The protection of your personal data is very important to us. We process your personal data exclusively in accordance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
With this Privacy Policy, we inform you pursuant to Article 13 GDPR about the nature, scope, purposes and legal bases of the processing of personal data in connection with the use of our website www.efs-techhub.com, our products, services, social media presences, and our research and development activities.
Technical Access Data / Server Log Files
Cookies und Consent-Management
Technical and Organizational Security Measures
Data Protection Notice in Connection with “Vehicle Automated Driving e:fs Research”
Amendments to this Privacy Policy
1. Scope
This Privacy Policy provides you in particular with an overview of the following information:
- which of your data is processed,
- in what manner, to what extent, for what purposes and on what legal basis such data is used,
- which security measures are implemented to protect your data,
- how you may object to specific data processing operations,
- how you may obtain information about the processed data and exercise your further data subject rights.
2. Controller
The controller within the meaning of the GDPR is:
e:fs TechHub GmbH
Dr.-Ludwig-Kraus-Str. 6
85080 Gaimersheim
Germany
Phone: +49 8458 39730-182
Fax: +49 8458 39730-099
E-mail address: info@efs-techhub.com
Website: www.efs-techhub.com
3. Data Protection Officer
In accordance with the statutory requirements, we have appointed a Data Protection Officer. You may contact him at:
Name: Jürgen Beer
E-Mail address: anfrage@projekt29.de
Phone: 09412986930
External Company:
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Germany
https://projekt29.de/
4. Legal Bases for Processing
Personal data is processed – depending on the respective processing operation – on the basis of the following legal grounds:
- Article 6 (1) lit. a GDPR (consent)
- Article 6 (1) lit. b GDPR (contract / pre-contractual measures)
- Article 6 (1) lit. c GDPR (legal obligation)
- Article 6 (1) lit. d GDPR (vital interests)
- Article 6 (1) lit. f GDPR (legitimate interests)
The respective applicable legal basis is specified in the following sections.
5. Technical Access Data / Server Log Files
What data is processed?
When visiting our website, we or our web hosting provider process data relating to each access to the website (“server log files”, system and usage data). The access data includes in particular:
- name of the accessed webpage/file,
- date and time of access,
- amount of data transferred,
- notification of successful access,
- browser type and version,
- operating system used,
- referrer URL,
- IP address and the requesting provider.
Purpose and Legal Basis
The legal basis is Article 6 (1) lit. f GDPR (legitimate interest). We use the log data solely for statistical evaluations for the purpose of operating, securing, and optimizing our website. No evaluation for marketing purposes takes place in this context.
We reserve the right to subsequently review the log data if concrete indications give rise to a justified suspicion of unlawful use.
Storage Period
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, deletion takes place no later than one (1) month. Longer storage is possible; in such case, the IP addresses are deleted or anonymized so that assignment is no longer possible.
6. Cookies and Consent Management
Our website uses cookies. These are small text files stored on your device.
- The use of technically necessary cookies is based on Article 6 (1) lit. f GDPR .
- The use of additional cookies (e.g., analytics/marketing cookies) is carried out exclusively on the basis of your consent pursuant to Article 6 (1) lit. a GDPR .
Further information can be found in our separate cookie information and within the cookie consent tool used. There, you may change or withdraw your consent at any time.
7. Handling of Personal Data
Personal data is information that can be used to identify a person (e.g., name, e-mail address, telephone number, IP address). Personal data is only collected, used, and disclosed by us if this is legally permitted or if you have consented to the collection and use of such data.
8. Recipients of Your Data
Your personal data will generally only be disclosed to third parties to the extent that:
- this is necessary for the performance of a contract,
- we or the third party have a legitimate interest in the disclosure,
- you have given your consent to such disclosure, or
- we are obliged to do so due to statutory provisions or enforceable official or court orders.
Disclosure is made in particular to external contractors who perform services for us within the framework of data processing by processors pursuant to Article 28 GDPR (e.g., IT services, maintenance services, shipping services).
We point out that, upon order of the competent authority, we may in individual cases be authorized to provide information about data to the extent required for the purposes of criminal prosecution, averting threats, fulfillment of statutory tasks of security authorities, or enforcement of intellectual property rights. The legal basis for this is Article 6 (1) lit. c GDPR .
9. Transfer to Third Countries
We process your data in Germany. As a rule, we do not transfer your data to other countries or third countries (countries outside the EU/EEA) or to international organizations.
If, in individual cases, data is transferred to third countries in connection with specific services (e.g., Google services or social media providers), this is done only in compliance with the legal requirements (e.g., adequacy decision or appropriate safeguards such as EU standard contractual clauses).
10. Technical and Organizational Security Measures
We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data against risks during data transmission and against unauthorized access by third parties. These measures are adapted in accordance with the state of the art.
When collecting and transmitting data via our website, standardized SSL encryption technology is used. Complete data security cannot be guaranteed when communicating by e-mail.
11. Your Rights as a Data Subject
If personal data concerning you is processed, you are a data subject within the meaning of the GDPR. You are entitled in particular to the following rights:
11.1 Right of Access, Rectification, Restriction of Processing and Erasure
You have the right at any time to obtain, free of charge, information about the personal data stored about you, its origin and recipients, and the purpose of the data processing. Furthermore, you have the right to rectification, erasure, and restriction of the processing of your personal data, provided that the statutory requirements are met.
11.2 Right to Data Portability
You have the right to receive the data that we process on the basis of your consent or in fulfillment of a contract in a structured, commonly used and machine-readable format and to transmit those data to yourself or to a third party.
11.3 Right to Object
Insofar as we process data on the basis of Article 6 (1) lit. f GDPR (legitimate interests), you may object to such processing at any time on grounds relating to your particular situation
11.4 Withdrawal of Your Consent
You may withdraw any consent given at any time with effect for the future. This applies in particular to consents granted via our cookie consent tool.
11.5 Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority.
12. Storage Period
We retain your data only for as long as is necessary for the respective purposes for which we process your data and insofar as no statutory retention obligations prevent deletion.
If we process data for multiple purposes, such data will be automatically deleted or stored in a format that does not permit direct conclusions to be drawn about your person as soon as the last specific purpose has been fulfilled.
13. Purposes of Data Processing
13.1 Contact (e.g., via Contact Form)
When you contact us (e.g., via contact form or by e-mail), the information you provide is stored for the purpose of processing your inquiry and in the event that follow-up questions arise.
In particular, the following data may be collected and processed via the contact form:
- Salutation
- First name, last name
- E-mail address
- Telephone number
- Mobile number
The legal basis is Article 6 (1) lit. f GDPR ; if the contact aims at the conclusion of a contract, the additional legal basis is Article 6 (1) lit. b GDPR .
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case when the correspondence has ended (e.g., the matter has been conclusively clarified or there is no interest in a specific product).
Right to object: You may object at any time to the processing of your personal data by contacting the above-mentioned address. In such a case, the correspondence cannot be continued and the data stored in the course of the contact will be deleted.
13.2 Products
a) Thetis
We offer the product Thetis via our website. If you contact us via the contact form available on the Thetis product page and subsequently conclude a contract through individual communication, we process in particular the following data:
- Salutation
- First name, last name
- E-mail address
- Telephone number
- Mobile number
- Employer
- Payment information
- Address
The data collected in connection with the contact and the conclusion of a contract is processed for the following purposes:
- Issuance of a license
- Inclusion of the data in our customer database (upon establishment of a contractual relationship) and maintenance of this customer database
- Advertising
- Customer analysis
The legal basis is Article 6 (1) lit. b GDPR (contract) and Article 6 (1) lit. f GDPR (legitimate interest).
b) WHYOND
We offer the product WHYOND via our website. If you contact us via the contact form available on the WHYOND product page and subsequently conclude a contract through individual communication, we process in particular:
- Last name, first name
- Telephone number
- E-mail address
- Message
Purposes:
- Issuance of a license
- Inclusion of the data in our customer database (upon establishment of a contractual relationship) and maintenance of this customer database
- Advertising
- Customer analysis
The legal basis is Article 6 (1) lit. b GDPR and Article 6 (1) lit. f GDPR .
The data will be deleted as soon as it is no longer required for the aforementioned purposes and insofar as no statutory retention obligations prevent deletion.
c) Superb Data Kraken
We offer the product Superb Data Kraken via our website. If you contact us via the contact form available on the Superb Data Kraken product page and subsequently conclude a contract through individual communication, we process in particular the following data:
- Salutation
- First name, last name
- E-mail address
- Telephone number
- Mobile number
- Employer
- Payment information
The data collected in connection with the contact and the conclusion of a contract is processed for the following purposes:
- Issuance of a license
- Inclusion of the data in our customer database (upon establishment of a contractual relationship) and maintenance of this customer database
- Advertising
- Customer analysis
The legal basis is Article 6 (1) lit. b GDPR (contract) and Article 6 (1) lit. f GDPR (legitimate interest).
d) LeanDRA
We offer the product LeanDRA via our website. If you contact us via the contact form available on the LeanDRA product page and subsequently conclude a contract through individual communication, we process in particular the following data:
- Salutation
- First name, last name
- E-mail address
- Telephone number
- Mobile number
- Employer
- Payment information
The data collected in connection with the contact and the conclusion of a contract is processed for the following purposes:
- Issuance of a license
- Inclusion of the data in our customer database (upon establishment of a contractual relationship) and maintenance of this customer database
- Advertising
- Customer analysis
The legal basis is Article 6 (1) lit. b GDPR (contract) and Article 6 (1) lit. f GDPR (legitimate interest).
13.3 Service Providers, Suppliers, Customers / Business Partners
We process personal data of our service providers, customers, suppliers and business partners that we receive in the course of establishing contact or that you provide to us within the framework of the business relationship.
The purposes of processing include in particular:
- identifying you as a business contact,
- being able to provide you with appropriate advice,
- corresponding with you,
- informing you about our company as well as our products, services and offers,
- fulfilling our contractual obligations.
When you contact us or enter into a business relationship with us, we typically collect:
- Salutation
- First name, last name
- E-mail address
- Name of employer
- Function/position within the company
- Telephone number
- further personal data required for the fulfillment of contractual obligations
Where we process your personal data on the basis of legitimate interests, such interests consist in particular of:
- storing and processing your contact data in order to communicate with you,
- providing you with information about our company as well as our products, services and offers.
The legal basis is Article 6 (1) lit. b GDPR and/or Article 6 (1) lit. f GDPR .
13.4 Further Processing Activities
a) Google Analytics
This website uses Google Analytics, a web analytics service provided by Google. Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a server of Google in the United States.
If IP anonymization is activated, your IP address will first be shortened by Google within Member States of the European Union or in other Contracting States of the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google in the United States and shortened there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide further services related to website usage. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data held by Google.
Legal basis: Your consent pursuant to Article 6 (1) lit. a GDPR (via the cookie consent tool).
Withdrawal/Opt-out:
- You may change or withdraw your consent at any time via the cookie information on our website.
- You may prevent the collection of the data generated by the cookie relating to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available at: https://tools.google.com/dlpage/gaoptout
- Please note that the opt-out cookie may be deleted if you delete cookies in your browser settings; in this case, it may need to be set again.
This website uses Google Analytics with the extension “_anonymizeIp()”; as a result, IP addresses are processed in shortened form so that direct personal identification can be excluded.
Information on the third-party provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
b) YouTube Videos
We have integrated YouTube videos into our online offering that are stored on www.youtube.com and can be played directly from our website.
All videos are embedded in “enhanced privacy mode.” This means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will technical access data (see section on server log files) be transmitted.
We have no influence on this data transmission. Cookies may also be set when embedded in enhanced privacy mode. You may actively consent to YouTube videos via the cookie settings; only then will a connection to YouTube servers be established and cookies set.
If you are logged in to YouTube/Google, the transmitted data may be directly assigned to your account. If you do not wish this to happen, you must log out before activating the video.
The third-party provider may store this data as user profiles and use it for advertising, market research and/or the needs-based design of its website.
Objection: You have the right to object to the creation of such user profiles; to exercise this right, please contact the respective third-party provider. If you do not wish usage data to be transmitted, do not activate the embedded videos/content.
Information on the third-party provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
14. Social Media Presences
We are also active on social networks and operate company pages there. In order to communicate with you via social media and provide you with up-to-date information, we also process data via these company pages.
The data processed regularly includes contact data, content data, usage data as well as process/telemetry data (e.g., IP address, consent status, browser, operating system).
Purposes:
- Communication (contact, inquiries, feedback)
- Marketing (presentation of our company and product portfolio)
Legal basis: Article 6 (1) lit. f GDPR (legitimate interest in a broad public presence and simple contact option).
Please note: Data may also be processed outside the European Union / European Economic Area (EU/EEA). This may involve risks because an equivalent level of data protection to that of the EU may not exist.
For details on data processing and data protection rights (in particular opt-out/objection options), please refer to the data protection information provided by the respective providers. Data subject rights (e.g., access/erasure) can generally be exercised most effectively directly with the respective provider; however, you may of course also contact us.
Our Facebook page: https://www.facebook.com/efstechhub/
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Legal basis: legitimate interests (Article 6 (1) lit. f GDPR)
Privacy policy: https://www.facebook.com/privacy/policy/
Standard contractual clauses (transfer mechanism): https://www.facebook.com/legal/EU_data_transfer_addendum
Further information (joint controllership – Page Insights): https://www.facebook.com/legal/terms/information_about_page_insights_data
Our Instagram page: https://www.instagram.com/efs.techhub/
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Legal basis: legitimate interests (Article 6 (1) lit. f GDPR)
Privacy policy: https://privacycenter.instagram.com/policy
Standard contractual clauses: https://www.facebook.com/legal/EU_data_transfer_addendum
Our LinkedIn page: https://de.linkedin.com/company/efs-techhub
Provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland
Legal basis: legitimate interests (Article 6 (1) lit. f GDPR)
Privacy policy: https://de.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Joint controller addendum: https://legal.linkedin.com/pages-joint-controller-addendum
Our XING page: https://www.xing.com/pages/efstechhubgmbh
Provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany
Legal basis: legitimate interests (Article 6 (1) lit. f GDPR)
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
Kununu
Our Kununu page: https://www.kununu.com/de/efstechhubgmbh
Provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany
Legal basis: legitimate interests (Article 6 (1) lit. f GDPR)
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
Glassdoor
Our Glassdoor page:
https://www.glassdoor.de/%C3%9Cberblick/Arbeit-bei-TechHub-by-efs-EI_IE947849.11,25.htm
Provider: Glassdoor Hiring Solutions Ireland Ltd.
Legal basis: legitimate interests (Article 6 (1) lit. f GDPR)
Privacy policy: https://hrtechprivacy.com/de/brands/glassdoor
15. Data Protection Notice in Connection with “Vehicle Automated Driving e:fs Research”
For development and research purposes, we use vehicles equipped with video measurement technology, sensors, as well as radar and LiDAR measuring devices, which are appropriately marked on the body of the respective vehicle.
15.1 What data is processed and from which sources does it originate?
The measurement technology installed in the vehicles produces and processes video recordings and images (“video material”) via outward-facing cameras. The video material consists of real images of public road traffic and may therefore contain personal data if you are captured by cameras (video and infrared camera) and additional measurement technology (radar, LiDAR).
The data may include:
- Video and image recordings of you,
- Video and image recordings of the surroundings (e.g., buildings, gardens and other objects/subjects relevant in public road traffic),
- Vehicle registration numbers,
- Metadata of the video/image recordings (time and location),
- GPS data of the vehicle linked to recording data.
15.2 For what purposes and on what legal basis is processing carried out?
We process personal data on the basis of Article 6 (1) lit. c GDPR , Article 89 GDPR (scientific research), and Article 6 (1) lit. f GDPR GDPR (legitimate interests), in particular for the following purposes:
- Research and development in the field of AI/machine learning algorithms, applications and systems,
- Long-term observations in connection with AI/machine learning,
- Research and development of algorithms for automated systems (e.g., automated driving),
- Further development of methods, technologies and development environments,
- Evaluation of sensor behavior,
- Identification of critical scenarios for sensor detection,
- Validation of safety-relevant driving functions (driver assistance systems as well as highly or fully automated driving), in particular using AI-supported systems,
- Improvement of simulation through reference to real-world data,
- Demonstration of the above-mentioned research and development activities, results and data in public (e.g., showcases at trade fairs),
- Product development taking into account research and development results,
- Joint use of data with partners and provision (in anonymized form) to increase the comfort and safety of automated systems.
Processing may be carried out internally or together with external research or cooperation partners.
15.3 Storage Period / Deletion Concept
In our deletion concept, we have defined that a specific storage period will be determined as soon as this is possible in accordance with the purpose of the project and taking into account the achievement of the research objective.
16. Amendments to this Privacy Policy
We reserve the right to amend this Privacy Policy in order to adapt it to changes in legal requirements or technical developments.
Status: 2026