Privacy Statement of IMO Group
Personal data is the information that makes it possible to identify a natural person. These include, in particular, name, date of birth, address, telephone number, e-mail address, but also your IP address. We speak of anonymous data if no personal reference to the user can be made.
Responsible body and data protection officer
Responsible for the operation of the website and the related data processing is:
IMO Holding GmbH
Phone: +49 9193 6395-0
Fax: +49 9193 6395-1140
Contact of the Data Protection Officer
Your rights as a concerned person
First, we would like to inform you about your rights as a data subject. These rights are standardized in Articles 15 - 22 EU GDPR. This includes:
- the right to information (Article 15 EU GDPR),
- the right to cancellation (Article 17 EU GDPR),
- the right to rectification (Article 16 EU GDPR),
- the right to data portability (Article 20 EU GDPR),
- the right to restrict data processing (Art. 18 EU GDPR),
- the right to object to data processing (Article 21 EU GDPR).
To assert these rights, please contact: datenschutz(at)imo.de. The same applies if you have questions about data processing in our company. You also have a right of appeal to a data protection supervisory authority.
Right of appeal
Please note the following in connection with right of objection:
If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without giving reasons. This also applies to profiling insofar as it is associated with direct marketing.
If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made free of charge, preferably to: datenschutz(at)imo.de.
In the event that we process your data to protect legitimate interests, you may object to such processing at any time for reasons that arise from your particular situation; this also applies to profiling based on these provisions.
We will then no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
Purposes and legal bases of data processing
The processing of your personal data complies with the provisions of the EU GDPR and all other applicable data protection regulations. Legal bases for the data processing arise in particular from Art. 6 EU GDPR.
We use your data to initiate business, to fulfill contractual and legal obligations, to conduct the contractual relationship, to offer products and services, and to strengthen customer relationships, which may include analyses for marketing and direct marketing purposes.
Your consent also constitutes a data protection regulation. In doing so, we will inform you about the purposes of data processing and your right of withdrawal. If the consent also relates to the processing of special categories of personal data, we will explicitly inform you in the consent, Art. 88 para. 1 EU GDPR.
Processing of special categories of personal data in terms of Art. 9 (1) EU GDPR is only applied where this is required by law and there is no reason to believe that your legitimate interest in the exclusion of processing prevails, Art. 88 (1) EU GDPR.
Transfer to third parties
We will only pass on your data to third parties within the scope of the statutory provisions or with the appropriate consent. Otherwise, it will not be passed on to third parties unless we are obliged to do so due to mandatory legal regulations (disclosure to external bodies such as supervisory authorities or law enforcement authorities).
Recipient of the data/categories of recipients
Within our group of companies, we ensure that only those persons receive the data they need to fulfill their contractual and legal obligations. For the processing of your inquiries and orders we transfer personal data within the IMO group of companies, consisting of:
- IMO Holding GmbH,
- IMO GmbH & Co. KG,
- IMO Antriebseinheit GmbH & Co. KG,
- IMO Energy GmbH
Of course we comply with the legal requirements for data transmission.
In many cases, service providers support our specialist departments in fulfilling their tasks. The necessary data protection contract was concluded with all service providers. In particular, we use the following categories of service providers:
- Administration, maintenance and hosting of the website
- Service provider for the application portal
Third-country transmission/third-country transmission intention
A transfer of data to third countries (outside the European Union or the European Economic Area) only takes place, if required by law, or if you have given us your consent to do so.
Storage duration of the data
We store your data as long as they are needed for the respective processing purpose. Please note that numerous retention periods require that data continue to be stored. This applies in particular to commercial or tax-related retention obligations (for example, the Commercial Code, the Tax Code, etc.). Unless there are further retention requirements, the data will be routinely deleted after use.
In addition, if you have given us your permission to do so, or if there are legal disputes, and we use evidence within the statutory limitation period, which may be up to thirty years, we may retain the information; the regular limitation period is three years.
Secure transfer of your data
In order to best protect the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons, we employ appropriate technical and organizational security measures. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards.
In addition, we offer our users content encryption as part of the online application tool. Communication with our online application tool takes place via a secure protocol.
It is also possible to use alternative communication channels (mail, e-mail). The transmission of emails is secured via TLS and encrypted.
Categories, sources and source of data
The data we process determines the context: it depends on whether you enter a request in our contact form, whether you send us an application or submit a complaint.
Please note that we provide information for specific processing situations separately at a suitable location, e.g. when uploading application documents.
When visiting our website, we collect and process the following data:
- Name of the Internet service provider
- Information about the website from which you visit us
- used web browser and operating system used
- the IP address assigned by your Internet service provider
- requested files, transferred amount of data, downloads/file export
- Information about the websites you visit within our site, including the date and time
For reasons of technical security (in particular to ward off attempts to attack our web server), these data are processed in accordance with Art. 6 (1) lit. F EU GDPR saved. After 30 days, this data will be deleted.
User Profiles Webtracking Process
Based on your consent (article 6 (1) a GDPR), we use content or service offers from third-party providers within our website.
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and allow an analysis of the your website use. Information generated by the cookie about the use of this website is usually transmitted to and stored on a Google server in the USA. By the activated IP anonymization on this website within member states of the European Union or other parties to the Agreement on the European Economic Area your IP address will be shortened by Google. Only in exceptional cases will the full IP address be transferred to and shortened by a Google server in the United States. On behalf of the website operator Google will use the generated information to evaluate the use of the website in order to report website activities and to provide other related website and internet services to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.
Sessions and campaigns stop after a certain amount of time. By default, sessions will end after 30 minutes of no activity and campaigns after six months. The personal data of users will be deleted or anonymized after 14 months.
You can prevent the storage of cookies by setting the browser software accordingly; however, we point out that you may not be able to use all features of this website in this case.
You may also prevent the collection by Google of the data generated by the cookie and related to your use of the website and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en
As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent the future detection by Google Analytics within this website: Analytics-Opt-Out. An opt-out cookie is stored on your device. If you delete your cookies, you must click this link again.
Please note that on this website Google Analytics has been extended by the code "gat._anonymizeIp" in order to ensure the anonymous collection of IP addresses (so-called IP-Masking).
We also use Google Analytics to analyze data from GoogleAds (see Google Ads) and Google Advertising Features data for purely statistical purposes. If you do not wish to do so, you can deactivate the Ads Preferences Manager here: https://www.google.com/settings/ads or https://www.google.com/settings/ads/onweb/?hl=en
Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework.
Google Ads Remarketing and Conversion Tracking
This website uses the features of Google Ads Remarketing to advertise this site on Google's search results, as well as third-party websites. Provider of the service is Google. For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit.
The processing is based on our legitimate interest in optimally marketing our website in accordance with Art. 6 para. 1 lit. f GDPR and you can exercise your rights at any time.
Any further processing will only take place if you have agreed with Google that Google's Internet and App History will be linked to your Google Account and information from your Google Account will be used to personalize ads you view on the Web.
This website uses the Google Ads online advertising program and Google's Conversion Tracking as part of Google AdWords.
We use Google Ads to advertise our offers on external websites with the help of advertising material (so-called Google Ads). In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. We are interested in showing you advertisements of interest to make our website more interesting to you.
The conversion tracking cookie is set when a user clicks on a Google-served ad. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not expired yet, Google and we may recognize that the user has clicked on the ad and has been redirected to this page. Each Google Ads customer receives a different cookie. Cookies can not be tracked through Ads.com websites. The information gathered using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.
You can permanently disable the setting of cookies for ad preferences on Google at the following link: https://adssettings.google.com
Alternatively, you can visit the Digital Advertising Alliance at www.aboutads.info to find out about setting cookies and how to make settings. Finally, you can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Failure to accept cookies may limit the functionality of our website.
If applicable, Google LLC transmits personal information to the United States. However, Google is certified to the US Privacy Shield, which ensures compliance with the level of data protection in the EU.
Integration of content and services of third parties
Google Tag Manager
This website uses Google Tag Manager. This service allows website tags to be managed through a single interface. Google Tool Manager only implements tags. This means: no cookies are used and no personal data is collected. Google Tool Manager triggers other tags, which may collect data. However, Google Tag Manager does not access this data. If deactivated at the domain or cookie level, it will remain in effect for all tracking tags as far as they are implemented with the Google Tag Manager.
On our website, we use Google Maps from Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service for displaying interactive (land) maps to visually display geographic information. On the use of this service, our location will be displayed and any access will be facilitated.The legal basis is Article 6 (1) (f) GDPR Our legitimate interest lies in optimizing the functionality of our website.
When you visit any of the subpages where the Google Maps map is incorporated, information about your use of our website (such as your IP address) is transmitted to Google's servers in the United States and stored there. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button.
Google LLC, based in the United States, is certified to the US Privacy Shield, which ensures compliance with the level of data protection in the EU.
Integration of videos via YouTube
We include the videos from the YouTube platform of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, in our online offering. This is done on the basis of our legitimate interest (i.e., interest in optimizing our online offer within the meaning of Art. 6 (1) lit. GDPR).
The videos were embedded in the enhanced privacy mode.
Embedding the video in enhanced privacy mode does not set any cookies that capture usage patterns to personalize video playback. However, the enhanced privacy mode only relates to capturing user behavior, not ad serving.
By calling our page, a device ID will be generated in the local storage of your web browser and stored beyond the session, and accessing the page will result in a connection to the Google DoubleClick network. Starting the video could trigger further data processing. We have no influence on that.
When you're logged in to Google, your data will be assigned directly to your account. If you do not want to be associated with your profile on YouTube, you must log out before activating the video.
YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and / or custom design of its website. Such an evaluation is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right to object to the creation of these User Profiles, and you must be directed to YouTube to use them.
Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework
Links to other providers
Our website contains - clearly recognizable - also links to the Internet sites of other companies. As far as links to websites of other providers are available, we have no influence on their content. Therefore, no guarantee and liability can be assumed for this content. The content of these pages is always the responsibility of the respective provider or operator of the pages.
The linked pages were checked at the time of linking for possible legal violations and identifiable infringements. Illegal content was not recognizable at the time of linking. However, a permanent content control of the linked pages is not reasonable without concrete evidence of an infringement. Upon notification of rights violations, such links will be removed promptly.
Cookies (Article 6 (1) (f) of the EU-DS-GVO/Article 6 (1) (a) of the EU-DS-GVO with the consent)
Our websites use so-called cookies in several places. They serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser (locally on your hard disk).
These cookies enable us to analyze how users use our websites. So we can design the website content according to the visitor's needs. Cookies also allow us to measure the effectiveness of a given ad and to place it according to the user's interests, for example.
Most of the cookies we use are so-called "session cookies". These will be deleted automatically after your visit. Persistent cookies are automatically deleted from your computer when their validity period (usually six months) is reached or you delete them yourself before the expiration date.
Most web browsers accept cookies automatically. You can usually change your browser's settings if you prefer not to send the information. You can still use the offers of our website without restrictions (exception: configurators).
Please note: If you deactivate the setting of cookies, not all functions of our website may be fully usable.
Automated individual decisions
We do not use purely automated processing to make a decision.
Online offers for children
Persons under the age of 16 may not submit any personal data to us without the consent of the legal guardian or give a declaration of consent. We encourage parents and guardians to actively participate in the online activities and interests of their children.
Applicant portal (Article 6 (1) (a), (b) GDPR)
We are aware of the importance of your data and process the personal data provided by you within the application form only for the purpose of the effective and correct handling of the application process and for the contact during the application process. There is no transfer of data to third parties without your consent.
As part of the application form you will be asked to provide personal information. In doing so, we respect the principle of data minimization and data avoidance by providing us with only the data we need to fully review your application documents, such as: Your curriculum vitae (school report, training certificate, employment certificates) or for the collection of which we are legally obliged. These mandatory details are marked with a * (star). Due to technical necessity as well as legal security your IP address will be processed.
Unfortunately, we can not carry out an examination of your application documents without these data, so in this case our application system will not allow the upload of application documents. Of course you have the opportunity for voluntary information within the application form.
For online applications, we collect and process the following data:
- First name, last name
- Contact details
- Salary request, notice period
In order to best protect the security and confidentiality of your data, we implement appropriate security measures. Your application documents will be encrypted and transmitted to us via our application system.
We will store your data for the above purpose until the application process has been completed and deadlines have expired - no later than six months after receipt of a decision.
Your online application
Please note that we can only consider applications submitted via the online application portal. It is not possible to apply by e-mail or by post.
To fill in your profile or a job advertisement, you are asked to provide personal details such as CV, education, qualifications, professional qualifications and work experience.
We understand the importance of your personal information and will only use it to search for a suitable job within the company and for communication purposes such as job applications, job interview agreements, alternative areas of work and other applications related to the application, ie as part of the staff selection process , If your application is of interest to other business units of IMO Holding GmbH, your personal details may be forwarded to business units of IMO Holding GmbH and used by IMO Holding GmbH in accordance with instructions from them. This process has the goal of being able to process your application as expediently as possible, and is only carried out with your explicit consent, which you can revoke at any time.
IMO Holding GmbH will store your data for the above purpose until the application process has been completed and the relevant legal deadlines have expired - but no later than six months after receipt of a decision. Accordingly, IMO Holding GmbH will delete your data immediately after this deadline.
Data transfer to third parties, data security
Only with your consent, which can be revoked at any time, will the data provided by you be passed on to business units of IMO Holding GmbH. A transfer of personal data to third parties outside the IMO Group does not occur.
The website on which the application portal is located is provided by the company rexx systems GmbH, based in Hamburg (Germany). IMO Holding GmbH uses this company to assist with data processing; this is done in compliance with current laws. Both IMO Holding GmbH and rexx systems GmbH use technical and organizational security measures to protect your collected data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security measures are constantly being improved in line with technological developments. After entering and transferring your data, they are sent directly via an encrypted connection to the server of our external service provider, rexx systems GmbH. All data is encrypted based on the current TLS procedure.