Choose another country/region to access content for your location.

Privacy Policy of Meyer Burger Technology AG

I. Legal framework, responsible body, definitions

II. Data subject rights

III. General information on data processing ( data processing for informational use of the website, technical background, cookies, etc.).

IV. Special notes on data processing in the context of the application of additional functions

V. Data processing in the application context

VI. Other

 

 

I. General information, responsible entity and legal framework

 

1. Legal framework and principles of data processing

We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the statutory data protection regulations (DSGVO and BDSG) and this privacy policy.

When you use our website, we collect personal data about you.

This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

 

2. Responsible body

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).


The responsible body (hereinafter also "we", "us", "our") within the meaning of the Data Protection Act is:
 

Meyer Burger (Industries) GmbH

Carl-Schiffner-Strasse 17

09599 Freiberg

Germany

 

Tel.: +49 3723 671 101

E-mail: info-hohenstein@meyerburger.com

The contact details of our company data protection officers are:

Meyer Burger (Industries) GmbH- THE DATA PROTECTION AGENCY -
Carl-Schiffner-Strasse 17
09599 FreibergGermany

E-mail: dsb.mbde@meyerburger.com

 

3. Definitions

Our data protection declaration is based on the terms used by the European Directive and Ordinance Maker when adopting the General Data Protection Regulation (DSGVO). We would like to explain essential terms in the following:

a) Personal data means any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject means any identified or identifiable natural person whose personal data are processed by the controller.

c) Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d) Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.

(e) Profiling means any automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.

f) Pseudonymization means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

(g) Controller or controller means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.

h) Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of and in accordance with the instructions of the Controller pursuant to Article 28 GDPR.

(i) Recipient means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients.

j) Third party means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who are authorized to process the personal data under the direct responsibility of the controller or the processor.

k) Consent shall mean any freely given indication of the data subject's wishes for the specific case in an informed and unambiguous manner, in the form of a statement or any other unambiguous affirmative act by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.

 

II. Data subject rights according to Art. 15 ff and Art. 77 DSGVO

 

1. Right to object to the collection of data in specific cases and to direct marketing (Art. 21 GDPR)

If the data processing is based on Art. 6 (1) e) or f) DSGVO, you have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy.

If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising.

 

2. Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. We obtain this from you before the start of the data processing that requires your consent. You can revoke this consent at any time. Insofar as a revocation option does not already arise via the clicking of links or the adjustment of browser settings, an informal communication to us by e-mail is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

 

3. Right of appeal to the competent supervisory authority

In the event of violations of data protection law, data subjects have a right of appeal to the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection commissioner of the federal state in which our company has its headquarters. A list of the data protection officers and their contact details can be found in the following link:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

The data protection authority responsible for us is:

Saxon Data Protection Commissioner

PO Box 11 01 32 

01330 Dresden

https://www.saechsdsb.de/kontakt

 

4. Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to another person responsible, in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

 

5. Information, correction, blocking, deletion

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given above in Section I.2.

 

III. Data processing during informational use of the website, technical background, cookies etc.


We collect and process the personal data listed below in sections 3 to 7 for the purposes stated therein, on the basis of the legal grounds stated therein and for the duration stated therein.

 

1. Legal basis and storage period

If you have consented to the processing of your personal data within the meaning of Art. 4 No. 1 DSGVO by us, Art. 6 (1) a) DSGVO serves as the legal basis for the processing. The processing of personal data, which we need to fulfill contractual or pre-contractual obligations, is based on Art. 6 para. 1 lit. b) DSGVO. If the processing is necessary to safeguard our legitimate interests or those of a third party and the interests, fundamental freedoms and fundamental rights of the data subject do not override these, then Art. 6 (1) (f) DSGVO serves us as the legal basis for the processing of personal data. For the processing operations carried out by us, we indicate below the applicable legal basis in each case. Processing may also be based on several legal bases.

For the processing operations carried out by us, we indicate below in each case how long the data will be stored by us and when it will be deleted or blocked. If no explicit storage period is specified below, your personal data will be deleted or blocked as soon as the purpose or legal basis for the storage no longer applies.

However, storage may take place beyond the specified time in the event of a (threatened) legal dispute with you or other legal proceedings or if storage is provided for by statutory provisions to which we are subject as the responsible party (e.g. § 257 HGB, § 147 AO). If the storage period prescribed by the legal regulations expires, the personal data will be blocked or deleted unless further storage by us is necessary and there is a legal basis for this.

 

2. Data security

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties, taking into account the state of the art, implementation costs and the nature, scope, context and purpose of the processing, as well as the existing risks of a data breach (including its probability and impact) for the data subject. Our security measures are continuously improved in line with technological developments.

We will be happy to provide you with more detailed information on request. Please contact our data protection officer (see above).

 

3. Data processed during the (informational) use of the website

Inevitably, we can only provide you with the benefits of our Internet offering if, when you use it, we collect certain personal data from you that is necessary for the operation of the website.

We collect this data if this is necessary for the fulfillment of the contract between you and us (including in the form of terms of use for this website) (Art. 6 para. 1 lit. b) DSGVO) or your consent is given (Art. 6 para. 1 lit. a) DSGVO). Furthermore, we collect this data if this is necessary for the functionality of the website and your interest in the protection of your personal data does not outweigh this (Art. 6 para. 1 lit. f) DSGVO).

We collect and process the following data from you:

  • Device information: Access data includes the IP address, device ID, device type, device-specific settings, the date and time of the retrieval, time zone, the amount of data transferred and the message whether the data exchange was complete, crash of the terminal device, browser type and operating system. This access data is processed in order to technically enable the operation of the website.
  • Information with your consent: Other information (e.g. geo-location data, personal data such as name and e-mail address, etc.) is processed by us if you allow us to do so. ) we process if you allow us to do so.

 

It is also possible to set the browser so that the website user is informed about the setting of cookies. This allows them to decide for themselves whether they want to exclude cookies in certain cases or in general.

Cookie settings are managed differently for each browser, which can be seen in the browser's help menu. The corresponding links are shown here as an example to help you:

Google Chrome

Delete cookies:

Delete, allow and manage cookies in Chrome - Computer - Google Chrome Help

Mozilla Firefox

Delete cookies:

Delete cookies and website data in Firefox | Firefox Help (mozilla.org)

Microsoft Edge

Delete cookies:

Delete cookies in Microsoft Edge - Microsoft support

Opera

Delete cookies: please visit the provider's website under Settings / Security and privacy, as there is no direct link.

Safari

Delete cookies: please visit the provider's website under Settings / Privacy, as there is no direct link.

 

8 Google Maps

This website uses the Google Maps map service via an API interface. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google LLC server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy findability of the places indicated by us on the website. This constitutes an overriding legitimate interest on our part within the meaning of Art. 6 para. 1 lit. f) GDPR, § 25 para. 2 TTDSG and Art. 4 DSG (CH).

Further information on the handling of user data can be found in Google's privacy policy:

Privacy Policy - Privacy Policy & Terms of Use - Google.

9 Google Analytics

If you have given your consent, Google Analytics 4, a web analytics service provided by Google LLC, is used on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Scope of processing: Google Analytics uses cookies that enable us to analyse your use of our website. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

In Google Analytics 4, the anonymisation of IP addresses is activated by default. Due to IP anonymisation, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, your user behaviour is recorded in the form of "events". Events can be

  • Page views
  • First visit to the website
  • Start of the session
  • Your "click path", interaction with the website
  • Scrolls (whenever a user scrolls to the bottom of the page (90%))
  • Clicks on external links
  • Internal search queries
  • Interaction with videos
  • file downloads
  • Ads viewed / clicked on
  • language setting

Also recorded:

  • Your approximate location (region)
  • Your IP address (in abbreviated form)
  • Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
  • Your internet provider
  • the referrer URL (via which website/advertising medium you came to this website)

Purposes of processing: On behalf of the operator of this website, Google will use this information to analyse your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

Recipients

Recipients of the data are/may be

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
  • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
  • Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

It cannot be ruled out that US authorities may access the data stored by Google.

Storage period: The data sent by us and linked to cookies is automatically deleted after 2 months. Data that has reached the end of its retention period is automatically deleted once a month.

Legal basis: The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

Revocation: You can revoke your consent at any time with effect for the future by calling up the cookie settings and changing your selection there:

10 Bunny CDN

Personal data is processed when you visit this website. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information). Purpose of processing: Delivery and provision of the website. The legal basis for the processing: a legitimate interest which overrides the rights and freedoms of the data subjects (Art. 6 (1) f GDPR). Legitimate interests in this context:strong economic interest in the secure and functioning operation of the technical systems. A transfer of data takes place: to the processor Bunny CDN, Cesta Komandanta, Staneta 4a, 1215 Medvode, Slovenia.

11. Amazon CloudFront CDN

We use the content delivery network Amazon CloudFront CDN. The provider is Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg (hereinafter "Amazon").

Amazon CloudFront CDN is a globally distributed content delivery network. The information transfer between your browser and our website is technically routed via the content delivery network. This enables us to increase the global accessibility and performance of our website.

The use of Amazon CloudFront CDN is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6 para. 1 lit. f GDPR).

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https: //aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.

Further information on Amazon CloudFront CDN can be found here: https: //d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation.pdf.

Order processing

We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

12. integration of Browser-Update.org

We use the Browser-Update.org service on this website. This serves the purpose of notifying you inconspicuously if you should update your browser and thus enable the convenient use of our website.

This application is retrieved directly from Browser-Update.org servers so that they receive the IP address currently assigned to you. By visiting the website, Browser-Update.org receives the information that you have accessed the corresponding subpage of our website. We do not know whether and to what extent or for how long the IP address is stored and used internally by Browser-Update.org. The legal basis for the integration of this service is Art. 6 para. 1 sentence 1 lit. f GDPR.

You can find more information on data protection at Browser-Update.org at browser-update.org/contact.html

13 EQS Cockpit

We integrate external services of EQS Group AG (EQS Group AG, Karlstraße 47, 80333 Munich, Germany) for the visual presentation of our news. If you use such a service or if third-party content is displayed to you, communication data will be exchanged between you and the respective provider for technical reasons.
The use of this programme constitutes our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR.

For further information on the purpose and scope of the collection and processing of your data, please refer to the data protection information of EQS Group AG at https://www.eqs.com/de/ueber-eqs/datenschutz/.

14 Instagram CDN

Type and scope of processing
We use Instagram CDN to properly provide the content of our website. Instagram CDN is a service provided by Instagram, Inc. which acts as a content delivery network (CDN) on our website.

A CDN helps to make the content of our online offering, in particular files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Instagram, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Instagram CDN.

15 Google Double Click

This website uses the online marketing tool DoubleClick from Google Ireland Limited, Gordon House Barrow Street Dublin 4, Ireland (hereinafter: Google). DoubleClick uses cookies to display adverts that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same adverts more than once. Google uses a cookie ID to record which adverts are shown in which browser and can thus prevent them from being shown more than once. In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick advert and later visits the advertiser's website with the same browser and makes a purchase there. According to Google, DoubleClick cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on the advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address and save it.

You can prevent participation in this tracking process in various ways:

  • by setting your browser software accordingly - suppressing third-party cookies means that you will not receive any adverts from third-party providers;
  • by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com (https://www.google.de/settings/ads). This setting is deleted when you delete your cookies;
  • by deactivating the interest-based adverts of providers that are part of the "About Ads" self-regulation campaign (via the link www.aboutads.info/choices). This setting is deleted when you delete your cookies;
  • by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browsers (plug-ins available at the link www.google.com/settings/ads/plugin). We would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

The legal basis for the processing of your data is the consent you have given via the cookie consent tool (Art. 6 para. 1 sentence 1 lit. a) GDPR). Information on the transfer to third countries can be found under "Third country transfer". Further information on DoubleClick by Google can be found at www.google.de/doubleclick and support.google.com/adsense/answer/2839090, as well as on data protection at Google in general: www.google.de/intl/de/policies/privacy. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at www.networkadvertising.org.

16 Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter referred to as "reCAPTCHA") on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is made by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics.

This analysis begins when the visitor presses the "Activate Google reCAPTCHA" button after filling out a contact form.

For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR.

The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM.

For more information about Google reCAPTCHA and Google's privacy policy, please see the following links

www.google.com/intl/de/policies/privacyand www.google.com/recaptcha/intro/and roid.html

17 JSDelivr CDN

We use JSDelivr CDN to properly provide the content of our website. JSDelivr CDN is a service provided by Prospect One, which acts as a content delivery network (CDN) on our website.

A CDN helps to make the content of our online offering, in particular files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Prospect One, Krolewska 65a, Krakow, Malopolskie 30-081, Poland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of JSDelivr CDN.

Purpose and legal basis

The Content Delivery Network is used on the basis of our legitimate interests, i.e. interest in the secure and efficient provision and optimisation of our online offer in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Prospect One. Further information can be found in the privacy policy for JSDelivr CDN: https://www.jsdelivr.com/privacy-policy-jsdelivr-net.

18 Walls.io

When accessing some sub-services of our website, additional personal data is processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information). Purpose of processing: Delivery and provision of the website. The legal basis for the processing: a legitimate interest which overrides the rights and freedoms of the data subjects (Art. 6 (1) f GDPR). Legitimate interests in this context:strong economic interest in the secure and functioning operation of the technical systems. A transfer of data takes place: to the processor Walls.io GmbH, Schönbrunner Straße 213/215, 1120 Vienna, Austria.

19 Twitter Ads

We have integrated Twitter Ads on our website. Twitter Ads is a service provided by Twitter Inc. to display targeted adverts to users. Twitter Ads uses cookies and other browser technologies to evaluate user behaviour and recognise users.

Twitter Ads collects information about visitor behaviour on various websites. This information is used to optimise the relevance of advertising. Furthermore, Twitter Ads delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identification features such as your user agent are transmitted to the provider.

If you are registered with a Twitter Inc. service, Twitter Inc. can assign the visit to your account. Even if you are not registered with Twitter Inc. or have not logged in, it is possible that the provider will find out and save your IP address and other identification features.

In this case, your data will be passed on to the operator of Twitter Ads, Twitter Inc, San Francisco, US.

The use of Twitter Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

20.Integration of the solar power calculator of Eturnity AG

On this website we use the offer of a solar power calculator from Eturnity AG, Reichsgasse 3, CH-7000 Chur, website: https: //eturnity.com/, e-mail: info@eturnity.com. This enables us to show you the interactive calculation of the expected solar power at your individual location directly on the website.

By entering the date in the solar power calculator, Eturnity AG receives the information entered. In addition, the above-mentioned personal data is transmitted.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy: https: //eturnity.com/datenschutz/.

 

The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.

 

You can also prevent the storage of cookies from the outset by configuring your browser software accordingly. However, if you configure your browser to reject all cookies, this may restrict the functionality of this and other websites. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by

a. Not giving your consent to the setting of the cookie or

b. downloading and installing the browser add-on to deactivate Google Analytics here.

10. group of recipients; transfer to third countries

Within our company, the departments responsible for processing enquiries have access to your data. In addition, we use external service providers, in particular processors in accordance with Art. 28 GDPR and Art. 10 para. 1 DSG CH, insofar as we cannot provide services ourselves or this is unreasonable. These external service providers are primarily providers of IT services and telecommunication services. If certain service providers are explicitly mentioned, you will also find further information in the data protection declarations of the service providers. In addition, we may pass on your data to external service providers to process your request (in particular installers or sales partners) when you use our website to make contact, arrange contact and analyse projects, who may submit further offers to you.

A transfer to third countries outside the European Economic Area (EEA) only takes place under certain conditions within the framework of Art. 44ff GDPR and Art. 6 para. 2 FADP (CH.)

The European Commission certifies that some third countries have a level of data protection comparable to the EEA standard by means of so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be found here:

English

https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

German

https:// commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de?etrans=de

In other third countries to which personal data may be transferred, however, there may not be a uniformly high level of data protection due to a lack of legal provisions. If this is the case, we ensure that data protection is adequately guaranteed. This is possible through binding corporate rules, standard data protection clauses of the European Commission for the protection of personal data (available at

https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_de ),

certificates or recognised codes of conduct. You can contact our data protection officer if you would like more information on this.

Third country transfer google analytics: If data is processed outside the EU/EEA and there is no data protection level corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

Note on the adequacy decision: USA

On 28 February 2023, the European Commission adopted the adequacy decision for the EU-U.S. Data Privacy Framework (successor to the "Privacy Shield"). The adequacy decision now serves as the basis for data transfers to certified organisations in the USA.

Meyer Burger establishes the lawfulness of the transfer by checking whether personal data is certified under the EU-U.S. Data Privacy Framework before transferring it to U.S. organisations.

The following link shows whether organisations are certified by the U.S. Department of Commerce.

https://www.dataprivacyframework.gov/s/participant-search

 

10. minors

Our website is not intended for children. Persons under the age of 16 may not transmit any personal data to us or submit any declarations of consent without the consent of their legal guardians. We would like to urge parents and legal guardians as well as minors to comply with the requirements of the GDPR and not to circumvent any age restrictions.

11. No automated decision-making (including profiling)

We do not intend to use the personal data collected from you for automated decision-making (including profiling).

IV. Special information on data processing in the context of the use of additional functions

1. installer finder

In order to show you installers in your area, we process the following personal data on the basis of a contract.

  • Surname and first name
  • Your address
  • e-mail address
  • Geo-localisation data

The legal basis for the processing of the data is Art. 6 para. 1 lit. b) GDPR.

2. use of the solar calculator

In cases where you use the solar calculator, we use the data you enter there to send you a corresponding non-binding offer and to provide you with further information such as savings etc. and, if you have given your consent, to contact you in the future for information and marketing purposes using the contact details you have provided. In addition, if you give your consent, we will forward your data to up to three installers in your region selected by us in order to provide you with further advice and a non-binding offer. The provision of certain truthful data (in particular name, address, geolocation data, roof area based on satellite images from third-party services, type of heating system, e-mail address) is necessary in order to process your enquiry and provide you with a PDF summary. The processing of the above data is based on your consent, which you have expressed by entering the data in the form interface, in accordance with Art. 6 para. 1 lit. a) GDPR. The personal data collected will be deleted at the latest if they are no longer required for the initiation or execution of a contract with you after a transitional period of 24 months.

V. Data processing in the application context

1. processing purposes, categories of personal data

We process the application data mentioned in this section for the purpose of initiating or implementing an employment relationship or an employee-like relationship to the extent described below.

In particular, the following categories of data may be processed

  • General personal data (name, address and other contact details, application photo, dates of birth, nationality, marital status, other (possibly also sensitive) data that you provide to us)
  • Professional data (professional contact information, current position, responsibilities/responsibilities, current employer, current remuneration, notice period, vested rights, blocking notices).
  • Experience-related data (previous positions and employers, school and university education, vocational training, experience, knowledge)
  • Future-related data (wishes and ideas, assessments, possible areas of employment, placement ideas)
  • Other data (information about your professional life that you send us via the application.

2. further data processing by the controller; legal basis for data processing

If you contact us proactively, we will process the data that you provide to us when you first contact us, as well as any other data that we request.

We treat and process all information (in particular CV, certificates, proof of qualifications) and all other information (e.g. in telephone interviews, in personal meetings) as application data. This is done for the above-mentioned contractual or pre-contractual purposes.

The provision of certain truthful data is required in order to process your enquiry; further information (in particular the submission of a photo) is voluntary.

Insofar as your data is required to carry out the application process, Art. 88 GDPR in conjunction with Art. § Section 26 of the Federal Data Protection Act (BDSG) and Art. 4 DSG (CH) is the legal basis for the processing of your data.

Insofar as special categories of personal data are involved (e.g. health data, trade union or religious affiliation or other "sensitive" data), the processing is based on your consent in accordance with Art. 9 para. 2 lit. a) GDPR and F ADP (CH), which you have expressed by disclosing this data.

If your application is successful and an employment relationship is established with us, your data will initially be stored for the duration of the employment relationship. After you leave the company, we will process your data for a maximum of three years for the purpose of preserving evidence.

The processed personal data will be deleted if the processing is no longer necessary for the fulfilment of the contract or if you request us to delete it as part of the assertion of your rights as a data subject. This will regularly take place at the latest six (6) months after the application process has been completed, if there are no longer retention obligations after a position has not been filled. If no recruitment takes place, a longer retention period of 24 months from the last individual contact with you - e.g. to defend against possible AGG claims - may apply in individual cases on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR and Art. 4 DSG CH.

VI Miscellaneous

Amendment of this privacy policy

We reserve the right to amend this Privacy Policy at any time in compliance with the statutory provisions.

 

07/2023