Data protection declaration

Thank you for vis­it­ing our web­site. We are de­light­ed that you are in­ter­est­ed in our com­pa­ny and our prod­ucts / ser­vices. We take pro­tect­ing your per­son­al da­ta very se­ri­ous­ly, and we want you to feel se­cure with re­gard to the in­for­ma­tion you give us when you vis­it our web­site.

De­spite care­ful trans­la­tion, we shall not be held li­able for the ac­cu­ra­cy of the En­glish ver­sion of this web­site. In case of doubt, the Ger­man ver­sion shall pre­vail.

There­fore we would like to in­form you as be­low:

Personal information refers to all information that can be used to identify you personally. We process your personal information (e.g. form of address, first name, second name, postal address, e-mail address, phone number) only in accordance with the provisions of German data protection law and the European Union’s (EU) data protection law. The following is to inform you about the methods, scope and purpose of collecting, processing and using personal information.

We herewith advise you that the transmission of data via the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third party access.

The entity responsible for data protection according to the General Data Protection Regulation (controller) and other, national data protection regulations applicable in the member states as well as any other provisions concerning data protection law is:

Eckelmann FCS
Bodelschwinghstraße 20
32049 Herford, Germany
Phone +49 5221 966-0
Fax +49 5221 66347
E-Mail info-fcs@eckelmann.de
Website: www.ferrocontrol.de

datenschutz@ferrocontrol.de
Website: www.ferrocontrol.de

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Art. 21 GDPR

If the processing of personal data concerning you is carried out in order to safeguard our overriding legitimate interest based on art. 6 par. 1 f GDPR or in the public interest based on art. 6 par. 1 e GDPR, you have the right to object at any time to the processing of your personal information for reasons relating to your individual situation.

If you exercise your right of objection, we will cease to process the information concerned unless we can demonstrate that there are compelling legitimate grounds for processing overriding your interests, rights and freedoms or unless the processing serves the establishment, exercise or defense of legal claims.

If your personal information is processed for the purpose of direct advertising, you have the right to object to the processing of your personal information for such advertising at any time and without indication of reasons. This includes profiling if it takes place in the context of such direct advertising.

If you object to processing for purposes of direct advertising, your personal information will no longer be processed for those purposes.

For security reasons and in order to protect the transmission of personal information and other confident content (e.g. requests directed at the controller), this website uses SSL encryption or TLS encryption. Encrypted connections can be identified by the character sequence “https://” and the padlock icon in your browser’s address bar.

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

If you use our websites for information purposes only, we will collect the following information transmitted by your browser to our server (so-called server log files) in order to display our website correctly: information on the user’s browser type and version, operating system, internet service provider and IP address as well as the date and time of access, websites from which the user has accessed our website and websites accessed by the user via our website.

The web servers’ access logs track which pages were accessed at what time. They contain the following information: IP, directory protection user, date, time, pages accessed, logs, status code, data volume, referrer, user agent, host name accessed.

IP addresses are anonymized for storage by removing the final three digits, which means that 127.0.0.1 will become 127.0.0.*. IPv6 addresses will be anonymized as well. Anonymized IP addresses will be stored for 60 days. The information on the directory protection user used will be anonymized after one day.

Error logs tracking page access errors will be deleted after seven days. Beside the error messages, they contain the accessing IP address and, depending on the error, the website accessed.

The legal basis for processing information is art. 6, par. 1f, of the GDPR, pertaining to our legitimate interest in improving our website’s stability and functionality. Information will not be passed on to other parties or used for any other purpose.

This website uses cookies that are a technical requirement. These are small text files saved temporarily in or by your internet browser to your computer system for purposes of website functionality only. Other cookies are persistent and used to recognize your browser on your next visit to improve the website’s usability. The legal basis for processing information is art. 6, par. 1f, of the GDPR, pertaining to our legitimate interest in our website’s functionality and usability.

The technically required cookies will usually be deleted once the browser is closed. Persistent cookies have lifespans varying from several minutes to several years.

You can set up your browser to inform you when cookies are saved, authorize cookies on a case-by-case basis, prevent the saving of cookies in specific cases or in general and activate automatic cookie deletion on closing the browser. Cookie management varies across browsers. Please note that our website’s functionally may be impaired if cookies are not accepted.

The saving of other cookies (e.g. cookies designed to analyze your surfing behavior) is regulated separately in this privacy statement.

If you contact us (e.g. by contact form or e-mail), personal information will be collected. What information is collected is clear from the contact form used. That information is only stored and used for the purpose of responding to your request, that is for establishing contact and performing the technical administration required for that purpose. The legal basis for processing data is our legitimate interest in responding to your request in accordance with art. 6, par. 1f, of the GDPR. If your contacting us has the object of concluding a contract, this constitutes an additional legal basis for processing under art. 6, par. 1b, of the GDPR or on your agreement art. 6, par. 1a GDPR if this has been requested. The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without
prejudice to any mandatory legal provisions – in particular retention periods.

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent.

These data are processed on the basis of Art. 6 Sect. 1 lit. b GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6 Sect. 1 lit. f GDPR) or on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR) if it has been obtained.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

We offer website visitors the opportunity to submit job applications to us (e.g. via e-mail, via postal services). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential.

If you submit a job application to us, we will process any affiliated personal data (e.g. contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 New GDPR according to German Law (Negotiation of an Employment Relationship), Art. 6 Sect. 1 lit. b GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6 Sect. 1 lit. a GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application.

If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 New GDPR and Art. 6 Sect. 1 lit. b GDPR for the purpose of implementing the employment relationship in our data processing system.

If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your agreement (Article 6 para.1 lit. a GDPR) or if statutory data retention requirements preclude the deletion.

If we do not make you a job offer, you may be able to join our applicant pool. In case of admission, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.

Admission to the applicant pool is based exclusively on your express agreement (Art. 6 para. 1 lit. a GDPR). The submission agreement is voluntary and has no relation to the ongoing application procedure. The affected person can revoke his agreement at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no legal reasons for storage.

The data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted.

This website uses so-called Web Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established inconjunction with this application.

For more information on Google Web Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

If your personal information is processed, you are a data subject according to the GDPR and have the following rights vis-à-vis the controller:

Right of access in accordance with art. 15 of the GDPR: You have the right of access to the personal information processed by us as well as the purpose of processing, the categories of personal information processed, the recipients or recipient categories your information is or has been disclosed to, the planned storage period or the criteria for determining the storage period, to the existence of a right to rectification, erasure, restriction of processing, objection to processing and lodging a complaint with a supervisory authority, to the source of your personal information if it was not collected by us, to information on the existence of automated decision-making, including profiling, and, where applicable, meaningful information on the logic involved and the intended consequences of such processing as well as to information on your right of access to information on what safeguards exist pursuant to art. 46 of the GDPR relating to the passing on of your information to a third country.

Right to rectification in accordance with art. 16 of the GDPR: You have the right to rectification of your personal information if it is incorrect and/or incomplete.

Right to erasure in accordance with art. 17 of the GDPR: You have the right to have your personal information deleted if one of the conditions of art. 17, par. 1, of the GDPR is met. However, this right does not apply if processing is required for the exercise of the right of freedom of expression or information, for fulfilling legal obligations, for reasons of public interest or for the establishment, exercise or defense of legal claims.

Right to restriction of processing in accordance with art. 18 of the GDPR: You have the right to have the processing of your personal information restricted for the period during which they are being verified if you demand, instead of their deletion, a restriction of the processing of your information due to inadmissible data processing, if we no longer require your information for processing purposes but you require them for establishing, exercising or defending legal claims or if you have objected to processing and no final determination has been reached whether our legitimate grounds override yours.

Right to notification in accordance with art. 19 of the GDPR: If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the controller, they have an obligation to notify all recipients to whom your personal information has been disclosed of that rectification, erasure or restriction of processing of data unless this proves impossible or requires unreasonable effort. You are entitled to be informed about the recipients.

Right to data portability in accordance with art. 20 of the GDPR: You have the right to obtain or have transferred to another controller the personal information you have provided in a structured, commonly used and machine-readable format, wherever technically feasible.

Right to withdraw consent in accordance with art. 7, par. 3, of the GDPR: You have the right to withdraw your consent to data processing, once given, at any time with effect for the future. If you withdraw it, we will delete the information concerned immediately unless there is a legal basis for further processing without consent. Withdrawing your consent does not affect the lawfulness of any processing having taken place with consent prior to withdrawal.

Right to lodge a complaint in accordance with art. 77 of the GDPR: Irrespective of other administrative or judicial remedies, you are entitled to lodge a complaint with a supervisory authority, particularly in the member state where you reside, work or where the alleged violation has taken place if you deem the processing of your personal information to violate the GDPR.

The supervisory authority with which the complaint is lodged will inform the complainant of the status and the outcome of the complaint including the option of judicial remedies in accordance with art. 78 of the GDPR.

How long personal information will be stored depends on the applicable legal retention period (e.g. retention periods under commercial and fiscal law). Once the period expires, the information concerned will be routinely deleted wherever it is no longer required for contract fulfilment or initiation and/or there is no longer any continued legitimate interest on our part for retention.