Data Privacy Policy of iiM GmbH
Version: 08.06.2023
This Data Privacy Policy explains the nature, scope and purpose of collecting and using data as well as the use of cookies on the websites and online services of iiM GmbH, Neuer Friedberg 5, 98527 Suhl, Germany as the data controller (hereinafter referred to as ‘iiM’,‘we’ or ‘us’).
Should you have any questions about the handling of personal data, please contact our data protection officer whose contact details are provided at the bottom of the page.
Basic information
Unless stated otherwise in the following sections, essentially no personal data will be collected, processed or used when accessing our website.
If users fill in the contact form to request offers or information, for example, it is necessary to collect personal data. This Users’ personal data will be used for the following purposes:
- to perform our service activities and user services.
- to guarantee effective customer service and technical support. When you contact us, the information you provide will be saved for the purpose of processing your request and in the event of subsequent questions.
- to provide technical and business-related information about our services.
- to send newsletters or other advertising material, provided the user has given us the relevant consent.
When you access our web pages, our web servers will automatically collect information of a general nature. This includes your web browser type, the operating system used, the domain name of your Internet service provider, the IP of the computer used, the website from where you visit us, pages of our website that you visit as well as the date and duration of your visit.
We are not able to use this data to identify individual users. We only use this information for the purpose of statistical analysis and solely to improve the attractiveness, content and functionality of our website.
Personal data
The term ‘personal data’ is defined in the German Data Protection Act. According to this definition, personal data are particulars about the personal or factual circumstances of an identified or identifiable individual. These include, for example, your official name, address, phone number or date of birth.
Personal data is defined as follows in the EU General Data Protection Regulation (GDPR):
Any information relating to an identified or identifiable natural person (hereinafter ‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Legal basis for the collection and processing of personal data
Insofar as we obtain your consent to process personal data, Article 6 (1) (a) GDPR will serve as the legal basis for the processing of your personal data.
Article 6 (1) (b) GDPR will serve as the legal basis if we process your personal data in order to perform a contract between you and iiM GmbH. This also applies to processing that is necessary in order to take steps prior to entering into a contract.
Insofar as the processing of personal data is required to fulfil a legal obligation, to which our company is subject, Article 6 (1) (c) GDPR will serve as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party, and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 6 (1) (f) will serve as the legal basis for processing.
Erasure of data and storage period
Personal data of a data subject will be erased or blocked as soon as the purpose for which it is stored ceases to apply. Data may be stored for longer if such provision has been made by European or national legislators in Union regulations, laws or other requirements to which the controller is subject. Data will also be blocked or erased if a storage period stipulated by the cited standards expires, unless continued storage of the data is necessary in order to finalise or perform a contract.
Collection and processing of personal data
Personal data will be collected only if you provide such data on a voluntary basis, to place an order, make an enquiry, enter a competition or register for personalised services, for example. You will be informed on such occasions of the intended purpose of processing and where necessary asked for your consent to storage.
The personal data collected in the context of our website will only be used without your consent to process orders or enquiries. Your data will be used in a centrally managed customer and interested parties database for which iiM GmbH is responsible, only with your consent. The use of this data will be limited to advertising and market and opinion research purposes. You may withdraw your consent with future effect at any time.
Your data will not be sold, leased or made available to third parties in any way other than described here. Personal data will be transferred to government institutions and authorities only within the framework of mandatory national legislation. We require our employees, agencies and dealers to act in strictest confidence.
Sending information by e-mail and newsletter
Newsletters are sent based on registration by the user on the website:
Our website offers users the option to subscribe to a free newsletter. The data entered on screen when registering for the newsletter is sent to us.
This concerns e-mail address, title, name, company and your selection of our brands.
The following data is also collected during registration:
(1) IP address of the requesting computer
(2) Date and time of registration
Your consent will be obtained for processing your data and reference made to this Data Privacy Policy as part of the registration process. The newsletter will be sent based on the purchase of goods or services:
If you purchase goods or services and in doing so provide your e-mail address, we may subsequently use this to send you a newsletter. In this case, the newsletter will only contain direct marketing for similar own goods or services.
Data will not be passed on to third parties in connection with the processing of data for sending out newsletters. This data will be used solely for the purpose of sending the newsletter.
If the user has given their consent, the legal basis for processing data following newsletter registration by a user will be Article 6 (1) (a) GDPR. The legal basis for sending the newsletter following the purchase of goods or services will be Article 7 (3) UWG [German Act against Unfair Competition]
We only measure the opening and reading rates of our newsletters for our internal statistics. Therefor, the e-mail address and the IP address of the reader as well as the date and time of the reading time are recorded. These statistics allow us to tailor our newsletter content to the interests of the recipients more precisely.
Contact
You can contact us at our e-mail address or using the contact form. Obviously, we will only use personal data transferred in this way for the purpose for which you provided this when you contacted us.
Insofar as we ask for information to be entered in our contact form, which is not necessary for establishing contact, this information is always marked as optional. This information allows us to put your enquiry into specific terms and handle your concerns more effectively. Providing this information is entirely voluntary and is done with your consent. If the information in question refers to communication channels (for example, e-mail address, phone number), you also give consent for us to contact you or deal with your request via these communication channels.
Obviously, you can withdraw this consent for the future at any time. If you wish to withdraw your consent, please contact our data protection officer whose contact details are provided below.
Applications
You can apply directly to iiM by e-mail. Your online application will be forwarded directly to the HR department and treated in confidence as a matter of course. Naturally, your details will be used solely to process your application and not passed on to third parties outside iiM GmbH.
If you have applied for a particular position and this has already been filled, or we believe you are also suited or more suited to another position, we would be happy to pass your application on within our company. Please tell us if you do not agree to your application being passed on. Your personal data will be deleted at the end of the application process, either without undue delay or after no more than six months, unless you have given us your explicit consent for longer storage of your data.
Transfer of data to partner companies
In principle, we will not send your data to third parties outside iiM GmbH unless we are legally obliged to do so or passing data on is necessary for performing the contractual relationship or you have given explicit consent to the passing on of your data in advance. External service providers and partner companies will only obtain your data insofar as this is necessary for processing your enquiry. However, in such cases, the scope of data transferred will be kept to the required minimum. Insofar as our service providers come into contact with your personal data, we will ensure that these providers comply with data protection regulations in the same way. Please also note the respective provider’s privacy notice. The respective service provider is responsible for the content of third-party services whereby we check the services as far as is reasonable for compliance with statutory requirements.
Transfer of data to external service providers (processors)
Your data will be passed on to service partners provided these are acting on our behalf and support iiM in the provision of its services.
Your personal data will be processed by contracted service providers within the framework of processing pursuant to Article 28 GDPR. The above-mentioned providers will only gain access to personal data that is necessary for carrying out the respective activity. These providers may not pass on your personal data or use it for other purposes, in particular for their own marketing purposes.
Insofar as external service providers come into contact with your personal data, we have ensured through legal, technical and organisational measures as well as through regular checks that these providers also comply with applicable data protection regulations. There will be no commercial distribution of your personal data to other companies.
Website optimisation tools
In the context of collecting personal data using website optimisation tools, we refer to our legitimate interest in accordance with Article 6 (1) (f) in conjunction with recital 47. According to the above, direct marketing constitutes a legitimate interest. Your interests, fundamental rights and freedoms shall not override our interest in marketing as we provide comprehensive details of data collection in our Data Privacy Policy, and you have the option to opt out (using the relevant link or in your browser settings) at any time. In addition, we only use pseudonymous tracking.
Cookies
Some areas of our websites use so-called cookies. A cookie is a small text file which a website deposits on your hard drive. Cookies do not damage your computer or contain viruses. The cookies from our websites do not collect personal data of any kind. We use the information contained in cookies to make it easier for you to use our sites and to adapt them to your needs.
Our site uses both session cookies and permanent cookies. Session cookies are temporary cookies stored in the user's internet browser until the browser window is closed and the session cookies deleted. Permanent cookies are used for repeated visits and are stored in the user's browser for a particular time period (usually one year or longer). These cookies are not deleted when the browser is closed. This type of cookie is used to reapply a user's preferences as soon as he or she returns to the site.This consent is given in accordance with Section 25 TTDSG via our cookie banner when you visit our website for the first time. Your consent can be changed or revoked at any time via the cookie setting (fingerprint symbol on the left-hand side of the screen).
Of course, you can also view our website without cookies. If you do not wish cookies to be stored on your computer, you can deactivate the corresponding option in your browser's system settings. You can delete stored cookies in you browser's system settings at any time. You can find details on how this works in your browser manufacturer's instructions. We would like to point out, however, that not accepting cookies may restrict your use of our web offering.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; ‘Google’). Use includes ‘Universal Analytics’ mode. This makes it possible to assign data, sessions and interactions to a pseudonymous user ID across several devices and thus analyse a user’s activities across devices.
Google Analytics uses ‘cookies’, text files stored on your computer that enable analysis of your use of the website. The information generated by a cookie about your use of the website will generally be transmitted to and stored on Google servers in the United States.
However, if IP anonymisation is enabled on this website, your IP address will be abbreviated by Google beforehand within Member States of the European Union or in other states that are party to the Agreement on the European Economic Area. Full IP addresses will only be sent to a Google server in the United States and abbreviated there in exceptional cases. Google will not combine the IP address sent by your browser in the context of Google Analytics with other data. Google will use this information on behalf of the operator of this website to analyse your use of the website, compile reports about website activities, and provide additional services linked to website and Internet use for the website operator. Our legitimate interest in data processing also relates to these purposes.
The legal basis for using Google Analytics will be Article 15 (3) TMG (German Act on Telemedia) and Article 6 (1) (f) GDPR respectively. Data sent by us and linked to cookies, user IDs or advertising IDs will be deleted automatically after 14 months. Data whose retention period has ended will be deleted automatically once a month. More detailed information on terms and conditions of use and data privacy is available at:
https://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=de.
Leadinfo
We use the lead generation service provided by Leadinfo B.V., Rotterdam, The Netherlands, which recognizes visits of companies to our website based on IP addresses and shows us related publicly available information, such as company names or addresses. In addition, Leadinfo places two first-party cookies for providing transparency on how our visitors use our website and the tool processes domains from provided form inputs (e.g. “leadinfo.com”) to correlate IP addresses with companies and to enhance its services. For additional information, please visit www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In the event of an opt-out, your data will no longer be used by Leadinfo
Social bookmarks
Social bookmarks from Facebook, Xing, LinkedIn, Twitter and YouTube are integrated into our website. Social bookmarks are online bookmarks that users of such services can use to collect links and news items. These are only integrated into our website as links to the respective service. If you click on the integrated graphic you will be redirected to the site of the respective provider, i.e. user information is only passed on to the respective provider at this point. Information regarding the handling of your personal data when using these websites can be found in the providers’ respective privacy policies.
Data security
iiM GmbH implements technical and organisational security measures to protect your data managed by us against accidental or intentional manipulation, loss, destruction or access by unauthorised parties. Our security measures are constantly being improved in accordance with technological developments.
Rights of data subjects
If your personal data is processed, you are a data subject in accordance with the GDPR and you have the following rights in relation to a controller:
Right of access in accordance with Article 15 GDPR
You may request confirmation from us as to whether personal data concerning you are being processed by us. If we have processed your data, you are entitled to other rights of access referred to in Article 15 GDPR.
Right to rectification
If your data, which we have collected from you is incorrect or incomplete, you may request immediate rectification by us in accordance with Article 16 GDPR.
Right to restriction of processing
You may also request the restriction of processing of personal data concerning you in accordance with Article 18 GDPR.
Where processing has been restricted, your data may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. We will notify you prior to lifting the restriction.
Right to erasure
You may request the erasure of personal data concerning you without undue delay where one of the grounds in Article 17 (1) GDPR applies, unless an exception to the obligation to erase applies in accordance with Article 17 (3) GDPR.
Right to notification
If you have exercised your right to rectification or erasure of personal data or restriction of processing, we are bound in accordance with Article 19 GDPR to communicate this to each recipient to whom your personal data has been disclosed unless this proves impossible or involves disproportionate effort. You also have the right to be informed about the recipients. You have the right in relation to the controller to be informed about these recipients.
Right to data portability
You also have the right in accordance with Article 20 GDPR to receive personal data concerning you from us in a machine-readable format and to transmit this data to another controller without hindrance provided the conditions in Article 20 (1) (a) are satisfied, or to have your personal data transmitted directly from us to another controller where this is technically feasible and does not adversely affect the rights and freedoms of others. This right will not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
Right to object
You have the right in relation to iiM GmbH to object to processing of personal data concerning you in accordance with Article 6 (1) (f) GDPR.
If you have objected, we will no longer process your personal data unless legitimate grounds for processing override your interests, rights and freedoms, or processing serves for the establishment, exercise or defence of legal claims.
Right to withdraw consent under data protection law
You have the right to withdraw your consent under data protection law by declaring this to iiM GmbH. Withdrawing your consent will not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes this Regulation.
Questions and comments
iiM GmbH will respond to all appropriate requests for access to and, where appropriate, rectification, amendment or erasure of personal data. If you have any questions or comments regarding this Data Privacy Policy (for example, regarding access to and updating of your personal data), please click ‘Contact’ and send us your questions and suggestions.
Changes to the Data Privacy Policy
This Data Privacy Policy will be adapted on an ongoing basis in line with further development of the Internet or our services. We will announce changes on this site promptly. Visit this site regularly for up-to-date information regarding our regulations on the use of data.
Data Protection Officer
Sascha Feddrich
iiM GmbH
Neuer Friedberg 5
98527 Suhl
E-Mail:
Controller’s contact details
iiM GmbH
Neuer Friedberg 5
98527 Suhl
Germany
Management
Peter Anacker, Heiko Freund, Axel Müller (Address as above)
Contact
Phone: +49 3681 455 19-0
Fax: +49 3681 455 19-11
E-Mail: