Privacy policy

I. Responsibilities

We are responsible for your data. As a visitor of our website you expect not only from the offers and services of our company, but also in the processing of your personal data a high degree of quality and competence. It is important to us that you can always find out from the following information which personal data are collected during your visit to our website and when using our services and how we process them afterwards.

Personal information is data that identifies you. Your personal data will only be processed by us if a legal regulation allows it or if you have previously consented to it.

We are responsible for the handling of your personal data, which we process in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the other applicable European and German data protection laws and according to your specifications and wishes.

Name and address of the responsible person

Sunfire GmbH
Gasanstaltstraße 2
01237 Dresden
Tel .: +49 351 896797-0
E-Mail: info@sunfire.de
Website: www.sunfire.de

 

II. Name and Address of Data Protection Officer

If you have a question about data protection or data security, you can contact our internal data protection officer, Dr. Niels Hilgenstock:

by e-mail: datenschutzbeauftragter@sunfire.de or
in written form: Sunfire GmbH, Data Protection Officer Dr. Niels Hilgenstock:, Gasanstaltstraße 2, 01237 Dresden.

 


III. General

1. Data Protection
We take technical and organizational precautions to protect your personal data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons and to ensure the protection of your rights and compliance with the applicable data protection regulations of the EU and the Federal Republic of Germany. The measures taken are designed to ensure the confidentiality and integrity of your data and to ensure the availability and resilience of the systems and services in the processing of your data in the long term. They should also quickly restore data availability and access to them in the event of a physical or technical incident. Our security measures include encryption of your data. All information that you enter online will be technically encrypted and then transmitted. As a result, this information can never be viewed by unauthorized third parties. Our data processing and security measures are constantly being improved in line with technological developments. Our employees are obliged in writing to maintain confidentiality and to comply with the requirements of the GDPR.

2. Scope of Processing of Personal Data
In principle, we process personal data of our users only insofar as this is necessary to provide a functioning website and our content and services. The processing of personal data of our users takes place with the consent of the user. This is different if a prior consent can’t be obtained for real reasons and the processing of the data is permitted by law.

3. Legal Basis for the Processing of Personal Data

a) Insofar as we obtain the consent of the data subject for processing of personal data, art. 6 para. 1 lit. a (GDPR) as legal basis.
b) In the processing of personal data necessary for the performance of a contract to which the data subject is a party, art. 6 para. 1 lit. b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions.
c) If processing of personal data is required to fulfill a legal obligation to which our company is subject, art. 6 para. 1 lit. c GDPR as legal basis.
d) In the event that vital interests of the data subject or another natural person require the processing of personal data, art. 6 para. 1 lit. d GDPR as legal basis.
e) If the processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not prevail over the first interest, art. 6 para. 1 lit. f GDPR as legal basis for processing.

4. Data Deletion and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. It may also be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract. The specified retention periods may be extended accordingly, if in individual cases, especially if the data is processed for different purposes, there is a longer statutory or contractual retention period.

5. What are Mandatory Information or Mandatory Fields?
If the survey identifies certain data fields as mandatory and / or marked with an asterisk (*), the provision of such information is either required by law or by contract, or we may require such information for the purpose of the contract, service or purpose. The specification of the data is of course also in the mandatory fields at your discretion. Failure to do so may result in a contract not being fulfilled by us or the desired service not being provided or the stated purpose not being achievable.

 

IV. Individual Areas, Services and Functionalities of the Website

Contact Form and E-Mail Contact

a) Description and Scope of Data Processing
If you have questions or requests, we are at your disposal. To facilitate the communication between you and us, a contact form is available on our website, which can be used for electronic contact. If a user utilizes this option, the data entered in the input mask will be transmitted to us and saved.

This information includes:
• Surname
• E-mail address
• Telephone Number
• Message

The communication of address and telecommunication data marked as mandatory in our contact / message forms is required to process and answer your request. The voluntary specification of further data facilitates the processing of your request.

At the time of sending the message, the following data is also stored:
• IP address of the user
• Date and time of access
• URL of the visited page
• URL from which the user comes (so-called referer)
• Information about the browser type and the version used (from the user agent)
• Operating system of the user (from the user agent)
• Three bytes of the IP address of the user's calling system
• Date and time of the form dispatch

For the processing of the data, your consent is obtained during the sending process and reference is made to this privacy policy. Alternatively, contact via the provided e-mail addresses is possible. In this case, the user's personal data transmitted by e-mail will be stored. In this context, there is no disclosure of data to unauthorized third parties. The data is used exclusively for processing the conversation. We usually save the details of your request after answering the request for three months in the case of further inquiries, if they are not trade or business letters, these are stored for at least six or ten years.

b) Legal Basis for Data Processing

Legal basis for the processing of the data is in the presence of the consent of the user art. 6 para. 1 lit. a GDPR. The legal basis for the processing of the data transmitted in the course of sending an e-mail is article 6 (1) lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is art. 6 para. 1 lit. b GDPR.

c) Purpose of Data Processing

The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

d) Duration of Storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified. The additional personal data collected during the sending process will be deleted at the latest after a period of fourteen days.

e) Objection and Removal Option

The user has the possibility at any time to revoke his consent to the processing of the personal data. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can’t continue. For details of revocation and objection see section VII.

V. Provision of the Website and Creation of Log Files

a) Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected here:
• IP address of the user
• Date and time of access
• URL of the called page
• URL from which the user comes (so-called referer)
• Information about the browser type and version used (from the user agent)
• Operating system of the user (from the user agent)

The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.

b) Legal basis for Data Processing

The legal basis for the temporary storage of data and logfiles is art. 6 para. 1 lit. f GDPR.

c) Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session. Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. For these purposes, our legitimate interest in the processing of data pursuant to art. 6 para. 1 lit. f GDPR.

d) Duration of Storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed. In the case of storing the data in log files, this is the case after fourteen days at the latest. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

e) Objection and Removal Option

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.

 

VI. Use of Cookies

a) Description and Scope of Data Processing

We use cookies to make our website more user-friendly. Some elements of our website still require a page break.

The following data is stored and transmitted in the cookies:
• Session ID (to recognize the website visitor through paging until the browser is closed)
• Status of the info banner about the use of cookies

The data of the users collected in this way are pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data will not be stored together with other personal data of the users. When accessing our website, users are informed by an information banner about the use of cookies for analysis purposes and referred to this privacy policy. In this context, there is also an indication of how the storage of cookies in the browser settings can be prevented.

b) Legal Basis of Data Processing

The legal basis for the processing of personal data using cookies is article 6 (1) lit. f GDPR.

c) Purpose of Data Processing

The purpose of using technically necessary cookies is to facilitate the use of websites for users. Some features of our website can’t be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break.

We require cookies for the following applications:
• Use of forms (eg contact form and application form)
• To check whether the info banner about the use of cookies should be displayed again or for the first time

The user data collected through technically necessary cookies will not be used to create user profiles. For these purposes, our legitimate interest in the processing of personal data pursuant to art. 6 para. 1 lit. f GDPR.

d) Duration of Data Storage, Objection and Removal Option

Cookies are stored on the computer of the user and transmitted by this on our side. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.

The general refusal of cookies can be explained by the settings of your web browser. You can set your web browser to notify you when cookies are set or to refuse or restrict the setting of cookies in general. If you deactivate or restrict cookies using your web browser, then various functions on our website will no longer be usable for you. You can also delete stored cookies using your web browser at any time, including automated ones.

Use the links below to find out about these options for the most popular browsers:
• Explorer:
https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Firefox:
http://support.mozilla.org/de/kb/cookies-informationen-websites-auf-ihrem-computer
• Google Chrome:
http://support.google.com/chrome/bin/answer.py?hl=de&answer=95647
• Safari:
https://support.apple.com/kb/PH21411?locale=de_DE
• Opera:
http://help.opera.com/Linux/12.10/de/cookies.html.

If you have not made or make any other settings, cookies will remain on your device until the browser closes on your device, enabling the required technical features and ensuring that cookies remain on your device.

 

VII. Google Analytics (Web Tracking)

a) Description and Scope of Data Processing

This website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses cookies that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

However, by activating IP anonymization on our website, your IP address will be truncated and anonymized beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, personal data will be deleted immediately. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. Google has submitted to the EU Privacy Shield (certificate available at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

The EU Privacy Shield can be used as the basis for a decision by the EU Commission to transfer personal data from Europe to those US companies that have been certified under the Privacy Shield. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage.

b) Legal Basis and Purpose of Data Processing

The use of Google Analytics takes place with legitimate interest according to art. 6 paragraph 1 f GDPR. The purpose of the processing of personal data is the production of statistics on the origin of visitors, their length of stay on individual pages and the use of search engines. The compilation of these statistics is intended to improve the monitoring of the website's success and to ensure that the advertising and advertising campaigns are targeted in the right way, which is essential for the refinancing of the website. For the marketing of this website, a statistical analysis, which ensures comparability with other market participants, is essential. Our legitimate interest stems from the economic usability of the evidence from the statistics and the market value of our website, also in direct comparison with third party websites, as determined by statistics.

c) Duration of Data Storage

The collected data will be stored permanently.

d) Objection and Removal Option

You can prevent the collection of data generated by the cookie and your use of the website (including your shortened IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can also prevent the collection of your data by Google Analytics by clicking on the following link. In this case, an opt-out cookie will be set that prevents the collection of your data on future visits to this website: disable Google Analytics.

 

VIII. Plug-Ins/Widgets of Third Parties (Social Media)

1. Embedded YouTube Videos

YouTube videos are included on our site and are stored on YouTube (responsible for Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA), but are directly playable on our website. To protect your privacy, you must first activate the videos on our pages. When you activate or play the videos, cookies from YouTube or DoubleClick can be stored and / or read on your device and data transmitted to YouTube or DoubleClick (USA, Google), such as Yahoo! Your IP address and cookie ID, the specific address of the page accessed by us, system date and time of the call, identifier of your browser.

For purposes and scope of data collection and processing by YouTube or DoubleClick, please refer to the information on Google: https://www.google.com/intl/en/policies/privacy/. If you do not want YouTube or DoubleClick to receive data about you through the use of our website, you must not activate the videos. The data transfer takes place after activation of the video, regardless of whether you have a user account on YouTube or Google that you are logged in to, or if you have no user account. If you are logged in, this data can be immediately assigned to your account. If you want to avoid this, you must log out of the visit before activating the video.

2. Links to other Websites

This Privacy Policy applies only to Sunfire Online Offers and not to third-party websites and applications. Sunfire Online Quotes may contain links to third-party websites and applications that may be of interest to you. Sunfire is not responsible for the collection, processing, or use of your data as part of non-Sunfire websites or applications and their content.

3. Sending Newsletters via Newsletter2Go

If you would like to receive the newsletter offered on the website, we need an e-mail address from you, as well as information that allows us to verify that you agree with the owner of the e-mail address provided and with the receipt of the newsletter.

To ensure that the newsletter is sent to us, we use the double-opt-in procedure. In the course of this, the potential recipient can be included in a distribution list. Afterwards, the user receives a confirmation e-mail to confirm the application legally. Only when the confirmation is made, the address is actively included in the distributor.

We use this data exclusively for the delivery of the requested information and offers.

As Newsletter Software Newsletter2Go is used. Your data will be transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling and using your data for purposes other than sending newsletters. Newsletter2Go is a German, certified provider, which was selected according to the requirements of the General Data Protection Regulation and the Federal Data Protection Act.

Further information can be found here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/

The granted consent to the storage of the data, the e-mail address and their use for sending the newsletter can be revoked at any time, for example via the "unsubscribe" link in the newsletter.

IX. Information on the Processing of your Personal Data (Customer / Prospective Customer)

a) Description and Scope of Data Processing

The categories of personal data processed include first name, surname, name affixes, position, department, business address, (mobile) telephone number, business website and e-mail address. Your personal data are usually collected directly from you in the context of the contract.

Within our company, your personal data is received only by the persons and entities who need the data in order to fulfill the contractual and legal obligations or those who are entrusted with the corresponding fulfillment of the assigned tasks.

In addition, in order to fulfill our contractual and legal obligations and the assigned tasks we utilize different service providers to some extent.
These can be for example:
• Website-Hosts
• Newsletter service
• Software for order processing
• E-mail Service

Are you required to provide your data?
As part of the contract, you must provide the personal data necessary for the establishment and implementation of the contractual relationship and the fulfillment of the associated contractual obligations or to the collection we are required by law. Without this data, we will not be able to execute the contract with you.

b) Legal Basis and Purpose of Data Processing

First and foremost, data processing serves to initiate a contract or to execute contracts. The primary legal basis for this is art. 6 (1) lit. b GDPR. In addition, our legitimate interests under art. 6 para. 1 lit. f GDPR and, if applicable, your separate consents acc. arts. 6 paragraph 1 lit a, 7 GDPR be used as a data protection regulation. This includes in particular marketing measures. If we wish to process your personal data for a purpose not mentioned above, we will inform you in advance.

c) Duration of Data Storage

We will delete your personal information as soon as it is no longer necessary for the above purposes. After termination of the contract your personal data will be stored as long as we are legally obliged to do so. This is regularly the result of legal proof and retention obligations, which are regulated inter alia in the Commercial Code and the Tax Code. The storage periods are thereafter up to ten years. In addition, personal data may be retained for the period in which claims can be asserted against us (statutory limitation period of three or thirty years).

d) Right to Ojection

You have the right to object to the processing of your personal data for direct marketing purposes without giving reasons. If we process your data in order to safeguard legitimate interests, you can object to this processing for reasons that arise from your particular situation. We will then no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

 

X. Information about the Processing of your Personal Data (Applicant)

a) Description and Scope of Data Processing

We process the information you have provided to us in connection with your application in order to verify your suitability for the position (or possibly other open positions in our companies) and to complete the application process (eg. first name, surname, name affixes, nationality, contact details such as private address, (mobile) telephone number, e-mail address). This may include special categories of personal data such as health data. As a rule, your personal data is collected directly from you during the hiring process. In addition, we may have received data from third parties (eg. job placement).

Are you required to provide your data?
As part of your application, you may be required to provide the personal information necessary to establish the employment relationship and fulfill the related contractual obligations or that we are required to collect by law. Without this data, we will not be able to conclude the employment contract with you.

Who gets your data?
Your application data will be viewed by the Human Resources department upon receipt of your application. Suitable applications are then forwarded internally to the department heads for the respective open position. Subsequently, the further course of your application is adjusted accordingly. In principle, only those persons in the company who need this for the proper execution of our application process have access to your data.

In addition, we utilize different service providers. In particular, this includes software providers who may also be aware of your personal data in connection with the maintenance and care of the systems. We have entered into a processing agreement with this provider, which ensures that the data processing takes place in a permissible manner.

In addition, we may transfer your personal information to other recipients outside the Company to the extent necessary to fulfill its contractual and legal obligations. These include: Authorities (eg pension insurance institutions, professional pension funds, social security funds, tax authorities, courts), DvkD GmbH

b) Purpose and Legal Basis of Data Processing

First and foremost, data processing serves to justify the employment relationship. The primary legal basis for this is article 6 (1) (b) GDPR, linked to section 26 (1) Federal Data Protection Act. In addition, your separate consent according to art. 6 para. 1 a), 7 GDPR can be used as a data protection regulation.

Insofar as necessary, we also process your data on the basis of art. 6 para. 1 f) of the GDPR in order to protect legitimate interests of us or of third parties (eg authorities). A legitimate interest on our part consists in particular in the assertion or defense against claims.

If special categories of personal data (acc. art. 9 para. 1 GDPR) are processed in the application, then this information is only processed in order to exercise rights or to fulfil legal obligations arising from employment law, social security law and social protection (eg recording of severe disability due to additional leave and determination of the handicap tax). This is done on the basis of art. 9 para. 2 b) GDPR linked to section 26 (3) Federal Data Protection Act. In addition, the processing of health data for the assessment of your ability to work (acc. art. 9 (2) (h) linked to § 22 para. 1 b) Federal Data Protection Act) can be required.

In addition, the processing of special categories of personal data may be subject to consent pursuant to art. 9 para. 2 a) GDPR linked to section 26 (2) Federal Data Protection Act. If we wish to process your personal data for a purpose not mentioned above, we will inform you in advance.

c) Duration of Data Storage

We will delete your personal information as soon as it is no longer necessary for the above purposes. In case of cancellation, your personal data will be kept for the period in which claims can be asserted against us (maximum 6 months). In the event that you have consented to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after two years, if no renewed communication with you has taken place. If you have been awarded the contract as part of the application process, the data from the applicant data system will be transferred to our personnel information system.

d) Objection and Removal Option

You have the right to object to the processing of your personal data without giving reasons. If we process your data in order to safeguard legitimate interests, you can object to this processing for reasons that arise from your particular situation. We will then no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

 

XI. Your Rights as Aggrieved Party

1. Information Desk

If you have any questions about the processing of your personal data by us, we will be pleased to provide you with information about the data concerning you.

2. Right to Rectification, Erasure, Right to Restriction of Processing and Right to Data Portability

In addition, you have the right to rectification, deletion, limitation of processing and objection to the processing in the presence of legal requirements. If you have the legal prerequisites, you have the right to receive the personal data that you have provided to the person responsible in a structured, standard and machine-readable format.

3. Your Contact Person

In all these cases, please contact our data protection officer (see section II above) at the communication addresses listed there.

4. Right to Complain to a Competent Data Protection Supervisory Authority

Finally, you have the right to complain to a competent data protection supervisory authority.

Saxony's Data Protection and Transparency Commissioner

Address:
Devrientstraße 5
01067 Dresden

Postal address:
Postfach 11 01 32
01330 Dresden

Telephone: 0351/85471–101
Telefax: 0351/85471–109
Email: saechsdsb@slt.sachsen.de
http://www.datenschutz.sachsen.de

5. Objection

You have the right at any time, for reasons that arise from your particular situation, to object against the processing of your personal data (according to art. 6 para. 1 lit. e or f GDPR); this also applies to profiling based on these provisions.

The person responsible will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to opt-out by means of automated procedures that use technical specifications.

6. Right to Revoke the Data Protection Consent Declaration

You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

7. Advertising Block List

After your objection against the processing of your personal data for advertising purposes or the revocation of your consent, we are obliged under data protection law according to the specifications of the German data protection supervisory authorities to include the necessary data (name, address, e-mail address) in our internal advertising block list and to permanently (only for this purpose) store (lock) and to use for comparison with our future advertising files. In this way, compliance with your advertising complaint or the revocation of your consent can be permanently ensured.

8. Automated Decision on a Case-By-Case Basis including Profiling

You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner.

9. Change of Purpose of Processing

If we change the purposes of the processing over time, we will inform you in advance by updating these privacy notices.

10. Change of Privacy Information

From time to time it is necessary to adapt the content of this Privacy Policy for future collected data. We reserve the right to change these instructions at any time. We will also publish the amended version of the privacy policy here. If you visit us again, you should therefore read the privacy policy again.