DE
SWE
Privacy policy
Background
This privacy policy informs you about the type, scope and purpose of the processing of your personal data by the data controller in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR).
Scope of application and responsibility
This privacy policy applies to the website of Eiffage Infra-Bau SE (Eiffage Infra-Bau), which can be accessed under the domain https://bau.eiffage-infra.de/ and the various subdomains.
The controller responsible for data processing is:
Eiffage Infra-Bau SE
Wahlerstraße 28
40472 Düsseldorf
Phone: +49 211 95750-0
Fax: +49 211 95750-333
info.eib@eiffage.de
www.eiffage-infra.de/bau
Data protection officer
Eiffage Infra-Bau has appointed a company data protection officer. For questions, suggestions or to assert your rights, please contact him by e-mail: datenschutz@eiffage.de
Processing of your data on our website
How is your data processed in detail?
Below we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. There is no automated decision-making in individual cases, including profiling.
Website presentation
Purpose
We collect your data for the provision of the website, to offer the availability of associated services, for an efficient design of the website and to ensure the security of the website.
Categories of processed data
Your IP address, the Internet service provider of the accessing system, the date and time of access to the website, the browser type and version used, the operating system used by the accessing system and the website from which an accessing system accesses our website are stored.
Categories of recipients
Your data will be passed on to the employees of the website host.
Third country data transfer
No third country transfer takes place.
Storage period and criteria
The data is stored for the duration of the website display.
Legal basis
Your data is collected on the basis of Art. 6 para. 1 b) GDPR (fulfilment of contract) and Art. 6 para. 1 f) GDPR (legitimate interest).
Enquiry by email or contact form
Purpose
We collect your data for the purpose of contacting you.
Categories of processed data
Your first and last name, email address, telephone number and enquiry will be stored.
Categories of recipients
Your data will be passed on to employees of Eiffage Infra-Bau.
Third country data transfer
No third country transfer takes place.
Storage period and criteria
Your data will be deleted once the purpose for which it was collected no longer applies.
Legal basis
Your data is collected on the basis of Art. 6 para. 1 b) GDPR (fulfilment of contract).
Handling of applicant data
Purpose
We offer you the opportunity to apply online via our website. For this purpose, we have integrated a link into our website that leads to the central career portal of the Eiffage Infra-Bau Group in Germany.
Categories of processed data
During the application process, your contact and communication data, CV, references, notes taken during job interviews are stored.
Categories of recipients
Your data will be passed on to Eiffage Infra-Bau employees.
Third country data transfer
There is no third country transfer.
Storage period and criteria
If you are hired, the data collected will be transferred to your personnel file and stored until the end of the employment relationship; if you are rejected, the data will be deleted 6 months after the rejection.
If the applicant has given his/her consent, the data will also be used for other relevant job advertisements and passed on to the respective company of the Eiffage Infra-Bau Group. The data will only be used for the period covered by the consent. If you are hired on the basis of your application, the data will be transferred to your personnel file and then deleted from the application system. If you are not hired on the basis of your application, the data will be deleted at the end of the period covered by your consent.
Legal basis
Your data is collected on the basis of Art. 6 para. 1 b) GDPR (fulfilment of contract) and Art. 6 para. 1 a) GDPR (consent).
Creation of applicant profiles
Purpose
We use the SAP career portal to create applicant accounts and profiles, manage and process applications, carry out the application process and inform applicants about new vacancies and career opportunities.
Categories of processed data
Your master data (e.g. name, nationality), contact details (e.g. email address, telephone number, address), application documents (e.g. CV, certificates, qualifications), details of previous employment and training, account settings and preferences and technical data for using the portal are collected.
Categories of recipients
The data may be transferred to internal departments (e.g. HR department, specialist departments) and IT service providers for SAP system administration.
Third country data transfer
There is no third country transfer.
Legal bases
Your data is collected on the basis of Art. 6 para. 1 b) GDPR (fulfilment of contract), Art. 6 para. 1 f) GDPR (legitimate interest in efficient applicant selection) and Art. 6 para. 1 a) GDPR (consent).
Storage period and criteria
The data is stored for the following periods:
- Active applications: For the duration of the application process
- If accepted: Transfer of relevant data to the personnel file
- In the event of rejection: Deletion after 6 months, unless consent has been given for longer storage
- Applicant account: Until deletion by the applicant or after 12 months of inactivity
Google Analytics
Purpose
We collect your data to evaluate user behaviour, to recognise users and to report on website activity
Purpose
We collect your data to analyse user behaviour.
Categories of processed data
Your click data, impression data, conversion data, geographic data, device information, browser information and IP address are stored.
Categories of recipients
Your data will be passed on to employees of Eiffage Infra-Bau and Google.
Third country data transfer
A third country data transfer takes place with certification in accordance with the EU-U.S. Data Privacy Framework.
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043 USA
Storage period and criteria
Google stores the data you provide for the period necessary to fulfil the above-mentioned purposes.
Legal basis
Your data is collected on the basis of Art. 6 para. 1 a) GDPR (consent).
Google Maps
Purpose
We use Google Maps on our website to offer you a simple and interactive way to find our location and plan routes.
Categories of processed data
When you access a page on which Google Maps is integrated, your browser will load the required map content directly from Google's servers. This establishes a connection to Google's servers and your IP address, device information and browser information are transmitted to Google. Google also collects your location data,
Categories of recipients
Your data will be passed on to Google employees.
Third country data transfer
There is a third country data transfer with certification according to the EU-U.S. Data Privacy Framework.
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043 USA
Storage period and criteria
Google stores the data you provide for the period necessary to fulfil the above-mentioned purposes.
Legal basis
Your data is collected on the basis of Art. 6 para. 1 a) GDPR (consent).
Google reCAPTCHA
Purpose
On our website, we use Google reCAPTCHA to help us distinguish whether an entry on our website is made by a human or by automated, machine processing. This service is primarily used to protect our website from misuse and spam.
Categories of processed data
Google reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For analysis purposes, reCAPTCHA stores your IP address, time spent on the website, user behaviour (e.g. mouse movements, clicks), browser and device settings, date and time of access, referrer URL (the previously visited website) and uses cookies and other technologies for tracking and identification.
Categories of recipients
Your data will be shared with Google employees.
Third country data transfer
A third country data transfer with certification according to the EU-U.S. Data Privacy Framework takes place.
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043 USA
Storage period and criteria
Google stores the data you provide for the period necessary to fulfil the above-mentioned purposes.
Legal basis
Your data is collected on the basis of Art. 6 para. 1 f) GDPR (legitimate interest).
YouTube
Purpose
We collect your data to enable the playback of videos.
Categories of processed data
We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.
Categories of recipients
Your data will be passed on to employees of Eiffage Infra-Bau and Google.
Third country data transfer
A third country transfer takes place in accordance with the EU-U.S. Data Privacy Framework certification.
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)
Legal basis
Your data is collected on the basis of Art. 6 para. 1 a) GDPR (consent).
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google. Further information can be found in the privacy policy for Google Ads: https: //policies.google.com/privacy.
Consent management
Purpose
We collect your data to obtain and store the consent of our website users to use the services offered on our website.
Categories of processed data
Your IP address, the date and time of consent, the browser information and the URL from which the consent was sent are stored.
Categories of recipients
Your data will be passed on to employees of Eiffage Infra-Bau.
Third country data transfer
No third country transfer takes place.
Legal basis
Your data is collected on the basis of Art. 6 para. 1 c) GDPR (legal obligation).
Storage period
The deletion takes place after the purpose has ceased to apply.
Use of tracking pixels and dynamic banners
Purpose
We use tracking pixels from Meta, TikTok and YouTube as well as dynamic banners to analyse the use of our website:
- Analyse the use of our website
- Measure the effectiveness of our advertising campaigns
- Display personalised advertising
- Optimise our offer and our marketing measures
Categories of data processed
The following categories of data are processed
- Technical data (e.g. device model, operating system, browser type)
- Usage data (e.g. pages visited, click behaviour, length of visit)
- IP addresses
- Pseudonymised user IDs
- For some services: email addresses and other contact data (only in extended mode)
Categories of recipients
The data collected is transmitted to the following recipients
- Meta Platforms Ireland Ltd (Facebook, Instagram)
- TikTok Technology Limited
- Google Ireland Limited (YouTube)
- Provider of dynamic banner advertising
- Employees of Eiffage Infra-Bau
Third-country data transfer
When using the services, data may be transferred to third countries, in particular the USA.
Legal basis
Your data is collected on the basis of Art. 6 para. 1 a) GDPR (consent) and Art. 6 para. 1 f) GDPR (legitimate interest).
Storage period
The data will be deleted as soon as it is no longer required for the stated purposes. In individual cases, the storage period may be up to 24 months if this is necessary to achieve the purpose.
Rights of the data subjects
If your personal data is processed, you are a data subject within the meaning of the GDPR. You have the following rights vis-à-vis the controller:
Data subjects have the right
- in accordance with Art. 7 para. 3 GDPR, to withdraw your consent at any time. As a result, data processing based on this consent may no longer be continued in the future;
- to request information about your processed personal data in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored about you
- in accordance with Art. 17 GDPR, to request the erasure of your stored personal data, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller; and
- in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, data subjects can contact the supervisory authority of their usual place of residence or workplace for this purpose.
