We, KAMA GmbH, welcome you to our website and appreciate your interest. We take privacy very seriously in our online offering. Below, you will find all the information about the topic.
We always process your personal data in accordance with applicable data protection regulations, in particular the General Data Protection Regulation. However, some of the services that you can access through our website require the processing of personal data. Insofar as we collect personal data (e.g. name, address, telephone number or email address), this is as far as possible on a voluntary basis. If the processing of personal data is necessary and there is no legal ground for such processing, data subjects must generally consent to our processing of their data.
We store this data for as long as you wish to use the respective service, after which it will be deleted. We naturally treat your personal data in confidence, and never pass it on to third parties. You can request information about your data at any time (more in the section "User Rights").
As the data controller, KAMA GmbH has implemented numerous technical and organisational measures to ensure that all personal data processed via this website is protected as comprehensively as possible. Nevertheless, internet-based data transmissions can have security gaps, and absolute protection cannot be guaranteed. For this reason, all data subjects are free to transmit personal data to us by alternative means, for example by telephone or letter.
1. Name and address of the data controller
The data controller within the meaning of the General Data Protection Regulation, other data protection laws in the Member States of the European Union and other data protection provisions is:
Telephone: +49 (3 51) 2 70 36-0
2. Data protection officer
Dresdner Institut für Datenschutz (Dresden Institute for Data Protection)
We use so-called session cookies to facilitate your use of our websites (CMS cookies). For some of our website's functions (e.g. logging in), the accessing browser also needs to be identified after switching pages. Otherwise, we cannot offer these functions for technical reasons. These cookies are only stored on your hard drive for the duration of your visit to our website and - depending on your browser settings - deleted when you close the browser. No user profiles are compiled.
We use the following cookies:
- sem/checked: the cookie stores whether the cookie banner has already been displayed.
- sem/tracking: the cookie stores whether or not the user wishes to be tracked.
- sword: the cookie stores the search terms in the page search.
Standard browser settings offer you the possibility of rejecting cookies. Cookies that have already been stored can be deleted at any time in your browser or by other programmes. Note: we cannot guarantee that you will be able to fully access all the functions of this website if you select the respective settings.
4. Collection of general data and information (log data/log files)
When you access our website, your browser sends a range of technical data that is logged. This general data and information is stored in the server's log files.
The following data is logged in this way:
- Website visited
- Time of access
- Quantity of data sent in bytes
- Source/referrer from which you accessed the page
- Browser used
- Operating system used
- IP address used (if applicable, in anonymised form)
This information cannot in any way be traced to you as an individual, but is technically necessary for the delivery and presentation of our content. The data collected is used solely for statistical evaluation and to improve the website. However, the website operator reserves the right to subsequently check the server log files if there are specific indications of illegal use. The log data is for internal purposes only, and will not be shared with third parties.
5. Possibility of contact via the website
Due to legal regulations, our website contains information that enables you to contact our company quickly by e-mail and to communicate with us directly, which also includes the e-mail address. If you contact us by e-mail or via a contact form, the personal data you provide will be stored automatically. Such personal data transmitted on a voluntary basis will be stored for the purpose of processing or contacting you. This personal data will not be passed on to third parties.
You can, of course, revoke your consent at any time in the future. To do so, please contact our data protection officer, whose contact details can be found below
6. Routine deletion and blocking of personal data
We only process and store your personal information for the period required to achieve the purpose of the storage or as provided for by European directives and regulations or any other legislator in laws or regulations to which the controller is subject.
If the storage purpose no longer applies, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data is routinely blocked or erased in accordance with legal requirements.
7. User rights
As a data subject, you have the legal right to obtain information about your data stored with us at any time, free of charge.
You may exercise your rights of rectification, erasure or restriction of processing, the right of objection and your right of data portability at any time.
If you have provided us with your personal data on the basis of your consent, you may revoke your consent at any time with effect for the future.
Should your request conflict with a legal duty to store data, or should statutory retention periods apply, the data will be blocked and not processed for any other purpose.
Please write to our data protection officer at datenschutz[at]kama.info
If you believe that our processing of your personal data is unlawful, you can contact any supervisory authority on data protection. The responsible supervisory authority is:
Sächsischer Datenschutzbeauftragter (Data protection officer of Saxony)
8. Third-party content and services
Our website offering also includes content and services of other providers that complement our offering. Examples include YouTube videos or the graphic representations of third parties. Accessing these third-party services requires the regular disclosure of your IP address. Therefore, these providers can see and also save your user IP address.
We make every effort to only include those third-party providers who use IP addresses solely for the delivery of the content. However, we have no influence on which third-party provider may save the IP address. This saving of address can be used for statistical purposes, for example. We will inform users immediately should we become aware of any storage activities carried out by third parties.
9. Links to other websites
Our website contains links to other websites (so-called external links). We have no influence on whether the operators of these websites comply with data protection regulations. Please note that you will be subject to other privacy policies if you click on links to other websites. We have no influence on their data processing.
10. Data protection provisions for the use of Google Analytics
This website uses functions of the web analysis service, Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on the website activity and to provide other services related to the website activity and internet usage to the website operator. The IP address that your browser transmits within the scope of Google Analytics will not be associated with any other data held by Google.
You can also prevent the collection and transmission of cookie-generated data relating to your website usage (including your IP address) to Google and the processing of this data by Google by clicking on the following link: This stores an opt-out cookie to prevent your data from being collected on future visits to this site: https://tools.google.com/dlpage/gaoptout
Alternatively to the browser plugin, you can click on this OptOut-link to prevent collection by Google Analytics on this website in the future. This stores an opt-out cookie on your device. If you delete your cookies, you will need to click on the link again.
The script to record user behavior by Google Analytics is not currently used.
The data controller has integrated components from YouTube into this website. YouTube is an Internet video portal that allows video publishers to post video clips and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes, music videos, trailers or videos produced by users themselves can be called up via the Internet portal.
YouTube is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time you visit one of the individual pages of this website, which is operated by the data controller and in which a YouTube component (YouTube video) has been integrated, the browser on the data subject's IT system will automatically download a visualisation of the respective YouTube component. More information about YouTube can be found at www.youtube.com/yout/about/en/. As part of this technical procedure, YouTube and Google receive information about the specific sub-page of our website the data subject has visited.
If the person concerned is logged on to YouTube at the same time, YouTube recognizes which specific subpage of our website the person concerned visits by calling up a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.
YouTube and Google receive information via the YouTube component that the person concerned has visited our website whenever the person concerned is logged on to YouTube at the same time as accessing our website; this happens regardless of whether the person concerned clicks on a YouTube video or not. If such transmission of this information to YouTube and Google is not desired by the data subject, the data subject can prevent transmission by logging out of their YouTube account before accessing our website.
In the following, we inform you about the responsible bodies regarding Youtube within the EU / EEA as well as outside. We do not transfer any data beyond this.
- YouTube, Google Ireland Limited / Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
12. Career – apply to work with us
By submitting your application by email to jobs[at]kama.info, you agree to us storing and using your data in the context of the application process. We will not transfer your personal data to third parties.
Consent to the use of applicant data
If your application is successful, the data and files you submit may be used in the context of our employment relationship with you. If your application is unsuccessful, KAMA GmbH will keep the data and files you have transferred to us in our database for six months in order to answer any questions in connection with your application. After expiration of this period, the data will be deleted.
If you agree to your inclusion in the applicant database of KAMA GmbH in subsequent correspondence so that we can take the data you provided into account when filling other vacancies with us, we will store your data and files in our applicant database for 24 months and then delete them.
You can fully or partially withdraw your application at any time. You can also request that we delete or modify all or some of your transferred data and files in our applicant database at any time. However, we are obliged to store some of your application data for a limited period of 6 months to comply with legal requirements, especially the obligation to provide evidence pursuant to the German Anti-Discrimination Act (AGG).
13. The legal basis for data processing
Art. 6 (1) (a) GDPR is our company's legal basis for processing operations in which we obtain consent for a particular processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, the processing is based on Art. 6 (1) (b) GDPR. The same applies to such processing activities necessary for pre-contractual measures, for example in cases of enquiries about our services. If our company is legally obliged to process personal data, for example to fulfil tax obligations, the processing is based on Art. 6 (1) (c) GDPR.
Lastly, our processing operations may be based on Art. 6 (1) (f) GDPR. Any processing not covered by any of the aforementioned legal bases is based on this legal basis if processing is necessary to safeguard a legitimate interest of our company or of a third party, provided that the interests, fundamental rights and freedoms of the data subject do not take priority.
If the processing of personal data is based on Art. 6 (1) (f) GDPR, the legitimate interest lies in carrying out our business and maintaining our contractual capability.
14. Data protection information on our social media presences
In order to actively communicate with users and to provide information about our activities, we, KAMA GmbH, Kurt-Beyer-Str. 4, 01237 Dresden, info[at]kama.info, partly in joint responsibility with the social network operators listed below, maintain a number of different social media presences.
In the context of the user-side use of our presences in the social networks listed below, we would like to point out that users' personal data may also be processed by the operators of the social networks outside the European Union and outside the European Economic Area. This may result in possible risks for users, for example in more difficult enforcement of data protection rights. At the same time, however, we would like to point out that if the operators of the social networks support this, we will work towards the conclusion of joint responsibility agreements pursuant to Article 26 of the GDPR and standard data protection clauses pursuant to Article 46(2)(c) of the GDPR.
In addition, we would like to draw attention to the fact that users' personal data are usually also processed by the operators of social networks for their own market research and advertising purposes. Any usage profiles generated from usage behaviour can be used to display interest-based advertisements outside of the social networks. For this purpose, the operators of the social networks usually place cookies on the users' computers so that device information, usage behaviour and interests of users can be processed even if the user does not have a profile in the respective network. For further information on this and on possible objection options, please refer to the data protection information and further notes of the respective social network operators, which we have linked for you below.
The following also applies to the processing of personal data:
Categories of data processed
The categories of data processed include inventory data (e.g. names), contact data (e.g. email addresses), content data (e.g. text entries), usage data (e.g. interest in content) and meta and communication data (e.g. device information and IP addresses).
Purpose and legal basis of processing
Data processing is carried out, insofar as this is subject to our responsibility, for the purposes of information provision, communication, marketing and range measurement. The operation of the social media presences results from a legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f DS-GVO, whereby the respective interests result from the aforementioned purposes.
The categories of data processed by us are only stored within the respective social network. In most cases, we have no influence on the specific storage period, as this is determined by the providers of the social networks. Information on this can be found in the data protection information of the respective provider. If the storage period can be influenced by us in individual cases, it will be deleted after the purpose has been fulfilled in compliance with the statutory retention obligations.
Services and service providers used by us as well as network-specific information
In the following, we inform you about the services and service providers we use as well as about network-specific information, naming the respective responsible bodies within the EU / EEA as well as those outside. We do not transfer any data beyond this.
- Facebook,Facebook Ireland Limited/ Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
- Instagram,Facebook Ireland Limited/ Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
- LinkedIn, LinkedIn Ireland Unlimited Company / LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA
- YouTube, Google Ireland Limited / Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Information on data subject rights
Data subjects may at any time request information about the personal data concerning them and, if necessary, request rectification or deletion or restriction of processing, or object to processing. They also have the right to data portability. Furthermore, if the data processing is carried out on the basis of consent, this can be revoked at any time for the future. To exercise your rights, you can contact our data protection officer, the Dresden Institute for Data Protection at email@example.com (further contact details at www.dids.de). In addition, every data subject has the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 DS-GVO if it is suspected that the personal data is being processed unlawfully.
With regard to the assertion of data subject rights, we would like to point out that these should at best be addressed directly to the respective operator of the social network in order to obtain comprehensive measures. Only the operators have access to all of the collected personal data of the users and can accordingly provide more comprehensive information and take any measures. If you require assistance in this regard, you can of course contact our data protection officer at any time.With regard to the assertion of data subject rights, we would like to point out that these should at best be addressed directly to the respective operator of the social network in order to obtain comprehensive measures. Only the operators have access to all of the collected personal data of the users and can accordingly provide more comprehensive information and take any measures. If you require assistance in this regard, you can of course contact our data protection officer at any time.