Data Protection
ENERPIPE GmbH is pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. Therefore, we would like to inform you here about what personal data we collect when you visit our website and for what purposes it is used. This privacy policy applies to the Enerpipe website, which can be accessed under the domain www.enerpipe.de and its various subdomains ("our website").
Who is responsible and how can I contact you?
Responsible
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)
ENERPIPE GmbH, An der Autobahn M 1, 91161 Hilpoltstein, Tel.: 09174 9765070 E-Mail: info(at)enerpipe.de
Data protection officer
Datenschutz Pöllinger GmbH
Dresdner Straße 38
92318 Neumarkt
Tel.: 09181 - 2705770
E-Mail: datenschutz@datenschutz-poellinger.de
Our information obligations pursuant to Articles 13 and 14 of the GDPR can be found here:
What is this about?
This privacy policy fulfills the legal requirements for transparency in the processing of personal data. Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website. Information that we cannot link to you (or only with disproportionate effort), for example, through anonymization, is not considered personal data. The processing of personal data (e.g., collection, retrieval, use, storage, or transmission) always requires a legal basis and a defined purpose.
Stored personal data will be deleted as soon as the purpose of the processing has been fulfilled and there are no legitimate grounds for further retention of the data. We will inform you about the specific retention periods or criteria for storage in the individual processing operations. Regardless, in individual cases we store your personal data for the establishment, exercise or defense of legal claims and where there are statutory retention obligations.
Who receives my data?
We only share your personal data, which we process on our website, with third parties if this is necessary for fulfilling the purposes for which it was collected and is covered by a legal basis (e.g., consent or legitimate interests). Furthermore, we may share personal data with third parties in individual cases if this serves the establishment, exercise, or defense of legal claims. Potential recipients may include, for example, law enforcement agencies, lawyers, auditors, courts, etc.
If we use service providers for the operation of our website who process personal data on our behalf in accordance with Article 28 GDPR, these providers may be recipients of your personal data. You can find more detailed information on the use of data processors and web services in the overview of the individual processing operations.
Do you use cookies?
Cookies are small text files that we send to your browser during your visit to our website and store there. Alternatively, information can also be stored in your browser's local storage. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, however, allow us to perform various analyses, enabling us, for example, to recognize your browser when you revisit our website and to transmit various pieces of information to us (non-essential cookies). Other cookies, however, allow us to perform various analyses, enabling us, for example, to recognize your browser when you revisit our website and to transmit various pieces of information to us (non-essential cookies). Cookies help us, among other things, to make our website more user-friendly and effective by tracking your website usage and determining your preferred settings (e.g., country and language preferences). If third parties process information via cookies, they collect this information directly through your browser. Cookies do not harm your device. They cannot execute programs or contain viruses.
We provide information about the specific services for which we use cookies in the individual processing activities. Detailed information about the cookies used can be found in the cookie settings or the consent manager of this website.
What are my rights?
Under the conditions of the General Data Protection Regulation (GDPR), you, as a data subject, have the following rights:
- Access pursuant to Article 15 GDPR to the data stored about you in the form of meaningful information about the details of the processing, as well as a copy of your data.
- Rectification pursuant to Article 16 GDPR of inaccurate or incomplete data stored by us.
- Erasure pursuant to Article 17 GDPR of the data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
Restriction of processing pursuant to Article 18 GDPR, insofar as the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you object to its erasure because you require it for the establishment, exercise or defense of legal claims, or you have objected to the processing pursuant to Article 21 GDPR.
- Data portability pursuant to Article 20 GDPR, insofar as you have provided us with personal data within the framework of consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG or on the basis of a contract pursuant to Article 6(1)(b) GDPR and this data has been processed by us using automated means. You will receive your data in a structured, commonly used and machine-readable format, or we will transmit the data directly to another controller, insofar as this is technically feasible.
Objection pursuant to Article 21 GDPR to the processing of your personal data, insofar as this processing is based on Article 6(1)(e) or (f) GDPR and there are grounds relating to your particular situation, or the objection is directed against direct marketing. The right to object does not apply if overriding legitimate grounds for the processing are demonstrated, or if the processing is necessary for the establishment, exercise, or defense of legal claims. If the right to object does not apply to specific processing operations, this will be indicated there. - Withdrawal of your consent pursuant to Article 7(3) GDPR with effect for the future.
- Lodge a complaint pursuant to Article 77 GDPR with a supervisory authority if you believe that the processing of your personal data infringes the GDPR. You can usually contact the supervisory authority of your habitual residence, your place of work, or our company's registered office.
How exactly is my data processed?
Below, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data, and the respective storage period. No automated decision-making in individual cases, including profiling, takes place.
Provision of the Website
Type and Scope of Processing
When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which access was made (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider
Our website is not hosted by us, but by a service provider who processes data on our behalf for the aforementioned purposes in accordance with Article 28 GDPR.
Purpose and Legal Basis
The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring its security and stability, based on Article 6(1)(f) GDPR. The collection of this data and its storage in log files is essential for the operation of the website. There is no right to object to this processing due to the exception under Article 21(1) GDPR. Insofar as the further storage of log files is required by law, the processing is based on Article 6(1)(c) GDPR. There is no legal or contractual obligation to provide the data; however, accessing our website is technically impossible without providing this data.
Data Retention Period
The aforementioned data is stored for the duration of your visit to the website and, for technical reasons, for a maximum of 7 days thereafter.
Contact Form
Type and Scope of Processing
On our website, we offer you the opportunity to contact us via a provided form. The information collected via mandatory fields is required to process your request. You may also voluntarily provide additional information that you consider necessary for processing your contact request.
When using the contact form, your personal data will not be shared with third parties.
Purpose and Legal Basis
Your data is processed through the use of our contact form for the purpose of communication and processing your inquiry, based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. If your inquiry relates to an existing contractual relationship with us, processing is carried out for the purpose of fulfilling the contract, based on Art. 6 para. 1 lit. b GDPR. There is no legal or contractual obligation to provide your data; however, processing your inquiry is not possible without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us using other means.
Data Retention Period
If you use the contact form based on your consent, we will store the data collected for each inquiry for three years, starting from the date your inquiry is processed or until you withdraw your consent.
If you use the contact form within the context of a contractual relationship, we will store the data collected for each inquiry for three years from the end of the contractual relationship.
Contact Form for Applicants
Type and Scope of Processing
We collect and process the personal data of applicants. This data processing may also be carried out electronically, for example, when applicants submit application documents to us via email or a web form on our website. On our website, we offer you the option of submitting applications for advertised job openings to us via email.
Your data will only be stored in an applicant database beyond the current application process if you have given us your separate consent.
Purpose and Legal Basis
Your data is processed in connection with your application for the purpose of processing your application and deciding on the establishment of an employment relationship, based on Section 26 of the German Federal Data Protection Act (BDSG). If your application documents are shared with third parties, in particular with companies affiliated with us, and your data is stored beyond the current application process, your data is processed on the basis of Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR and Section 25 Paragraph 1 of the German Telemedia Act (TMG). There is no legal or contractual obligation to provide your data; however, processing your application is not possible without providing this information.
Storage Period
We store the collected data for a period of six months from the date the position is filled.
Newsletter
Type and Scope of Processing
If you subscribe to our newsletter on our website, we collect your email address and store this information along with the date of registration and your IP address. You will then receive an email in which you must confirm your newsletter subscription (double opt-in). The newsletter is sent by our service provider BREVO, with whom we have a data processing agreement in accordance with the GDPR.
Purpose and Legal Basis
We process your data for the purpose of sending the newsletter based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. You can withdraw your consent at any time with effect for the future by unsubscribing from the newsletter pursuant to Art. 7 para. 3 GDPR. There is no legal or contractual obligation to provide your data; however, sending the newsletter is not possible without providing your data.
Storage Period
After subscribing to the newsletter, we store the data for a maximum of 12 hours until you confirm your subscription. After successful confirmation, we will store your data until you withdraw your consent (unsubscribe from the newsletter) and for a maximum of 7 days beyond that for technical reasons.
YouTube Video
Type and Scope of Processing
We have integrated YouTube Video into our website. YouTube Video is a component of the video platform of YouTube, LLC, where users can upload content, share it over the internet, and receive detailed statistics.
YouTube Video allows us to integrate content from the platform into our website.
YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users, and create user profiles. This information is used, among other things, to analyze the activity of the content being listened to and to generate reports. If a user is registered with YouTube, LLC, YouTube Video can associate the videos played with their profile.
When you access this content, you establish a connection to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted.
Purpose and Legal Basis
The use of this service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. Data transfers to the USA are carried out in accordance with Art. 45 para. 1 GDPR on the basis of the European Commission's adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
In cases where no adequacy decision from the European Commission exists (including US companies not certified under the EU-U.S. Data Protection Framework), we have agreed upon other appropriate safeguards with the recipients of the data in accordance with Articles 44 et seq. of the GDPR. Unless otherwise stated, these are standard contractual clauses of the European Commission pursuant to Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE
Furthermore, before any such transfer to a third country, we obtain your consent in accordance with Article 49(1)(a) of the GDPR, which you grant via the consent form in the Consent Manager (or other forms, registrations, etc.). Please note that data transfers to third countries may involve risks that are not fully understood in detail (e.g., data processing by security authorities of the third country, the exact scope and consequences of which for you are unknown to us, over which we have no influence and of which you may not become aware).
Data Retention Period
The specific retention period of the processed data is not within our control, but is determined by YouTube, LLC. Further information can be found in the YouTube Video Privacy Policy: https://policies.google.com/privacy.