Privacy
The following information describes how ESPRiT Engineering handles personal data and in this way ensures the implementation of data protection.
The information pursuant to Articles 13, 14 and 21 DSGVO on the processing of personal data by ESPRiT Engineering and the claims and rights to which data subjects are entitled under the data protection regulations are presented below.
Which data is processed in detail by ESPRiT Engineering and how it is used depends largely on the agreements made between the data subject and ESPRiT Engineering.
Who is responsible for data processing and who can data subjects contact?
The responsible body is
ESPRiT Engineering GmbH
Leopoldstraße 254
80807 Munich
Phone: +49 89 455 99 430
E-mail address: info@esprit-engineering.de
The company data protection officer can be contacted at
ESPRiT Engineering GmbH
Data Protection Officer
Leopoldstraße 254
80807 Munich
Phone: +49 89 455 99 430
E-mail address: datenschutz@esprit-engineering.de
Privacy policy
Data protection
The protection of your personal data is very important to us. Your personal data will be treated confidentially and in accordance with the statutory data protection regulations and this privacy policy. As a rule, it is possible to use our website without providing personal data. If personal data (e.g. name, address or e-mail addresses) is collected on our website, this is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your express consent. We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps, which is why complete protection of data against access by third parties is not possible.
Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.
Cookies
Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure.
Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We have also added the code “anonymizeIP” to Google Analytics on this website. This guarantees that your IP address is masked so that all data is collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. [Note: You can find information on integrating the opt-out cookie at: https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable].
We continue to use Google Analytics to analyze data from double-click cookies and AdWords for statistical purposes. If you do not want this, you can deactivate this via the Ads Preferences Manager (https://www.google.com/settings/ads/onweb/?hl=de).
Information, deletion, blocking
You have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing as well as a right to correction, blocking or deletion of this data at any time. You can contact us at any time at the address given in the legal notice if you have further questions on the subject of personal data.
Objection to advertising e-mails
We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.
You can reach our company data protection officer at
ESPRiT Engineering GmbH
Data Protection Officer
Leopoldstraße 254
80807 Munich
Phone: +49 89 455 99 430
E-mail address: datenschutz@esprit-engineering.de
Information for applicants, employees and freelancers
1. what sources and data does ESPRiT Engineering use?
We process personal data that we receive from you as part of the recruitment process or contract initiation, the employment relationship or during the business relationship or when you contact us.
Where necessary, we also process personal data that we have legitimately received from authorities, other companies or other third parties (e.g. for tax or social security purposes, as part of a job placement).
In addition, we process personal data that we have legitimately obtained from publicly accessible sources (e.g. professional networks, press, media) and are permitted to process.
Relevant personal data includes personal details (name, address, e-mail address and other contact details, date and place of birth and nationality, gender), employee and performance data (e.g. CV data, qualifications, references, time recording data, vacation periods, periods of incapacity to work, any criminal records, social data, bank details, social security number, pension insurance number, salary data and tax identification number) as well as payment and payment transaction data.
This may also include special categories of personal data (sensitive data).
In the case of freelancers, we also collect order data (e.g. consulting orders) and other data from the fulfillment and processing of contractual obligations (e.g. sales data, etc.).
2. why does ESPRiT Engineering process my data (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the European General Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG):
a. For the fulfillment of contractual obligations (Art. 6 para. 1 lit. b) DSGVO)
The processing of personal data (Art. 4 No. 2 DSGVO) is carried out for the establishment, execution and termination of contracts concluded or to be concluded with you (in particular employment, service, work or agency contracts), as well as all activities necessarily associated with the operation and administration of a company.
The purposes of data processing are primarily based on the employment or other contractual relationship.
Further details on the purpose of data processing can be found in the respective contractual documents.
b. As part of the balancing of interests (Art. 6 para. 1 lit. f) DSGVO)
If necessary, we process your data to protect our legitimate interests or those of third parties. This includes in particular
o the assertion of legal claims and defense in legal disputes;
o ensuring IT security and IT operations;
o the prevention and investigation of criminal offenses;
o Measures for building and system security (e.g. access controls);
o Measures to safeguard domiciliary rights;
o Measures for business management and further development of services and products;
o the processing of freelancer data for the transmission of specific project vacancies;
o the processing of data by companies in the group of companies or affiliated companies.
c. Based on your consent (Art. 6 (1a) DSGVO)
If you have given us your consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. You can withdraw your consent at any time.
Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. The objection can be made informally and should preferably be addressed to:
ESPRiT Engineering GmbH
Leopoldstraße 254
80807 Munich
Telephone: +49 89 455 99 430
E-mail address: info@esprit-engineering.de
d. Due to legal requirements (Art. 6 para. 1 lit. c) DSGVO)
We are also subject to various legal obligations, i.e. legal requirements (e.g. commercial law, tax laws, etc.). Insofar as data is processed in this regard, this is done exclusively on the basis of these regulations.
3. to whom does ESPRiT Engineering transmit data?
Within the company, those departments that need your data to fulfill our contractual and legal obligations will receive it. Processors employed by us in accordance with Art. 28 DSGVO or other service providers may also receive data for these purposes. These are companies in the categories of IT services, logistics, printing services, telecommunications, debt collection, consulting, sales and marketing and address research.
In addition, we transfer personal data to companies in the group of companies and affiliated companies for the purposes listed above under the conditions listed above.
With regard to the transfer of data to recipients outside the company, please note that we only transfer the data if this is permitted or required by law, if you have given your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example
• Public bodies and institutions (e.g. tax office, social security institutions, public prosecutor’s office, police, supervisory authorities, auditors) if there is a legal or official obligation;
• Other companies to which we transfer personal data (depending on the contract: e.g. banks, credit agencies, customers).
Other data recipients may be those entities for which you have given us your consent to transfer data.
4. how long will my data be stored?
Where necessary, we process and store your personal data for the duration of your employment relationship or the existing contractual relationship, which also includes, for example, the initiation and execution of a contract or the fulfillment of contractual obligations.
In addition, we are subject to various retention and documentation obligations, including those arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified there are two to ten years.
Finally, the storage period is also determined by the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years. Section 199 BGB applies to the start of the limitation period.
5. is data transferred to a third country or to an international organization?
Data will only be transferred to third countries (countries outside the European Economic Area – EEA) if this is necessary, legally required or permitted for the initiation and execution of contracts concluded with you (e.g. for the execution of payment orders) or if you have given us your consent. We will inform you separately about the details, if required by law.
6 What data protection rights do I have?
You have the right of access under Art. 15 DSGVO, the right to rectification under Art. 16 DSGVO, the right to erasure under Art. 17 DSGVO, the right to restriction of processing under Art. 18 DSGVO and the right to data portability under Art. 20 DSGVO. The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure. There is also a right to lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO in conjunction with Section 19 BDSG).
7. is there an obligation for me to provide data?
As part of our business relationship, you only need to provide us with the personal data that is required for the establishment, execution and termination of a business relationship or that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude the contract or will no longer be able to perform an existing contract and may have to terminate it.
8. to what extent is there automated decision-making in individual cases?
In principle, we do not use fully automated decision-making in accordance with Art. 22 DSGVO to establish and implement the contractual relationship. Should we use these procedures in individual cases, we will inform you of this separately if this is required by law.
9. to what extent will my data be used for profiling (scoring)?
We do not process your data with the aim of evaluating certain personal aspects (profiling). Profiling is therefore not used.
Information for customers, suppliers, service providers and their contacts
1. what sources and data does ESPRiT Engineering use?
We process personal data that we receive from you as part of the initiation and execution of our business relationship or when you contact us.
We also process personal data that we have legitimately received from other companies or other third parties (e.g. to execute orders, fulfill contracts or on the basis of your consent).
On the other hand, we process personal data that we have legitimately obtained
from publicly accessible sources (e.g. debtor directories, land registers, commercial and association registers, press, media) and are permitted to process (Art. 14 para. 2 lit. f) DSGVO).
Relevant personal data of contact persons are name, contact and communication data (telephone number, e-mail address, etc.). For business partners, this may also include personal data (name, address and other contact details, date and place of birth and nationality), identification data (e.g. ID card data) and authentication data (e.g. specimen signature). In addition, this may also include order data (e.g. delivery order, service order), data from the fulfillment of contractual obligations (e.g. sales data, credit limit, product data, etc.), advertising and sales data, contract and documentation data (e.g. order data, business letters). order data, business letters), register data, payment transaction data (account number, bank details), data about your use of our offered telemedia (e.g. time of accessing our websites, apps or newsletters, clicked pages from us or entries) as well as other data comparable with the categories mentioned.
2. why does ESPRiT Engineering process my data (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the European General Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG):
a. For the fulfillment of contractual obligations (Art. 6 para. 1 lit. b) DSGVO)
The processing of personal data (Art. 4 No. 2 DSGVO) is carried out for the provision of services, delivery of goods by suppliers, in particular for the execution of our contracts with you and the execution of your orders, as well as all activities necessary for the operation and administration of a company.
The purposes of data processing are primarily based on the specific products supplied by you or the services provided by you or us.
Further details on the purpose of data processing can be found in the respective contract documents and terms and conditions.
b. As part of the balancing of interests (Art. 6 para. 1 lit. f) DSGVO)
If necessary, we process your data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties. This includes in particular
o Testing and optimization of procedures for needs analysis and direct customer contact;
o Market and opinion research, provided you have not objected to the use of your data;
o Assertion of legal claims and defense in legal disputes;
o Ensuring IT security and IT operations;
o Prevention and investigation of criminal offenses;
o Measures for building and system security (e.g. access controls);
o Measures to safeguard domiciliary rights;
o Measures for business management and further development of services.
If you are already our customer, we may use the contact details you have provided to send you marketing communications about similar ESPRiT Engineering services where this is permitted by law and you have not opted out. In other cases, we will ask for your consent to send you marketing information.
c. Based on your consent (Art. 6 para. 1a DSGVO)
If you have given us your consent to process personal data for specific purposes (e.g. transmission of marketing communications and news about ESPRiT Engineering’s services, events and other promotions, disclosure of data to third parties, evaluation of data for marketing purposes), the lawfulness of this processing is based on your consent. Any consent given can be revoked at any time.
Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
The objection can be made informally and should preferably be addressed to:
ESPRiT Engineering GmbH
Leopoldstraße 254
80807 Munich
Telephone: +49 89 455 99 430
E-mail address: info@esprit-engineering.de
d. Due to legal requirements (Art. 6 para. 1 lit. c) DSGVO) or in the public interest (Art. 6 para. 1 lit. e) DSGVO)
In addition, we are subject to various legal obligations, i.e. legal requirements (e.g. commercial law, tax laws, etc.). Insofar as data is processed in this regard, this is done exclusively on the basis of these regulations.
3. to whom does ESPRiT Engineering transmit data?
Within the company, those departments that need your data to fulfill our contractual and legal obligations will receive it. Processors employed by us in accordance with Art. 28 DSGVO may also receive data for these purposes. These are companies in the categories of IT services, logistics, printing services, telecommunications, debt collection, consulting, sales and marketing and address research.
In addition, we transfer personal data to companies in the group of companies and affiliated companies for the purposes listed above under the conditions listed above.
With regard to the transfer of data to recipients outside the company, please note that we only pass on your data if this is permitted or required by law, if you have given your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example
• Public bodies and institutions (e.g. tax office, public prosecutor’s office, police, supervisory authorities, auditors) if there is a legal or official obligation.
• Other companies to which we transfer personal data in order to carry out the business relationship with you (depending on the contract: e.g. banks, credit agencies, suppliers).
Other data recipients may be those bodies for which you have given us your consent to transfer data.
4. how long will my data be stored?
Where necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and execution of a contract or for the fulfillment of contractual purposes.
In addition, we are subject to various retention and documentation obligations, including those arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified there are two to ten years.
Finally, the storage period is also determined by the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years. Section 199 BGB applies to the start of the limitation period.
5. is data transferred to a third country or to an international organization?
Data will only be transferred to third countries (countries outside the European Economic Area – EEA) if this is necessary, legally required or permitted for the initiation and execution of contracts concluded between you and us (e.g. for the execution of payment orders) or if you have given us your consent. We will inform you separately about the details, if required by law.
6 What data protection rights do I have?
You have the right of access under Art. 15 DSGVO, the right to rectification under Art. 16 DSGVO, the right to erasure under Art. 17 DSGVO, the right to restriction of processing under Art. 18 DSGVO and the right to data portability under Art. 20 DSGVO. The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure. There is also a right to lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO in conjunction with Section 19 BDSG).
7. is there an obligation for me to provide data?
As part of our business relationship, you only need to provide the personal data that is required for the establishment, execution and termination of a business relationship or that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude the contract or execute the order or will no longer be able to perform an existing contract and may have to terminate it.
8. to what extent is there automated decision-making in individual cases?
In principle, we do not use fully automated decision-making in accordance with Art. 22 DSGVO to establish and conduct the business relationship. Should we use these procedures in individual cases, we will inform you of this separately if this is required by law.
9. to what extent will my data be used for profiling (scoring)?
We do not process your data with the aim of evaluating certain personal aspects (profiling).
Information on the right to object pursuant to Art. 21 of the General Data Protection Regulation (DSGVO)
1. individual right of objection
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) of Article 6(1) DSGVO (data processing in the public interest) and point (f) of Article 6(1) DSGVO (data processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) DSGVO.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.
2. right to object to the processing of data for direct marketing purposes
In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection can be made informally and should preferably be addressed to
ESPRiT Engineering GmbH
Leopoldstraße 254
80807 Munich
Phone: +49 89 455 99 430
E-mail address: info@esprit-engineering.de