Data protection

1. Preface and Selected Terms

On the one hand, this data protection declaration informs visitors and users of our website about the online data processing procedures in which personal data are processed. On the other hand, you will receive information about our processing operations that do not primarily take place online.

  • DSGVO is the abbreviation for the European Basic Data Protection Regulation.
  • BDSG is the abbreviation for the Federal Data Protection Act in its current version.
  • Personal data are all individual details that allow conclusions to be drawn about a natural person (for definition see Art. 4 Para. 1 DSGVO). This includes names, e-mail addresses, telephone numbers, but also data such as IP addresses or customer numbers.
  • The processing of personal data includes all operations, such as the collection, storage, transmission, archiving or deletion of personal data (definition in Art. 4 para. 2 DSGVO).
  • The data subject within the meaning of data protection law is any natural person from whom personal data are processed.
  • Further definitions of terms can be found in the Basic Data Protection Regulation, which is mainly contained in Art. 4 of the DSGVO (definitions).

2. Responsibilities

Person responsible for data processing on this website

Haas Schleifmaschinen GmbH
Adelbert-Haas-Straße 1
78647 Trossingen
Phone: +49 (0) 74 25 / 33 71-0
Fax: +49 (0) 74 25 / 33 71-50
E-Mail: info(at)multigrind(dot)com
Web: www.multigrind.com

Data Protection Officer required by law

DSB External Data Protection Officer Stuttgart

Fabian Henkel
Diplom-Betriebswirt (FH)
Certified data protection officer
Phone: +49(0)176 32744172
E-Mail: info(at)externer-datenschutzbeauftragter-stuttgart(dot)de
Web: https://www.externer-datenschutzbeauftragter-stuttgart.de

3. Overview

The following contents give you a brief overview of the processing of personal data, more detailed information can be found in the respective passages which are presented in detail.

Security on our website (SSL Secure Socket Layer)
Our website is equipped with an SSL certificate, which is used to encrypt data transmissions. This happens, for example, when you send us a message via a form. However, as a precaution we would like to point out that a hundred percent security in electronic data processing is not possible and that there is always a residual risk.

Data, which you submit to us
On this page we process the data you enter yourself, for example in a form. In this case, the purpose of the processing results from the type of form and from this data protection declaration. Even if you send us a message by e-mail, for example, or contact us in some other way, we process your data in accordance with the purpose of the contact.

Automatic server log files
On the other hand, our server automatically records all access and thus also IP addresses (log files), this serves to defend against attacks, analyse access figures and ensure smooth operation.

Use of cookies
Cookies help us to provide various services, for more information please refer to this privacy policy.

Analysis Tools
In addition to the pure server log files, which also provide us with information on page views, we use analysis tools. These tools provide us with detailed insights into the content of our site visited, the flow of behaviour and, for example, the country from which access took place. In order for such services to work, cookies must be set at the site visitor or scripts must be executed.

Plugins and Content Delivery Networks
We partly use plugins and content delivery networks, well-known examples for such services would be the video service YouTube. If such services are integrated via a website, access data is transmitted to the services. Usually this is your IP address and other metadata, such as time and date of access. As a rule, this is provided by setting cookies.

Newsletter / Direct Marketing

a) Direct marketing to existing customers in the legitimate interest
We reserve the right to send newsletters to our customers on the basis of §7 para. 3 UWG ui.v.m Art. 6 para. 1 lit. f DSGVO. You can of course object to receiving direct marketing information at any time.

b) Direct marketing on the basis of your consent
If you give us your consent, we will send you newsletters until you withdraw your consent. You can revoke your consent to us at any time with effect for the future.

Further data recipients

a) Service Providers within Data Processing Agreements
We have commissioned service providers in accordance with Article 28 GDPR, for example in the field of IT services, web hosting, e-mail hosting or printing services. They process personal data for us in accordance with instructions.

b) Utilisation of services from other fields
If it is necessary (for example, for the execution of a contract), we will pass on your data to, for example, banks, other payment service providers, shipping service providers, our tax consultant or lawyer.

c) Legal obligations
In addition, we are obliged in certain cases to make a report to the responsible authorities on the basis of the Money Laundering Act. We are also subject to other legal obligations, such as commercial or tax laws, in which context we are required to disclose certain information to tax authorities, for example.

d) Clarification of criminal offences
Insofar as it should be necessary for the investigation of a crime, we pass on data to the criminal prosecution authorities.

General information on deletion periods for personal data
We process the data as long as this is necessary for the respective purpose. If necessary, we will process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract; in addition, we are obliged to comply with statutory storage obligations. If the data processing is based on your consent, we will delete your data after your revocation.

Transfer of personal data to a third country
We try to have all service providers and services provided by providers within the European Union. A transfer to a third country may be considered if you have given us your consent and/or we have concluded a contract for data processing in accordance with Art. 28 DSGVO, taking into account appropriate guarantees. In individual cases we may use plug-ins or tools hosted in third countries, but we may use them on the basis of our legitimate interests. In these cases we will point out the circumstances if necessary.

Obligation to provide personal data
The provision of personal data is regularly required for the initiation, conclusion, processing and reversal of a contract. In the event that you do not provide the necessary personal data, we will not be able to conclude and fulfil a contract with you.

4. Legal Bases for the Processing of Personal Data

The legal bases for the processing of personal data are exceptional circumstances which allow the processing of personal data. The main legal bases are reflected in particular in Art. 6 DSGVO. The legal bases according to which we process personal data are described in the individual processing operations in this data protection declaration.

Consent granted (Art. 6 para. 1 lit. a DSGVO)
Consent is one of these legal bases and presupposes that the person giving consent gives it in an informed manner and on a voluntary basis. Consent on the basis of Art. 6 para. 1 letter a DSGVO can be revoked at any time without giving reasons.

Contract-related data processing (Art. 6 para. 1 lit. b DSGVO)
The processing of personal data for the purpose of initiating or implementing contracts is also a legal basis and is defined in Art. 6 para. 1 lit. b DSGVO.

Legal obligation (Art. 6 para. 1 lit. c DSGVO)
The exceptional nature of data processing due to a legal obligation is found in Art. 6 para. 1 lit. c DSGVO, for example we are obliged to comply with certain retention periods under commercial and tax law.

Legitimate interests (Art. 6 para. 1 lit. f DSGVO)
The processing of personal data on the basis of a balancing of interests pursuant to Art. 6 para. 1 lit. f DSGVO permits processing after careful consideration of financial or legal interests against the interests of the data subject worthy of protection.

5. Your Rights under the Basic Data Protection Regulation

Every natural person is entitled to certain rights, which are defined in particular in Articles 15 to 21 and 77 of the DSGVO. In principle, you have the following rights, which you can claim against us.

Right to revoke a consent granted under Art. 7 DSGVO
You can revoke any consent you have given us at any time without giving reasons with effect for the future.

Right to information according to Art. 15 DSGVO (restrictions according to § 34 BDSG possible)
You have the right at any time to request information about the data processed by you and the purposes of the processing.

Right of rectification under Art. 16 DSGVO
If you discover that we are processing incorrect or incomplete data about you, you have the right to correction.

Right to deletion according to art. 17 DSGVO (restrictions according to § 35 BDSG possible)
You have the right to request the deletion of your personal data that we process about you at any time. Insofar as complete deletion is not possible, for example, because we must comply with statutory storage obligations or we can assert legitimate interests for other reasons, we will limit your data until

Right to restrict processing under Art. 18 DSGVO

You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time at the address given in the imprint. The right to restrict processing exists in the following cases:

  • If you dispute the correctness of your personal data stored with us, we usually need time to check this. For the duration of the review, you have the right to demand the restriction of the processing of your personal data.
  • If the processing of your personal data was/is unlawful, you can demand the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you do need it to exercise, defend or assert legal claims, you have the right to request that we limit the processing of your personal data instead of deleting it.
  • If you have lodged an objection in accordance with Art. 21 para. 1 DSGVO, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests outweigh the interests of the parties concerned, you have the right to demand that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, these data – apart from their storage – may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

Right to data transferability according to Art. 20 DSGVO
You have the right to have data, which we process automatically on the basis of your consent or in fulfilment of a contract, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only take place to the extent that it is technically feasible.

Right to object to certain processing operations and direct advertising in accordance with Art. 21 DSGVO

If the data processing is carried out on the basis of Article 6 paragraph 1 letter e or f FADP, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, including profiling based on these provisions. You will find the respective legal basis on which processing is based in this data protection declaration. If you object, we will no longer process your personal data unless we can demonstrate compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves the assertion, exercise or defence of legal claims (objection pursuant to Art. 21 para. 1 DSGVO).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it is connected with such direct marketing. If you object, your personal data will no longer be used for the purpose of direct marketing (objection under Art. 21 para. 2 DPA).

Right of appeal to a supervisory authority pursuant to Art. 77 DGVO in conjunction with § 19 BDSG
In the case of infringements of the DPAs, the persons concerned have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the suspected infringement. This right of appeal is without prejudice to other administrative or judicial remedies.

6. External Hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated by a website. The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO). Our hoster will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions with regard to this data.

We have commissioned the following hoster:
Panama Werbeagentur GmbH
Eugensplatz 1
70184 Stuttgart

Conclusion of a data processing agreement
In order to guarantee data protection compliant processing, we have concluded a contract for data processing in accordance to Article 28 GDPR with our host.

7. Automatic Server Log Files

Our web server automatically logs all access and thus also IP addresses of visitors. This serves to ward off attacks, analyse access figures and ensure smooth operation. We have a legitimate interest in this (Art. 6 lit. f DSGVO).

As a rule, the server log records not only the IP address but also other metadata about the session; these data are listed below.

  • Date and time of access
  • Information about the browser type and version Browser
  • Information on the operating system used
  • Device (Client)
  • Refferer URL (via which page you landed with us)
  • Called up hyperlinks

We process these data only for the above mentioned purposes. We delete server log files after six months at the latest.

8. Cookies

8.1 General information

When you visit our website, information is stored on your end device in the form of cookies. A cookie is a small data record in the form of a file in which data such as personal page settings and log-in information is stored. With the use of cookies, we make it easier for you to use our online offer through various service functions (e.g. recognition of previous visits) and can thus better tailor the Internet offer to your needs.

In addition, with your consent, we use third-party cookies for analysis, retargeting and remarketing purposes in order to optimize our website and for interest-based marketing purposes. The stored surfing behaviour is analysed using an algorithm so that targeted interest-based product recommendations can then be displayed in the form of banners or advertisements on third-party websites. The pseudonymised user profiles will not be merged with personal data about the bearer of the pseudonym without the express consent of the person concerned.

You can prevent cookies from being saved and delete existing cookies by making the appropriate settings in your browser. The help function of most browsers explains how to make these settings. If you do not accept cookies, however, this may impair the service functions of the Internet offering.

Comprehensive information on how to do this on a variety of browsers is available on the following websites: youronlinechoices, Network Advertising Initiative and/or Digital Advertising Alliance. You will also find information on how to delete cookies from your computer and general information about cookies.

8.2 Explanations on the use of cookies

8.2.1 Cookie types by runtime

Session cookies: Session cookies are deleted at the latest when you leave our website and close your browser.

Persistent cookies: These cookies remain stored even after you leave our website and close your browser. Persistent cookies can have different durations, from one day to several years. These cookies can perform various functions, for example, they can store your login information so that you are automatically logged in when you return to our website. Other persistent cookies are used for analysis, tracking and marketing purposes.

8.2.2 Cookie types by origin

We use both first-party cookies and third-party cookies. First-party cookies, are cookies that originate directly from us. Third party cookies are cookies that are placed via a third party provider. We use various third-party cookies for analysis, tracking and marketing purposes.

8.2.3 Cookie types by function

Technically required or necessary cookies

These cookies enable the operation of our website. Without technically necessary cookies, our website would not be usable or only to a very limited extent. For example, such cookies are used when you log on to our site or add a product to your shopping cart. Sometimes necessary cookies also serve security purposes.

Analysis and statistics cookies

Analysis Cookies collect information about the behaviour of the site visitors, provide information about the length of stay and which information has been called up. Information is also collected about which website visitors come from, how many visitors the websites have and how long the user stays on the websites. The aim of these cookies is to use the information collected to optimise our website.

Tracking and marketing cookies

Tracking or marketing cookies (also known as remarketing and retargeting cookies) enable an analysis of browser behaviour, they store which contents were visited or which products the user was looking for (tracking in this sense means tracing). On the basis of these cookies, a user can also be identified across pages with the aim of displaying advertisements tailored to his or her interests.

8.3 Legal basis and instructions for setting your preferences

We use technically required cookies in the interest of a functional and stable website (Art. 6 para. 1 lit. f DSGVO), other cookies may only be used with your consent (Art. 6 para. 1 lit. a DSGVO). You can set your preferences with regard to the selection of non-essential cookies at the beginning of your visit; in addition, you can adjust your preferences at any time.

The individual legal bases for the use of various tools that use cookies can be found in the respective passages of our data protection declaration.

8.4 Consent Management

We offer you the possibility to choose whether and which cookies and services you want to allow. For this purpose we have implemented a so-called Consent Management, which is automatically displayed when you first visit our website or after the preference cookie has expired.

Once you have confirmed your selection regarding cookies and services, a cookie is placed in your browser to store your preferences. The cookie for storing your preferences is called “CookieControl” and has a term of 3 months. After deleting this cookie, you will be prompted again to select your preferences.

You can change your preferences at any time and revoke the consent you have given. For this purpose you will find a button at the bottom left, with which you can call up the Consent Management.

The provider of our implemented Consent Management solution is CIVIC COMPUTING LIMITED, 12 South Charlotte Street, Edinburgh, Scotland, EH2 4AX.

9. Data Collection and Data Transmission Initiated by the Data Subject

Communication by e-mail

If you send us an e-mail, we process your data according to the content and purpose of the message. As a rule, the processing is carried out on the basis of pre-contractual measures or in the course of the implementation of a contractual relationship on the basis of Art. 6 para. 1 lit. b DSGVO and Art. 6 para. 1 lit. f. DSGVO. It is a legitimate interest to process your request quickly and efficiently.

Insofar as it concerns a product- or service-related message, we generally process your data on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f DSGVO.

Please note that we store all incoming e-mails in accordance with the principles of proper accounting for a period of ten years, starting on the first day of the following year in which the message is received. In so far as you request us to delete the data, we will henceforth restrict your data for processing and only store it for the purpose of complying with retention periods in our legitimate interest.

Communication by telephone or fax

Even if you contact us by phone or fax, we will process your data either to initiate and implement contractual relationships (if the content is product- or service-related) and/or in our legitimate interest, analogous to contacting you by e-mail.

We do not record the contents of conversations, but we may make notes for the processing of your inquiry. This will be stored until the purpose of data processing has been achieved and we no longer have any legitimate interest in processing. If necessary, contents of the conversation will be stored anonymously for statistical purposes. Of course you can request deletion at any time.

Message via contact form

You have the possibility to send us messages via contact form. In doing so, we process the data that you have entered into the data entry mask. Mandatory fields are marked and must be filled in. The purpose of data processing is to process your request and, if necessary, to contact you afterwards. The legal basis for processing the data entered in the contact form is generally based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent at any time without having to give us any reasons for doing so in the future. In addition, we process your data for the initiation or execution of chewing contracts, insofar as you ask us product-related questions, for example (Art. 6 para. 1 lit. b DSGVO).

We store the transmitted data until the purpose of data storage has been achieved or you revoke your consent. Please note that under certain circumstances the process may be subject to statutory retention periods. In this case, we will restrict your data for further processing until such time as it expires.

Registration for a trade fair via web form

You have the possibility to register for a visit to the trade fair via web form. If you register for the trade fair via the web form, we will save and process the contact data you provide there as well as the other information from the form for planning our trade fair presentation and in case of follow-up questions.

The following data is required for registration: Name, first name, company and e-mail address.

The processing of the data entered in the registration form is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. All you need to do is send us an informal message by e-mail. The legality of the data processing operations carried out up to the point of revocation remains unaffected by the revocation.

The data entered by you in the registration form will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for which it was stored ceases to apply (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Registration for the distribution list (newsletter) as part of the trade fair registration

When registering for the trade fair, you have the option of registering for our distribution list (newsletter); your separate consent is required for this. If you register for our mailing list, you will receive an e-mail with a confirmation link. You will only receive regular newsletters from us in the future after you have confirmed your registration. You will find more detailed information on this under “Direct marketing” in this data protection declaration.

Registration for the newsletter is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of your data, your e-mail address and its use for sending the newsletter at any time, for example by clicking on the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation. The data you have provided us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you have cancelled your subscription. Data that has been stored for other purposes remains unaffected by this.

We will never pass on your data to unauthorized third parties without your consent.

Comment function for blog posts
For the comment function on our blog, in addition to your comment, information about the time of the comment’s creation, your e-mail address and, if you are not posting anonymously, the user name you have chosen are stored. The comments are stored on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke any consent you have given at any time. All you need to do is send us an informal message by e-mail. The legality of the data processing operations already carried out remains unaffected by the revocation.

Storage of the IP address
Our comment function stores the IP addresses of users who post comments. Since we do not check comments on this website before they are activated, we need this data to be able to take action against the author in case of legal violations such as insults or propaganda.

Storage period of comments
The comments and the associated data (e.g. IP address) are stored and remain on our site until the commented content is completely deleted or the comments have to be deleted for legal reasons (e.g. insulting comments).

Analysis by WiredMinds
Our website uses counting pixel technology provided by WiredMinds GmbH (www.wiredminds.de) to analyze visitor behavior. In connection with this, the IP address of the visitor is processed. The processing occurs only for the purpose of collecting company based information such as company name, for example. IP addresses of natural persons are excluded from any further processing by means of a whitelist. An IP address is not stored in LeadLab under any circumstances. While processing data, it is our outmost interest to protect the rights of natural persons. Our interest in processing data is based on Article 6(1)(f) GDPR. At no time is it possible to draw conclusions from the collected data on an identifiable person. WiredMinds GmbH uses this information to create anonymized usage profiles of the visit behavior on our website. Data obtained during this process is not used to personally identify visitors of our website.

10. Direct Marketing

Direct marketing to existing customers in the legitimate interest

We reserve the right to use the data collected on the occasion of a sales or service contract for direct advertising by e-mail or by post in accordance with § 7 para. 3 UWG, if the customer does not object or has not objected to this use. The direct advertising exclusively comprises offers of similar products or services as the products or services already purchased by the user from us. We have a justified economic interest (Art. 6 para. 1 lit. f DSGVO) in informing our customers about new products and improving our services. Of course you can object to receiving direct advertising at any time. Please address your objection to the responsible office mentioned above.

Direct marketing based on your consent (newsletter)

You have the opportunity to give us your consent to receive direct marketing content. If you give your consent (Art. 6 para. 1 lit. a DSGVO), for example to receive our e-mail newsletter, we will process your data for the purpose of direct marketing measures by e-mail.

Since we are obliged to check the accuracy of the e-mail address you provide when registering for the newsletter and want to ensure that it is correct, we use procedures that enable us to verify the ownership of the e-mail address. As a rule, this verification is carried out by the double opt-in procedure. After registration you will receive an e-mail with a link that you must click to confirm. If the Double-Opt-In procedure is not available due to temporary technical reasons, we will send you an e-mail to which you can reply without text to confirm your identity.

You can revoke your consent at any time with effect for the future, for this purpose you will find a “unsubscribe” link in every newsletter. Alternatively, you can send us an e-mail with the subject “Unsubscribe from newsletter”. We process your data until you revoke your consent. Legal retention periods remain unaffected.

After you have been removed from the newsletter distribution list, your e-mail address may be stored in a blacklist by us or the newsletter service provider to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in compliance with the legal requirements when sending newsletters (legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

Newsletter2Go

We use Newsletter2Go for sending newsletters. The provider is Newsletter2Go GmbH, Nürnberger Straße 8, 10787 Berlin, Germany. Newsletter2Go is a service that can be used to organize and analyze the dispatch of newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on the servers of Newsletter2Go in Germany. If you do not want to receive an analysis from Newsletter2Go, you must unsubscribe from the newsletter. For this purpose we provide a corresponding link in every newsletter message. You can also unsubscribe directly on the website.

Data analysis by Newsletter2Go

With the help of Newsletter2Go it is possible for us to analyze our newsletter campaigns. For example, we can see whether a newsletter message was opened and which links were clicked on, if any. In this way we can determine, among other things, which links were clicked on particularly often. We can also see whether certain previously defined actions were carried out after opening/clicking (conversion rate). For example, we can see whether you have made a purchase after clicking on the newsletter. Newsletter2Go also allows us to divide the newsletter recipients into different categories (“clustering”). Thereby the newsletter recipients can be divided e.g. by age, gender or place of residence. This way the newsletter can be better adapted to the respective target groups.

Detailed information about the functions of Newsletter2Go can be found in the following link: www.newsletter2go.de/features/newsletter-software/.

Conclusion of a data processing agreement

We have signed a contract with Newsletter2Go in which we commit Newsletter2Go to protect the data of our customers and not to pass it on to third parties. This contract can be viewed under the following link: www.newsletter2go.de/docs/datenschutz/ADV_Muster_Newsletter2Go_GmbH_latest_Form.pdf.

11. Information for Applicants

Data protection provisions application procedure

If you apply to us, whether for an advertised position or on your own initiative, we process your data to carry out the selection process. It is irrelevant to us whether you apply by post, by e-mail or, if available for the respective position, by online form.

As a matter of principle, we only process the data that you yourself have provided us with in the context of an application process. Other sources may be consulted after information and consultation with you. For example, whether we may contact a former employer.

The legal basis for the implementation of an application procedure is §26 BDSG in conjunction with Art. 6 para. 1 lit. b DSGVO (initiation of employment contract). If you give us your consent to store your data for a longer period of time, this will be done on the legal basis of Art. 6 para. 1 lit. a DSGVO.

Deletion periods Applicant data

We delete applicant data for a maximum of 4 months after the application process has been completed (when a candidate has been selected and all applicants have been informed of the outcome). The purpose of the data processing is generally no longer given with the end of the selection procedure, but we have a legitimate interest (Art. 6 para. 1 letter f DSGVO) in being able to defend ourselves against any claims of rejected applicants. If you have the impression that your interests in immediate deletion outweigh any claims, you have the opportunity to ask us to do so. We will then examine your request and give you feedback.

After the expiry of the above-mentioned period, your data will be deleted, unless we have to defend ourselves, for example in ongoing proceedings, for example due to a complaint under the General Equal Treatment Act. In this case, we will delete your data after the end of the proceedings, subject to any statutory retention periods.

If we may store your data for a longer period of time on the basis of your consent, we will delete your data if you request us to do so and revoke your consent. If necessary, we will also delete your data before revoking your consent if it is foreseeable that no job will be available.

Inclusion in our pool of applicants

If we cannot offer you a job at the moment, we may ask you for your consent to further storage of your data. This serves the purpose of offering you a suitable position at a later date. The legal basis for processing your data in our applicant pool is your consent (Art. 6 Aba. 1 lit. a DSGVO). Of course you can revoke your consent at any time with effect for the future. If you do not revoke your consent yourself within a period of two years, we will delete your data from our applicant pool at the latest by then.

12. Analysis Tools

Google Analytics

We use functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called “cookies”. These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both his website and his advertising. If consent has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6 para. 1 letter a DSGVO; consent can be revoked at any time.

IP Anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.

Browser Plugin
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent the collection of your data by Google Analytics by changing your preferences regarding the use of cookies on our site. To do this, you will find a button at the bottom left, which you can use to call up Consent Management.

You can find more information on how Google Analytics handles user data in the Google privacy policy: support.google.com/analytics/answer/6004245.

Data processing agreement
We have concluded a contract with Google for data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the “demographic features” function of Google Analytics. This allows reports to be generated that contain information about the age, gender and interests of the site visitors. This data comes from interest-based advertising by Google as well as from visitor data from third parties. This data cannot be attributed to any specific person. You can disable this feature at any time by changing the ad settings in your Google Account, or generally prohibit Google Analytics from collecting your information as described in the “Opting out of data collection” section.

Storage period
User and event-level data stored at Google that is linked to cookies, user IDs (e.g., User ID) or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. Please see the following link for details: https://support.google.com/analytics/answer/76610096?hl=de

Name Duration Description Service
_ga 2 years Registers a unique ID that is used to generate statistical data about how the visitor uses the website. Google Analytics
_gat 1 days Is used by Google Analytics to throttle the request rate. Google Analytics
_gid 1 days Registers a unique ID that is used to generate statistical data about how the visitor uses the website. Google Analytics

Google DoubleClick

This website uses features of Google DoubleClick. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (hereinafter “DoubleClick”).

DoubleClick is used to display interest-based ads throughout the Google advertising network. DoubleClick can be used to tailor the ads to the interests of each viewer.  For example, our ads may appear in Google search results or in banner ads associated with DoubleClick.

In order to serve ads to users based on their interests, DoubleClick must be able to recognize the viewer. For this purpose, a cookie is stored in the user’s browser, behind which the websites visited by the user, clicks and various other information are stored. This information is combined into a pseudonymous user profile to display advertising that is relevant to the user’s interests.

Google DoubleClick is used in the interest of targeted advertising. This constitutes a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

You can set your browser so that it no longer stores cookies. However, this may result in a restriction of the accessible website functions. In addition, we would like to point out that DoubleClick may also use other technologies to create user profiles. Disabling cookies therefore offers no guarantee that user profiles will no longer be created.

For more information about how to opt-out of Google’s ads, please see the following links: policies.google.com/technologies/ads and adssettings.google.com/authenticated.

 

Name Duration Description Service
IDE 1 year Used by Google DoubleClick to register and report the site user’s actions after viewing or clicking on an advertiser’s ads, to measure the effectiveness of an ad and to serve targeted ads to the user. Google Doubleclick

13. Plugins and Content Delivery Networks

YouTube

We have embedded videos from the YouTube website on our site. The website is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. When you visit one of our websites where YouTube is embedded, a connection is made to YouTube’s servers. This tells the YouTube server which of our pages you have visited. YouTube may also store various cookies on your device. These cookies enable YouTube to obtain information about visitors to this website. This information is used, among other things, to gather video statistics, improve the user experience and prevent fraud. The cookies remain on your device until you delete them.

If you are logged in to your YouTube account, you allow YouTube to associate your browsing habits directly with your personal profile. You can prevent this by logging out of your YouTube account.

For more information on how YouTube handles user data, please see the YouTube Privacy Policy at: https://policies.google.com/privacy?hl=de.

Embedding YouTube videos establishes various connections to Google servers, which stores multiple cookies in your browser and sends information about them to YouTube and Google’s advertising service DoubleClick.

YouTube is used in the interest of an attractive presentation of our online offers. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

Google Tag Manager

This website uses the Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it will remain disabled for all tracking tags implemented by Google Tag Manager.

Sharing content via social media (Facebook, Twitter, etc.)

Our website uses a “share” feature to allow content to be used, for example, on social networks. In order to increase the protection of your data when visiting our website, the plugins are not fully integrated into the page, but only using an HTML link. This integration ensures that when you call up a page of our website containing such plugins, no connection is yet established with the servers of the provider of the respective social network.

If you click on one of the buttons, a new window of your browser will open and call up the page of the respective service provider, where you can (if necessary after entering your login data) press the Like or Share button, for example.

As soon as you call up the page of a service provider via the Share button, the respective provider receives the information that you have visited our site with your IP address. If you are logged in to your social media account (e.g. Facebook) at the same time, the respective provider can assign your visit to our pages to your user account.

Calling up the share link constitutes consent within the meaning of Art. 6 para. 1 lit. a DSGVO. You can revoke this consent at any time with effect for the future.

The purpose and scope of data collection and the further processing and use of data by the providers on their sites as well as your rights and setting options for the protection of your privacy can be found in the data protection information of the providers.

Facebook: www.facebook.com/policy.php
Twitter: twitter.com/privacy
Google: www.google.com/intl/de/+/policy/+1button.html
Instagram: help.instagram.com/155833707900388
XING: https://privacy.xing.com/de/datenschutzerklaerung?sc_o=navigation_footer
Linkedin: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

 

14. Our Social Media Appearances

Data processing through social networks

We maintain publicly accessible profiles in social networks. You can find the social networks we use in detail below. Social networks such as Facebook, Twitter, etc. can usually analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). A visit to our social media sites triggers numerous data protection-relevant processing operations.

In detail:

If you are logged in to your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your end device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-related advertising can be displayed to you both inside and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing on the social media portals. Depending on the provider, further processing may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection regulations of the respective social media portals.

Legal basis

Our social media sites are designed to ensure the widest possible presence on the Internet and to enable effective user information and communication. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. The analysis processes initiated by social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 Paragraph 1 lit. a DSGVO).

Responsibility and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, correction, deletion, restriction of processing, data transferability and complaint) against us as well as against the operator of the respective social media portal (e.g. against Facebook).

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the social media portals. Our possibilities are largely determined by the corporate policy of the respective provider.

Storage period

The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing them no longer applies, you request us to delete them, revoke your consent to storage or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected. We have no influence on the storage period of your data, which is stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social networks in detail

We maintain profiles in the following social networks

Facebook

The provider is Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA. We have concluded an agreement with Facebook on joint responsibility for the processing of data (Controller Addendum). This agreement defines the data processing operations for which we or Facebook are responsible when you visit our Facebook fan page. You can view this agreement by clicking on the following link: www.facebook.com/legal/terms/page_controller_addendum

Google / Youtube

The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Instagram

The supplier is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.

LinkedIn

The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

XING

The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.

Twitter

The provider is Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

  • You can adjust your Twitter privacy settings on your own in your user account. To do so, click on the following link and log in: twitter.com/personalization
  • Details can be found in the Twitter privacy policy: twitter.com/en/privacy
  • Twitter is certified according to the EU-US Privacy Shield: www.privacyshield.gov/participant

15. Additional Information for Business Partners

Categories of data and purposes of processing

We process personal data of our service providers and partners, which we receive directly within the scope of our business relationship. If we have received data from you, we process it only for the purposes for which we have received or collected it.

As a rule, we process the following categories of data from you:

  • Name, first name
  • Address and / or company address
  • Telecommunications data
  • E-mail address
  • Company
  • Professional function and/or position
  • Bank details / credit card number / other payment details
  • Data on the history of the business relationship

In the course of the business initiation phase and during the business relationship, in particular through personal, telephone or written contacts, initiated by you or by one of our employees, further personal data is generated, e.g. information on the contact channel, date, occasion and result; (electronic) copies of correspondence and information on participation in direct marketing measures.

On the other hand, we process personal data that we have obtained and are permitted to process from publicly accessible sources (e.g. commercial and association registers, press, media, Internet).

Data processing for other purposes can only be considered if the necessary legal requirements according to Art. 6 para. 4 DSGVO are met. In this case we will of course comply with any information duties according to Art. 13 para. 3 DSGVO and Art. 14 para. 4 DSGVO.

Legal bases according to which we process your data

Based on your consent (Art. 6 para. 1 lit. a) DSGVO)

We process personal data for one or more specific purposes if you have given us permission to do so. If personal data are processed on the basis of your consent, you have the right to revoke this consent at any time with effect for the future.

Data processing for the fulfilment of contracts (Art. 6 para. 1 lit. b) DSGVO)

We process personal data for the fulfilment of contracts. The fulfillment of contracts includes, for example, the conclusion, processing and reversal of a contract. In addition, we process personal data which are necessary for the implementation of pre-contractual measures, such as the initiation of a contract, and which are provided upon your request.

Data processing based on a legal obligation (Art. 6 para. 1 lit. c) DSGVO)

Like any company, we have to comply with retention and other documentation requirements, and this may include documents containing personal information. Insofar as we process data for these purposes, the processing is based on a legal obligation.

Data processing based on a weighing of interests (Art. 6 para. 1 lit. f) DSGVO)

If we process data on the basis of a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 DSGVO. Insofar as the specific purpose permits, we process your data pseudonymised or anonymised.

Other recipients of your data

Passing on to data processors in accordance to Art. 28 GDPR

Data processors commissioned by us (Art. 28 GDPR), especially in the field of IT services and, for example, printing services, who process your data for us in accordance with our instructions. If we commission service providers to perform our tasks, we always observe the provisions of data protection law; in particular, data will only be passed on after the conclusion of data processing agreements. We will be pleased to inform you which contract processors we use.

For the execution of a contractual relationship

If it is necessary for the execution of the contract with you, we will pass on your data, for example, to our bank for the processing of payments or shipping service providers, such as the German Post, DHL, UPS, GSL, DPD or other occasion-related providers.

Transfer due to a legal obligation

In the event of a legal or official obligation, we will pass on your data to public bodies or institutions (authorities, for example in the context of criminal prosecution).

Other authorities, insofar as you have given us your consent

If you have given your explicit consent, we will also pass on your data to other parties. However, this will be done within the limits of your verifiable consent.

General information on deletion periods for personal data

Principle of earmarking and compliance with statutory retention periods

We process the data as long as this is necessary for the respective purpose. If necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract.

In addition, like any company, we are obliged to comply with the statutory retention periods, for example the periods under commercial and tax law. Insofar as legal storage obligations exist, the relevant personal data is stored for the duration of the storage obligation. The duration of storage also depends on the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally three years, but in certain cases may be up to thirty years. After expiry of the obligation to retain data, it is checked whether there is any further necessity for the processing. If there is no longer a need, the data is deleted.

As a rule, such retention periods within the framework of legal transactions (according to §147 AO / §257 HGB / §14b UstG) are 10 years, beginning with the year following the legal transaction.

Concrete example
Insofar as you provide us with your contact details, for example by e-mail, telephone, or by handing over your business card, we store this data in accordance with Art. 6 Para. 1 lit. b DSGVO on the basis of pre-contractual measures and in the legitimate interest (Art. 6 Para. 1 lit. f DSGVO) of smooth and targeted communication. Insofar as no legal transaction is concluded, we will delete your data if you request us to do so or if no further contact takes place within a period of three years. If you enter into a legal transaction with us (Art. 6 para. 1 lit. b DSGVO), we will store your data for ten years until the expiry of the commercial and tax law requirements. After this period, we will check whether we can delete the data and, if necessary, we will delete it.

E-mails and business letters

We archive all our e-mail traffic for ten years. If you send us an e-mail, your data and the entire e-mail content will be stored for 10 years. Most e-mails count as business letters; in addition, e-mails may contain information relevant to tax law. In our opinion, the effort required to check each individual e-mail is not in proportion to the benefit and the interests of the sender worthy of protection. However, you can of course request us to delete the e-mail at any time and we will check each individual case and inform you of the result. This may lead to deletion or restriction of processing, depending on the content of the correspondence.

Revocation of your consent

Insofar as we process your data on the basis of your consent (Art. 6 para. 1 lit. a DSGVO), we will delete them after your revocation. Unless there is a justified interest against a complete deletion. For example, we retain declarations of consent in principle for up to three years after receipt of your revocation in the legitimate interest (Art. 6 para. 1 lit. f DSGVO). We keep the consent exclusively under restriction of the processing in order to be able to defend ourselves in case of dispute.

Legal or contractual obligation to provide personal data

The provision of personal data is regularly required for the initiation, conclusion, processing and reversal of a contract. In the event that you do not provide the necessary personal data, we will not be able to conclude and fulfil a contract with you.

Transfer to a third country

Your personal data is generally processed by us in computer centres in the Federal Republic of Germany or the European Union. A transfer to a third country is only possible if you have given us your consent or if we have concluded a contract for data processing in accordance with Art. 28 DSGVO, taking into account suitable guarantees or other appropriate safeguards.