Privacy policy

1. Data protection at a glance

General information

The information provided below gives a basic overview of what happens with your personal data when you visit this website. Person-specific data is all the data that can be used to identify you. You will find more detailed information about data protection in our Data privacy statement.

Data capture from this website

Who is responsible for capturing data from this website?

The data captured on this website is processed by the website operator. You will find their contact data in the imprint information on this website.

How do we gather your data?

Some of the data we gather is data you provide yourself. This can be, for example, the data you entered in the contact form.

Other data is automatically recorded by our IT systems when you visit the website. This is primarily technical data (e.g. Internet browser, operating system or time at which you visited the site). This data is recorded automatically, as soon as you visit the website.

What do we use your data for?

Some of the data is gathered to ensure we can run this website smoothly and without error. Other data can be used to analyse your user behaviour.

What are your rights with regard to your data?

You have the right to request information about your saved personal data, free of charge, at any time, including the source, recipient and purpose for which this data was saved. You also have the right to demand that your data is corrected or deleted. If you have further questions about data protection, you can contact us at any time at the address provided in the Imprint. You also have the right to of appeal to the relevant responsible regulatory body.

In some circumstances, you also have the right to request that limitations are placed on the extent to which your personal data is processed. You will find more detailed information about this in our Data privacy statement, under „Right to restrict processing“.

Analysis tools and tools from third-party suppliers

When you visit the website, your surfing behaviour can be evaluated statistically. This evaluation is primarily performed using cookies and analysis programmes. Your surfing behaviour is usually analysed anonymously: it cannot be traced back to you.

You can object to this analysis or prevent it from happening by not using particular tools. You will find more detailed information about these tools and your options for objecting to this analysis in the following Data privacy statement.

2. Hosting

External hosting

This website is hosted by an external service provider (host). Person-specific data entered on this website is saved on the host’s servers. This is primarily IP addresses, contact queries, meta data, communications data, contract data, contact data, names, website accesses and other data generated by a website.

The host acts for the purpose of fulfilling their contractual obligations to our potential and existing customers (Art. 6 Para. 1 Subsection b, GDPR) and in the interest of ensuring secure, quick and efficient provision of our online offering by a professional provider (Art 6 para. 1 subsection f, GDPR).

Our host will only use your data to the extent necessary to fulfil their service obligations and will comply with our instructions with regard to this data.

Conclusion of a contract involving order processing

To ensure that data is processed in accordance with data protection legislation, we have signed a contract involving order processing with our host.

3. General Information and required Information

Data protection

The operators of this website take the protection of your personal data very seriously. We handle your personal information confidentially, in accordance with the relevant legal data protection regulations and this Data privacy statement.

A certain amount of your personal data is collected when you use this website. Personal data is data with which you can be identified. The data privacy statement explains which data we gather and the purpose for which it is used. It also describes how, and for what purpose, this data is used.

We would like to point out that data transferred over the Internet (e.g. during communication by e-mail) may not be secure. It is not possible to protect this data completely against access by third parties.

Where to contact the responsible party

The party responsible for processing data on this website is:

C. M. Heim GmbH, Elektronik-Feingeräte
Mark Heim
Fockenbrunnen 17/1
72218 Wildberg

Telephone: +49 (0)7054 9323-0
e-mail: mobs@cmheim.de

The responsible party is the natural or legal person that solely, or together with others, decides about the purposes of and resources for processing personal data (such as e-mail addresses).

Withdrawal of your consent to the processing of data

Many types of processing data are only possible if you give your specific consent. You can withdraw your consent at any time after you have given it. To do so, all you need to do is send us a simple message by e-mail. Until you withdraw your consent to the processing of data, it is legal for us to do so.

Right to object to the collection of data in particular cases and to direct advertising (Art. 21, GDPR)

IF DATA PROCESSING HAS BEEN CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 SUBSECTION E OR F, GDPR, YOU HAVE THE RIGHT TO WITHDRAW YOUR CONSENT TO THE PROCESSING OF YOUR PERSONAL DATA, FOR WHATEVER REASONS MAY ARISE, ACCORDING TO YOUR PARTICULAR SITUATION, AT ANY TIME. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU WILL FIND DETAILS OF THE PARTICULAR LEGAL BASIS FOR DATA PROCESSING IN THIS DATA PRIVACY STATEMENT. IF YOU RAISE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN PROVE THAT THERE ARE COMPELLING LEGITIMATE REASONS FOR PROCESSING IT, WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR THAT WE ARE PROCESSING YOUR DATA FOR THE PURPOSE OF ESTABLISHING, EXERCISING OR DEFENDING LEGAL CLAIMS (RIGHT TO OBJECT IN ACCORDANCE WITH ART. 21 PARA. 1, GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT, TO OBJECT TO THE PROCESSING OF PERSONAL DATA THAT CONCERNS YOU FOR THE PURPOSE OF THAT TYPE OF ADVERTISING. THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS CARRIED OUT TOGETHER WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR THE PURPOSES OF DIRECT ADVERTISING (RIGHT TO OBJECT IN ACCORDANCE WITH ART. 21 PARA. 2, GDPR).

Right to appeal to the responsible regulatory body

If a breach of GDPR is discovered, the persons affected have the right to appeal to a regulatory body, especially in the member state in which they habitually reside, their place of work or the location at which the suspected contravention took place. Their right to appeal is unaffected by other administrative or legal remedies.

Right to data portability

You have the right to make data that we have processed automatically, on the basis of your permission or as part of the fulfilment of a contract, available to a third-party in a standard machine-readable format. This data will only be sent directly to another responsible person if this is technically possible.

SSL or TLS encryption

We use SSL or TLS encryption, both for reasons of data security, and to protect the transmission of confidential contents, such as the orders or enquiries you send to us, as a user of this website. You can identify an encrypted link because the browser’s address line changes from „http://“ to „https://“ and the padlock icon is displayed in your browser address line.

When SSL or TLS encryption is enabled, the data you send to us cannot be intercepted by a third party.

Information, deletion and correction

As specified by the valid legal regulations, you have the right to request information about your saved personal data, its origin, recipient and the purpose for which it is being processed, at any time, free of charge. You also have the right to correct this data or have it deleted. If you have further questions about person-specific data, you can contact us at any time at the address provided in the Imprint.

Right to restrict processing

You have the right to ask us to restrict the extent to which your personal data is processed. You can contact us about this topic at any time, at the address provided in the imprint. The right to request a restriction of processing applies in the following cases:

  • If you challenge the correctness of the personal data we have saved about you, we will usually require time to investigate this. You have the right to request that the extent to which your data is processed is restricted for the duration of this investigation.
  • If your personal data has been processed unlawfully, you can request that its processing is restricted rather than requesting that this data is deleted.
  • If we no longer require your personal data, but you need it for the purpose of establishing, exercising or defending legal claims, you have the right to request that its processing is restricted rather than requesting that this data is deleted.
  • If you have filed a objection in accordance with Art. 21 Para. 1, GDPR, a fair balance must be struck between your interests and our own interests. Until it has been established, whose interests take precedence, you have the right to request that the extent to which your data is processed is restricted.

If you have requested that the processing of your personal data be restricted, this data can only be processed (apart from saving it) at your specific request or to establish, exercise or defend legal claims, or to protect the rights of another individual or entity or for reasons of important public interest of the European Union or a Member State.

Objection to advertising-e-mails

You can expressly object to your contact data, which was published to comply with the requirement to provide publication details, from being used for the purposes of sending unsolicited advertising and information materials. The website operators expressly reserve the right to take legal action if they receive advertising information such as spam e-mails.

4. Data capture from this website

Cookies

Internet website pages sometimes use cookies. Cookies cause no harm to your computer and do not contain viruses. We use cookies to make our offering more user-friendly, effective and secure. Cookies are small text files that are saved by your browser and stored on your computer.

The majority of the cookies we use are „session cookies“. They are deleted automatically as soon as you leave the website. Other cookies remain stored on your end device until you delete them. The cookies help us identify your browser again the next time you visit the site.

You can change your browser settings to ensure you are informed when cookies are used, to permit their use on a case-by-case basis, to refuse cookies in some cases, or generally, and to automatically delete cookies when you close your browser. Deactivating cookies might limit the functionality of this website.

The cookies needed to run electronic communications processes, or to provide some of the functions you want to use (e.g. the shopping basket function), are stored in accordance with Art. 6 Para. 1 Subsection f, GDPR. The website operator has a legitimate interest in storing cookies to ensure the services they provide are optimised and free from technical errors. If express consent (e.g. consent to the storage of cookies) has been requested, the data will be processed exclusively on the basis of Art. 6 Para. 1 Subsection a, GDPR. This consent can be withdrawn at any time.

If other cookies (e.g. cookies used to analyse your surfing behaviour) are stored, these will be handled separately in this Data privacy statement.

Server log files

The website provider automatically gathers and stores information in server log files, which your browser automatically sends to us. These are:

  • browser type and browser version
  • the operating system you use
  • referrer URL
  • host name of the accessing computer
  • time of the server query
  • IP address.

This data is not aggregated with other data sources.

This data is recorded in accordance with Art. 6 Para. 1 Subsection f, GDPR. The website operator has a legitimate interest in ensuring their website is optimised and runs without any technical errors. The server log files are created to ensure this.

Contact form

If you use our contact form to send an enquiry, we use the information you provide in this form, including your contact data, to process the enquiry and then store it in case you have any follow-up questions. We will not give out this data to anyone without your express permission.

This data is processed in accordance with Art. 6 Para. 1 Subsection b, GDPR, to the extent needed to fulfil a contract or to carry out precontractual obligations. In every other case, the data is processed in accordance with our legitimate interest in processing the enquiries we receive as effectively as possible (Art. 6 Para. 1 Subsection f, GDPR) or with your consent (Art. 6 Para. 1 Subsection a GDPR) if this has been requested.

We will retain the data you provide in the contact form until you request us to delete it, withdraw your consent to its storage or if the purpose for which it was stored is no longer relevant (e.g. we have finished processing your enquiry). Mandatory legal provisions – especially retention periods – remain unaffected.

Contact by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, we will store and process your enquiry and all the resulting personal data (name, enquiry) for the purpose of processing your request. We will not give out this data to anyone without your express permission.

This data is processed in accordance with Art. 6 Para. 1 Subsection b, GDPR, to the extent needed to fulfil a contract or to carry out precontractual obligations. In all other cases, processing this data is based on your consent (Art. 6 Para. 1 Subsection a, GDPR) and/or our legitimate interest (Art. 6 Para. 1 Subsection f, GDPR), because we have a legitimate interest in processing the queries we receive as effectively as possible.

We will retain the data you provide in the contact form until you request us to delete it, withdraw your consent to its storage or if the purpose for which it was stored is no longer relevant (e.g. after processing your enquiry is complete). Mandatory legal provisions – especially retention periods – remain unaffected.

5. Analysis tools and advertising

Matomo (formerly Piwik)

This website uses Matomo, the open source web analysis service. Matomo uses „cookies“. They are text files which are stored on your computer and which can be used to analyse your visit to the web site. To do this, the information generated by the cookie about how you use this website is saved on our server. The IP address is anonymised before it is stored.

Matomo cookies remain on your end device until you delete them.

The storage of Matomo cookies and the use of this analysis tool is performed in accordance with Art. 6 Para. 1 Subsection f, GDPR. The website operator has legitimate interest in the anonymised analysis of user behaviour, which they can use to optimise their website offering and advertising. If express consent (e.g. consent to the storage of cookies) has been requested, the data will be processed exclusively on the basis of Art. 6 Para. 1 Subsection a, GDPR. This consent can be withdrawn at any time.

The information generated by the cookie about how you use this website will not be made available to third parties. You can use the relevant setting on your browser software to prevent cookies from being stored. However, please note that you will not be able to make full use of the web site functionality if you do so.

6. Own services

How we handle applicant data

If you are interested in working for us, you can send us a job application (e.g. by e-mail, by post or by using our online application form). The following section describes how we use the personal data we receive from you as part of your application process, which data used and for what purpose. We guarantee that your data is gathered, processed and used in full compliance with currently applicable data protection legislation, that we comply with all other legal regulations and that we always treat your data with the strictest confidentiality.

Scope and purpose of data collection

When you send us an application, we process the personal data it contains (e.g. contact and communications data, application documents, notes about job interviews etc.), to the extent required for us to make a decision about your suitability for employment with us. The legal basis for this in Germany is Art. 26 BDSG-new (initiation of an employment relationship), Art. 6 Para. 1 Subsection b, GDPR (general preparation for a contract) and, if you have given your consent, Art. 6 Para. 1 Subsection a, GDPR. Consent can be withdrawn at any time. Within our company, your personal data will only be passed onto people who are directly involved with processing your application.

If your job application is successful, the data you supplied will be stored in our data processing systems in accordance with Art. 26 BDSG-new and Art. 6 Para. 1 Subsection b, GDPR for the purposes of maintaining your employment relationship with us.

Data retention period

If we are unable to offer you a job, or you turn down our offer of a job or withdraw your application, we reserve the right to store the data you have provided to us on the basis of our legitimate interest (Art. 6 Para. 1 Subsection f, GDPR).) for up to 6 months after the application process (rejection or withdrawal of application). After that, the data will be deleted and your physical application documents will be destroyed. The data will be stored in case it is required as proof, for example if there is a legal dispute. If it becomes clear that this data will still be required after this 6 month retention period expires (e.g. due to a potential or on-going legal dispute), it will not be deleted until the purpose of its continued storage is no longer relevant.

Personal data can also be stored for a longer period if you have expressly given your consent to this (Art. 6 Para. 1 Subsection a, GDPR) or if legal retention obligations override the general requirement for its deletion.