ALLTEC Angewandte Laserlicht Technologie GmbH Privacy Policy
Effective Date October 14, 2022 (last updated July 14, 2022)

ABOUT THIS POLICY

ALLTEC Angewandte Laserlicht Technologie GmbH values your privacy and the protection of your personal data.  This policy (“Policy”)  explains how ALLTEC Angewandte Laserlicht Technologie GmbH its affiliates, subsidiaries or related companies, a full list of which can be located here (together, “ALLTEC Angewandte Laserlicht Technologie GmbH,”, “our”, “us,” or “we”), collects, uses, shares, transfers and processes data collected from or about you.

“Personal Data” is any information that can be used to directly or indirectly identify an individual or that can be reasonably expected to link to an individual.  This can include items such as name, address, telephone number, credit card details, email address, ID number, Internet Protocol (“IP”) address of an electronic device used by an individual, or other identifying code (even absent of other identifying information). Statistical and non-identifiable metric data are not considered Personal Data.

The ALLTEC Angewandte Laserlicht Technologie GmbH subsidiary, affiliate or related company with which you interact is, where applicable, the data controller (or equivalent under applicable law) responsible for the processing of your Personal Data. You can find a list of the relevant legal entities that act as data controllers in Appendix 1 to this Policy.

SCOPE

This Policy describes the types of Personal Data that we may collect, process or disclose about you and how you may govern this processing by exercising applicable legal rights.  This Policy applies to both online and offline information collection, including your use of websites or subdomains operated by us, any mobile applications, when we provide products and/or services to you or notify you about prospective items of interest and in other situations where you interact with us in-person, by telephone or by mail where this Policy is posted or referenced. 

There may be occasion where you have been provided with a circumstance-specific privacy notice that is separate from this policy, such as privacy notices for specific activities such as  Recruitment.  To the extent you were provided with a different notice, those notices apply and govern our interactions with you.  If you provide Personal Data about parties other than yourself, you are responsible for ensuring their knowledge of how we will process their personal data, and, where applicable, obtaining any necessary consents required in advance.

We are committed to processing Personal Data in accordance with applicable laws.  Please note that if you do not wish to provide your Personal Data to us, some products and/or services may become unavailable to you. Your use of any or all these platforms indicates you have been notified of our collection, use, transfer, and disclosure of your information as described in this Policy to the extent permitted by applicable law. 

YOUR INFORMATION

We connect with individuals for many different reasons. Those interactions may result in us directly or indirectly gaining access to Personal Data about you. The below table summarizes how we may collect, process, and use Personal Data, our legal basis for processing your information, and the potential recipients of your information.  Please note, not all instances may be applicable in all circumstances.   

GENERAL CATEGORIES OF PERSONAL DATA COLLECTED

The below table denotes the categories and sources of Personal Data that may be processed under this Policy in addition to the purposes and legal bases for such processing.  Please note that the items contained within this table may be shared, received or processed by ALLTEC Angewandte Laserlicht Technologie GmbH, our partners that assist us in providing the products or services or help us improve our marketing or administration, Healthcare Practitioners (“HCPs”), patients, persons with the legal right to access the Personal Data and Parties involved in potential business transactions.

HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT (HIPPA)

If you are a patient based in the US, please note that this Policy is distinct from your Healthcare Practitioner’s HIPAA Notice of Privacy Practices, which describes how your HCP uses and discloses individually identifiable information about your health that it collects, as well as any other privacy practices it applies. Personal Data we receive on behalf of your Healthcare Practitioner is not subject to this Policy

AGGREGATED, ANONYMIZED AND DE-IDENTIFIED DATA

ALLTEC Angewandte Laserlicht Technologie GmbH may process anonymised/de-identified data.  This is data for which the characteristics that can identify you, directly or indirectly, have been removed such that you are no longer identifiable, and this information is no longer considered Personal Data under data protection laws.  This includes in the United States the removal of identifiers from protected health information required under HIPAA, 45 CFR § 164.514(b)(2), for such data to be considered deidentified. We rely on our legitimate business interest, scientific or historical research and/or statistical purposes, consent or other purposes that may be required or allowed by law as the legal basis to anonymise Personal Data.

We may also obtain and use certain types of combined data sets such as demographic data for any purpose (“Aggregated Data”). Aggregated Data may be derived from your personal data but does not directly or indirectly reveal your identity. For example, we may aggregate certain information technology-related data of yours with others’ data to calculate the percentage of users accessing a specific feature on our website. We may use Aggregated Data for any purpose without restriction.  However, if we re-combine or re-connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Policy.

COMBINING INFORMATION

We combine information we collect on the website with information we receive from you in person, by email, or by other forms of communication. We also combine information you provide with information we obtain from third parties, service providers, publicly available sources and our subsidiaries, affiliates or related companies.

INFORMATION COLLECTED FROM CHILDREN

Our sites and apps are meant for adults. We do not knowingly collect Personal Data from children 17 years old or younger without permission from a parent or legal guardian. If you are a parent or legal guardian and think your child has given us information, you can email or write to us using the details in the ‘Contact Us’ section below.

INFORMATION STORAGE

We may transfer, process, and store your information to the US, Canada, India, European Union member states, the United Kingdom, or other countries. Our affiliates or other third-party service providers may also transfer, process, or store your information in the US or other countries. Our sites and businesses may be subject to US laws, which may not afford the same level of protection as those in your country.

CROSS BORDER DATA TRANSFERS

We may transfer your Personal Data to recipients in countries other than the country in which your Personal Data was originally collected. When we transfer your Personal Data in such a manner, we take steps for your data to be protected consistent with the laws and requirements in your country, including the requirements that apply to cross-border data transfers.  We implement appropriate technical and organizational measures to provide a level of security appropriate to the risk of protecting your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. As is the case with all websites, applications, products, and services, we unfortunately cannot guarantee security of the data collected at all times.

SALE OR TRANSFER OF DATA

If we are involved in a sale or transfer of all or some of our business assets or operations via a share or asset transaction, your personal data may be transferred to the acquiring organization who will be required to take at least the same or higher standards of care in the treatment of your Personal Data. Should such a sale or transfer occur, if required by law, you will be informed about this and may withdraw your consent to or, as applicable, instigate any other legally available rights as detailed in the “Rights and Choices” section of this Policy with regards to the processing and use of your Personal Data by the transferee.

COOKIES, WEB BEACONS AND OTHER TRACKING TOOLS

As outlined in the table above your interaction with our websites is an additional source for collecting your information.  We may use “cookies”, web beacons, and other technologies to help us evaluate and improve the content or functions of the products or services we provide.  We collect your information through several methods:

• Web beacons
• Pixels
• Tags
• Tracking Cookies
• Marketing Cookies
• Analytic Cookies
• Social Media Cookies

Our Cookie Policy provides more detailed information about this topic and how we use cookies to enhance your experience and better serve you.

THIRD PARTY LINKS AND TOOLS

We may link to other sites or apps on our platforms that we do not control. If you click on a third-party link, you will be taken to a platform we do not control. This policy does not apply to the privacy practices of that website or platform. Read other companies’ privacy policies carefully. We are not responsible for these third parties. Our site may also serve third party content that contains their own cookies or tracking technologies. We do not control the use of those technologies.

DATA RETENTION

We will retain Personal Data for as long as is necessary to carry out the purposes the Personal Data was collected for or for the period prescribed by applicable laws, whichever is longer.  In considering how long to retain your Personal Data the following are considered:

• The potential risk of harm if the data was subject to unauthorized use or disclosure;
• The volume and sensitivity of the Personal Data;
• Applicable legal requirements; and
• If circumstances have changed such that the purposes for which the Personal Data was collected can be achieved by other means.

When the retention of your Personal Data is no longer required we will delete or anonymize the data as per the details provided above.

Some jurisdictions such have provided individuals with rights in relation to the processing of their Personal Data. These rights are not available to everyone, and they do not necessarily apply in all contexts. Depending on the applicable law or the legal basis, you may have the right to:

• Object to the processing of your Personal Data;
• Request access to your Personal Data;
• Request correction of your Personal Data should your Personal Data be inaccurate, incomplete, or obsolete;
• Request erasure/deletion of your Personal Data;
• Withdraw your consent to future processing where we processed Personal Data on the basis of your consent;
• Request restrictions on the processing of your Personal Data, including restricting the sale of or sharing of your Personal Data;
• Request the transfer of your Personal Data to yourself or a third party;
• Opt-out of certain transfers to third parties.

To exercise a right that you believe you may be entitled to under applicable law you can contact us directly by email at datenschutzbauftragter@alltec-laser.com or in writing at ALLTEC Angewandte Laserlicht Technologie GmbH, Datenschutzbeauftragter, An der Trave 27-31, 23923 Selmsdorf, Germany. We may need to verify your identity before we fulfil your request or, under applicable law, we may refuse to action your submission. We shall notify you in a timely manner of such decisions or requirements as necessary.

California Residents. Our California Consumer Rights Notice provides an overview of how consumers in California receive certain privacy rights and protections.

Filing a Complaint. If you are not able to resolve a problem directly with us and wish to make a formal compliant, you can contact your local data protection authority or other enforcement authority.

If you have any questions about this Policy or our data practices, you can write to us at:

ALLTEC Angewandte Laserlicht Technologie GmbH
Datenschutzbeauftragter
An der Trave 27-31
23923 Selmsdorf
Germany

Alternatively, you can email us directly at datenschutzbauftragter@alltec-laser.com.

Click here for a table of applicable controllers and responsible entities.

POLICY UPDATES

From time to time we may change our privacy policies. The most updated copy will be found on our website. Please check our site periodically for updates.

We are pleased that you are interested in us and are applying or have applied for a position in our company. We would like to provide you with information below on the processing of your personal data in connection with the application.
 
Which of your data do we process? And for what purposes?
We process the data you have sent us in connection with your application in order to assess your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application process.
 
What is the legal basis for this?
The primary legal basis for the processing of your personal data during this application process is Section 26 BDSG-Neu in the version applicable as of 25.05.2018. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible.
 
Should the data be required for legal prosecution after the conclusion of the application process, if applicable, data processing may be carried out on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 (1) lit. f) DSGVO. Our interest then consists in the assertion or defense of claims.
 
How long is the data stored?
Data of applicants will be deleted after 6 months in case of rejection. In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after two years. If you have been awarded a position during the application process, the data will be transferred from the applicant data system to our HR information system.
 
To which recipients is the data passed on?
Your applicant data will be viewed by the HR department after receipt of your application. Suitable applications are then forwarded internally to the department managers responsible for the respective open position. The further processing is then coordinated. In principle, only those persons in the company have access to your data who require it for the proper conduct of our application process. Your data will not be passed on to third parties.