In the following, we inform you about the collection of personal data when using our website www.hybrid-technologies.com (hereinafter "Website"). We explain which personal data we collect in the context of your use, how and for which purposes we collect, process and use these data and which rights you have. Protecting your personal data is very important to us.

Personal data means any information relating to you personally, such as your name, mailing address or e-mail address, but also technical data that can be attributed to you, such as the IP address attributed to you.

We reserve the right to adjust this Privacy Statement at any time to changed legal regulations and changes in our data processing.

1. Data Controller

We, the TB&C Holding GmbH, Junostraße 1, 35745 Herborn, Germany, email: info@hybrid-technologies.com, tel. +49 2772 57595-32, are the controller for collecting and processing your personal data upon your visit to and use of the of the Website.

2. Contact Details of the Data Protection Officer

Our data protection officer is available under: Henning Welz, GdS - Gesellschaft für Datenschutz Mittelhessen mbH, Tel.: 06421 80413 10, E-Mail: welz@gdsm.de.

3. Collection of personal data when visiting our Website

3.1. Automatic data processing

3.1.1. When our Website is visited only for the purpose of obtaining information, i.e. if you do not register or provide us with information in any other way, we will only collect personal data that your browser transmits to our server. When you view our website, we collect the following data which we require for technical purposes to present our Website to you and to guarantee stability and security:

• IP-address
• date and time of the access
• Content of the requirement (specific page)
• Access status/HTTP status code
• Transferred data volume
• Website from which the requirement comes (referrer URL)
• the browser used
• Operating system and its user interface
• Language and version of the browser software

The legal basis for the collection is Art. 6 para. 1 subpara. 1 lit. f) of the General Data Protection Regulation ("GDPR"). This provision allows the processing of personal data, as far as this is necessary for the use of the Website, or in the context of the legitimate interests of the person responsible, unless your basic rights, freedoms or interests prevail. Our legitimate interest is the provision of a website with information and services and the administration of our Website.

3.1.2. In addition to the above-mentioned data, cookies are stored on your computer when you use our Website. Cookies are small text files that are attributed to and stored on the browser on your hard drive whereby certain information is transferred to the party that places the cookies (in this case us). Cookies cannot run programs or transfer viruses to your computer. They help to make the Website more user-friendly and effective overall. This is in the legitimate interest of the controller. Legal basis for this is Art. 6 para. 1 subpara. 1 lit. f) GDPR.

3.1.3. Use of cookies

a) This Website uses the following types of cookies, the scope and function of which is explained below:

• Transient Cookies (see b)
• Persistent Cookies (see c).

b) Transient cookies are deleted automatically when you close the browser. They include in particular session cookies. They store a session ID which allow various enquiries from your browser to be attributed to the common session. This allows your computer to be recognized again when you return to our Website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

Here you find a list of cookies used by us:

Company: Google
Type: performance evaluation
Function: Google cookies allow us to use Google Analytics to evaluate and improve our web performance.

d) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We draw your attention to the fact that you may then not be able to use all the functions on this Website.

3.1.4. Use of web analytics tools:

We use Google Analytics to analyse the activities on our website.

Google Analytics is a web service provided by Google Inc. ("Google"). Google Analytics uses "cookies", text files that are stored on your computer and that enable your use of the website to be analysed.  The information generated by the cookie about your use of the website will be transmitted to and stored Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google within the Member States of the European Union or in other countries that are Contracting Parties to the Agreement in the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google Server Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services regarding website activity and internet usage for the website operator. The IP address transmitted by your browser within Google Analytics is not merged with other Google data. You can prevent cookies from being stored by selecting the appropriate settings in your browser; however, we wish to point out that by doing so, you may not be able to enjoy the full functionality of this website. Furthermore, you can prevent the collection of data generated by the cookie and related to the usage of the website (incl. your IP address) and the processing of these data by Google by downloading and installing the browser plug-in available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de).

For more information, see http://tools.google.com/dlpage/gaoptout?hl=de or at http://www.google.com/intl/de/analytcs/privacyoverview.html (general Google Analytics and privacy information).We wish to point out that on this website Google Analytics has been extended with the code "gat._anonymizeIp();" in order to ensure the anonymous collection of IP addresses (IP masking).

We use Google Analytcs on the legal basis of § 15 para. 3 TMG (German Telemedia Act) and/or Art. 6 para. 1 (f) GDPR (General Data Protection Regulation).The data sent by us and linked with cookies, user IDs or advertising IDs are automatically deleted after 14 months .Data whose retention period has been reached is automatically deleted once a month. For more information on terms of use and privacy, please visit https://www.google.com/analytcs/terms/de.html

3.2. Collection and processing of personal data – contact

We will only collect and process personal data, such as your name, mailing or email address, if you provide these data within the context of using the Website and insofar as such collection and processing is permitted by law or covered by your consent.

The use of certain features of our Website, such as the contact form, requires a collection and processing of personal data. In this case, we take the principle of data-saving seriously and collect only those personal data marked as mandatory, which are required for the purpose of using and processing the website function. The other possible information is voluntary and is used by us in particular for the purpose of being able to address you more personally and / or individually or, for example, by the possibility of queries, to improve the service for you.

In addition, if your prior consent is required for certain data collection and processing, we will, of course, ask you for your consent in advance at the appropriate section of our Website. This declaration of consent is recorded by us.

You are entitled to revoke your consent at any time in whole or in part with effect for the future. Such a revocation will be also recorded by us.

4. Transfer of data to third parties

4.1.1. The personal data collected when using our Website are transmitted to state institutions and authorities as well as private legal entities on the basis of statutory provisions or judicial or regulatory decisions, and in the event of infringements of our rights passed to state institutions and authorities for purposes of legal or penal enforcement.

5. Data Security

The personal data collected and stored by us will be treated confidentially and protected against loss and alteration as well as unauthorized access by third parties through appropriate technical and organizational precautions.

The transmission of personal data over the Internet occurs by means of encryption. We use SSL encryption (Secure Socket Layer) for data transmission.

6. Duration of storage

We delete your personal data when the purpose of storage ceases to exist.

The personal data collected automatically in accordance with Clause 3.1 will not be saved as a log file, but deleted immediately after each use of our Website.

The personal data collected in the course of the use of certain features of our Website in accordance with Clause 3.2, such as the contact form, we will only store as long as this is required to carry out or complete the functions or services concerned.

However, storage can also take place if this is required by regulation which we have to observe such as statutory storage and documentation obligations. In such a case, we will delete or block your personal data after the end of the period of validity of the corresponding legal requirements.

7. Google Maps

We use Google maps on our website.
This website uses Google maps, which is managed by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland to show maps and create routes. By using this service, users agree to the collection of data about themselves, their agents or third-party suppliers. The terms of use can be found on the website of the provider at https://policies.google.com/privacy?hl=de

8. Google Web Fonts

This website uses web fonts provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland to maintain consistency in font display.When you load a web page, your browser will load the required web fonts into your browser cache to display texts and fonts correctly. The browser that you are using must be connected to Google’s servers in order to achieve this. Therefore, Google will be aware that you have accessed our website using your IP address. The use of Google web fonts is implemented in the interests of delivering a consistent and appealing presentation of our online service. The above constitutes a legitimate interest which is within the meaning of ‘‘Art. 6 Abs. 1 lit. f DSGVO“. If your browser does not support web fonts, a default font will be used by your computer. For more information on Google web fonts, please visit https://developers.google.com/fonts/faq and for Google’s privacy policy, please visit https://www.google.com/policies/privacy/.

9. Data Protection Information acc. to Art. 13 GDPR (Apllicants)

As part of the application process we obtain personal data from you. For this data we are:
 
TB&C (TB&C Outsert Center GmbH, TB&C Technology GmbH und TB&C Holding GmbH), Personalwesen, 02772/57595-18, personal@hybrid-technologies.com
 
Types of data categories and origin of data:  
When  you  apply  to  us,  we  process  the  information,  which  we obtain  from you  in  the  application process,  e.g.  application  letter,  CV,  certificates,  written  correspondence,  telephone  or  oral communication. In addition to your contact details, your education, qualifications, work experience and skills are also of great significance to us. We will only evaluate you based on your suitability for the position, therefore you do no need to submit a photo.

Purposes and legal basis for data processing and duration of data storage:
Your  data  will  initially  be  processed  exclusively  for  the  application  process.  If  your  application  is successful,  your  data  will  be  used  as  part  of  your  personnel  file,  for  the  implementation  and  the termination of the employment, and will be deleted in accordance to the rules applicable to personnel files. If we are currently unable to offer you employment, we will process your data for up to six months after the rejection has been sent in order to defend ourselves against possible legal claims, particularly those regarding alleged discrimination in the application process.  If you receive cost reimbursements or other tax-related transactions, the appropriate accounting documents will be retained in order to fulfil budgetary and tax retention obligations in accordance to the applicable retention obligations. Our human resources department will have access to your data, as well as the respective department, to which  you  applied,  and  if  necessary,  also  the  accounting  department.  Our  administrators  and processors have the possibility to access data processed by IT due to technical necessities. In specific cases, we may need to disclose your personal data to third-parties, such as our bank, if you are to receive a cost reimbursement or the post office, if we contact you by mail.
 
Legal basis for the data processing in the application procedure and as a component of the personal file are § 26 para. 1 s. 1 BDSG and Art. 6 para. 1 lit b GDPR and, if you have submitted consent, e.g. by submitting information unnecessary to the application process, Art. 6 para. 1 lit a GDPR. Legal basis for the data processing after a rejection is Art. 6 para. 1 lit f GDPR. Legal basis for the budgetary or tax retention is Art. 6 para. 1 lit. c GDPR in conjunction with § 147 AO.  A legitimate interest in processing based on Art. 6 para. 1 lit f GDPR is the defence against legal claims.  As a rule, we do not require any specific categories of personal data within meaning of Art. 9 GDPR. We ask you to please not send us any information of this sort. If such information is exceptionally relevant to the application process, we will process them together with your other application data. For example, this may include information about a severe disability, which you can voluntarily inform us  on and  that  we  then must  process according  to  our specific  obligations  regarding  the  severely disabled. In these cases, the processing serves to exercise the right or to fulfil the legal obligations of labour laws, social security laws and social protection. Legal basis for data processing is then Art. 9 para. 2 lit. b GDPR, §§ 26 para. 3 BDSG, 164 SGB IX. As an exception, it may be necessary to obtain information about your health, a disability or information from the Federal Central Register, i.e. about previous convictions, in order to assess your suitability for the intended activity. Legal basis for this is § 26 BDSG.
 
Data transfer:  
Your data will not be used from our side for either automated decision-making or for profiling, nor will it be forwarded to a third-party. Your data will only be processed through us or on our behalf in Germany.

You have the following rights as a concerned person:
 •  Right to information (Art. 15 GDPR): You have the right to request confirmation from those responsible, as to whether your personal data is being processed; if this is the case, you have the right to information about this personal data.  
 •  Right to rectification (Art. 16 GDPR): You have the right to demand immediate correction of incorrect personal data from those responsible and, if applicable, the completion of incomplete personal data.
 •  Right to deletion or restriction (Art. 18 GDPR) of processing: You have the right to demand that those responsible delete personal data relating to you immediately, for example when the data are no longer required for the intended purpose (right to deletion). The concerned person has the right to demand that those responsible restrict the processing of the data for the duration of the examination, e.g. if the person has submitted an objection to the processing. 

 •Right to object (Art. 21 GDPR): You have the right to object to the processing of your personal data at any given time due to reasons that may arise during your specific situation. The responsible persons will no longer process your personal data. That is unless, he/she can provide compelling reasons for the processing, which outweigh the interests, rights and freedoms of the concerned persons or the processing serves to assert, exercise or defend legal claims.  
 •  Right to revoke (Art. 7 para. 3 GDPR): As long as the processing of your personal data is based on your consent, you have the right to revoke this consent at any time without affecting the legality of the processing carried out on the basis of consent until revocation.
 •  Right to appeal to the supervisory authority (Art. 77 GDPR): If the concerned person believes that the processing of his/her data violates the GDPR, there is the possibility of a complaint to the supervisory authority.  
 
Der hessische Datenschutzbeauftragte, Gustav-Stresemann-Ring 1, 63589 Wiesbaden
 
•  In addition, Art. 15 GDPR grants a right to information. According to this, the concerned person has the right to demand a confirmation from those responsible as to whether they will process personal data relating to them. If this is the case, then par. 1 s. 2 GDPR regulates the content of the information claim. This includes:
 ▪  purpose for the processing,
▪  the categories of the processed data,
▪  the recipient or category of recipient, to whom the data will be disclosed,  
▪  the duration of the storage of the data or the criteria for determining this duration.
 
In order to safeguard your rights and to ensure the legally correct processing, we have appointed an external data protection officer. The contact details are:
 Henning Welz
 gds – Gesellschaft für Datenschutz Mittelhessen mbH  
 datenschutz@gdsm.de
 06421 / 80413-10

10. Your rights

To the extent that the legal prerequisites are met, you have the right to obtain information about personal data or data processing concerning you (Art. 15 GDPR), rectification, erasure and restriction of personal data or data processing (Art. 16 to 18 GDPR) and transfers of personal data concerning you (Art. 20 GDPR).

In addition, if the statutory requirements under Art. 21 GDPR are met, you are entitled to a right of objection to data processing that is based on a "legitimate interest" of the controller in accordance with Art. 6 para. 1 subpara. 1 lit. f) GDPR.

To exercise these rights, or if you wish to revoke a consent to the processing of your personal data, in whole or in part, with future effect, please contact us under the email address datenschutz@hybrid-technologies.com or the mailing address TB&C Holding GmbH, Junostraße 1, 35745 Herborn.

Furthermore, in accordance with Article 77 para. 1 GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, employment or the place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

The address of the supervisory authority responsible in Hesse is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, P.O. Box: 3163, 65021 Wiesbaden, tel.: +49 611 1408 – 0, fax: +49 611 1408 – 611, email: poststelle@datenschutz.hessen.de, website: https://datenschutz.hessen.de/.