Data privacy statement
1. Data protection at a glance
General information
The information provided below gives a basic overview of what happens with your personal data when you visit this website. Personal data is data by which you can be identified. You will find more detailed information about data protection in our Data privacy statement.
Data capture on this website
Who is responsible for capturing data from this website?
The data captured on this website is processed by the website operator. You will find their contact data in the imprint information on this website.
How do we gather your data?
Some of the data we gather is data you provide yourself. This can be, for example, the data you entered in the contact form.
Other data is automatically recorded by our IT systems when you visit the website. This is primarily technical data (e.g., Internet browser, operating system, or time at which you visited the site). This data is recorded automatically, as soon as you visit the website.
What do we use your data for?
Some of the data is gathered to ensure we can run this website smoothly and without error. Other data can be used to analyze your user behavior.
What are your rights with regard to your data?
You have the right to request information about your saved personal data, free of charge, at any time, including the source, recipient, and purpose for which this data was saved. You also have the right to demand that your data is corrected or deleted. To make this request, or if you have further questions about data protection, you can contact us at any time at the address provided in the imprint. You also have the right to file an appeal with the responsible regulatory body.
In some circumstances, you also have the right to request that limitations are placed on the extent to which your personal data is processed. You will find more detailed information about this in our Data privacy statement, under "Right to restrict processing."
Analysis tools and tools from third-party suppliers
When you visit the website, your surfing behavior can be evaluated statistically. This evaluation is primarily performed using cookies and analysis programs. Your surfing behavior is usually analyzed anonymously – it cannot be traced back to you.
You can object to this analysis or prevent it from happening by not using particular tools. You will find more detailed information about these tools and your options for objecting to this analysis in the following Data privacy statement.
2. Hosting
External hosting
This website is hosted by an external service provider (host). Personal data entered on this website is saved on the host's servers. This is primarily IP addresses, contact queries, metadata, communications data, contract data, contact data, names, website accesses, and other data generated by a website.
The host acts for the purpose of fulfilling their contractual obligations to our potential and existing customers (Art. 6 Para. 1 Subsection b, GDPR) and in the interest of ensuring secure, quick, and efficient provision of our online offering by a professional provider (Art 6 Para. 1 Subsection f, GDPR).
Our host will only use your data to the extent necessary to fulfill their service obligations and will comply with our instructions with regard to this data.
Conclusion of a contract involving order processing
To ensure that data is processed in accordance with data protection legislation, we have signed a contract involving order processing with our host.
3. General information and required information
Data protection
The operators of this website take the protection of your personal data very seriously. We handle your personal information confidentially, in accordance with the relevant legal data protection regulations and this Data privacy statement.
A certain amount of your personal data is collected when you use this website. Personal data is data by which you can be identified. The Data privacy statement explains which data we gather and the purpose for which it is used. It also describes how, and for what purpose, this data is used.
We would like to point out that data transferred over the Internet (e.g., during communication by e-mail) may not be secure. It is not possible to protect this data completely against access by third parties.
Where to contact the responsible party
The party responsible for processing data on this website is:
C. M. Heim GmbH, Elektronik-Feingeräte
Mark Heim
Fockenbrunnen 17/1
72218 Wildberg, Germany
Telephone: +49 (0)7054 9323-0
E-mail: mobs@cmheim.de
The responsible party is the natural or legal person that solely, or together with others, decides about the purposes of and resources for processing personal data (such as names and e-mail addresses).
Withdrawal of your consent to the processing of data
Many types of processing data are only possible if you give your specific consent. You can withdraw your consent at any time after you have given it. To do so, all you need to do is send us a simple message by e-mail. Until you withdraw your consent to the processing of data, it is legal for us to do so.
Right to object to the collection of data in particular cases and to direct advertising (Art. 21, GDPR)
IF DATA PROCESSING HAS BEEN CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 SUBSECTION E OR F, GDPR, YOU HAVE THE RIGHT TO WITHDRAW YOUR CONSENT TO THE PROCESSING OF YOUR PERSONAL DATA, FOR WHATEVER REASONS MAY ARISE, ACCORDING TO YOUR PARTICULAR SITUATION, AT ANY TIME. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU WILL FIND DETAILS OF THE PARTICULAR LEGAL BASIS FOR DATA PROCESSING IN THIS DATA PRIVACY STATEMENT. IF YOU RAISE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN PROVE THAT THERE ARE COMPELLING LEGITIMATE REASONS FOR PROCESSING IT, WHICH OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THAT WE ARE PROCESSING YOUR DATA FOR THE PURPOSE OF ESTABLISHING, EXERCISING, OR DEFENDING LEGAL CLAIMS (RIGHT TO OBJECT IN ACCORDANCE WITH ART. 21 PARA. 1, GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA THAT CONCERNS YOU FOR THE PURPOSE OF THAT TYPE OF ADVERTISING. THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS CARRIED OUT TOGETHER WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR THE PURPOSES OF DIRECT ADVERTISING (RIGHT TO OBJECT IN ACCORDANCE WITH ART. 21 PARA. 2, GDPR).
Right to appeal to the responsible regulatory body
If a breach of GDPR is discovered, the persons affected have the right to appeal to a regulatory body, especially in the member state in which they habitually reside, their place of work, or the location at which the suspected contravention took place. Their right to appeal is unaffected by other administrative or legal remedies.
Right to data portability
You have the right to make data that we have processed automatically, on the basis of your permission or as part of the fulfillment of a contract, available to you or to a third party in a standard machine-readable format. This data will only be sent directly to another responsible person if this is technically possible.
SSL or TLS encryption
We use SSL or TLS encryption, both for reasons of data security, and to protect the transmission of confidential contents, such as the orders or inquiries you send to us, as a user of this website. You can identify an encrypted link because the browser's address line changes from "http://" to "https://" and the padlock icon is displayed in your browser address line.
When SSL or TLS encryption is enabled, the data you send to us cannot be intercepted by a third party.
Information, deletion, and correction
As specified by the valid legal regulations, you have the right to request information about your saved personal data, its origin, the recipient, and the purpose for which it is being processed, at any time, free of charge. You also have the right to correct this data or have it deleted. To make this request, or if you have further questions about personal data, you can contact us at any time at the address provided in the imprint.
Right to restrict processing
You have the right to ask us to restrict the extent to which your personal data is processed. You can contact us about this topic at any time at the address provided in the imprint. The right to request a restriction of processing applies in the following cases:
-
If you challenge the correctness of the personal data we have saved about you, we will usually require time to investigate this. You have the right to request that the extent to which your data is processed is restricted for the duration of this investigation.
-
If your personal data has been processed unlawfully, you can request that its processing is restricted rather than requesting that this data is deleted.
-
If we no longer require your personal data, but you need it for the purpose of establishing, exercising, or defending legal claims, you have the right to request that its processing is restricted rather than requesting that this data is deleted.
-
If you have filed an objection in accordance with Art. 21 Para. 1, GDPR, a fair balance must be found between your interests and our interests. Until it has been established whose interests take precedence, you have the right to request that the extent to which your data is processed is restricted.
If you have requested that the processing of your personal data be restricted, this data can only be processed (apart from saving it) at your specific request or to establish, exercise, or defend legal claims, or to protect the rights of another individual or entity or for reasons of important public interest of the European Union or a Member State.
Objection to advertising-e-mails
You can expressly object to your contact data, which was published to comply with the requirement to provide publication details, from being used for the purposes of sending unsolicited advertising and information materials. The website operators expressly reserve the right to take legal action if they receive advertising information such as spam e-mails.
4. Data capture on this website
Cookies
Internet website pages sometimes use cookies. Cookies cause no harm to your computer and do not contain viruses. We use cookies to make our offering more user friendly, effective, and secure. Cookies are small text files that are saved by your browser and stored on your computer.
The majority of the cookies we use are "session cookies." They are deleted automatically as soon as you leave the website. Other cookies remain stored on your end device until you delete them. The cookies help us identify your browser again the next time you visit the site.
You can change your browser settings to ensure you are informed when cookies are used, to permit their use on a case-by-case basis, to refuse cookies in some cases or generally, and to automatically delete cookies when you close your browser. Deactivating cookies might limit the functionality of this website.
The cookies needed to run electronic communications processes, or to provide some of the functions you want to use (e.g., the shopping basket function), are stored in accordance with Art. 6 Para. 1 Subsection f, GDPR. The website operator has a legitimate interest in storing cookies to ensure the services they provide are optimized and free from technical errors. If express consent has been requested (e.g., consent to the storage of cookies), the data will be processed exclusively on the basis of Art. 6 Para. 1 Subsection a, GDPR. This consent can be withdrawn at any time.
If other cookies are stored (e.g., cookies used to analyze your surfing behavior), these will be handled separately in this Data privacy statement.
Server log files
The website provider automatically gathers and stores information in server log files, which your browser automatically sends to us. These are:
- browser type and browser version
- the operating system you use
- referrer URL
- host name of the accessing computer
- time of the server query
- IP address
This data is not aggregated with other data sources.
This data is recorded in accordance with Art. 6 Para. 1 Subsection f, GDPR. The website operator has a legitimate interest in ensuring their website is optimized and runs without any technical errors. The server log files are created to ensure this.
Contact form
If you use our contact form to send an inquiry, we use the information you provide in this form, including your contact data, to process the inquiry and then store it in case you have any follow-up questions. We will not give out this data to anyone without your express permission.
This data is processed in accordance with Art. 6 Para. 1 Subsection b, GDPR, to the extent needed to fulfill a contract or to carry out precontractual obligations. In every other case, the data is processed in accordance with our legitimate interest in processing the inquiries we receive as effectively as possible (Art. 6 Para. 1 Subsection f, GDPR) or with your consent (Art. 6 Para. 1 Subsection a, GDPR) if this has been requested.
We will retain the data you provide in the contact form until you request us to delete it or withdraw your consent to its storage, or if the purpose for which it was stored is no longer relevant (e.g., we have finished processing your inquiry). Mandatory legal provisions – especially retention periods – remain unaffected.
Contact by e-mail, telephone, or fax
If you contact us by e-mail, telephone, or fax, we will store and process your inquiry and all the resulting personal data (name, inquiry) for the purpose of processing your request. We will not give out this data to anyone without your express permission.
This data is processed in accordance with Art. 6 Para. 1 Subsection b, GDPR, to the extent needed to fulfill a contract or to carry out precontractual obligations. In all other cases, processing this data is based on your consent (Art. 6 Para. 1 Subsection a, GDPR) and/or our legitimate interest (Art. 6 Para. 1 Subsection f, GDPR), because we have a legitimate interest in processing the queries we receive as effectively as possible.
We will retain the data you provide in the contact form until you request us to delete it or withdraw your consent to its storage, or if the purpose for which it was stored is no longer relevant (e.g., after processing your inquiry is complete). Mandatory legal provisions – especially retention periods – remain unaffected.
5. Analysis tools and advertising
Matomo (formerly Piwik)
This website uses Matomo, the open source web analysis service. Matomo uses cookies. These are text files that are stored on your computer that can be used to analyze your visit to the website. To do this, the information generated by the cookie about how you use this website is saved on our server. The IP address is anonymized before it is stored.
Matomo cookies remain on your end device until you delete them.
The storage of Matomo cookies and the use of this analysis tool is performed in accordance with Art. 6 Para. 1 Subsection f, GDPR. The website operator has legitimate interest in the anonymized analysis of user behavior, which they can use to optimize their website offering and advertising. If express consent has been requested (e.g., consent to the storage of cookies), the data will be processed exclusively on the basis of Art. 6 Para. 1 Subsection a, GDPR. This consent can be withdrawn at any time.
The information generated by the cookie about how you use this website will not be made available to third parties. You can use the relevant setting on your browser software to prevent cookies from being stored. However, please note that you will not be able to make full use of the website functionality if you do so.
If you do not want your data to be saved and used, you can disable these options here. In this case, an opt-out cookie is stored in your browser to prevent Matomo utilization data from being stored. If you delete your cookies, the Matomo opt-out cookie will also be deleted. You must then enable the opt-out cookie again when you revisit this website.
<button id="kaoptout">Deactivate anonymous tracking</button>
6. Own services
How we handle applicant data
If you are interested in working for us, you can send us a job application (e.g., by e-mail, postal mail, or our online application form). The following section describes the scope and purpose of the personal data we receive from you as part of the application process. We guarantee that your data is gathered, processed, and used in compliance with currently applicable data protection legislation, that we comply with all other legal regulations, and that we always treat your data with the strictest confidentiality.
Scope and purpose of data collection
When you send us an application, we process the personal data it contains (e.g., contact and communications data, application documents, notes about job interviews), to the extent required for us to make a decision about your suitability for employment with us. The legal bases for this in Germany are Art. 26 BDSG-new (initiation of an employment relationship), Art. 6 Para. 1 Subsection b, GDPR (general preparation for a contract), and, if you have given your consent, Art. 6 Para. 1 Subsection a, GDPR. Consent can be withdrawn at any time. Within our company, your personal data will only be passed on to people who are directly involved with processing your application.
If your job application is successful, the data you supplied will be stored in our data processing systems in accordance with Art. 26 BDSG-new and Art. 6 Para. 1 Subsection b, GDPR for the purposes of maintaining your employment relationship with us.
Data retention period
If we are unable to offer you a job, or if you turn down our offer of a job or withdraw your application, we reserve the right to store the data you have provided to us on the basis of our legitimate interest (Art. 6 Para. 1 Subsection f, GDPR) for up to six months after the application process (rejection or withdrawal of application). After that, the data will be deleted, and your physical application documents will be destroyed. The data will be stored in case it is required as proof, for example if there is a legal dispute. If it becomes clear that this data will still be required after this six-month retention period expires (e.g., due to a potential or on-going legal dispute), it will not be deleted until the purpose of its continued storage is no longer relevant.
Personal data can also be stored for a longer period if you have expressly given your consent to this (Art. 6 Para. 1 Subsection a, GDPR) or if legal retention obligations override the general requirement for its deletion.