We are delighted that you are interested in our company. Data protection is particularly important to E-Works Mobility GmbH (hereinafter referred to as “E-Works” or “we”).
By means of this privacy policy, we would like to inform you as a visitor to our website about the type, scope and purpose of the personal data we collect, use and process and to inform you of your rights.
1. Name and address of the person responsible for processing
Responsible person within the meaning of the General Data Protection Regulation is:
HEERO by E-Works Mobility GmbH
v.d.d. Managing Director Dominik Ashkar
Bruckmairstraße 15
85737 Ismaning
Germany
+49 89 693 193 000
anfrage@eworks-mobility.de
We have appointed a data protection officer in our company. You can contact our data protection officer as follows:
Lawyer
Alma Lena Fritz
Riedener Strasse 8
81475 Munich
Germany
+49 173 327 55 75
alma@fritzlaw.de
2. What personal data do we collect when you visit our website?
It is generally possible to visit the E-Works Mobility GmbH website without providing personal data, unless you submit it to us electronically via a contact form on this website or otherwise.
We would like to point out that Internet-based data transmissions can generally have security gaps, meaning that absolute protection of the transmitted data cannot be guaranteed. For this reason, you are generally free to submit personal data to us by alternative means, for example by telephone or post.
When you visit our website, some data and information are stored in the server's log files. The (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and Information that serves to avert threats in the event of attacks on our information technology systems.
When processing this general data and information, we are generally unable to identify you unless you provide us with further information on a voluntary basis. Rather, the information mentioned above is required to (1) correctly deliver the content of our website, (2) to ensure the long-term functionality of our information technology systems and the technology of our website, and (3) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.
The data and information collected is also statistically evaluated by E-Works Mobility GmbH with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data we process.
If you identify yourself to us (e.g. by entering personal data in the contact form, this data will not be combined with the purposes mentioned above, but the anonymous data from the server log files will be stored separately from all personal data provided by a data subject. No data is stored together with the IP address or other personal data about you.
3. Cookies
So-called cookies are used on our website. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Many of the cookies we use are so-called “session cookies.” They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them or the storage period of the corresponding cookies expires. These cookies are only set on the basis of your express consent in accordance with Article 6 (1) (a) GDPR, which you can give us via the cookie banner. These cookies make it possible to recognize your browser the next time you visit, using our analysis tool Google Analytics, but not to identify you. You can find more information about the use of Google Analytics below.
You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be limited.
A general objection to the use of cookies used for online marketing purposes can be made on a variety of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/ can be explained. In addition, cookies can be saved by switching them off in the browser settings. Please note that you may then not be able to use all functions of this online offer.
To manage your consent to cookies, our website uses cookie consent technology from CookieScript, a service provided by Objectis Ltd., Laisves st. 60, LT-05120 Vilnius, Lithuania, to document your consent or refusal to store certain cookies on your device in a privacy-compliant manner. This processing is necessary to operate our website in compliance with data protection regulations. This processing is in line with our legitimate interests in accordance with Article 6 (1) (f) GDPR.
In particular, the CookieScript tool stores a cookie in your browser to recognize whether you have consented to the setting of cookies or have denied or withdrawn this consent. This cookie is technically necessary so that you can visit our website.
4. Use of Google services
4.a) Use of Google Analytics
This website uses features of the web analysis service Google Analytics from Google LLC., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The company Google Ireland Limited, Gordon House, Barrow Street 4, Ireland) is responsible for the European sector.
Google Analytics uses so-called “cookies” (see above in this regard). The information generated by the cookie about the use of this website by site visitors (including the abbreviated IP address) is usually transmitted to a Google server and stored there. Google Analytics uses a tracking code to create a random, unique ID that is associated with the cookie in your browser. This is how Google Analytics recognizes you as a new or returning user. The next time you visit our site, you will be recognized as a “returning user.” All collected data is stored together with this user ID. On behalf of the site operator, Google will use the resulting information to evaluate the use of the website, to compile reports on website activity and to provide the site operator with other services related to website activity and Internet usage (Art. 6 para. 1 lit. F GDPR).
The legitimate interest in data processing lies in optimizing this website, analyzing the use of the website and adapting the content. The interests of users are adequately protected by pseudonymization, in particular as they consent to the use of Google Analytics by accepting cookies. If you consent to the use of cookies, the legal basis for the corresponding processing of personal data is your express declaration of consent in accordance with Article 6 (1) a GDPR.
The following cookies are used by Google Analytics:
Name: _ga_cks5mnd38s
Purpose: Storage of the user ID; serves to distinguish website visitors.
Storage period: 1 year 1 month
Name: _ga
Purpose: Contains a randomly generated user ID. Based on this ID, Google Analytics can recognize returning users on this website and combine data from previous visits.
Storage period: 1 year 1 month
Data collection by Google Analytics can be prevented by the site visitor adjusting the cookie settings for this website. The collection and storage of the IP address and the data generated by cookies can also be objected to at any time with effect for the future. The corresponding browser plug-in can be downloaded and installed from the following link: https://tools.google.com/dlpage/gaoptout.
The site visitor can prevent Google Analytics from collecting data on this website by clicking on the following link. An opt-out cookie is set which prevents future collection of data when you visit this website (https://tools.google.com/dlpage/gaoptout).
Further information on the use of data by Google, settings and objection options can be found in Google's privacy policy (https://policies.google.com/privacy), as well as in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).
Google Analytics also transfers some personal data to the USA. The USA is not a safe third country within the meaning of European data protection laws, so personal data transferred to the USA is not subject to the same level of protection as in Europe. However, Google participates in the so-called Data Privacy Framework to ensure compliance with European data protection standards. Google LLC.'s participation in the EU-US Data Privacy Framework can be viewed here: https://www.dataprivacyframework.gov/list
You can find more information about data protection at Google LLC here: https://policies.google.com/privacy?hl=de.
4.b) Use of Google Adwords
We use the marketing and remarketing services (“Google Marketing Services” for short) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google marketing services allow us to display ads for and on our website in a more targeted manner in order to only present users with ads that potentially match their interests. For example, if users are shown ads for products they were interested in on other websites, this is referred to as “remarketing.” For these purposes, when you access our and other websites on which Google marketing services are active, Google directly executes a code from Google and integrates so-called (re) marketing tags (invisible graphics or code, also known as “web beacons”) into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com.
This file records which websites the user has visited, which content they are interested in and which offers they have clicked on, as well as technical information about the browser and operating system, referring websites, time of visit and further information on the use of the online offer.
The IP address of users is also collected, and as part of Google Analytics, we report that the IP address is abbreviated within member states of the European Union or in other states party to the Agreement on the European Economic Area and only in exceptional cases transmitted in its entirety to a Google server in the USA and abbreviated there. The IP address is not combined with user data within other Google offers. The above information may also be combined with such information from other sources. If the user then visits other websites, ads tailored to him can be shown according to his interests.
User data is processed pseudonymously as part of Google marketing services. This means that Google does not store and process the user's name or email address, for example, but processes the relevant data based on cookies within pseudonymous user profiles. In other words, from Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who that cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization.
The Google marketing services we use include the “Google AdWords” online advertising program. In the case of Google AdWords, every AdWords customer receives a different “conversion cookie.” These cookies can therefore not be traced via the websites of AdWords customers. The information collected using the cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.
The legal basis for processing your data is Art. 6 para. 1 sentence 1 lit. a GDPR, insofar as the processing of your personal data is based on a cookie. In addition, we have the right to effectively advertise our company, so that we base data processing on Article 6 (1) (f) GDPR. In doing so, we assume that your interests do not conflict.
4.c) Use of “DoubleClick”
We include third-party advertisements based on the Google marketing service “DoubleClick”. DoubleClick uses cookies to enable Google and its partner websites to display ads based on users' visits to this website or other websites on the Internet.
We also include third-party advertisements based on the Google marketing service “AdSense”. AdSense uses cookies, which enable Google and its partner websites to display ads based on users' visits to this website or other websites on the Internet. The information collected by “DoubleClick” about users is transmitted to Google and stored on Google's servers in the USA. Further information on data protection at Google can be found above under 4.a).
For more information on Google's use of data for marketing purposes, please visit the overview page: https://www.google.com/policies/technologies/ads/, Google's privacy policy is available at https://www.google.com/policies/privacy/.
The legal basis for processing your data is Article 6 (1) sentence 1 lit. a GDPR, namely your express consent to the setting of the corresponding cookie.
Storage period or deletion of data: If you would like to object to the collection by Google marketing services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences/
The following cookies are used by DoubleClick:
Name: gcl_AU
Purpose: This cookie is set by DoubleClick and contains information about how the end user uses the website, as well as advertising that the end user may have seen before visiting this website.
Storage period: 3 months
Name: IDE
Purpose: This cookie is set by DoubleClick and contains information about how the end user is using the website and about advertising that the end user may have seen before visiting that website.
Storage period: 1 year
4.d) Use of YouTube services
Our website also includes services from Youtube, a service provided by Google Ireland Limited (see address above). Insofar as cookies are set in this regard, the legal basis for processing your data is Art. 6 para. 1 sentence 1 lit. a GDPR, namely your express consent to the setting of the corresponding cookie.
The following cookies are set by Youtube:
Name: YSC
Purpose: This cookie registers a unique ID to be able to generate statistics of the YouTube videos that the user has seen.
Storage period: session
Name: VISITOR_PRIVACY_METADATA
Purpose: YouTube visitorprivacy metadata cookie
Storage period: 6 months
5. Using Hotjar
We use Hotjar, a technology tool from Hotjar Ltd, Dragonara Business Centre, 5th floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta to better understand our users' needs and optimize our website and your visit to our website (e.g. how much time they spend on which pages, which links they click on, what users like and dislike, etc.) and this allows us to build our service with user feedback and sustain.
Hotjar uses cookies and other technologies to collect data about the behavior of our users and their devices. This includes a device's IP address (processed during your session and stored in anonymized form), the device's screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language to display our website. Hotjar stores this information in a pseudonymized user profile on our behalf. Hotjar is contractually bound not to sell any of the data collected on our behalf. We have concluded an order processing agreement with Hotjar, which protects compliance with applicable data protection laws.
For more information about Hotjar's privacy policy, please visit: https://www.hotjar.com/de/datenschutz/
According to Hotjar and our contractual agreement, there is no transfer of personal data to countries outside the EU.
Hotjar uses the following cookies:
Name: HJSession_3666709
Purpose: Contains current session data. Ensures that subsequent requests in the session window are associated with the same session.
Storage time: 30 minutes
Name: _HJSessionUser_3666709
Purpose: Set when a user accesses a page for the first time. Ensures that data from subsequent visits to the same website is associated with the same user ID. User is not followed across other websites
Storage period: 1 year
6. Using Webflow
Webflow is a tool from Webflow, Inc., 398 11th Street, 2ndFloor, San Francisco, CA 94103, USA (hereinafter Webflow).
When you visit our website, Webflow collects various log files, including your IP addresses.
Webflow is a tool for building and hosting websites. Webflow stores cookies or other recognition technologies that are necessary to display the page, to provide certain website functions and to ensure security (necessary cookies).
Webflow is used on the basis of Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in presenting our website as reliably as possible and assume that you too, as a visitor to our website, have an interest in this presentation and that your data protection interests do not outweigh them.
Webflow also transfers personal data to the USA. The USA is not a safe third country within the meaning of European data protection laws, meaning that personal data transferred to the USA is not subject to the same level of protection as in Europe. However, Webflow Inc. participates in the EU-US Data Privacy Framework to ensure compliance with European data protection standards. Webflow Inc.'s participation in the EU-US Data Privacy Framework can be viewed here: https://www.dataprivacyframework.gov/list.
You can find more information about data protection at Webflow here: https://webflow.com/legal/eu-privacy-policy.
7. Apply via our integrated Personio application page
Applicants can submit their applications to us using an online form on our website. The data is only transmitted to us in encrypted form in accordance with the state of the art.
With regard to the processing of applicant data in our company, we work with Personio GmbH (Rundfunkplatz 4, 80335 Munich, Germany), which acts for us as part of order processing (hereinafter: AV) in accordance with Art 28 GDPR. We have concluded the necessary AV contract with Personio GmbH. Personio GmbH is contractually obliged to store personal data exclusively on ISO-certified servers in Germany.
Alternatively, applicants can send us their applications via email. In addition, applicants still have the option of sending us their application by post. As part of the application process, your data will be used by the HR department and other authorized persons, in particular by managers involved in the application process, within e-WorksMobility GmbH to check your suitability for the advertised position.
We legitimize the processing of personal data for your application in accordance with Art. 6 para. 1 b GDPR, in particular the implementation of pre-contractual measures that are based on your request (Art. 6 para. 1 lit. b) GDPR).
In the event of a successful application, the data provided by applicants will be further processed for the purposes of the employment relationship and will then be deleted after the deletion periods relevant to the employment relationship.
If an application is unsuccessful, it will be deleted after a period of six months so that we can answer any follow-up questions about the application and meet our reporting requirements under the General Equal Treatment Act (AGG). If an applicant withdraws their application, we will immediately delete the applicant's data. With regard to the processing of personal data in the application process, the separate data protection notice for applicants, which we will provide during the application process, applies.
8. Contact options via the website
We would be pleased if you contact us via e-mail or telephone using the contact details given in the legal notice. You can also contact us via our contact form on the website. The data transmitted to us in this regard is automatically stored and forwarded to the employees responsible for us, who will then contact you directly.
In this respect, personal data is processed to prepare a contractual relationship and, if applicable, to fulfill our obligations arising from contracts already concluded, Art 6 (1) (b) GDPR.
When you contact us via the website, we process your first and last name, e-mail address, telephone number, the company for which you are writing to us and any other personal data that you provide to us via the free text fields in the contact form.
9. Integration of social media platforms such as LinkedIn and Instagram
Social media platforms are integrated on our website under a simple link. Data transmission to the following social media platforms only takes place if you click on the corresponding link. On our website, we have included links to the offerings of the following companies:
Clicking on the icon instagram Establishes a direct connection to the services of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. For information on which data is collected and how it is used, please refer to the provider's privacy policy: https://help.instagram.com/
Clicking on the icon linkedin Establishes a direct connection to the services of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Pl, Grand Canal Dock, Dublin 2, Ireland. For information on which data is collected and how it is used, please refer to the provider's privacy policy: www.linkedin.com/legal/privacy-policy
Clicking on the icon YouTube or a video on our website creates a direct connection to the services of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. For more information about YouTube's privacy policy, please see their privacy policy at: https://policies.google.com/privacy?hl=de.
10. Routine deletion and blocking of personal data
In accordance with the respective storage purpose, we only store personal data for the period necessary to achieve the storage purpose. This results in particular from the storage and archiving periods applicable to us under commercial law.
11. Your rights as a data subject
As a data subject, you have certain rights with regard to your personal data, which we would like to explain as follows:
Right to information (Art. 15 GDPR) —Under the conditions set out in Article 15 GDPR, you have the right to receive confirmation from us as to whether personal data concerning you is being processed and, if so, access to the personal data and certain information about their processing. Please note that this right is subject to certain legal restrictions (in particular under § 34 BDSG).
Right of rectification (Art. 16 GDPR) —Under the conditions set out in Article 16 GDPR, you have the right to obtain from us the correction of inaccurate personal data and the completion of incomplete personal data relating to you.
Right to be forgotten (Art. 17 GDPR) — Under the conditions set out in Article 17 GDPR, you have the right to obtain from us the deletion of certain personal data about you, e.g. data that is no longer required for legitimate purposes (e.g. the establishment, exercise or defense of legal claims).
Right to restrict processing (Art. 18 GDPR) — Under the conditions set out in Article 18 GDPR, you have the right to obtain from us the restriction of the processing of certain personal data, such as data that you claim is incorrect.
Right to data portability (Art. 20 GDPR) — Under the conditions set out in Article 20 GDPR, you have the right to have personal data concerning you, which are processed automatically only on the basis of your consent, be forwarded by us to third parties in machine-readable format.
Right to object (Article 21 (1) GDPR) —Under the conditions set out in Article 21 GDPR, you have the right to object to certain processing of your personal data for reasons relating to your particular situation. In such a case, we cannot comply with your objection if there are compelling legitimate reasons for processing that override your interests, or if processing is necessary to establish, exercise or defend legal claims.
Right to object to direct marketing (Article 21 (2) GDPR) — You can object to further processing of personal data about you for direct marketing purposes at any time, with the result that we no longer process it for this purpose; this also applies to profiling insofar as it is associated with such direct marketing.
Automated decisions (Art. 22 GDPR) — Without your consent, we will not make any decisions that have legal effect on you or significantly affect you in a similar way and which are based exclusively on automated processing (including profiling).
Right to lodge a complaint
You have the right to complain to a supervisory authority. This may include the supervisory authority responsible for your place of residence or the supervisory authority generally responsible for us (Section 1.3.).
The data protection supervisory authority responsible for us is:
Bavarian State Office for Data Protection Supervision
Home address: Promenade 27 (castle)
P.O. Box: 606
91522 Ansbach
Germany
Accessibility of the data protection supervisory authority:
TELEPHONE NUMBER +49 981 53 1300
F +49 981 53 98 1300
poststelle@lda.bayern.de
If you would like to file a complaint, you can also use the complaint form available at https://www.lda.bayern.de/de/beschwerde.html.
To exercise your rights, in particular to withdraw any consent you may have given, you can contact us in any way, including using the contact details provided in the legal notice. In order to exercise your rights, it may be necessary for you to identify yourself to us as the person concerned.
12. Confidentiality and security of your personal information
We are committed to keeping the personal information provided to us safe and we have implemented appropriate information security policies, regulations, and technical measures to protect the personal information for which we are responsible from unauthorized access, improper use or disclosure, unauthorized alteration, and unlawful destruction or accidental loss. All of our partners, employees, consultants, workers and data processors (i.e. those who process your personal data on our behalf for the purposes set out above) with access to and responsibility for processing personal data are required to maintain the confidentiality of such personal data.
13. Questions about data protection
If you have any questions about data protection at E-Works Mobility, please feel free to ask them at datenschutz@eworks-mobility.de.
