Privacy Policy
We are pleased to welcome you to our online presence at https://www.avicomp.com (hereinafter referred to as: Website).
In accordance with Articles 13 and 14 of the European General Data Protection Regulation (GDPR), we hereby inform you about the personal data collected and processed during your visit to the Website and your use of the online services provided thereon. Below, you will find information on the following points:
- Name and address of the controller
- Name and contact details of the data protection officer
- General information on data processing
- Provision of the Website and creation of log files
- Use of cookies
- Contact form and email communication
- Submission of applications
- Use of script libraries (Google Fonts)
- Web analytics via Piwik PRO
- Your rights as a data subject
I. Name and address of the controller
The controller within the meaning of the GDPR and other national data protection laws as well as other data protection regulations is:
AviComp Controls GmbH
Ostwaldstraße 4, 04329 Leipzig
Phone: +49 341 21787 0, Email: info@avicomp.com
II. Name and contact details of the data protection officer
Our data protection officer is:
Dr. Daniel Kirmse,
Phone: +49 341 221 710 69
Email: d.kirmse@kdsb.gmbh
III. General information on data processing
As a matter of principle, we only collect personal data from you as a visitor to our website if this is necessary to provide a correct view of our website or to utilise the content and services offered on it. Processing generally only takes place if you give us your prior consent or if legal regulations allow us to process the data.
Your personal data will be deleted as soon as the purpose for which we have stored it no longer applies. An exception only applies if we are obliged by law to store your data for a longer period or if you have given us your consent to use your personal data for a longer period.
IV. Provision of the website and creation of log files
1. Description and scope of data processing
Each time our website is accessed, we or our hosting provider automatically collect data about access to the server on which our website is stored. The following data is collected:
- Name of the retrieved file,
- date and time of access,
- the access status (file transferred/file not found),
- amount of data transferred,
- information about the browser type and version of your system,
- information about the operating system of your system,
- IP address of the internet connection used by your system and
- Website from which your system accessed our website (referrer URL)
This data is also automatically stored in our system’s log files. The IP address of the Internet connection you are using is also stored in full. The data is not stored together with other personal data about you. It is therefore not possible to create personalised user profiles.
2. Purpose of data processing, legal basis
The storage of your IP address by our system during your visit to the website is necessary to enable delivery of our website to the computer system you are using. For this purpose, your IP address must remain stored for the duration of the session.
IP addresses are stored in log files in order to recognise and ward off attacks. The storage therefore serves to ensure the functionality and security of the website and our information technology systems. We also use the data collected in the log files to optimise the website.
The legal basis for the temporary storage of the IP address is Art. 6 (1f) GDPR. Our legitimate interest in data processing lies in providing a functional website and ensuring the security of our systems.
3. Duration of storage
The non-anonymised IP addresses of the Internet connections of our website visitors are stored in the log files for a maximum of 7 days. After that, the IP addresses are irrevocably anonymised. Data whose further storage is required for evidentiary purposes is excluded from anonymisation until the respective incident has been finally clarified.
4. Possibility of objection and removal
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the secure operation of our website. There is therefore no possibility for you to object.
V. Use of cookies
1. Description and scope of data processing
Our website uses individual cookies. These are files that are transferred to the visitor’s website using them are transferred to the visitor’s device and stored there. If you visit a website that uses a cookie, it is transferred to your device and stored in your browser. The cookie contains an individual identifier. This makes your system or the browser used on it uniquely identifiable for the provider of the cookie. Various data and information about you or your system can be collected and stored within the cookie.
If data is only stored for the duration of your visit or browser session, these are so-called temporary cookies (also known as session cookies or transient cookies). In such a cookie, for example, the shopping basket of an online shop or the login status for a closed user area can be stored. Temporary cookies are deleted when you leave the website you are visiting and close your browser. In contrast, permanent cookies (also known as persistent cookies) remain stored on your system even after you close your browser. The stored data therefore remains available for new browser sessions at a later point in time. Such cookies can be used for marketing purposes, for example, to record specific interests and individual user behaviour and to display tailored advertising. Third-party cookies (as opposed to first-party cookies) are cookies that do not originate from the website operator but from third-party providers.
We only use our own cookies on our website. The own cookies we use store the language settings you have selected, a user ID and your settings when you confirm our cookie banner.
2. Purpose of data processing, legal basis
The proprietary cookies we use are intended to ensure the functionality and usability of the website. Language settings need to be stored so that the content is displayed in the correct language after navigating between pages. Your confirmation of our cookie banner is saved to prevent the banner from being displayed again with each subsequent page visit.
Overall, our use of cookies aims to serve our legitimate interest in providing you with the best possible functionality of the website as well as a user-friendly and efficient design of your visit. The legal basis for this is Article 6(1)(f) of the GDPR. The user data collected through our cookies is not used to create personalized user profiles.
3. Duration of storage
Temporary cookies are stored on your system only temporarily and are deleted as soon as you close your browser. Persistent cookies remain on your system even after the end of a browsing session until they are deleted. Since cookies are generally stored on your system, the information they contain is transmitted from there to our website.
4. Objection and removal options
Since cookies are stored on your computer by the browser you use, you as the user can actively influence data processing. You can restrict or completely prevent the use of cookies at any time with effect for the future. If you generally do not want cookies to be stored on your computer, please disable the corresponding option in your browser’s system settings. You can also delete cookies that have already been stored there at any time. If you only wish to change the cookie settings for our website or revoke your consent with effect for the future, you can access the cookie settings HERE and adjust your preferences. Please note that if you generally block the storage of cookies on your system, some features of our website may no longer be fully functional.
For more information about cookies and usage-based online marketing, you can visit the EU website www.youronlinechoices.com. There, you can object to the use of cookies for usage-based online marketing either entirely or for individual providers.
VI. Contact form and email communication
1. Description and scope of data processing
On our website, we provide you with the option of electronic contact via contact forms or the provided email addresses.
Contact forms
If you use the contact form to get in touch, the data entered and any attachments included will be transmitted to us and stored. The transmission takes place via an encrypted connection. Additionally, when the message is sent, the IP address of your internet connection, as well as the date and time of the submission, will be stored.
The data you provide in connection with contacting us will be used to the necessary extent for processing your inquiry. There will be no disclosure to third parties.
Email contact
Alternatively, you can contact us via the email addresses provided for this purpose. If you choose this option, we will also store the personal data transmitted through the email and use it to process your request. No transfer of your data to third parties will occur in connection with the contact.
2. Purpose of data processing, legal basis
The purpose of processing personal data from inquiries made via our contact forms or by email is solely to process the request underlying your contact.
The legal basis for processing the transmitted data is Article 6(1)(f) GDPR. Our legitimate interest in processing lies in being able to handle your request. If your contact aims at the conclusion of a contract, Article 6(1)(b) GDPR serves as the legal basis for processing.
3. Duration of storage
The data we receive will be deleted as soon as they are no longer necessary for the purpose of their collection. For data submitted via contact form or email, this generally occurs when the relevant issue has been conclusively resolved.
4. Right to object and erasure
You have the right to request the deletion of any personal data we have received in connection with an inquiry at any time. All affected data will be deleted in this case, unless they are required for the fulfillment of a contract or for pre-contractual measures, and unless contractual or legal obligations prevent deletion.
VII. Submission of applications
1. Description and scope of data processing
Through our website, you also have the opportunity to apply for a job with us. A dedicated email address for applications (hrm@avicomp.com) is provided on the website, which you can use for electronic contact. If you take advantage of this opportunity, we will use the personal data and documents transmitted with your email to process your application to the necessary extent. No transfer to third parties will take place.
2. Purpose of data processing, legal basis
The purpose of processing the data transmitted to us via the application email address is to process your application and to consider and contact you as a potential candidate for a job in our company.
The legal basis for processing the applicant data and application documents you have submitted is Article 6(1)(b) of the GDPR. No transfer of your personal data to entities outside the EU or the EEA takes place.
3. Duration of storage
Your data will be stored for as long as it is necessary to achieve the purpose for which it was collected. For data you provide in connection with an application, this will be the case until your application has been processed or is otherwise concluded. The data will be deleted by us no later than 6 months after the conclusion of the application process.
4. Right to object and deletion
You have the right to request the deletion of your personal data that we have received in connection with an application at any time. All affected data will be deleted in this case, unless they are still required for the processing of a contract with you. After the complete processing of all contracts, we will only process your data to the extent necessary to fulfill our legal obligations, such as tax and commercial law retention periods. For further processing, your data will be blocked and deleted after the expiration of these retention periods, unless you have expressly consented to further use or the use of your data is legally permitted for other reasons.
VIII. Use of script libraries (Google Fonts)
In order to display the content of our website correctly and visually appealing across different browsers, we use Google Fonts, a script and font library provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google”). The provider of Google services in the European Union and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For more information on Google Fonts, please visit https://fonts.google.com/.
The Google Fonts are installed locally on our webspace. No connection to Google’s servers takes place during this process.
IX. Web analysis by Piwik PRO
1. Scope of the processing of personal data
We use Piwik PRO functions on our website. Piwik PRO is a web analysis plugin from Piwik PRO GmbH (Kurfürstendamm 21, 10719 Berlin). Web analysis is the collection, storage and evaluation of data about the surfing behaviour of visitors to websites. For this purpose, various visitor data is collected during the visit to a website.
Specifically, Piwik PRO collects and stores the following data when you visit our website and the web browser of your end device connects to our web server for this purpose:
- The URL of the page of our website accessed,
- the date and time of access,
- the country/city or region from which the call is made,
- the browser you are using and its version,
- the operating system you are using,
- the website from which you accessed our website (referrer URL),
- the host name and (anonymised) IP address of the accessing end device,
- the search engine used to find our website,
- your time spent on the website and
- clicks on the website.
The data will not be passed on to third parties and in particular will not be sold.
2. Purpose of data processing, legal basis
The processing enables us to analyse the surfing behaviour of visitors to our website. By analysing the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. Piwik PRO is also used to measure reach and for market research.
Processing only takes place if you give us your consent to do so. We obtain this via our cookie consent tool, which displays a banner when you visit our website for the first time and asks you to give your consent. The legal basis for processing based on your consent is Art. 6 (1a) GDPR.
3. Duration of storage
The data collected by us in connection with the use of Piwik PRO is stored on our web server until it is no longer required for the above-mentioned purposes.
4. Possibility of objection and removal
You can revoke your consent to the collection and storage of personal data in connection with the use of Piwik PRO at any time. To do so, you can access the corresponding settings of our consent tools HERE and change your selection there.
X. Your rights as a data subject
If we process your personal data in the context of using our website or otherwise, you are considered a data subject within the meaning of the GDPR. As such, you are entitled to the following rights against us as the data controller:
1. Right of access (Article 15 GDPR)
You may request information from us at any time regarding whether personal data concerning you is being processed by us. If such processing is taking place, you have the right to receive further information, including:
- The purposes for which the personal data is being processed.
- The categories of personal data being processed.
- The recipients or categories of recipients to whom your personal data has been or will be disclosed.
- The planned duration of storage of your personal data or, if specific details are not possible, the criteria for determining the storage period.
- The existence of a right to rectify or delete your personal data, a right to restrict processing by us, or a right to object to such processing.
- The existence of a right to lodge a complaint with a supervisory authority.
- All available information about the origin of the data, if the personal data was not collected from you directly.
- The existence of automated decision-making, including profiling as per Article 22(1) and (4) of the GDPR, and, at least in these cases, meaningful information about the logic involved, as well as the scope and intended effects of such processing on the individual.
You have the right to request information regarding whether your personal data is being transferred to a third country or an international organization. In this context, you may also request to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR related to such transfers.
2. Right to rectification (article 16 GDPR)
You have the right to request the correction or completion of inaccurate or incomplete personal data concerning you. If you exercise this right, we will correct the data without undue delay.
3. Right to restriction of processing (Article 18 GDPR)
You may request the restriction of processing of your personal data if:
- You contest the accuracy of your personal data, for a period enabling us to verify its accuracy.
- The processing is unlawful, and you oppose the deletion of the personal data and request the restriction of its use instead
- We no longer need the personal data for processing purposes, but you require it to establish, exercise, or defend legal claims; or
- You have objected to processing pursuant to Article 21(1) GDPR, and it is not yet clear whether our legitimate grounds override yours.
If the processing of your personal data has been restricted based on your request, this data may only be processed (except for storage) with your consent or for the establishment, exercise, or defense of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.
If the restriction of processing is lifted, we will notify you in advance.
4. Right to erasure (Article 17 GDPR)
You may request that your personal data be deleted without undue delay, and we are obligated to delete it if:
- The data is no longer necessary for the purposes for which it was collected or otherwise processed.
- You withdraw your consent on which the processing was based, and there is no other legal ground for the processing.
- You object to the processing pursuant to Article 21(1) GDPR, and there are no overriding legitimate grounds for the processing.
- You object to the processing pursuant to Article 21(2) GDPR.
- The personal data was unlawfully processed.
- The deletion of the personal data is necessary to fulfill a legal obligation under Union or Member State law to which we are subject; or
- The personal data was collected in relation to the offer of information society services pursuant to Article 8(1) GDPR.
If we have made your personal data public and are obligated to delete it under Article 17(1) GDPR, we will take reasonable measures, including technical measures, to inform other data controllers processing the data that you, as the data subject, have requested the deletion of any links to or copies or replications of this personal data.
The right to erasure does not apply where processing is necessary:
- To exercise the right to freedom of expression and information.
- To comply with a legal obligation requiring processing under Union or Member State law or to perform a task carried out in the public interest or in the exercise of official authority vested in us.
- For reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) GDPR.
- For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) GDPR, where the right to erasure is likely to render impossible or seriously impair the achievement of such processing objectives; or
- For the establishment, exercise, or defense of legal claims.
5. Right to notification (Article 19 GDPR)
If you have exercised your right to rectification, deletion, or restriction of processing, we are obligated to inform all recipients to whom your personal data has been disclosed about this rectification, deletion, or restriction, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.
6. Right to data portability (Article 20 GDPR)
You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance, provided:
- The processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR; and
- The processing is carried out by automated means.
You also have the right to have your personal data transmitted directly from us to another controller, where technically feasible, provided that the rights and freedoms of others are not adversely affected.
The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
7. Right to object (Article 21 GDPR)
You have the right to object, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(e) or (f) GDPR, including profiling based on these provisions.
We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time, including profiling related to direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
You may exercise your right to object using automated means, applying technical specifications, in the context of information society services, notwithstanding Directive 2002/58/EC.
8. Right to withdraw consent (Article 7(3) GDPR)
If we process your personal data based on your consent, you have the right to withdraw this consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
9. Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
Without prejudice to other administrative or judicial remedies, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, place of work, or location of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.
The supervisory authority will inform you of the progress and outcome of your complaint, including the possibility of judicial remedy under Article 78 GDPR.