Privacy policy

1. Data protection at a glance

General information

The following information gives a basic overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. You can find extensive information on data protection in the following privacy policy.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the controller’s contact details in the “information about the controller” section of this privacy policy.

How do we collect your data?

On the one hand, your data is collected when you transmit it to us. This may apply e.g. to data you enter in a contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This especially includes technical data, (e.g. Internet browser, operating system or time of page view). This data is collected automatically as soon as you access this website.

What do we use your data for?

One portion of the data is collected in order to ensure the faultless provision of the website. Other data may be used to analyse your user behaviour.

What are your rights regarding your data?

You have the right at any time to obtain information about the origin, recipients and purpose of the storage of your personal data. You also have the right to the rectification or erasure of this data. If you have consented to data processing, you may withdraw this consent at any time with future effect. Furthermore, you have the right, under specific circumstances, to demand the restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.


Please contact us at any time if you have any further questions about this or other data protection issues.

Analytics tools and third-party tools

When you visit this website your surfing behaviour may be statistically evaluated. This is primarily done using so-called analytics programs.


You can find detailed information on these analytics programs in the following privacy policy.

2. Hosting und Content Delivery Networks (CDN)

External hosting

This website is hosted by an external service provider (host). The personal data that is collected on this website is stored on the host’s servers. This may include IP addresses, contact requests, metadata, communications data, contractual data, names, website access logs and other data generated through the use of a website.


The host is used for the purpose of contract fulfilment towards our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of online services by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our host will only process your data to the extent required to render their services and will follow our instructions with regard to this data.

We use the following host:


noris network AG
Thomas-Mann-Straße 16 – 20
90471 Nuremberg
Germany

Conclusion of a contract regarding data processing

To ensure that processing complies with data protection laws, we have concluded a data processing contract with our host.

3. General notes and mandatory information

Data protection

The operator of these sites takes the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the legal data protection requirements and this privacy policy.

If you use this website, various forms of personal data will be collected. Personal data is data with which you can be personally identified. The following privacy policy explains which data we collect and what we use it for. It also explains how and for what purposes this occurs.

We would like to point out that data transmission via the Internet (e.g. when communicating by email) may be vulnerable to security breaches. Absolute protection of the data against access by third parties is not possible.

Information about the controller

The data controller for this website is:

A. Eberle GmbH & Co. KG
Frankenstraße 160
90461 Nürnberg, Deutschland

Tel.: +49 911 628108-0
E-Mail: info(at)a-eberle.de

The controller is the natural or legal person who, alone or with others, decides the purposes and means of processing of personal data (e.g. names, email addresses or similar).

Storage period

If no specific storage period has been specified in this privacy policy, we will store your personal data until the purpose for which it was collected no longer applies. If you assert a justified request to have your data erased or withdraw your consent to data processing, your data will be erased unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be erased once these reasons no longer apply.

Legally required data protection officer

We have appointed a data protection officer for our company.

Jürgen Krauß
Frankenstraße 160
90461 Nürnberg, Deutschland


E-Mail: juergen.krauss(at)a-eberle.de

Information on data transfer to the USA

Tools offered by companies headquartered in the USA are embedded in our website. If these tools are active, your personal data may be transferred to the respective company’s servers located in the USA. We point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to disclose personal data to security authorities without you as a data subject being entitled to legal recourse. We therefore cannot exclude the possibility of US authorities (e.g. secret services) processing, evaluating and permanently storing your personal data which is on US servers. We have no influence on these processing activities.

Withdrawal of consent to data processing

Many data processing measures are only possible with your express consent. You can withdraw consent you have given at any time. The legality of the data processing that took place up to the point of withdrawal is unaffected by this.

Right to object to data processing in special cases and against direct marketing (Art. 21 GDPR)

IF DATA PROCESSING TAKES PLACE ON THE BASIS OF ART. 6 PARA. 1 (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PERSONAL SITUATION; THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS ON WHICH EACH FORM OF PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU LODGE AN OBJECTION WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS: WE CAN DEMONSTRATE COMPELLING REASONS FOR SUCH PROCESSING THAT DEMAND THE PROTECTION OF THE LAW AND WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS; OR IF SUCH PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION AS PER ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSES OF DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO ITS PROCESSING FOR SUCH PURPOSES; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED TO DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR THE PURPOSES OF DIRECT MARKETING (RIGHT TO OBJECT AS PER ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the case of infringements of the GDPR, the data subject has the right to lodge a complaint with the competent supervisory authority, especially one in the member state of their ordinary residence, place of work or in the place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to receive or have provided to a third party the data that we process with your consent or automatically in the fulfilment of contracts in a structured, commonly used and machine readable format. If you request the direct transfer of the data to another controller, this will only take place if technically possible.

SSL- or TLS-encryption

For security reasons and to protect the transmission of confidential content, such as orders or queries sent to us as the operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the address bar, which will change in your browser from “http://” to “https://”, while a lock symbol appears.


If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Access, erasure and rectification

Within the framework of the valid legal provisions, you have the right to obtain information at any time and free of charge about the data stored relating to you, its origins and recipients and the purpose of the data processing. You also have the right, as applicable, to the rectification or erasure of this data. Please contact us at any time if you have any further questions about this or other personal data issues.

Right to restrict processing

You have the right to demand the restriction of the processing of your personal data. You can contact us at any time in this regard. You have the right to restrict processing in the following instances:

  • If you dispute the correctness of your personal data that we store, we will usually need time to check this. For the duration of this checking process, you have the right to demand the restriction of the processing of your personal data.
  • If the processing of your personal data has occurred/is occurring unlawfully, you are able to request, instead of the erasure of your data, the restriction of its processing.
  • If we no longer need your personal data but you do for the establishment, exercise or defence of legal claims, you have the right to demand the restriction of processing instead of erasure.
  • If you have lodged an objection as per Art. 21 (1) GDPR, your interests must be weighed up against ours. As long as it is unclear whose interests are overriding, you have the right to demand the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data will only be processed – excluding storage – with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for urgent reasons of public interest within the European Union or a Member State..

Objection to advertising emails

The use of the contact data published within the framework of the mandatory legal notice for the purpose of sending advertising and information material that has not been expressly requested is hereby prohibited. The operator of the websites reserves the right to take legal measures in the case of unsolicited advertising material, for example, spam emails, being sent.

4. Data collection on this website

Cookies

Our internet sites use so-called “cookies”. Cookies are small text files and cause no damage to your device. They are either stored temporarily, for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your browser.

In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These allow us or you to use certain services offered by the third party (e.g. cookies to handle payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions do not work without them (e.g. the “basket” function or displaying videos). Other cookies serve to assess your user behaviour or display ads.

Cookies required to execute electronic communications (strictly necessary cookies) or to provide certain functionalities you want (functional cookies, e.g. for the “basket” function) or to optimise the website (e.g. cookies to measure web audience) are stored on the basis of Art. 6 para. 1 (f) GDPR, as long as no other legal basis is specified. The website operator has a legitimate interest in the storage of cookies for the technically flawless and optimised provision of services. If consent to the storage of cookies has been requested, the storage of the cookies in question is based exclusively on this consent (Art. 6 para. 1 lit. a GDPR); consent can be withdrawn at any time.

You can set your browser so that you are informed about the storage of cookies and only allow them in individual cases, can exclude them in particular cases or in general and can activate the automatic deletion of cookies when closing the browser. When cookies are deactivated, the functionality of this website may be restricted.
If cookies are placed by third parties or for analytics purposes, we will inform you separately within the framework of this privacy policy and request consent as appropriate.

Server-Log-Files

The provider of the sites collects and automatically stores information in so-called server log files, transmitted automatically to us by your browser. These include:

  • Browser type and version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of server request
  • IP-adress

This data is not collated with data from other sources.

The collection of this data takes place on the basis of Art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in the fault-free presentation and optimisation of the website. To this end, server logfiles must be collected.

Contact form

If you send queries to us via a contact form, your information from the contact form, including the contact data you enter there, will be stored by us for the purpose of processing the query and in case subsequent questions arise. We will not transfer this data without your consent.

The processing of this data takes place on the basis of Art. 6 para. 1 (b) GDPR, if your query is connected with the fulfilment of a contract or the execution of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of requests sent to us (Art. 6 para. 1 (f) GDPR) or your consent (Art. 6 para. 1 (a) GDPR), if this has been requested.

The data entered by you in contact forms remain with us until you request its deletion, withdraw consent to its storage or until the purpose for which it was collected no longer applies (e.g. when your query has been completely processed). Mandatory legal provisions – in particular, retention periods – remain unaffected.

Contact by email, telephone or fax

If you contact us by email, telephone or fax, your query, including all resulting personal data (name, query) will be stored and processed by us for the purpose of answering your query. We will not transfer this data without your consent.

The processing of this data takes place on the basis of Art. 6 para. 1 (b) GDPR, if your query is connected with the fulfilment of a contract or the execution of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of requests sent to us (Art. 6 para. 1 (f) GDPR) or your consent (Art. 6 para. 1 (a) GDPR), if this has been requested.

The data sent to us by you in the course of contact requests remain with us until you request its deletion, withdraw consent to its storage or until the purpose for which it was collected no longer applies (e.g. when your request has been completely processed). Mandatory legal provisions – in particular, legal retention periods – remain unaffected.

5. Analytics tools and advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool with which we are able to include tracking and statistics tools and other technologies on our website. Google Tag Manager does not create user profiles itself, nor does it store cookies or carry out independent analysis. It only serves to administer and provide the tools embedded using it. However, Google Tag Manager does record your IP address, which may be transferred to the Google parent company in the USA.

The use of Google Tag Manager takes place on the basis of Art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in the fast, uncomplicated incorporation and administration of various tools on the website. If consent has been requested, processing takes place exclusively on the basis of Art. 6 para. 1 (a) GDPR; consent can be withdrawn at any time.

Google Analytics

This website uses Google Analytics functions. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows the website operator to analyse the behaviour of website visitors. Through it, the website operator receives various usage data, e.g. page views, length of stay, operating system used and place of origin of the user. This data is collated by Google in a profile assigned to the user or their device.

Google Analytics uses technologies allowing the user to be recognised again for the purpose of user behaviour analysis. The information collected by Google regarding the use of this website is, as a rule, transferred to Google servers in the USA and stored there.

The use of this analytics tool takes place on the basis of Art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both the web presence and any advertising. If consent has been requested (e.g. consent to the storage of cookies) processing takes place exclusively on the basis of Art. 6 para. 1 (a) GDPR; consent can be withdrawn at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymisation

We have activated the IP anonymisation function on our website. This means that your IP address is truncated by Google within member states of the European Union or in other states subject to the agreements of the EEA before its transmission to the USA. The entire IP address is only transferred to a Google server in the USA and truncated there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to create reports on website activities and to provide further services to the operator connected with website and Internet usage. The IP address sent from your browser while Google Analytics is active is not collated with other Google data.

Browser Plugin

You can prevent the recording and collection of your data by Google by downloading and installing a browser plugin via the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

You can find more information on the handling of user data by Google Analytics in the Google Data Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.

Data processing

We have concluded a contract with Google regarding data processing and have fully implemented the strict requirements of the German data protection authorities in the use of Google Analytics.

Storage period

Data stored by Google at the user and event level and linked to cookies, user IDs or ad IDs (e.g. DoubleClick cookies, Android ad ID) is anonymised or erased after 14 months. For details regarding this, see the following link: https://support.google.com/analytics/answer/7667196?hl=en

7. Newsletter

Newsletter­ data

If you wish to subscribe to the newsletter offered on the site, we require your email address and information allowing us to confirm that you are the owner of that email address and consent to receive the newsletter. If further data is collected it will be on a purely voluntary basis. We only use this data to send the requested information and will not transfer it to third parties.

The processing of the data entered in the newsletter subscription form thus takes place exclusively on the basis of your consent (Art. 6 para. 1 (a) GDPR). You can withdraw your consent to the storage of your data and email address and their use to send you the newsletter at any time, e.g. by using the “unsubscribe” link in the newsletter. The legality of the data processing that has already taken place is unaffected by this withdrawal.

The data you provide to us for the purposes of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe and will be erased from the mailing list at this point or when the purpose for its storage no longer applies. We reserve the right to erase or restrict email addresses from our newsletter mailing list at our own discretion in accordance with our legitimate interest as per Art. 6 para. 1 (f) GDPR.

After your erasure from the newsletter mailing list, your email address may be saved by us or the newsletter service provider in a blacklist to prevent further mailings. Data from the blacklist is only used for these purposes and is not collated with other data. This serves both your and our interests, including our interest in compliance with legal requirements for the mailing of newsletters (legitimate interest as per Art. 6 para. 1 (f) GDPR). Storage on the blacklist is not restricted in time. You can object to your being placed on it if your interests override our legitimate interest.

CleverReach

This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter: “CleverReach”). CleverReach is a service that allows newsletter mailings to be organised and analysed. The data you enter when subscribing to the newsletter (e.g. email address) will be stored on the CleverReach servers in Germany or Ireland.

Our newsletters sent via CleverReach allow us to analyse the behaviour of their recipients. We can analyse, for example, how many recipients have opened the newsletter email and how often each link in the newsletter was clicked. With the aid of so-called “conversion tracking”, we can also analyse whether a previously defined action (e.g. purchase of a product on our website) takes place after the link is clicked. For further information on data analysis using CleverReach newsletters, see:
https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

The data processing thus takes place on the basis of your consent (Art. 6 para. 1 (a) GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The legality of the data processing that has already taken place is unaffected by this withdrawal.

If you do not want to be analysed through CleverReach, you must unsubscribe from the newsletter. We provide a link that lets you do this in every newsletter we mail.

The data you provide to us for the purposes of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe and will be erased from the mailing list at this point. Data stored by us for other purposes is not affected by this.

After your erasure from the newsletter mailing list, your email address may be saved by us or the newsletter service provider in a blacklist to prevent further mailings. Data from the blacklist is only used for these purposes and is not collated with other data. This serves both your and our interests, including our interest in compliance with legal requirements for the mailing of newsletters (legitimate interest as per Art. 6 para. 1 (f) GDPR). Storage on the blacklist is not restricted in time. You can object to your being placed on it if your interests override our legitimate interest.

You can find out more in the CleverReach privacy policy at: https://www.cleverreach.com/en/privacy-policy/.

Conclusion of a contract regarding data processing

We have concluded a contract with the provider of CleverReach regarding data processing and have fully implemented the strict requirements of the German data protection authorities in the use of CleverReach.

8. Plugins und Tools

YouTube with extended data protection

This website uses YouTube videos. The operator of the sites is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode stores no information about the visitor to the site before they watch the video. The transfer of data to YouTube partners, however, is not specifically excluded by extended data protection mode. Thus, YouTube – regardless of whether you watch a video – creates a connection to the Google DoubleClick network.

As soon as you play a video on this website, a connection is made to the YouTube servers. Through this, YouTube is informed of which of our pages you have visited. If you are logged into your own YouTube account, YouTube is able to assign your surfing behaviour to your personal profile. You can prevent this by logging out of your YouTube account.

In addition, once a video is played, YouTube is able to store various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can collect information on the visitors to this site. This data is used e.g. to record video statistics, improve user-friendliness and prevent attempted fraud.

In certain situations, once a YouTube video has been played, further data processing may be triggered over which we have no control.

The use of YouTube takes place in the interests of presenting our online content attractively. This represents a legitimate interest in the sense of Art. 6 para. 1 (f) GDPR. If consent has been requested, processing takes place exclusively on the basis of Art. 6 para. 1 (a) GDPR; consent can be withdrawn at any time.

You can find further information on data protection at YouTube in the corresponding privacy policy: https://policies.google.com/privacy?hl=en.

Google Web Fonts (local hosting)

This page uses so-called “web fonts” to ensure the unified presentation of type. These are provided by Google. Google fonts are installed locally. No connection to the Google servers takes place.

You can find further information on Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=en.

OpenStreetMap

We use the mapping service OpenStreetMap (OSM). The provider is the Open-Street-Map Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

If you visit a website in which OpenStreetMap is embedded, your IP address and other information concerning your behaviour may be transferred to the OSMF by this website. To this end, OpenStreetMap may in certain conditions store cookies on your browser or use comparable recognition technologies.

In addition, your location may be recorded if you have permitted this in your device settings – e.g. on your phone. The provider of this page has no influence on this data transfer. You can find details in the OpenStreetMap privacy policy here: https://wiki.osmfoundation.org/wiki/Privacy_Policy.

The use of OpenStreetMap takes place in the interests of presenting our online services attractively and ensuring the easy location of sites mentioned by us on our website. This represents a legitimate interest in the sense of Art. 6 para. 1 (f) GDPR. If consent has been requested (e.g. consent to the storage of cookies) processing takes place exclusively on the basis of Art. 6 para. 1 (a) GDPR; consent can be withdrawn at any time.

9. Own services

Handling data from applicants

We offer you the opportunity to apply to us (e.g. by email, post or an online application form). In the following, we inform you about the extent, purpose and use of your personal data as collected during the applications process. We ensure that the collection, processing and use of your data take place in accordance with applicable data protection law and all further legal provisions and that your data is treated in strictly confidentially.

Extent and purpose of data collection

If you send us an application, we process the connected data (e.g. contact and communications data, application documents, notes taken during applicant interviews etc.) insofar as is necessary to make decisions about the establishment of an employment relationship. The legal basis for this is Section 26 German Federal Data Protection Act (BDSG-neu) in German law (initiation of an employment relationship), Art. 6 para. 1 (b) GDPR (general initiation of a contract) and – if you have given consent – Art. 6 para. 1 (a) GDPR. Consent may be withdrawn at any time. Your personal data is exclusively transmitted within our company to persons involved in the processing of your application.

If the application is successful, the data you give us is stored in our data handling systems on the basis of Section 26 BDSG-neu and Art. 6 para. 1 (b) GDPR for the purposes of implementing the employment relationship.

Duration of data retention

If we do not make you an offer, you decline an offer or retract your application, we reserve the right to continue to store the data you transferred to us on the basis of our legitimate interest (Art. 6 para. 1 (f) GDPR) up to 6 months from the termination of the application process (retraction or rejection of application). Subsequently, the data will be erased and the physical application documents destroyed. Storage takes place in particular to provide evidence in case of legal disputes. If it is to be expected that the data will be required after the 6-month retention period has elapsed (e.g. because of an imminent or pending legal dispute), erasure will only take place once the purpose for continued storage no longer applies.

Longer retention may take place if you give corresponding consent (Art. 6 para. 1 (a) GDPR) or if legal retention obligations oppose erasure.

a-eberle kontakt newsletter ×