Privacy Notice

Elbe Flugzeugwerke GmbH (hereinafter "EFW")
Grenzstraße 1
01109 Dresden / Germany
Phone: +49 351 8839 0
E-Mail: communications@efw.aero
https://www.elbeflugzeugwerke.com/

Due to security reasons, we recommend sending emails encrypted. Therefore, please do not send us sensitive information via unencrypted emails. Especially when you want to apply for a job. Please make use of our online career centre for job applications.

The Elbe Flugzeugwerke GmbH has appointed an internal Data Protection Officer. You can reach her under the following contact details:

Miss Nadine Ziemke
Grenzstraße 1
01109 Dresden
Germany
E-Mail: datenschutz@efw.aero
Phone: +49 351 8839 2986

Website Operation

When you visit our website, the browser used on your device automatically sends information to our website server and temporarily saves it in a so-called log file. We have no influence on this.

The processing of the IP address is based on our legitimate interest (Art. 6 Para. 1 lit. f GDPR) of a technically error-free presentation of our website. The IP address is used by us for the following purposes:

• guarantee a smooth connection,
• guarantee comfortable use of our website,
• analysis of system security and stability.

Furthermore, we use cookies to statistically evaluate your behaviour on our website. You can find more information on this in the chapter Transfer of data

Conclusion, Management or Termination of a Contract

Main business activity of the Elbe Flugzeugwerke GmbH is the development and manufacturing of flat fibre-reinforced composite components for all Airbus models; the conversion, maintenance, and repair of aircrafts of the entire Airbus family as well as engineering services for certification and approval. In this context, we process the data required for the conclusion, implementation, or termination of a contract.

You provide us with the data because of the contractual relationship between you and us. To process your e-mail address, we are also obliged to send an electronic order confirmation due to legal requirements in the German Civil Code.

Customer Support

For optimal customer support, we use the Salesforce customer management system, represented in Germany by Salesforce.com Germany GmbH, Erika-Mann-Str. 63, 80636 Munich, Germany (“Salesforce”). We use Salesforce to collect, link and evaluate data processed on our website (contact, customer account, order data, etc.) and throughout our contractual relationship. This data is transmitted to the Salesforce servers. This data processing is based on our overriding legitimate interest in providing our customer support (Art. 6 Para. 1 lit. f GDPR).

Salesforce is a corporation with offices around the world. The parent company of the group is salesforce.com, Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA. All data collected by EFW is processed within the EU.

Requests by e-mail, telephone or contact form

If you send us inquiries by e-mail, telephone or contact form, your inquiry including all resulting personal data (name, contact details) will be stored and processed by us for the purpose of processing your request and any follow-up questions. We do not pass on this data without your consent.

The data you send to us by request will remain with us until you ask us to delete it, you withdraw your consent or the purpose for data processing no longer applies. Legal retention periods remain unaffected.

This data is processed either in the context of fulfilling a contract or to carry out pre-contractual measures (Art. 6 Para. lit. b GDPR) or on our legitimate interest (Art. 6 Para. 1 lit. f GDPR), to ensure that inquiries are processed effectively.

Application Management

To be able to process your application as quickly as possible, we process your applicant data with the help of an external service provider.

To be able to carry out the application process, we assess your data for your suitability for the position for which you have applied. In this context, we may collect further information about you, for example in job interviews.

The processing of your applicant data is based on the establishment of an employment relationship (Art. 6 Para. 1 lit. b GDPR). Further details can be found in the Privacy Notice of the applicant portal.

Visitor Management

If you register to visit us, we process your personal contact details to organize your visit. The processing of your personal data takes place based on our legitimate interest - protection of house rights and company security (Art. 6 Para. 1 lit. f GDPR). Your personal data will be deleted when the purpose no longer applies (usually 90 days). More details can be found in the Privacy Notice for visitors.

You have the right to information about your personal data stored by us. You have the right to correct incorrect data or to complete your data. 
You have the right to have your data deleted which is stored by us if there are no legal or contractual retention periods or other legal obligations or rights to further store your personal data. 
Where your consent is required, you may at any time withdraw such consent. However, please note that if you withdraw your consent, you may not be able to access and use certain information, features, or services. 
You have the right to restrict the processing of your personal data by EFW, for instance when the processing is unlawful and you oppose the erasure of your personal data. In such cases, your personal data will only be processed with your consent or for the exercise or defence of legal claims. 
You also have the right to data portability, i.e., the right to have the data we store about you that you have provided transmitted in a common, machine-readable format or to request transmission to another person responsible. 
To be able to exercise your rights, please contact the data protection officer. Contact details can be found here.

You have the right to lodge a complaint with our supervisory authority. The responsible supervisory authority for data protection issues is the Saxon Data Protection Officer with the following contact details:

Sächsische Datenschutz- und Transparenzbeauftragte
Devrientstraße 5 
01067 Dresden
Phone: +49 351 85471 101

Depending on the purpose of data processing, we process different data categories. These can be, for example, the following categories: application data, contact and identity data, contract data, billing and payment data, inventory data, communication data or server log data.
We generally store the data for as long as it is necessary to provide the connected services and we have a legitimate interest in further storage, for example for the defence against legal claims.
There are legal retention periods for certain data categories, such as contracts or invoices. This data will be deleted as soon as the legal retention periods have expired.

Within our company do only these people have access to your personal data who absolutely need it to fulfil their tasks.
We transfer your data to authorized Service Providers who support us in the organization of and throughout our daily business, for example IT Service Providers and consultants.
In case it is required by law or is necessary to protect our legitimate interests, we will transfer your personal data to government agencies, law enforcement agencies or courts.
In case we transfer your personal data other than stated above, we will ask you for your consent.

A transfer of personal data to countries outside the EEA (European Economic Area) or to an international organization takes place only if this is necessary for the processing and thus for the fulfilment of the contract or for the implementation of pre-contractual measures, the transfer is required by law, or you have provided us your consent.

Linked websites

For convenience, hyperlinks may be posted on the sites that link to other websites ("Linked Sites"). We are not responsible for the privacy practices of Linked Sites or companies that we do not own or control, and this statement does not apply to those companies. 

Linked websites may collect information in addition to the information we collect on the websites. We do not endorse these linked websites, the services or products described or offered on such linked websites, or the content of these linked websites. 

We encourage you to read the privacy policy of each linked website to understand how personal information about you is used and protected.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The purpose of reCAPTCHA is to check whether data is entered on our website (e.g., in a contact form) by a human or by an automated program.

For more information about Google reCAPTCHA and Google's privacy policy, see the following links: https://policies.google.com/privacy?hl=en
and https://www.google.com/recaptcha/about/.

We place so called cookies on our website. The information we receive through the usage of cookies helps us to optimize our website. When you visit our website, your browser creates a small file automatically. This is the cookie. The cookie stores information in relation to your visit on our website.

Cookies have different functions. Some cookies are technically necessary because certain functions of the website will not work without them (e.g., displaying videos). Other cookies are used to evaluate the behaviour of visitors to this website (e.g., which post is read).
We have a legitimate interest in storing necessary cookies on your end device to be able to provide our service without any technical errors. If consent to the storage of cookies or comparable technologies is required, we will obtain your consent. You can revoke this consent at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

We use the cookie technology of Usercentrics Consent Management Platform. User profiles are created under a pseudonym. The data collected with Usercentrics will not be used to identify you or to combine it with other information about you without your separate consent. The collection and processing can be objected to at any time - with effect for the future.

For California residents

Pursuant to the California Consumer Privacy Act of 2018 ("CCPA"): We do not sell your personal information to third parties, and we will not sell your personal information to third parties except as provided in a specific Privacy Notice. We do not discriminate against California residents who exercise their CCPA privacy rights. To exercise your California privacy rights, please see the "Your Rights" section.

For China residents

We may transfer your personal information to other entities inside and outside of China in accordance with this Privacy Notice or for other legitimate reasons. We will comply with the applicable obligations and requirements of the PIPL regarding sharing and cross-border transfers of personal data.

Version 1.3
01.2024