You will not be scanned here, but only at airports – thanks to our precision drives (TESCA project). Images: Supracon.
You will not be scanned here, but only at airports – thanks to our precision drives (TESCA project). Images: Supracon.

Privacy statement of IMMS Institut für Mikroelektronik- und Mechatronik- Systeme gemeinnützige GmbH (IMMS GmbH)

We place great importance on the protection of your personal data. As the protection of both your privacy and your business data is of particular importance to us, we observe the data protection regulations applicable in Germany.

In the following, we would like to inform you in detail about what data are collected during your visit to our site and the use of our offerings there, and how they are subsequently processed or used by us, as well the accompanying technical and organisational protective measures we have taken.

1. Responsible body/Service provider

The responsible body in accordance with Art. 4(7) GDPR is
IMMS Institut für Mikroelektronik- und Mechatronik-Systeme gemeinnützige GmbH (IMMS GMBH)
Prof. Dr. Ralf Sommer, Dipl.-Kfm. Martin Eberhardt
Ehrenbergstraße 27
98693 Ilmenau
GERMANY
imms(at)imms.de.

Datenschutzbeauftragter
Dr. Thomas Häring
Rimbachstraße 45
98527 Suhl
GERMANY
Datenschutz.Beauftragter(at)imms.de

2. Collection and processing of non-personal data

(1) If you simply visit the website, we do not collect any personal data. However, every server automatically stores the accesses to websites. The temporary storage of the IP address by the system is necessary in order to allow delivery of the website to the user's computer. This requires that the user’s IP address is stored for the duration of the session. For the purpose of system security, our web server temporarily records the IP address of the requesting computer, the browser you are using, the operating system, the date and time of access, the webpages you visit, the Uniform Resource Locators (URL) requested on our website and the previously visited website (referrer URL). This information is stored anonymously and not associated with your personal information. Conclusions cannot be drawn as to your person or your individual behaviour. The legal basis for the temporary storage of the data and log files is Art. 6(1) lit. f GDPR.

(2) Computer-related data are stored by us to record trends and compile statistics. These stored data also serve the purpose of identifying and tracking unauthorised attempts to access our server. We create profile information about the use of our own websites exclusively in anonymised form and only to improve user navigation and to optimise the offering based on user interests. Personal surfing profiles or similar are not created or processed from this.

(3) The website uses the following cookies in various locations.
PHPSESSID
breadcrumbs
Matomo: PIWIK_SESSID, _pk_id.*.; _pk_ses.*, _pk_ignore.
If you download software from our website or would like to register for an event or for our press mailing list, you have to accept cookies for our internet presence for these purposes. Cookies are also used to provide breadcrumb navigation from the www.imms.de pages last visited by you as well as for web analytics to improve our website. Details of the applications on our web offering that use cookies can be found in the respective paragraphs.
Cookies are small text files that are downloaded to your computer and stored by your browser. Cookies are used to make our website more user-friendly, more effective and more secure. These purposes are also the basis for our legitimate interests in the processing of personal data according to Art. 6(1) lit. f GDPR. Session cookies are automatically deleted after your visit.
All of the cookies used by us per se on this website are so-called session cookies, which are deleted automatically after your visit to the website ends. The exception is a permanent cookie, which you as the user can actively set in order to deactivate our web analytics tool, Matomo. For details, please refer to paragraph 3 on Matomo.
The following data can be transmitted using session cookies: Search terms entered, the number of page views, use of website functions. The data pertaining to the user collected in this way is pseudonymised by technical means. Therefore, the data can no longer be assigned to the calling user. The data are not stored together with other personal data pertaining to the user. When you visit our website, the user is informed of the use of cookies for analysis purposes and of this privacy statement by an info banner. In this context, information is also provided as to how the storage of cookies can be prevented in the browser settings.

Browser settings for cookies
You can determine whether cookies are to be set and retrieved in your browser settings. You can completely deactivate the storage of cookies in your browser, limit this to certain websites, or restrict or configure your browser in such a way that it automatically notifies you when a cookie is set and asks you for a response regarding this. However, for technical reasons, the aforementioned session cookies have to be enabled in order to enable the full functionality of our website. We do not collect or store personal data in cookies in this regard. Neither do we use techniques that connect information obtained through the use of cookies with user data.

The legal basis for the processing of personal data using cookies is Art. 6(1) lit. f GDPR.

(4) The data are deleted as soon as they are no longer required to achieve the purpose of their collection.
In the case of the collection of data for the provision of the website, this applies when the respective session has ended. IP addresses are in principle deleted no later than seven days after the date of their collection. Further storage beyond this is possible. In this case, the IP addresses of the users are deleted or altered, so that assignment of the calling client is no longer possible.

(5) Collection of the data in order to provide the site and the storage of the data in log files is absolutely necessary for the operation of the website. Therefore, there is no right of objection on the part of the user.

3. Matomo analysis service does not store any personal data for analysis

Our website uses Matomo for the purpose of web analytics. This is a so-called web analytics service. This open source software complies with the applicable data protection provisions and is configured according to the recommendations of the Independent State Center for Data Protection (ULD). Matomo statistically evaluates visitor accesses and uses temporary session cookies to do so. These are deleted as soon as the browser is closed. The information about your use of our web presence is generated by the cookie and then stored on an IMMS GmbH server. We do not pass this generated information on to third parties. IP addresses of visitors are anonymised immediately after processing and before they are stored. When you access our website, your internet browser automatically transmits data to our web server. In particular, the following information is collected for the web analytics:

  • date and time of access,
  • URL of the referring website,
  • IP address (anonymised),
  • retrieved file,
  • quantity of sent data,
  • browser type/version and
  • operating system.

These data are evaluated separately from other data that you actively enter on our pages. It is not possible for us to assign these data to a specific person.
Matomo also uses so-called ‘cookies’. These are text files that are stored on your computer and used by us to analyse use of the website. To this end, the usage information generated by the cookie (including your abbreviated IP address) is transmitted to our server and stored to be used for analysis purposes, which in turn is used for website optimisation on our part. Your IP address is immediately anonymised during this process, so that as a user you remain anonymous to us. The information generated by the cookie about your use of this website is not disclosed to third parties.

You can disable anonymous analysis by Matomo
You can prevent the use of cookies by selecting the appropriate setting in your browser software; however, in this case you may not be able to use the full functionality of this website. If you do not agree to the storage and evaluation of these data from your visit with the help of Matomo, you can also object to the use and storage per mouse click as follows at any time. In this case, a so-called opt-out cookie is saved to your browser, which means that Matomo does not collect any session data. Warning: If you delete your cookies, this means that the opt-out cookie is deleted and may need to be re-activated by you.

4. Video links to YouTube and Vimeo

Our website is only linked to YouTube and Vimeo videos. When you click on a video preview image or text link to a video, you are leaving our website and the scope of our privacy policy. These videos are stored on the servers of the providers YouTube or Vimeo. The advanced data protection mode is made available by YouTube and thus ensures that YouTube does not store any cookies with personal data on your computer. Data may possibly be transmitted to Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA, as the operator of YouTube. By playing videos stored on YouTube, based on current conditions, the following data at least are transmitted to Google Inc. as the operator of YouTube and operator of the DoubleClick Network: IP address and cookie, the specific address of the site visited, system date and time of the call, identification of your browser. Just one click on a video can trigger further processing operations over which we have no influence as the operator of this website. Detailed information regarding the integration of YouTube videos can be found on the YouTube website: https://support.google.com/youtube/answer/171780?hl=de. For more information about the handling of user data, please refer to the YouTube privacy policy at: https://www.google.de/intl/de/policies/privacy

5. Collection and use of personal data

(1) We only collect, store and process the personal data actively transmitted by you (for example: your name, address or e-mail address), insofar as this is required for the processing of requests or the fulfilment of our contractual obligations. Personal data are generally only collected from our users and used after the user has consented. One exception applies in cases where obtaining consent beforehand is not possible on factual grounds and the processing of the data is permitted by law or required for the fulfilment of our contract. Insofar as we obtain consent from the data subject for personal data processing operations, Art. 6(1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data. With regard to the processing personal data that is required to fulfil a contract to which the data subject is party, Art. 6(1) lit. b GDPR serves as the legal basis. This also applies for processing operations that are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is required to comply with a legal obligation on the part of our company, Art. 6(1) 1 lit. c GDPR serves as the legal basis. If the processing is required to protect a legitimate interest of our company or a third party and if the interests, rights and fundamental freedoms of the person concerned do not outweigh the first interest mentioned, Art. 6(1) lit. f GDPR serves as the legal basis for the processing.

(2) Your registered data are always encrypted on our systems. This protects the communication between you and our server and prevents the misuse of data. For encryption we use a recognised and widely used system that is deemed to be secure in the respective current version.

(3) On our website, it is possible to register for our press mailing list and also to subscribe to receive our press information by e-mail. Upon registration, the data from the input mask is transmitted to us. These data are: e-mail address of the user, IP address of the calling computer, date and time of registration. You can unsubscribe from our press mailing list and delete your data at any time using a link in the press area or by e-mail to presse(at)imms.de. Your consent is obtained and you are referred to this privacy statement regarding the processing of the data in the context of the registration process. The data are not disclosed to third parties in the context of data processing for the sending of press releases. The data are used exclusively to send the press releases. The legal basis for the processing of the data after the user registers for the press mailing list is the consent of the user Art. 6(1) lit. a GDPR. The collection of the user’s e-mail address is used to send press releases to the addressees stored in the press mailing list. The data are deleted as soon as they are no longer required to achieve the purpose of their collection. Accordingly, the user’s e-mail address is stored for as long as the subscription to receive press releases is active. The subscription to receive press releases can be cancelled at any time by the user concerned. For this purpose, a corresponding link can be found in every e-mail containing a press release.
This also allows consent to the storage of personal data collected during the registration process to be revoked.

(4) You can register for our events via our website. If a user avails of this option, the data entered in the input mask are sent to us and stored. These data are: E-mail address, name, first name, company, address and, if necessary depending on the event, options for pre-booked programme items. When the message is sent, the following data are also stored: The website visitor's IP address, the date and time of sending. The double opt-in procedure is used for registration. Your registration and your e-mail address are deleted from our database if you do not confirm the link sent by us or do not confirm it in time. We will not accept any further registrations under your e-mail address until you have confirmed your e-mail address. The legal basis for the processing of the data is the consent of the user Art. 6(1) lit. a GDPR.

(5) On our website, the BASe-Box software in the download area allows software to be downloaded. If a user avails of this option, the data entered in the input mask is sent to us and stored. This solely concerns the e-mail address specified by you. When the message is sent, the following data are also stored: The website visitor's IP address, the date and time of sending. The double opt-in procedure is used for registration. Your registration and your e-mail address are deleted from our database if you do not confirm the link sent by us or do not confirm it in time. We will not accept any further registrations under your e-mail address until you have confirmed your e-mail address. The legal basis for the processing of the data is the consent of the user Art. 6(1) lit. a GDPR. You can self-edit or delete your data stored with us at any time in the download area. You can find the links for editing and deletion in the download area after registering.

(6) Furthermore, we can be contacted using the e-mail address provided, imms(at)imms.de. In this case, the user’s personal data transmitted with the e-mail is stored. Data will not be forwarded to third parties without your consent. The data are used exclusively to process the conversation. The legal basis for the processing of the data is the consent of the user Art. 6(1) lit. a GDPR. The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6(1) lit. f GDPR. If the aim of contact by e-mail is the conclusion of a contract, the additional legal basis for the processing is Art. 6(1) lit. b GDPR. The processing of personal data is solely used by us to process the establishment of contact. The necessary legitimate interest in the processing of the data also lies herein.

(7) The personal data of the data subject are deleted or disabled as soon as the purpose of storage expires. For the personal information sent via e-mail, this is the case when the conversation with the user has ended. The conversation has ended if it is clear from the circumstances that the subject matter in question has been conclusively clarified. The additional personal data collected during the send process are pseudonymised or deleted at the latest after a period of seven days. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. Furthermore, storage may also occur if so required by European or national law under European Union regulations, laws or other provisions to which we are subject. Blocking or deletion of data is also carried out if a storage period specified by the standards referred to expires, unless there is a need for further storage of the data in order to conclude or execute a contract.

6. Right to information

You can request confirmation from us as to whether personal data pertaining to you is processed by us.
If such processing does take place, you can request information from us on the following:

  1. (1) the purposes for which the personal data are processed;
  2. (2) the categories of personal data that are processed;
  3. (3) the recipients or categories of recipients to whom the personal data pertaining to you is or has been disclosed;
  4. (4) the planned duration of the storage of personal data pertaining to you or, if specific details of this are not possible, criteria for determining the duration of storage;
  5. (5) the existence of a right to correction or deletion of personal data pertaining to you, the right to restrict the processing by us or the right to object to this processing;
  6. (6) the existence of a right to file a complaint with a supervisory authority;
  7. (7) all available information on the origin of the data, if the personal data is not collected from the data subject;
  8. (8) the existence of automated decision-making including profiling according to Art. 22 (1) and (4) GDPR and - at least in these cases - pertinent information on the logic involved as well as the scope and desired impact of such processing for the data subject.

You have the right to demand information as to whether or not the personal data pertaining to you is transmitted to a third country or an international organisation. In this context, you can demand to be informed via the appropriate guarantees according to Art. 46 GDPR in connection with the transmission.

7. Right to correction

You have a right to correction and/or completion, insofar as the processed personal data pertaining to you is inaccurate or incomplete. We will make the correction immediately.

8. Right to restriction of processing

Under the following conditions, you can demand that the processing of personal data pertaining to you is restricted, if:

  1. (1) you dispute the accuracy of the personal date pertaining to you for a period that allows us to check the accuracy of the personal data;
  2. (2) the processing is unlawful and you waive deletion of the personal data and instead demand the restriction of use of the personal data;
  3. (3) the personal data is no longer required for the purposes of processing but is still required for the assertion, exercise or defence of legal claims, or
  4. (4) you have submitted an objection to the processing in accordance with Art. 21(1) GDPR and it has not yet been decided whether our legitimate reasons outweigh your reasons.

If the processing of personal data pertaining to you is restricted, these data – apart from their storage – may only be processed with your consent or for the assertion, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest of the Union or of a Member State.
If the restriction of processing according to the above-mentioned prerequisites is restricted, you will be informed of this by us before the restriction is lifted.

9. Right to deletion

a) Mandatory deletion
You have the right to demand that we delete the personal data pertaining to you immediately, insofar as one of the following reasons applies:

  1. (1) The personal data pertaining to you are no longer required for the purposes for which they were collected or otherwise processed.
  2. (2) You revoke your consent on which the processing according to Art. 6(1) lit. a or Art. 9(2) lit. a GDPR was based and there is no other legal basis for the processing.
  3. (3) You object to the processing in accordance with Art. 21(1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21(2) GDPR.
  4. (4) The personal data pertaining to you has been processed unlawfully.
  5. (5) The deletion of the personal data pertaining to you is required in order to comply with a legal obligation in accordance with Union law or the law of the Member States to which we are subject.
  6. (6) The personal data pertaining to you were collected in relation to information society services in accordance with Art 8(1) GDPR.

b) Information to third parties
If we have made the personal data pertaining to you public and if we are obliged to delete such data according to Art. 17(1) GDPR, taking into account the available technology and the implementation costs, we shall take appropriate measures, including those of a technical nature, to inform those responsible for data processing who process the personal data that you as the data subject have requested the deletion of all links to these personal data or copies or replicas of these personal data.
c) Exceptions
The right of deletion does not apply if the processing is required

  1. (1) in order to ensure the exercise of the right to freedom of expression and information;
  2. (2) in order to fulfil a legal obligation which required processing in accordance with the law of the Union or the Member States to which we are subject, or for the performance of a task in the public interest or in the exercise of public authority that has been transferred to us;
  3. (3) for reasons of public interest in the area of public health according to Art. 9(2) lit. h and i as well as Art. 9(3) GDPR;
  4. (4) for archive purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89(1) GDPR, insofar as the rights referred to in paragraph a) make the achievement of the objectives of this processing impossible or seriously impair them, or
  5. (5) for the assertion, exercise or defence of legal claims.

10. Right to information

If you have asserted the right to correction, deletion or restriction of the processing against us, we are obliged to inform all recipients to whom the personal data has been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or would involve disproportionate effort.
You have the right to be informed of these recipients by us.

11. Right to data portability

You have the right to receive the personal data pertaining to you that you provided to us in a structured, common and machine-readable format. You also have the right to have these data processed by another responsible body without interference from us, if

  1. (1) the processing is based on a consent according to Art. 6(1) lit. a GDPR or Art. 9(2) lit. a GDPR or on a contract according to Art. 6(1) lit. b GDPR and
  2. (2) the processing is carried out using automated procedures.

In exercising this right, you also have the right to have the personal data pertaining to you transmitted directly to another responsible body by us, insofar as this is technically feasible. Liberties and rights of other persons shall not be affected by this.
The right to data portability does not apply to the processing of personal data that is required for the performance of a task in the public interest or in the exercise of public authority that has been transferred to us.

12. Right of revocation and objection

You have the right, for reasons related to your specific situation, to object at any time to the processing of personal data pertaining to you that is carried out on the basis of Art. 6(1) lit. e or f GDPR; this also applies for profiling based on these provisions.
We then no longer process the personal data pertaining to you, unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing is used for the assertion, exercise or defence of legal claims.
If the personal data pertaining to you is processed in order to operate direct advertising, you have the right at any time to object to the processing of the personal data pertaining to you for the purposes of such advertising; this also applies for profiling, insofar as it is in connection with such direct advertising. If you object to the processing for purposes of direct advertising, the personal data pertaining to you will no longer be processed for these purposes.
You have the option in connection with the use of information society services - regardless of Directive 2002/58/EC - to exercise your right of objection by means of automated processes in which technical specifications are used.

Right of revocation of the declaration of consent under data protection law
You have a right of revoke your declaration of consent at any time under data protection law. By revoking consent, the legality of the processing carried out on the basis of the consent up until revocation shall not be affected.

13. Right to file a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, in particular in the Member State of your place of residence, workplace or the location of the alleged infringement, if you are of the opinion that the processing of personal data pertaining to you breaches GDPR.
The supervisory authority to which the complaint is submitted informs the complainant of the status and the results of the complaint including the possibility of a judicial remedy according to Art. 78 GDPR.

14. Confidentiality

(1) We keep all information that is to be handled as confidential given to us in the run-up to and within the context of the contractual relationship secret and only use this subject to the prior agreement of the respective other contracting party with respect to third parties - irrespective of the purpose. Information that is to be handled as confidential includes information that is expressly described as confidential information by the party that provided it and information that is clearly confidential based on the circumstances of its provision. In particular, your personal data and the data used, should we become aware of this, is to be treated as confidential.

(2) The obligations according to paragraph 1 do not apply for such information or parts thereof for which we have to prove that they

  • were known to us or publicly accessible before the date of receipt;
  • were known to the public before the date of receipt or were generally accessible;
  • were known to the public after the date of receipt or were generally accessible without us being responsible for this.

(3) Public statements by the parties concerning a cooperation will only be made subject to prior mutual agreement.

(4) The obligations according to paragraph 1 continue to exist after the contract has ended for an indefinite period of time, for as long as an exceptional case according to paragraph 2 has not been proven.

15. Scope of application

This privacy statement applies to the services of IMMS Institut für Mikroelektronik- und Mechatronik-Systeme gemeinnützige GmbH (IMMS GmbH) on the website www.imms.de.

16. Availability of the privacy statement

You can retrieve and print this privacy statement from any page of the website using the link.

17. Validity of this privacy statement

This privacy statement is currently valid and is dated 25/05/2018. If circumstances arise that require a new privacy statement, the updated privacy statement will be published here and will apply from the date of publication.

  • Information on data protection for applicants in accordance with GDPR

    Information on data protection for applicants in accordance with GDPR

    We place great importance on the protection of your personal data. As the protection of both your privacy and your business data is of particular importance to us, we observe the data protection regulations applicable in Germany.

    In the following, we will inform you about the collection of personal data at the time of collection of this data.

    1. Responsible body in accordance with Art. 4(7) GDPR

    The responsible body in accordance with Art. 4(7) GDPR is
    IMMS Institut für Mikroelektronik- und Mechatronik-Systeme gemeinnützige GmbH
    Prof. Dr. Ralf Sommer, Dipl.-Kfm. Martin Eberhardt
    Ehrenbergstraße 27
    98693 Ilmenau
    GERMANY
    imms(at)imms.de.

    Data Protection Officer
    Dr Thomas Häring
    Rimbachstraße 45
    98527 Suhl
    GERMANY
    Datenschutz.Beauftragter(at)imms.de

    2. Collection and use of personal data

    (1) We collect, store and process your personal data in order to process your application and for the application process.
    (2) When you contact us, the personal data actively transmitted by you is stored and processed, insofar as this is required for the application process.

    This concerns the following data: form of address, title, first name, surname, e-mail address, telephone number, the contents of your application documents such as the cover letter, CV, references, qualifications, and your photo.

    Personal data are generally only collected from our users and used after the user has consented. One exception applies in cases where obtaining consent beforehand is not possible on factual grounds and the processing of the data is permitted by law.

    Insofar as we obtain the consent of the applicant for personal data processing operations, Art. 6(1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
    With regard to the processing of personal data that is required to fulfil a contract to which the data subject is party, Art. 6(1) lit. b GDPR serves as the legal basis. This also applies for processing operations that are necessary for the implementation of pre-contractual measures.
    Insofar as the processing of personal data is required to comply with a legal obligation on the part of our company, Art. 6(1) lit. c GDPR serves as the legal basis.
    Insofar as the application leads to the establishment of an employment relationship, Section 26 of the German Federal Data Protection Act (BDSG) is the legal basis for the processing of personal data.
    If the processing is required to protect a legitimate interest of our company or a third party and if the interests, rights and fundamental freedoms of the applicant do not outweigh the first interest mentioned, Art. 6(1) lit. f GDPR serves as the legal basis for the processing.

    (3) Your personal data are not passed on to third parties.

    (4) Your registered data stored in our systems are protected against access by unauthorised third parties. This prevents data misuse.

    (5) The applicant’s personal data are deleted or disabled as soon as the application process is finished, the decision does not fall to you and insofar as there are no legal retention obligations. Insofar as you have expressly consented to the inclusion of your data in the applicant pool in case a suitable position is found within one year of receipt of your application, your personal data will be retained for this period and deleted after the fruitless elapse of one year.

    3. Right to information

    You can request confirmation from us as to whether personal data pertaining to you is processed by us.
    If such processing does take place, you can request information from us on the following:

    1. (1) the purposes for which the personal data are processed;
    2. (2) the categories of personal data that are processed;
    3. (3) the recipients or categories of recipients to whom the personal data pertaining to you is or has been disclosed;
    4. (4) the planned duration of the storage of personal data pertaining to you or, if specific details of this are not possible, criteria for determining the duration of storage;
    5. (5) the existence of a right to correction or deletion of personal data pertaining to you, the right to restrict the processing by us or the right to object to this processing;
    6. (6) the existence of a right to file a complaint with a supervisory authority;
    7. (7) all available information on the origin of the data, if the personal data is not collected from the applicant;
    8. (8) the existence of automated decision-making including profiling according to Art. 22 (1) and (4) GDPR and - at least in these cases - pertinent information on the logic involved as well as the scope and desired impact of such processing for the data subject.

    You have the right to demand information as to whether or not the personal data pertaining to you is transmitted to a third country or an international organisation. In this context, you can demand to be informed via the appropriate guarantees according to Art. 46 GDPR in connection with the transmission.

    4. Right to correction

    You have a right to correction and/or completion, insofar as the processed personal data pertaining to you is inaccurate or incomplete. We will make the correction immediately.

    5. Right to restriction of processing

    Under the following conditions, you can demand that the processing of personal data pertaining to you is restricted, if:

    1. (1) you dispute the accuracy of the personal date pertaining to you for a period that allows us to check the accuracy of the personal data;
    2. (2) the processing is unlawful and you waive deletion of the personal data and instead demand the restriction of use of the personal data;
    3. (3) the personal data is no longer required for the purposes of processing but is still required for the assertion, exercise or defence of legal claims, or
    4. (4) you have submitted an objection to the processing in accordance with Art. 21(1) GDPR and it has not yet been decided whether our legitimate reasons outweigh your reasons.

    If the processing of personal data pertaining to you is restricted, these data - apart from their storage - may only be processed with your consent or for the assertion, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest of the Union or of a Member State.
    If the restriction of processing according to the above-mentioned prerequisites is restricted, you will be informed of this by us before the restriction is lifted.

    6. Right to deletion

    a) Mandatory deletion
    You have the right to demand that we delete the personal data pertaining to you immediately, insofar as one of the following reasons applies:

    1. (1) The personal data pertaining to you are no longer required for the purposes for which they were collected or otherwise processed.
    2. (2) You revoke your consent on which the processing according to Art. 6(1) lit. a or Art. 9(2) lit. a GDPR was based and there is no other legal basis for the processing.
    3. (3) You object to the processing in accordance with Art. 21(1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21(2) GDPR.
    4. (4) The personal data pertaining to you has been processed unlawfully.
    5. (5) The deletion of the personal data pertaining to you is required in order to comply with a legal obligation in accordance with Union law or the law of the Member States to which we are subject.
    6. (6) The personal data pertaining to you were collected in relation to information society services in accordance with Art 8(1) GDPR.

    b) Information to third parties
    If we have made the personal data pertaining to you public and if we are obliged to delete such data according to Art. 17(1) GDPR, taking into account the available technology and the implementation costs, we shall take appropriate measures, including those of a technical nature, to inform those responsible for data processing who process the personal data that you as the data subject have requested the deletion of all links to these personal data or copies or replicas of these personal data.
    Exceptions
    The right of deletion does not apply if the processing is required

    1. (1) in order to ensure the exercise of the right to freedom of expression and information;
    2. (2) in order to fulfil a legal obligation which required processing in accordance with the law of the Union or the Member States to which we are subject, or for the performance of a task in the public interest or in the exercise of public authority that has been transferred to us;
    3. (3) for reasons of public interest in the area of public health according to Art. 9(2) lit. h and i as well as Art. 9(3) GDPR;
    4. (4) for archive purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89(1) GDPR, insofar as the rights referred to in paragraph a) make the achievement of the objectives of this processing impossible or seriously impair them, or
    5. (5) for the assertion, exercise or defence of legal claims.

    7. Right to information

    If you have asserted the right to correction, deletion or restriction of the processing against us, we are obliged to inform all recipients to whom the personal data has been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or would involve disproportionate effort.
    You have the right to be informed of these recipients by us.

    8. Right to data portability

    You have the right to receive the personal data pertaining to you that you provided to us in a structured, common and machine-readable format. You also have the right to have these data processed by another responsible body without interference from us, if

    1. (1) the processing is based on a consent according to Art. 6(1) lit. a GDPR or Art. 9(2) lit. a GDPR or on a contract according to Art. 6(1) lit. b GDPR and
    2. (2) the processing is carried out using automated procedures.

    In exercising this right, you also have the right to have the personal data pertaining to you transmitted directly to another responsible body by us, insofar as this is technically feasible. Liberties and rights of other persons shall not be affected by this.
    The right to data portability does not apply to the processing of personal data that is required for the performance of a task in the public interest or in the exercise of public authority that has been transferred to us.

    9. Right of revocation and objection

    You have the right, for reasons related to your specific situation, to object at any time to the processing of personal data pertaining to you that is carried out on the basis of Art. 6(1) lit. e or f GDPR; this also applies for profiling based on these provisions.
    We then no longer process the personal data pertaining to you, unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing is used for the assertion, exercise or defence of legal claims.
    If the personal data pertaining to you is processed in order to operate direct advertising, you have the right at any time to object to the processing of the personal data pertaining to you for the purposes of such advertising; this also applies for profiling, insofar as it is in connection with such direct advertising. If you object to the processing for purposes of direct advertising, the personal data pertaining to you will no longer be processed for these purposes.
    You have the option in connection with the use of information society services - regardless of Directive 2002/58/EC - to exercise your right of objection by means of automated processes in which technical specifications are used.

    Right of revocation of the declaration of consent under data protection law
    You have a right of revoke your declaration of consent at any time under data protection law. By revoking consent, the legality of the processing carried out on the basis of the consent up until revocation shall not be affected.

    10. Right to file a complaint with a supervisory authority

    Without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, in particular in the Member State of your place of residence, workplace or the location of the alleged infringement, if you are of the opinion that the processing of personal data pertaining to you breaches GDPR.
    The supervisory authority to which the complaint is submitted informs the complainant of the status and the results of the complaint including the possibility of a judicial remedy according to Art. 78 GDPR.

    11. Confidentiality

    (1) We keep all information that is to be handled as confidential given to us in the run-up to and within the context of the contractual relationship secret and only use this subject to the prior agreement of the respective other contracting party with respect to third parties - irrespective of the purpose. Information that is to be handled as confidential includes information that is expressly described as confidential information by the party that provided it and information that is clearly confidential based on the circumstances of its provision. In particular, your personal data and the data used, should we become aware of this, are to be treated as confidential.

    (2) The obligations according to paragraph 1 do not apply for such information or parts thereof for which we have to prove that they

    • were known to us or publicly accessible before the date of receipt;
    • were known to the public before the date of receipt or were generally accessible;
    • were known to the public after the date of receipt or were generally accessible without us being responsible for this.

    (3) Public statements by the parties concerning a cooperation will only be made subject to prior mutual agreement.

    (4) The obligations according to paragraph 1 continue to exist after the contract has ended for an indefinite period of time, for as long as an exceptional case according to paragraph 2 has not been proven.

  • Information on data protection for customers, partners and suppliers in accordance with GDPR

    Information on data protection for customers, partners and suppliers in accordance with GDPR

    We place great importance on the protection of your personal data. As the protection of both your privacy and your business data is of particular importance to us, we observe the data protection regulations applicable in Germany.

    In the following, we will inform you about the collection of personal data at the time of collection of this data.

    1. Responsible body in accordance with Art. 4(7) GDPR

    The responsible body in accordance with Art. 4(7) GDPR is
    IMMS Institut für Mikroelektronik- und Mechatronik-Systeme gemeinnützige GmbH (IMMS GmbH)
    Prof. Dr. Ralf Sommer, Dipl.-Kfm. Martin Eberhardt
    Ehrenbergstraße 27
    98693 Ilmenau
    GERMANY
    imms(at)imms.de.

    Data Protection Officer
    Dr. Thomas Häring
    Rimbachstraße 45
    98527 Suhl
    GERMANY
    Datenschutz.Beauftragter(at)imms.de

    2. Collection and use of personal data

    (1) When you contact us by phone, e-mail, fax or via a contact form, the personal data actively transmitted by you (for example: your name, address or e-mail address) are stored and processed, insofar as this is required for the processing of requests or the fulfilment of our contractual obligations. Personal data is generally only collected from our users and used after the user has consented. One exception applies in cases where obtaining consent beforehand is not possible on factual grounds and the processing of the data is permitted by law.

    Insofar as we obtain consent from the data subject for personal data processing operations, Art. 6(1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
    With regard to the processing of personal data that is required to fulfil a contract to which the data subject is party, Art. 6(1) lit. b GDPR serves as the legal basis. This also applies for processing operations that are necessary for the implementation of pre-contractual measures.
    Insofar as the processing of personal data is required to comply with a legal obligation on the part of our company, Art. 6(1) 1 lit. c GDPR serves as the legal basis.

    If the processing is required to protect a legitimate interest of our company or a third party and if the interests, rights and fundamental freedoms of the data subject do not outweigh the first interest mentioned, Art. 6(1) lit. f GDPR serves as the legal basis for the processing.

    (2) Your registered data are always stored in encrypted form on our systems. This prevents data misuse. For encryption we use a recognised and widely used system that is deemed to be secure in the respective current version.

    (3) The personal data of the data subject are deleted or disabled as soon as the purpose of storage expires. This is the case when the respective conversation with the user has ended. The conversation has ended if it is clear from the circumstances that the subject matter in question has been conclusively clarified. Furthermore, storage may also occur if so required by European or national law under European Union regulations, laws or other provisions to which we are subject. Blocking or deletion of data is also carried out if a storage period specified by the standards referred to expires, unless there is a need for further storage of the data in order to conclude or execute a contract.

    (4) We regularly forward the personal data that has to be collected for the purposes of preparing the financial accounting and business management analyses for submission to the tax authority to our tax advisor.

    (5) We regularly forward the personal data that is required to prepare the wage and salary accounting to DATEV eG.

    (6) Furthermore, personal data are collected at our principal bank as soon as you make a deposit. These data are subject to the obligation of confidentiality.

    3. Right to information

    You can request confirmation from us as to whether personal data pertaining to you is processed by us.
    If such processing does take place, you can request information from us on the following:

    1. (1) the purposes for which the personal data are processed;
    2. (2) the categories of personal data that are processed;
    3. (3) the recipients or categories of recipients to whom the personal data pertaining to you is or has been disclosed;
    4. (4) the planned duration of the storage of personal data pertaining to you or, if specific details of this are not possible, criteria for determining the duration of storage;
    5. (5) the existence of a right to correction or deletion of personal data pertaining to you, the right to restrict the processing by us or the right to object to this processing;
    6. (6) the existence of a right to file a complaint with a supervisory authority;
    7. (7) all available information on the origin of the data, if the personal data is not collected from the data subject;
    8. (8) the existence of automated decision-making including profiling according to Art. 22 (1) and (4) GDPR and - at least in these cases - pertinent information on the logic involved as well as the scope and desired impact of such processing for the data subject.

    You have the right to demand information as to whether or not the personal data pertaining to you is transmitted to a third country or an international organisation. In this context, you can demand to be informed via the appropriate guarantees according to Art. 46 GDPR in connection with the transmission.

    4. Right to correction

    You have a right to correction and/or completion, insofar as the processed personal data pertaining to you is inaccurate or incomplete. We will make the correction immediately.

    5. Right to restriction of processing

    Under the following conditions, you can demand that the processing of personal data pertaining to you is restricted, if:

    1. (1) you dispute the accuracy of the personal date pertaining to you for a period that allows us to check the accuracy of the personal data;
    2. (2) the processing is unlawful and you waive deletion of the personal data and instead demand the restriction of use of the personal data;
    3. (3) the personal data is no longer required for the purposes of processing but is still required for the assertion, exercise or defence of legal claims, or
    4. (4) you have submitted an objection to the processing in accordance with Art. 21(1) GDPR and it has not yet been decided whether our legitimate reasons outweigh your reasons.

    If the processing of personal data pertaining to you is restricted, these data - apart from their storage - may only be processed with your consent or for the assertion, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest of the Union or of a Member State.
    If the restriction of processing according to the above-mentioned prerequisites is restricted, you will be informed of this by us before the restriction is lifted.

    6. Right to deletion

    a) Mandatory deletion
    You have the right to demand that we delete the personal data pertaining to you immediately, insofar as one of the following reasons applies:

    1. (1) The personal data pertaining to you are no longer required for the purposes for which they were collected or otherwise processed.
    2. (2) You revoke your consent on which the processing according to Art. 6(1) lit. a or Art. 9(2) lit. a GDPR was based and there is no other legal basis for the processing.
    3. (3) You object to the processing in accordance with Art. 21(1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21(2) GDPR.
    4. (4) The personal data pertaining to you has been processed unlawfully.
    5. (5) The deletion of the personal data pertaining to you is required in order to comply with a legal obligation in accordance with Union law or the law of the Member States to which we are subject.
    6. (6) The personal data pertaining to you were collected in relation to information society services in accordance with Art 8(1) GDPR.

    b) Information to third parties
    If we have made the personal data pertaining to you public and if we are obliged to delete such data according to Art. 17(1) GDPR, taking into account the available technology and the implementation costs, we shall take appropriate measures, including those of a technical nature, to inform those responsible for data processing who process the personal data that you as the data subject have requested the deletion of all links to these personal data or copies or replicas of these personal data.
    c) Exceptions
    The right of deletion does not apply if the processing is required

    1. (1) in order to ensure the exercise of the right to freedom of expression and information;
    2. (2) in order to fulfil a legal obligation which required processing in accordance with the law of the Union or the Member States to which we are subject, or for the performance of a task in the public interest or in the exercise of public authority that has been transferred to us;
    3. (3) for reasons of public interest in the area of public health according to Art. 9(2) lit. h and i as well as Art. 9(3) GDPR;
    4. (4) for archive purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89(1) GDPR, insofar as the rights referred to in paragraph a) make the achievement of the objectives of this processing impossible or seriously impair them, or
    5. (5) for the assertion, exercise or defence of legal claims.

    7. Right to information

    If you have asserted the right to correction, deletion or restriction of the processing against us, we are obliged to inform all recipients to whom the personal data has been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or would involve disproportionate effort.
    You have the right to be informed of these recipients by us.

    8. Right to data portability

    You have the right to receive the personal data pertaining to you that you provided to us in a structured, common and machine-readable format. You also have the right to have these data processed by another responsible body without interference from us, if

    1. (1) the processing is based on a consent according to Art. 6(1) lit. a GDPR or Art. 9(2) lit. a GDPR or on a contract according to Art. 6(1) lit. b GDPR and
    2. (2) the processing is carried out using automated procedures.

    In exercising this right, you also have the right to have the personal data pertaining to you transmitted directly to another responsible body by us, insofar as this is technically feasible. Liberties and rights of other persons shall not be affected by this.
    The right to data portability does not apply to the processing of personal data that is required for the performance of a task in the public interest or in the exercise of public authority that has been transferred to us.

    9. Right of revocation and objection

    You have the right, for reasons related to your specific situation, to object at any time to the processing of personal data pertaining to you that is carried out on the basis of Art. 6(1) lit. e or f GDPR; this also applies for profiling based on these provisions.
    We then no longer process the personal data pertaining to you, unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing is used for the assertion, exercise or defence of legal claims.
    If the personal data pertaining to you is processed in order to operate direct advertising, you have the right at any time to object to the processing of the personal data pertaining to you for the purposes of such advertising; this also applies for profiling, insofar as it is in connection with such direct advertising. If you object to the processing for purposes of direct advertising, the personal data pertaining to you will no longer be processed for these purposes.
    You have the option in connection with the use of information society services - regardless of Directive 2002/58/EC - to exercise your right of objection by means of automated processes in which technical specifications are used.

    Right of revocation of the declaration of consent under data protection law
    You have a right of revoke your declaration of consent at any time under data protection law. By revoking consent, the legality of the processing carried out on the basis of the consent up until revocation shall not be affected.

    10. Right to file a complaint with a supervisory authority

    Without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, in particular in the Member State of your place of residence, workplace or the location of the alleged infringement, if you are of the opinion that the processing of personal data pertaining to you breaches GDPR.
    The supervisory authority to which the complaint is submitted informs the complainant of the status and the results of the complaint including the possibility of a judicial remedy according to Art. 78 GDPR.

    11. Confidentiality

    (1) We keep all information that is to be handled as confidential given to us in the run-up to and within the context of the contractual relationship secret and only use this subject to the prior agreement of the respective other contracting party with respect to third parties - irrespective of the purpose. Information that is to be handled as confidential includes information that is expressly described as confidential information by the party that provided it and information that is clearly confidential based on the circumstances of its provision. In particular, your personal data and the data used, should we become aware of this, are to be treated as confidential.

    (2) The obligations according to paragraph 1 do not apply for such information or parts thereof for which we have to prove that they

    • were known to us or publicly accessible before the date of receipt;
    • were known to the public before the date of receipt or were generally accessible;
    • were known to the public after the date of receipt or were generally accessible without us being responsible for this.

    (3) Public statements by the parties concerning a cooperation will only be made subject to prior mutual agreement.

    (4) The obligations according to paragraph 1 continue to exist after the contract has ended for an indefinite period of time, for as long as an exceptional case according to paragraph 2 has not been proven.