Thank you for visiting our website and for your interest in our company. The protection of your personal data is of high importance for us and we wish you to feel safe visiting our internet site.
In the following, we describe which information we collect when you visit our website and how this information is used. In the chapter below, you find information on the recruitment process.

Information for job applicants

Controller

The Elektrobit Group consists of different legal entities, as shown here https://www.elektrobit.com/about/locations/. This data protection information applies for the entire group. Who is the responsible entity depends on your specific application and if you have given consent to be considered for other positions and locations. Independent of this you can contact the Elektrobit Automotive GmbH (https://www.elektrobit.com/legal-notice/) with your request.
 

DATA PROTECTION OFFICER

For any requests concerning you privacy please contact: dataprotection@elektrobit.com
 

PURPOSE OF PROCESSING AND LEGAL BASIS

We process your data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws. In the event that you have given us your consent, we will use your data for the purposes stated in the declaration of consent (Art. 6 (1) (a) GDPR). We use your data to the extent necessary for execution of contracts and pre-contractual measures to provide our services and sale of products (Art. 6 (1) (b) GDPR). Further we process your data for the fulfillment of legal obligations under the law of the European Union or the law of a Member State (Art. 6 (1) (c) GDPR). We also use your data to the extent necessary if we or a third party have a justified interest in the processing (Art. 6 (1) (f) GDPR). We pursue the following purposes and interests:

PURPOSE	LEGAL BASE and INTEREST
We are processing your data to evaluate if you are qualified for the position you applied for	Contract performance and pre-contractual measures
Optimization of our recruiting process	Legitimate interest to make our recruiting process more efficient
For the establishment, exercise or defence of legal claims	Legitimate interest to make our recruiting process more efficient
Compliance with national labour law	compliance with a legal obligation

 

CATEGORIES OF DATA WE PROCESS AND SOURCES OF DATA

Data that we collect about you in the application process are name, company, position, telephone number, mobile phone number, email address, date of birth, passwords, pictures and gender, qualifications, likelihood of changing jobs, details of suitability, certificates and, where applicable, other categories of data.
We may also receive data from other sources such as, in particular, professional social networks (XING, LINKEDIN) or from third parties.
 

SHARING WITH THIRD PARTIES AND DATA TRANSFER OUTSIDE EU/EEA

Within our company, those departments receive your data that need it to fulfil our contractual and legal obligations. Also, processors may receive data for these purposes. Other forwarding to third parties will only take place if this is necessary for the processing and compliant with applicable data protection law. Information on appropriate or suitable guarantees in case of a transfer outside the EU or EAA, you can obtain by contacting our data protection officer. The following categories of recipients may receive your data:
 

THIRD PARTIES	PURPOSE AND SAFEGUARDS
rexx systems GmbH Headquarters Süderstrasse 75-79 20097 Hamburg Deutschland	IT supplier as a processor for the execution of the application process
Elektrobit Automotive GmbH Am Wolfsmantel 46 91058 Erlangen Germany	Group internal processor for the execution of the application process
Other entities of the Elektrobit Group www.elektrobit.com/about/locations/	Consideration for other locations in case you have given consent.   Within the Elektrobit Group for data transfers our Binding Corporate Rules apply.

 

RETENTION PERIOD

If your data is no longer required for the purposes mentioned or if its storage is inadmissible for other legal reasons, we will delete it. If we have processed data on the basis of your consent, we will delete this data after revoking your consent and insofar as no other storage obligations exist.
 

PURPOSE	RETENTION PERIOD
conducting the application process	6 months after end of the application process
Optimization of our recruiting process	3 years after the end of the application process (only necessary categories of data are stored, not your whole application)
For the establishment, exercise or defence of legal claims	3 years after the end of the application process (only necessary categories of data are stored, not your whole application)
Compliance with legal obligations	6 months after end of the application process

 

OBLIGATION TO PROVIDE PERSONAL DATA

An obligation to provide data does not apply.
 

PROFILING OR AUTOMATED DECISION MAKING

An automated decision making does not exist.
 

YOUR LEGAL RIGHTS

If you are located in a European Union Member State and certain other countries, you have the following additional rights:
Right to access - You have the right to obtain information about the data stored about you.
Rectification - You have the right to request the correction of inaccurate and incomplete data concerning you.
Erasure - You have the right to demand the deletion of the data stored about you if the legal requirements are met.
Restriction of processing - You have the right to demand the restriction of future data processing under the legal conditions.
Data portability - You have the right to receive data that we have received from you in a common format or to forward it to third parties.
Objection - You have the right to object to any processing based on a legitimate interest for personal reasons. In the case of DIRECT ADVERTISING and MARKETING, you have an unlimited right of objection. If you object to a processing of your personal data in the recruitment process please contact recruiting-team@elektrobit.com.
Revocation - If you have given us your consent, you can revoke it at any time with effect for the future.
Complaint - You have the right to submit a complaint to a data protection supervisory authority.
 

Information for the visit on the website

Controller

Within the meaning of Art. 4 No. 7 GDPR, controller is the person who alone or jointly with others, determines the purposes and means of the processing of personal data.
With regard to our website, the controller is:
Elektrobit Automotive GmbH
Am Wolfsmantel 46
91058 Erlangen
Germany
E-Mail: inquiries@elektrobit.com
Tel.: +49 9131 7701-0
 

Contact details of the data protection officer

We have appointed a data protection officer in accordance with Art. 37 GDPR. You can contact our data protection officer using the contact details below:
MKM Datenschutz GmbH
Äußere Sulzbacher Str. 124a
90491 Nuremberg
Germany
E-Mail: dataprotection@elektrobit.com
 

Provision of the website and creation of log files

 
Every time our website is accessed, our system automatically collects data and information from the respective device (e.g. computer, mobile phone, tablet, etc.).
Which personal data are collected and to what extent are they processed?
(1) Information about the browser type and version;
(2) The operating system of the retrieval device;
(3) Host name of the accessing computer;
(4) The IP address of the retrieval device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) that were accessed on our website;
(7) Websites from which the user’s system entered our website (Referrer-Tracking);
(8) Message whether the retrieval was successful;
(9) Amount of data transferred
This data is stored in the log files of our system. This data is not stored together with the personal data of a specific user, so that individual page visitors are not identified.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.
Purpose of data processing
The temporary (automated) storage of the data is necessary for a website visit in order to enable the website to be delivered. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible, to combat misuse and to eliminate faults. For this it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and / or errors in the functionality of our website. In addition, we use the data to optimize the website and to generally ensure the security of our information technology systems.
 
Storage period
The aforementioned technical data are deleted as soon as they are no longer needed to ensure the compatibility of the website for all visitors, but no later than 3 months after our website has been accessed.
Right to object and erasure
You can object to the processing at any time in accordance with Art. 21 GDPR and request the erasure of data in accordance with Art. 17 GDPR. You can find out which rights you are entitled to and how you can exercise them in the lower section of this privacy policy.
 

Special functions of the website

 
Our website is providing various functions. When you use them, we collect, process and store personal data. In the following we explain what happens to this data:
Contact form(s)

• Which personal data are collected and to what extent are they processed?
  • The data you have entered in our contact forms, which you have entered in the input mask of the contact form.
• Legal basis for the processing of personal data
  • Art. 6 para. 1 lit. a GDPR (consent through a clear confirming action or behavior)
• Purpose of data processing
  • The data collected through our contact form or through our contact forms will only be used to process the specific contact request received via the contact form. Please note that in order to fulfill your contact request, we may also send you e-mails to the address provided by you. The purpose of this is to send you a confirmation that your request has been correctly forwarded to us. However, sending this confirmation e-mail is not mandatory for us and is for your information only.
• Storage period
  • After processing your request, the collected data will be deleted immediately, as long as there are no legal retention periods.
• Right to withdraw and erasure
  • The withdrawal and erasure options are based on the general provisions on the right to withdraw and right to erasure under data protection law described below in this privacy policy.
• Necessity of providing personal data
  • The use of the contact forms is voluntary and is neither contractually nor legally required. You are not obliged to contact us via the contact form. For this you can also use the other contact options provided on our website. If you would like to use our contact form, you have to fill in the fields marked as mandatory information. If you do not fill in the mandatory fields of the contact form, you either cannot send the request or we cannot process your request.

Login area / Registration

• Extent of processing and personal data collected
  • The registration and login data you have entered or that we provide to you.
• Legal basis for the processing of personal data
  • Art. 6 para. 1 lit. b GDPR (implementation of (pre) contractual measures)
• Purpose of data processing
  • You have the option of using a separate login area on our website. In order for us to check your authorization to use the protected area or the protected documents, you have to enter your login data (e-mail or username and password) in the corresponding form. If required, we can send you your login data or provide you with the option to reset your password by email on request.
• Storage period
  • The collected data will be stored as long as you have a user account with us.
• Right to object and erasure
  • You can object to the processing at any time in accordance with Art. 21 GDPR and request the erasure of data in accordance with Art. 17 GDPR. You can find out which rights you are entitled to and how you can exercise them in the lower section of this privacy policy.
• Necessity of providing personal data
  • The use of the login area on our website is contractually required for the use of the protected area. It is not possible to use the content protected by the login area without entering personal data. If you would like to use our login area, you have to fill in the fields marked as mandatory information (user name and password). The entry of data requires the existence of a user account. You cannot log in if the data you entered is incorrect. If you enter the data incorrectly or if you do not enter any data, the protected area cannot be used. However, the rest of the website can still be used without login.

 

Statistical analysis of visits to this website – web tracker

When accessing this website or individual files of the website, we collect, process and store the following data: IP address, web page from which the file was retrieved, name of the file, date and time of retrieval, amount of data transferred and notification of the success of the retrieval (so-called web log). We use this data exclusively in a non-personalized form for the continuous improvement of our website and for statistical purposes. We also use the following web trackers to evaluate the visits to this website:

Information on the use of cookies

• Extent of processing of personal data
  • We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. The so-called “cookies” are small text files that your browser can store on your device. These text files contain a characteristic string that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also called “setting a cookie”. Cookies can be set by the website itself as well as by external web services.
• Legal basis for the processing of personal data
  • Art. 6 para. 1 lit. f GDPR (legitimate interest) or Art. 6 para. 1 lit. a respectively Art. 9 para. 2 lit. a GDPR (consent).
• Which legal basis is relevant can be determined from the cookie table listed below.
  • In general, with cookies that are collected on the basis of a legitimate interest, our legitimate interest is to ensure the functionality of our website and the services integrated on it (technically necessary cookies). In addition, cookies may increase the user-friendliness and enable a more individual approach. Tn this regard, we have made a balance between your interests and our interests.
• With the help of the cookie technology, we can identify, analyze and track individual website visitors only if the website visitor has consented to the use of the cookie in accordance with Art. 6 para. 1 lit. a GDPR.
• Purpose of data processing
  • The cookies are set by our website or the external web services to maintain the full functionality of our website, to improve the user experience or to pursue the purpose stated with your consent. The cookie technology also allows us to recognize individual visitors by pseudonyms, such as unique or random IDs, so that we can provide more customized services. Details are provided here.
• Right to object, withdrawal of consent and erasure
  • You can set your browser according to your wishes so that the setting of cookies is generally prevented. You can then decide whether to accept cookies on a case-by-case basis or accept cookies in principle. Cookies can be used for various purposes, e.g. to recognize that your device is already connected to our website (permanent cookies) or to save recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can withdraw you consent at any time. Please note that the legality of the processing carried out on the basis of the consent until withdrawal is not affected by this.

Right of access and request for rectification – Erasure & restriction of data – Withdrawal of consent – Right to object

Right of access
You have the right to request confirmation as to whether we are processing your personal data. If this is the case, you have the right to receive the information referred to in Article 15 para. 1 GDPR, unless the rights and freedoms of other persons are affected (see Article 15 para. 4 GDPR). We are also happy to provide you with a copy of the data.
Right to rectification
In accordance with Art. 16 GDPR, you have the right to have any incorrectly stored personal data (such as address, name, etc.) corrected at any time. You can also request a completion of the data stored by us at any time. An appropriate adjustment will be made without delay.
Right to erasure
In accordance with Art. 17 para. 1 GDPR, you have the right to demand that we delete the personal data we have collected about you if

• the data is no longer needed;
• due to the withdrawal of your consent, the legal basis for processing no longer applies;
• you have objected to the processing and there are no legitimate reasons for the processing;
• your data is being processed unlawfully;
• a legal obligation requires this or a collection according to Art. 8 para. 1 GDPR has taken place.

According to Art. 17 para. 3 GDPR, the right does not exist if

• the processing is necessary for exercising the right of freedom of expression and information
• your data has been collected on the basis of a legal obligation;
• the processing is necessary for reasons of public interest;
• the data are necessary for the establishment, exercise or defence of legal claims

 
Right to restriction of processing
According to Art. 18 para. 1 GDPR, you have the right to request the restriction of the processing of your personal data in certain cases.
 
This is the case if:

• the accuracy of the personal data is contested by you;
• the processing is unlawful and the you oppose the erasure;
• the personal data are no longer needed for the purposes of the processing, but they are required by the you for the establishment, exercise or defence of legal claims
• an objection to the processing has been filed in accordance with Article 21 para. 1 GDPR and it is still unclear which interests prevail.

 
Right to withdraw
If you have given us your express consent to the processing of your personal data (Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR) you can withdraw this at any time. Please note that this does not affect the legality of the processing carried out on the basis of the consent before the withdrawal.
 
Right to object
In accordance with Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Art. 6 para. 1 lit.  f (in the context of a legitimate interest). You are only entitled to this right if special circumstances speak against the storage and processing.
 
How can you exercise your rights?
You can exercise your rights at any time by contacting us at the contact details below:
Elektrobit Automotive GmbH
Am Wolfsmantel 46
91058 Erlangen
Germany
E-Mail: dataprotection@elektrobit.com
 
Right to data portability
According to Art. 20 GDPR, you are entitled to the transfer of your personal data. We will provide the data in a structured, commonly used and machine-readable format. The data can be sent either to you or to a controller named by you.
On request, we will provide you with the following data in accordance with Article 20 para. 1 GDPR:

• Data collected on the basis of explicit consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR;
• Data that we have received from you in accordance with Art. 6 para. 1 lit. b GDPR within the scope of existing contracts;
• Data that has been processed as part of an automated procedure.

We will transfer the personal data directly to the controller you have requested, insofar as this is technically feasible. Please note that we may not transfer data that interferes with the rights and freedoms of other persons in accordance with Art. 20 para. 4 GDPR.
 
Right to lodge a complaint with a supervisory authority according to Art. 77 para. 1 GDPR
If you suspect that we are processing your data unlawfully, you can, of course, seek judicial clarification of the issue at any time. In this regard, any legal option is open to you. Irrespective of this, you have the option of contacting a supervisory authority according to Art. 77 para. 1 GDPR. You have the right to lodge a complaint According to Art. 77 GDPR in the EU Member State of your place of habitual residence, place of work or place of the alleged infringement, i.e. you can choose the supervisory authority you would like to contact from the places mentioned above. The supervisory authority to which the complaint was submitted will then inform you about the status and results of your submission, including the possibility of a judicial remedy according to Art. 78 GDPR.