Data Privacy Policy
EMAG GmbH & Co. KG, Austraße 24, D - 73084 Salach, Germany (telephone: +49 / 7162 / 17-0 | fax: +49 / 7162 / 17-197 |email: communications@emag.com (“we” or “us’), as operator of the website www.emag.com, is the controller responsible for processing the personal data of users (“you”) of the website within the meaning of Article 4 of the General Data Protection Regulation (“GDPR”).
We will protect your privacy and your personal data. We collect, process, and use your personal data as set out in this Privacy Policy and in compliance with the provisions of applicable data protection law.
This Privacy Policy sets out the personal data concerning you that we collect, process, and use. We therefore ask that you read the following information carefully.
1. Collection of personal data
1.1 Personal data means any data that relates to you personally, i.e., data that can be used to identify you. Personal data includes in particular your name, email address, address, and telephone number.
1.2 Personal or personally identifiable data may also include information about how you use our website. As with all websites, our server automatically and temporarily stores information transmitted by your browser in the server log files unless you disable this feature. If you wish to view our website, we will collect the following data. We require this data for technical reasons in order to show you our website and to ensure stability and security (legal basis Article 6(1)(f) GDPR):
- IP address of the requesting computer
- file requested by the client
- http response code
- website you came to our website from (the referrer URL)
- time of the server request
- browser type and version
- operating system used by the requesting computer
No personalized analysis of server log files is carried out. At no time is the provider able to associate this data with any specific person. The data is not combined with data from other sources.
2. Purpose of use
We use your personal data for the following purposes:
2.1 To provide the services you want to use (receipt and processing of inquiries submitted online or messages sent via the contact form, receipt and processing of document attachments, receipt and processing of questions, messages and offers, including by telephone/email, or for the purpose of initiating business relations), for the purposes of which you voluntarily provide us your data. The legal basis for this is Article 6(1)(b) GDPR;
2.2 To ensure that our website is presented to you as effectively and interestingly as possible (e.g., storage of display preferences, own market research and opinion polling). Insofar as we obtain consent, the legal basis is Article 6(1)(a) GDPR (e.g., for tracking, see point 3.7). Other than that, the legal basis for this is Article 6(1)(f) GDPR;
2.3 To comply with our obligations under any contracts between you and us. The legal basis for this is Article 6(1)(b) GDPR;
2.4 To enable you to take advantage of interactive features if you wish. The legal basis for this is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR;
2.5 To inform you of changes to our services. The legal basis for this is Article 6(1)(f) GDPR.
3. Information about your computer, cookies, and targeting
3.1 We collect the information specified in point 1.2. each time our website is accessed.
3.2 We may also use browser cookies to collect information about how you use our website. Browser cookies are small text files that are stored on your device and contain specific settings and information about your browser to share with our system. A cookie normally contains the name of the domain that sent the cookie, information about the age of the cookie, and an alphanumeric identifier. Cookies enable our systems to recognize the user’s device and respond to any default settings immediately. A cookie is placed on the hard drive of the user’s computer as soon as the user accesses the platform. Cookies help us to improve our website and offer you a better service more effectively tailored to your requirements. The legal basis for cookies required to use our website is Article 6(1)(f) GDPR. The legal basis for cookies stored by partner companies (see point 3.5) as well as for tracking cookies (see point 3.4) is your consent, Article 6(1)(a) GDPR. They enable us to recognize your computer on return visits to our website and therefore:
to store information about how you use our website and tailor the website to your personal interests. This includes advertising tailored to your personal interests;
to respond more quickly to your inquiries;
3.3 The cookies we use contain only the data concerning your website use as described above. This is done not by linking the data to you personally, but by allocating an identification number to the cookie (the “cookie ID”). The cookie ID is not combined with your name, IP address or similar data that would allow the cookie to be linked to you personally. Information on how you can disable the use of browser cookies is given in point 3.6.
3.4 Our website uses tracking technologies. We use these to make our website more interesting to you. These technologies allow us to deliver advertising on the websites of our partners to users who have previously shown an interest in our website. We use cookie technology and analyze previous user behavior to deliver advertising on our partners’ websites. This analysis is carried out pseudonymously, and no user profiles containing your personal data are compiled. The first time you visit our website, you will be asked whether you want to grant your consent for cookies that collect personal data to be set. You can grant your consent either for all cookies (button “[ACCEPT ALL]”) or make custom settings by clicking the button “[NO, CUSTOMIZE].” There you can decide by activating the buttons whether to grant consent for a specific service, for specific categories or services, or whether you want to refuse to grant consent. The consent is voluntary and you can withdraw it at any time with effect for the future by clicking “[Customize Cookie Settings]” at the bottom of our website (footer) or in point 3.6 of our Data Privacy Policy, which you will also find in the website footer, by deselecting a previously activated button.
3.5 We work with partners who help us to deliver a more interesting website. For this reason, cookies from these partners are also placed on your hard drive when you visit our website. These cookies are automatically erased after the period specified. Again, these partner company cookies collect data under a cookie ID and only to the extent that allows our advertising partners to show you advertising that might be of interest to you. The first time you visit our website, you will be asked whether you want to grant your consent for cookies that collect personal data to be set. You can grant your consent either for all cookies (button “[ACCEPT ALL]”) or make custom settings by clicking the button “[NO, CUSTOMIZE].” There you can decide by activating the buttons whether to grant consent for a specific service, for specific categories or services, or whether you want to refuse to grant consent. The consent is voluntary and you can withdraw it at any time with effect for the future by clicking “[Customize Cookie Settings]” at the bottom of our website (footer) or in point 3.6 of our Data Privacy Policy, which you will also find in the website footer, by deselecting a previously activated button. If you would like to know how to disable the use of such cookies by means of browser settings, please refer to point 3.6.
3.6 If you do not want browser cookies to be used, you can modify your browser settings to refuse cookies. Please note that in this case you may not be able to use some or all of the website. If you want to accept our cookies only and not the cookies of our service providers and partners, you can modify your browser settings to block third-party cookies.
You can withdraw your consent to the use of cookies for the future or grant new consents by clicking the following link: Customize cookie settings.
3.7. Matomo
We use Matomo (formerly Piwik) for web analysis by means of cookie technology. This is a service of InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769 (“Matomo“). The protection of your personal information is important to us, which is why we configured Matomo to record your IP address in abbreviated form only. We therefore process your personal usage data only in anonymized form. We are not able to identify you. For more information on Matomo's terms of use and data protection regulations, please visit: https://matomo.org/privacy/
3.8 Google Tag Manager
We use Google Tag Manager, an advertising platform provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Tag Manager makes it possible to manage website tags via a single interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has taken place at the domain or cookie level, it will remain effective for all tracking tags implemented with Google Tag Manager.
3.9 Google Maps
This website uses content from Google Maps, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This enables us to display interactive maps directly on the website and allows you to easily use the map feature. The legal basis for the use of Google Maps is your consent, Article 6(1)(a) GDPR. Before you grant us your consent, no data is transmitted to third parties. More information on granting and withdrawing your consent is given in point 3.5.
When you visit our website, Google is informed that you have opened the corresponding page of our website. The data specified in point 1.2 of this Policy is also transmitted to Google. This occurs regardless of whether you or not you have a Google account and are logged into it. If you are logged into Google, your data will be linked with your account. If you do not want this data to be linked with your Google profile, you must log out before clicking the button. Google will store your data in a user profile, which it will use for the purpose of advertising, market research, or tailoring its website. This analysis, which is carried out even for users who are not logged in, is used primarily to display tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact Google to exercise this right.
For more information about the purpose and scope of data collection and processing by the plugin provider, please see that provider’s privacy policies. The privacy policy also provides further information about your rights and options regarding privacy settings: www.google.com/policies/privacy/.
3.10 Google Fonts
We also embed fonts provided by Google (“Google Fonts”) to improve the display of our text and content. The legal basis for the embedding of Google Fonts is Article 6(1)(f) GDPR. For more information about the purpose and scope of data collection and processing by Google Fonts, please see the privacy policy: www.google.com/policies/privacy/. You can opt out of any tracking at adssettings.google.com/authenticated. The privacy policy also provides further information about your rights and options regarding privacy settings: www.google.com/policies/privacy/.
3.11 Social networks
Our website contains links to the social networks Facebook, Twitter, YouTube, Pinterest, and LinkedIn. Unlike in the case of social media plugins (e.g., the Facebook “Like” button), personal connection data is only generated when you access the social network in question using the link.
3.12 LinkedIn Insight Tag
We use the LinkedIn Insight Tag, a tracking technology on the LinkedIn platform, provided by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2 (Ireland). This technology employed by LinkedIn can be used to show you more relevant advertising based on your interests. LinkedIn also provides us with aggregated, anonymous reports about ad performance and information about how you interact with our website. The legal basis is your consent, Article 6(1)(a) GDPR.
LinkedIn uses cookies for this purpose. These cookies uniquely identify a web browser on a particular computer, do not contain any personal data, and are therefore not used to identify individual users of our website. The information collected with these cookies is used to compile the anonymous statistics and reports mentioned above and to serve advertising based on your interests.
You can disable the LinkedIn Insight Tag and opt out of interest-based advertising in the cookie banner. More information on granting and withdrawing your consent is given in point 3.5.
3.13 YouTube
To play our videos we use the video service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“YouTube“). The legal basis is your consent, Article 6(1)(a) GDPR. Before you grant us your consent, no data is transmitted to third parties. More information on granting and withdrawing your consent is given in point 3.5.
Embedded YouTube videos can also be hidden by browser add-ons so that YouTube does not collect data. If you are logged into Google, your data will be linked with your account. If you do not want this data to be linked with your YouTube profile, you must log out before clicking the button. YouTube will store your data in a user profile, which it will use for the purpose of advertising, market research, or tailoring its website. This analysis, which is carried out even for users who are not logged in, is used primarily to display tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact YouTube to exercise this right.
For more information about the purpose and scope of data collection and processing by YouTube, please see that provider’s privacy policy. The privacy policy also provides further information about your rights and options regarding privacy settings: policies.google.com/privacy.
3.14 Issuu
On our website we use the services of the provider Issuu (Issuu Inc.131 Lytton Ave, Palo Alto, CA 94301, United States). The legal basis is your consent, Article 6(1)(a) GDPR. Before you grant us your consent, no data is transmitted to third parties. More information on granting and withdrawing your consent is given in point 3.5.
Issuu allows us to display catalogs and magazines and makes it easier for you to view them. These magazines and catalogs are stored on Issuu’s website and integrated into our website. When you access a page of our website with an integrated catalog, your browser connects to the Issuu server. In the process, Issuu collects various categories of data. We have no influence on the scope of the data that Issuu collects in this way. To our current knowledge, it is generally the following data:
- visited page on our website that contains the embedded catalog/magazine,
- the data generally transmitted by your browser (IP address, browser type and version, operating system, time).
The data collected by Issuu is transmitted to its server in the USA.
Issuu uses Google Analytics itself (see point 3.7 for how Google Analytics works). In this case, Google Analytics is exclusively used for the provider’s analytical purposes. We have no influence on the use of Google Analytics by the provider. This also means that the tracking by Issuu depends exclusively on whether you consented to the use of Issuu. You may refuse the use of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent the collection of data generated by the cookie and related to the usage of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available under the following link: tools.google.com/dlpage/gaoptout.
More information on the use of cookies by Issuu can be found here: https://issuu.com/legal/cookies. Issuu’s privacy policy can be found here: issuu.com/legal/privacy.
3.15 Social media plugins
This website uses social plugins of the social networks Twitter, Facebook, and Pinterest. Social plugins are web applications that connect this website with selected social networks. However, the social plugins are not directly integrated, but must first be activated by a separate click. This activation is necessary to establish a connection with the social network, regardless of whether you actually click on the social plugins. This connection allows your IP address and user information for the relevant social network to be transmitted to the social network.
When the social plugins are activated, your browser connects directly to the servers of the social network provider. The contents of the social plugin are transmitted directly to your browser by the provider. At the same time, certain data is transmitted from your browser to the provider. This happens whether or not you click on the social plugins. We have no influence on the scope of the data that the provider collects in this way. To our current knowledge, it is generally the following data:
1. visited page on our website that contains the social plugin,
2. the data generally transmitted by your browser (IP address, browser type and version, operating system, time),
3. for registered and logged-in users, the respective identification number of the social network.
The legal basis for the use of the social plugins is your consent, Article 6(1)(a) GDPR. Before you grant us your consent, no data is transmitted to third parties. More information on granting and withdrawing your consent is given in point 3.5.
The Twitter account is provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, a subsidiary of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. (“Twitter”). Twitter’s privacy policy can be accessed here: twitter.com/privacy.
The Facebook page is provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook, Inc. (“Facebook”). Facebook’s privacy policy can be accessed here: www.facebook.com/about/privacy.
The Pinterest account is provided by Pinterest Inc., 651 Brannan Street, San Francisco, CA 94103, USA (“Pinterest”). Pinterest’s privacy policy can be accessed here: https://policy.pinterest.com/privacy-policy.
The Instagram account is provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. More information on this can be found in Instagram’s privacy policy: http://instagram.com/about/legal/privacy/
4. Collection and processing of data provided on a voluntary basis
4.1 Recruitment portal
4.1.1 General
You can submit speculative job applications or apply for specific jobs via our careers page. We provide a recruitment portal which you can use to do this. Your data (last name, first name, home address, CV, professional history, references, qualification documents, information relating to any disability, letter) will be processed for the purposes of recruitment for the position for which you have applied (Article 6(1)(b) GDPR, section 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG)) or, within the limits of the consent you have granted to us, for other positions (Article 6(1)(a) GDPR). You can withdraw your consent to processing of your application data at any time. No automated preliminary decision making regarding your application is carried out.
4.1.2 Involvement of third-party providers in the application process
To simplify the application process, we provide the following options for entering data supported by third parties:
- CV parsing,
- using your LinkedIn profile,
- using your XING profile, or
- upload from your Dropbox.
You are not required to use these options to apply for a job with us and can fill out the form manually. If you do this no data will be processed by third parties.
CV parsing is a functionality that automatically extracts information relevant for your application from a CV you have uploaded and inserts it into the entry fields in the application form. To use CV parsing, click the “Upload CV / Resume” button and follow the instructions shown. We provide this service using an applicant tool provided by d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg, Germany (“d.vinci”). To provide this tool and the CV parsing function in particular, d.vinci uses a product by Textkernel BV, Nieuwendammerkade 28/a17, 1022 AB, Amsterdam, Netherlands. We have entered into a data processing agreement (Article 28 GDPR) with d.vinci. d.vinci is bound by our instructions and will not use your data for its own purposes. Textkernel BV is a subprocessor of d.vinci and is bound in relation to processing of your data by d.vinci’s instructions, and therefore indirectly by our instructions, under a processing agreement in accordance with Article 28 GDPR.
To send data from your LinkedIn profile, click the “Use LinkedIn Profile” button when completing your application and follow the instructions shown. If you have a LinkedIn profile, LinkedIn will send us the data they hold at your request. LinkedIn collects and processes data itself, and if you use this option may link that data to your existing profile. The basis for transmission of data to LinkedIn is Article 6(1)(f) GDPR. We have a legitimate interest in simplifying our application process by incorporating widely used services to make us more attractive to applicants. LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. You will find information about privacy at LinkedIn at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
To send data from your XING profile, click the “Use XING Profile” button when completing your application and follow the instructions shown. If you have a XING profile, XING will send us any data requested by the application form that you have entered into XING. The application form will then be populated with your data, and you can change or add to it as you wish. XING will also collect and process data itself, and if you use this option it may link that data to your existing account. The basis for transmission of data to XING is Article 6(1)(f) GDPR. We have a legitimate interest in making our application process attractive and easy to use. XING is a widely used career and business network and we include it in order to appeal to as many applicants as possible and to remove obstacles to submitting an application. XING is provided by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. You will find information about how XING SE processes data at https://privacy.xing.com/en.
To send us a CV that you have uploaded to Dropbox, click the “CV via Dropbox” button when completing your application and follow the instructions shown. At your request, Dropbox will then send us the CV you have uploaded. Dropbox collects and processes data itself, and if you use this option may link that data to your Dropbox account. The basis for transmission of data to Dropbox is Article 6(1)(f) GDPR. We have a legitimate interest in simplifying our application process by incorporating widely used services to make us more attractive to applicants. Dropbox is provided by Dropbox International Unlimited Company, One Park Place, Floor 5, Upper Hatch Street, Dublin 2, Ireland. You will find information about privacy at Dropbox at https://www.dropbox.com/privacy.
4.1.3 Note regarding sensitive data
You are expressly advised that job applications, and particularly CVs, references, and other data you provide to us, may contain particularly sensitive data concerning mental and physical health, racial or ethnic origin, political opinions, religion or philosophical beliefs, membership of a trade union or political party, and sex life.
If your online application contains information of this kind, you expressly authorize us to process this data for the purpose of your application. This data will be processed in compliance with this Privacy Policy and other relevant legislation. Depending on your application, we may transmit your data to associated company locations in third countries. The legal basis for this is Article 49(1)(b) or (c) GDPR, as the case may be.
4.1.4 Erasure
Data transmitted to us will be erased 6 months after the end of recruitment for the role your application relates to. We do not create an applicant pool. Your data may be stored for longer than this if erasure is precluded by statutory provisions, if continued storage is required for evidentiary purposes, or if you have given your consent.
4.1.5 Consent to EMAG Group-wide application
By clicking the “Consent to Extended Use” check box, you can consent to use of your application across the EMAG Group. Your personal data can then be shared within the EMAG Group. This comprises the following companies:
- EMAG Maschinenfabrik GmbH, Austr. 24, 73084 Salach, Germany
- EMAG Salach GmbH, Austr. 24, 73084 Salach, Germany
- EMAG KOEPFER GmbH, Siederstr. 49, 78054 Villingen-Schwenningen, Germany
- EMAG LaserTec GmbH, Am Flugplatz 1, 73540 Heubach, Germany
- EMAG ECM GmbH, Am Flugplatz 1, 73540 Heubach, Germany
- EMAG Zerbst Maschinenfabrik GmbH, Norbert-Heßbrüggen-Str. 11, 39261 Zerbst, Germany
- CNC-Technik Weiss GmbH, Neckarstraße 10, 72666 Neckartailfingen, Germany
- EMAG Milano, Via die Mille 31, 20098 San Giuliano Milanese, Italy
- EMAG Salach GmbH - Sucursal en España, Pasaje Arrahona, n° 18, Polígono Industrial Santiga, 08210 Barberà del Vallès (Barcelona), Spain
- EMAG Salach GmbH - Succursale en France, 5 Avenue de L'Europe, 18150 La Guerche sur L'Aubois, France
- EMAG SU S.r.l., Via die Mille 31, 20098 San Giuliano Milanese, Italy
- EMAG LLC, 38800 Grand River Avenue, Farmington Hills, MI 48335, USA
- EMAG (China) Machinery Co., Ltd., Sino-German Advanced Manufacturing Technology International Innovation Park, Building No.2, No. 101, Chenmeng Jing Road, 215400 Taicang, Jiangsu, China
- EMAG (China) Machinery Co., Ltd, No. 2888, Nan Er Huan East Road, Economic Development Zone, 213200 Jintan, Changzhou City, Jiangsu Province, China
- EMAG (Chongqing) Machinery Co., No. 10th Lailong Road, Yongchuan District, 402160 Chongqing, China
- EMAG OOO, ul. Akademika Chelomeya, 3/2, 117630 Moscow, Russia
- EMAG India Pvt. Ltd., No. 17/G/46-3, Industrial Suburb, 2nd Stage, Yeshwantpur, 560022 Bangalore, India
- EMAG Korea Ltd., Rm204, Biz center, SKn Technopark, 190-1, Sangdeawon-dong, 13207 Seongnam City, Gyeonggi-do, South Korea
- EMAG do Brasil Ltda., Edificio Neo Corporate Offices, CJ 1503, Rua Enxovia, 472, 04711-030 São Paulo, Brazil
- EMAG - Mexico, Av. Hercules 301 Nave 1, Poligono Empresarial Santa Rosa, 76220 Santa Rosa Jauregui, Querétaro, Mexico
Your application can then appear in searches by other EMAG companies for suitable applicants for other vacancies in the future. Point 5 applies in the case of companies from countries outside the European Union. If a vacancy within the EMAG Group matches your profile, the relevant manager will receive access to your data. By giving your consent, you expressly agree that EMAG Group employees may contact you in connection with a recruitment search. We will store your data until the recruitment process is complete, but for no longer than one year. You may withdraw your consent with future effect at any time by sending an email to datenschutz@emag.com.
4.2 Newsletter
You can subscribe to our newsletter, which we use to provide information about current offers that may be of interest to you. These include new products in the metal manufacturing systems field, news about this industry, and information about events.
We use the “double opt-in” process for subscriptions to our newsletter. This means that after you have subscribed, we will send an email to the email address provided by you asking you to confirm that you want to receive the newsletter. If you do not confirm your subscription within 24 hours, your information will be blocked and then automatically erased after one month. We also store the IP addresses you use to subscribe and confirm and the time of subscription and confirmation. The purpose of this process is to prove that you have subscribed to the newsletter and to provide clarification in case of misuse of your personal data.
The only information you must provide to receive our newsletter is your email address. Other data identified separately is provided on a voluntary basis only and will be used to address you personally. After you have confirmed, we will store the data you provide in order to send you the newsletter (the legal basis for this is Article 6(1)(a) GDPR).
You can withdraw your consent to receive the newsletter in future and unsubscribe at any time. You can withdraw your consent by clicking on the link appearing in every newsletter email, or directly on our website at https://www.emag.com/de/unternehmen/messen-und-veranstaltungen/newsletter-abmeldung.html.
4.3. GoToWebinar
If you register and attend/hold online events using the tool GoToWebinar, your data is also transmitted to LogMeIn Ireland Limited, Bloodstone Building Block C, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland by the “GotoWebinar” service. You can find GoToWebinar’s privacy policy at https://www.logmeininc.com/legal/privacy. We have entered into a data processing agreement with LogMeIn. This agreement also includes the EU standard contractual clauses and LogMeIn’s technical and organizational data security measures. Any transmission of personal data outside of the European Economic Area in connection with LogMeIn is always in compliance with the GDPR. By participating in the GoToWebinar, the data will be broken down to individual people within the tool’s analysis function after the webinar. This means that information about participants can be tracked at personal level and in particular their level of attention, e.g., in terms of screen use. This data is not processed by EMAG, i.e., it neither stores nor evaluates it.
5. Data security
All information that you send to us will be stored on servers within the European Union. Unfortunately, transmission of data over the Internet is not completely secure, and we are therefore unable to guarantee the security of data transmitted to our website via the Internet. However, we have put in place technical and organizational measures to protect our website and other systems against loss and destruction of your data and to prevent your data from being accessed, modified, or distributed by unauthorized persons. In particular, we encrypt your personal data for transmission. We do this using the SSL (Secure Socket Layer) and TLS (Transport Layer Security) encryption systems.
Data is transmitted to countries outside the European Union (“third countries”) only if the recipient has provided appropriate guarantees ensuring an adequate level of data protection (Article 46 GDPR). You can request a copy of these guarantees from datenschutz@emag.com.
6. No disclosure of your personal data
We will not transmit your personal data to third parties unless you have given us your consent (see Article 6(1)(a) GDPR) or we are authorized or required to do so by law and/or by order of the authorities or the courts. In particular, we may be required to provide information for the purposes of criminal proceedings, hazard prevention, or enforcement of intellectual property rights.
7. How long we store your data
Your data will be stored for no longer than is necessary for the purpose of the existing customer relationship, unless you have consented to further processing or we have a legitimate interest in further processing. In these cases, we will process your data until you withdraw your consent or you object to processing on the basis of our legitimate interests. Notwithstanding this, we are required under commercial and tax law to retain your address and your payment and order data for a period of ten years.
8. Privacy and third party websites
The website may contain hyperlinks to and from websites operated by third parties. If you follow a hyperlink to one of these websites, please note that we can accept no liability for and give no guarantees in respect of external content or privacy policies. Please ensure that you are aware of the applicable privacy policy before sending personal data to such websites.
9. Changes to this Privacy Policy
We reserve the right to change this Privacy Policy with future effect at any time. The latest version is available from the website. Please visit the website regularly to view the current Privacy Policy.
10. Your rights and contact information
You have the following rights in relation to us: the right of access, rights to rectification, data portability, erasure and restriction of processing, and the right to object to processing. You are welcome to contact our customer service team at any time at communications@emag.com or at the address specified in point 1. If you have any questions, comments, or complaints, you can also contact our data protection officer at any time by email at datenschutz@emag.com.
You also have the right to lodge a complaint regarding the processing carried out by us with a data protection supervisory authority. The supervisory authority with responsibility for us is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, 70025 Stuttgart, Germany, tel. +49 711 6155 410, poststelle@lfdi.bwl.de.
©EMAG GmbH & Co. KG, 2023
