Privacy Policy
1. Introduction
With the following information, we would like to provide you, as the "data subject," with an overview of how we process your personal data and your rights under data protection laws.
In general, you can use our website without providing any personal data. However, if you wish to use special services provided by our company via our website, the processing of personal data may become necessary. If the processing of personal data is required and there is no legal basis for such processing, we will generally obtain your consent.
2. Controller
The entity responsible for data processing on this website is:
iMotion Automotive GmbH
Turmstra ss e 5
78467 Konstanz
Germany
Phone: +49 (0) 75311272652
Email: info.germany@imotion.ai
3. Data Protection Officer
You can contact our Data Protection Officer at:
External Data Protection Officer
c/o TÜV SÜD Akademie GmbH
Westendstraße 160
80339 Munich
datenschutz@imotion.ai
You may reach out to our Data Protection Officer at any time for any questions or suggestions regarding data protection.
4. Processing of Your Personal Data
iMotion collects, processes, and stores your personal data only if this is permitted by law or if you have provided your consent. We receive these data in two ways: Either you provide them to us, or we collect them when you use our services.
4.1 Data You Provide to Us
You can generally use our website without providing personal information directly. However, for certain services, we may request personal information from you to ensure the service is efficient and user-friendly or even possible to offer. Detailed information on all services provided by iMotion on this website can be found in Chapter 10.
4.2 Data We Obtain Through Your Use of Our Services
Certain data are automatically collected for technical reasons when you visit our website. These data, which your browser transmits to our server ("in so- called server log files"), are collected each time a page is accessed by you or by an automated system. These general data and information can include:
l Browser used
l Operating system used
l Source/referral that led to the page
l Date and time of access
l IP address used
l Internet service provider of the accessing system
We do not draw any conclusions about your identity from these general data and information. Rather, this information is needed to:
l Deliver the content of our website correctly,
l Ensure the permanent functionality of our IT systems and the technology of our website, and
l Provide law enforcement authorities with the necessary information in case of a cyberattack.
These collected data and information are therefore evaluated statistically and further processed with the aim of increasing data protection and data security in our company to ultimately ensure an optimal level of protection for the personal data we process. The data in the server log files are stored separately from all personal data provided by a data subject .
The legal basis for data processing is Article 6(1)(1)(f) of the GDPR. Our legitimate interest follows from the purposes listed above for data collection.
5. Processing via Cookies
No cookies are used.
We do not use either technically necessary or other forms of cookies on our website. Therefore, you will not see a cookie notice, nor will any consent to the use of cookies be obtained.
6. Other Recipients of Your Personal Data
We will only transmit your personal data to additional recipients or grant access to such recipients if it is necessary for the respective purpose of processing the personal data or if we have entrusted other recipients with fulfilling specific tasks or services, which may require access to personal data.
7. Data Transfer to Third Countries
In some cases, the transfer of personal data to a third country may be necessary. In such cases, we will only transfer your personal data with your consent (Art. 49(1)(a) GDPR).
In some instances, we use services on our website that are hosted in or involve data processing in third countries. These third countries may not always provide an adequate level of data protection (adequacy decision) and are therefore considered legally unsafe in terms of data protection. To address this, we have concluded standard contractual clauses according to Art. 46(2)(c) GDPR with the service providers.
8. Automated Decisions Including Profiling
No automated decision-making, including profiling, as per Article 22(1, 4) GDPR, takes place during your visit to this website.
9. Technology
9.1 SSL/TLS Encryption
To ensure secure data processing and to protect the transmission of confidential content, such as login data or contact requests that you send to us as the operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.
We use this technology to protect the data you transmit.
10. Content on Our Website
10.1 Contact / Contact Form
When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected via the contact form is evident from the respective form used.
This data is stored and used exclusively for the purpose of responding to your request and for the technical administration associated with that.
The legal basis for processing the data is our legitimate interest in responding to your inquiry under Article 6(1)(f) GDPR. If your inquiry is aimed at concluding a contract, an additional legal basis for processing is Article 6(1)(b) GDPR.
Your data will be deleted after the final processing of your inquiry, provided that there are no legal retention requirements preventing deletion.
10.2 Application Management / Job Board
We collect and process personal data from applicants for the purpose of processing the application procedure. The processing can also be done electronically. This is particularly the case if an applicant submits relevant application documents to us electronically, for example, by email.
If we conclude a contract of employment with an applicant, the submitted data will be stored for the purpose of processing the employment relationship, observing legal requirements.
If no contract is concluded, the application documents will be deleted 6 months after the rejection decision is communicated.
The legal basis for processing your data is Article 6(1)(b), 88 GDPR in conjunction with Section 26(1) BDSG (German Federal Data Protection Act).
10.3 Newsletter Distribution
Our website allows you to subscribe to our company's newsletter. The personal data transmitted to us when ordering the newsletter can be seen in the input form used for this purpose.
The legal basis for data processing for the purpose of sending the newsletter is Article 6(1)(a) GDPR.
10.4 Social Media Links
Our website uses buttons for social networks. The buttons are marked with the logo of the respective social network. However, they are not social plugins but merely graphics with embedded links. When you click the button, you leave our website and our area of responsibility.
Additionally, we use the functionality for visitors to "share" content from our website, such as events, on social networks via plugins. A connection to the respective network is only established once the "share" plugin is activated.
For the purpose and scope of data collection and further processing and use of the data by the respective social network, as well as your rights and settings to protect your privacy, please refer to the information provided by the respective provider:
l Facebook (Meta Platforms Ireland Inc., Ireland Inc., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland) https://de-de.facebook.com/privacy/explanation
l LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
l X (Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland) https://x.com/de/privacy
11. Your Rights as a Data Subject
In general, and with regard to your personal data, you can exercise the rights listed below.
11.1 Right to Information Under Art. 15 GDPR
You have the right to request information from the controller about the personal data stored about you and further details related to that personal data.
11.2 Right to Rectification Under Art. 16 GDPR
You have the right to request the immediate correction of incorrect personal data concerning you from the controller.
11.3 Right to Erasure Under Art. 17 GDPR
You have the right to request the immediate deletion of personal data concerning you from the controller.
11.4 Right to Restriction of Processing Under Art. 18 GDPR
You have the right to request the restriction of the processing of personal data concerning you from the controller.
11.5 Right to Data Portability Under Art. 20 GDPR
You have the right to receive the personal data concerning you from the controller in a structured, commonly used, and machine-readable format.
11.6 Right to Withdraw Consent Under Art. 7(3) GDPR
You have the right to withdraw your consent to the processing of your personal data under Article 6(1)(a) GDPR at any time. The lawfulness of the processing of your personal data carried out on the basis of your consent until its withdrawal remains unaffected.
11.7 Right to Object Under Art. 21(1) GDPR
You have the right to object to the processing of your personal data carried out under Article 6(1)(e) or (f) GDPR at any time.
11.8 Right to Lodge a Complaint with a Supervisory Authority Under Art. 77 GDPR
If you, as a data subject, believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, workplace, or the location of the alleged violation. A list of supervisory authorities in Germany (for the non-public sector), including their addresses,
can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links -node.html .
12. Retention Period for Personal Data
We process and store your personal data only for as long as necessary to achieve the purpose of storage or as required by law.
Once the storage purpose ceases or a statutory retention period expires, the personal data will be routinely deleted in accordance with legal provisions.
Privacy policy for applications
Data protection information for applicants according to Art. 13, 14 GDPR
Dear applicants,
we take protection and security of your personal data seriously and would like to give you an overview of the processing of your personal data with the following information and inform you about your rights under the European General Data Protection Regulation (GDPR).
1. Name and contact details of the controller:
iMotion Automotive GmbH
Turmstraße 5
78467 Konstanz
Tel: +49 (0) 75311272652
E-Mail:Info.Germany@imotion.ai
2. Contact details for the data protection officer:
External data protection officer of iMotion Automotive GmbH
c/o TÜV SÜD Akademie GmbH
Westendstraße 160
80339 München
E-Mail: datenschutz@imotion.ai
3. Scope of personal data processed:
In particular, we process the following personal data from you:
· Master data (name, academic title, address, date and place of birth, gender)
· If indicated: Marital status, children and nationality,
· Contact details (telephone number, e-mail address)
· Certifications, information on school and vocational training, completed training courses for further education and qualification, language skills, other qualifications
· Data from application, cover letter, CV, certificates, german residence document, proof of school and vocational training, diplomas
4. Purpose of processing:
We process your personal data for purposes related to the application process and for business pur-poses permissible within the scope of our business activities, which are associated with your role and function within our company. These purposes include, in particular:
· Decision-making regarding the establishment of an employment relationship
· Conducting the application process
· Communication with you
· Implementation of pre-contractual measures
· Inclusion of your data in our talent pool
Processing of your personal data for purposes other than those mentioned will only occur if such processing is compatible with the purposes of application process. We will inform you about such processing of your personal data and, if necessary, obtain your consent before proceeding.
5. Legal basis for processing:
We process your data for the purpose of establishing the employment relationship in accordance with Art. 88 para. 1 GDPR in conjunction with Art. 26 para. 1 BDSG, Art. 6 para. 1 s. 1 lit. b GDPR.
For the inclusion of your application documents in our talent pool, we obtain your informed and explicit consent in accordance with Art. 6 para. 1 s. 1 lit. a and Art. 5, 7 GDPR.
We can also process your personal data if this is necessary to fulfill legal obligations (Art. 6 para. 1 lit. c GDPR) or to defend against legal claims asserted against us (Art. 6 para. 1 lit. f GDPR). The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
6. Recipients of your personal data:
The recipients of your personal data are the human resources department and the department responsible for filling the position.
We will only transmit your personal data to additional recipients or grant access to your personal data to additional recipients if it is necessary for the specified purposes of processing your personal data, or if we are obliged to do so within the scope of legal disclosure obligations or by governmental or judicial decisions.
Your personal data may also be transmitted to our agents and contractors, who provide services to us, including insurers and advisors, for legitimate purposes, to the extent that permission is granted on a case-by-case basis under data protection regulations. Your personal data may be transferred to service providers for the purpose of carrying out data processing tasks, for example, for the automated processing of personnel data.
7. Transfer of personal data to a third country:
During the application process, your resume and other personal data may be transferred to iMotion‘s parent company located in China for the purpose of reviewing candidate qualifications, arranging interviews, initiating internal approval and creating work accounts.
In this regard, your personal data will be transferred to countries outside the EU/EEA, we will conclude the necessary data protection agreements, in particular EU standard contractual clauses, or take the measures required under Art. 44 ff. GDPR.
8. Storage Period:
Your personal data will only be stored for as long as it is necessary to fulfil the respective processing purposes. Extended storage may occur due to legal or contractually defined retention periods.
If no employment is offered after the conclusion of the application process, your personal data will typically be deleted after 6 months.
If you have consented to the inclusion of your personal data in our talent pool, we will store your personal data for 18 months. If you withdraw your consent, we will immediately delete your personal data in the talent pool.
9. Your rights as a data subject:
You can exercise the rights set out below in general and in relation to our processing of your personal data. Please use the contact options given above.
· Right of access pursuant to Art. 15 GDPR:
You have the right to request information at any time from us about the data held that relates to you, receive a copy of this data and receive other information concerning this personal data.
· Right to rectification pursuant to Art. 16 GDPR:
You have the right to request us to rectify any incorrect personal data relating to you without undue delay.
· Right to erasure pursuant to Art. 17 GDPR:
You have the right to request us to erase any personal data relating to you without undue delay.
· Right to restriction of processing pursuant to Art. 18 GDPR:
You have the right to request us to restrict the processing of any personal data relating to you.
· Right to data portability pursuant to gemäß Art. 20 GDPR:
You have the right to receive your personal data from us in a structured, commonly used and machine-readable format.
· Right to withdrawal pursuant to Art. 7 Abs. 3 GDPR:
You have the right to withdraw the consent to process your personal data, which you granted pursuant to Article 6(1a) GDPR, at any time. This does not affect the lawfulness of any processing of your personal data performed on the basis of your consent prior to its withdrawal.
· Right to object pursuant to Art. 21 Abs. 1 GDPR:
You have the right to object at any time to the processing of your personal data pursuant to Art. 6 Abs. 1 lit. e or f GDPR.
· Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR:
If you, as the data subject, believe that processing of your personal data breaches the European General Data Protection Regulation, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged breach.
10. Provision of data:
The provision of your personal data in connection with the application process is neither legally nor contractually required. If you do not provide us with your personal data, we cannot consider you in the application process.
However, the provision of your personal data upon hiring is legally or contractually required, or necessary for the conclusion of an employment contract with you (e.g., bank account details). If you do not provide us with your personal data for the specified purposes, the employment relationship cannot be established.
11. Source of data:
In most cases, you have provided us with your personal data yourself.
Other sources are:
· Social media platforms or professional networks (e.g., LinkedIn, Facebook)
· Data from publicly accessible sources (e.g., websites, publications, research papers)
12. Automated decision-making including profiling:
Automated decision-making, including profiling is not conducted.
13. Further questions:
If you have any questions regarding processing of your personal data, you can address them to the responsible party or data protection officer. Please use the contact options provided above for this purpose.
Stand: 02-2025