1. Name and address of the controller and the company data protection officer

This data protection information applies to data processing by
EVISCO AG (hereinafter EVISCO)
Cuvilliésstraße 14a
81679 Munich
Germany
Tel.: +49 (0)89 45 15 16-10
E-Mail: info@evisco.com

EVISCO’s company data protection officer can be contacted at the above address or at datenschutz@evisco.com.

2. Collection of general data and information

When you visit our website www.evisco.com, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the file accessed,
• Website from which access is made (referrer URL),
• Browser used and, if applicable, the operating system of your computer and the name of your access provider.

We process the aforementioned data for the following purposes:

• Ensuring a smooth connection to the website,
• Ensuring convenient use of our website,
• Evaluating system security and stability, and
• For other administrative purposes.

This anonymously collected data and information is therefore evaluated by EVISCO AG for statistical purposes and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data in the server log files is stored separately from all personal data provided by a data subject.
The legal basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

3. Contact option via the website

If you have any questions, we offer you the option of contacting us using a form provided on the website. A valid email address is required so that we know who the enquiry comes from and can respond to it. Further details can be provided voluntarily.
If you contact the controller by e-mail or via a contact form, your personal data will be stored automatically. Such personal data provided on a voluntary basis will be stored for the purpose of processing or contacting you. This personal data will not be passed on to third parties. Once your enquiry has been dealt with, the data will be deleted automatically.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) (a) GDPR on the basis of your voluntary consent.

4. Applications

We collect and process the personal data of applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by email. If an employment contract is concluded with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests of the controller prevent deletion. Other legitimate interests in this sense include, for example, the obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG).
Data processing for the purpose of applying for a job with us is carried out in accordance with Art. 6 (1) (a) GDPR on the basis of your voluntary consent.
.

5. Disclosure of data

Your personal data will not be disclosed to third parties for purposes other than those listed below.
We will only disclose your personal data to third parties if:

• you have given your express consent in accordance with Art. 6(1)(a) GDPR,
• this is legally permissible and necessary for the performance of contractual relationships with you in accordance with Art. 6 (1) (b) GDPR.
• there is a legal obligation to disclose the data in accordance with Art. 6 (1) (c) GDPR,
• the transfer is necessary for the establishment, exercise or defence of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,

6. Use of cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware.

Information relating to the specific device used is stored in the cookie. However, this does not mean that we immediately become aware of your identity.

The use of cookies serves, on the one hand, to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognise that you have already visited individual pages on our website. These are automatically deleted after you leave our website.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your terminal device for a specific period of time. If you visit our site again to use our services, it will automatically recognise that you have already been with us and what entries and settings you have made so that you do not have to enter them again.

The data processed by cookies is necessary for the purposes mentioned above in order to safeguard our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website..

7. Integration of Google Maps

We use the ‘Google Maps’ function provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (‘Google’) to display geographical information. In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. We have no influence on this data transfer. Google Maps is used in the interest of an appealing presentation of our online offers and to make it easy to find the locations we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Further information on how Google Maps uses your data and Google’s privacy policy can be found at: https://www.google.com/intl/de_de/help/terms_maps.html

8. Integration of Google reCAPTCHA

To protect input forms on our website, we use the ‘reCAPTCHA’ service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as ‘Google’. This service makes it possible to distinguish whether the input is of human origin or whether it is being misused by automated machine processing.

To the best of our knowledge, the referrer URL, IP address, behaviour of website visitors, information about the operating system, browser and length of stay, cookies, display instructions and scripts, the user’s input behaviour and mouse movements in the reCAPTCHA checkbox area are transmitted to ‘Google’.

Google uses the information obtained in this way to digitise books and other printed materials and to optimise services such as Google Street View and Google Maps (e.g. house number and street name recognition).

The IP address transmitted as part of reCAPTCHA is not merged with other Google data unless you are logged into your Google account when using the reCAPTCHA plug-in. If you wish to prevent Google from transferring and storing data about you and your behaviour on our website, you must log out of Google before visiting our site or using the reCAPTCHA plug-in.

The data processed by reCAPTCHA is necessary for the purposes mentioned above in order to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) (f) GDPR.

The use of the information obtained through the reCAPTCHA service is in accordance with Google’s Terms of Use: Further information on Google’s Terms of Use and Privacy Policy can be found at www.google.com/intl/de/policies/privacy

9. Use of Google Web Fonts

Our website uses web fonts provided by Google to ensure uniform font display. To display text and fonts correctly, your browser loads the required web fonts into your browser cache when you visit a page.

For this purpose, the browser you are using must establish a connection to the Google servers. This allows Google to know that our website has been accessed via your IP address. Web fonts are used in the interest of a uniform presentation of our online presence. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google Web Fonts can be found at: https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

10. SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries sent to us as the site operator via the contact form. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

11. Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Inc. (‘Google’). Google Analytics uses ‘cookies’, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.

Google has committed itself to complying with European data protection law within the framework of the Privacy Shield Framework: Privacy-Shield-Frameworks

Google uses this information on our behalf to evaluate the use of the website by visitors, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. Pseudonymous usage profiles of visitors can be created from the processed data.

Our website only uses Google Analytics with IP anonymisation enabled. Your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there.

The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. You can prevent the storage of cookies by adjusting your browser software settings accordingly. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: Link to Plugin

12. Rights of data subjects

You have the right:

pursuant to Art. 15 GDPR to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it was not collected by us, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details;

to request the immediate rectification of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR; to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;

to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, unless the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, but you need it to assert, exercise or defend legal claims, or you have lodged an objection to the processing in accordance with Art. 21 GDPR;

to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller in accordance with Art. 20 GDPR;

to withdraw your consent at any time in accordance with Art. 7(3) GDPR.

As a result, we will no longer be permitted to continue processing data based on this consent in the future and

to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our law firm’s registered office for this purpose..

13. Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without you having to specify a particular situation.

If you wish to exercise your right of revocation or objection, simply send an email to datenschutz@evisco.com.

14. Data security

When you visit our website, we use the widely used SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments..

15. Routine deletion and blocking of personal data

We process and store personal data only for the period necessary to achieve the purpose of storage or as required by law. If the purpose of storage no longer applies or a statutory storage period expires, the personal data is routinely blocked or deleted in accordance with the statutory provisions.

16. Current status and changes to this privacy policy

This privacy policy is currently valid and was last updated in May 2018.

Due to the further development of our website and the offers made on it, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version of the privacy policy is the valid one.