Data protection policy

The operators of these pages are very serious about the protection of your personal data. We treat your personal data as confidential and in accordance with data protection regulations as well as with this privacy policy.

Edit your Cookie Preferences

Please note than a 100% protection of data transmitted via the Internet cannot be guaranteed. We have taken the necessary technical and organisational measures to ensure the most complete protection of the personal data transmitted via our website.

With the following statement, we would like to inform you of the details of how your personal data are handled. The responsible party in the sense of the statement is

SFC Energy AG
Eugen-Sänger-Ring 7
85649 Brunnthal-Nord

Tel: +49 89 67 35 92-0
Fax: +49 89 67 35 92-169
Email:

Executive Board: Dr. Peter Podesser (CEO), Daniel Saxena (CFO), Hans Pol (CSO)

Data Security Officer:
Kivanç Semen
DataCo GmbH, Dachauer Str. 65, D-80335 Munich
email:

1. Explanation of Terms

To ensure that our privacy policy is also understandable, below we will present the basic terms of the data protection law that are key to the purposes of this privacy policy in accordance with the definitions of the General Data Protection Regulation (GDPR). “Personal data” are all information relating to an identified or identifiable natural person (hereinafter “person concerned”); A natural person is considered identifiable who can be directly or indirectly identified, in particular via allocation to an identifier, such as a name, an ID number, location data, an online ID or one or more special characteristics that are the expression of the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person;

A “person concerned” is any identified or identifiable natural person whose personal data is processed by the party responsible for the processing. “Processing” is any process carried out with or without the help of automated methods or any such series of processes relating to personal data, such as collection, recording, organisation, arranging, saving, adjustment or modification, reading, querying, use, disclosure through transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction;

“Restriction of processing” is the marking of saved personal data with the aim of restricting its future processing;

“Profiling” is any kind of automated processing of personal data that consists of using this personal data to assess certain personal aspects relating to a natural person in particular to analyse or predict aspects relating to job performance, financial situation, health, personal preferences, interests, reliability, behaviour, place of residence or location change of this natural person;

The “responsible party” is the natural or legal person, authority, institution or other body that decides alone or together with others about the purposes and means of processing personal data; If the purposes and means of this processing are stipulated by union law or the law of the member states, then the responsible parties or the determined criteria for its appointment may be provided under union law or the law of the member states;

A “recipient” is a natural or legal person, authority, institution or other body to whom personal data is disclosed, regardless of whether this is a third party or not. Authorities who may receive personal data as part of a certain investigation order according to union law or the law of the member states, however, are not considered recipients. The processing of this data by the authorities mentioned occurs in accordance with the applicable data protection regulations according to the purposes of processing;

A “third party” is a natural or legal person, authority, institution or other body, except for the person concerned, the responsible party, the order processor and the people who are authorised under the direct responsibility of the responsible party or the order processor to process the personal data;

“Consent” of the person concerned is any voluntary expression of will for the certain case given in an informed manner and unambiguously in the form of a declaration or other clear confirmatory action by which the person concerned expresses understanding with the provision of the personal data concerning him or her.

2. Data protection

In general, it is possible to use this website without specifying personal information. If personal data (such as your name, address, telephone number or email address) are recorded on our sites or data is recorded on an order page belonging to our company for the purpose of processing your order, this is always done, wherever possible, on a voluntary basis. This data will not be passed on to third parties without your express permission. As part of processing your order, data are only disclosed to third parties to the extent necessary to carry out the order. It is unavoidable that your address will be sent to the shipping company entrusted with the shipment and your payment data will be sent to the company commissioned with the payment transaction, in particular the credit institutes commissioned to carry out the payment.

a. Data processing when using the website

The following data processing are automatically saved while using our website and automatically deleted again:

  • Your IP address at the time of the request
  • The date and time of the access
  • Website from which the access occurs (referrer URL)
  • Browser used, operating system and name of the access provider These data are collected for the purpose of ensuring a smooth convenient use of the website and to be able to check the system security and system stability. Article 6 (1) sentence 1 lit. F GDPR is the legal basis for the data processing.

b. Data processing when using our contact form

To get in touch with us easily, we provide you a contact form at the URL https://www.sfc.com/en/contact/. You can get in touch with us by using this contact form. To do so, you must at least specify a valid way of contacting you. We recommend contact by email. Additional information is voluntary, i.e. you can enter this data, but it is not required to make contact. You can always reject to the use of your data for the purposes of contact with immediate effect. The data processing occurs for contacting you. Article 6 (1) sentence 1 lit. a GDPR is the legal basis, since the specification of data and establishing of contact are based on your voluntarily given consent.

c. Data processing in the context of ordering goods, concluding warranties and registrations for promotion campaigns

No separate registration is required in connection with the ordering of goods and the conclusion of warranty agreements for certain goods. A separate registration is required in connection with a registration for a promotion campaign. To place an order/registration, the following personal data must be provided:

  • Title/first name/surname/address
  • Email address
  • Telephone number (landline or mobile)

These data are collected for the purpose of being able to identify you as a customer, for processing your order, corresponding with you, invoicing, checking and handling claims, such as payment of the agreed purchase price or settling a warranty claim or providing warranty services, or for managing customer data.

By submitting this data, you consent to the processing of these data. You will be informed of this separately as part of the ordering process. Data processing occurs in the context of your order and is required to process the order and fulfil the obligations from the purchase contract or the contract regarding the provision of warranty services. Article 6 (1) sentence 1 lit. c GDPR is the legal basis.

These data are deleted again as soon as they are no longer needed. This is the case at the latest when all legal retention obligations have expired, especially also the tax and commercial obligations of retention and documentation.

Your personal data are only disclosed to third parties when they are disclosed to service providing companies involved in the contract implementation, namely the logistics companies commissioned with the delivery and the credit institutes and credit card providers handling the payment execution. By submitting this data, you consent to the processing of these data. You will be informed of this separately as part of the ordering process. A disclosure of your data for purposes other than those mentioned without your express consent only occurs if this is expressly permitted by the law. Overall, we only disclose your data to third parties if

  • you have given your express consent to do so according to article 6 (1) sentence 1 lit. a GDPR, or
  • the disclosure is required according to article 6 (1) sentence 1 lit. f GDPR to assert legal claims or for legal defence, and there is no reason to assume that you have a predominant legitimate interest in the non-disclosure of your data, or
  • there is a legal obligation to disclose according to article 6 (1) sentence 1 lit. c GDPR, or
  • this is required according to article 6 (1) sentence 1 lit. b GDPR for the processing of contractual relationships with you.

As part of this ordering process, your consent is obtained to disclose your data to third parties.

d. Data processing when ordering and using our newsletter

Under the URL

https://www.sfc.com/en/newsletter/

you can order our free newsletter. You must specify your email address for this purpose. Additional information is voluntary, i.e. you can enter this data, but it is not required to send the newsletter.

After ordering the newsletter, you will receive an email containing a link that you can use to confirm the sending of the newsletter to you. The newsletter will not be sent without this additional declaration of consent (double opt-in).

You can always object to the use of your email address for the purposes of sending the newsletter with immediate effect.

The data processing occurs for the purposes of sending the newsletter to you. Article 6 (1) sentence 1 lit. a GDPR is the legal basis, since the specification of data and sending of the newsletter are based on your voluntarily given consent.

The newsletter we send out contains a small image file that is reloaded by our server when the newsletter is opened (so-called tracking pixel). This lets us know whether and when the newsletter was opened. In this way, we obtain information about which recipients have opened the newsletter. Only statistical data is collected that has no direct relation to a certain person or a certain email address.

e. Data protection notice for applicants

In accordance with the provisions of Articles 13 and 14 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of personal data transmitted by you as part of the recruitment process and any personal data collected by us and your rights in this regard. To ensure that you are fully informed about the processing of your personal data as part of the process, please take note of the following information.

Your personal data that we process

  • Gender
  • Title of address
  • First name and surname
  • Your address 
  • Date of birth
  • Telephone number
  • E-mail address
  • Earliest start date
  • Desired salary
  • Source of application
  • School education, professional qualifications and further training
  • Skills and experience
  • Your photo  
  • Curriculum vitae
  • Cover letter, certificates and other documents
  • Further information in your application
  • Other data that you share with us during the application process

Sources from which your personal data originates

We have either collected the above-mentioned personal data from you or it originates from personnel service companies (recruitment agencies, temporary employment agencies).

Purposes of processing and their legal basis

Your personal data is processed for the following purposes:

  • Carrying out the application process and deciding on the establishment of the employment relationship
  • Communication (telephone, e-mail)
  • Implementation of a notification system through which interested parties are given the opportunity to be informed in the event that a position of interest to them becomes available, so-called job alert (voluntary)
  • Implementation of pre-contractual actions (initiation of the employment relationship)
  • Assertion, exercise or defense of legal claims arising from the application process

Processing for the purpose of asserting, exercising or defending legal claims or in the case of actions of the courts - Art. 6 para. 1 sentence 1 lit. f GDPR, Art. 9 para. 1 lit. f GDPR
If necessary, your data will be processed for the purpose of asserting, exercising or defending legal claims or in the case of actions of the courts pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, Art. 9 para. 1 lit. f GDPR.

Processing on the basis of consent - Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Art. 7 GDPR, Art. 88 para. 1 GDPR in conjunction with Art. 26 para. 2 BDSG
If you have given your consent to data processing, your data will be processed in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with Art. 7 GDPR, Art. 88 para. 1 GDPR in conjunction with. Art. 26 para. 2 BDSG.

Decision on the establishment of the employment relationship Art. 6 para. 1 sentence 1 lit. b GDPR, Art. 88 para. 1 GDPR in conjunction with Art. 26 para. 1 BDSG
We process your data in order to make a decision on the establishment of the employment relationship. If you are hired by our company, your data will be processed for the purpose of implementing and terminating the employment relationship. Separate information about the processing of your personal data will be provided for this purpose.

Processing on the basis of legitimate interest - Art. 6 para. 1 sentence 1 lit. f GDPR
Insofar as the processing is carried out to safeguard a legitimate interest of us or a third party and your interests or fundamental rights and freedoms do not outweigh the first-mentioned interest, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for data processing. Our legitimate interest arises in particular from the following reasons:

  • The proper execution and optimization of the application process
  • Assertion, exercise or defense of legal claims

Recipients or categories of recipients of the personal data

As part of the processing of your personal data, we may pass on your personal data to the following recipients:

  • Within our company, exclusively to the departments and persons who need this data to fulfill contractual and legal obligations or to implement our legitimate interest
  • Human Resources
  • External employees / freelancers
  • Processors

Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfill legal obligations or if we have your consent.

In addition, your personal data may be transferred to the following service providers based in a country outside the EU/EEA:

  • Microsoft Corporation In the case of processors and service providers outside the EU/EEA, your above-mentioned personal data will only be processed if this is the subject of our standard data protection clauses with these recipients in accordance with Art. 46 para. 2 lit. c GDPR.

Transfer of personal data to a third country

In principle, the personal data collected and generated during the provision of relevant products and services is stored on our servers in the European Union. Since the providers of our software solutions, among others, offer their products and/or services on the basis of available resources and servers worldwide, your personal data may be transferred to other jurisdictions outside the European Union and the European Economic Area or accessed from such a jurisdiction outside the European Union. In particular, personal data is transferred to the third country USA within the meaning of Art. 15 para. 2 GDPR. In order to ensure the continuation of the necessary level of protection when transferring data to a third country, contractual measures are agreed for this purpose. The software provider has its registered office in the United States of America, which has not been recognized as providing an adequate level of data protection. In order to ensure suitable guarantees for the protection of the transfer and processing of personal data outside the EU, data is transferred to and processed by our service providers on the basis of suitable guarantees in accordance with Art. 46 ff GDPR, in particular through the conclusion of so-called standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR.

Duration of the storage of personal data

We will delete your personal data as soon as the stated purposes for its storage no longer apply, or you object to the use of your personal data (in the case of processing on the basis of legitimate interests) or you withdraw your previously granted consent. However, your personal data may also be stored beyond this, in particular in the following cases

  • if deletion is prevented by contractual, legal (in particular from HGB, StGB and AO) or statutory retention periods
  • for the assertion, exercise or defense of legal claims
  • if this is necessary under European or national law to fulfill a legal obligation to which we are subject.

The following retention periods in particular result for us from statutory provisions

  • After decision on non-appointment: 6 months retention period for application documents (Section 15 (4) of the General Equal Treatment Act (AGG), Section 224 of the Code of Civil Procedure (ZPO)).

If you are hired by our company, your personal data will be deleted when the purpose no longer applies, at the latest after termination of the employment relationship, provided that no statutory retention periods prevent deletion.

f. Cookies

Our websites use cookies. Cookies do not damage your computer and do not contain viruses. These are used to make our website more user-friendly, effective and safer. Cookies are small text files that are stored on your end device (computer, tablet, smartphone or similar) by your browser. We do not gain any knowledge about your identity through the cookies. There is linking of the data obtained from the use of cookies with the data you have entered and submitted.

Most of the cookies we use are so-called “session cookies”, which are automatically deleted after your visit. Other cookies will remain on your end device until you delete them. These cookies enable us to recognise your browser during your next visit.

You can set your browser in such a way that you are notified when cookies are used, you can allow cookies only in individual cases, only accept cookies in certain cases or generally prevent them and activate automatic deletion of cookies when the browser is exited. If cookies are deactivated, the functionality of this website may be limited.

The purpose of using cookies is to ensure a smooth functioning of our website and to statistically evaluate visits. Article 6 (1) sentence 1 lit. f GDPR is the legal basis for using cookies.

To enable you to set your desired data protection settings for your visit to our website as individually as possible, we have the following cookie categories: Necessary and statistics.

The necessary cookies are absolutely necessary for the operation of the site and enable, for example, security-relevant functionalities and basic functions such as page navigation. The website cannot function properly without these cookies.

In order to further improve our website, we collect anonymised data via Google Analytics for statistics and analyses. With the help of these statistics cookies we can, for example, determine the number of visitors and the effect of certain pages on our website and optimise our content. You can find further information on Google Analytics under point 2g.

Edit your Cookie Preferences

g. Google Analytics

We use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”) for the purposes of the demand-driven design and continuous optimisation of our sites. In this context, pseudonymised usage profiles are created and cookies (see above) are used. The information generated by the cookie about your use of this website, such as

  • browser type / version,
  • operating system used,
  • referrer URL (the previously visited site),
  • host name of the accessing computer (IP address),
  • time of the server request,

Is sent to a Google server in the US and stored there. The information is used to evaluate the website use in order to compile reports about website activities and to provide additional services associated with the website and Internet use for the purposes of market research and demand-driven design of these websites. This information may also be transferred to third parties if this is legally prescribed or if third parties process this data on behalf of Google. In no case will your IP address be combined with other data by Google. The IP addresses are anonymised so that no assignment is possible (IP masking).

You can prevent the installation of cookies through the corresponding settings in your browser software. However, we would like to point out to you that in this case you may not be able to fully use all functions of our website.

You can also prevent the recording of the data generated by the cookies or data relating to your use of the website (including your IP address) from as well as the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on, especially for browsers on mobile end devices, you can also prevent the recording through Google Analytics by clicking on the aforementioned link. There is an opt-out cookie that prevents the collection of your data when you visit our website in the future. The opt-out cookie only works in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you have to set the opt-out cookie again.

You can find additional information about data protection related to Google Analytics under the following link in the Google Analytics Help section: https://support.google.com/analytics/answer/6004245?hl=de

The purpose of using Google Analytics is to statistically evaluate visits to our website. Article 6 (1) sentence 1 lit. f GDPR is the legal basis for using Google Analytics.

h. Google Fonts

Scope of personal data processing
Google Fonts (https://www.google.com/webfonts) is used on this website to improve the visual display of various information. The fonts are transmitted to the browser cache when accessing the page so that they can be used for the display. If the browser does not support Google Fonts or prevents access, the text will be displayed in a standard font.

Cookies will not be stored on the website visitor’s computer when the page is accessed. Data that is transmitted in connection with accessing the page will be sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. It will not be linked to data that is collected or used in connection to the parallel use of authenticated Google services such as Gmail.

The browser IP address of the visitor’s device will also be stored by Google in anonymised form. For more information about Google Fonts, visit https://developers.google.com/fonts/faq and read Google's privacy statement at https://www.google.com/policies/privacy/

Legal basis for the processing of personal data
The legal basis for data processing is art. 6(1)f of the GDPR. Legitimate interest consists of function without errors and attractive display of the website.

Purpose of data processing
This is necessary so that your browser can also display a visually improved display of our texts. If your browser does not support this feature, a standard font will be used by your computer to display it.

Duration of storage
We do not have any information about the duration of storage at our order processor.

Options for objection and removal
You can set your browser so that the fonts are not loaded by the Google servers (e.g. by installing add-ons like NoScript or Ghostery for Firefox). If your browser does not support Google Fonts or if you block access to the Google servers, the text will be displayed in the system's default font.

i. Pardot Marketing Automation System (“Pardot MAS”)

We use the Pardot Marketing Automation System ("Pardot MAS"), a special software for collecting and evaluating the use of a website by website visitors and for sending newsletters. When visiting this website, the Pardot MAS captures your click path and creates an individual usage profile using a pseudonym. For this purpose, cookies are used, which allow recognition of your browser. However, you can deactivate the creation of pseudonymised user profiles at any time by configuring your Internet browser so that cookies of the domain "pardot.com" are not accepted. However, this may result in some limitations in the features and usability of our offering. In order to provide you with an offer or product information that is as interesting as possible and to the extent your consent to it, it is possible to merge your personal data with the data of a pseudonymised user profile via the set cookies, if you - for example by ordering a newsletter or completing a form - provide personal information. You may opt-out to this use of your personal information, such as name and address information, in writing or by e-mail at at any time. You can revoke your consent at any time with effect for the future. Newsletters sent with Pardot MAS contain so-called web beacons. These are smallest graphics that allow user behavior, such as opening and reading emails and clicking links to analyze. This allows us to make our content offered more relevant and interesting to you.

j. SSL encryption

We use SSL encryption to protect the data transmitted between you and us. You can identify the use of the encryption if the letters “https” are shown in the entry window of your browser at the start of the URL shown. If this is the case, the data between you and us is protected from third party access through the use of special encryption.

k. General information about data security on the Internet

Please note that data transmission via the internet (e.g. when communicating by e-mail) is subject to security gaps. Complete protection of data from access by third parties is not possible.

l. LinkedIn Insight Tag

This website uses the Insight Tag from LinkedIn. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Data processing by LinkedIn Insight Tag
With the help of the LinkedIn Insight Tag, we receive information about visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyse the key professional data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus better tailor our site to the respective target groups. Furthermore, we can use LinkedIn Insight Tags to measure whether visitors to our websites make a purchase or take any other action (conversion measurement). Conversion measurement can also take place across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function that allows us to display targeted off-site advertising to visitors to our website, whereby, according to LinkedIn, no identification of the advertising addressee takes place.

LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymised). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymised data is then deleted within 180 days. The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the collected personal data of website visitors on its servers in the USA and use it in the context of its own advertising measures. For details, please refer to LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.

Legal basis
The use of LinkedIn Insight is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

Objection to the use of LinkedIn Insight Tag
You can object to the analysis of usage behaviour and targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To avoid a link between data collected on our website by LinkedIn and your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

3. Information, correction, deletion, restriction of processing, transmission, revocation, objection, complaint (rights of the party concerned)

a. Pursuant to article 15 GDPR, you have the right to demand information about your personal data that we processed. In particular, you can demand information about the processing purposes, the category of the personal data, the categories of recipients to whom your data has been or is being disclosed, the planned duration of data storage, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of objection, the origin of y our data, provided this was not collected by me, as well as about the existence of an automated decision-making process, including profiling and any meaningful information about their details.

b. Pursuant to article 16 GDPR, you have the right to demand the immediate correction of incorrect or incomplete personal data that we have stored.

c. Pursuant to article 17 GDPR, you have the right to demand the deletion of your personal data that we have stored, unless processing is required

  • to exercise the right to freedom of expression and information;

  • to fulfil a legal obligation;

  • for reasons of public interest or

  • to assert, exercise or defend legal claims.

d. Pursuant to article 18 GDPR, you have the right to demand the restriction of the processing of your personal data, insofar as

  • you dispute the accuracy of the data;

  • the processing is unlawful, but you reject its deletion;

  • we no longer need the data, but you need it for asserting, exercising or defending legal claims or

  • you filed an objection against the processing in accordance with article 21 GDPR. e. Pursuant to article 20 GDPR, you have the right to receive your personal data, which you provided us, in a structured, standard and machine-readable format or to request the transfer to another responsible party.

f. Pursuant to article 7 (3) GDPR, you have the right to revoke a consent given to us at any time. This means that we may no longer continue with the data processing on which this consent was based (see section 4).

g. If your personal data are processed for the purposes of safeguarding legitimate interests according to article 6 (1) lit. f GDPR, you are entitled to object to the processing according to article 21 GDPR if reasons exist that result from your particular situation or if the objection to the use of your personal data is based on the purposes of direct mail advertising (see section 4).

h. Pursuant to article 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

4. YouTube

Our website uses plugins from the YouTube site operated by Google. The sites are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages which is equipped with the YouTube plugin, a connection with the YouTube servers will be established. This will tell the YouTube server which of our pages you have visited.

If you are logged in to your YouTube account, you enable YouTube to allocate your surfing behaviour directly to your personal profile. You can prevent this by signing out of your YouTube account.

Further information on the use of user data can be found in YouTube’s data protection policy at: https://www.google.de/intl/de/policies/privacy

5. Exercising the right of revocation or right to object

If you would like to utilise your right of revocation and the right to object to the use of your personal data (section 3 f. and g.), please send us an email to .