the data stored with us, in particular the purpose for which the data is processed and how long the data is stored (Article 15 GDPR).
- Right to rectification You have the right to ask us to rectify any personal data concerning you without undue delay if it is incorrect (Article 16 GDPR).
- Right of withdrawal You have the right to withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal. (Article 7(3) GDPR).
- Right to erasure You have the right to ask us to erase the personal data concerning you. The conditions stipulate that you can request the erasure of your data if, for example, we no longer need the personal data for the purposes for which it was collected or otherwise processed, if we have processed the data unlawfully, you have legitimately objected to its processing, or if there is a legal obligation to erase it (Article 17 GDPR).
- Right to data portability You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format (Article 20 GDPR), provided that it has not already been erased and the relevant requirements of Article 20 GDPR are met.
- Right to object You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation (Article 21 GDPR). We will cease processing your personal data unless we can demonstrate compelling legitimate grounds for this that override your interests, rights and freedoms, or unless the processing is being used to establish, exercise or defend legal claims.
- Right to lodge a complaint with the authorities You have the right to appeal to the above-mentioned data protection officer or to a data protection supervisory authority if you believe that the processing of personal data concerning you is in breach of the General Data Protection Regulation. (Article 77 GDPR) The competent data protection supervisory authority for us is:
- The Bavarian Data Protection Authority (Bayerische Landesamt für Datenschutzaufsicht – BayLDA)
- Promenade 18
- 91522 Ansbach, Germany