Kirchhoff Logo_neu@2x

Privacy policy

Privacy policy

1. General Information

KIRCHHOFF Ecotec SE appreciates your interest in our company. We take the protection of your personal data seriously and hereby inform you about the type and scope of the personal data we collect when you
visit our website. This privacy policy applies to the website: https://www.kirchhoff-ecotec.de/

As a general rule, you can use our website without providing any personal information. To the extent that personal information (such as your name, address, or email address) is collected on our website, this is always done on
a voluntary basis. This data will not be passed on to third parties without your express consent.

All personal data is collected, processed and used in accordance with the applicable provisions of the GDPR for the protection of personal data.

2. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions of a data protection nature is KIRCHHOFF Ecotec
SE. The responsible parties are listed in the legal notice.

3. Name and address of the data protection officer

The data protection officer of the controller is

External:

Jennifer Jähn-Nguyen
datenschutz nord GmbH
Sechslingspforte 2
22087 Hamburg

Web: www.dsn-group.de/

Email: office@dsn-group.de

Phone: +49 40 593 61 60-400

Any data subject can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

 

External Hosting

This website is hosted by an external service provider. The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests,
meta and communication data, contract data, contact information, names, website visits, and other data generated through a website.

The use of the host is in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our host will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions with regard to this data.

We use the following host:

CBXNET combox internet GmbH

Landhausstr. 22 | 10717 Berlin

Phone: +49 (30) 5900 69-00

Fax: +49 (30) 5900 69-99

www.cbxnet.de

Berlin-Charlottenburg Local Court, HRB 71171

Managing Director: Stephan Höhn

In order to guarantee data protection-compliant processing, we have concluded an order processing contract with our host.

Information on data protection and the legal framework conditions of the providers can be found under the following link:
Privacy policy provider

 

4. Security

KIRCHHOFF Ecotec SE implements technical and organizational security measures to protect the data you provide to KIRCHHOFF Ecotec SE against accidental or intentional manipulation, loss, destruction, or access
by unauthorized persons.

Our security measures are continuously improved and protected in line with technological developments.

 

5. Purposes and Legal Bases for Data Collection and, Where Applicable, Data Transfer

If we obtain your consent for certain processing activities, the processing is based on Article 6(1)(a) of the GDPR. If the processing of personal data is necessary for the performance of a contract—for example, for a delivery—
If processing is necessary for the supply of goods or for pre-contractual measures—such as in response to inquiries—the processing is based on Article 6(1)(b) of the GDPR. If our company is subject to a legal obligation that requires processing
If the processing of personal data is necessary—for example, to comply with tax obligations—the processing is based on Article 6(1)(c) of the GDPR. If the processing of personal data is not based on any of the
Based on the aforementioned legal grounds, we process data to safeguard a legitimate interest of our company, in accordance with Article 6(1)(f) of the GDPR.

As a rule, data is not forwarded to third parties outside the EU. If data is forwarded, standard contractual clauses should be concluded.

 

6. Applications

You can send your application by post, by e-mail (
Karriere@Unternehmen.de) or through our career portal. When you apply for a position with us, we process the information we receive from you as part of the application process, such as your cover letter,
résumé, certificates or other contact details. In addition to your contact details, we are particularly interested in information about your education, qualifications, work experience and skills. We will
only assess you on the basis of your suitability for the position, so you do not need to send us a photo.

Your data will initially be processed solely for the purpose of conducting the application process and making a decision regarding employment. The legal basis for this processing of your personal data is §
Section 26(1) of the Federal Data Protection Act (BDSG). If your application is successful, your personal data will be included in your personnel file. All applications will remain on file with us for up to 6 months after the selection process is completed and will then be permanently
deleted or returned to you in full. In the event that your application has piqued our interest but we are currently unable to offer you a position, we request your express consent
to retain your applicant information for a longer period so that we can consider you for future job openings.

Your personal data will be collected or processed only by individuals responsible for handling the application. If you apply for a position at one of our group companies, your data will be
transmitted to this company for this purpose.

We use applicant tracking software to process and store applicant data. Through the career portal on our website, applicants enter the necessary information into a form and upload their application documents
Before submitting the application, consent to the storage of data must be given. Once the application has been submitted, it is forwarded to the service provider and transferred to the internal database. Initially, only the
Human Resources department has access to this database; by granting access, it can involve the relevant people in the company in the selection process.

7. Cookies and Server Log Files

The KIRCHHOFF Ecotec SE website uses cookies. Cookies are text files that are placed and stored on a computer system via a web browser.

The use of cookies enables the websites and servers visited to distinguish the individual browser of the data subject from others.

Some cookies are essential for the operation and display of the website and do not collect any personal information. Others, however, allow us to tailor your visit to the site to your preferences and user behavior.
In this case, when you visit our website for the first time, we will ask for your consent to set these optional cookies.

By changing the settings in your web browser, you can prevent cookies from being set on all websites. You can configure your browser settings according to your preferences and, for example, choose not to accept
third-party cookies or all cookies. Cookies that have already been set can be deleted. Please note that you may not be able to use all features of this website.

For technical reasons, so-called server log files are also created. The hosting provider stores technical data in these files (e.g., browser type and version, operating system used, time of the request,
IP address, etc.), which the browser automatically transmits to him. This data is not combined with any other data, so it is not possible to identify an individual.

(Usercentrics)

We use the Usercentrics consent management service, provided by Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany (Usercentrics). This enables us to obtain website users’ consent to data processing.
and to manage them. The processing is necessary to comply with a legal obligation (Art. 7(1) GDPR) to which we are subject (Art. 6(1), first sentence, lit. c GDPR). The following data is processed for this purpose:

Date and time of access Browser information Device information Geographical location Cookie preferences URL of the page visited

The functionality of the website is not guaranteed without the processing.

Usercentrics is the recipient of your personal data and acts as a processor for us.

The processing takes place in the European Union. Further information on objection and removal options vis-à-vis Usercentrics can be found at: https://usercentrics.com/de/datenschutzerklaerung/

The data will be deleted after 3 years.

Please refer to our general information on deleting and deactivating cookies above.
[PL1]

 

8. Google Services

Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data controller is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) offers a wide range of services. In doing so,
Google collects data about the apps, browsers, and devices you use when accessing Google services in the form of individual activities (e.g., search terms, browsing history, purchase activity) or location data (e.g., GPS, IP address,
Wi-Fi access points).

The legal basis for the integration of all Google services and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
[YH2]

However, Google may truncate your IP address beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be
transferred to a Google server in the United States and truncated there.

You can find Google's privacy policy here:
https://policies.google.com/privacy?hl=de and the additional terms of use for Google Maps here:
https://www.google.com/intl/de_de/help/terms_maps.html.

10.1. Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. Google Analytics uses so-called “cookies,” which are text files stored on your computer that allow your use of the website to be
analysed.

You can prevent cookies from being stored by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all the features of this website to their fullest extent.
You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as from processing this data,
by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout.

For more information on this, please visit http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information about Google Analytics and data protection).
Please note that Google Analytics on this website has been enhanced with the code “gat._anonymizeIp();” to ensure that IP addresses are collected anonymously (so-called IP masking).

10.2. Use of Google Optimize

Our website uses the web analytics and optimization service “Google Optimize,” which is provided by Google. We use Google Optimize to improve the appeal, content, and functionality of our
To improve the website by rolling out new features and content to a percentage of our users and statistically analyzing the resulting changes in usage. Google Optimize is a sub-service of Google Analytics (see above).

Google Optimize uses cookies to optimise and analyse your use of our website. You can find out how to prevent the storage of cookies under point 10.1.

10.3. Route Planning with Google Maps

We use "Google Maps" on our website, a service provided by Google Inc. When using Google Maps, Google collects data about the use of the Maps functions by visitors to the websites.

10.4. Use of Google AdWords

Our website also uses the Google advertising tool "Google Adwords" from the provider Google Inc.

As part of the online advertising program, Google uses what is known as “conversion tracking.” When you click on an ad served by Google, a cookie is stored on your computer. These “conversion cookies” expire
after 30 days and are not used for personal identification.

When you visit our website and the cookie has not yet expired, we and Google can tell that you, as a user, clicked on one of our ads placed on Google and were redirected to our site.
Each Google AdWords customer receives a different cookie. This means that cookies cannot be tracked across the websites of AdWords customers.

Google uses the information collected via the cookie to generate visitor statistics for our website. These statistics tell us the total number of users who clicked on our ad and which
pages of our website were subsequently visited. However, this information does not allow users to be personally identified.

You can prevent the installation of "conversion cookies" by setting your browser accordingly (see the Cookies section).

Details on Google AdWords and Google Conversion Tracking can be found in Google's privacy policy:
https://policies.google.com/technologies/ads.

10.5. Use of Google Web Fonts

To ensure that our content is displayed correctly and visually appealing across all browsers, we use script libraries and font libraries on this website, such as Google Web Fonts (https://www.google.com/webfonts/).
Google Web Fonts are cached in your browser to prevent them from being loaded multiple times. If your browser does not support Google Web Fonts or blocks access to them, content will be displayed in a default font.

Calling script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible for operators of such libraries to collect data.

10.6 Use of Google Tag Manager

We use a service called Google Tag Manager from Google. “Google” is a group of companies consisting of Google Ireland Ltd. (the service provider), Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600
Amphitheatre Parkway, Mountain View, CA 94043, USA, as well as other affiliates of Google LLC.

We have entered into a data processing agreement with Google. Google Tag Manager is a support service and processes personal data itself only for technically necessary purposes. Google Tag Manager ensures
the loading of other components that may, in turn, collect data. Google Tag Manager does not access this data.

You can find more information about Google Tag Manager in Google's privacy policy.

Please note that U.S. authorities, such as intelligence agencies, may be able to access personal data—which is inevitably collected when this service is integrated—pursuant to U.S. laws such as the Cloud Act.
exchanged with Google via the Internet Protocol (TCP).

 

9. Social Media

We create online presences within social networks in order to communicate with the interested parties and users active there and to be able to inform them about us.

In this context, user data may be processed by the service provider outside the European Union. This may pose risks to users because, for example, the enforcement of users’ rights
could be made more difficult.

The social media page you are visiting allows you to react to our posts, comment on them, create your own post, and send us private messages regarding personal matters.
The data you provide in this context and to which we may have access (e.g., username, photos, interests [if applicable], contact information) will be used by us exclusively for the purpose of communicating with customers and prospective customers.
Our goal is to provide you with a platform where we can share the latest information with you and through which you can submit your request to us so that we can address it as quickly as possible.

In addition, we use social plugins on our websites for the social networks we use. You can recognize the plugins from the respective providers by their logos. When you visit a page with such a plugin,
the service provider is notified of which pages you visit. User profiles may be created based on the processed data. We therefore have no control over the scope of the data that an activated
plugin collects and how it is used by the provider.

We do not carry out any further data processing beyond the basic functions of the page. Please note that the service provider may use tracking tools and cookies irrespective of our use of the page
.

Below we inform you about the processing of your personal data carried out by us in connection with the online presences we provide. In its ruling of 5 June 2018, the European Court of Justice (ECJ) confirmed the
joint responsibility of the service providers and the website operator.

For a detailed description of the respective processing activities and the options for objecting (opt-out), please refer to the information provided by the service providers we use. In the case of requests for information and the assertion
of user rights, too, we would like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users’ data and can take appropriate measures directly
and provide information. If you still need help, please feel free to contact us.

We operate the following websites and use the following plugins on our website:

 

10. Storage period for personal data

The criterion for the duration of personal data storage is the applicable statutory retention period. Once this period has expired, the relevant data is routinely deleted, unless it is still needed to fulfill the contract
or to initiate a contract.

If you send us an e-mail via the contact form, your e-mails will be received by the relevant mailboxes and archived there indefinitely.

Your data for the newsletter will be used by us until your cancellation in order to keep you informed about news.

Your data stored in the course of using our online presence will - as far as possible - be deleted when the site is closed.

 

11. Rights of Data Subjects

You have the right at any time, pursuant to Article 15 of the GDPR, to obtain information about the data we have stored about you and the purpose of such storage. You may withdraw your consent to the storage or use of your personal data at any time
in writing. In addition, you have the right to object to processing based on legitimate interests (Art. 21 GDPR). In addition to revocation, you have the right to rectification (Art. 16 GDPR)
as well as to request the restriction of processing (Art. 18 of the GDPR) and the blocking or erasure of your data (Art. 17 of the GDPR).

You have the right, pursuant to Article 77 of the GDPR, to file a complaint with the relevant supervisory authority (for North Rhine-Westphalia: the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia in Düsseldorf). In addition, you have
the right to receive the data you have provided in a machine-readable format for transmission.

If you have any questions regarding the processing of your personal data, you can also contact us directly (data controller: see Legal Notice). For all questions, requests for information, applications, or complaints, you can
You may also contact our external data protection officer directly.