EMAG GmbH & Co. KG, Austraße 24, D - 73084 Salach, Germany (telephone: +49 / 7162 / 17-0 | fax: +49 / 7162 / 17-197 |email: firstname.lastname@example.org (“we” or “us’), as operator of the website www.emag.com, is the controller responsible for processing the personal data of users (“you”) of the website within the meaning of Article 4 of the General Data Protection Regulation (“GDPR”).
1. Collection of personal data
1.1 Personal data means any data that relates to you personally, i.e., data that can be used to identify you. Personal data includes in particular your name, email address, address, and telephone number.
1.2 Personal or personally identifiable data may also include information about how you use our website. As with all websites, our server automatically and temporarily stores information transmitted by your browser in the server log files unless you disable this feature. If you wish to view our website, we will collect the following data. We require this data for technical reasons in order to show you our website and to ensure stability and security (legal basis Article 6(1)(f) GDPR):
- IP address of the requesting computer
- file requested by the client
- http response code
- website you came to our website from (the referrer URL)
- time of the server request
- browser type and version
- operating system used by the requesting computer
No personalized analysis of server log files is carried out. At no time is the provider able to associate this data with any specific person. The data is not combined with data from other sources.
2. Purpose of use
We use your personal data for the following purposes:
2.1 To provide the services you want to use (receipt and processing of inquiries submitted online or messages sent via the contact form, receipt and processing of document attachments, receipt and processing of questions, messages and offers, including by telephone/email, or for the purpose of initiating business relations), for the purposes of which you voluntarily provide us your data. The legal basis for this is Article 6(1)(b) GDPR;
2.2 To ensure that our website is presented to you as effectively and interestingly as possible (e.g., storage of display preferences, own market research and opinion polling). Insofar as we obtain consent, the legal basis is Article 6(1)(a) GDPR (e.g., for tracking, see point 3.7). Other than that, the legal basis for this is Article 6(1)(f) GDPR;
2.3 To comply with our obligations under any contracts between you and us. The legal basis for this is Article 6(1)(b) GDPR;
2.4 To enable you to take advantage of interactive features if you wish. The legal basis for this is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR;
2.5 To inform you of changes to our services. The legal basis for this is Article 6(1)(f) GDPR.
3. Information about your computer, cookies, and targeting
3.1 We collect the information specified in point 1.2. each time our website is accessed.
3.2 We may also use browser cookies to collect information about how you use our website. Browser cookies are small text files that are stored on your device and contain specific settings and information about your browser to share with our system. A cookie normally contains the name of the domain that sent the cookie, information about the age of the cookie, and an alphanumeric identifier. Cookies enable our systems to recognize the user’s device and respond to any default settings immediately. A cookie is placed on the hard drive of the user’s computer as soon as the user accesses the platform. Cookies help us to improve our website and offer you a better service more effectively tailored to your requirements. The legal basis for cookies required to use our website is Article 6(1)(f) GDPR. The legal basis for cookies stored by partner companies (see point 3.5) as well as for tracking cookies (see point 3.4) is your consent, Article 6(1)(a) GDPR. They enable us to recognize your computer on return visits to our website and therefore:
- to store information about how you use our website and tailor the website to your personal interests. This includes advertising tailored to your personal interests;
- to respond more quickly to your inquiries;
3.3 The cookies we use contain only the data concerning your website use as described above. This is done not by linking the data to you personally, but by allocating an identification number to the cookie (the “cookie ID”). The cookie ID is not combined with your name, IP address or similar data that would allow the cookie to be linked to you personally. Information on how you can disable the use of browser cookies is given in point 3.6.
3.8 Google Tag Manager
We use Google Tag Manager, an advertising platform provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Tag Manager makes it possible to manage website tags via a single interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has taken place at the domain or cookie level, it will remain effective for all tracking tags implemented with Google Tag Manager.
3.9 Google Maps
This website uses content from Google Maps, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This enables us to display interactive maps directly on the website and allows you to easily use the map feature. The legal basis for the use of Google Maps is your consent, Article 6(1)(a) GDPR. Before you grant us your consent, no data is transmitted to third parties. More information on granting and withdrawing your consent is given in point 3.5.
When you visit our website, Google is informed that you have opened the corresponding page of our website. The data specified in point 1.2 of this Policy is also transmitted to Google. This occurs regardless of whether you or not you have a Google account and are logged into it. If you are logged into Google, your data will be linked with your account. If you do not want this data to be linked with your Google profile, you must log out before clicking the button. Google will store your data in a user profile, which it will use for the purpose of advertising, market research, or tailoring its website. This analysis, which is carried out even for users who are not logged in, is used primarily to display tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact Google to exercise this right.
3.11 Social networks
Our website contains links to the social networks Facebook, Twitter, YouTube, Pinterest, and LinkedIn. Unlike in the case of social media plugins (e.g., the Facebook “Like” button), personal connection data is only generated when you access the social network in question using the link.
3.12 LinkedIn Insight Tag
We use the LinkedIn Insight Tag, a tracking technology on the LinkedIn platform, provided by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2 (Ireland). This technology employed by LinkedIn can be used to show you more relevant advertising based on your interests. LinkedIn also provides us with aggregated, anonymous reports about ad performance and information about how you interact with our website. The legal basis is your consent, Article 6(1)(a) GDPR.
You can disable the LinkedIn Insight Tag and opt out of interest-based advertising in the cookie banner. More information on granting and withdrawing your consent is given in point 3.5.
To play our videos we use the video service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“YouTube“). The legal basis is your consent, Article 6(1)(a) GDPR. Before you grant us your consent, no data is transmitted to third parties. More information on granting and withdrawing your consent is given in point 3.5.
Embedded YouTube videos can also be hidden by browser add-ons so that YouTube does not collect data. If you are logged into Google, your data will be linked with your account. If you do not want this data to be linked with your YouTube profile, you must log out before clicking the button. YouTube will store your data in a user profile, which it will use for the purpose of advertising, market research, or tailoring its website. This analysis, which is carried out even for users who are not logged in, is used primarily to display tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact YouTube to exercise this right.
On our website we use the services of the provider Issuu (Issuu Inc.131 Lytton Ave, Palo Alto, CA 94301, United States). The legal basis is your consent, Article 6(1)(a) GDPR. Before you grant us your consent, no data is transmitted to third parties. More information on granting and withdrawing your consent is given in point 3.5.
Issuu allows us to display catalogs and magazines and makes it easier for you to view them. These magazines and catalogs are stored on Issuu’s website and integrated into our website. When you access a page of our website with an integrated catalog, your browser connects to the Issuu server. In the process, Issuu collects various categories of data. We have no influence on the scope of the data that Issuu collects in this way. To our current knowledge, it is generally the following data:
- visited page on our website that contains the embedded catalog/magazine,
- the data generally transmitted by your browser (IP address, browser type and version, operating system, time).
The data collected by Issuu is transmitted to its server in the USA.
4. Collection and processing of data provided on a voluntary basis
4.1 Recruitment portal
You can submit speculative job applications or apply for specific jobs via our careers page. We provide a recruitment portal which you can use to do this. Your data (last name, first name, home address, CV, professional history, references, qualification documents, information relating to any disability, letter) will be processed for the purposes of recruitment for the position for which you have applied (Article 6(1)(b) GDPR, section 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG)) or, within the limits of the consent you have granted to us, for other positions (Article 6(1)(a) GDPR). You can withdraw your consent to processing of your application data at any time. No automated preliminary decision making regarding your application is carried out.
4.1.2 Involvement of third-party providers in the application process
To simplify the application process, we provide the following options for entering data supported by third parties:
- CV parsing,
- using your LinkedIn profile,
- using your XING profile, or
- upload from your Dropbox.
You are not required to use these options to apply for a job with us and can fill out the form manually. If you do this no data will be processed by third parties.
CV parsing is a functionality that automatically extracts information relevant for your application from a CV you have uploaded and inserts it into the entry fields in the application form. To use CV parsing, click the “Upload CV / Resume” button and follow the instructions shown. We provide this service using an applicant tool provided by d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg, Germany (“d.vinci”). To provide this tool and the CV parsing function in particular, d.vinci uses a product by Textkernel BV, Nieuwendammerkade 28/a17, 1022 AB, Amsterdam, Netherlands. We have entered into a data processing agreement (Article 28 GDPR) with d.vinci. d.vinci is bound by our instructions and will not use your data for its own purposes. Textkernel BV is a subprocessor of d.vinci and is bound in relation to processing of your data by d.vinci’s instructions, and therefore indirectly by our instructions, under a processing agreement in accordance with Article 28 GDPR.
To send data from your LinkedIn profile, click the “Use LinkedIn Profile” button when completing your application and follow the instructions shown. If you have a LinkedIn profile, LinkedIn will send us the data they hold at your request. LinkedIn collects and processes data itself, and if you use this option may link that data to your existing profile. The basis for transmission of data to LinkedIn is Article 6(1)(f) GDPR. We have a legitimate interest in simplifying our application process by incorporating widely used services to make us more attractive to applicants. LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. You will find information about privacy at LinkedIn at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
To send data from your XING profile, click the “Use XING Profile” button when completing your application and follow the instructions shown. If you have a XING profile, XING will send us any data requested by the application form that you have entered into XING. The application form will then be populated with your data, and you can change or add to it as you wish. XING will also collect and process data itself, and if you use this option it may link that data to your existing account. The basis for transmission of data to XING is Article 6(1)(f) GDPR. We have a legitimate interest in making our application process attractive and easy to use. XING is a widely used career and business network and we include it in order to appeal to as many applicants as possible and to remove obstacles to submitting an application. XING is provided by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. You will find information about how XING SE processes data at https://privacy.xing.com/en.
To send us a CV that you have uploaded to Dropbox, click the “CV via Dropbox” button when completing your application and follow the instructions shown. At your request, Dropbox will then send us the CV you have uploaded. Dropbox collects and processes data itself, and if you use this option may link that data to your Dropbox account. The basis for transmission of data to Dropbox is Article 6(1)(f) GDPR. We have a legitimate interest in simplifying our application process by incorporating widely used services to make us more attractive to applicants. Dropbox is provided by Dropbox International Unlimited Company, One Park Place, Floor 5, Upper Hatch Street, Dublin 2, Ireland. You will find information about privacy at Dropbox at https://www.dropbox.com/privacy.
4.1.3 Note regarding sensitive data
You are expressly advised that job applications, and particularly CVs, references, and other data you provide to us, may contain particularly sensitive data concerning mental and physical health, racial or ethnic origin, political opinions, religion or philosophical beliefs, membership of a trade union or political party, and sex life.
Data transmitted to us will be erased 6 months after the end of recruitment for the role your application relates to. We do not create an applicant pool. Your data may be stored for longer than this if erasure is precluded by statutory provisions, if continued storage is required for evidentiary purposes, or if you have given your consent.
4.1.5 Consent to EMAG Group-wide application
By clicking the “Consent to Extended Use” check box, you can consent to use of your application across the EMAG Group. Your personal data can then be shared within the EMAG Group. This comprises the following companies:
- EMAG Maschinenfabrik GmbH, Austr. 24, 73084 Salach, Germany
- EMAG Salach GmbH, Austr. 24, 73084 Salach, Germany
- EMAG KOEPFER GmbH, Siederstr. 49, 78054 Villingen-Schwenningen, Germany
- eldec Induction GmbH, Otto-Hahn-Str. 14, 72280 Dornstetten, Germany
- EMAG LaserTec GmbH, Am Flugplatz 1, 73540 Heubach, Germany
- EMAG ECM GmbH, Am Flugplatz 1, 73540 Heubach, Germany
- EMAG Zerbst Maschinenfabrik GmbH, Norbert-Heßbrüggen-Str. 11, 39261 Zerbst, Germany
- CNC-Technik Weiss GmbH, Neckarstraße 10, 72666 Neckartailfingen, Germany
- EMAG Milano, Via die Mille 31, 20098 San Giuliano Milanese, Italy
- EMAG MILANO Srl - Sucursal en España, Pasaje Arrahona, n° 18, Polígono Industrial Santiga, 08210 Barberà del Vallès (Barcelona), Spain
- EMAG MILANO Srl - Succursale en France, 5 Avenue de L'Europe, 18150 La Guerche sur L'Aubois, France
- EMAG SU S.r.l., Via die Mille 31, 20098 San Giuliano Milanese, Italy
- EMAG LLC, 38800 Grand River Avenue, Farmington Hills, MI 48335, USA
- EMAG (China) Machinery Co., Ltd., Sino-German Advanced Manufacturing Technology International Innovation Park, Building No.2, No. 101, Chenmeng Jing Road, 215400 Taicang, Jiangsu, China
- EMAG (China) Machinery Co., Ltd, No. 2888, Nan Er Huan East Road, Economic Development Zone, 213200 Jintan, Changzhou City, Jiangsu Province, China
- EMAG (Chongqing) Machinery Co., No. 10th Lailong Road, Yongchuan District, 402160 Chongqing, China
- EMAG OOO, ul. Akademika Chelomeya, 3/2, 117630 Moscow, Russia
- EMAG India Pvt. Ltd., No. 17/G/46-3, Industrial Suburb, 2nd Stage, Yeshwantpur, 560022 Bangalore, India
- EMAG Korea Ltd., Rm204, Biz center, SKn Technopark, 190-1, Sangdeawon-dong, 13207 Seongnam City, Gyeonggi-do, South Korea
- EMAG do Brasil Ltda., Edificio Neo Corporate Offices, CJ 1503, Rua Enxovia, 472, 04711-030 São Paulo, Brazil
- EMAG - Mexico, Av. Hercules 301 Nave 1, Poligono Empresarial Santa Rosa, 76220 Santa Rosa Jauregui, Querétaro, Mexico
Your application can then appear in searches by other EMAG companies for suitable applicants for other vacancies in the future. Point 5 applies in the case of companies from countries outside the European Union. If a vacancy within the EMAG Group matches your profile, the relevant manager will receive access to your data. By giving your consent, you expressly agree that EMAG Group employees may contact you in connection with a recruitment search. We will store your data until the recruitment process is complete, but for no longer than one year. You may withdraw your consent with future effect at any time by sending an email to email@example.com.
You can subscribe to our newsletter, which we use to provide information about current offers that may be of interest to you. These include new products in the metal manufacturing systems field, news about this industry, and information about events.
We use the “double opt-in” process for subscriptions to our newsletter. This means that after you have subscribed, we will send an email to the email address provided by you asking you to confirm that you want to receive the newsletter. If you do not confirm your subscription within 24 hours, your information will be blocked and then automatically erased after one month. We also store the IP addresses you use to subscribe and confirm and the time of subscription and confirmation. The purpose of this process is to prove that you have subscribed to the newsletter and to provide clarification in case of misuse of your personal data.
The only information you must provide to receive our newsletter is your email address. Other data identified separately is provided on a voluntary basis only and will be used to address you personally. After you have confirmed, we will store the data you provide in order to send you the newsletter (the legal basis for this is Article 6(1)(a) GDPR).
You can withdraw your consent to receive the newsletter in future and unsubscribe at any time. You can withdraw your consent by clicking on the link appearing in every newsletter email, or directly on our website at here.
5. Data security
All information that you send to us will be stored on servers within the European Union. Unfortunately, transmission of data over the Internet is not completely secure, and we are therefore unable to guarantee the security of data transmitted to our website via the Internet. However, we have put in place technical and organizational measures to protect our website and other systems against loss and destruction of your data and to prevent your data from being accessed, modified, or distributed by unauthorized persons. In particular, we encrypt your personal data for transmission. We do this using the SSL (Secure Socket Layer) and TLS (Transport Layer Security) encryption systems.
Data is transmitted to countries outside the European Union (“third countries”) only if the recipient has provided appropriate guarantees ensuring an adequate level of data protection (Article 46 GDPR). You can request a copy of these guarantees from firstname.lastname@example.org.
6. No disclosure of your personal data
We will not transmit your personal data to third parties unless you have given us your consent (see Article 6(1)(a) GDPR) or we are authorized or required to do so by law and/or by order of the authorities or the courts. In particular, we may be required to provide information for the purposes of criminal proceedings, hazard prevention, or enforcement of intellectual property rights.
7. How long we store your data
Your data will be stored for no longer than is necessary for the purpose of the existing customer relationship, unless you have consented to further processing or we have a legitimate interest in further processing. In these cases, we will process your data until you withdraw your consent or you object to processing on the basis of our legitimate interests. Notwithstanding this, we are required under commercial and tax law to retain your address and your payment and order data for a period of ten years.
8. Privacy and third party websites
10. Your rights and contact information
You have the following rights in relation to us: the right of access, rights to rectification, data portability, erasure and restriction of processing, and the right to object to processing. You are welcome to contact our customer service team at any time at email@example.com or at the address specified in point 1. If you have any questions, comments, or complaints, you can also contact our data protection officer at any time by email at datenschutznoSpam@emag.com.
You also have the right to lodge a complaint regarding the processing carried out by us with a data protection supervisory authority. The supervisory authority with responsibility for us is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, 70025 Stuttgart, Germany, tel. +49 711 6155 410, poststellenoSpam@lfdi.bwl.de.
©EMAG GmbH & Co. KG, 2022