Data protection

Thank you for your interest in our website. The protection of your privacy is very important to us. In accordance with the basic EU data protection regulation, we will inform you in detail below about how we handle your data.

General notes on data protection

Personal data is only collected, used and passed on by CBE SRL if this is permitted by law or if you demonstrably agree.

Personal data is data with which you can be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this is performed.

We adhere to the principles for the processing of personal data in accordance with Art. 5 GDPR. Your data is processed on the basis of legality, processing in good faith and transparency:

– for specified, clear and legitimate purposes;
– for purposes of processing, limited to a necessary minimum (“data minimisation”);
– factually correct and, if necessary, up to date;
– only as long as necessary for the purposes for which it was processed and;
– including an appropriate guarantee for security of personal data.

If we use external service providers to perform our business processes, they receive data to the necessary extent in accordance with Art. 28 GDPR. Please understand that we do not disclose the individual service providers without a given reason. However, your claims for data protection rights are comprehensively guaranteed in accordance with the specifications of order processing.

General information on IT security

CBE SRL takes extensive precautions to ensure the security of your personal data. We follow ISO/IEC 27001 and have established technical and organisational measures to protect your data from loss of integrity, availability and confidentiality.

For further information on the processing of your personal data, please refer to the respective privacy policy.

CBE SRL

Status: 30.04.2019

Information pursuant to Art. 13 GDPR for website visitors

Information pursuant to Art. 13 GDPR for website visitors
When you use this website, various personal data is collected. As operators of this website, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Please note, however, that data transferal over the internet (e.g. when communicating via email) can present security vulnerabilities. Complete protection of data from access from third parties is not possible.
Person responsible and data protection officer

The responsible data processing company on this website is:

CBE SRL
Via Vienna 4
38121 Trento
P. Iva 00624020228
Tel 0461991598
E-mail cbe@cbe.it

Scope of data collection on our website
We collect your data when you provide us with it. This can, for example, be data which you enter in a contact form.
Other data is collected automatically when visiting the website through our IT systems. This is, in particular, technical data (e.g. internet browser, operating system or time a page is viewed).
This data is collected automatically as soon as you access our website.
Purpose and legal basis of the processing of personal data
Some of the data is collected to ensure faultless provision of the website. Other data can be used to analyse your user behaviour.

 

Data processing based on your consent (Art. 6 Par. 1 lit. a GDPR)
Provided that you have given us your consent to the processing of your personal data for specific purposes (e.g. to receive personalised advertising or for identification), the processing on this basis is legal. Consent granted can be revoked at any time. This also applies to the revocation of declarations of consent that you have given us before the validity of the GDPR from 25 May 2018. The revocation of the consent is for the future and does not affect the legality of the data processed up to the revocation.

 

Data processing for legitimate interest (Art. 6 Par. 1 lit. f GDPR)
We process your data in a permissible manner to safeguard our legitimate interests. This includes the use of your personal data to:

– also inform you about our products and services
– carry out measures for the improvement and development of services and products to be able to offer you a customised approach and optimised services
– legal claims and for defence in legal disputes
– investigate or prevent crimes
– use your data anonymously for analysis purposes.

 

If we wish to process your personal data for a purpose not previously mentioned, we will inform you in advance in the context of the legal provisions.

 

Data processing for the purpose of contract initiation and settlement (Art. 6 Par. 1 lit. b GDPR)

Any further personal data, such as your name, address, telephone number or email address, are not collected when you visit the website, unless you provide this information voluntarily, e.g. to receive a contract offer. Your details are stored to process and carry out your enquiry.

Recipient of the data/disclosure of the data/third countries
Your data may be passed on to our technical support service providers (e.g. website support providers) for the purpose of providing this website and for the previously mentioned purposes, which we have carefully selected and with which we have entered into a order processing contract.
Your data is otherwise only passed on to other third parties and to third countries, provided that this is explicitly stated in this privacy policy or we are legally obliged to do so.
Retention period of the data

We store your personal data for the above-mentioned purposes. Your data is initially processed from the time of collection, provided that you or a third party provides us with it. We will delete your personal data that you have provided us with when the contractual relationship with you ceases or when you revoke your consent and all reciprocal claims are met and there is no other statutory retention or legal justification for storage.

Google Analytics makes use of the possibility to limit the storage period for your data to 26 months.

Rights of those affected/your rights

Any person concerned has the right to:

– information pursuant to Art. 15 GDPR;
– correction pursuant to Art. 16 GDPR;
– deletion pursuant to Art. 17 GDPR;
– restriction of processing pursuant to Art. 18 GDPR as well as;
– to data portability pursuant to Art. 20 GDPR and;
– to object to the processing in the context of the statutory requirements pursuant to Art. 21 GDPR.

The restrictions in accordance with §§ 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the right of access to the data and the right of erasure of this data.

Right to object
If the data processing is on the basis of Art. 6 Par. 1 lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation. If you object, we will no longer process your personal information unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims (objection pursuant to Art. 21 Par. 1 GDPR).

Revocation right of consent
If you have given us separate consent for data processing, you can revoke this consent at any time in accordance with Art. 7 Par. 3 GDPR. Such a revocation does not affect the legality of the processing up to the time of the revocation of consent.

Right to object to data collection in special cases and direct advertising (Art. 21 GDPR)
If we process your personal data for the purpose of direct advertising, you can object to this processing in accordance with Art. 21 Par. 2 and 3 GDPR. If you object, your personal data will no longer be processed for direct marketing purposes.

Right to appeal to the responsible supervisory authority
If you believe that the processing of your personal data violates the regulations of the GDPR, you have the right to complain to a supervisory authority in accordance with Art. 77 GDPR.

Contact person for data protection

For questions regarding the collection, processing or use of your personal data, for information, correction, blocking or deletion of data and for revocation of granted consents, please contact cbe@cbe.it or use the contact details above.

You can revoke consent at any time in whole or in part. Please send your revocation by email to cbe@cbe.it or to our address.

Analysis tools and tools of third-party providers

When visiting our website, your surfing behaviour can be statistically evaluated. This is done in particular with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools.

Cookies
Cookies are small text files that are copied onto your computer and stored by your browser. Cookies are used to make our services more user-friendly and secure. Most of the cookies we use are so-called session cookies, which are automatically deleted once you leave our site. Other cookies remain stored on your device until you delete them. These cookies help us to recognise your browser upon your next visit. You can configure your browser so that you are informed about the use of cookies and decide whether to accept them individually or to exclude cookies in certain cases or in general. Not accepting cookies can restrict the functionality of our website. Cookies that are required to carry out the electronic communication process or provide certain functions that you wish to use are stored on the basis of Art. 6 Par. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically correct and optimised provision of its services.

Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically sends us. These include:

– browser type and version;
– operating system used;
– referrer URL;
– host name of the accessing computer;
– time of the server enquiry;
– IP address.
This data is not merged with other data sources. This data is collected on the basis of Art. 6 Par. 1 lit. f GDPR. The website operator has a legitimate interest in presenting in a technically correct manner and in optimising its website – the server log files must be collected for this purpose.

Contact form 
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided there, will be stored in order to process the enquiry and in case of follow-up questions.

The processing of the data entered into the contact form is performed exclusively on the basis of your consent (Art. 6 Par. 1 lit. GDPR). If you do not want your data to be stored, you can revoke the consent to the storage of your data at any time by sending an informal email to cbe@cbe.it or through a written notice to CBE SRL Via Vienna 4 38121 Trento Italy.

Analysis tools and advertising

Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called cookies. These are text files that are stored on your computer and enable website usage to be analysed. The information generated by the cookie about your use of this website is usually sent to a Google server in the USA and stored there. The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 Par. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise both its website and advertising.

IP anonymisation
We have activated the function IP Anonymisation on this website. As a result, your IP address will be truncated by Google within member states of the European Union or other states that are part of the agreement on the European Economic Area prior to transferral to the USA. The full IP address is only sent to a Google server in the USA and truncated there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compiling reports on website activity and providing other services relating to the usage of the website and the internet to the website operator. The IP address sent by your browser in the context of Google Analytics is not merged with other Google data.

Objection to data collection
You can prevent the storage of all cookies by setting your browser software accordingly. Please note, however, that in this case, you may not be able to use all features of this website or others to their full extent.You can also prevent the data generated by the cookie and relating to your usage of the website (including your IP address) being transferred by Google and prevent this data from being processed by Google, by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en. We also offer you the option to opt out of the collection of your website usage data for this website by clicking on the following link: Opt out of the collection of data by Google Analytics for this website. In this case, a special opt-out cookie will be set to prevent the future collection of your usage data when you visit this website.

Demographic features in Google Analytics
This website uses the feature “demographic features” by Google Analytics. As a result, reports can be produced that contain information on the age, gender and interests of the site visitors. This data originates from interest-based advertising from Google and from third-party visitor data. This data cannot be associated with a specific person. You can disable this feature at any time through the ad settings in your Google Account, or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.

Storage period
Data saved by Google at a user and event level, which are associated with cookies, user recognition (e.g. user IDs) or promotional IDs (e.g. DoubleClick cookies or Android advertising IDs) will be anonymised after 26 months or deleted. Details can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=de

Google AdWords and Google conversion tracking
These websites use Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

In the context of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that the internet browser stores on the user’s computer. These cookies lose their validity after 30 days and are not used to personally identify users. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page.

Every Google AdWords customer receives a different cookie. The cookies cannot be tracked through the websites of AdWords customers. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive any information that personally identifies users. If you do not want to participate in tracking, you can opt out of this by simply disabling the Google conversion tracking cookie through your internet browser under User Preferences. You will then no longer be included in the conversion tracking statistics.

The storage of “conversion cookies” and the use of this tracking tool are based on Art. 6 Par. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise both its website and advertising. More information about Google AdWords and Google conversion tracking can be found in the data protection regulations of Google: https://policies.google.com/privacy?hl=en.

You can configure your browser so that you are informed about the use of cookies and can allow them in individual cases, can accept cookies for certain cases or generally exclude them, and can activate the automatic deletion of cookies when closing the browser. Disabling cookies can restrict the functionality of our website.

Google Tag Manager
Google Tag Manager is a solution from Google Inc. that enables marketers to manage website tags via a single interface. The tool tag manager itself, which implements the tags, is a cookie-less domain and does not collect any personal data. The tool releases other tags, which may collect data. Google Tag Manager does not access this data. If disabled at a domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.

Facebook Pixel
For conversion measurement, our website uses the visitor behaviour pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).

In this way, the behaviour of site visitors can be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. As a result, the effectiveness of Facebook ads can be evaluated for statistical and market research purposes, and future advertising measures optimised. The data collected is anonymous to us as the operator of this website; we cannot draw conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes – in accordance with the Facebook data usage directive. This allows Facebook to display ads on Facebook as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.

Facebook Pixel is used on the basis of Art. 6 Par. 1 lit. f GDPR.The website operator has a legitimate interest in effective advertising measures, including social media. You can find more information on the protection of your privacy in the privacy policy of Facebook here: https://de-de.facebook.com/about/privacy/.

You can also disable the remarketing “Custom Audiences” feature in the ad settings under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged on to Facebook to do this. If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

Plugins and tools

Google Maps
This site uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Maps stores your IP address. This is then usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer by Google Maps. For more information about handling user data, please see Google’s privacy policy here: https://www.google.en/intl/de/policies/privacy/.

Information pursuant to Art. 13 GDPR on online presence in social media

Information pursuant to Art. 13 GDPR on online presence in social media

We maintain online presence within social networks and platforms to communicate with customers, interested parties and users active there and to inform them about our services.

Please note that data of the users outside the area of the European Union can be processed. This can result in risks to users because, for example, the enforcement of user rights could be made more difficult. Furthermore, the data of the users is usually processed for market research and advertising purposes. Thus, usage profiles can, for example, be created from the user behaviour and the resulting interests of the users. The usage profiles can then be used, for example, to place ads inside and outside the platforms that are allegedly suitable for the users’ interests. For these purposes, cookies are usually stored on the computers of the users, in which the user behaviour and interests of the users are stored. Furthermore, in the usage profiles, data can also be stored independently of the devices used by the users

Personal data of users is processed based on our legitimate interests in effective information of users and communication with users in accordance with Art. 6 Par. 1 lit. f. GDPR.

For a detailed description of the respective possibilities for processing and objection (opt-out), we refer to the following linked information of the provider.

Also in the case of enquiries for information and the assertion of user rights, please note that these can be claimed most effectively by the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. Please contact us if you still require help.

Facebook, pages, groups, (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on the basis of an agreement on the joint processing of personal data – privacy policy: https://www.facebook.com/about/privacy/, especially for pages: https://www.facebook.com/legal/terms/information_about_page_insights_data , opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Google/YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) – privacy policy: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – privacy policy/opt-out: http://instagram.com/about/legal/privacy/.
Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – privacy policy: https://twitter.com/de/privacy, opt-out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – privacy policy https://www.linkedin.com/legal/privacy-policy, opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
Xing (XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany) – privacy policy/opt-out: https://privacy.xing.com/de/datenschutzerklaerung.

Person responsible and data protection officer

The responsible data processing company on this website is:

CBE SRL
Via Vienna 4
38121 Trento
P. Iva 00624020228
Tel 0461991598
E-mail cbe@cbe.it

Rights of those affected/your rights

Any person concerned has the right to:

– information pursuant to Art. 15 GDPR;
– correction pursuant to Art. 16 GDPR;
– deletion pursuant to Art. 17 GDPR;
– restriction of processing pursuant to Art. 18 GDPR as well as;
– to data portability pursuant to Art. 20 GDPR and;
– to object to the processing in the context of the statutory requirements pursuant to Art. 21 GDPR.

The restrictions in accordance with §§ 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the right of access to the data and the right of erasure of this data.

Right to object
If the data processing is on the basis of Art. 6 Par. 1 lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation. If you object, we will no longer process your personal information unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims (objection pursuant to Art. 21 Par. 1 GDPR).

Revocation right of consent
If you have given us separate consent for data processing, you can revoke this consent at any time in accordance with Art. 7 Par. 3 GDPR. Such a revocation does not affect the legality of the processing up to the time of the revocation of consent.

Right to object to data collection in special cases and direct advertising (Art. 21 GDPR)
If we process your personal data for the purpose of direct advertising, you can object to this processing in accordance with Art. 21 Par. 2 and 3 GDPR. If you object, your personal data will no longer be processed for direct marketing purposes.

Right to appeal to the responsible supervisory authority
If you believe that the processing of your personal data violates the regulations of the GDPR, you have the right to complain to a supervisory authority in accordance with Art. 77 GDPR.

Contact person for data protection

For questions regarding the collection, processing or use of your personal data, for information, correction, blocking or deletion of data and for revocation of granted consents, please contact cbe@cbe.it or use the contact details above.

You can revoke consent at any time in whole or in part. Please send your revocation by email to cbe@cbe.it or to our address.

Information pursuant to Art. 13 GDPR for customers and suppliers

Information pursuant to Art. 13 GDPR for customers and suppliers

We hereby inform you as a customer or supplier about the processing of your personal data by AL-KO Vehicle Technology and about your rights under the data protection law.

 

Person responsible and data protection officer

The The authority responsible for data processing is:

CBE SRL
Via Vienna 4
38121 Trento
P. Iva 00624020228
Tel 0461991598
E-mail cbe@cbe.it

Sources

We process personal data which we receive from you during our business relationship or from publicly available sources.

Scope and purpose of processing

We process your data only if the processing is permitted by law or if we have received your consent to the processing of the data.

Relevant personal data are names, address data and telecommunication data. In addition, this can include enquiry, offer and order data, data from the fulfilment of our contractual obligation, documentation data as well as other data comparable to the mentioned categories.

This data is collected:

  • to identify you as our supplier;
  • to perform the contractual relationship;
  • for correspondence with you;
  • to settle possible liability claims as well as the assertion of any claims against you.

 

Legal basis for processing

  • Data processing for the purpose of fulfilling the contract or for carrying out pre-contractual measures (Art. 6 Par. 1 lit. b GDPR)
    Your personal data is processed in particular for purposes of adequate performance of the contractual relationship.
  • ?Data processing based on your consent (Art. 6 Par. 1 a GDPR)
    Provided that you have given us your consent to the processing of your personal data for specific purposes (e.g. for submitting offers), the processing on this basis is legal. Consent granted can be revoked at any time. This also applies to the revocation of declarations of consent that you have given us before the validity of the GDPR on 25 May 2018. The revocation of the consent is for the future and does not affect the legality of the data processed up to the revocation.
  • ?Data processing for legitimate interest (Art. 6 Par. 1 f GDPR)
    We process your data in a permissible manner to safeguard our legitimate interests. This includes the use of your personal data to:

    • assert legal claims and investigate and for defence in legal disputes;
    • investigate or prevent crimes.

If we wish to process your personal data for a purpose not previously mentioned, we will inform you in advance in the context of the legal provisions.

 

Enquiry by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry, including all resulting personal data (name or enquiry etc.) will be stored and processed by us for the purpose of processing your enquiry. We do not pass on this data without your consent. This data is processed on the basis of Art. 6 Par. 1 lit. b GDPR if your enquiry is related to the performance of a contract or is required to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 Par. 1 lit. a).

 

Retention period of the data

We will store or retain your information for as long as it is necessary for our business purposes and in accordance with statutory retention, documentation and limitation periods.

 

Recipient of the data

At CBE SRL, the departments and employees have access to your personal data which they need to fulfil our contractual and legal obligations or to safeguard legitimate interests. Furthermore, service providers and vicarious agents employed by us can receive data for these purposes. We may only disclose information about you if statutory provisions require it, if you have granted it, if we are legally authorised to provide information or disclosure, and/or if commissioned order processors ensure confidentiality and the provisions of the GDPR and the Federal Data Protection Act equally. The following recipients can receive data under these conditions:

  • affiliated companies of CBE SRL;
  • service providers;
  • credit assessment credit agencies;
  • ?public bodies for fulfilling legal notification obligations, e.g. financial authorities, social security carriers or criminal prosecution;
  • ?banks, credit card companies;
  • IT service providers;
  • data removal companies;
  • auditing firms;
  • Inkasso service providers;
  • ??service providers for website management;
  • insurance companies.

 

Disclosure of data to recipients outside of the EEA

Data transfer to countries outside the EU or EEA only occurs if it is necessary for the performance of the contracts with customers, suppliers and service partners (e.g. material procurement, production or logistics), you have given us consent or during the processing order. Furthermore, data exchange also takes place with affiliated companies of CBE SRL in third countries.

If service providers are deployed in third countries, they are required to comply with EU data protection standards in addition to written instructions by agreeing upon EU standard contractual clauses. There are corresponding contractual agreements with affiliated companies of CBE SRL.

 

Rights of those affected/your rights

Any person concerned has the right to:

  • information pursuant to Art. 15 GDPR;
  • correction pursuant to Art. 16 GDPR;
  • deletion pursuant to Art. 17 GDPR;
  • restriction of processing pursuant to Art. 18 GDPR as well as;
  • to data portability pursuant to Art. 20 GDPR and;
  • to object to the processing in the context of the statutory requirements pursuant to Art. 21 GDPR.

The restrictions in accordance with §§ 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the right of access to the data and the right of erasure of this data.

Right to object
If the data processing is on the basis of Art. 6 Par. 1 lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation. If you object, we will no longer process your personal information unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims (objection pursuant to Art. 21 Par. 1 GDPR).

Revocation right of consent
If you have given us separate consent for data processing, you can revoke this consent at any time in accordance with Art. 7 Par. 3 GDPR. Such a revocation does not affect the legality of the processing up to the time of the revocation of consent.

Right to object to data collection in special cases and direct advertising (Art. 21 GDPR)
If we process your personal data for the purpose of direct advertising, you can object to this processing in accordance with Art. 21 Par. 2 and 3 GDPR. If you object, your personal data will no longer be processed for direct marketing purposes.

Right to appeal to the responsible supervisory authority
If you believe that the processing of your personal data violates the regulations of the GDPR, you have the right to complain to a supervisory authority in accordance with Art. 77 GDPR.

 

Contact person for data protection

For questions regarding the collection, processing or use of your personal data, for information, correction, blocking or deletion of data and for revocation of granted consents, please contact cbe@cbe.it  or use the contact details above.

You can revoke consent at any time in whole or in part. Please send your revocation by email to cbe@cbe.it or to our address.

Information pursuant to Art. 13 GDPR for applicants

Information pursuant to Art. 13 GDPR for applicants

We offer you the opportunity to apply to us (e.g. by post or via an online application form). In the following, we will inform you about the scope, purpose and use of your personal data collected during the application process. We assure that the collection, processing and use of your data is in accordance with applicable data protection laws and all other applicable laws and that your information is kept strictly confidential.

Person responsible and data protection officer

The authority responsible for data processing is:

CBE SRL
Via Vienna 4
38121 Trento
P. Iva 00624020228
Tel 0461991598
E-mail cbe@cbe.it

 

Scope, purpose and legal basis of the data collection

If you send us an application, we will process your related personal data (e.g. contact and communication data, application documents and notes during job interviews etc.), provided that this is necessary for a decision on the establishment of an employment relationship.

The legal basis for this is § 26 of the new Federal Data Protection Act (BDSG) under German law (initiation of an employment relationship), Art. 6 Par. 1 lit. b GDPR (general contract initiation) and – if you have given your consent – Art. 6 Par. 1 lit. a GDPR. Consent can be revoked at any time.

Your personal data is only disclosed within our company to persons who are involved in processing your application. If the application is successful, the data submitted by you will be processed on the basis of § 26 of the new Federal Data Protection Act and Art. 6 Par. 1 lit. b GDPR for purposes of carrying out the employment relationship in our data processing systems.

 

Retention period of the data

If we cannot give you a job offer or if you reject a job offer, you reject a job offer, you revoke your consent to data processing or you request us to delete the data, the data you provide, including any remaining physical application documents for a maximum of 6 months and 7 days after completion of the application process, is stored or retained (retention period) in order to reproduce the details of the application process in case of discrepancies (Art. 6 Par. 1 lit. f GDPR).

If we also find your profile interesting for other vacancies and would like to check further possible applications, we will ask you in writing whether you agree to be accepted into the pool of applicants. The same applies to speculative applications. In the event that you have consented to the further storage of your personal data, we will transfer your data to our applicant pool. Here, the data will be deleted after 12 months.

After expiry of the retention period, the data will be deleted, provided that there is no statutory retention obligation or any other legal reason for further storage. If it becomes apparent that the retention of your data will be required after expiry of the retention period (e.g. due to an imminent or pending legal dispute), deletion will not occur until the data becomes redundant. Other statutory storage obligations remain unaffected.

Recipient of the personal data

To register your application data, we use the online portal of d.vinci HR-Systems GmbH, which acts as a service provider for us and can also receive information about your personal data in connection with the maintenance and servicing of the systems. We have concluded a so-called order processing contract with this provider, which ensures that the data is processed in a permissible manner.

Your application data is viewed by the HR department upon receipt of your application. Suitable applications are then forwarded internally to the department heads for the respective open position. The further procedure is then coordinated. In principle, the only persons in the company who have access to your data are those who require it to properly carry out our application process.

 

Disclosure of data to third parties

We do not pass on personal data during the application process.

 

Rights of those affected/your rights

Any person concerned has the right to:

  • information pursuant to Art. 15 GDPR;
  • correction pursuant to Art. 16 GDPR;
  • deletion pursuant to Art. 17 GDPR;
  • restriction of processing pursuant to Art. 18 GDPR as well as;
  • to data portability pursuant to Art. 20 GDPR and;
  • to object to the processing in the context of the statutory requirements pursuant to Art. 21 GDPR.

The restrictions in accordance with §§ 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the right of access to the data and the right of erasure of this data.

Right to object
If the data processing is on the basis of Art. 6 Par. 1 lit. e or f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation (objection pursuant to Art. 21 GDPR). If you object, we will no longer process your personal information unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims. If we process your personal data for the purpose of direct advertising, you can object to this processing in accordance with Art. 21 Par. 2 and 3 GDPR.

Revocation right of consent
If you have given us separate consent for data processing, you can revoke this consent at any time in accordance with Art. 7 Par. 3 GDPR. Such a revocation does not affect the legality of the processing up to the time of the revocation of consent.

Right to appeal to the responsible supervisory authority
If you believe that the processing of your personal data violates the regulations of the GDPR, you have the right to complain to a supervisory authority in accordance with Art. 77 GDPR.

Contact person for data protection

For questions regarding the collection, processing or use of your personal data, for information, correction, blocking or deletion of data and for revocation of granted consents, please contact cbe@cbe.it or use the contact details above.

You can revoke consent at any time in whole or in part. Please send your revocation by email to cbe@cbe.it or to our address.