Data protection

Data protection policy in accordance with the GDPR

Thank you for visiting our website. This Privacy Policy explains the nature, purposes and scope of the collection and processing of personal data and the use of cookies and similar technologies on our website. If you have any questions, please contact us using the data protection contact details provided below.

I. Name and address of the responsible person

The responsible person within the meaning of the GDPR and other national data protection regulations of EU member states as well as other regulations relating to data protection is:

IMOS Gubela GmbH
Kniebisstraße 1
77871 Renchen
Germany

Phone: + 49 7843/99511-0
E-Mail: info@imos-gubela.de
Website: www.imos-gubela.de / www.imos-gubela.com / www.imos-gubela.it / www.imos-gubela.fr
Managing director : Herr Hans-Erich Gubela jun.

II. Contact Data Protection Officer

Kniebisstraße 1
77871 Renchen
Germany
Phone: + 49 7843/99511-0
E-Mail: IMOS-Datenschutz@imos-gubela.de

III. Description and scope of data processing

1. General Information

We process personal data to the extent necessary to provide our website, respond to enquiries and deliver our services, or where another lawful basis applies.

Where we use services that require consent, these services are used on the basis of your consent. Further information is provided in the following sections of this Privacy Policy.

2. Your Visit to Our Website

When you access our website, the web server processes technical data required to provide the website. Depending on the information transmitted, this may include your IP address, the date and time of access, the page requested, information about your browser and operating system, and the website from which you accessed our website.

This processing is necessary to make our website technically available, ensure system security, and detect and prevent disruptions and unauthorised or abusive access.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.

Where our hosting provider processes personal data on our behalf, this is carried out in accordance with the requirements of Article 28 GDPR.

Server log files are stored only for as long as necessary for the purposes described above. Further information about retention periods is provided in Section VI.

The use of Google Analytics is described separately in Section IX.

3. Contact Form and Email Contact

If you contact us using our contact form or by email, we process the personal data you provide, in particular your name, contact details and the content of your message, in order to respond to your enquiry and, where necessary, contact you.

Where your enquiry relates to entering into or performing a contract, processing is based on Article 6(1)(b) GDPR. For other enquiries, processing is based on our legitimate interest in responding to enquiries pursuant to Article 6(1)(f) GDPR.

Providing this information is generally voluntary. However, without the contact details necessary to process your enquiry, we may be unable to respond.

We use Google reCAPTCHA to protect our contact form. Further details are provided in Section X.

IV. Lawful basis for processing personal data

For recording and processing personal data, the EU General Data Protection Regulations (GDPR) are used as the lawful basis along with the directives and laws in German law, the Bürgerliches Gesetzbuch (BGB - German Civil Code), Handelsgesetzbuch (HGB - German Commercial Code), German tax law and customs law.

V. Purpose of the data processing

Temporary storage of the IP address by the system is necessary in order to enable the supply of the web site to the user’s computer. For this, the IP address of the user must be stored for the duration of the session. Our legitimate interests in the data processing also apply to these purposes in accordance with Section 6 Para. 1 lit. f DSGVO (German GDPR). The processing of personal data from the entry mask of the contact form (where present) is sufficient alone for use to process the contact request. In cases where the contact request is by e-mail, this also contains the necessary legitimate interest in the processing of the data.

VI. Data deletion and retention periods

The personal data of the affected person will be deleted or locked as soon as the purpose for the storage no longer applies. For the personal data from the entry mask of the contact form (where present) and those sent by e-mail, this is then the case when the respective conversation with the user has ended. The conversation is ended when it can be gathered from the circumstances that the affected content has been completely resolved. For recording data for making the web site available, this is the case when the respective session is closed.
 
Storage can continue if provided for by European or national lawmakers in EU legal regulations, laws or other provisions that the responsible person is subject to. Locking or deletion of the data is also undertaken when a storage time limit specified in the named standards has expired, unless a necessity for continued storage of the data exists for the completion or fulfilment of a contract.

VII. Possibility of objection and removal

The user has the possibility at any time to retract their consent to process their personal data. To withdraw consent, the user applies in writing to the data protection address specified by the company. All personal data stored in the course of making contact will be deleted in this case. However, the capture of the data for the provision of the web site and the storage of the data in log files is absolutely necessary for the operation of the Internet page. As a result, there is no possibility to object for the user.

VIII. Use of cookies

IX. Google Analytics

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics helps us understand how visitors use our website, which pages are accessed and how we can improve our online services.

For these purposes, information such as page views, interactions, approximate location data, technical characteristics of the browser and device used, and online identifiers may be processed. Google Analytics uses cookies and similar technologies for these purposes.

We use Google Analytics only where you have given your consent. The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR.

Google is a recipient of the data. Processing of data in the United States or other countries outside the European Economic Area cannot be ruled out. Where personal data is transferred to third countries, the requirements of Articles 44 et seq. GDPR apply.

You can withdraw your consent at any time with effect for the future via the privacy settings.

Further information:

https://policies.google.com/privacy?hl=en

https://support.google.com/analytics/answer/12017362?hl=en

X. Google reCAPTCHA

We use Google reCAPTCHA, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to protect our contact form against automated submissions and misuse.

The service is intended to detect automated access and abusive form submissions. In this context, technical information about your browser and device, your IP address and information about your interaction with our website may be processed and transmitted to Google.

Where the use of reCAPTCHA requires consent, processing is based on Section 25(1) TDDDG and Article 6(1)(a) GDPR.

Personal data may be transferred to the United States or other third countries. The requirements of Articles 44 et seq. GDPR apply to such transfers.

Further information about Google's processing of personal data is available at:

https://policies.google.com/privacy?hl=en

If you do not consent to the use of Google reCAPTCHA, the protected contact form cannot be used. You can contact us alternatively using the contact details provided in our Legal Notice (Imprint).

XI. Google Ads Conversion Tracking and Remarketing

We use Google Ads, an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Purpose of Data Processing

Google Ads Conversion Tracking enables us to measure whether visitors perform certain actions on our website after interacting with our advertisements, such as submitting a contact enquiry. This allows us to evaluate and optimise the effectiveness of our advertising activities.

Where the relevant functions are enabled, we also use Google Ads Remarketing to display interest-based advertising to users based on their previous interactions.

Nature and Scope of Data Processing

In this context, information such as advertising clicks, pages visited, actions performed, IP addresses, browser and device information, and online identifiers may be processed. Cookies and similar technologies may be used for these purposes.

Legal Basis and Consent

Where consent is required, the use of Google Ads is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as information is stored on or accessed from your device.

You can withdraw or change your consent at any time with effect for the future via the privacy settings on our website.

International Data Transfers

Google may also process personal data in the United States or other countries outside the European Economic Area. Such transfers are subject to the requirements of Articles 44 et seq. GDPR.

Further Information

Further information about Google's processing of personal data is available at:

https://policies.google.com/privacy?hl=en

Information about the use of data for advertising purposes:

https://policies.google.com/technologies/ads?hl=en

​​​​​
XII. LinkedIn Company Page

We operate a company page on LinkedIn, a social network provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). We use this page to provide information about our company, products and services and to communicate with customers, prospective customers and business partners.

You can find our company page at:

https://www.linkedin.com/company/imos-gubela-gmbh/

When you visit our LinkedIn company page, LinkedIn processes personal data. This may include your IP address, information about your browser and device, and your interactions with the content on our page. LinkedIn may use cookies and similar technologies for these purposes.

As the operator of our company page, we receive aggregated statistics from LinkedIn about the use and reach of our page (“Page Insights”). We do not have access to the individual personal data used by LinkedIn to generate these statistics.

To the relevant extent, we and LinkedIn are joint controllers for the processing of Page Insights data pursuant to Article 26 GDPR. LinkedIn provides further information about the joint controllership arrangement.

Our processing is based on our legitimate interest in maintaining a professional company presence and communicating with interested parties pursuant to Article 6(1)(f) GDPR.

LinkedIn may also process personal data outside the European Economic Area. The requirements of Articles 44 et seq. GDPR apply to the corresponding international data transfers.

Further information about LinkedIn's processing of personal data is available at:

https://www.linkedin.com/legal/privacy-policy

You can manage your LinkedIn privacy settings at:

https://www.linkedin.com/psettings/

XIII. Rights of the affected person

If your personal data are processed, you are an affected person within the meaning of the DSGVO and you have the following rights with the responsible person.   Please get more information in detail from the DSGVO. If you want to apply your rights, please contact the data protection address specified by the company in writing.

1. Your right to be informed
You can demand a confirmation from the responsible person about whether personal data affecting you is being processed by us. If such processing is happening, you can demand information from the responsible person in accordance with Article 15 DSGVO.

2. Your right to rectification
According to Art. 16 DSGVO, you have the right to rectification and/or completion by the responsible person if the processed personal data affecting you are incorrect or incomplete.

3. Your right to restrict processing
Under the requirements of Article 18 DSGVO, you can demand the limitation of the processing of personal data affecting you. If the processing of the personal data affecting you is limited, these data may – apart from their storage – only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of other natural or legal persons or for reasons of an important public interest of the Union or a member state. If the limitation on the processing in accordance with the above requirements is effected, you will be advised by the responsible person before the limitation is removed.

4. Your right to erasure
In accordance with the requirements named in Article 17 DSGVO, you can demand from the responsible person that the affected personal data are deleted without delay, unless an exception to the requirement to delete applies.

5. Your right to notification
If you have asserted your right to rectification, deletion or limitation in accordance with Article 19 DSGVO with the responsible person, they are required to notify all recipients provide with the personal data affecting you about the rectification or deletion of the data or limitation on the processing of it unless this proves to be impossible or is associated with disproportionate effort. You have the right against the responsible person to be advised of these recipients.

6. Your right to data portability
In accordance with Article 20 DSGVO, you have the right to receive the personal data affecting you and provided by you to the responsible person in a structured, current and machine-readable form. Furthermore, you have the right for the responsible person who you provided the personal data to transfer these data to another responsible person without impediment, as long as the DSGVO requirements are present. When asserting these rights, you also have the right to effect the direct transfer from one responsible person to another as long as this is technically feasible. Freedoms and rights of other persons may not be impaired as a result. The right to data portability does not apply to the processing of personal data that are necessary for the fulfilment of a task lying in the public interest or in the exercise of official authority that has been assigned to the responsible person.

7. Your right to object
You have the right at any time, for reasons arising out of your particular situation, to object to the processing of the personal data affecting you that is carried out on the basis of Art. 6 Para. 1 lit. e or f DSGVO. The responsible person will no longer process the personal data affecting you unless they can evidence compelling legitimate grounds that override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.

8. Your right to retract the consent declaration for data protection
You have the right at any time to retract your consent declaration for data protection. The legality of the processing carried out on the basis of the consent before the retraction is not affected by the retraction.

9. Your right: Automated decision-making in an individual case including profiling
If Art. 22 DSGVO applies, you have the right to not be subject to a decision solely using automated processing, including profiling, which makes you subject to a legal effect or affects you in a similar way. Exceptions are governed by Article 22 DSGVO.

10. The right to complain to a regulatory authority
Irrespective of any other legal remedies in administrative law or judicial law, you have the right to complain to a regulatory authority, particularly in the member state of your residence or the location of the alleged breach, if you are of the opinion that the processing of the personal data affecting you breaches the DSGVO. The regulatory authority where the complaint is made informs the complainant of the status and the results of the complaint including the possibility of a judicial remedy in accordance with Art. 78 DSGVO.

The address of the regulatory authority responsible for us is:
Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg
Königstraße 10a
70173 Stuttgart

XIV. Applications
If you apply for a position with us, we process the personal data you provide, in particular your contact details, application documents, qualifications and information about your professional background.

Processing is carried out for the purpose of conducting the recruitment process and deciding whether to establish an employment relationship, on the basis of Article 6(1)(b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG), insofar as the relevant legal requirements are met.

Access to your application data is restricted to persons involved in the recruitment process and, where applicable, service providers engaged for this purpose.

If no employment relationship is established, your application data will be deleted once it is no longer necessary for the recruitment process or for safeguarding legitimate interests, particularly the defence against potential legal claims, unless statutory retention obligations apply.

Any further retention, for example to consider you for future vacancies, will take place only where the required consent has been obtained.

XV. Change in the data protection policy
We reserve the right to amend this Privacy Policy where necessary due to legal, technical or organisational changes.

The version published on our website at the relevant time shall apply.