Privacy policy

Responsibilities

We are responsible for your data. As a visitor to our website, you expect not only the offers and services of our company, but also a high level of quality and competence in the processing of your personal data. It is important to us that you can always see from the following information which personal data is collected and used during your visit to our website and when using our services, for what purpose and how you can exercise your rights.

Responsible for the collection and processing of personal data is the:
Sunfire Fuel Cells GmbH
Lindenstraße 45
17033 Neubrandenburg, Germany
Phone: +49 395 351 733-0
E-Mail: info@sunfire-fuel-cells.de
Website: www.sunfire-fuel-cells.de

General information

We take technical and organizational precautions to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons and to ensure that your rights are protected and that the applicable data protection regulations of the EU and the Federal Republic of Germany are complied with. The measures taken are designed to ensure the confidentiality and integrity of your data and to ensure the long-term availability and resilience of the systems and services when processing your data. They should also quickly restore data availability and access to it in the event of a physical or technical incident. Our security measures include the encryption of your data. All information you enter online is technically encrypted and then transmitted. This means that this information can never be viewed by unauthorized third parties. Our data processing and security measures are continuously improved in line with technological developments. Our employees are obligated in writing to maintain confidentiality and to comply with the requirements of the DSGVO

II. Provision of the website and creation of log files1. a) Description and scope of data processing
Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer.

The following data will be collected:
- User IP address
- Access date and time
- URL of the page called
- URL from which the user comes (referrer)
- Information about the type and version of the browser used (from the user agent)
- Operating system of the user (from the user agent)
The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.

1. b) Legal basis for the data processing
Legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO

1. c) Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.

1. d) Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after fourteen days at the latest. Additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

1. e) Possibility to object and remove
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

III. Verwendung von Cookies
1. a) Description and scope of data processing
We use cookies to make our website more user-friendly. Some elements of our website nevertheless require a page break.

The following data is stored and transmitted in the cookies:
- Session ID (to recognize the website visitor by paging until the browser is closed).
- Status of the info banner about the use of cookies

The user data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data is not stored together with other personal data of the user. When calling up our website, users are informed by an info banner about the use of cookies for analysis purposes and referred to this data protection declaration. In this context, there is also a note on how the storage of cookies can be prevented in the browser settings.

1. b) Legal basis of data processing
Die Rechtsgrundlage für die Verarbeitung personenbezogener Daten unter Verwendung von Cookies ist Art. 6 Abs. 1 lit. f DSGVO.

1. c) Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

We need cookies for the following applications:
- Use of forms (e.g. contact form and application form)
- To check whether the info banner about the use of cookies should be displayed again or for the first time

The user data collected through technically necessary cookies are not used to create user profiles. These purposes are also our legitimate interest in processing the personal data according to Art. 6 para. 1 lit. f DSGVO.

1. d) Duration of data storage, possibility of objection and elimination
Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full. The general rejection of cookies can be explained by the settings of your web browser. You can set your internet browser to notify you when cookies are set or to generally reject or restrict the setting of cookies. If you disable or restrict cookies via your web browser, various functions of our website will no longer be usable for you. You can also delete stored cookies at any time via your web browser, including automated ones.
Use the following links to learn about these options for the most popular browsers:
• Entdecker:
https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Feuerfuchs:
http://support.mozilla.org/de/kb/cookies-informationen-websites-auf-ihrem-computer
• Google Chrome:
http://support.google.com/chrome/bin/answer.py?hl=de&answer=95647
• Safari:
https://support.apple.com/kb/PH21411?locale=de_DE
• Oper:
http://help.opera.com/Linux/12.10/de/cookies.html.
If you have not set or made any other settings, cookies remain on your device until the browser is closed on your device, which activates the necessary technical functions and ensures that cookies remain on your device.

IV. Contact form and e-mail contact

1. a) Description and scope of data processing Contact form
If you have any questions or requests, please do not hesitate to contact us. To facilitate communication between you and us, a contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.

This information includes:
- Surname
- Company
- Email address
- Message

The provision of address and telecommunication data marked as mandatory in our contact/message forms is required for processing and responding to your request. The voluntary provision of further data facilitates the processing of your request.

The following data is also stored at the time the message is sent:
- User IP address
- Access date and time
- URL of the visited site
- URL from which the user comes (referrer)
- Information about the browser type and the version used (from the user agent)
- Operating system of the user (from the user agent)
- Three bytes of the IP address of the user's calling system.
- Date and time the form was sent

For the processing of data, your consent is obtained during the submission process and reference is made to this privacy policy. Alternatively, it is possible to contact us via the e-mail addresses provided. In this case, the user's personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to unauthorized third parties. The data is used exclusively for processing the conversation. We generally store the data relating to your inquiry for three months after responding to the inquiry, and for at least six or ten years in the case of queries, unless they are commercial or business letters.

1. a) Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

1. b) Purpose of the data processing
The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

1. c) Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of fourteen days at the latest.

1.e) Possibility to object and remove
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. For details on revocation and objection, see section VIII.

V.Webtracking with Google Analytics
1. a) Description and scope of data processing

We use Google Analytics on our website to understand how users interact with our site and to improve our content and user experience. Google Analytics uses cookies to collect information about your use of our website, including your IP address. This information is transmitted to Google and stored on their servers. We have enabled IP anonymization in Google Analytics, which means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be associated with any other data held by Google.

You can prevent the storage of cookies by adjusting your browser settings. However, please note that if you do this, you may not be able to use all the functions of our website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.

For further information about how Google Analytics handles user data, please refer to Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

1.b) Legal basis and purpose of data processing

User's consent according to Art. 6 para. 1 lit. a GDPR.

1.c) Purpose of data processing

The purpose of data processing is to analyze user behavior on the website and understand how the website is used,
to improve the website and user experience, the purpose of data processing is to analyze user behavior on the website and understand how the website is being used. Google Analytics allows website owners to generate reports on website activities to gain insights into user behavior and improve marketing strategies.

1. d) Duration of data storage
The collected data will be stored for 26 months. After this period, the data will be automatically deleted.

1. e) Possibility to object and remove
You can prevent the collection of data generated by the cookie and your use of the website (including your shortened IP address) by activating the 'Do not track' option in your browser.

VI. Third-party plug-ins/widgets (social media)
1. Embedded YouTube videos
YouTube videos are embedded on our site and stored at YouTube (responsible for Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA), but playable directly on our website. To protect your privacy, you must first activate the videos on our pages. When you activate or play the videos, cookies from YouTube or DoubleClick may be stored on your device and/or read and data may be sent to YouTube or DoubleClick (USA, Google), such as Yahoo! your IP address and cookie ID, the specific address of the page we called up, system date and time of the call, identifier of your browser.
For the purpose and scope of data collection and its processing by YouTube or DoubleClick, please refer to the information provided by Google: https://www.google.com/intl/de/policies/privacy/. If you do not want YouTube or Double Click to receive data about you through the use of our website, you must not activate this video. The data transmission takes place after activation of the video regardless of whether you have a user account with YouTube or Google, via which you are logged in, or whether there is no user account. If you are logged in, this data can be directly assigned to your account. If you want to avoid this, you must log out of the visit before activating the video.

2. Links to other websites
This Privacy Policy applies only to Sunfire Online Quotes and not to third-party websites and applications. Sunfire Online Quotes may contain links to third-party websites and applications that may be of interest to you. Sunfire is not responsible for the collection, processing, or use of your information as part of non-Sunfire websites or applications and their content.

3. Sending newsletters via Sendinblue
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. To ensure that the newsletter is sent to us, we use the double-opt-in procedure. This allows the potential recipient to be added to a distribution list. Subsequently, the user receives a confirmation e-mail to legally confirm the registration. Only with the confirmation, the address is actively included in the distribution list. We use this data exclusively for sending the requested information and offers. Sendinblue is used as the newsletter software. Your data will be transmitted to Sendinblue GmbH. Sendinblue is prohibited from selling your data and using it for purposes other than sending newsletters. Sendinblue is a German, certified provider that has been selected in accordance with the requirements of the German Data Protection Regulation and the German Federal Data Protection Act.
For more information, click here: https://de.sendinblue.com/datenschutz-uebersicht/
You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter.

VII. Information on the processing of your personal data via the contact form (customer / interested party)
1. a) Description and scope of data processing
The categories of personal data processed include last name, name affixes, company website and e-mail address. Your personal data is usually collected directly from you in the course of contract processing.
Within our company, your personal data will only be disclosed to those persons and bodies who need it to fulfill contractual and legal obligations or who are entrusted with the corresponding fulfillment of the assigned tasks.
In addition, we sometimes use various service providers to fulfill our contractual and legal obligations and the tasks assigned to us.
These can be, for example:
- Website-Hosts
- Newsletter-Service
- Software for order processing
- Email Service

Do you need to provide your data?
In the context of contract processing, you must provide the personal data that is required for the establishment and execution of the contractual relationship and the fulfillment of the associated contractual obligations, or which we are required to collect by law. Without this data, we cannot perform the contract with you.

1. b) Legal basis and purpose of data processing
The data processing primarily serves the purpose of contract initiation or contract execution. The primary legal basis for this is Art. 6 (1) lit. b DSGVO. In addition, our legitimate interests according to Art. 6 (1) lit. f DSGVO and, if applicable, your separate consents according to Arts. Art. 6 para. 1 lit a, 7 DSGVO as the basic data protection regulation are used. This includes in particular marketing measures. If we want to process your personal data for a purpose not mentioned above, we will inform you in advance.

1. c) Duration of data retention
We delete your personal data as soon as they are no longer required for the above purposes. After termination of the contract, your personal data will be stored as long as we are legally obliged to do so. This regularly results from legal obligations to provide proof and to retain data, which are regulated, among other things, in the German Commercial Code (Handelsgesetzbuch) and the German Fiscal Code (Abgabenordnung). The storage periods are then up to ten years. In addition, personal data may be retained for the period during which claims can be asserted against us (statutory limitation period of three or thirty years).

We delete your personal data as soon as they are no longer required for the aforementioned purposes. After termination of the contractual relationship, your personal data will be stored for as long as we are legally obliged to do so. This regularly results from legal obligations to provide proof and to retain data, which are regulated, among other things, in the German Commercial Code and in the German Fiscal Code. The retention periods are then up to ten years. In addition, personal data may be retained for the period during which claims can be asserted against us (limitation period of three or thirty years).
You have the right to object to the processing of your personal data for direct marketing purposes without giving reasons. If we process your data to protect legitimate interests, you may object to this processing on grounds relating to your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

VIII. Information about the processing of your personal data (applicants)
1. a) Description and scope of data processing
For the efficient implementation of application procedures, we use an applicant management system of softgarden e-Recruiting GmbH, Tauentzienstr. 14, 10789 Berlin (contact: datenschutz@softgarden.de), which operates the applicant management as a processor within the meaning of Art. 4 No. 8 DSGVO. We remain your first point of contact for exercising your data subject rights and for handling the application process. You can contact us directly or, if indicated, confidentially contact the data protection officer using the details of the data controller given above. We process the data that you have provided to us in connection with your application in order to check your suitability for the position (or, if applicable, other open positions in our companies) and to process the application procedure (e.g. first name, last name, name affixes, nationality, contact data such as home address, (mobile) phone number, e-mail address). This may include special categories of personal data such as health data. As a rule, your personal data will be collected directly from you as part of the recruitment process. In addition, we may have received data from third parties (e.g. job placement).

Do you need to provide your data?
As part of your application, it may be necessary for you to provide those personal data that are required for the establishment of the employment relationship and the fulfillment of the associated contractual obligations, or which we are required to collect by law. Without this data, we cannot conclude the employment contract with you.

Who gets your data?
Your application data will be viewed by the HR department after receipt of your application. Suitable applications are then forwarded internally to the department heads for the respective open position. Subsequently, the further course of your application will be adjusted accordingly. As a matter of principle, only those persons in the company who require this for the proper execution of our application process have access to your data. In addition, we make use of various service providers. These include, in particular, software providers who may also have knowledge of your personal data in connection with the maintenance and servicing of the systems. We have concluded an order processing agreement with this provider, which ensures that the data processing is carried out in a permissible manner.
In addition, we may transfer your personal data to other recipients outside the company to the extent necessary to fulfill contractual and legal obligations. These include: Authorities (e.g. pension insurance institutions, professional pension funds, social insurance institutions, tax authorities, courts), DvkD GmbH.

1. b) Purpose and legal basis of the data processing
The primary purpose of data processing is to establish the employment relationship. The primary legal basis for this is Art. 6 para. 1 lit. b) DSGVO, linked with § 26 para. 1 BDSG. In addition, your separate consent under Art. 6 para. 1 a), 7 DSGVO can be used as the basic data protection regulation. Where necessary, we also process your data on the basis of Art. 6 para. 1 f) DSGVO to protect legitimate interests of us or third parties (e.g. authorities). A legitimate interest on our part is in particular the assertion or defense of claims. If special categories of personal data (pursuant to Art. 9 (1) DSGVO) are processed in the application, this information is only processed for the exercise of rights or for the fulfillment of legal obligations arising from employment law, social security law and social protection (e.g. recording of severe disability through additional leave and determination of disability tax). This is done on the basis of Art. 9 para. 2 b) DSGVO linked with § 26 para. 3 BDSG. In addition, the processing of health data may be necessary to assess your ability to work (pursuant to Art. 9 (2) (h) in conjunction with Section 22 (1) b) BDSG).
In addition, the processing of special categories of personal data may require consent pursuant to Art. 9 para. 2 a) DSGVO linked to § 26 para. 2 BDSG. If we want to process your personal data for a purpose not mentioned above, we will inform you in advance.

1. c) Duration of data retention
We will delete your personal data as soon as they are no longer required for the above purposes. In the event of termination, your personal data will be retained for the period during which claims can be asserted against us (maximum 6 months). In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after two years, provided that no further communication with you has taken place. If you are successful in the application process, your data will be transferred from the applicant data system to our HR information system.

1. d) Possibility to object and remove
You have the right to object to the processing of your personal data without giving reasons. If we process your data to protect legitimate interests, you may object to this processing on grounds relating to your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

IX. Your rights as an injured party
1.1 Information desk
If you have any questions about the processing of your personal data by us, we will be happy to provide you with information about the data concerning you.

2. right to rectification, erasure, right to restriction of processing and right to data portability.
In addition, if the legal requirements are met, you have the right to rectification, erasure, restriction of processing and objection to processing. If the legal requirements are met, you have the right to receive the personal data that you have provided to the controller in a structured, common and machine-readable format.

3. Your contact person
In all these cases, please contact our data protection officer (see above under II.) at the communication addresses listed there.

4. Right to complain to a competent data protection supervisory authority
Finally, you have the right to complain to a competent data protection supervisory authority.

Address:
Devrientstraße 5
01067 Dresden

Postal address:
Post Offices
01330 Dresden

Telephone:
Telefax: 0351/85471–109
Email: saechsdsb@slt.sachsen.de
Internet: Web:

5. Opposition
You have the right to object to the processing of your personal data (pursuant to Art. 6 (1) e or f DSGVO) at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims. If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. You have the possibility, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - to exercise your right to object by means of automated procedures using technical specifications.

6. Right to revoke the declaration of consent under data protection law
You have the right to revoke your privacy policy at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

7. Advertising blacklist
After your objection to the processing of your personal data for advertising purposes or the revocation of your consent, we are required by data protection law to store (block) the necessary data (name, address, e-mail address) in our internal advertising block list and permanently (only for this purpose) and to use it for matching with our future advertising files. In this way, compliance with your advertising complaint or revocation of your consent can be permanently ensured.

8. Automated decision on a case-by-case basis including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly affects you.

9. Change of the processing purpose
If we change the purposes of the processing over time, we will inform you in advance by updating this privacy notice.

10. Modification of the privacy information
From time to time it is necessary to adapt the content of this privacy policy for data collected in the future. We reserve the right to change these instructions at any time. We will also publish the amended version of the data protection statement here. Therefore, if you visit us again, you should read the privacy policy again.