SMA Development GmbH strives to protect and respect your privacy. With this data protection information, we would like to inform you on which basis and for which purposes we process personal data that we have collected from you or that you have made available to us.
Who is responsible for data processing and to whom can I contact?
The responsible party in the lines of the General Data Protection Regulation (GDPR):
SMA Development GmbH
07743 Jena, Germany
You can contact our data protection officer at the above contact details or by e-mail: firstname.lastname@example.org
What is personal data?
Personal data are all information relating to an identified or identifiable natural person. Identifiable is a natural person who can be identified directly or indirectly, in particular by assigning him/her to an identifier such as a name, customer number, location data, an online identifier or with regard to special characteristics.
Which information do we collect?
Data, which you communicate to us within for general inquiries
For inquiries addressed to us, we process your name, contact data (e.g. telephone number, e-mail address) and all other information that you provide when completing forms or other data fields on our website. This includes information you provide when you: Submit a request for a specific product or ask a question or give us feedback.
Data you communicate to us with the sending of online application documents
When we receive application documents electronically, for example by e-mail or via a web form on our website, we process the personal data of the applicant for the purpose of processing the application procedure.
Within SMA Development GmbH, only those staff members will have access to your data who need these data to process your application. Service providers contracted by us may also receive data for these purposes if they maintain data secrecy and, among other things, commit themselves to comply with our instructions under data protection law in writing.
General data that we collect when you use this website
When you visit our website, a number of general data is collected and stored in log files. We may record the types and versions of browsers used, the operating system used by the accessing system, the website from which an accessing system accesses our website (so-called referers), the resources you access, the date and time of access to the website, an Internet Protocol address (IP address), the Internet service provider of the accessing system and other comparable data and information that enable us to prevent security hazards and breaches in the event of attacks on our website.
When using this general data we do not draw any conclusions about the person involved. Rather, this data is required to correctly deliver the contents of our website, to optimize the presentation of the contents of our website, to ensure the long-term functionality of our website and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack.
These pseudonymously collected data are evaluated by us statistically, on the one hand, and on the other hand with the aim of increasing data protection and data security, in order to ensure an adequate level of protection for the personal data processed by us. The pseudonymous data of the server log files are stored separately from all personal data provided by a person involved.
Data we collect for website-usage-analysis and improvement using cookies or similar analysis tools
Many cookies contain a so-called cookie ID, a unique identifier. It consists of a string of characters through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. In addition, your anonymized IP address, information about your operating system, Internet browser and other device details, such as resolution used, are also collected. This enables the visited websites to distinguish the individual browser of an individual user from other Internet browsers that contain other cookies. The purpose of this recognition is to provide users of this website with more user-friendly services that would not be possible without cookies.
By using a cookie, the information and offers on our website can be optimized to the user’s benefit, also to make it easier for users to use our website. Cookies are also used to place advertisements.
Change cookie settings:Change cookie settings here
Google Tag Manager
We use the Google Tag Manager. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Using the Google Tag Manager, we can integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. However, the Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the United States. The use of the Google Tag Manager is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in a quick and uncomplicated integration and management of various tools on his website. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.
We also use Google Analytics, a web analysis service provided by Google Inc. “(“Google”), which enables an anonymous analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
However, Google will previously shorten your IP address within member countries of the European Union or in other countries that are signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of SMA Development GmbH, to evaluate your use of the website, to compile reports on website activities and to provide other services relating to website and internet use to the website operator. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
In addition to the steps described above, you can also ask Google to prevent Google from processing this data. Download and install the browser plugin available with the following link http://tools.google.com/dlpage/gaoptout?hl=de.
Please note that on this website, Google Analytics has been extended by the code “anonymizeIp” to enable anonymous collection of IP addresses (so-called IP masking).
epicinsights Predictive Analytics
Integration of YouTube videos
We have embedded YouTube videos in our online content, which are stored on https://www.youtube.com and can be played directly from our website. This is done within the bounds of a legitimate interest according to Art. 6 para. 1 p. 1 GDPR, namely the appealing design of our website. We have no influence on this data transfer.
By visiting our website, YouTube receives the information that you have accessed the corresponding sub-page of our website. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in at Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to execute this right.
Where do we store your personal data?
By using this website, data will also be transmitted to countries outside the European Economic Area (“EEA”) within the framework of the data processing specified, unless you opt out. For these countries, the EU Commission has not passed an appropriate resolution to the effect that there are no data protection regulations comparable to those of the EU (so-called third countries).
The companies named above are certified under the EU-US privacy shield; standard contractual clauses also apply and guarantee the persons concerned an appropriate level of data protection, in particular legally binding and enforceable rights.
All other data processing takes place exclusively in the EU using contractually bound service providers acting on our behalf.
How long do we store your data?
SMA Development GmbH processes and stores personal data of the person concerned only as long as this is necessary to fulfil the purpose or as far as this is legally required.
If SMA Development GmbH concludes an employment contract with the applicant, the transmitted data will be stored at SMA Development GmbH for the purpose of processing the employment relationship in compliance with the statutory provisions, otherwise the application documents will be deleted five months (at the latest) after the announcement of the rejection decision, unless any other legitimate interests of the data processor stand in the way of deletion. Another legitimate interest in this sense is, for example, a duty of proof in proceedings under the General Act on Equal Treatment.
Also, retention periods under commercial and tax law may prevent deletion. The defined periods for storage and documentation are up to ten years. If the purpose of storage is not fulfilled or if a legally prescribed storage period expires, the personal data is routinely restricted or deleted in accordance with the statutory provisions, unless this is used as evidence.
On what legal basis do we process your data?
We process the aforementioned personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG):
On the decision on the establishment of an employment relationship (Article 6 para. 1 lit. b GDPR in conjunction with § 26 BDSG)
We process the data that you have sent us in connection with your application in order to check your qualification for the position (or any other open positions in our company) and to carry out the application procedure in accordance with § 26 BDSG.
In the context of balancing interests (Article 6 para. 1 f GDPR)
If necessary, we process your data to protect the legitimate interests of us or third parties, provided you have not objected to the use of your data, for:
Monitoring the success of our advertising campaign, also to improve the effectiveness of our marketing efforts and to make the success of our sales organization measurable;
Statistical analyses of the use of our website, to design the website to suit your interests and to ensure that the content of our website is displayed in the best possible way for you and your computer;
Enforcement of legal claims and defense in legal disputes;
Ensuring IT security, data protection control and data security;
Prosecution of criminal offences;
Providing you with information about our products, services, offers or technical developments (direct marketing) which you, as our customer, request from us or which we believe may be of interest to you, to the extent permitted by law;
To store certain personal information when you purchase a service or have indicated a preference for marketing communications or other correspondence, e.g. to process follow-up requests, to improve our service;
On the basis of your agreement (Article 6 para. 1 a GDPR)
Insofar as you have given us consent to process your personal data for certain purposes (e.g. processing enquiries via contact form), the lawfulness of this processing is based on your consent.
The newsletter is sent using Sendinblue. The data processing is carried out by:
Köpenicker Straße 126
For sending the newsletter, we use the so-called double opt-in procedure, i.e. we will only send you a newsletter by e-mail if you have previously expressly confirmed that you wish to receive our newsletter. You will then receive a notification e-mail from us asking you to confirm that you would like to receive our newsletter by clicking on the link contained in the e-mail. Of course, you can also use the unsubscribe link in each newsletter to cancel your subscription. We store the data you have provided for subscribing to the newsletter until you unsubscribe. After unsubscribing from the newsletter, Sendinblue deletes the data from its servers. If we have stored data from you for other purposes – e.g. e-mail addresses for the processing of contracts – these remain unaffected by this.
The legal basis for data processing within the scope of the newsletter is your consent in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke this consent at any time. To do so, you only need to unsubscribe from the newsletter. You will find a corresponding unsubscribe link in the respective newsletter or on the website. A simple e-mail to us is also sufficient to revoke your consent. The legality of the data processing operations already carried out until the revocation remains unaffected by the revocation. The same applies if you do not want any analysis. In this case, you must unsubscribe from the newsletter. For this, too, it is sufficient to click on the link in the respective message, send us a short e-mail, or unsubscribe via the website. The unsubscribe e-mail can be sent to any of our e-mail addresses and to: email@example.com
We also use your personal data on the basis of your consent for direct marketing purposes or to obtain your opinion on our products and services, which may be used for marketing, research and analysis purposes, provided you have consented to be contacted for such purposes.
Is automated decision making used?
In principle, we do not use fully automated decision making according to Article 22 GDPR. If we use these procedures in specific cases, we will inform you separately, insofar as this is required by law.
Is the provision of personal data required by law or contract?
You are not obliged to provide us with the aforementioned personal data via the website.
Your rights as a data subject
Any person affected by our personal data processing shall have the right of access (Article 15 GDPR), the right to correction (Article 16 GDPR), the right to cancellation (Article 17 GDPR), the right to limitation of processing (Article 18 GDPR), the right of contradiction (Article 21 GDPR) and the right to transfer data (Article 20 GDPR). The restrictions according to §§ 34 and 35 BDSG apply to the right to information and the right of cancellation. In addition, there is a right of appeal to a data protection supervisory authority pursuant to Article 77 GDPR in conjunction with § 19 BDSG.
Information on your right of objection under Article 21 GDPR
Right of objection on a case-by-case basis
You have the right to object at any time for reasons arising from your particular situation to the processing of personal data concerning you, which is based on Article 6 para. 1 f GDPR (data processing on the basis of a balance of interests); this also applies, where applicable, to profiling based on this provision within the meaning of Article 4 para. 4 GDPR.
We also process your personal data in individual cases in order to carry out direct advertising. You also have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.
If you object, we will no longer process your personal data, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If you object to the processing for direct advertising purposes, we will no longer process your personal data for these purposes. In the case of direct advertising by e-mail, you can cancel their delivery at any time without incurring any costs other than the transmission costs according to the basic rates. A message in text form to the contact data (e.g. e-mail, fax, letter) is sufficient for this.
Revocation of consents given
The affected person can revoke the consent given to us at any time. This also applies to the withdrawal of declarations of consent issued to us prior to the validity of the EU Data Protection Basic Regulation, i.e. before 25 May 2018. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
Perception of objection or revocation of consent given
The objection can be made form-free and can be addressed to us by telephone, for example:
by clicking the Unsubscribe button at the bottom of an email message (newsletter);
by using our contact form;
by written notice to:
SMA Development GmbH
07743 Jena, Germany
by telephone under the phone number Tel +49 3641 316 99 76
or by e-mail at firstname.lastname@example.org
Please contact the data protection officer directly with regard to your data protection rights.
Links to third party websites
Notifications of change