Privacy Policy

Purpose of Data Processing and Legal Basis

Website Operation
When you visit our website, the browser used on your device automatically sends information to our website server and temporarily saves it in a so-called log file. We have no influence on this.

The processing of the IP address is based on our legitimate interest (Art. 6 Para. 1 lit. f GDPR) of a technically error-free presentation of our website. The IP address is used by us for the following purposes:

• guarantee a smooth connection,

• guarantee comfortable use of our website,

• analysis of system security and stability.

Furthermore, we use cookies to statistically evaluate your behaviour on our website. This analysis is anonymous and cannot be traced back to you. You can find more information on this in the chapter Transfer of data

Conclusion, Management or Termination of a Contract
Main business activity of the Elbe Flugzeugwerke GmbH is the development and manufacturing of flat fibre-reinforced composite components for all Airbus models; the conversion, maintenance, and repair of aircrafts of the entire Airbus family as well as engineering services for certification and approval. In this context, we process the data required for the conclusion, implementation, or termination of a contract.

You provide us with the data because of the contractual relationship between you and us. To process your e-mail address, we are also obliged to send an electronic order confirmation due to legal requirements in the German Civil Code.

Customer Support
For optimal customer support, we use the Salesforce customer management system, represented in Germany by Salesforce.com Germany GmbH, Erika-Mann-Str. 63, 80636 Munich, Germany (“Salesforce”). We use Salesforce to collect, link and evaluate data processed on our website (contact, customer account, order data, etc.) and throughout our contractual relationship. This data is transmitted to the Salesforce servers. This data processing is based on our overriding legitimate interest in providing our customer support (Art. 6 Para. 1 lit. f GDPR).

Salesforce is a corporation with offices around the world. The parent company of the group is salesforce.com, Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA. All data collected by EFW is processed within the EU. Further details can be found in the Privacy Notice for Customer Support.

Requests by e-mail, telephone or contact form
If you send us inquiries by e-mail, telephone or contact form, your inquiry including all resulting personal data (name, contact details) will be stored and processed by us for the purpose of processing your request and any follow-up questions. We do not pass on this data without your consent.

The data you send to us by request will remain with us until you ask us to delete it, you withdraw your consent or the purpose for data processing no longer applies. Legal retention periods remain unaffected.

This data is processed either in the context of fulfilling a contract or to carry out pre-contractual measures (Art. 6 Para. lit. b GDPR) or on our legitimate interest (Art. 6 Para. 1 lit. f GDPR), to ensure that inquiries are processed effectively.

Application Management
To be able to process your application as quickly as possible, we process your applicant data with the help of an external service provider.

To be able to carry out the application process, we assess your data for your suitability for the position for which you have applied. In this context, we may collect further information about you, for example in job interviews.

The processing of your applicant data is based on the establishment of an employment relationship (Art. 6 Para. 1 lit. b GDPR). Further details can be found in the Privacy Notice of the applicant portal.

Visitor Management
If you register to visit us, we process your personal contact details to organize your visit. The processing of your personal data takes place based on our legitimate interest - protection of house rights and company security (Art. 6 Para. 1 lit. f GDPR). Your personal data will be deleted when the purpose no longer applies (usually 90 days). More details can be found in the Privacy Notice for visitors.