Privacy Policy
1. Data Protection at a Glance
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
Data Collection on This Website
Who is responsible for data collection on this website?
I-EC GmbH
Rudolf-Wild-Straße 84
69214 Eppelheim
Email: kontakt@cleanroomprocesses.com
How do we collect your data?
Your data is collected partly by you providing it to us. Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page access).
What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right at any time to obtain free information about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke it at any time. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
2. Hosting and Content Delivery Networks
Amazon Web Services (AWS)
We host our website with Amazon Web Services (AWS). The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg.
When you visit our website, your personal data is processed on AWS servers. Personal data may also be transferred to the AWS parent company in the USA. Data transfer to the USA is based on EU Standard Contractual Clauses.
The use of AWS is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website. We have concluded a data processing agreement (DPA) with the provider.
Amazon CloudFront CDN
We use the Amazon CloudFront Content Delivery Network. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg.
Amazon CloudFront CDN is a globally distributed content delivery network. The information transfer between your browser and our website is technically routed through the content delivery network. Data transfer to the USA is based on EU Standard Contractual Clauses.
The use of Amazon CloudFront CDN is based on our legitimate interest in the most error-free and secure provision of our website (Art. 6(1)(f) GDPR). We have concluded a data processing agreement (DPA) with the provider.
3. General Notes and Mandatory Information
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Storage Duration
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data.
General Notes on the Legal Basis for Data Processing
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR. In the case of consent to the processing of special categories of data, processing is based on Art. 6(1)(b) GDPR. For processing to fulfill legal obligations on the basis of Art. 6(1)(c) GDPR. For processing to safeguard legitimate interests on the basis of Art. 6(1)(f) GDPR.
Note on Data Transfer to the USA and Other Third Countries
We use tools from companies based in the USA or other third countries that are not secure under data protection law. When these tools are active, your personal data may be transferred to and processed in these third countries.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke consent already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to Object to Data Collection in Special Cases (Art. 21 GDPR)
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation.
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority.
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.
SSL/TLS Encryption
This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://".
Access, Deletion and Correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of data processing and, if applicable, a right to correction or deletion of this data.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data.
4. Data Collection on This Website
Cookies
Our websites use so-called "cookies". Cookies are small data packets and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device.
Cookies can come from us (first-party cookies) or from third-party companies (so-called third-party cookies). Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing technically necessary cookies. Other cookies are only stored with your consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG).
Complianz Consent Technology
Our website uses the consent technology from Complianz to obtain your consent for the storage of certain cookies on your device and to document this in compliance with data protection regulations. The provider of this technology is Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands.
The use of Complianz is based on Art. 6(1)(c) GDPR.
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of server request
- IP address
The basis for data processing is Art. 6(1)(f) GDPR.
Contact Form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The legal basis for processing the data is Art. 6(1)(b) GDPR, if your inquiry is related to the fulfillment of a contract, or Art. 6(1)(f) GDPR.
Inquiry by Email, Telephone or Fax
If you contact us by email, telephone or fax, your inquiry including all resulting personal data will be stored and processed by us for the purpose of processing your request.
Registration on This Website
You can register on this website to use additional features. The legal basis for processing is Art. 6(1)(b) GDPR. The data collected during registration will be stored by us as long as you are registered on this website and will subsequently be deleted.
Registration with Google
Instead of registering directly on this website, you can register with Google. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The use is based on Art. 6(1)(f) GDPR.
5. Social Media
Social Media Elements with Shariff
This website uses elements of social media (e.g. Facebook, Instagram, LinkedIn, XING). The social media elements are implemented with the Shariff solution. A direct connection between your browser and the social media provider's server is only established when you actively click the corresponding button.
Elements of the social network Facebook are integrated on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses. We have concluded a joint processing agreement (Art. 26 GDPR) with Facebook.
Functions of the Instagram service are integrated on this website. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses. We have concluded a joint processing agreement (Art. 26 GDPR).
This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses.
This website uses elements of the XING network. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. According to XING, no personal data of users is stored.
6. Analysis Tools and Advertising
Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies on our website. The legal basis is Art. 6(1)(f) GDPR.
Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables the website operator to analyze the behavior of website visitors. The legal basis is Art. 6(1)(a) GDPR and § 25(1) TTDSG.
Browser Plugin: You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=en
Hotjar
This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta. Hotjar is a tool for analyzing your user behavior on this website. The legal basis is Art. 6(1)(a) GDPR (with consent) or Art. 6(1)(f) GDPR (without consent).
Deactivation: https://www.hotjar.com/policies/do-not-track/
7. Newsletter
Newsletter Data
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address. The legal basis is Art. 6(1)(a) GDPR. The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter.
8. Plugins and Tools
YouTube
This website embeds videos from the YouTube website. The operator of the website is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is Art. 6(1)(f) GDPR or Art. 6(1)(a) GDPR (with consent).
Google Fonts (Local Hosting)
This site uses so-called Google Fonts for the uniform display of fonts. The Google Fonts are installed locally. A connection to Google servers does not take place.
Google Maps
This site uses the Google Maps mapping service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is Art. 6(1)(f) GDPR or Art. 6(1)(a) GDPR (with consent). Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses.
Google reCAPTCHA
We use "Google reCAPTCHA" on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is Art. 6(1)(f) GDPR (spam/abuse prevention) or Art. 6(1)(a) GDPR (with consent).
Podigee
We use the podcast player from Podigee GmbH, Schlesische Straße 20, 10997 Berlin. The legal basis is Art. 6(1)(f) GDPR or Art. 6(1)(a) GDPR (with consent).
9. eCommerce and Payment Providers
Processing of Customer and Contract Data
We collect, process and use personal customer and contract data for the establishment, content arrangement and modification of our contractual relationships. The legal basis for this is Art. 6(1)(b) GDPR.
Data Transfer upon Contract Conclusion for Services and Digital Content
We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the credit institution entrusted with payment processing. The legal basis is Art. 6(1)(b) GDPR.
10. Own Services
Handling of Applicant Data
We offer you the opportunity to apply to us. Below we inform you about the scope, purpose and use of your personal data collected during the application process. The legal basis is § 26 BDSG, Art. 6(1)(b) GDPR and Art. 6(1)(a) GDPR (with consent).
Retention Period: If we are unable to make you a job offer, we reserve the right to retain the data you have submitted for up to 6 months after the end of the application process on the basis of our legitimate interests (Art. 6(1)(f) GDPR).
Inclusion in the Applicant Pool: If we are unable to make you a job offer, it may be possible to include you in our applicant pool. In the event of inclusion, all documents and information will be transferred to the applicant pool in order to contact you in the event of suitable vacancies. Inclusion is based exclusively on your express consent (Art. 6(1)(a) GDPR). Data from the applicant pool will be deleted no later than two years after consent is given.