DATA PRIVACY STATEMENT OF THE EKATO Group

The EKATO Group is particularly concerned about the protection of your personal data. We therefore process your data exclusively on the basis of the legal provisions and in compliance with the relevant data protection regulations. In this privacy policy, we inform you about data processing within the framework of our website at: www.ekato.com/de and www.ekato.com

1. Data Controller
The responsible body within the meaning of the data protection laws is:
EKATO Holding GmbHrepresented by the management, Dr. Erich Kurt Todtenhaupt and Mr. Philipp TodtenhauptAt the Predigertor 179098 Freiburg
Tel.: +49 7622 29 0E-Mail: info@ekato.com

2. Data protection officer
You can reach the data protection officer of the EKATO Group as follows:
EKATO Holding GmbH z.Hd. the Data Protection OfficerAm Predigertor 179098 FreiburgE-Mail: datenschutz@ekato.comPhone: +49 351 2820 5175

3. Processing of data

3.1 General, deletion
Personal data is any data that makes you identifiable as an individual, such as name, address, e-mail addresses and online identifiers.
The personal data of our users is used in the following ways:
1. the execution of our services, 2. the provision of technical support, 3. tracking and marketing, to the extent that you have your consent (see below in detail).
We only transmit the personal data to third parties if this is done on the basis of your consent, the delivery of goods (delivery by postal service provider) or otherwise necessary to fulfil our contractual obligations towards you. This includes the exchange of data within the EKATO Group as well as with our sales representatives (see below in detail).
Personal data will be deleted as soon as it has fulfilled its purpose and there are no retention obligations to prevent it.

3.2 Informational use of our website
If you use the website for informational purposes only, i.e. if you do not use our contact form, we do not collect any personal data, with the exception of the data transmitted by your browser to enable you to visit the website. These are:
– IP address and, if applicable, company name– Date and time of the request– Time zone difference to Greenwich Mean Time (GMT)– Content of the request (specific page)– Access status/HTTP status code– Amount of data transmitted in each case– Website from which the request comes– Browser– Operating system and its interface– Language and version of the browser software.
This data is used to provide the content of our websites, to ensure the functionality of our information technology systems and to optimise our website. The data may be used anonymously for statistical purposes (see below) as well as for data security purposes, in particular to defend against attempted attacks on our web server (Art. 6 para. 1 lit. f GDPR). Access data will not be used for the creation of individual user profiles or passed on to third parties and will be deleted after 7 days at the latest.
Due to the nature of the Internet, this data is necessarily processed on a large number of servers until your request arrives on our web server; therefore, collection and use is also possible in « third countries » (e.g. the USA). Our company has no influence whatsoever on this process. Apart from these technical constraints, the provider of this website does not transmit any personal data to countries outside the scope of the EU General Data Protection Regulation or without an adequate level of data protection.
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you will usually have to provide additional personal data that we use to provide the respective service. If additional voluntary information is possible, it will be marked accordingly.

3.3 Cookies
Our website uses so-called « cookies » to improve our presentation on the Internet. A cookie is a standardized text file that is stored by your browser for a set amount of time. Cookies generally have different functions. Many cookies are technically necessary, as certain website functions would not work without them. Furthermore, cookies enable us to statistically record and analyze the general usage behavior when visiting our website.
Cookies that are necessary to carry out the electronic communication process, to provide certain functions desired by you or to optimise the website (technically necessary cookies) are stored on the basis of Art. 6 (1) (f) GDPR, unless another legal basis is specified. We only use optional cookies and technologies for marketing and analysis purposes if you have given your consent for data processing in accordance with Art. 6 (1) (a) GDPR, for data transfer to third countries in accordance with Art. 49 (1) (a) GDPR and for the storage of information or access to existing information on your device in accordance with Section 25 (1) TDDDG via our cookie banner.
If the use of cookies is absolutely necessary, the storage of information or access to already existing information in your terminal equipment is based on the legal basis of § 25 para. 1 TDDDG.

3.4 Borlabs Cookies Consent
Our website uses the consent technology of Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and to document them in compliance with data protection regulations. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (hereinafter referred to as Borlabs).
When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the withdrawal of these consents are stored. This data will not be passed on to the provider of Borlabs Cookie. The collected data will be stored until you ask us to delete it or delete the Borlabs cookie yourself or the purpose for which the data is stored no longer applies. Mandatory statutory retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found under https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/. The use of the Borlabs cookie consent technology is to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c) GDPR.

3.5 Contact Form
If you contact us via the form on the website or by e-mail, your e-mail address, your name and other information (company, telephone number, your text) that you voluntarily provide will be stored by us in order to answer your questions. The subsequent communication with you will take place via unencrypted e-mail. We will delete the data generated in this context after processing your requests, unless there is a need for longer storage. If there are statutory retention periods, the data will be blocked for other purposes.
Data processing is carried out on the basis of the legal provisions of Art. 6 (1) (a) GDPR (consent). The processing of the data is lawful as long as you have given your consent to the processing. You can revoke your consent at any time for the future.

3.6 Seminar Registration
You can register for seminars on our website. For this purpose, we collect your name, email address, telephone number, city and country as well as other voluntary information. The legal basis for this is Art. 6 (1) (b) GDPR. Your data will be stored and used after the seminars have been held for the purpose of sending further topic-related information. The legal basis for this is our legitimate interest (Art. 6 para. 1 lit. f GDPR). You can object to this storage and use at any time.
If you agree, EKATO may forward your name, company and e-mail to other seminar participants in order to facilitate an exchange of information or ideas. Our confirmation email and further communication will be sent by unencrypted email. If you do not wish this, you can provide us with a secure means of communication.

4. Analytics Services
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (« Google »), for marketing purposes and to optimise our offers, if you agree. The legal basis for data processing in these cases is § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future. You can change your cookie settings at any time. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. Google Analytics uses so-called « cookies », text files that are stored on your computer and enable an analysis of your use of the website. The data mentioned in section 3.4 will be used for this purpose. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet use to the website operator.
We would like to point out that Google Analytics has been extended on this website by the code « anonymizeIp(); » in order to ensure an anonymized collection of IP addresses (so-called IP masking).
The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.
If you have not consented to the use of Google cookies, your data will not be collected as part of Google Analytics. In addition to the above-mentioned option of revoking your consent or adjusting the selection of cookies, you also have the following other options to prevent web analysis by Google:
• You can change your settings for advertising on Google
• You can set your browser to block cookies from Google Analytics.
• You can install the deactivation plug-in provided by Google at the following link in your Firefox, Internet Explorer or Chrome browsers (this variant does not work on mobile devices).
You can find more information on the handling of user data by Google Analytics in Google’s privacy policy.

5. Use of social media plug-ins
5.1 Connection of Facebook
We are currently also providing access from Facebook via a so-called social bookmark. To ensure that you have full data control, Facebook is only integrated as a link. After clicking on the embedded graphic, you will be redirected to the Facebook page and only then will user data be transferred to Facebook.
Further information on the purpose and scope of data collection and its processing by Facebook can be found in their privacy policy:
Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Irland; https://www.facebook.com/privacy/explanation.

5.2 Facebook-Fanpage
We also have a Facebook fan page for our website. The service provider is the American company Meta Platforms Inc. The company Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) is responsible for the European region.
This enables us to receive statistics from Facebook on the use of our fan page by Facebook/fan page users, e.g. information about interactions, comments or likes as well as summarized information and statistics (e.g. on the age or origin of the users and our followers). We have no influence on data that is processed by Facebook under its own responsibility in accordance with Facebook’s terms of use. However, we would like to point out that when you visit the fan page, data from your usage behaviour will be transferred from Facebook and the fan page to Facebook. Facebook itself processes the aforementioned information in order to compile more detailed statistics and for its own market research and advertising purposes, over which we have no influence. For more information, please refer to Facebook’s data policy at: https://de-de.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0. For more information on each of their responsibilities, please see the Facebook Page Insights Addendum at: https://de-de.facebook.com/help/pages/insights.
The legal basis for this data processing is Art. 6 para. 1 lit. a), Art. 6 para. 1 lit. b) GDPR (inter alia in accordance with Art. 26 GDPR) and 6 para. 1 lit. f) GDPR based on our aforementioned legitimate interest. If you have given us consent for optional cookies, the legal basis for storing information or accessing information already available on your device is § 25 para. 1 TDDDG. If the use of cookies is absolutely necessary, the storage of information or access to already existing information in your terminal equipment is carried out on the legal basis of § 25 para. 1 TDDDG.

5.3 Facebook-Pixel
On our website, we use Facebook Pixel (Meta Pixel) for the purpose of measuring the effectiveness of our advertising campaigns (conversion measurement). For this purpose, it is compared from which page you switch to our website. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The legal basis for this processing is your consent in accordance with Section 25 (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. You can revoke your consent at any time.
Facebook compares your user data (customer data such as IP address, user ID) with the data of your Facebook account. This collected data is provided to us anonymously and made usable for the above-mentioned purpose. It is not possible for us to draw conclusions about the identity of the users.
Facebook stores and processes the data so that a connection to the respective user profile is possible and can thus be used by Facebook for its own advertising purposes. Furthermore, a transfer of your personal data to the USA cannot be ruled out. There is no adequate level of data protection there. This use of the data cannot be influenced by us as the site operator. The legal basis for data transfer to third countries is Art. 49 (1) (a) GDPR.
The use of this service is based on the legal basis of your consent in accordance with Section 25 (1) TDDDG and Article 6 (1) (a) GDPR.
Facebook also bases data transfer to the USA on standard contractual clauses of the EU Commission: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381
You can opt out of Facebook’s behavioral advertising in the Ads Settings section of https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.
Facebook’s privacy policy can be found here: https://de-de.facebook.com/privacy/policy/

5.4 Connection from YouTube
On the one hand, we have integrated the link to YouTube videos into our online offering. YouTube is a Google company. After clicking on the graphic, you will be redirected to YouTube and only then will user information be transferred to YouTube.
Furthermore, we have occasionally directly integrated videos that are stored on www.YouTube.com and can be played directly from our website. These are all integrated into the « extended data protection mode », i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you click on and play the videos will the videos listed in No. 3.2 to YouTube. We have no influence on this data transfer.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data referred to in section 3.2 of this declaration will be transmitted. This is done regardless of whether YouTube provides a user account that you are logged in with or whether you do not have a user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses it for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this.
The legal basis for this data processing is Art. 6 para. 1 lit. a), Art. 6 para. 1 lit. b) GDPR (inter alia in accordance with Art. 26 GDPR) and 6 para. 1 lit. f) GDPR based on our aforementioned legitimate interest. At the same time, this consent also sets an optional cookie. The legal basis for this storage of information or access to existing information on your device is § 25 para. 1 TDDDG.
Further information on the purpose and scope of the data collection and its processing can be found at: https://policies.google.com/privacy.

6. Other Social Media Plug-ins
6.1 Connection of LinkedIn
We currently provide the access from LinkedIn via a so-called social bookmark. To ensure that full data control lies with you, LinkedIn is only integrated as a link. After clicking on the embedded graphic, you will be redirected to the LinkedIn page and only then will user data be transferred to LinkedIn.
The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the collected personal data of website visitors on its servers in the USA and use it as part of its own advertising measures. Further information on the purpose and scope of data collection and its processing by LinkedIn can be found here. LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy.

6.2 LinkedIn Insight Tag
We use LinkedIn’s Insight Tag and Conversation Tracking. This is offered by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter referred to as « LinkedIn »). The LinkedIn Insight tag is a JavaScript code snippet that we’ve added to our website.
The LinkedIn Insight tag allows the collection of data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics, timestamps, and page views. This data is encrypted and anonymized within seven days. The anonymized data will in turn be deleted by LinkedIN within 180 days. LinkedIn does not share any personal data with us, but only provides aggregated reports on website audience and ad performance. By means of conversion tracking, you can also be recognized as a website visitor (across devices), so that we can use you to display targeted advertising for our job advertisements that may be of interest to you outside of our website on LinkedIn (retargeting).
If you have consented to the processing of the above-mentioned data, the legal basis is § 25 para. 1 TDDDG and Art. 6 para. 1 lit. a) GDPR. Otherwise, the legal basis is Art. 6 para. 1 lit. f) GDPR, our legitimate interest lies in the optimization of our marketing measures. In addition, LinkedIn also processes your data in the USA, i.e. a third country. The so-called third countries are countries whose level of data protection does not correspond to that of the European Union. In order to nevertheless ensure an adequate level of data protection for any data transfers to the USA, the transfer of your data from LinkedIn is based on standard contractual clauses of the EU Commission in accordance with Art. 46 (2c) GDPR. You can find the EU Commission’s decision on the corresponding standard contractual clauses here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
For more information on LinkedIn’s standard contractual clauses, see https://de.linkedin.com/legal/l/dpa or https://www.linkedin.com/legal/l/eu-sccs.
As a LinkedIN member, you can object to data processing at any time and https://www.linkedin.com/mypreferences/d/settings/ads-interactions-with-business deactivate the use of your personal data for advertising purposes. To opt-out of LinkedIN’s insight tag on our website, click
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Further details on data collection (purpose, scope, further processing, use) as well as on your rights and setting options can be found directly in LinkedIn’s privacy policy under https://www.linkedin.com/legal/privacy-policy.

7. Use of SalesViewer® technology
On this website, data is collected and stored for marketing, market research and optimisation purposes using the SalesViewer® technology of SalesViewer® GmbH on the basis of the legitimate interests of the website operator (Art. 6 para. 1 lit. f GDPR).
For this purpose, a JavaScript-based code is used, which is used to collect company-related data and the corresponding use. The data collected with this technology is encrypted via a non-recalculable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to personally identify the visitor to this website.
You can revoke your consent at any time with effect for the future. You can change your cookie settings at any time. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
The collection and storage of data can be objected to at any time with effect for the future by clicking on this link https://www.salesviewer.com/opt-out order to prevent the collection by SalesViewer® within this website in the future. An opt-out cookie for this website is placed on your device. If you delete your cookies in this browser, you will have to click this link again.

8. Order via Amazon, Amazon Shop
You have the opportunity to order our products, especially our manual, on our website. By clicking on the « Order via Amazon » button, you will be redirected directly to Amazon Marketplace, Amazon Cervices Europe S.a.r.l, 38 abenue John F. Kennedy, L-1855 Luxembourg and data will be transmitted to Amazon.
If you order goods from EKATO via Amazon or ask us questions via Amazon, we receive your personal data (name, delivery address) from Amazon, which is necessary for order processing.
Amazon sets cookies and processes your data for its own purposes. EKATO has no influence on this. Information about privacy on Amazon can be found here: https://www.amazon.de/gp/help/customer/display.html?ie=UTF8&nodeId=201909010&ref_=footer_privacy.

9. Online advertising (Google Adwords)
We use the offer of Google Adwords to draw attention to our attractive offers with the help of advertising materials (so-called Google Adwords) on external websites, if you agree to this. We can determine how successful each advertising measure is in relation to the data from the advertising campaigns. We are pursuing the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
These advertising materials are delivered by Google via so-called « ad servers ». For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie in your computer. These cookies usually expire after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wants to be addressed) are usually stored as analysis values.
These cookies allow Google to recognise your internet browser. If a user visits certain pages of an Adwords customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user has clicked on the ad and has been redirected to that page. Each AdWords customer is assigned a different cookie. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords, Google receives the information that you have accessed the relevant part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will learn and store your IP address.
The legal basis for data processing is your consent in accordance with § 25 para. 1 TDDDG and Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future. You can change your cookie settings at any time. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/ .
You can also prevent participation in this tracking process in other ways: a) by setting your browser software accordingly, in particular the suppression of third-party cookies will result in you not receiving third-party ads; b) by disabling cookies for tracking, by setting your browser to block cookies from the domain « www.googleadservices.com », www.google.de/settings/ads, which setting will be deleted when you delete your cookies; c) by disabling the interest-based ads of the providers that are part of the self-regulatory campaign « About Ads » via the link http://www.aboutads.info/choices, where this setting will be deleted when you delete your cookies; d) by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin . We would like to point out that in this case you may not be able to use all the functions of this offer to their full extent.
You can find more information about data protection at Google here: http://www.google.com/intl/de/policies/privacy and
https://services.google.com/sitestats/de.html.

10. Data transfer within the EKATO Group, data transfer to commercial agents
We transmit your data within the companies of the EKATO Group (current list can be found <here>) for reasons of central internal administrative purposes, such as central customer and website support and seminar planning. In particular, your names and contact details will be transmitted for this purpose. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. This does not involve a change of purpose. We use technical and organisational measures to ensure the security of processing during data transmission. Your data will be deleted as soon as they are no longer required for the stated purposes and legal retention obligations do not preclude this. »
We may also transmit your data to our contractual partners / commercial agents abroad in order to be able to process country-specific services. The legal basis for this is Art. 6 (1) (b) GDPR, if necessary in conjunction with standard contractual clauses, insofar as the transfer takes place in third countries without an adequate level of data protection.

11. Data processing in the application process
The EKATO Group takes data protection very seriously.
For our applicant management, we use our processor, SAP SE.
Collection of master data (application form) and login
An encrypted connection takes you directly to their server in Germany when you enter your data.
By filling out and submitting the application form, you create an applicant data record that is valid for the entire application process. You can create an account with a password of your choice in order to receive information during the application process. Your e-mail address will only be used for this purpose in exceptional cases, for example to make appointments.
The data required for this is recorded via the application form and is marked with * as mandatory fields. In addition to the required applicant data (marked as mandatory fields), you have the option of voluntarily providing further information (including the data specified in the attachments).
In order to continue the application process, you must declare that you have taken note of it by activating the checkbox « I have taken note of the privacy policy and agree to the data processing ». This declaration is stored by us. The legal basis for this storage is a legitimate interest, Art. 6 para. 1 lit. f), Art. 7 para. 1 GDPR. The legitimate interest is based on the obligation to provide proof of your consent.
If you do not agree to the above conditions, your application will not be stored or processed.
Upload of documents and further application process
In addition to the inclusion of the general profile, we will ask you specific questions regarding the specific position you are applying for as part of the application process.
If you provide us with your application documents (CV) and personal data (name, address, e-mail), you consent to the collection and storage of the data in our IT systems as part of the application process. Further processing serves to establish an employment relationship. The legal basis for data processing is Art. 6 para. 1 lit. a) (collection, storage in systems) and lit. b) (processing in the context of the application process) and Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 and 3 BDSG.
Alternatively, you can send your application by post to the above addresses. Please note that written applications will be digitally recorded upon receipt and returned to you.
Insofar as special categories of personal data are processed in accordance with Art. 9 (1) GDPR, this serves to fulfil legal obligations under labour law, civil service law, social security law and social protection (e.g. recording of severe disability or equal treatment on the basis of SGB IX) as part of the recruitment process. This is done on the basis of Art. 9 para. 2 lit. b) GDPR, § 26 para. 3 BDSG. In addition, the processing of health data may be necessary for the assessment of your ability to work in accordance with Art. 9 para. 2 lit. h), § 22 para. 1 lit. b) BDSG.
If you give us your consent for the processing of your personal data (within the meaning of Art. 6 para. 1 lit. a GDPR), you can revoke your consent at any time with effect for the future. All you need to do is send an e-mail to personal@ekato.com, personal-systems@ekato.com, personal-fluid@ekato.
Rights of data subjects
In accordance with the GDPR and the BDSG, you are entitled to information, correction, deletion, restriction of processing and data transfer. If you want to assert your rights, you can contact our HR department directly.
Deletion of data
Your personal data will be anonymised (application form) and deleted 6 months after completion of the application process, provided that this does not conflict with statutory retention periods or – in the event of employment – is transferred to EKATO’s personnel administration. The legal basis for this is Art. 6 para. 1 lit. b) GDPR.
Applicant pool
The retention of your application in the applicant pool or the forwarding of your application documents within the companies of the EKATO Group requires your separate consent, which is requested and can be submitted when using our applicant tool. The legal basis for consent to the storage of your data in the applicant pool for up to 12 months is Art. 6 (1) (a) GDPR.
The selection is voluntary and has no effect on the applicant’s chances in the application process. The legal basis for the processing is Art. 88 para. 1 GDPR in conjunction with § 26 para. 2 BDSG. The consent applies to renewed contact if suitable for further job advertisements.
You can revoke your consent to be included in the applicant pool at any time without giving reasons with effect for the future; in this case, the data will be deleted immediately after completion of the application process. Please use the contact e-mail addresses mentioned above. Your data will be deleted from the applicant pool if the purpose for storing the data no longer exists.

12. Rights of data subjects
You have the right to: request information on the categories of data processed, purposes of processing, any recipients of the data, the planned storage period (Art. 15 GDPR); b) to request the correction or completion of incorrect or incomplete data (Art. 16 GDPR); c) revoke any consent given at any time with effect for the future (Art. 7 para. 3 GDPR); d) object to data processing that is to be carried out on the basis of a legitimate interest for reasons arising from your particular situation (Art. 21 para. 1 GDPR); e) in certain cases within the framework of Art. 17 GDPR, to request the deletion of data – in particular if the data is no longer necessary for the intended purpose or is unlawfully processed, or you have withdrawn your consent in accordance with above (c) or have declared an objection in accordance with above (d); f) under certain conditions, to demand the restriction of data if deletion is not possible or the obligation to delete is disputed (Art. 18 GDPR); g) data portability, i.e. You can receive your data that you have provided to us in a common machine-readable format such as z.B. CSV and, if necessary, transmit it to others (Art. 20 GDPR);
h) to complain to the competent supervisory authority about the data processing, i.e. in particular to the State Commissioner for Data Protection Baden-Württemberg (https://www.baden-wuerttemberg.datenschutz.de/).
If you have given your consent to the use of data, you can revoke it at any time with effect for the future.
All requests for information, deletion and correction, requests for information, requests for data portability, objections to data processing, etc. should be sent by e-mail to datenschutz@ekato.com.

13. Data Security
We maintain up-to-date technical and organizational measures to ensure the security of processing, in particular to protect your personal data from dangers during data transmission and from knowledge by third parties. These are adapted to the current state of the art, the need for protection of personal data and the risks to your rights and freedoms.

14. USA-Specific Provisions, DO NOT SELL
Insofar as EKATO is subject to American data protection requirements, the following is also explained:
We do not sell personal information to third parties. With your consent, we may provide Your data will be made available to third parties for marketing purposes if you have consented to this (see section 7). You can revoke your consent at any time with effect for the future; Change your preferences via cookie settings. For further inquiries, please contact our Data Protection Officer (datenschutz@ekato.com).

15. Changes to the Privacy Policy
We reserve the right to change the privacy policy in order to adapt it to changes in the legal situation or in the event of changes to our offers.

Status: June 2024