Who is responsible for the processing?
Encavis AG
Große Elbstraße 59
22767 Hamburg
Germany
Phone: + 49 (40) 3785 620
E-mail: info@encavis.com
How can you reach our data protection officer?
You can reach our data protection officer by e-mail: datenschutz@encavis.com.
What do we do with your data?
In the following, you will learn which data is collected when, how it is used (type, scope and purpose of the processing of personal data) as well as the legal basis and the duration of storage.
Operation of the web server, delivery of the web pages
When you visit our websites, we automatically process the following data from you in order to be able to provide our websites and the services provided via them:
· Date and time of your access
· Your IP address in anonymized form
· the address of the website from which you came to us
· the web pages that you visit on our site
· information about your Internet browser (browser type and version)
· the operating system of the device with which you access our websites and services
This information is stored by us in log files for security reasons and automatically deleted after 14 days. The data present in the log files is stored separately from other data about you.
Longer storage only takes place in justified individual cases (e.g. in the event of suspected abuse or fraud or in the event of attacks on our web server). In these cases, the respective log files are stored until the facts of the matter have been clarified and the resulting measures have been completed.
In order to provide you with our websites and the services provided via them, we use a service provider (web hoster) who processes your data on our behalf and exclusively in accordance with our instructions. This is uvensys GmbH, Robert-Bosch-Str. 4b, 35440 Linden, Germany, https://uvensys.de/.
The legal basis for the processing of your data is Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in processing your data so that we can offer you our websites and the services provided via them in a technically flawless, secure manner and optimized for your needs. In addition, our other legitimate interest is to detect and prevent fraud attempts or attacks on our websites.
Use of an externally hosted tool to obtain and manage consent
We use various tools and technologies on our websites, including cookies, for the operation of which we require your consent.
We use a so-called Consent Manager to obtain and manage your consent. Specifically, we use the product Usercentrics (Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, https://usercentrics.com/).
The Consent Manager stores information on your terminal device to save your consents. The storage period of this data can be found in the information in the Consent Manager.
You can give us all consents for the tools and technologies we use in the Consent Manager and also revoke them there at any time. The Consent Manager is automatically displayed the first time you visit our website. In addition, you can open it again at any time by clicking on the fingerprint at the bottom right of our page. All necessary details regarding cookies used or tools and technologies requiring consent can be found in the Consent Manager.
The legal basis for the use of the Consent Manager is our obligation to obtain your consent for certain processing and our legal obligation to be able to prove what kind of consent you have given us (Art. 6 para. 1 lit c DSGVO in conjunction with Art. 7 DSGVO and Art. 5 para. 2 DSGVO). The decision to use an external provider is based on our legitimate interest (Art. 6 para. 1 lit. f DSGVO) to use a modern, secure and at the same time cost-effective solution. .
Storage and retrieval of data on your terminal device
In order to provide the functionalities you request, including the provision of the website, we store data in your browser in accordance with § 25 TDDDG and also read them out again. For this purpose, we use so-called cookies as well as the session memory and the local memory of the browser. Without this storage and retrieval of data, our website will not function correctly.
The legal basis for the storage in and retrieval of data from your browser is our legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO in conjunction with § 25 TDDDG to implement our websites in an appealing and secure manner and to comply with your wishes regarding the usability and functionalities of the pages.
All further information on this type of data storage and retrieval can be found in the Consent Manager (see previous section), which you will find on our site at the bottom right (fingerprint).
Powersave Mode Switch
With the Powersave Mode Switch you can put our websites into a dark mode. Every pixel that is not lit saves energy. We save the setting of the Powersave Mode Switch selected by you on your computer in the local memory of the browser (the name of the key is "dark-mode"), provided that you have pressed the switch at least 1x. The storage is in accordance with § 25 TDDDG and based on your consent according to Art. 6 para. 1 lit. a DSGVO. When the Powersave Mode Switch is switched on for the first time, this information is stored on your computer. We store the information about the Powersave Mode Switch until you revoke your consent. This means that the Powersave Mode Switch will also be observed when you visit our pages in the future.
Data protection information for business partners and e-mail, telephone and video conference contacts
You can access our data protection information for business partners and e-mail, telephone and video conference contacts here.
Investor Relations
In the area of investor relations, we use the following service provider for the following processing, which processes your data exclusively on our behalf and in accordance with our instructions: EQS Group AG, Karlstraße 47, 80333 Munich, Germany, contact@eqs.com.
Subscription, dispatch and receipt of our Investor Relations Newsletter
If you subscribe to our e-mail newsletter with investor relations content, the data you provide will be processed for the creation and dispatch of the newsletter and for proof of subscription to the newsletter until you revoke your subscription. The legal basis for the processing is Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time by unsubscribing from the newsletter. You will find a corresponding link at the end of each newsletter. This also applies to the revocation of declarations of consent given to us before the DSGVO came into effect, i.e. before May 25, 2018. Please note that the revocation is effective exclusively for the future. Processing that took place before the revocation is not affected. Regarding further rights as a data subject, we refer you to our explanations below.
To receive the newsletter, you must click on the confirmation link in the verification email that we send you after your registration in order to prove your consent. When you click on the corresponding link, we store the public IP address of the Internet connection from which the link is called, together with the date and time of the click. We process this data in order to be able to prove that you have confirmed receipt of our e-mail newsletter. The legal basis for this storage is Art. 6 para. 1 lit. c DSGVO.
We delete your data when you unsubscribe from the newsletter. We delete the data that we require as proof that you had agreed to the sending of the newsletter after the expiry of the limitation period for corresponding obligations to provide proof.
Display of the most important information on the Encavis share
On our website we present various data and information, as well as download options. Some of this data is provided by EQS. EQS learns about your visit in the form of your IP address already when building the page. The legal basis for this type of integration is Art. 6 Para. 1 lit. f DSGVO; we pursue the legitimate interest of providing you with constantly updated data about our company via our pages.
If you provide further information on the pages, this is done voluntarily, the legal basis for the processing is therefore Art. 6 para. 1 lit. a DSGVO. The processing by us takes place once. You can revoke any consent given in this context at any time with effect for the future. However, the lawfulness of past processing is not affected by the revocation. Regarding further rights as a data subject, we refer you to our explanations below.
We do not store your data unless we are obliged to store certain data to prove the lawfulness of the processing. In this case, the legal basis is our corresponding legal obligation to be able to provide this proof (Art. 6 para. 1 lit. c DSGVO in conjunction with Art. 5 para. 2 DSGVO). We delete this data, which we require as proof, after the expiry of the limitation period for corresponding obligations to provide proof.
Contact form
You can contact us via the contact form provided. This is for the purpose of answering questions, to submit a callback request or for any other reason you choose. By submitting your data, you consent to the processing of this data by us. This is done in order to be able to process your requests to the extent necessary to respond to the contact requests and any requested action.
The legal basis for the processing of your data in the context of contacting us is Art. 6 para. 1 lit. a DSGVO, your consent.
Your data will be deleted as soon as it is no longer required and is not subject to any legal retention obligations or you revoke your consent. If it is necessary to pass on your data internally to other departments, these are recipients of your data to this extent. A transfer to third parties does not take place.
Integration of Börsen Radio Network
We have integrated the podcast hosting service of Börsen Radio Network AG, Denzenlohestraße 47, 95500 Heinersreuth, Germany, redaktion@brn-ag.de (BRN).
The podcasts are thereby loaded or streamed by BRN.
The integration is based on our legitimate interests, i.e. interest in a safe and efficient provision, analysis and optimization of our podcast offer in accordance with Art. 6 para. 1 lit. f. DSGVO.
BRN processes IP addresses and device information to enable podcast downloads/playbacks and to determine statistical data, such as call-up figures. This data is anonymized or pseudonymized before being stored in BRN's database, unless it is necessary for the provision of the podcasts.
Further information and objection options can be found in BRN's privacy policy: https://www.brn-ag.de/datenschutz.
Automated decision making
Unless otherwise mentioned above in the individual processing operations, we refrain from any automated decision-making.
Processing of your data in the application context
In the "Careers" section, we use the technologies of our service provider d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg, Germany, kontakt@dvinci.de.
We use the d.vinci software on the basis of our legitimate interest (Art. 6 para. 1 lit. f DSGVO) in having our career section on the website operated by a professional service provider and in making the experience for our applicants as pleasant as possible.
If you click on a job offer to view details or if you click on "unsolicited application", we will forward you to d.vinci. The further processing will take place there. Please also inform yourself about the data protection regulations published there regarding applications.
Briefly summarized: If you apply to us, we process data provided by you exclusively for the purpose of processing your application. This includes contacting you by e-mail or telephone, as well as conducting interviews and deciding whether to hire you.
We usually process the following data in this context: Your name and address, contact details, curriculum vitae, certificates and other data that you provide to us. We collect all data exclusively from you and do not transmit it to third parties or to third countries.
We do not subject you to any automatic decision-making or profiling.
The legal basis for processing your data in the context of your application is Section 26 BDSG in conjunction with. Art. 6 para. 1 lit. b DSGVO as well as Art. 88 DSGVO.
If you are hired, we will transfer your data to the personnel file and store it for at least the duration of the employment relationship. If we do not find a match, we will delete your data four months after the end of the application process.
Your rights
If you wish to exercise any of your rights, please contact us as the data controller at the contact details provided above or use one of the other methods we offer to send us this communication.
Right to information
According to Art. 15 DSGVO, you have the right to request confirmation from us as to whether personal data concerning you are being processed by us. If this is the case, you have a right to information about this personal data and to further information mentioned in Art. 15 DSGVO.
Right of rectification/supplementation
According to Art. 16 DSGVO, you have the right to demand that we correct incorrect personal data concerning you without undue delay. Considering the purposes of the processing, you also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.
Right to deletion
You have the right to demand that we delete personal data relating to you without delay. We are obliged to delete personal data without delay, provided that the relevant requirements of Art. 17 DSGVO are met. For details, please refer to Art. 17 DSGVO.
Right to restriction of processing
In accordance with Art. 18 DSGVO, you have the right under certain conditions to demand that we restrict the processing of your personal data.
Right to data portability
According to Art 20 DSGVO, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) DSGVO or Article 9(2)(a) DSGVO of on a contract pursuant to Article 6(1)(b) DSGVO and the processing is carried out with the help of automated processes.
Right to withdraw consent
According to Art. 7 DSGVO, you have the right to revoke your consent at any time and without giving reasons. Please note that a revocation applies exclusively to the future and does not affect the lawfulness of processing carried out in the past.
Right of objection
If we designate our legitimate interest pursuant to Art. 6 (1) f DSGVO as the legal basis, you have the right of objection set out below pursuant to Art. 21 DSGVO.
According to Art. 21 DSGVO, you have the right to object to the processing of personal data concerning you that is based on Article 6 (1) litt. e or f DSGVO; this also applies to profiling based on these provisions.
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
Right of appeal
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority, without prejudice to any other administrative or judicial remedy. This right exists in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.
Subject to change
We reserve the right to change the security and data protection measures at any time, especially if this becomes necessary due to technical developments. In these cases, we will also adapt this data protection notice accordingly, if necessary. Please therefore note the current version of this data protection notice.