May 11, 2021
Data protection is a particularly high priority for Continental Aerospace Technologies.
1. Which entity is responsible for the processing of my personal data and how can I contact Continental Aerospace Technologies?
If you visit our Website, Continental Aerospace Technologies is responsible for the processing of your personal data as controller within the meaning of the General Data Protection Regulation (GDPR). You can reach Continental Aerospace Technologies at any time under the following contact details:
Continental Aerospace Technologies, Inc.Address: 2039 S. Broad Street, Mobile, Alabama 36615 USATel.: +1.800.718.3411Email: HRTechnologies@continental.aeroWebsite: www.continental.aeroData Protection Officer: Al EvansTel.: +1.251.436.8383 Email: firstname.lastname@example.org
Continental Aerospace Technologies GmbH
Address: Platanenstr. 14, 09356 St. Egidien Germany
Data Protection Officer: Thomas Wüensch
2. What personal data will be collected about me? For which purposes and on which legal basis will my data be used?
Depending on the interaction with you we collect and process different categories of personal data.
However, if you want to use special enterprise services via our Website, or otherwise want to benefit from certain services or features, processing of your personal data will become necessary.
In most cases there will not be an obligation that you disclose certain information about yourself to us. However, we may be required to collect certain personal data about you, such as to either to fulfil our legal obligations or for the performance of a contract that we concluded with you or your company. Failure to provide this information may prevent or delay the fulfilment of these obligations. We will inform you at the time your personal data is collected whether certain data is compulsory and the consequences of the failure to provide such data.
Below we set out in more detail what types of personal data we collect, for what purposes the data is used by us, and on what legal basis we process the related personal data.
3.1 Data about Website Access (Log Files)
Our Website automatically collects a series of general data and information when a data subject visits our Website. These general data and information will automatically be submitted from your browser to Continental Aerospace Technologies and be stored in the server log files when you access our Website.
The information collected and stored in log files may include (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our Website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) your Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems.
We generally process the relevant log file data for the duration of your session to enable the technical delivery of our Website’ content and features to your device.
Additionally, the data will be stored by us in log files for a period of time for purposes of the technical security of our Website, in particular to protect us against attempts to attack our web server. We may provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. The log file data is stored separately from any other personal data provided by a data subject.
We analyze and use the data in anonymized form for internal statistical purposes, to optimize the content of our Website, to increase data protection and data security and to ensure the long-term viability of our information technology systems and website technology.
Continental Aerospace Technologies processes your personal data on the basis of its legitimate interests in ensuring the security of the Website, optimizing the Website and services offered to you, and improving and maintaining site functionality (Art. 6(1) lit. f) GDPR).
3.2 Registration On Our Website
You have the possibility to register an account on our Website, in order to benefit from content or services that may only be available to registered users due to the nature of the matter in question. In this case, we will collect the data that you will enter into the respective input mask used for the registration. The personal data entered by you is collected, stored and processed exclusively for our internal use and purposes, as necessary to handle your registration and provide you with the relevant requested content and services.
In the context of your registration on our Website, we further collect and store your IP-address as well as date and time of registration. The storage of this data takes place against the background that this is the only way to prevent the misuse of our services, and, if necessary, to make it possible to investigate committed offenses. Insofar, the storage of this data is necessary to secure the legitimate rights and interests of Continental Aerospace Technologies. Your personal data will not be passed on to third parties, unless there is a corresponding statutory obligation or if the disclosure is necessary for criminal prosecution.
The processing of your data is based on the necessity of the processing for the performance of a contract with you or in order to take steps at your request prior to entering into a contract (Art. 6(1) lit. b) GDPR). In addition, the processing is based on the necessity to process the data for purposes of our legitimate interests (effective and secure provision of the registered account and related functionalities and services on our Website, preventing misuse of our services, and establishing, exercising or defending our legal claims) (Art. 6(1) lit. f) GDPR). We may further process your personal data to comply with our legal obligations (Art. 6(1) lit. c) GDPR).
3.3 Contact Via our Website
The Website of Continental Aerospace Technologies contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general e-mail address. If you contact us by e-mail or via a contact form, the personal data transmitted are automatically stored by us. Such personal data transmitted on a voluntary basis to us are stored and processed Continental Aerospace Technologies for the purpose of processing and responding to your request. In this respect, the processing is based on the necessity of the processing for purposes of our legitimate interests in ensuring efficient and user-friendly communication and processing of your request, in enabling a reliable documentation for evidentiary purposes and to the extent necessary for the establishment, exercise or defense of legal claims (Art. 6(1) lit. f GDPR). The processing of your personal data in the context of the establishment of a contract is further based on the necessity of the processing in order to take steps at your request prior to entering into a contract in order to make a decision about establishing the contract with you (Art. 6(1) lit. b GDPR).
3.4 Comments Function In The Blog On The Website
Continental Aerospace Technologies offers users the possibility to leave individual comments on individual blog contributions on a blog on its Website. A blog is a web-based, publicly-accessible portal, through which one or more people called bloggers or web-bloggers may post articles or write down thoughts in so-called blogposts. Blogposts may usually be commented by third parties. Any inappropriate or offensive comments or communications will be removed by the Web Master.
If you leave a comment on the blog published on our Website, the comments made by you are also stored and published, as well as information on the date of the commentary and on the user's pseudonym chosen by you. In addition, the IP address assigned by the Internet service provider (ISP) to you is also logged. This storage of the IP address takes place for security reasons, and in case the data subject violates the rights of third parties, or posts illegal content through a given comment. The storage of these personal data is, therefore, in our legitimate interest, so that we can exculpate in the event of an infringement. The processing of your data will be based on the necessity to process the data for purposes of our legitimate interests (effective, lawful and secure provision of the blog functionalities and content, protection of the rights of third parties, exercise, establishment and defense of legal claims) (Art. 6(1) lit. f GDPR).
Most of cookies that we use of our Website are strictly necessary to provide the requested services on our Website and do not require your consent. Strictly necessary cookies are essential for the correct functioning of our Website and enable basic features, such as site navigation, authentication and secure login, remembering your session and cookie preferences, and allowing us to maintain the safety and security of our Website. To the extent the use of these cookies may include processing of your personal data, the processing will be based on our legitimate interests in providing secure and functioning Website features and services, including secure authentication and login procedures and management of your cookie choices.
You have the right to choose whether or not to accept cookies. You may, at any time, prevent the setting of cookies through our Website by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, cookies already set may be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If you deactivate the setting of cookies in your Internet browser, not all of our functions of the Website may be entirely usable.
4. Who will my data be disclosed to?
Continental Aerospace Technologies ensures a high level of security when disclosing your data. We may disclose your personal data in the below scenarios to the following categories of recipients.
4.1 Service Providers, business partners and group companies (as processors)
We use service providers and other business partners (including group companies) who may process your personal data on our behalf in order to support us in relation to the processing of personal data. In particular, we engage technical service providers in order to host our database and provide other technical functionalities and services. These service providers work exclusively on our behalf and are obliged to take all necessary technical and organizational measures to protect your personal data in accordance with data protection requirements. Our service providers may only process personal data on our documented instructions and are not permitted to process or use personal data for any other purposes.
4.2 Law enforcement agency, court regulator, government authority or similar third party
We may share your personal data with these parties where we believe this is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party, for example if we are obliged to cooperate with government authorities in the context of legal investigations. Where permitted by law or regulation and reasonably practicable, we will attempt to notify you of such requirements.
5. Will my Data be Processed also in Countries Outside the EU/EEA?
Continental Aerospace Technologies takes the security and protection of your personal data very seriously. To the extent any of the above recipients are located in countries outside the European Union (“EU”) and the contracting states of the European Economic Area (“EEA”) which may not provide for the same level of data protection as considered adequate in the EU/EEA on the basis of an adequacy decision (so-called “Third Countries”), in in particular the USA, we have – to the extent legally required – put into place appropriate safeguards and guarantees (such as contractual commitments and supplementary measures) to ensure that your personal data will always be protected adequately and in accordance with legal requirements. This is done, in particular, by entering into an agreement on the basis of the EU standard contractual clauses pursuant to Art. 46(2) lit. c), (5) GDPR, and where necessary by implementing supplementary measures, such as additional technical, organizational and contractual safeguards. For more information on the appropriate safeguards in place, and in order to receive a copy of them (as applicable), please contact us at the contact details set out in section 1. Additionally, for certain transfers to Third Countries, we may also rely on your prior consent according to Art. 49(1) lit. a GDPR.
6. How will my personal data be protected?
We implement comprehensive technical and organizational measures to ensure a level of security appropriate to the risk to the personal data we process. These measures are aimed at fully ensuring the ongoing integrity and confidentiality of personal data. We evaluate and improve these measures on a regular basis to ensure the security of the processing permanently.
7. How long will my personal data be stored?
Blog Data: The personal data stored when you leave a comment on the blog published on our website (see section 3.4 above) will be stored and retained for as long as our blog and your respective comment will be kept online.
8. Which rights do I have?
To the extent you are affected by the data processing carried out by Continental Aerospace Technologies, you have the right subject to applicable legal provisions:
(a) to obtain information on the personal data processed concerning you and to obtain a copy of such data (right of access);
(b) to obtain the rectification of any inaccurate personal data and, having regard to the purposes of the processing, the completion of incomplete personal data (right to rectification);
(c) if there are legitimate reasons, to request the deletion of your personal data (right to erasure);
(d) to request the restriction of the processing of your personal data, if the legal requirements are met (right to restriction of processing);
(e) if the legal requirements are met, to receive the personal data provided by you in a structured, commonly used and machine-readable format and to transfer this personal data to another controller or, if technically feasible, to have it transferred by Continental Aerospace Technologies (right to data portability); and
(f) not to be subject to a decision based solely on automated processing which produces legal effects concerning you or significantly affects you in a similar way, if the legal requirements are not met. An automated decision making process is not carried out by Continental Aerospace Technologies.
You also have the right to object, in accordance with the statutory provisions, to the processing of personal data which is necessary for the purposes of our legitimate interests on grounds relating to your particular situation (right to object). If your personal data is processed by Continental Aerospace Technologies for direct marketing purposes, you have the right to object to this processing at any time, without any special reason.
If the data processing is based on consent you can withdraw the consent at any time. The withdrawal of your consent does not affect the lawfulness of the processing of your personal data until withdrawal.
In order to exercise your rights (including the withdrawal of your consent), as well as in the event of questions regarding the processing of your personal data, please contact the us at any time using the contact details set out in section 1 above.
Without prejudice to any other remedies, you also have the right to lodge a complaint with a supervisory authority at any time.
Data Subject: Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.
Restriction of Processing: Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.
Controller: Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Processor: Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Recipient: Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.
Third party: Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Consent: Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
* * *