DATA PROTECTION
Protecting Personal Data and Respecting Your Privacy
The protection of personal data is an important part of how ELLECOM GmbH manages information entrusted to us.
We process personal data in accordance with applicable data protection requirements, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
ELLECOM has established internal processes for the appropriate handling, protection, retention and security of personal data.
OUR DATA PROTECTION PRINCIPLES
ELLECOM is committed to processing personal data responsibly and in accordance with the principles of applicable data protection law.
LAWFULNESS, FAIRNESS & TRANSPARENCY
Personal data is processed lawfully, fairly and transparently. Where personal data is processed, the applicable purpose and legal basis are determined and documented.
PURPOSE LIMITATION
Personal data is collected for specified, explicit and legitimate purposes and is not further processed in a manner incompatible with those purposes.
DATA MINIMISATION
We seek to collect and process only personal data that is adequate, relevant and necessary for the intended purpose.
ACCURACY
Reasonable measures are taken to ensure that personal data is accurate and, where necessary, kept up to date.
STORAGE LIMITATION
Personal data is retained only for as long as necessary for the relevant purpose, taking into account applicable legal, regulatory and contractual retention requirements.
INTEGRITY & CONFIDENTIALITY
Appropriate technical and organisational measures are applied to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, alteration or damage.
HOW WE PROCESS PERSONAL DATA
Depending on the nature of your interaction with ELLECOM, we may process personal data such as your name, company, professional contact information, email address, telephone number, communication details and other information that you voluntarily provide to us.
Personal data may be processed, as applicable, for purposes such as:
• responding to enquiries and communications
• preparing or performing contractual relationships
• providing our professional services
• managing customer and business relationships
• fulfilling legal and regulatory obligations
• protecting our legitimate business and information-security interests
• operating and maintaining our website
• other purposes for which consent has been provided, where consent is required
The applicable legal basis depends on the particular processing activity.
DATA RETENTION
Personal data is retained only for as long as necessary for the purposes for which it was collected and processed, unless a longer retention period is required or permitted by applicable legal, regulatory or contractual requirements.
ELLECOM maintains internal requirements for the appropriate retention and disposal of information.
INFORMATION SECURITY
Protecting personal and confidential information forms part of ELLECOM's information-security framework.
ELLECOM has established an Information Security Management System and applies organisational and technical measures intended to protect information against unauthorised access, disclosure, alteration, loss or destruction.
Information-security requirements are considered throughout our internal processes and are subject to ongoing review and continual improvement.
TRANSFER OF PERSONAL DATA
Where personal data is transferred or made available to service providers or other recipients, ELLECOM applies appropriate data-protection and information-security requirements.
Where personal data is transferred outside the European Economic Area, applicable requirements concerning international data transfers and appropriate safeguards are considered and implemented where required.
YOUR DATA PROTECTION RIGHTS
Subject to the requirements and limitations of applicable data protection law, you may have the right to:
• obtain information about the processing of your personal data
• request access to your personal data
• request correction of inaccurate or incomplete personal data
• request erasure of your personal data
• request restriction of processing
• receive personal data in a portable format where the applicable requirements are met
• object to certain processing of your personal data
• withdraw consent at any time where processing is based on consent
• exercise applicable rights relating to automated decision-making and profiling
The exercise of these rights may be subject to the conditions and exceptions provided by applicable law.
DATA SECURITY INCIDENTS
ELLECOM maintains processes for identifying, assessing and managing information-security and personal-data incidents.
Where a personal data breach occurs, the incident is assessed and, where required under applicable data protection law, the competent supervisory authority and affected data subjects are notified within the applicable legal requirements.
CONTACT REGARDING DATA PROTECTION
If you have questions concerning the processing of your personal data or wish to exercise your data protection rights, please contact:
ELLECOM GmbH
Hauptstraße 12
79588 Efringen-Kirchen
Germany
Email: info@ellecom.de
Telephone: +49 17670188902
RIGHT TO LODGE A COMPLAINT
You also have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
CONTINUAL IMPROVEMENT
ELLECOM periodically reviews its data protection and information-security arrangements and updates its internal policies and processes where necessary to reflect changes in legal requirements, business activities, technology and identified risks.