Data Privacy

Data Privacy Policy

As operator of the website www.emag.com, EMAG GmbH & Co. KG, Austr. 24, 73084 Salach, Germany (phone: +49 7162 17-0 | fax: +49 7162 17-197 |e-mail: communicationsnoSpam@emag.com (referred to as “we” in the following) is responsible for processing the personal data of users (referred to as “you” in the following) of the website in accordance with art. 4 of the General Data Protection Regulation (referred to as "GDPR" in the following).

We shall protect your privacy and your personal data. We shall process your personal data as set out in this data privacy policy and in compliance with the provisions of applicable data protection law.

This data privacy policy describes the personal data concerning you that we process. Please therefore read the following information carefully.

1. Collection of personal data

1.1 Personal data means any data that relate to you personally, i. e. data that can be used to identify you. Personal data include, in particular, your name, e-mail address, postal address and telephone number.

1.2 Personal data may also include information about how you use our website. As with all websites, our server automatically and temporarily stores information in the server log files transmitted by your browser unless you disable this feature. If you wish to view our website, we will collect the following data, which we require for technical reasons in order to show you our website and ensure stability and security (legal basis: art. 6(1f) of the GDPR):

IP address of the requesting computer
file requested by the client
http response code
website you came to our website from (the referrer URL)
time of the server request
browser type and version
operating system used by the requesting computer

No personalized analysis of server log files is carried out. At no time is the provider able to associate this data with any specific person. The data is not combined with data from other sources.

2. Purpose of use

We use your personal data for the following purposes:

2.1 To provide the services you wish to use (receipt and processing of your inquiries submitted online or messages sent on the contact form, receipt and processing of document attachments, receipt and processing of questions, messages and offers, including by telephone/e-mail or for the purpose of initiating business relationships), for which you voluntarily provide us with your data. The legal basis for this is art. 6(1b) of the GDPR;

2.2 To ensure that our website is presented to you in a manner that is as effective and interesting as possible (e.g., storage of display preferences, own market and opinion research). Insofar as we obtain consent, the legal basis is art. 6(1a) of the GDPR (e. g. for tracking, refer to section 3.7). Otherwise, the legal basis for this is art. 6(1)(1f) of the GDPR.

2.3 To meet our obligations from any contracts between you and us. The legal basis for this is art. 6(1b) of the GDPR;

2.4 To enable you to take advantage of interactive features if you wish. The legal basis for this is art. 6(1b) of the GDPR or art. 6(1f) of the GDPR;

2.5 To inform you of changes to our services. The legal basis for this is art. 6(1f) of the GDPR.

3. Information about your computer, cookies and targeting

3.1 We collect the information specified in section 1.2. every time our website is accessed.

3.2 We may also use browser cookies to collect information about how you use our website. Browser cookies are small text files that are stored on your device and contain specific settings and information about your browser to share with our system. A cookie normally contains the name of the domain that sent the cookie, information about the age of the cookie, and an alphanumeric identifier. Cookies enable our systems to recognize the user’s device and respond to any default settings immediately. A cookie is placed on the hard drive of the user’s computer as soon as the user accesses the platform. Cookies help us to improve our website and offer you a better service more effectively tailored to your requirements. The legal basis for the cookies required to use our website is art. 6(1f) of the GDPR. The legal basis for cookies stored by partner companies (see section 3.5) as well as for tracking cookies (see section 3.4) is your consent, art. 6(1a) of the GDPR. They enable us to recognize your computer on return visits to our website and therefore:

to store information about how you use our website and tailor the website to your personal interests. This includes advertising tailored to your personal interests;

to respond more quickly to your inquiries;

3.3 Only the data concerning your website use as described above are stored in the cookies we use. This is done not by linking the data to you personally, but by allocating an identification number to the cookie ("cookie ID"). The cookie ID is not combined with your name, IP address or similar data that would allow the cookie to be linked to you personally. Information on how you can disable the use of browser cookies is given in point 3.6.

3.4 Our website uses what are referred to as tracking technologies. We use these technologies to make our website more interesting to you. These technologies allow us to deliver advertising on the websites of our partners to users who have previously shown an interest in our website. We use cookie technology and analyze previous user behavior to deliver advertising on our partners’ websites. This analysis is carried out pseudonymously, and no user profiles containing your personal data are compiled. The first time you visit our website, you will be asked whether you want to grant your consent for cookies that collect personal data to be set. You can grant your consent either for all cookies (button “[ACCEPT ALL]”) or make custom settings by clicking the button “[NO, CUSTOMIZE].” There you can decide by activating the buttons whether to grant consent for a specific service, for specific categories or services, or whether you want to refuse to grant consent. The consent is voluntary and you can withdraw it at any time with effect for the future by clicking “[Customize Cookie Settings]” at the bottom of our website (footer) or in point 3.6 of our Data Privacy Policy, which you will also find in the website footer, by deselecting a previously activated button.

3.5 We work together with business partners who help us to make our online offer and website more interesting to you. For this reason, cookies from these partners are also placed on your hard drive when you visit our website. These cookies are automatically erased after the period specified. Again, these partner company cookies collect data under a cookie ID and only to the extent that allows our advertising partners to show you advertising that might be of interest to you. The first time you visit our website, you will be asked whether you want to grant your consent for cookies that collect personal data to be set. You can grant your consent either for all cookies (button “[ACCEPT ALL]”) or make custom settings by clicking the button “[NO, CUSTOMIZE].” There you can decide by activating the buttons whether to grant consent for a specific service, for specific categories or services, or whether you want to refuse to grant consent. The consent is voluntary and you can withdraw it at any time with effect for the future by clicking “[Customize Cookie Settings]” at the bottom of our website (footer) or in point 3.6 of our Data Privacy Policy, which you will also find in the website footer, by deselecting a previously activated button. If you would like to know how to disable the use of such cookies by means of browser settings, please refer to point 3.6.

3.6 If you do not want browser cookies to be used, you can modify your browser settings to refuse cookies. Please note that in this case you may not be able to use some or all of the website. If you want to accept our cookies only and not the cookies of our service providers and partners, you can modify your browser settings to block third-party cookies.

You can withdraw your consent to the use of cookies for the future or give consent again at the following link: Adjusting cookie settings.

3.7. Matomo

We use Matomo (formerly Piwik) for web analysis by means of cookie technology. This is a service of InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769 (“Matomo“). The protection of your personal information is important to us, which is why we configured Matomo to record your IP address in abbreviated form only. We therefore process your personal usage data only in anonymized form. We are not able to identify you. You can find more information on the terms of use of Matomo and on the legal data privacy regulations at: https://matomo.org/privacy/

3.8 Google Analytics

This website uses features of the web analysis service Google Analytics. It is provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator obtains various usage data, such as page views, length of stay, operating systems used and origin of the user. These data are summarized in a user ID and assigned to the respective end device of the website visitor.

Furthermore, we can record your mouse and scroll movements and clicks, among other things, with Google Analytics. In addition, Google Analytics uses different modeling approaches to supplement the collected data records and machine-learning technologies to analyze the data.

Google Analytics uses technologies that enable the user to be recognized for the purpose of analyzing user behavior (e.g. cookies or device finger printing). The information recorded by Google about the use of this website is usually transmitted to and stored by a Google server in the USA.

The use of this service is based on your consent according to art. 6(1a) of the GDPR and § 25(1) of the TTDPA (Telecommunications Telemedia Data Protection Act). This consent can be withdrawn at any time.

Data transmission to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/controllerterms/mccs/.

Browser plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can find more information on how user data are used at Google Analytics in Google's data privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

3.9 LinkedIn Insight Tag

We use the "LinkedIn Insight Tag", a tracking technology on the LinkedIn platform, provided by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2 (Ireland). This technology employed by LinkedIn can be used to show you more relevant advertising based on your interests. LinkedIn also provides us with aggregated, anonymous reports about ad performance and information about how you interact with our website. The legal basis is your consent, art. 6(1a) of the GDPR.

LinkedIn uses cookies for this purpose. These cookies uniquely identify a web browser on a particular computer, do not contain any personal data, and are therefore not used to identify individual users of our website. The information collected with these cookies is used to compile the anonymous statistics and reports mentioned above and to serve advertising based on your interests.

You can disable the LinkedIn Insight Tag and opt out of interest-based advertising in the cookie banner. More information on granting and withdrawing your consent is given in point 3.5.

3.10 Quantcast Measure

We use the analysis tool Quantcast Measure on our website. Quantcast Measurement Service is a service provided by the Quantcast Corporation, 795 Folsom Street, San Francisco, CA 94107, United States.

Quantcast Measurement Service uses cookies and other browser technologies to evaluate user behavior and recognize users. This enables us to show you advertisements based on your interests.

You can find more information in the data privacy policy for Quantcast Measurement Service: https://www.quantcast.com/privacy/.

3.11 Quantserve

This website uses the web analysis service Quantserve. This service is provided by Quantcast Corp., 795 Folsom Street, San Francisco, CA 94107.

Quantserve.com is a domain used by the American company Quantcast, specialized in web tracking, audience measurement methods and real-time advertising. Quantserve allows us to record visitor statistics and analyze user behavior by means of anonymous records of Internet usage in abbreviated or encrypted form.

The respective cookie is set only after consent has been given. You can revoke this setting at any time in the cookie settings.

The information generated by the cookies on the use of the Internet offer is stored on servers in the USA. The IP address is anonymized immediately after being processed and before being stored. The information collected by QuantCast includes the browser type, browser time, access time, screen resolution, IP address, URL of the current page and search terms.

More information can be found in the data privacy information of the provider at the following URL: https://www.quantcast.com/privacy/.

3.12 Sentry

We use Sentry from Functional Software, Inc., 132 Hawthorne St, San Francisco, CA 94107, United States as a bug tracker to detect code errors in good time and, in this way, ensure the technical functionality of our online offer. Anonymous information is collected on the device on which the fault occurred and at the time the fault was detected. In some cases user sessions may also be recorded to make it easier to rectify the fault. Functional Software, Inc. does not evaluate these data for advertising purposes.

The bug tracker is used on the basis of our legitimate interests, which means on the basis of the interest in secure and error-free provision as well as the optimization of our online offer according to art. 6(1f) of the GDPR.

You can find more information on the purpose and scope of the data collection and processing in the data privacy policy for Sentry: https://sentry.io/privacy/.

3.13 Google Tag Manager

We use Google Tag Manager, an advertising platform provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Tag Manager makes it possible to manage website tags via a single interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has taken place at the domain or cookie level, it will remain effective for all tracking tags implemented with Google Tag Manager.

3.14 Google Maps

On this website we use Google Maps, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This enables us to display interactive maps directly on the website and allows you to conveniently use the map feature. The legal basis for the use of Google Maps is your consent, art. 6(1a) of the GDPR. No data shall be transmitted to third parties until you give us your consent. More information on granting and withdrawing your consent is given in point 3.5.

When you visit our website, Google is informed that you have opened the corresponding page of our website. The data specified in point 1.2 of this Policy is also transmitted to Google. This occurs regardless of whether you or not you have a Google account and are logged into it. If you are logged into Google, your data will be linked with your account. If you do not want this data to be linked with your Google profile, you must log out before clicking the button. Google will store your data in a user profile, which it will use for the purpose of advertising, market research, or tailoring its website. This analysis, which is carried out even for users who are not logged in, is used primarily to display tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact Google to exercise this right.

For more information about the purpose and scope of data collection and processing by the plugin provider, please see that provider’s privacy policies. It also provides further information on your corresponding rights and setting options regarding the protection of your privacy: www.google.de/intl/de/policies/privacy.

9.15 Baidu Maps

On our site we use the service Baidu Maps from the company Baidu, Baidu Campus No. 10, Shangdi 10th Street, 100085 Haidian District, Beijing, China, website: http://www.baidu.com/.

The service is a plugin we require to show you all content of our website (such as images and maps). The plugin makes our website more attractive and easier to experience for visitors of our site.

The processing takes place also in a third country for which there is no adequacy decision of the Commission. That is why the usual protection level of the GDPR cannot be ensured for the transmission, because it cannot be ruled out that, for example, the authorities can access the collected data in the third country.

More information can be found in the data privacy information of the provider at the following URL: http://ir.baidu.com/baidu-statement-privacy-protection.

3.15 Sketchfab

The Sketchfab account of EMAG is operated by Sketchfab (Sketchfab Inc., 1123 Broadway, Ste 501, New York, NY 10010, USA). To integrate and display interactive 3D models, our website uses the 3D models of the platform sketchfab.com provided by Sketchfab.

Sketchfab is used in the interest of presenting our online offer in an appealing manner. This constitutes a legitimate interest according to art. 6(1f) of the GDPR. You can find more information on how the user data are treated in Sketchfab's data privacy policy at https://sketchfab.com/privacy.

3.16 Social networks

Our website contains links to the social networks Facebook, Twitter, YouTube, Pinterest and LinkedIn. Unlike in the case of social media plugins (e.g., the Facebook “Like” button), personal connection data is only generated when you access the social network in question using the link.

3.16.1 Facebook

Elements of the social network Facebook are integrated in this website. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data are also transferred to the USA and other third countries.

You can find an overview of Facebook's social media elements here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

If the social media element is active, a direct connection is established between your end device and the Facebook server. In this way, Facebook is informed that you have visited this website with your IP address. You can link the content of this website on your Facebook profile by clicking on the Facebook "Like" button while logged in to your Facebook account. This allows Facebook to assign this website visit to your user account. We would like to point out that we, as provider of the pages, have no information about the content of the transferred data and their use by Facebook. More information in this respect can be found in Facebook's data privacy policy at: https://de-de.facebook.com/privacy/explanation.

To the extent that personal data are collected on our website and forwarded to Facebook with the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (art. 26 of the GDPR). This joint responsibility is restricted solely to the collection of the data and their forwarding to Facebook. The joint responsibility does not cover the processing of the data by Facebook after being forwarded. Our joint obligations have been documented in an agreement on joint processing. You can find the wording of the agreement at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for issuing the data privacy information when using the Facebook tool and for the secure implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e. g. requests for information) with regard to the data processed by Facebook directly at Facebook. If you assert the data subject rights with us, we shall be obliged to forward them to Facebook.

Data transmission to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

3.16.2 Twitter

Features of the Twitter service are integrated in this website. These features are provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

If the social media element is active, a direct connection is established between your end device and the Twitter server. In this way, Twitter is informed about your visit to this website. The websites visited by you are linked to your Twitter account and disclosed to other users by using Twitter and the "Re-Tweet" function. We would like to point out that we, as provider of the pages, have no information about the content of the transferred data and their use by Twitter. You can find more information on this in Twitter’s data privacy policy: https://twitter.com/privacy.

Data transmission to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.

You can change your data privacy settings at Twitter in the account settings at https://twitter.com/account/settings.

3.16.3 Pinterest

On this website we use elements of the social network Pinterest operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

If you open a page that contains such an element, your browser will establish a direct connection to the servers of Pinterest. This social media element transmits log data to the server of Pinterest in the USA in the process. These log data may contain your IP address, the address of the visited websites that also contain Pinterest functions, the type and settings of the browser, the date and time of the request, your use of Pinterest and cookies.

You can find more information on the purpose, scope and further processing and use of the data by Pinterest and your rights and options in this respect for the protection of your privacy in the data privacy policy of Pinterest: https://policy.pinterest.com/privacy-policy.

3.16.4 LinkedIn

This website uses elements of the network LinkedIn. It is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

A connection is set up to servers of LinkedIn every time a page of this website that contains elements of LinkedIn is opened. LinkedIn is informed that you have visited this website with your IP address. If you click on the LinkedIn "Recommend" button while logged in to your account at LinkedIn, LinkedIn is able to assign your visit to this website to you and your user account. We would like to point out that we, as provider of the pages, have no information about the content of the transferred data and their use by LinkedIn.

Data transmission to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de

More information on this can be found in LinkedIn’s data privacy policy: https://www.linkedin.com/legal/privacy-policy.

3.17 YouTube

To play our videos, we use the video service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (YouTube). The legal basis is your consent, art. 6(1a) of the GDPR. No data shall be transmitted to third parties until you give us your consent. More information on granting and withdrawing your consent is given in point 3.5.

Embedded YouTube videos can also be hidden by browser add-ons so that YouTube does not collect data. If you are logged into Google, your data will be linked with your account. If you do not want this data to be linked with your YouTube profile, you must log out before clicking the button. YouTube will store your data in a user profile, which it will use for the purpose of advertising, market research, or tailoring its website. This analysis, which is carried out even for users who are not logged in, is used primarily to display tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact YouTube to exercise this right.

For more information about the purpose and scope of data collection and processing by YouTube, please see that provider’s privacy policy. The privacy policy also provides more information about your rights and options regarding privacy settings: https://policies.google.com/privacy.

3.18 Youku

This website uses the integration function of the video platform youku.com to show and play videos of the provider. Youku.com is operated by Youku Tudou Inc. in Peking, China.

When playing embedded videos, a connection is set up to the servers of youku.com in China and technical data are transferred from the playback device to these servers. These data may, under certain circumstances, include the IP address, browser and operating system as well as settings and details. These data are required by youku.com to play the video requested by the user in the correct format and with the preferred settings.

A connection to the servers of Youku is established if you play one of the videos integrated via Youku. The Youku server is informed as to which of our pages you have visited in the process. Furthermore, your IP address is transferred to Youku. This applies even if you are not logged into Youku or do not have any account with Youku. The information collected by Youku is transferred to the Youku server. If you have a Youku account and are logged in, you enable Youku to link your surfing behavior directly to your personal profile. You can prevent this by logging out of your Youku account.

You can find more information on how the user data are treated (in Chinese) in Youku's data privacy policy at: h5.m.youku.com/app/flsm.html.

3.19 Issuu

On our website we use the services provided by Issuu (Issuu Inc.131 Lytton Ave, Palo Alto, CA 94301, United States). The legal basis is your consent, art. 6(1a) of the GDPR. No data shall be transmitted to third parties until you give us your consent. More information on granting and withdrawing your consent is given in point 3.5.

Issuu allows us to display catalogs and magazines and makes it easier for you to view them. These magazines and catalogs are stored on Issuu’s website and integrated into our website. When you access a page of our website with an integrated catalog, your browser connects to the Issuu server. In the process, Issuu collects various categories of data. We have no influence on the scope of the data that Issuu collects in this way. To our current knowledge, it is generally the following data:

visited page on our website that contains the embedded catalog/magazine,
the data generally transmitted by your browser (IP address, browser type and version, operating system, time).

The data collected by Issuu is transmitted to its server in the USA.

Issuu uses Google Analytics itself (see point 3.7 for how Google Analytics works). In this case, Google Analytics is exclusively used for the provider’s analytical purposes. We have no influence on the use of Google Analytics by the provider. This also means that the tracking by Issuu depends exclusively on whether you consented to the use of Issuu. You may refuse the use of cookies by selecting the appropriate settings in your browser software; however, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent the collection of data generated by the cookie and related to the use of the website (incl. your IP address) and the processing of these data by Google by downloading and installing the browser plugin available at the following link tools.google.com/dlpage/gaoptout.

More information on the use of cookies by Issuu can be found here: https://issuu.com/legal/cookies. You can find Issuu's data privacy policy here: https://issuu.com/legal/privacy.

3.20 Google reCAPTCHA

We use "Google reCAPTCHA" (referred to as "reCAPTCHA" in the following) on this website. It is provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is intended to check whether the data entered on this website (e. g. on a contact form) is done so by a human or an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor by means of various features. This analysis begins automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (e. g. IP address, length of stay of the website visitor on the website or mouse movements performed by the user). The data collected during the analysis are transferred to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

The data are stored and analyzed on the basis of art. 6(1f) of the GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and spam. If the respective consent was requested, the processing takes place solely on the basis of art. 6(1a) of the GDPR and § 25(1) of the TTDPA, provided the consent covers the storage of cookies or access to information in the end device of the user (e. g. device fingerprinting) in accordance with the TTDPA. This consent can be withdrawn at any time.

You can find more information on Google reCAPTCHA in Google's data privacy policy and Google's terms of use at the following links: policies.google.com/privacy and policies.google.com/terms.

3.21 CloudFlare

We use the service "Cloudflare". It is provided by Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (referred to as "Cloudflare" in the following).
Cloudflare provides a globally distributed Content Delivery Network with DNS. The information is transferred technically between your browser and our website via Cloudflare's network. This enables Cloudflare to analyze the data traffic between your browser and our website and serve as filter between our servers and potentially malicious data traffic from the Internet. Cloudflare may also use cookies or other technologies to recognize Internet users, which, however, are used solely for the purpose described here.

The use of Cloudflare is based on our legitimate interest in the provision of our web offer in a manner that is as trouble-free and secure as possible (art. 6(1f) of the GDPR).

Data transmission to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.cloudflare.com/privacypolicy/.

You can find further information on the topic of security and data privacy at Cloudflare here: https://www.cloudflare.com/privacypolicy/.

Order processing
We have concluded a contract on order processing (OPC) for the use of the aforementioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3.22 Delphi dVinci

If you apply for a job on this website, the personal data you provide for the application will be collected via our applicant management system. To manage the applications, we use the system of d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg, Germany ("d.vinci"). To ensure data protection, Zentis has concluded an order processing contract with d.vinci.

The purpose of the data processing is to carry out the application process. The legal basis is therefore art. 6(1a and b) of the GDPR.
More information can be found in the data privacy information of the provider at the following URL: https://www.dvinci.de/datenschutz/.

3.23 Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to place advertisements in the Google search engine or on websites of third parties if the user enters certain search terms in Google (keyword targeting). Furthermore, targeted advertisements can be placed on the basis of the existing user data at Google (e. g. location data and interests) (target group targeting). We, as website operators, can evaluate these data quantitatively by, for example, analyzing which search terms have resulted in the placement of our advertisements and how many advertisements have generated the corresponding clicks.

Data transmission to the USA is based on the standard contractual clauses of the EU Commission. You can find details here:https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/

3.24 Marketing Solutions (formerly LinkedIn Ads)

On our website we use "Marketing Solutions (formerly LinkedIn Ads)", a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2 in Ireland (referred to as “Marketing Solutions” in the following).

We use Marketing Solutions for marketing and optimization purposes, in particular to analyze the use of our Internet presence and continuously improve individual functions and offers as well as the user experience. The statistical evaluation of user behavior enables us to improve our offer and make it more interesting to you as the user.

You can find more information about data privacy at LinkedIn here: https://www.linkedin.com/legal/privacy-policy.

3.25 Google AdSense

This website uses Google AdSense, a service for the integration of advertisements. It is provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We can use Google AdSense to display target advertisements of third companies on our site. The content of the advertisements is based on your interests, which Google determines on the basis of your previous user behavior. Furthermore, context information, such as your location, the content of the visited website or the Google search terms you entered, is also taken into account when selecting a suitable advertisement.

Google AdSense uses cookies, web beacons (invisible graphics) and similar recognition technologies. It can be used to evaluate information, such as the visitor traffic on these pages.

The information collected by Google AdSense about the use of this website (including your IP address) and the delivery of advertising formats is transmitted to and stored by a Google server in the USA. This information can be forwarded from Google to contractual partners of Google. However, Google will not store your IP address together with other data stored by you.

Data transmission to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/controllerterms/mccs/

3.26 Marketing platform (formerly DoubleClick)

On our website we use the Google marketing platform, a web analysis and advertising service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The marketing platform uses cookies to place advertisements relevant to the user, improve the reports on the campaign performance or prevent a user from seeing the same advertisements several times. Google uses a cookie ID to register which advertisements are to be placed and in which browser and, in this way, prevent it from being shown several times.

Furthermore, the marketing platform can use cookie IDs to register what are referred to as conversions, which means whether a user sees an advertisement and subsequently visits the website of the advertiser and purchases something there. According to Google, marketing platform cookies do not contain any personal information.

Your browser automatically sets up a direct connection to Google's server. We have no influence on the scope and further use of the data collected by Google due to using this service. According to Google, Google obtains the information that you have opened the respective part of our website or clicked on one of our advertisements due to the integration of the marketing platform. If you have registered with a service of Google, Google can assign the visit to your user account. Even if you have not registered with Google or have not logged in, it is still possible for your provider to find out your IP address and store it. When using the marketing platform, personal data may be transferred to Google's server in the USA.

You can find more information on data privacy in connection with Google's marketing platform at marketingplatform.google.com/about/ and on data privacy at Google in general at: https://www.google.com/policies/privacy/.

4. Collection and processing of data provided on a voluntary basis

4.1 Recruitment portal

4.1.1 General

You can submit speculative job applications or apply for specific jobs via our careers page. We provide a recruitment portal which you can use to do this. Your data (surname, first name, home address, CV, professional history, references, records of qualifications, information relating to any disability, letters) will be processed for the purposes of recruitment only for the job for which you have applied (art. 6(1b) of the GDPR, section 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG)) or, within the limits of the consent you have given us, for other jobs (art. 6(1a) of the GDPR). You can revoke your consent to the processing of your application data at any time. No automated preliminary decision making regarding your application is carried out.

4.1.2 Involvement of third-party providers in the application process

To simplify the application process, we provide the following options for entering data supported by third parties:

CV parsing,
using your LinkedIn profile,
using your XING profile, or
upload from your Dropbox.

You are not required to use these options to apply for a job with us and can fill out the form manually. If you do this no data will be processed by third parties.

CV parsing is a functionality that automatically extracts information relevant for your application from a CV you have uploaded and inserts it into the entry fields in the application form. To use CV parsing, click the “Upload CV / Resume” button and follow the instructions shown. We provide this service using an applicant tool provided by d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg, Germany (“d.vinci”). To provide this tool and the CV parsing function in particular, d.vinci uses a product by Textkernel BV, Nieuwendammerkade 28/a17, 1022 AB, Amsterdam, Netherlands. We have entered into a data processing agreement (Article 28 GDPR) with d.vinci. d.vinci is bound by our instructions and will not use your data for its own purposes. Textkernel BV is a subprocessor of d.vinci and is bound in relation to processing of your data by d.vinci’s instructions, and therefore indirectly by our instructions, under a processing agreement in accordance with Article 28 GDPR.

To send data from your LinkedIn profile, click the “Use LinkedIn Profile” button when completing your application and follow the instructions shown. If you have a LinkedIn profile, LinkedIn will send us the data they hold at your request. LinkedIn collects and processes data itself, and if you use this option may link that data to your existing profile. Data transmission to LinkedIn is based on art. 6(1f) of the GDPR. We have a legitimate interest in simplifying our application process by incorporating widely used services to make us more attractive to applicants. LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. You will find information about privacy at LinkedIn at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

To send data from your XING profile, click the “Use XING Profile” button when completing your application and follow the instructions shown. If you have a XING profile, XING will send us any data requested by the application form that you have entered into XING. The application form will then be populated with your data, and you can change or add to it as you wish. XING will also collect and process data itself, and if you use this option it may link that data to your existing account. Data transmission to XING is based on art. 6(1f) of the GDPR. We have a legitimate interest in making our application process attractive and easy to follow. XING is a widely used career and business network and we include it in order to appeal to as many applicants as possible and to remove obstacles to submitting an application. XING is provided by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. You can find information about how XING SE processes data at https://privacy.xing.com/en/privacy-policy.

To send us a CV that you have uploaded to Dropbox, click the “CV via Dropbox” button when completing your application and follow the instructions shown. At your request, Dropbox will then send us the CV you have uploaded. Dropbox collects and processes data itself, and if you use this option may link that data to your Dropbox account. Data transmission to Dropbox is based on art. 6(1f) of the GDPR. We have a legitimate interest in simplifying our application process by incorporating widely used services to make us more attractive to applicants. Dropbox is provided by Dropbox International Unlimited Company, One Park Place, Floor 5, Upper Hatch Street, Dublin 2, Ireland. You can find information about data privacy at Dropbox at https://www.dropbox.com/privacy.

4.1.3 Note regarding sensitive data

You are expressly advised that job applications, and particularly CVs, references, and other data you provide to us, may contain particularly sensitive data concerning mental and physical health, racial or ethnic origin, political opinions, religion or philosophical beliefs, membership of a trade union or political party, and sex life.

If your online application contains information of this kind, you expressly authorize us to process this data for the purpose of your application. This data will be processed in compliance with this Privacy Policy and other relevant legislation. Depending on your application, we may transmit your data to associated company locations in third countries. The legal basis for this is art. 49(1b or c) of the GDPR.

4.1.4 Erasure

Data transmitted to us will be erased 6 months after the end of recruitment for the role your application relates to. We do not create an applicant pool. Your data may be stored for longer than this if erasure is precluded by statutory provisions, if continued storage is required for evidentiary purposes, or if you have given your consent.

4.1.5 Consent to EMAG Group-wide application

You can consent to the use of your application across the EMAG Group by clicking on the “Consent to Extended Use” check box. Your personal data will then be able to be shared within the EMAG Group. This comprises the following companies:

EMAG Maschinenfabrik GmbH, Austr. 24, 73084 Salach, Germany
EMAG Salach GmbH, Austr. 24, 73084 Salach, Germany
EMAG KOEPFER GmbH, Siederstr. 49, 78054 Villingen-Schwenningen, Germany
eldec Induction GmbH, Otto-Hahn-Str. 14, 72280 Dornstetten, Germany
EMAG LaserTec GmbH, Am Flugplatz 1, 73540 Heubach, Germany
EMAG ECM GmbH, Am Flugplatz 1, 73540 Heubach, Germany
EMAG Zerbst Maschinenfabrik GmbH, Norbert-Heßbrüggen-Str. 11, 39261 Zerbst, Germany
CNC-Technik Weiss GmbH, Neckarstraße 10, 72666 Neckartailfingen, Germany
EMAG Milano, Via die Mille 31, 20098 San Giuliano Milanese, Italy
EMAG Salach GmbH - Sucursal en España, Pasaje Arrahona, n° 18, Polígono Industrial Santiga, 08210 Barberà del Vallès (Barcelona), Spain
EMAG Salach GmbH - Succursale en France, 5 Avenue de L'Europe, 18150 La Guerche sur L'Aubois, France
EMAG SU S.r.l., Via die Mille 31, 20098 San Giuliano Milanese, Italy
EMAG LLC, 38800 Grand River Avenue, Farmington Hills, MI 48335, USA
EMAG (China) Machinery Co., Ltd., Sino-German Advanced Manufacturing Technology International Innovation Park, Building No.2, No. 101, Chenmeng Jing Road, 215400 Taicang, Jiangsu, China
EMAG (China) Machinery Co., Ltd, No. 2888, Nan Er Huan East Road, Economic Development Zone, 213200 Jintan, Changzhou City, Jiangsu Province, China
EMAG (Chongqing) Machinery Co., No. 10th Lailong Road, Yongchuan District, 402160 Chongqing, China
EMAG India Pvt. Ltd., No. 17/G/46-3, Industrial Suburb, 2nd Stage, Yeshwantpur, 560022 Bangalore, India
EMAG Korea Ltd., Rm204, Biz center, SKn Technopark, 190-1, Sangdeawon-dong, 13207 Seongnam City, Gyeonggi-do, South Korea
EMAG do Brasil Ltda., Edificio Neo Corporate Offices, CJ 1503, Rua Enxovia, 472, 04711-030 São Paulo, Brazil
EMAG - Mexico, Av. Hercules 301 Nave 1, Poligono Empresarial Santa Rosa, 76220 Santa Rosa Jauregui, Querétaro, Mexico

This will allow your application to appear in searches of other EMAG companies for suitable applicants for other jobs in the future. Section 5 applies to companies from countries outside the European Union. If a vacancy within the EMAG Group matches your profile, the relevant manager will be granted access to your data. By giving your consent, you expressly agree that EMAG Group staff may contact you in connection with a recruitment search. We will store your data until the recruitment process is complete, but for no longer than one year. You may withdraw your consent with future effect at any time by sending an email to privacynoSpam@emag.com.

4.2 Newsletter

You can subscribe to our newsletter, which we use to provide information about current offers that may be of interest to you. These include new products in the metal manufacturing systems field, news about this industry, and information about events.

We use the “double opt-in” process for subscriptions to our newsletter. This means that after you have subscribed, we will send an email to the email address provided by you asking you to confirm that you want to receive the newsletter. If you do not confirm your subscription within 24 hours, your information will be blocked and then automatically erased after one month. We also store the IP addresses you use to subscribe and confirm and the time of subscription and confirmation. The purpose of this process is to prove that you have subscribed to the newsletter and to provide clarification in case of misuse of your personal data.

The only information you must provide to receive our newsletter is your email address. Other data identified separately is provided on a voluntary basis only and will be used to address you personally. After you have confirmed, we will store the data you enter in order to send you the newsletter (the legal basis is art. 6(1a) of the GDPR).

You can withdraw your consent to receiving the newsletter in future and unsubscribe at any time. You can withdraw your consent by clicking on the link that appears in every newsletter e-mail, or directly on our website (click here).

4.3. Livestorm

For our webinars, we use the service from Livestorm, 24 rue Rodier, 75009 Paris, France. For registration via Livestorm, we usually record your surname and first name and your e-mail address. By registering via the service, you enable us to send you all information required to participate in our webinars. For more information, please visit the data privacy policy of the provider: https://livestorm.co/privacy-policy/.

4.4 Contact form

If you send us queries via the contact form, your entries from the request form, including the contact data you entered there, will be stored by us for the purpose of processing the query and in case of subsequent questions.

The following data are collected:

Company
Surname
E-mail address
Content of the message you are sending us

Further data can be disclosed to us on a voluntary basis.

These data are processed on the basis of art. 6(1b) of the GDPR, provided your request is in connection with the fulfillment of a contract or is required to take pre-contractual measures. In all other cases, the processing is based on your consent (art. 6(1a) of the GDPR). This consent can be withdrawn at any time.

The data you enter on the contact form are retained by us until you request their erasure or withdraw your consent to their storage or the purpose for storing the data no longer exists (e. g. after the complete processing of your request). Any mandatory legal provisions – in particular retention periods – shall remain unaffected. Applications should be submitted via our applicant management system (d.vinci), not the contact form.

5. Data security

All information that you send to us will be stored on servers within the European Union. Unfortunately, transmission of data over the Internet is not completely secure, and we are therefore unable to guarantee the security of data transmitted to our website via the Internet. However, we have put in place technical and organizational measures to protect our website and other systems against loss and destruction of your data and to prevent your data from being accessed, modified, or distributed by unauthorized persons. In particular, we encrypt your personal data for transmission. We do this using the SSL (Secure Socket Layer) and TLS (Transport Layer Security) encryption systems.

Data is transmitted to countries outside the European Union (“third countries”) only if the recipient has provided appropriate guarantees ensuring an adequate level of data protection (Article 46 GDPR). You can request a copy of these guarantees from privacynoSpam@emag.com.

6. No disclosure of your personal data

We shall not disclose your personal data to third parties unless you give us your consent (see art. 6(1a) of the GDPR) or we are authorized or required to do so by law and/or by order of the authorities or the courts. In particular, we may be required to provide information for the purposes of criminal proceedings, hazard prevention or enforcement of intellectual property rights.

7. Duration of storage

Your data will be stored for no longer than is necessary for the purpose of the existing customer relationship, unless you have consented to further processing or we have a legitimate interest in further processing. In these cases, we will process your data until you withdraw your consent or you object to processing on the basis of our legitimate interests. Notwithstanding this, we are required under commercial and tax law to retain your address and your payment and order data for a period of ten years.

8. Data privacy and third party websites

The website may contain hyperlinks to and from websites operated by third parties. If you follow a hyperlink to one of these websites, please note that we can accept no liability for and give no guarantees in respect of external content or privacy policies. Please ensure that you are aware of the applicable privacy policy before sending personal data to such websites.

9. Amendments to this data privacy policy

We reserve the right to change this Privacy Policy with future effect at any time. The latest version is available from the website. Please visit the website regularly to view the current Privacy Policy.

10. Your rights and contact information

You have the right to information, rectification, data portability, erasure and restriction of processing, and the right to object to processing.

Right to information

You have the right to obtain information at any time about any personal data stored by us.

Right to withdraw any consent given

You have the right to withdraw any consent given for the processing of personal data at any time with future effect. If you withdraw your consent, we shall immediately erase the data concerned unless there is a legal basis for further processing. The lawfulness of the processing based on consent in the period before the withdrawal of consent shall not be affected by the withdrawal of consent.

Right of objection

If we process your personal data on the basis of our overriding legitimate interest after balancing the interests, you have the right at any time with future effect to file an objection to this processing for reasons due to your specific situation.

If you exercise your right to object, we shall end the processing of the data concerned. However, we reserve the right to further process the data if we can demonstrate compelling legitimate grounds for the processing that override your interests and fundamental rights and freedoms or if the processing serves the purpose of asserting, exercising or defending legal claims.

If your personal data are processed by us for the purpose of direct marketing, you have the right at any time to file an objection against the processing of any personal data that concerns you for the purpose of such advertising.

You are welcome to contact our customer service team at any time at communications@emag.com or at the address specified in section 1. If you have any questions, comments or complaints, feel free to contact our data protection officer at any time by e-mail at privacy@emag.com.

Right to data portability

You have the right to apply for your personal data to be transferred by us to a different place.

Right to correction, erasure or restriction of processing

You have the right to have your personal data corrected or erased or have their processing restricted.

Right to complain

You have the right to complain to a supervisory authority or our company, provided you have a reason to do so. To assert rights against our company, please get in touch with the contacts listed at the end of this data privacy policy.

The supervisory authority responsible for us is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, 70025 Stuttgart, Germany, tel. +49 711 6155 410, poststellenoSpam@lfdi.bwl.de.

More about the EMAG Group

Media Center

Careers at EMAG

Sustainability at EMAG