Polityka Prywatności

We appreciate your interest in our website megatech-industries.com. The protection of personal data is of great importance to us. The processing of your personal data by MEGATECH is carried out on a legal basis and - if necessary - on the basis of your consent. The most important legal basis is as of 25 May 2018 the so called UE General Data Protection Regulation (GDPR).

In the following we would like to inform you about the processing of your personal data when you visit our website megatech-industries.com.

  1. 1. Controller

    The Controller within the meaning of article 4 no. 7 GPDR for data processing on this website is:

    MEGATECH INDUSTRIES AKTIENGESELLSCHAFT
    Gewerbeweg 15
    9490 Vaduz
    Fürstentum Liechtenstein
    Phone: +43 1 236 70 38 29
    E-Mail: info.at@mgtindustries.com
    Internet: https://www.megatech-industries.com/

  2. 2. Data protection officer

    Our data protection officer can be reached via the following contact details:

    MEGATECH INDUSTRIES AKTIENGESELLSCHAFT
    Data Protection Officer
    Gewerbeweg 15
    9490 Vaduz
    Fürstentum Liechtenstein
    E-Mail: dataprotection@mgtindustries.com

  3. 3. Surfing on megatech-industries.com

    • For what purposes do we process your data?

      When you visit our website, your browser contacts our web server to retrieve the pages you require. In principle, you do not have to register or identify yourself for this function. However, the allocation of requests and feedback from our server is based on your IP address which may be used to establish a reference to your person.

      In detail, personal data such as your IP address is transmitted to our web server as part of an HTTP/S request. These connection data is processed by our web server to enable access to the website. If necessary, the form data that you enter is processed as well.

      In addition, the respective HTTP/S calls are logged in a log file. We use this for technical troubleshooting and to be able to ward off and clarify attacks on our systems. In addition, we use the already stored log files to create evaluations that we use to optimize our websites. The evaluation as such takes place in an anonymous form, i.e. by combining call data, so that the results no longer have any personal reference.

    • On what legal basis do we process your data?

      The legal basis of any processing of your data depends on the specific purpose of your visit:

      • If you visit our website to initiate contracts or business relations with us, the legal basis for the processing of your data is the article 6 paragraph 1 point (b) GDPR (initiation or execution of a contract).
      • The processing is also generally carried out on the basis of our legitimate interests in accordance with the article 6 paragraph 1 point (f) GDPR. Our legitimate interest is to operate a website for general information and communication purposes and to present our company.

      The processing of log files is carried out on the basis of our legitimate interests in accordance with the article 6 paragraph 1 point (f) GDPR. Our legitimate interest is to protect our facilities and systems from attacks and, if necessary, to take legal action against attackers and to further develop our websites for commercial purposes.

    • Is there an obligation for you to provide your data and what happens if you decide against it?

      It is not possible to use the website or any forms on it without processing your connection data and any form data.

    • Who will receive your data or who is involved in the processing of my data?

      In principle, the processing is fully automatic. Our website is maintained by servers of PION Websystems GmbH (Loquaipl. 12, 1060 Vienna, Austria), which acts on our behalf (Article 28 GDPR) as a service provider for hosting services. Our IT Department has access to the log files. These are used by the responsible internal departments for the above-mentioned purposes and, if necessary, also transmitted to external recipients (in particular law enforcement authorities for the prosecution of attacks).

    • How long will your data be stored?

      The log file data is stored for 24 days. All other data is deleted immediately after the HTTP/S call is executed.

  4. 4. Contact form, communication per e-mail

    • For what purposes do we process your data?

      On our website we offer you the possibility to contact us by e-mail and/or via a contact form. In this case, the information provided by you will be stored for the purpose of processing the contact and for any queries. If you contact us with a request or we contact you, we will of course also process your personal data such as name, address, telephone number and the contents of the communication for the purpose of carrying out the exchange with you.

    • On what legal basis do we process your data?

      The processing of your data in the context of the communication via the contact form or by e-mail is carried out on the basis of the article 6 paragraph1 point (b) GDPR, insofar as the exchange is connected with the initiation or fulfilment of a contract with you.

      Furthermore, the legal basis depends on the specific purpose of the exchange, in most cases the article 6 paragraph 1 point (f) GDPR (our legitimate interest to conduct business correspondence or e.g. to answer questions on data protection) will be relevant.

    • Is there an obligation for you to provide your data and what happens if you decide against it?

      You are not obliged to provide your data. However, communication by e-mail or via the contact form is not possible without processing your personal data.

    • Who will receive your data or who is involved in the processing of my data?

      Internally, we only pass on your data to the department responsible for your request. If necessary, we may also forward your data to other companies in the MEGATECH Group.

    • How long will your data be stored?

      Your personal data will be deleted as far as this is no longer necessary for the exchange with you. The data may be kept for longer on the basis of the article 6 paragraph 1 point (c) GDPR in conjunction with the relevant statutory retention periods (in particular in accordance with commercial, tax and duty law). This is usually the case for business correspondence six years after the end of the year in which it was received.

  5. 5. Use of Google Analytics and Cookies

    5.1. Data processing

    • For what purposes do we process your data?

      We use the service “Google Analytics", a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This enables a data traffic analysis for our website (web analysis). This helps us to constantly improve the information and the structure of our website. With the help of Google Analytics we can evaluate for example which paragraphs and sub-pages of our website are visited how often and for how long and from which other websites users find us.

      We use cookies and similar technologies to use the Google Analytics service. A cookie is a small text file consisting of letters and numbers that is stored on your device when you visit a website. A cookie contains information that is stored on your computer or mobile device when you visit this website for the duration of your visit (so-called session cookies) or for a longer period (so-called permanent cookies). When surfing the website, our system or any other web page that recognizes this cookie may request this information. This allows to distinguish your device from other visitors' devices while browsing the website.

      For the Google Analytics service, the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) processes various usage data of users of our website on our behalf (e.g. in addition to the above also which pages you access on megatech-industries.com, how long you visit these pages, how often you visit our site again) and assigns these to an anonymous identification number. In addition, certain information stored in the _utmz cookie of the operator of the website from which you came to us (in particular URL of the previous page, or related search engine, or related search terms, where applicable), may be processed. Non-personalized analyses of the use of our website are created from this usage data.

    • On what legal basis do we process your data?

      The processing is carried out on the basis of the article 6 paragraph 1 point (f) GDPR. The processing serves the legitimate interest of our users to receive the best possible user experience. It also serves our legitimate business interests to optimize our website, to further improve its range, usability and content, and ultimately to promote our business.

      Google IP Anonymization
      Furthermore, we only use Google Analytics on our website with activated IP anonymisation. As a result, your IP address is shortened by Google within the member states of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and only shortened there. Furthermore, we have concluded a contract with Google for commissioned data processing. Google processes this data on our behalf and thereby enables us to evaluate the use of the website by the users, to create reports on the website activities and to collect further information connected with the use of the website and the internet. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other Google data.

    • Is there an obligation for you to provide your data and what happens if you decide against it?

      There is no obligation to make your usage data available for the above-mentioned purposes. You can also use the functions of the website if you decide not to do so.

      You can object to the use of your personal data by installing the Google Analytics "opt-out" browser plug-in (see 5.2).

    • Who will receive your data or who is involved in the processing of my data?

      The usage data is passed on to Google and processed there by automated means on our behalf. In principle, the evaluation possibilities of MEGATECH are only used internally by our IT and Online Marketing Department.

    • Will your data be transferred to a third country or an international organisation?

      The usage data is transmitted to servers of Google in the United States of America in individual cases. Google is certified according to the UE-US Privacy Shield, which ensures an adequate level of data protection.

    • How long will your data be stored?

      Your usage data will be stored by us for 18 months and then automatically deleted.

    5.2. Use of cookies

    In the context of the use of Google Analytics the following cookies are used:

    Used cookies
    Name Type Purpose/content Expiry after
    _utma Permanent This cookie logs how often a user visits our site, when the first and when the last visit was. Google Analytics uses this cookie to calculate user statistics. 2 years
    _utmb
    _utmc    		 Session These cookies work together to calculate how long a visit lasts. _utmb records when a user enters a page. _utmc records when a user leaves the page and runs at the end of each session. 30 minutes
    _utmz Permanent This cookie contains information from which pages and which parts of the world users come to our site, or which search engine and which search terms were used where applicable. 6 months
    _utmv Permanent This cookie contains user-defined information and allows us to better group visitors. 2 years after the last visit
    _ga Permanent This cookie allows us to distinguish between our users. 2 years after the last visit
    _gat Permanent This cookie is used to reduce the query rate and thus improve the performance of the website. after 10 minutes
    _gid Permanent This cookie allows us to distinguish between our users. 24 hours

    Legal information

    • Withdrawal of consent/right to object

      You have various options for preventing the storage of cookies and/or data processing by Google Analytics:

      • You can make a setting in your browser that prevents cookies from being set by our website. However, in individual cases this may also affect other functions (e.g. online shop).
      • You can download and install the “Opt-Out“ add-on for your browser from Google. Opt-out cookies prevent the future collection of your data when visiting this and other websites. To prevent collection across different devices, you must install the Opt-Out Add-On on all systems you use.
      • If you click here, our site will set an opt-out cookie and no further collection of data or storage of cookies will take place. Please note: if you have deleted your browser's cookies, you will need to opt-out again.

      Further information on the handling of user data at Google Analytics can be found in the Google data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de

  6. 6. Use of Google Maps

    • Who is the controller for the Google Maps map service?

      We use the map service "Google Maps" on our website. We have marked the location of MEGATECH INDUSTRIES AKTIENGESELLSCHAFT on Google Maps and embedded this map on our website under "Contact". The company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland is the data controller. We do not have access to the data collected by Google as part of the map service. All data processing is determined solely by Google.

      In the interest of maximum transparency, however, we would like to provide you with some information on data processing in connection with the Google Maps map service.

      You can find further information in the Google data protection declaration (available at policies.google.com/privacy).

    • For what purposes map service Google Maps used?

      We have marked the location of MEGATECH INDUSTRIES AKTIENGESELLSCHAFT on Google Maps and embedded this map on our website under "Contact" to enable visitors to find the location quickly and make our website attractive.

    • On what legal basis do we process your data?

      From MEGATECH's point of view, the processing of your personal data in connection with the Google Maps map service serves legitimate interests pursuant to the article 6 paragraph 1 point (f) GDPR. Our legitimate interest is to optimize our website to promote our business purposes, and to enable visitors to quickly find the location of MEGATECH INDUSTRIES AKTIENGESELLSCHAFT. For more information on the legal basis for processing your personal data, please see Google's Privacy Policy (available at policies.google.com/privacy).

    • Is there an obligation for you to provide your data and what happens if you decide against it?

      You are not obliged to provide your data. Without processing your personal data, however, the use of our website megatech-industries.com and the map service embedded on the website Google Maps is not possible.

    • Who will receive your data or who is involved in the processing of my data?

      We do not have access to your personal data in connection with the Google Maps map service and do not share information with third parties. For more information about how Google, as the data controller, shares your personal information, please see Google's privacy policy (available at policies.google.com/privacy).

    • Will your data be transferred to a third country or an international organisation?

      We do not transfer your personal data to a third country or international organisation in connection with the Google Maps map service. If the Google Maps map service connects to Google servers as controller and your personal data is transmitted for this purpose, you will receive further information in the Google’s Privacy Policy policies.google.com/privacy).

    • How long will your data be stored?

      We do not transfer your personal data to a third country or international organisation in connection with the Google Maps map service. If the Google Maps map service connects to Google servers as controller and your personal data is transmitted for this purpose, you will receive further information in the Google’s Privacy Policy (available at policies.google.com/privacy).

  7. 7. Use of the service of LINKEDIN

    • Who is the controller for the service Linkedln?

      We use the service of LinkedIn on our website. The LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Pl, Grand Canal Dock, Dublin 2, Ireland) is responsible for data protection. We do not have access to the information collected by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Pl, Grand Canal Dock, Dublin 2, Ireland in the course of using the LinkedIn service. Any data processing is solely determined by LinkedIn.

      In the interest of maximum transparency, however, we would like to provide you with some information on data processing in connection with the Linkedln service.

      For more information, please see LinkedIn privacy policy (available at linkedin.com/legal/privacy-policy).

    • For what purposes is the LinkedIn service used?

      We use the LinkedIn service on our website to make our site attractive by providing a quick link to the LinkedIn social network. We also use it to promote MEGATECH's presence on LinkedIn, which we use for business contacts with potential and existing customers and employees.

    • On what legal basis do we process your data?

      From MEGATECH's point of view, the processing of your personal data in connection with the LinkedIn service serves legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR. Our legitimate interest is to optimise our website to promote our business purposes and to strengthen our presence in the LinkedIn social network.

      For further information on the legal basis for the processing of your personal data, please refer to the privacy policy of LinkedIn as the responsible party (available at linkedin.com/legal/privacy-policy).

    • Is there an obligation for you to provide your data and what happens if you decide against it?

      You are not obliged to provide your personal data. However, it is not possible to use our website megatech-industries.com without processing your personal data.

    • Who will receive your data or who is involved in the processing of my data?

      We do not have access to your personal information in connection with LinkedIn service and we do not share information with third parties.

      For more information on the sharing of your personal information with LinkedIn as controller please see LinkedIn’s Privacy Policy (available at linkedin.com/legal/privacy-policy).

    • Will your data be transferred to a third country or an international organisation?

      We do not transfer your personal information to any third country or international organization in connection with the LinkedIn service.

      If the Social Media Plugin connects to LinkedIn’s servers as controller and your personal data is transmitted for this purpose, you will receive further information in the LinkedIn’s Privacy Policy (available at linkedin.com/legal/privacy-policy).

    • How long will your data be stored?

      For more information about LinkedIn's storage of your personal data as controller, please refer to the LinkedIn’s Privacy Policy (available at linkedin.com/legal/privacy-policy).

  8. 8. Use of the service of Instagram

    • Who is controller for the Instagram service?

      We use the instagram service on our website , a service of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland, on our website.

      You have the ability, when logged into Instagram, to link the content of our website to your Instagram account by clicking the Instagram button. If you are logged into your Instagram account, you give Instagram the ability to associate your surfing behavior directly with your personal profile.

      For more information, please refer to Instagram's privacy policy: linkedin.com/legal/privacy-policy.

    • For which purposes is the Intagram service used?

      We use the Instagram service on our website to make our site attractive by providing a quick link to Instagram's social network. We also use it to promote MEGATECH's presence on Instagram, which we use for business contacts with potential and existing customers and employees.

    • On what legal basis do we process your data?

      From MEGATECH's point of view, the processing of your personal data in connection with the Instagram service serves legitimate interests in accordance with Art. 6 para. 1 lit. f GPDR. Our legitimate interest is to optimise our website and to strengthen our presence in the Instagram social network.

    • Is there an obligation for you to provide your data and what happens if you decide against it?

      You are not obliged to provide your personal data. However, it is not possible to use our website megatech-industries.com without processing your personal data.

    • Who will receive your data or who is involved in the processing of my data?

      We will not transfer your personal information to any third country or international organization in connection with the Instagram service.

    • How long will your data be stored?

      For more information about Instagram's storage of your personal information, please refer to Instagram's Privacy Policy (available at linkedin.com/legal/privacy-policy).

  9. 9. Use of the service of Facebook

    In the following we present the essential information of the agreement concluded between Facebook and us according to article 26 GPDR

    • Who is the controller for the Facebook service?

      According to art. 4 no. 7 in connection with Art. 26 para. 1 sentence 1 GPDR

      Facebook Ireland Ltd
      4 Grand Canal Square
      Dublin 2
      Irland

      and

      MEGATECH INDUSTRIES AKTIENGESELLSCHAFT
      Gewerbeweg 15
      9490 Vaduz
      Fürstentum Liechtenstein
      Phone: +43 1 236 70 38 29
      E-Mail: info.at@mgtindustries.com
      Internet: https://www.megatech-industries.com/

    • Data protection officer

      Our data protection officer can be reached via the following contact details:

      MEGATECH INDUSTRIES AKTIENGESELLSCHAFT
      Data protection officer
      E-Mail: dataprotection@mgtindustries.com

    • For what purposes is the Facebook service used and on what legal basis do we process your data?

      Purpose and legal basis MEGATECH AG
      We process your personal data for the purpose of optimising our service and, as the operator of the Facebook fan page, have no interest in the collection and further processing for analysis or marketing purposes. The legal basis for the data processing of the data you have provided is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GPDR.

      Purpose and legal basis of Facebook
      Legal basis and purposes of Facebook's processing can be viewed https://www.facebook.com/about/privacy/legal_bases and https://de-de.facebook.com/policy.php. In particular, Facebook may process the following personal data:

      • User interaction
      • Device information
      • Information from partners
      • Information about networks, connections and usage
      • Cookies
      • Demographic characteristics (federal state, gender, age, etc.)

      Which personal data is processed depends primarily on which products are used.

    • Use of cookies

      You can find out which cookies Facebook uses for which purposes at https://www.facebook.com/policies/cookies/.

    • Data processing for page insights

      Page Insights are aggregated statistics generated from specific events logged by Facebook servers when people interact with Pages and the content associated with them. Statistical categories can be accessed via these so-called "Insights" of the Facebook page. These statistics are generated and provided by Facebook, on which we as the operator of the fan page have no influence. You can find more information about this under: https://www.facebook.com/legal/terms/information_about_page_insights_data

      You can address your inquiries in connection with page insights to: https://www.facebook.com/help/contact/308592359910928#_=_

    • Is there an obligation for you to provide your data and what happens if you decide against it?

      You are not obliged to provide your personal data. However, it is not possible to use our website megatech-industries.com without processing your personal data.

    • Who will receive your data or who is involved in the processing of my data?

      MEGATECH INDUSTRIES AKTIENGESELLSCHAFT
      An internal transfer of your personal data will only take place to fulfil the above-mentioned purposes. All employees are obliged to maintain the confidentiality of your data.

      Facebook
      You can find out how Facebook transfers your personal data at: https://de-de.facebook.com/policy.php

      Third country
      Your data will be transferred to the USA or other third countries and processed for the purposes described. These data transfers are necessary to provide the services outlined in the Facebook and Instagram Terms of Use, to operate globally, and to offer the products to users. Facebook uses the standard contractual clauses approved by the European Commission and relies on the adequacy decisions issued by the European Commission regarding certain countries.

    • Decision making including profiling

      MEGATECH INDUSTRIES AG does not carry out any automated individual decision procedures according to Art. 22 GPDR or other profiling measures according to Art. 4 No. 4 GPDR. However, we point out that profiling is carried out by Facebook.

    • How long will your data be stored?

      The legislator has enacted a large number of retention periods, which we observe with the utmost care in order to comply with these obligations. As a matter of principle, we will only store your personal data for as long as this is permitted by the defined purpose or as required by law for reasons of proof. If you delete your search history on Facebook, the log of this search will only be deleted after 6 months. If you submit a copy of your official ID for account verification purposes, this copy will be deleted 30 days after submission by Facebook. Learn more about the search

    • Rights

      As a data subject, you are entitled to the following rights:

      • Right to information (Art. 15 GPDR)
      • Right of rectification (Art. 16 GPDR)
      • Right of cancellation (Art. 17 GPDR)
      • Right to restrict processing (Art. 18 GPDR)
      • Right to information (Art. 19 GPDR)
      • Right to data transferability (Art. 20 GPDR)
      • Right of objection (Art. 21 GPDR)
      • Right of withdrawal (Art. 22 GPDR)
      • Right of appeal (Art. 77 GPDR)

      If you wish to exercise your rights as a data subject, either contact Facebook directly, as Facebook is responsible for fulfilling the obligations (including Articles 12 and 13 GPDR, Articles 15 to 21 GPDR, Articles 33 and 34 GPDR), or contact dataprotection@mgtindustries.com. If you have given your consent to the processing of your data, you can revoke it at any time with effect for the future. The lawfulness of the processing of your data until revocation remains unaffected.

      Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority - in particular with the Member State in which you are resident, in which you work or in which the alleged infringement occurred - if you believe that the processing of your personal data by us is in breach of the GPDR in the first place.

      Our responsible state office for data protection supervision - Postal address:
      Bavarian State Office for Data Protection Supervision (BayLDA)
      PO Box 606
      91522 Ansbach
      Germany
      Online complaint form: https://www.lda.bayern.de/de/beschwerde.html

      Contact the data protection officer for Facebook Ireland Ltd.

      You also have the right to file a complaint with the lead regulator for Facebook Ireland, the Irish Data Protection Commission, or your local regulator. The data controller with respect to your information is Facebook Ireland. You can contact this company either online at https://www.facebook.com/help/contact/2061665240770586 by mail at:

      Facebook Ireland Ltd.
      4 Grand Canal Square
      Grand Canal Harbour
      Dublin 2 Ireland

  10. 10. Applications

    • Who is the controller?

      On our website we offer you the opportunity to apply by e-mail to career@mgtindustries.com for an open position in a company of the MEGATECH Group.

      In addition to MEGATECH INDUSTRIES AKTIENGESELLSCHAFT which initially receives all applications, the controller with regard to processing your personal data is the MEGATECH Group company responsible for your application.

    • Data protection officer

      Our data protection officer can be reached via the following contact details:

      Data protection officer
      e-mail: dataprotection@mgtindustries.com

    • For what purposes do we process your data?

      Your personal data, which you provide us in the context of your application, will be treated confidentially and will be stored and used electronically exclusively for the purpose of processing the application and, if necessary, for the implementation of the subsequent employment relationship.

      We need the data processed in the course of the application process for the possible conclusion of an employment relationship or the decision on your recruitment. We process this personal data in order to check your suitability for the relevant position, for the purpose of processing the application and for contacting and identifying you.

      By submitting a separate declaration, you can consent to us accepting your unsuccessful application into our applicant pool for a maximum of 24 months after completion of the respective application procedure. In that case we may contact you again with suitable job advertisements matching your profile.

    • On what legal basis do we process your data?

      The processing of your personal data in the context of the application procedure takes place on the basis of the article 6 paragraph 1 point (b) GDPR (initiation or execution of a contract) as well as if necessary national regulations for the protection of employee data (e.g. in Germany: § 26 paragraph 1 page 1 BDSG).

      Your data will be stored further in the applicant pool on the basis of your consent in accordance with the article 6 paragraph 1 point (f) GDPR.

    • Is there an obligation for you to provide your data and what happens if you decide against it?

      Please note that you are not obliged to provide your data as part of the application process. However, the processing of the application and the establishment of an employment relationship are not possible without the processing of your data, so that your application could unfortunately not be considered without providing the data.

      If you do not give your consent for your application to be included in our applicant pool, this will not result in any disadvantages for the specific application procedure. However, we will not be able to contact you for further vacancies.

    • Who will receive your data or who is involved in the processing of my data?

      We share your information within the MEGETACH Group with the company responsible for your application or with the appropriate department within the company. All employees who are responsible within the application process are obliged to maintain the confidentiality of your data.

    • Decision making including profiling

      There are no automated individual decision procedures under Art. 22 GPDR or other profiling measures within the meaning of Art. 4 No. 4 GPDR

    • Will your data be transferred to a third country or an international organisation?

      Depending on which company within the MEGATECH Group is responsible for your application, it may be forwarded to a third country outside the EU. In this case, we ensure that appropriate guarantees exist to protect your personal data, in particular by concluding standard data protection clauses in accordance with the article 46 paragraph 1 point (c) GDPR.

    • How long will your data be stored?

      The legislator has enacted a large number of retention periods, which we observe with the utmost care in order to comply with these obligations. As a matter of principle, we will only store your personal data for as long as this is permitted by the defined purpose or as required by law for reasons of proof. We store the data collected for the application for a maximum of 6 months after completion of the application procedure. After this period, the data collected for the application will be deleted or blocked if deletion is not possible.

      If you have consented to your application being included in our applicant pool, your application will be stored for a maximum of 24 months, after which your data will be automatically deleted. You can also contact our data protection officer at any time before the end of these 24 months at the email address MGT-dataprotection@mgtindustries.com and request the deletion of your data from the applicant pool. The data will then be deleted immediately.

      If your application is followed by the conclusion of a contract, your data will continue to be stored and used for the purpose of the usual organisational and administrative process and the execution of the employment relationship in compliance with the relevant legal regulations.

    • Rights of data subjects

      As a data subject, you are entitled to the following rights:

      • Right to information (Art. 15 GPDR)
      • Right of rectification (Art. 16 GPDR)
      • Right of cancellation (Art. 17 GPDR)
      • Right to restrict processing (Art. 18 GPDR)
      • Right to information (Art. 19 GPDR)
      • Right to data transferability (Art. 20 GPDR)
      • Right of objection (Art. 21 GPDR)
      • Right of withdrawal (Art. 22 GPDR)
      • Right of appeal (Art. 77 GPDR)

      If you have given us permission to process your data, you can revoke this permission at any time with effect for the future. The lawfulness of the processing of your data until revocation remains unaffected. For this purpose, an informal notification by e-mail to dataprotection@mgtindustries.com

      Note on complaints to a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority - in particular the Member State in which you are resident, in which you work or in which the alleged infringement is located - if you believe that the processing of your personal data by us is in breach of the GPDR.

      Postal address:
      Bavarian State Office for Data Protection Supervision (BayLDA)
      PO Box 606
      91522 Ansbach
      Germany
      Online complaint form: https://www.lda.bayern.de/de/beschwerde.html

  11. 11. Who gets your data

    • Internal receivers

      An internal transfer of your personal data will only take place to fulfil the above-mentioned purposes or to comply with legal obligations. All responsible employees are obliged to maintain the confidentiality of your data.

    • External receivers

      Your personal data will only be passed on externally if this is necessary to process or handle your request, if another legal permission exists or if we have your consent.

      A transfer to external parties can take place under the following circumstances:

      (a) processors
      A processor is any natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller

      (b) public bodies and institutions
      Authorities and state institutions, such as public prosecutors' offices, hospitals, courts or tax authorities, to which we must transfer personal data for legally binding reasons The legal basis for the transfer is Article 6 paragraph 1 letter c GPDR.

      Third country
      It cannot be excluded that your personal data may be transferred to a third country. In doing so, we ensure that an adequate level of data protection is in place before your personal data is transferred, whether through a European Commission adequacy finding, guarantees, certifications, such as the EU-US Privacy Shield, or EU standard contractual clauses.

  12. 12. SSL Encryption

    For security reasons our website uses SSL encryption. This protects transmitted data and prevents it from being read by unauthorised third parties. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol, which is visible in your browser line.

  13. 13. Automated decision making and profiling

    An automated decision-making process including profiling according to Art. 22 para. 1 and Art. 4 GPDR does not take place on our website.

  14. 14. How long will your data be stored?

    Your personal data will be deleted as soon as they are no longer required for the purpose for which they were collected, you request us to delete them or revoke your consent to their storage. Exceptionally, your personal data will only be stored to the extent required by the laws, regulations or other legal provisions to which we are subject. Data that has been stored by us for other purposes remains unaffected.

  15. 15. Your rights

    If our companies have processed your personal data, you have the right, within the respective legal scope,

    • of access, in particular with regard to the data stored by the data controller and their processing purposes (Article 15 GDPR)
    • to rectification of inaccurate data or to have incomplete personal data completed (Article 16 GDPR)
    • to erasure, any data that has been processed unlawfully or is no longer required (Article 17 GDPR)
    • to restriction of processing (Article 18 GDPR)
    • to object to processing, in particular if this is done to protect the legitimate interests of the data controller (Article 21 GDPR) and
    • to data portability, provided that the processing is based on a consent or for the execution of a contract or is carried out by automated means (Article 20 GDPR)

    If processing is based on a consent given by you (Article 6 paragraph 1 point (a) or Article 9 paragraph 2 point (a) GDPR), you have the right to withdraw the consent at any time. The legality of the processing carried out on the basis of the consent until your withdrawal shall not be affected by this. All you need to do is send an informal notification by e-mail to our Data Protection Supervisor Mr Pascal Jaensch, dataprotection@mgtindustries.com

    Note on complaints to a supervisory authority Without prejudice to any other administrative or judicial remedy, the person concerned shall have the right to appeal to the competent supervisory authority. This depends on the state of your residence, your work or the alleged violation.

Status as of: June 2020