Data protection
1 Foreword and Basic Information:
Protecting your privacy and ensuring the proper processing of your personal data is a top priority for us, and we take this very seriously in our business processes and internal data flow analyses. We would now like to take this opportunity to inform you below about the processing of your personal data and the data protection rights to which you are entitled. Please note that, to make this document easier to understand, we have established the following guidelines:
- When we refer to articles within the DSGVO, they are cited as § (for example, § 6(1)(f) DSGVO)
- When we talk about articles, we are referring to this document.
This ensures that it is always clear whether we are referring to the legal basis (DSGVO) or this internal document.
2 Name and contact information of the person in charge at the company
The following person is responsible for data processing and monitoring data flows within the company:
IFT GmbH
Ringstraße 26
01468 Moritzburg / OT Boxdorf
Germany
Represented by Philipp Renz
Email: info@ift-gmbh.net
Web: www.ift-gmbh.net
3 Name and contact information of the designated data protection officer within the company
The following person has been appointed as Data Protection Officer:
valantic Management Consulting GmbH
Dreieich Plaza 2A
63303 Dreieich
Germany
Web: +49 6103 5086 0
E-Mail: datenschutz@ift-gmbh.net
4 General Information on Data Processing
4.1 Purpose of Processing Personal Data or Information
To the extent that you have provided us with personal data, we use it exclusively for the technical administration of our websites and to fulfill your requests and requirements - that is, in most cases, to respond to your inquiry or to fulfill our obligation to provide information.
4.2 Legal basis for the processing of personal data or information
To the extent that we obtain your consent for the processing of personal data, Section 6(1) of the EU General Data Protection Regulation (DSGVO) serves as the legal basis for the processing of personal data. When processing personal data necessary to fulfill a contract to which you are a party, Article 6(1)(b) of the DSGVO serves as the legal basis. This also applies to processing operations necessary to take steps prior to entering into a contract. To the extent that the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Article 6(1)(c) of the DSGVO serves as the legal basis. If the processing is necessary to protect a legitimate interest of our company or a third party, and your interests, fundamental rights, and fundamental freedoms do not override the aforementioned interest, Article 6(1)(f) of the DSGVO serves as the legal basis for the processing.
4.3 Recipients or categories of recipients of the personal data or information
Within IFT GmbH, access to your data is granted only to those departments that need it to fulfill your requests and requirements. Service providers and agents we engage may also receive data for these purposes.
Your personal data will not be disclosed or otherwise transferred to third parties unless
- this is necessary for the purpose of fulfilling the contract. For example, when you order products, we may need to share your address and order details with our suppliers;
- this is necessary for billing purposes;
- You have previously given your consent.
4.4 Retention Period for Personal Data or Information
Your personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Data may also be retained if required by European or national legislation in EU regulations, laws, or other provisions to which we are subject. Data will also be blocked or deleted when a retention period prescribed by the aforementioned standards expires, unless further retention of the data is necessary for the conclusion or performance of a contract. Beyond the statutory obligations, you have the right at any time to access your data (Section 15 of the DSGVO) as well as to have it corrected or deleted (provided that statutory retention requirements do not preclude this). For such a request, please contact the person listed in Section 2 of this document.
5 Specific, detailed data processing
5.1 Hosting the Website and Creating Log Files
5.1.1 Description and Scope of Data Processing from Log Files
Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing device..
The following data is collected in this process:
- Information about the browser type and version being used
- Websites from which the user's system accesses our website
- Websites accessed by the user's system via our website
- The user's operating system / device
- The user's IP address
- Date and time of access
The data is also stored in our system's log files. This data is not stored together with any other personal data belonging to the user.
5.1.2 Legal Basis for the Processing of Log File Data
The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the DSGVO.
5.1.3 Purpose of Log File Data Processing
The system must temporarily store the IP address to enable the website to be delivered to the user's computer. To do this, the user's IP address must be stored for the duration of the session. The data is stored in log files to ensure the website functions properly. In addition, we use the data to optimize the website and to ensure the security of our IT systems. The data is not analyzed for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) of the DSGVO.
5.1.4 Duration of Log File Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected to provide the website, this occurs when the respective session ends. In the case of data stored in log files, this occurs after 360 days at the latest.
5.1.5 Right to Object to and Request the Deletion of Log Files
The collection of data for the purpose of providing the website and the storage of that data in log files is absolutely necessary for the operation of the website. Consequently, users have no option to object.
5.2 Use of Cookies
5.2.1 Description and Scope of Data Processing by Cookies
Our website uses cookies. Cookies are text files that are stored in or by the web browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a unique string of characters that allows the browser to be uniquely identified when the website is visited again. In particular, we use cookies to make our website more user-friendly. Some elements of our website require that the browser used to access the site can be identified even after changing pages.
The following data is stored and transmitted in the cookies:
The following is a list of the stored data. Examples may include:
- Language Settings
- Items in a shopping cart
- Log-In-Information
- Log-Out Information
- User Identification
We also use cookies on our website that allow us to analyze users' browsing behavior.
In this way, the following data can be transmitted:
The following is a sample list of the data collected
- search terms entered
- Häufigkeit von Seitenaufrufen
- Frequency of Page Views
- Browser Configuration Settings
When users visit our website, they are informed about the use of cookies for analytical purposes, and their consent is obtained for the processing of personal data used in this context. In this context, a reference is also made to this Privacy Policy.
5.2.2 Legal Basis for Data Processing via Cookies
The legal basis for processing personal data using technically necessary cookies is Article 6(1)(f) of the DSGVO. The legal basis for processing personal data using cookies for analytical purposes is Article 6(1)(a) of the DSGVO, provided the user has given their consent.
5.2.3 Purpose of Data Processing via Cookies
The purpose of using technically necessary cookies is to make it easier for users to use websites. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary for the browser to be recognized even after the user navigates to another page.
We need cookies for the following applications:
The following is a list of applications. Examples include:
- Applying the User's Default Settings
- Applying Language Settings
- Saving Search Terms
- Shopping Cart
The user data collected through technically necessary cookies is not used to create user profiles.
Analytics cookies are used to improve the quality of our website and its content. These cookies help us understand how the website is used, enabling us to continuously optimize our offerings or adapt them to user access patterns. These purposes also constitute our legitimate interest in processing personal data pursuant to Article 6(1)(f) of the DSGVO.
5.2.4 Duration of Storage, Right to Object, and Options for Deleting Cookies
Cookies are stored on the user's computer and transmitted from there to our website. As a user, you therefore have full control over the use of cookies. By changing the settings in your web browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, you may no longer be able to use all of the website's features to their full extent.
Flash cookies are not transmitted!
5.3 Use of Newsletters
5.3.1 Description and Scope of Data Processing for Newsletters
On our website, you can subscribe to a free newsletter. When you sign up for the newsletter, the data you enter in the form is transmitted to us.
- Email Address
- optional Name
- optional First Name
- optional Street
- optional House number
- optional ZIP Code
- optional Country
- optional Phone number
- optional Mobile number
- optional Date of Birth
In addition, the following information is collected during registration:
- IP address of the requesting computer
- Date and time of registration
Your consent to the processing of your data is obtained as part of the registration process, and reference is made to our (this) Privacy Policy. We collect your data for the purpose of sending you the informational materials you have requested. Data processing is based on your consent in accordance with Section 6(1a) of the DSGVO. Your data will not be disclosed to third parties. The data will be deleted as soon as it is no longer necessary for the purpose for which it was processed. You have the right to object at any time to the use of your data for the purpose of sending you informational materials.
5.3.2 Legal Basis for Data Processing in Connection with Newslettersn
The legal basis for processing data after a user subscribes to the newsletter is Section 6(1a) of the DSGVO, provided the user has given consent.
5.3.3 Purpose of Data Processing for Newsletters
The user's email address is collected for the purpose of delivering the newsletter. Other personal data collected during the registration process is used to prevent misuse of the services or the email address provided. It is also used to personalize the newsletter, if the user so desires. For example:
- Personalized salutation in the newsletter
- Personal birthday wishes
5.3.4 How Long Newsletters Are Stored
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user's email address will therefore be stored for as long as the newsletter subscription remains active. Other personal data collected during the registration process is generally deleted after a period of 730 days if no further business contact has taken place.
5.3.5 Options for Opting Out of and Unsubscribing from Newsletters
The user concerned may cancel their newsletter subscription at any time. For this purpose, each newsletter contains a link to unsubscribe. Furthermore, you may contact us at any time using the contact information provided in Article 2 of this statement to have your subscription canceled or terminated, thereby arranging for the deletion of your data.
5.4 Use of Contact Forms and Email Addresses (e.g., Job Applications)
5.4.1 Description and Scope of Data Processing for Contact Forms and Email Addresses
Our website features a contact form that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the form is transmitted to us and stored. This data includes:
- Email Address
- optional Name
- optional Firstname
- optional Street
- optional House number
- optional ZIP Code
- optional Country
- optional Phone number
- optional Mobile number
- optional Date of birth
- Your Message
In addition, the following data is stored at the time the message is sent:
- The user's IP address
- Date and time of registration
Your consent to the processing of your data is obtained as part of the submission process, and reference is made to this internal privacy policy. Alternatively, you may contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored. In this context, the data will not be disclosed to third parties. The data will be used exclusively for the purpose of handling the conversation.
5.4.2 Legal Basis for the Processing of Data from Contact Forms and Email Addressesn
The legal basis for processing the data, provided the user has given consent, is Section 6(1a) of the DSGVO. The legal basis for processing data transmitted when sending an email is Section 6(1)(f) of the DSGVO. If the purpose of the email contact is to enter into a contract, the additional legal basis for processing is Section 6(1)(b) of the DSGVO.
5.4.3 Purpose of Data Processing for Contact Forms and Email Addresses
We process the personal data entered in the form solely for the purpose of handling your inquiry. If you contact us via email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
5.4.4 Retention Period for Contact Forms and Email Addresses
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data entered in the contact form and data sent via email, this occurs when the respective conversation with the user has ended. The conversation is considered concluded when the circumstances indicate that the matter in question has been definitively resolved. Any additional personal data collected during the submission process will be deleted no later than 720 days after collection.
5.4.5 Option to Object to and Remove Contact Forms and Email Contact Addresses
You may revoke your consent to the processing of your personal data at any time. If you use the contact information provided in Article 2 of this document, you may object to the storage of your personal data at any time. In such a case, communication cannot continue.
5.5 Use of Third-Party Plugins and Tools
5.5.1 Google Web Fonts
This site uses so-called web fonts provided by Google to ensure consistent font display. When you visit a page, your browser loads the necessary web fonts into its cache to display text and fonts correctly. To do this, the browser you are using must connect to Google's servers. As a result, Google becomes aware that our website has been accessed via your IP address. We use Google Web Fonts to ensure a consistent and visually appealing presentation of our online content. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the DSGVO. If your browser does not support web fonts, a standard font from your computer will be used instead.
For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and in Google's Privacy Policy: https://www.google.com/policies/privacy/.
5.5.2 Cookiefirst
We use the "Cookiefirst" service on our website to manage cookie consent and ensure compliance with data protection regulations. The provider is Digital Data Solutions B.V. ("DDS"), Keizersgracht 62-64, 1015 CS Amsterdam, Netherlands. The data processed by Cookiefirst includes your IP address, browser information, device information, consent settings, date and time of consent, and visited URLs; cookies are also set in your browser. The purpose of data processing is to manage user consent for cookies and to record consent settings. We have entered into a data processing agreement with Cookiefirst in accordance with Article 28 of the DSGVO. For more information on Cookiefirst's privacy policy, please visit: https://cookiefirst.com/legal/privacy-policy/
5.5.3 BITE Applicant Manager
We use the "BITE Applicant Manager" service on our website to manage and process job applications. The provider is BITE GmbH ("BITE"), Magirus-Deutz-Straße 16, 89077 Ulm, Germany. The legal basis for using BITE is the performance of a contract to which you are a party, in accordance with Article 6(1)(b) of the DSGVO. The data processed by BITE Applicant Manager includes personal information from job applications, such as name, contact information, resume details, and communication history; the service may also set cookies to ensure functionality. The purpose of data processing is to manage and process job applications and applicant data as part of the application process. We use the BITE applicant tracking system to conduct application processes. Processing is carried out on the basis of a joint controller agreement (Article 26 of the DSGVO) within the Salvia Group. A data processing agreement with the system provider exists in accordance with Article 28 of the DSGVO. For more information on BITE's privacy policy, please visit: https://www.b-ite.de/legal-notice.html
6 Your Rights to Access, Erasure, and to Be Forgotten Under the DSGVO
You have the right of access under Article 15 of the DSGVO, the right to rectification under Article 16 of the DSGVO, the right to erasure under Article 17 of the DSGVO, the right to restriction of processing under Article 18 of the DSGVO, the right to data portability under Article 20 of the DSGVO, and the right to object under Article 21 of the DSGVO.
You may revoke your consent to the processing of personal data at any time. Please note that the revocation takes effect only for the future. Data processing that took place prior to the revocation is not affected. For inquiries and to exercise your rights, please contact the responsible party listed in Article 2 of this document.
7 Your rights to file a complaint or request information from the data protection authority under the DSGVO
If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you may also file a complaint with a supervisory authority.
You can contact the relevant authority at:
Postal Address:
Sächsischer Datenschutzbeauftragter
Bernhard-von-Lindenau-Platz 1
01067 Dresden
Germany
Email: saechsdsb@slt.sachsen.de
8 Are you required to provide personal data?
You must provide the personal data necessary to establish and maintain our business relationship and that we require to process the respective order. If you do not provide us with this data, we will generally have to refuse to enter into a contract or execute the order, or we will no longer be able to fulfill an existing contract and will therefore have to terminate it.
IFT GmbH
Ringstraße 26
01468 Moritzburg / OT Boxdorf