Privacy policy of the website www.camao-tec.com
The basis of effective data protection is comprehensive information about the collection, processing and use of your data (“data processing”). Therefore, we would like to inform you,
- When or during which actions we process data
- What data we process and for what reasons
- Who receives data
- What rights you have because of the data processing by us.
This privacy policy only governs the use of personal data, on our website www.camao-tec.com including sub-pages. If you leave our website via a link or visit our presence on a social media platform, you also leave the scope of this privacy policy. The transmission of information to or from this website is secured with TLS encryption. You can access, print or download this privacy policy permanently and at any time at the address https://camao-tec.com/de/datenschutzerklaerung/.
I. Contact information
The person responsible for data processing within the framework of this website within the meaning of the General Data Protection Regulation (DSGVO) is:
CAMAO IDC GmbH
Grossgartacher Str. 61
74080 Heilbronn
Phone: +49 7131 7999-0
E-mail: hello@camao-tec.com
We have also appointed a data protection officer. You can reach him at: datenschutz@camao.one
Confidential contact is also possible by post at:
HK2 Comtection GmbH
Mr. Lukas Wagner LL.M.
Hausvogteiplatz 11 A
10117 Berlin
II. General information on data processing
- Scope of the processing of personal data
The provision of the website requires the processing of various information. In addition, the extend of data processing depends on your use of the functionalities of the website, for example, if you communicate with us via the contact form or consent to the processing of data.
You are not obliged to provide us with personal data. However, insofar as the provision of this data is technically mandatory for accessing our site, a refusal will result in you not being able to enter and use our website.
As a visitor to our websites, you are not subject to automated decision-making within the meaning of Art. 22 GDPR.
- Legal basis for the processing of personal data
The legal bases for the processing of personal data are presented below
| Processing reason | Legal basis in the GDPR | Explanation |
| Fulfilment of contract or implementation of pre-contractual measures | Art. 6 (1) b) | Processing is only carried out to the extent necessary for the exercise and fulfilment of the rights and obligations arising from the contract. Unless expressly stated otherwise, data processing by us will only take place to this extent. |
| Legitimate interest | Art. 6 (1) f) | Processing takes place insofar as we have a legitimate interest and no conflicting overriding interests of the data subject are apparent. The specific interest is explained in this data protection declaration as part of the processing description. |
| Consent | Art. 6 (1) a) | Processing takes place if you have expressly consented to the type and scope of data processing. You can revoke your consent at any time with effect for the future. However, the processing that has taken place up to this point will not be affected by this. |
| Legal Duty | Art. 6 (1) c) | Processing takes place insofar as this is necessary for the fulfilment of German or European legal obligations. |
- Data deletion and storage period
We delete your personal data as soon as the legal basis for their processing ceases to apply. In some cases, however, legal bases can also exist in parallel or a new legal can take effect when a legal basis ceases to exist, such as the obligation to store certain data in order to comply with a statutory retention obligation.
III. Data processing for provision of the website
In order for us to be able to show you the website, it is necessary to process certain information. This already takes place when you call up our website. In addition, we offer various functionalities on our website that make further data processing necessary.
- Log Files
When you call up your website, your browser sends various information, so-called server log files, to our server. We need this to establish and maintain the connection. Among the data is also your IP address, which we treat as personal data. The IP address is stored hashed (e.g. 0.0.0.0) in the database. In addition, the following data is collected:
- Data and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- Device type
- Screen resolution
- Country
- Browser language
- Language code
This data is not merged with other data about you. The storage of log files including your IP address serves the legitimate interest of providing our website, analyzing its use and preventing its misuse. Stored log files are deleted after 30 days at the latest, unless longer storage is necessary, for example, to ward off or clarify an attack on our website.
Contact Form
You can send us an enquiry at any time using the contact form on our website. The following information is requested: title, first name, surname, e-mail address and your message. These details are marked as mandatory fields. All other data that you provide to us as part of the enquiry, including via the free text field, is provided voluntarily.
We use this data exclusively for responding to your enquiry and the related communication. The legal basis for this processing of your data depends on the content of your enquiry. [WL-c1] Basically, our legitimate interest in providing the contact functionality and answering your enquiry transmitted via this applies here. If your enquiry is directed towards the conclusion of a contract with us, the processing is carried out in the context of this pre-contractual obligation.
Your data will be deleted as soon as your request has been processed. In the event of a contract being concluded, we may process the data for the purpose of fulfilling the contract.
Application Procedure
You have the opportunity to apply for vacancies with us via https://camao-tec.com/de/jobs/. In the course of your application, we will collect and process all personal application data that you provide to us as part of your application. In detail, this usually includes your surname, first name, address, telephone number, e-mail address and application documents (letter of application, CV, references, certificates, etc.). Additional information may be required depending on the position applied for. You are also free to provide further personal data on a voluntary basis. Your personal application data is collected and processed solely for the purpose of filling vacancies within CAMAO IDC GmbH. Your data will only be forwarded to the internal departments and specialist departments responsible for the specific application procedure. The legal basis for processing your application documents is the necessity for the establishment of the employment relationship in accordance with Section 26 (1) BDSG. Your personal application data will generally be deleted six months after completion of the application process. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly consented to longer storage.
If we are unable to offer you a vacant position, you have the option to agreeing to your application data being stored for a maximum of two years so that it can be considered for a future job advertisement if the profile fits.
IV. Cookies
We use cookies on our website for various purposes. A cookie is a small text file containing information that is transmitted by your browser and stored on your computer. These cookies do not contain any personal data. You can also control the use of cookies in your browser and delete cookies yourself at any time. If the cookies listed below have their own option for deleting or blocking them, this is shown in the respective description. Cookies may be necessary to establish a connection or to improve the use of the website.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
The use of technically necessary cookies and the associated data processing is based on our legitimate interest in providing our website. Technically necessary cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). The storage period of persistent cookies is determined by the provider and can be viewed by you in your browser, for example.
Borlabs Cookies
To manage your cookie preferences and obtain consent for the use of cookies, we use the Borlabs Cookies tool. This also stores your consent status in your browser in the cookie “borlabs-cookie” so that the website can automatically read and follow your consent in all subsequent page requests and future end-user sessions for up to 6 months.
- Technical cookies
Technical cookies are used to enable additional functionalities or a more comfortable use of the website, e.g. by saving your country or language settings. Technical cookies are usually deleted automatically when you close your browser (session cookies), but in other cases they are only deleted after a longer period of time (persistent cookies). The storage period can be viewed in your browser. The legal basis for data processing is your consent in accordance with § 25 (1) TTDSG in conjunction with Art. 6 (1) a) GDPR.
1.1. Google Tag Manager
This website uses Google Tag Manager, a tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), to integrate analytics and other tools into the website. The Google Tool Manager triggers other tools, which in turn may collect data. However, the Google Tag Manager does not access this data. You can find more information about Google’s privacy policy at the following link: http://www.google.de/policies/privacy/
1.2. YouTube
If you give us your consent, you will be shown content from YouTube. YouTube is a service of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. The content is all integrated in “extended data protection mode”, i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. By activating and playing the videos, YouTube receives your IP address and the information that you have accessed the corresponding sub-page of our website. If you are logged in to Google, your data will be directly assigned to your account.
For further information on the purpose and scope of data collection and processing by YouTube, please refer to the Google data protection statement: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA. We have concluded the standard contractual clauses with Google for this purpose.
2. Usage analysis
Analysis and tracking cookies are used to record and evaluate your usage behaviour when using our services or visiting our website. In doing so, we learn, for example, how often certain functionalities are used or content is read or whether you came to us via an advertisement placed by us. We use this data to further improve the usability of this website and the attractiveness of the services.
The legal basis for data processing is your consent to the use of cookies in accordance with § 25 (1) TTDSG in conjunction with Art. 6 (1) a) GDPR. You can prevent the storage of cookies. In addition to the option of preventing them in the settings of your browser software, the individual cookies usually offer their own option to block or deactivate them. This is then shown below in each case.
Data processing for usage analysis takes place during your visit to our website and only until the time of your effective objection.
2.1. Google (Universal) Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google collects information about your use of this website (including your IP address) in the USA via a cookie and stores the information. However, we only use Google Analytics with an anonymisation function, whereby the IP address is shortened before transmission by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to Google in the USA and only shortened there. We have concluded the standard contractual clauses with Google for this purpose. Google analyses the information collected and sends us reports on the usage activities on our website. and provides further services to us for this purpose. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
In addition to blocking all cookies through your browser, you can prevent Google from processing your data by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future. For more information on Google Analytics, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=d.
3. Marketing Cookies
Marketing cookies are used to increase the success and accuracy of our advertising. For this purpose, we collect information on whether our advertising works, which users come to our website via an advertising medium we have placed, etc.
The legal basis for data processing is your consent pursuant to Section 25 (1) TTDSG in conjunction with Article 6 (1) a) GDPR. You can prevent the storage of cookies. In addition to the option to prevent them in the settings of your browser software, the individual cookies usually offer their own option to block or deactivate them.
3.1. LeadRebel
We analyse our visitor data with the help of an external service provider. For this purpose, we share the data obtained from the use of IP research with Pulserio AG, Wassergrabe 3, 6210 Sursee, Switzerland, https://leadrebel.io/imprint. Categories of data subjects are website visitors and users of our web services.
The purpose of the processing is the evaluation of the data obtained from IP research for lead generation. On this page: https://leadrebel.io/optout you have an opt-out option. In the event of an opt-out, your data will no longer be collected by LeadRebel.
3.2. LinkedIn Marketing Solutions
We use the LinkedIn Marketing Solutions service, which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”).
When visiting our website, an ID, in the form of a cookie, is stored on the user’s device. This ID enables us to recognise you when you use the site and to collect certain usage data. If you subsequently visit LinkedIn, you will be shown advertisements based on the data collected. The data stored and processed in the USA does not make it possible to identify you as a person.
If you do not want to participate in tracking, you can deactivate the storage of LinkedIn cookies in the settings of your browser or via https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
You can obtain further information about LinkedIn’s privacy policy at the following internet address: https://www.linkedin.com/legal/privacy-policy?_l=de_DE.
V. Social media presences
We operate our own presences in the social networks Facebook, Instagram, LinkedIn, Twitter, Youtube (Google Ireland Limited) and Xing. These networks process your personal data, for example, to create usage profiles corresponding to your interests. Cookies may be stored on your device for this purpose. You can find more detailed information on data processing by the individual networks in the respective data protection information and, if applicable, in the cookie guidelines of the networks:
https://www.facebook.com/about/privacy/
https://help.instagram.com/519522125107875
https://de.linkedin.com/legal.privacy-policy
https://twitter.com/de/privacy
https://policies.google.com/privacy?hl=de&gl=de
https://privacy.xing.com/de
This data protection information also contains information on the type and scope of data processing by the respective networks as well as on the possibilities to assert your data subject rights (right to information, confirmation, correction, deletion, restriction, data portability and complaint to the competent data protection supervisory authority).
We do not know what user data the social networks collect. We do not get full access to the collected user data or user profiles. We can only access public profile information. What information you make public can be adjusted via your account settings.
Where available, we use user data from the chat functions to answer your questions. The collected customer data is used to contact the user to provide the requested information and offers.
We may receive anonymous statistics from the social networks based on the legitimate interest in the use of our site, such as
- Followers: Number of people who follow us – including growth and development over a defined period of time.
- Reach: Number of people who see a particular post. Number of interactions on a post. For example, you can deduce which content is better than others in the community.
- Advertising performance: How many people have seen and interacted with an ad or article?
- Demographics: average age of visitors, gender, place of residence, language, industry.
These statistics are used to constantly improve our online content and to better respond to the interests of our users. We cannot link the statistical data to the profiles of our fans or individual users. You can use your account settings on the social networks to decide in which form you want to display targeted advertising.
Special notes on Facebook, Instagram and LinkedIn
We are jointly controllers with Facebook and LinkedIn for the operation of the Facebook fan page and our Instagram page as well as for the operation of our LinkedIn company page respectively under data protection law.
For Facebook and Instagram, the controller in Europe is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The joint responsibility is regulated in the Facebook Page Insights Supplement regarding the Facebook responsible party: https://www.facebook.com/legal/terms/page_controller_addendum
For more information on the processing of Page Insights data, please visit https://www.facebook.com/legal/terms/information_about_page_insights_data.
Data processing outside Europe by Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA is possible under certain circumstances.
For LinkedIn, the controller in Europe is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The joint responsibility is regulated in the LinkedIn Page Insights Joint Controller Addendum:
https://legal.linkedin.com/pages-joint-controller-addendum
Data processing outside of Europe by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA is possible under certain circumstances.
The legal basis for the processing of your personal data on our fan page are the legitimate interests of us and Meta or LinkedIn pursuant to Art. 6 (1) f) GDPR in advertising, recommendations and measurements as well as in offering interested parties an information and communication channel. You can object to data processing at any time. To do so, please contact Meta or LinkedIn. You can find information on this in the data protection provisions of Meta (www.facebook.com/about/privacy/) and LinkedIn (https://de.linkedin.com/legal/privacy-policy). In your browser settings, you can also prevent the storage of cookies or delete existing cookies at any time.
Possibility of objection and removal
Insofar as the data processing is based on your consent or our legitimate interest, you have the right to object to the processing at any time or to revoke the consent you have given. Your objection or revocation only has effect for the future. If the analysis cookies used offer their own technical options for deactivation, this is shown there in each case. You can exercise your right of objection or revocation at any time by contacting datenschutz@camao-tec-com or change the cookie settings via the link in the footer.
If you object to processing on the basis of our legitimate interest, we may nevertheless continue processing if we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms.
VII. Data subjects’ rights
If personal data relating to you is processed, you are a data subject within the meaning of Article 4 (1) of the GDPR. As a data subject, you are entitled to the following rights with regard to your personal data. To exercise these rights, you can contact us using the contact details provided above.
Right to information according to Art. 15 GDPR
You have a right of access to your personal data processed by us. This includes the mandatory information set out in Art. 15 GDPR.
Right of rectification according to Art. 16 GDPR
You have the right to obtain the rectification of inaccurate personal data and the completion of inaccurate personal data without delay.
Right to deletion according to Art. 17 GDPR
You have the right to request the erasure of your personal data if one of the reasons listed in Art. 17 of the GDPR applies, in particular if there is no longer a legal basis for the processing.
Right to restriction of processing according to Art. 18 GDP
You have the right to request the restriction of the processing of your personal data if one of the reasons listed in Art. 18 of the GDPR applies, in particular at your request instead of deletion of the data.
Right to data portability according to Art. 20 GDP
In accordance with the provisions of Article 20 of the GDPR, you have the right to request the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller without hindrance from the controller to whom the personal data was provided.
Right to complain to the competent supervisory authority, Art. 77 GDPR
You have the right to lodge a complaint with the supervisory authority responsible for you in accordance with Art. 77 GDPR.
VIII. Recipients of data
The processing of your personal data within the framework of the website is also partly carried out by order processors, in particular the use of analysis tools. These are involved exclusively on the basis of a commissioning agreement in accordance with Art. 28 (3) GDPR.
Status: October 2022