Privacy Policy

Privacy Policy

The Ebenbuild GmbH (hereinafter "Ebenbuild” or “we"), is pleased that you are visiting our website. Data protection and data security are very important to us. Therefore, we would like to inform you about the personal data we collect during your visit to our website and about the intended purposes.

As changes to the law or changes to our corporate processes may require an adaptation of this privacy statement, we ask you to read this privacy policy regularly. The privacy policy can be accessed any time under “Privacy Policy”, saved and printed out.

§ 1 Data Controller and Scope

The controller according to the EU General Data Protection Regulation (hereinafter: GDPR) and other national data protection acts of the Member States, as well as other data protection regulations, is:

Ebenbuild GmbH
Address: Holzstraße 28, 80469 München, Germany
Phone: +49 (0)89 289 15265
Email: info@ebenbuild.com

This privacy policy applies to the online presence of Ebenbuild, which is available at www.ebenbuild.com and the various subdomains (hereinafter referred to as "our website").

§ 2 Data Protection Officer

p. You can contact our data protection officer here:

Name: Marie Brei
Email: dataprotection@ebenbuild.com
You can also send a letter to our address, please write „z. Hd. des Datenschutzbeauftragten“ on the envelope.

§ 3 Principles of Processing Personal Data

Personal data are all information relating to an identified or identifiable natural person. This includes information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior. Information that cannot (or only with a disproportionate effort) be referred to your person, e.g. by anonymizing the information, is not personal data. The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis or your consent.

Processed personal data will be deleted as soon as the purpose of the processing has been fulfilled and no legally prescribed retention obligations are to be observed.

In case we process your personal data for the provision of certain offers, please find below information about the specific processes, the scope and purpose of data processing, the legal basis for processing and the respective storage period.

§ 4 Data Processing

  • 1 Website
    a. Scope and Purpose of the Processing

    When you access and use our website, we only collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file.

    The following personal data is recorded to the extent necessary for the provi¬sion of a functional website and our contents and services:

    • IP address of the requesting computer
    • Date and time of access
    • Name and URL of the retrieved file
    • The website from which access is made (referrer URL)
    • The used browser and, if applicable, the operating system of your computer as well as the name of your access provider

    b. Legal Basis

    Art. 6 para. 1 lit. f GDPR serves as the legal basis for the data processing. The processing of the mentioned data is necessary for the provision of our services and thus serves the protection of a legitimate interest of our company. Erasure and Storage Time

    The data subject’s personal data are deleted or blocked as soon as the purpose of the storage is fulfilled. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection for the user. Further storage may take place in individual cases if this is required by law.

    2. Contact Form
    a. Scope and Purpose of the Processing

    You have the opportunity to contact us using a form provided on our website. In the course of sending your inquiry via the contact form, reference is made to this data protection declaration in order to obtain your consent. If you use the contact form, the following personal data will be processed:

    • E-mail address
    • Other personal data provided

    The purpose of entering your e-mail address and other personal data is to assign your request and to be able to reply to you. When using the contact form, your personal data will not be forwarded to third parties.

    b. Legal Basis

    The data processing described above (cf. § 4 2. a.) for the purpose of establishing contact is carried out voluntarily in accordance with Art. 6 para. 1 lit. f GDPR as we have a legitimate interest in responding to your request. You have the right to object. If you exercise this right, we will no longer be able to process your request.

    b. Storage Time

    As soon as the request you have made has been dealt with and the relevant facts have been finally clarified, your personal data processed by the contact form will be deleted. Further storage may take place in individual cases if this is required by law.

    3. Application
    a. Scope and Purpose of the Processing

    Applicants may apply to job vacancies published on this website or on job boards via an email address or post. In addition, applicants have the option to apply via an applicant portal on our website. Within the applicant portal, the uploaded personal data entered by the applicants is transferred using TLS encryption. All applications are stored in a database operated by Personio GmbH, which offers a human resource and applicant management software solution (https://www.personio.com/legal-notice/). In this context, Personio is our processor under article 28 of the GDPR. In this case, the processing is based on an agreement for the processing of orders between us as the controller and Personio. Further information on the storage of personal data by Personio can be found at https://ebenbuild.jobs.personio.com/privacy-policy.

    • First name, last name
    • E-mail address
    • Telephone number
    • Residence/postal address
    • IP address (when applying via the form in the job market)
    • LinkedIn profile (optional)

    Furthermore, the applicant can choose to upload expressive documents such as a cover letter, CV and reference letters. These may contain additional personal data such as

    • Date of Birth
    • Residence/postal address
    • Marital status
    • Information on your career (school career, training, previous employers)
    • Employment references, certificates for education, training and further education as well as further certificates if applicable
    • Personal letter/message
    • If applicable, further personal data

    No personal data will be passed on to third parties in this context. The personal data will only be used to carry out the application procedure and will only be made available to the persons who are involved in the application procedure in question (e.g. responsible manager, responsible employee of the Human Resources department).

    b. Legal Basis

    The legal basis for the processing of personal data in the context of the application procedure is Section 26 of the Federal Data Protection Act (BDSG), as the processing is necessary to establish an employment relationship.

    c. Storage Time

    The personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected, there are no statutory retention periods to the contrary and they are not required in connection with the protection and defense of possible legal claims.

    Applicants have the option of withdrawing their application at any time. Their application documents will then no longer be considered in the application process and will be deleted, provided that there are no statutory retention periods to the contrary and they are not required in connection with the protection and defense of possible legal claims.

    4. Applicant Pool
    a. Scope and Purpose of the Processing

    The purpose of the processing in the context of the applicant pool is that we may contact you even after the application procedure has ended in order to inform you about interesting positions in our company. The following personal data will be used for this purpose:

    • E-mail address
    • Personal data mentioned under § 4 3a)

    The data will be stored in a database operated by Personio GmbH, which offers a human resource and applicant management software solution (https://www.personio.com/legal-notice/). For more information about the processing of personal data by Personio see §4 3(a) and https://ebenbuild.jobs.personio.com/privacy-policy.

    b. Legal Basis

    The processing of your applicant data after the end of the application procedure is based on your voluntary declaration of consent in accordance with Art. 6 para.1 lit. a GDPR. You can withdraw your declaration of consent at any time by sending an e-mail to dataprotection@ebenbuild.com.

    c. Storage Time

    The personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected or you have revoked your consent and there are no statutory retention periods to the contrary.

    5. Google Maps
    a. Scope and Purpose of Processing

    We use Google Maps on our website, a service provided by Google LLC. In order to be able to display the maps in a uniform manner regardless of the terminal device, the following personal data are processed for this purpose:

    b. Legal Basis

    The legal basis is our legitimate interest in presenting the contents of our website in a uniform manner (Art. 6 para. 1 lit f GDPR).

    c. Storage Time

    Personal data is deleted as soon as it is no longer required to achieve the purpose for which it was collected and there are no legal retention periods to the contrary. Further information on the storage of personal data by Google LLC can be found at: https://policies.google.com/technologies/retention?hl=de&gl=de

    6. Data subject rights
    a. Scope and Purpose of Processing

    Insofar as you assert data subject rights in accordance with Art. 12 et seqq. GDPR with regard to the use of the website, the personal data provided to us by you will be processed in order to respond to the respective request.:

    b. Legal Basis

    Art. 6 para. 1 lit c GDPR serves as the legal basis for the processing of your personal data with regard to responding to the data subject request, as the controller thereby fulfils a legal obligation.

    c. Storage Time

    Your personal data will be stored for as long as it is necessary to achieve the purpose or until the purpose has ceased to exist. In addition, further storage may take place insofar as legal retention periods prevent deletion.

§ 5 Third Party Transfers

We only share your personal information with third parties if:

  • you have given your express consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR,
  • it is legally permissible and necessary for the fulfilment of a contractual relationship with you pursuant to Art. 6 (1) sentence 1 lit. b GDPR,
  • there is a legal obligation to pass on the data in accordance with Art. 6 (1) sentence 1 lit. c GDPR,
  • the disclosure pursuant to Art. 6 (1) sentence 1 lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.

§ 6 Cookies

On our recruiting site https://ebenbuild.jobs.personio.com operated by Personio GmbH, third-party cookies are used. Personio offers a human resource and applicant management software solution and is our processor under article 28 of the GDPR. In this context only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website are used. The use of cookies is absolutely necessary for providing the services provided by Personio and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of the recruitment website.

§ 7 Tools for Tracking and Analysis

We also do not use tools for tracking and analysis.

§ 8 Hyperlinks

Our website contains hyperlinks to websites of other providers. When you activate these hyperlinks, you will be directed directly to the other providers' website. You will recognize this when the URL is changed. Please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites.

§ 9 Your Rights as a Data Subject

If your personal data are processed, you are a data subject within the meaning of the General Data Protection Regulation (GDPR) and the following rights apply to you:

  • Pursuant to Art. 15 GDPR you can request information about your personal data processed by us. In particular, you may obtain information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the right to lodge a complaint with a supervisory authority, the origin of your data, if not collected from us, about transfer to third countries or international organisations, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about the logic involved.
  • Pursuant to Art. 16 GDPR you can immediately demand the correction of incorrect data or the completion of your personal data stored with us.
  • Pursuant to Art. 17 GDPR, you may request the deletion of your personal data stored by us, provided that the processing is not necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
  • Pursuant to Art. 18 GDPR, you can request the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful, if we no longer need the data and if you refuse their deletion because you need to establish, exercise or defend legal claims. You are also entitled to the right under Art. 18 GDPR if you have objected to the processing in accordance with Art. 21 GDPR.
  • Pursuant to Art. 20 GDPR, you may request that the personal data you have provided us with be received in a structured, current and machine-readable format or you may request that it be transmitted to another person responsible.
  • Pursuant to Art. 7 para. 3 GDPR you can withdraw your consent at any time. As a consequence, we are no longer allowed to continue the data processing based on this consent for the future.
  • Pursuant to Art. 77 GDPR, you have the right to complain to a supervisory authority. You can contact the supervisory authority of your habitual residence, place of work or our company headquarters.

You can exercise these rights by contacting dataprotection@ebenbuild.com.

§ 10 Right to Object

In case the processing of your personal data is based on legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR insofar as there are reasons which arise from your particular situation or if the objection refers to direct marketing. In the case of direct marketing, you have a general right of objection which will be considered without mentioning any particular situation.

§ 11 Data Security and Security Measures

We are committed to protecting your privacy and treating your personal information confidentially. In order to avoid any manipulation, loss or misuse of your data stored by us, we take extensive technical and organisational security measures that are regularly reviewed and adapted to technological progress. This includes, among other things, the use of recognized encryption methods (SSL or TLS).

However, we would like to point out that due to the structure of the internet, it is possible that the rules of data protection and the above mentioned security measures may not be observed by other persons or institutions for which we are not responsible.

In particular, unencrypted data - e.g. if this is done by e-mail - can be read by third parties. We have no technical influence on this. It is the responsibility of the user to protect the data provided by him against misuse by encryption or in any other way.