Website data protection statement
Our data protection practices are governed by the following data protection laws:
- GDPR (General Data Protection Regulation) of the EU for citizens of the European Union.
- CCPA (California Consumer Privacy Act) for residents of California, USA.
- APPI (Act on the Protection of Personal Information) for residents of Japan.
Further information on specific rights and obligations can be found in the relevant sections of this Privacy Policy.
General information
Information about the controller
| Company | SUSS MicroTec SE |
|---|---|
| Legal Representative | Executive Board: Burkhardt Frick (CEO), Dr. Cornelia Ballwießer (CFO), Dr. Thomas Rohe (COO) |
| Address | SUSS, Schleißheimer Str. 90, 85748 Garching |
Contact details for data protection officer
Dr. Sebastian Kraska
IITR GmbH
Marienplatz 2
80331 München
Tel. +49 89 1891 7360
email@iitr.de
General data processing information
Affected data
Personal data is only collected if you communicate it to us yourself. Apart from that, no personal data is collected. Any processing of your personal data that goes beyond the scope of the statutory permission is only possible on the basis of your express consent.
| Processing purpose | Contract execution |
|---|---|
| Categories of recipients | Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies, in so far as the data subject has given his consent or transmission, are permitted due to a prevailing interest. |
| Third-country transfers | As part of contractual execution, processors could also be used outside the European Union. |
| Duration of data storage | The duration of data storage depends on the statutory storage requirements and is usually 10 years. |
Information about other data processing procedures
Specific information about the application process
| Affected data: | Application information |
| Processing Purpose: | Implementation of application process |
| Categories of recipients: | Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest. |
| Third-country transfers: | We do not use processors outside of the European Union. |
| Duration of data storage: | Application data will generally be deleted within four months after communication of the decision unless consent has been given for a longer period of data storage. |
| Data controller: | SUSS MicroTec Netherlands B.V. Marinus van Meelweg 2, 5657EN Eindhoven, Netherlands Phone +31402005818 Website https://support-form.suss.com/ |
| Processing Purpose: | Performance of the application (processing purpose 1) Talent pool for applicants, including talent newsletter if accepted separately (processing purpose 2) |
| Legal basis for the processing: | Art. 6(1)(b) GDPR based on application (for processing purpose 1) Art. 6(1)(a) GDPR based on consent (for processing purpose 2) |
| Data recipients: | Public bodies (if required by law) and external service providers in the EU |
| Third country data transfer + legal basis for the transfer: | For processing purpose 1: (1) access to all applicant data by 3 HR employees based in Germany for the purpose of administrating the application system, including trouble shooting. (2) access to relevant applicant data by the respective VP / Head of Department who may be based in one of the following countries: Germany, USA, China, Korea, Japan, Taiwan, Singapore. The legal basis is Art. 49(1)(b) GDPR. |
| Duration of storage: | For processing purpose 1: 4 weeks after the end of the application process, unless consent is given. For processing purpose 2: 12 months, unless prior withdrawal of consent. |
| Data subject rights: | You may have the following rights in relation to the processing of your personal data: - Right of access to your data (Art. 15 GDPR) - Right to rectification of your data (Art. 16 GDPR) - Right of erasure of your data (Art. 17 GDPR) - Right to restriction of processing of your data (Art. 18 GDPR) - Right to data portability (Art. 20 GDPR) |
| - Right to lodge a complaint the a supervisory authority (Art. 77 GDPR) |
| Data controller: | 休斯微技術股份有限公司 / SUSS MicroTec (Taiwan) Co., Ltd. No. 46, Yanhe St., Zhubei City, Hsinchu County 302047, Taiwan (R.O.C.) Phone +886 351 690 98 Fax +886 351 692 62 Mail info.tw@suss.com |
| Processing Purpose: | Performance of the application (processing purpose 1) Talent pool for applicants, including talent newsletter if accepted separately (processing purpose 2) |
| Data recipient: | Public bodies (if required by law) and external service providers in the EU |
| Third country data transfers: | For processing purpose 1: (1) access to all applicant data by 3 HR employees based in Germany for the purpose of administrating the application system, including trouble shooting (2) access to relevant applicant data by the respective VP / Head of Department who may be based in one of the following countries: Germany, Netherlands, USA, China, Korea, Japan, Singapore. |
| Duration of storage: | For processing purpose 1: 4 months after the end of the application process (unless consent is given) For processing purpose 2: 12 months, unless prior withdrawal of consent |
| How and in what manner the personal data may be used: | We may use your personal data via paper, computer, telephone, email, or other automated or non-automated methods. |
| Affected data: | Title, name, e-mail address, phone number, salary expectation, notice period for the current job, curriculum vitae; optional information: disability, cover letter, references, employee referral and, if yes, which employee, job board (for processing purpose 1). Title, name, e-mail address (for processing purpose 2). |
| Data subject's rights: | You have the following rights with respect to your personal data: (i) to inquire about and review your personal data; (ii) to obtain a copy of your personal data; (iii) to supplement or correct your personal data; (iv) to demand that the collection, processing or use of your personal data be discontinued; and (v) to have your personal data deleted. The rights can be enforced under the contact information in Section “Data controller”. |
| How the data subject's rights or interests would be affected if he/she chooses not to provide the data. | Providing the requested personal data is voluntary. However, without it, we may be unable to contact you regarding the potential job or similar opportunities that require this information. |
| Data controller: | SUSS MicroTec Inc., 2520 Palisades Drive, 92882 Corona, CA, United States of America Phone +1 951 817 3700, Fax +1 951 817 0640, Mail customerserviceNA@suss.com |
| Processing Purpose: | Performance of the application (processing purpose 1) Talent pool for applicants, including talent newsletter if accepted separately (processing purpose 2) |
| Legal basis for the processing: | Art. 6(1)(b) GDPR based on the application (for processing purpose 1) Art. 6(1)(a) GDPR based on consent (for processing purpose 2) |
| Data recipients: | Public bodies (if required by law) and external service providers in the EU. |
| Duration of data storage: | 4 months after the end of the application process, unless consent is given (for processing purpose 1) 12 months, unless prior withdrawal of consent (for processing purpose 2). |
| Data subject rights: | You have the rights to access, delete, or correct your information. You also have the right to limit our use of your sensitive information (but only if we use it to profile you) and opt out of the “sharing” or “selling” of personal information (if applicable) as applicable law defines those terms. Note that applicant personal information is subject to many exceptions to applicable privacy laws. Those exceptions may limit the extent to which we can fulfil your privacy rights, like rights to access or delete personal information. For example, we may not be able to delete your personal information or provide you with access to personal information if that is necessary to comply with applicable law, to enforce or defend our legal rights, or to protect the rights of third parties |
| Affected data | Title, name, e-mail address, phone number, salary expectation, notice period for the current job, curriculum vitae; optional information: disability, cover letter, references, employee referral and, if yes, which employee, job board (for processing purpose 1) Title, name, e-mail address (for processing purpose 2). |
| Data controller: | SUSS MicroTec Korea Co., Ltd. 202, 54 Metapolis-ro, 18455 Hwaseong-city, Gyeonggi-do, Republic of Korea Phone +82 31 8015 3950 Fax +82 31 8015 3951 Mail info.kr@suss.com |
| Processing Purpose: | Performance of the application (processing purpose 1) Talent pool for applicants, including talent newsletter if accepted separately (processing purpose 2) |
| Legal basis for the processing: | Based on PIPA Art.15(1)(2): processing is necessary for taking steps prior to an employment contract (for processing purpose 1). |
| Based on explicit consent under PIPA Art.15(1)(1) (for processing purpose 2). | |
| Data recipients: | Public bodies (if required by law) and external service providers in the EU |
| Third country data transfers | For processing purpose 1: Data access outside Korea may occur in the following cases: (1) access to all applicant data by 3 HR employees based in Germany for the purpose of administrating the application system, including trouble shooting (2) access to relevant applicant data by the respective VP / Head of Department who may be based in one of the following countries: Germany, Netherlands, USA, China, Japan, Taiwan, Singapore. |
| Duration of storage: | For processing purpose 1: 3 months after the end of the recruitment process. For processing purpose 2: 12 months after consent or until withdrawal. |
| Data subject rights: | The applicant has the right to (i) request access to their personal data, (ii) request correction or deletion, (iii) request suspension of processing, and (iv) lodge a complaint with the Personal Information Protection Commission (PIPC) of Korea. |
| Further information: | The following items are processed by SUSS MicroTec Korea Co., Ltd: For processing purpose 1: name, e-mail address, phone number, education and career details, salary expectation, notice period, and CV; optional: disability information, cover letter, references, employee referral, job board. For processing purpose 2: name, e-mail address, phone number. |
| Data controller: | SUSS MicroTec KK BENEX S-3 5F, 3-20-8 Shin-Yokohama, Kohoku-ku Yokohama, Kanagawa, 222-0033 Japan Representative Director: Yuta Nagai |
| Processing Purpose: | Performance of the application, including the screening and selection of, and communication with applicants, and the sending of recruitment or offer-related documents (processing purpose 1) Talent pool for applicants, including talent newsletter (processing purpose 2) |
| Legal basis for the processing: | For processing purpose 1: Consent. For processing purpose 2 (talent pool for applicants, including sending talent newsletters): You can opt out from receiving newsletters at any time. |
| Data recipients: | We will not provide personal data to any third party without consent, except as required by law. We may entrust the processing of applicant data to external service providers only as long as necessary for the purposes set out in this Privacy Notice. In such cases, we will conduct necessary and appropriate supervision over such providers to ensure the secure handling of the applicant data in accordance with applicable laws. |
| Third country data transfers | We may jointly use applicant data with our group companies as necessary (including for access and administration of the application system), as set out below: (1) Items of applicant data to be jointly used as follows:
(2) Purpose of joint use: Performance of the application as described in Section 3 (3) Scope of joint users
With respect to the group companies listed in Section 3 located outside Japan (excluding SUSS MicroTec Solutions GmbH & Co. KG and SUSS MicroTec Netherlands B.V. in the EU), the data protection frameworks of the respective countries, and the data protection measures implemented by each company, are as follows: SUSS MicroTec Inc.
SUSS MicroTec (Shanghai) Co. Ltd.
SUSS MicroTec Korea Co., Ltd.
SUSS MicroTec (Taiwan) Co., Ltd.
SUSS MicroTec (Singapore) Pte Ltd
|
| Duration of storage: | For processing purpose 1: 4 months after the end of the application process (unless consent is given) For processing purpose 2: 12 months or once the retained personal data are no longer necessary for use |
| Data subject rights: | We will appropriately respond to any requests for notification of the purpose of use, disclosure, correction, addition, deletion, discontinuation of use or provision, and other legally prescribed actions concerning applicant data, in accordance with applicable laws and regulations. For details of the procedures, please contact us at the inquiry contact provided in Section "Further information". |
| Further information: | We take necessary and appropriate measures to prevent unauthorized access, leakage, loss, or damage of personal data and to ensure the secure management of applicant data. For opinions, questions, complaints, or other inquiries regarding our handling of personal data, please contact us at the following:
|
| Affected data: | For processing purpose 1: title, name, e-mail address, phone number, salary expectation, notice period for the current job, curriculum vitae; optional information: disability, cover letter, references, employee referral (if yes, which employee), job board. For processing purpose 2: title, name, e-mail address. |
| Data controller | SUSS MicroTec (Singapore) Pte Ltd 21 Bukit Batok Crescent, Wcega Tower, #05-70, Singapore 658065 |
| Processing Purpose: | Administering or processing the application, including any evaluative purpose in connection with the same (processing purpose 1) Talent pool for applicants, including talent newsletter if accepted separately (processing purpose 2) |
| Legal basis for the processing: | For processing purpose 1: Pursuant to paragraph 2, Part 3 of the First Schedule to the Personal Data Protection Act 2012, legitimate interests where the collection, use or disclosure, as the case may be, of personal data about an individual is necessary for evaluative purposes. For processing purpose 2: Consent. |
| Data recipients: | Public bodies (if required by law) and external service providers in the EU |
| Third country data transfers: | For processing purpose 1: (1) access to all applicant data by 3 HR employees based in Germany for the purpose of administering or processing the application, including addressing issues that may arise in connection with the same. (2) access to relevant applicant data by the respective VP / Head of Department who may be based in one of the following countries: Germany, Netherlands, USA, China, Korea, Japan, Taiwan. When we transfer your data to locations outside of Singapore, we will take steps to ensure, among other things, that appropriate contracts are in place to ensure adequacy of protection. |
| Duration of storage: | For processing purpose 1: 4 months after the end of the application process (unless consent is given) For processing purpose 2: 12 months, unless prior withdrawal of consent |
| Data subject rights: | The right to access or correct personal data under the Personal Data Protection Act 2012, or to request a withdrawal of consent to the collection use of disclosure of the applicant's personal data. |
| Affected data: | Title, name, e-mail address, phone number, salary expectation, notice period for the current job, curriculum vitae; optional information: disability, cover letter, references, employee referral and, if yes, which employee, job board (for processing purpose 1). Title, name, e-mail address (for processing purpose 2). |
| Data controller: | SUSS MicroTec (Shanghai) Co. Ltd. Room 3703, LL Land Plaza, 580 Nanjing West Rd., 200041 Shanghai, China +86 21 52340 432 info.cn@suss.com |
| Processing Purpose: | Performance of the application (processing purpose 1) Talent pool for applicants, including talent newsletter if accepted separately (processing purpose 2) |
| Legal basis for the processing: | Consent. |
| Data recipients: | Name: SUSS MicroTec, Schleissheimer Str. 90, 85748 Garching / Germany Contact details: Phone: +49 89 32007-0. E-Mail: info@suss.com Purpose: (1) Access to all applicant data by 3 HR employees based in Germany for the purpose of administrating the application system, including trouble shooting. (2) Potential access to relevant applicant data by the respective VP / Head of Department if he / she is based in Germany. Methods of processing: collection, storage, use, transmission, provision, and deletion. PI types: (1) all applicant data. (2) Relevant applicant to the extent necessary for the local VP / Head of Department Way to enforce rights: Please see contact details above.
Name: SUSS MicroTec KK 3-20-8 Shin-Yokohama, Kohoku-ku Contact details: Phone: +81 45 475 3556. E-mail: info.jp@suss.com Purpose: Potential access to relevant applicant data by the respective VP / Head of Department if he / she is based in Japan Methods of processing: collection, storage, use, transmission, provision, and deletion PI types: Relevant applicant to the extent necessary for the local VP / Head of Department Way to enforce rights: Please see contact details above. Name: SUSS MicroTec Korea Co., Ltd. 202, 54 Metapolis-ro, 18455 Hwaseong-city, Gyeonggi-do, Republic of Korea Contact details: Phone: +82 31 8015 3950. E-Mail: info.kr@suss.com Purpose: Potential access to relevant applicant data by the respective VP / Head of Department if he / she is based in Korea Methods of processing: collection, storage, use, transmission, provision, and deletion PI types: Relevant applicant to the extent necessary for the local VP / Head of Department Way to enforce rights: Please see contact details above.
Name: SUSS MicroTec Netherlands B.V. Marinus van Meelweg 2, 5657EN Eindhoven, Netherlands Contact details: Phone: +31402005818. Website: https://support-form.suss.com/ Purpose: Potential access to relevant applicant data by the respective VP / Head of Department if he / she is based in the Netherlands Methods of processing: collection, storage, use, transmission, provision, and deletion PI types: Relevant applicant to the extent necessary for the local VP / Head of Department Way to enforce rights: Please see contact details above. Name: SUSS MicroTec (Singapore) Pte Ltd 21 Bukit Batok Crescent, 658065 Singapore Contact details: Phone: +65 6271 5780. E-mail: info.sg@suss.com Purpose: Potential access to relevant applicant data by the respective VP / Head of Department if he / she is based in Singapore Methods of processing: collection, storage, use, transmission, provision, and deletion PI types: Relevant applicant to the extent necessary for the local VP / Head of Department Way to enforce rights: Please see contact details above.
Name: SUSS MicroTec (Taiwan) Co., Ltd. 9F-8, No. 12, Taiyuan 2nd St., 302047 Zhubei City, Hsinchu County, Taiwan Contact details: Phone: +886 351 690 98. E-mail: info.tw@suss.com Purpose: Potential access to relevant applicant data by the respective VP / Head of Department if he / she is based in Taiwan Methods of processing: collection, storage, use, transmission, provision, and deletion PI types: Relevant applicant to the extent necessary for the local VP / Head of Department Way to enforce rights: Please see contact details above.
Name: SUSS MicroTec Inc. 2520 Palisades Drive, 92882 Corona, CA, United States of America Contact details: Phone: +1 951 817 3700. E-mail customerserviceNA@suss.com Purpose: Potential access to relevant applicant data by the respective VP / Head of Department if he / she is based in the US Methods of processing: collection, storage, use, transmission, provision, and deletion PI types: Relevant applicant to the extent necessary for the local VP / Head of Department Way to enforce rights: Please see contact details above. We may transfer your PI to entrusted processors in China acting for and on our behalf who need the PI we provide to them so that they can deliver their goods or services. |
| Duration of data storage: | 4 months after the end of the application process, unless prior withdrawal of consent (for processing purpose 1). 12 months after the end of the application process, unless prior withdrawal of consent (for processing purpose 2). |
| Data subject rights: | The PIPL recognises the following rights:
A close relative of a deceased individual whose PI is processed may exercise the rights set out above, unless the deceased arranges otherwise before their death. If you wish to exercise any of the above rights, please send an e-mail to the above e-mail address. |
Specific information for the processing of customer data/prospective parties’ data
| Affected data: | Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent. |
| Processing Purpose: | Contract execution. |
| Categories of recipients: | Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest. |
| Third-country transfers: | We do not use processors outside of the European Union. |
| Duration of data storage: | The duration of data storage depends on the statutory storage requirements and is usually 10 years. |
Specific information on the processing of employee data
| Affected data: | Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent. |
| Processing Purpose: | Contract execution. |
| Categories of recipients: | Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest. |
| Third-country transfers: | We do not use processors outside of the European Union. |
| Duration of data storage: | The duration of data storage depends on the statutory storage requirements and is usually 10 years. |
Specific information for the processing of supplier data
| Affected data: | Data communicated for contract execution; if necessary, additional data for processing on the basis of your express consent. |
| Processing Purpose: | Contract execution. |
| Categories of recipients: | Public authorities in the event of priority legislation. External service providers or other contractors. Other external bodies in so far as the data subject has given his consent or a transmission is permitted due to a prevailing interest. |
| Third-country transfers: | We do not use processors outside of the European Union. |
| Duration of data storage: | The duration of data storage depends on the statutory storage requirements and is usually 10 years. |
Specific information on using video conference/webinar software
| Affected data: | Data communicated when using video conference software/webinar software (especially first name, last name, an email address; optional: audio transmission data; optional: video transmission data; optional: use of chat function); the data your system is technically required to process in order to establish a connection with the provider of the conference software |
| Processing Purpose: | Conducting video conferences/webinars. |
| Categories of recipients: | Public agencies where priority legal provisions exist. External service providers or other contractors, e.g., for data processing and hosting. Other external bodies insofar as the data subject has given his or her consent or transmission is permitted due to a prevailing interest. |
| Third-country transfers: | Contract processors outside the European Union are used (in this case: the United States of America); the appropriate standard contract clauses have been concluded with the service provider |
| Duration of data storage: | Video conferences can only be recorded if participants have provided documented consent in advance. The technical data will be deleted if they are no longer required. The duration of data storage depends on the statutory storage requirements and is usually 10 years. |
Specific information on the processing of photo and film recordings at events
| Processing Purpose: | Taking and publishing photos and films for documentation and public relations purposes (e.g. on our website, in social media or in print media). |
| Legal basis: | Art. 6 para. 1 lit. f GDPR (legitimate interest in public relations and external presentation) possibly Art. 6 para. 1 lit. a GDPR (consent) |
| Categories of recipients: | Internal departments, possibly service providers in the area of public relations, web hosting, social media platforms |
| Information on data subject rights: | You have the right to information, correction, deletion, restriction of processing and to object to the processing of your data |
| Information on group recordings: | In the case of group recordings where the focus is not on individual persons, there is no labeling and no separate consent |
| Duration of data storage: | Until the purpose ceases to apply or consent is withdrawn, provided there are no statutory retention obligations to the contrary |
Specific information about the website
Use of a newsletter
When registering for our newsletter, you provide us with your email address and, on an optional basis, other information. We use these data solely for the purpose of sending you the newsletter. We retain the data that you disclose in your newsletter application until you cancel your subscription to our newsletter. You can unsubscribe at any time via the link in the newsletter intended for this purpose, or by sending us the appropriate notification. By unsubscribing, you revoke the use of your email address.
We also use your email address, which we receive in connection with the sale of a product or service, exclusively for direct advertising in the form of our newsletter for products or services that we sell that are similar to the ones you ordered, provided that you have not objected to having your email used in this way. You may object to the use of your email address at any time without incurring any costs other than the transmission costs according to the basic rates. Your objection (and thus the cancellation of our newsletter) can be communicated by sending the appropriate message to our email address.
Website log files
When you visit our websites, your browser transmits certain data to our web server for technical reasons. The following data are recorded during an ongoing connection for communication between your internet browser and our web server:
- Date and time of your request
- Name of the requested file
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- Type and version of the browser and the operating system you use
- Full IP address of the requesting computer
- Quantity of data transferred
For reasons of technical security, in particular, to prevent attacks on our web server, we store these data for a short period of time. It is impossible to discern the identity of individual persons based on this data. After seven days at the latest, the data is anonymized by shortening the IP address at the domain level, so that it is no longer possible to establish any reference to the individual user. The anonymized data will also be processed for statistical purposes. We don’t compare any data to data in other databases or forward them to third parties, even in excerpts.
Use of Google Analytics with consent from website visitors
This website uses Google Analytics – a web analytics service provided by Google Inc. (“Google”) – and obtains consent to do so from website visitors. Google Analytics uses so-called “cookies,” text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and stored there. However, in the event IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Treaty on the European Economic Area. The full IP address will be transmitted to a Google server in the USA and shortened there only on an exceptional basis. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services to website operators relating to website activity and Internet usage. Google will not associate the IP address transmitted under Google Analytics by your browser with other data held by Google. You may prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we should inform you in this case that you might not be able to enjoy all the functionality of this website to its full extent. You may additionally prevent the recording of the data (including your IP address) to Google that is generated by the cookie and that pertains to your use of the website, or the processing of these data, by downloading and installing the following browser plug-in available through the following link: http://tools.google.com/dlpage/gaoptout?hl=en or by rejecting cookies via our cookie settings dialog. In view of the discussion about the use of analytics tools with full IP addresses, we would like to point out that this website uses Google Analytics with the extension “_anonymizeIp()” which means that IP addresses are used only in a shortened form in order to prevent any direct correlation to specific persons.
Use of Google Ads and Google Tag Manager with consent from website visitors
This website uses Google Ads Conversion Tracking – a web analytics service provided by Google Inc. (“Google”) – and obtains consent to do so from website visitors. Google Ads Conversion Tracking also uses “cookies” stored on your computer that allow the analysis of your use of the website. The information generated by the cookie about your use of this website is transmitted to a Google server in the US and stored there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services related to website activity and internet usage. Google may also transfer this information to third parties if required by law or in so far as third parties process this data on behalf of Google. Google will in no case connect the data with other data from Google. You can generally prevent the use of cookies by prohibiting the storage of cookies in your browser.
Cookies
Further information and contacts
In addition, you may invoke your rights to correction or deletion at any time, to restrict processing, to object to processing, and to data portability. Here you will find the option to contact us via contact form. You also have the right to contact the data protection supervisory authorit