Privacy Policy

The following information provides an overview of what happens to your personal data when you visit our website or our profiles on social media platforms, apply for a job with us or visit us on site. Personal data is all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our data protection declaration listed below this text.
Inhaltsverzeichnis
- General information
- Website
- Cookies
- Social media
- Data processing in the application process
- Data protection information for visitors
1. General information
Controller responsible for data processing
Responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR):
Münch Chemie International GmbH
Viernheimer Straße 70-76
69469 Weinheim – Germany
Telephone: +49 6201 9983-0
E-mail: info@muench-chemie.com
Homepage: https://www.muench-chemie.com/de/
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
Contact details of the data protection officer:
PROLIANCE GmbH
Data Protection Officer
Leopoldstr. 21
80802 München – Germany
E-mail: datenschutzbeauftragter@datenschutzexperte.de
Homepage: www.datenschutzexperte.de
Personal data
Personal data will only be processed by us if there is a legal basis for this or if you have given us your consent.
If you contact us, you consent to the processing of your data for processing your enquiry and for further correspondence.
Duration of storage
Your data will be stored only for as long as necessary to process the relevant transaction. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected by this.
Please also note the information on data protection in our online services.
Rights of data subjects
Right to lodge a complaint with the competent supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
In any case, you can contact:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Königstraße 10 a
70173 Stuttgart – Germany
Telephone: +49 711/61 55 41 – 0
E-mail: poststelle@lfdi.bwl.de
Homepage: https://www.baden-wuerttemberg.datenschutz.de/
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Information
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, the categories of personal data that are processed; their origin and recipients and the purpose of the data processing, the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period; the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to this processing and the existence of a right of appeal to a supervisory authority.
Transmission
You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards in accordance with Art. 46 GDPR in connection with the transfer.
Correction
You have the right to request that the controller rectify and/or complete your personal data if it is incorrect or incomplete. The controller must make the correction without delay.
Cancellation
According to the so-called ‘right to be forgotten’, you generally have the right to demand the deletion of your personal data, unless there is a retention obligation. However, this right is not guaranteed without exception. We remain authorised to process your personal data if such processing is necessary to comply with our legal obligations or if we need it to pursue our own legal claims.
Restriction of processing
Under certain circumstances, you are also entitled to demand the restriction of the use or the manner of use of your personal data. You have this right in particular if: (a) the data is inaccurate; (b) the processing is unlawful and you oppose the erasure; (c) we no longer need the data, but you require the data for the establishment, exercise or defence of legal claims. The consequence of restricting processing is that we may continue to store your data, but may not use it. We keep a list of those persons who have exercised the right to restrict processing in order to be able to ensure this restriction.
Contradiction
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR, including profiling based on those provisions.
The controller will no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the option, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by means of automated procedures using technical specifications.
Notification
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.
You have the right to be informed by the controller about these recipients.
You can contact us at any time at the address provided in the imprint if you have any questions about this or other issues relating to personal data.
Objection to advertising e-mails
The use of contact information published in accordance with the imprint obligation to send unsolicited advertising and information materials is hereby prohibited. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.
2. Website
Usage data
Every time our website is accessed and every time a file is retrieved, general data about this process is automatically stored in a log file. This data is stored exclusively for system-related and statistical purposes (on the basis of Art. 6 para. 1 lit. b GDPR) and, in exceptional cases, to report criminal offences (on the basis of Art. 6 para. 1 lit. e GDPR).
The data will not be passed on to third parties or otherwise analysed unless there is a legal obligation to do so (Art. 6 para. 1 lit. e GDPR).
In detail, the following data record is stored for each retrieval:
- Name of the retrieved file
- Date and time of the retrieval
- Amount of data transferred
- Message as to whether the retrieval was successful
- Description of the type of web browser used
- Operating system used
- The previously visited page
- Provider
- Your IP address
SSL and TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Visited page on our domain
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Date and time of the server request
- IP address
This data is not merged with other data sources.
Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The server log files are stored to ensure the functionality of the website. Furthermore, the data helps us to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.
These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
The basis for data processing is therefore Art. 6 para. 1 lit. f GDPR.
Contact form and e-mail address
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, as well as the language, date, IP address and browser type, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not share this data without your consent.
The data entered in the contact form will therefore be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal message by e-mail, via the contact form or by letter. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The legal basis for the processing of data transmitted when of sending an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
The processing of personal data from the contact form is solely for the purpose of processing the contact. If contact is made by e-mail, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
3. Cookies
Data processing and respective legal basis
Some of the Internet pages use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called ‘session cookies’. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies allow us to recognise your browser on your next visit.
Cookies that are necessary to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. If other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this privacy policy.
You can now control the cookie settings centrally via the so-called ‘cookie consent solution’. When you visit our website for the first time, you will be actively asked for your consent to the use of cookies on our website and can give or withdraw this consent. You can also change or withdraw your consent at any time during your visit to our website using the red box at the bottom left. You can also separately accept and deactivate different types of cookies, including performance cookies.
Cookie list
Necessary cookies
These cookies are necessary for the website to function properly. Some of the following actions can be performed with these cookies.
- Save your cookie settings for this website
- Saving language settings
Name |
Purpose |
Domain name |
Expiry |
Provider |
Type |
cookiefirst-consent |
This cookie saves your cookie settings for this website. You can change these settings or withdraw your consent at any time. |
muench-chemie.com |
1 year |
Cookie |
|
cookiefirst-consent |
This cookie saves your cookie settings for this website. You can change these settings or withdraw your consent at any time. |
muench-chemie.com |
Persistent |
Local Storage |
|
cookiefirst-id |
This cookie contains your unique ID so that CookieFirst can identify unique visitors to this website. |
muench-chemie.com |
Persistent |
Local Storage |
|
csrf_https-contao_csrf_token |
Required for the use of the website. |
www.muench-chemie.com |
Session |
Cookie |
|
PHPSESSID |
Cookies generated by applications based on the PHP language. This is a general purpose identifier used to manage user session variables. Normally it is a randomly generated number whose use can be specific to the site. However, a good example is maintaining a user's login status between pages. |
www.muench-chemie.com |
Session |
Cookie |
Performance Cookies
These cookies are used to collect statistical information about the use of our website, also known as analytics cookies. We use this data to improve performance and optimise the website.
Name |
Purpose |
Domain name |
Expiry |
Provider |
Type |
_ga |
Registers a unique ID for a website visitor to track how the visitor uses the website. The data is used for statistics. Data transfer to third countries: USA. Google LLC. is certified under the Data Privacy Framework, which means that your rights as a data subject can be guaranteed. |
.muench-chemie.com |
2 years |
Cookie |
|
_ga_******** |
This cookie stores a unique ID for a website visitor and tracks how the visitor uses the website. The data is used for statistics. Data transfer to third countries: USA. Google LLC. is certified under the Data Privacy Framework, which means that your rights as a data subject can be guaranteed. |
.muench-chemie.com |
2 years |
Cookie |
Functional cookies
These cookies enable more functionality for our website visitors. These cookies may be set by our external service providers or our own website. The following functionalities may or may not be enabled if you accept this category.
- Watch online videos
- Social media sharing buttons
- Google Maps content
Name |
Purpose |
Domain name |
Expiry |
Provider |
Type |
HSID |
Security and protection against fraudulent logins |
.google.com |
2 years |
|
Cookie |
SID |
Security and protection against fraudulent logins |
.google.com |
2 years |
|
Cookie |
Advertising / Tracking Cookies
These cookies are set by external advertising partners and are used for profiling and data tracking across multiple websites. If you accept these cookies, we may display our advertisements on other websites based on your user profile and preferences.
These cookies also store data about how many visitors have seen or clicked on our ads in order to optimize advertising campaigns.
Name |
Purpose |
Domain name |
Expiry |
Provider |
Type |
__Secure-1PAPISID |
Profiling and personalized advertising |
.google.com |
2 years |
|
Advertising |
__Secure-1PSID |
Targeted advertising based on interests |
.google.com |
2 years |
|
Advertising |
__Secure-1PSIDCC |
Profiling for the display of personalized advertising |
.google.com |
1 year |
|
Advertising |
__Secure-1PSIDTS |
Measurement of interaction with ads |
.google.com |
2 years |
|
Advertising |
__Secure-3PAPISID |
Profiling and personalized advertising |
.google.com |
2 years |
|
Advertising |
__Secure-3PSID |
Targeted advertising based on interests |
.google.com |
2 years |
|
Advertising |
__Secure-3PSIDCC |
Profiling for the display of personalized advertising |
.google.com |
1 year |
|
Advertising |
__Secure-3PSIDTS |
Measurement of interaction with ads |
.google.com |
2 years |
|
Advertising |
__Secure-ENID |
User authentication and personalized advertising |
.google.com |
1 year |
|
Advertising |
APISID |
Personalized advertising and YouTube tracking |
.google.com |
2 years |
|
Advertising |
NID |
Saving user settings, also for advertising purposes |
.google.com |
6 months |
|
Advertising |
SAPISID |
Personalized advertising and YouTube tracking |
.google.com |
2 years |
|
Advertising |
SIDCC |
Information on advertising impact |
.google.com |
1 year |
|
Advertising |
SSID |
Personalized advertising and YouTube tracking |
.google.com |
2 years |
|
Advertising |
4. Social media
We maintain profiles, appearances or pages on the following social media platforms:
Platform |
Profile |
|
|
|
https://www.linkedin.com/company/m%C3%BCnch-chemie-international-gmbh/ |
YouTube |
Different responsibilities and roles
Depending on how the platform operators and we as the site operator are involved in the processing of your personal data, the respective responsibility or role differs.
For example, we may be jointly responsible with the platform operator or the platform operator may be solely responsible.
Shared responsibility with platform operators
Jointly responsible
There is a joint responsibility between us and the following platform operators:
Platform |
Platform operator |
|
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland |
|
LinkedIn Ireland Unlimited Company, Wilton Plaza, Gardner House 4,5,6, Dublin 2, Ireland |
As the site operator, we are jointly responsible with the providers of the respective platform for the processing of your personal data in connection with your visit to the presence, profile, page or fan page on the platforms if the platform operators provide aggregated information on visitors to our profiles, presences, pages or fan pages (e.g. so-called “insights” or “analytics”).
In the case of joint controllership, we have concluded agreements with the platform operators in accordance with Art. 26 GDPR on joint controllership for the processing of your personal data (e.g. Page Controller Addendum or Joint Controller Addendum).
This agreement specifies the data processing operations for which we or the respective platform operator are responsible. You can view these agreements under the following links:
Platform |
Agreements on joint responsibility |
|
https://www.facebook.com/legal/terms/page_controller_addendum |
|
Further information on data processing by the platform operators can be found in their privacy policies:
Platform |
Privacy policies |
|
|
|
Contacting the data protection officers of the platform operators
You can contact the data protection officers of the platform operators here:
Platform |
Possibility of making contact |
|
To contact Facebook's data protection officer, you can use the online contact form provided by Facebook at the following link: https://www.facebook.com/help/contact/540977946302970. |
|
To contact LinkedIn's data protection officer, you can use the contact form at the link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO. |
Data processing under joint responsibility
Accessing and storing information in terminal equipment
When you access our profiles on the aforementioned platforms, cookies and similar technologies are used on your device by the platform operator to store data on your device or to read data from it. This access or storage may involve further processing of personal data within the meaning of the GDPR.
In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of the services, this is done on the basis of Section 25 (1) sentence 1, para. 2 no. 2 Telemedia Act (TDDDG). Connection data processing may be carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR.
In cases in which such a process serves other purposes (e.g. the needs-based design of our website), this is only carried out on the basis of Section 25 (1) Telemedia Act (TDDDG) with your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR. Consent can be revoked at any time for the future. The provisions of the GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.
Further information on the use of cookies and similar technologies, as well as their legal basis, can be found in the respective privacy policy of the platform operator. Links to the respective privacy policies can be found above. If you have any further questions, please contact the operator of the respective social media platform directly.
Data processing for advertising and market research purposes
Generally, personal data on our social media profile is primarily processed for market research and advertising purposes of the platform operator. Insofar as the data collection also takes place directly on our social media profile, we participate in the data processing of the platform operator and are therefore jointly responsible with the platform operator in this respect.
During data processing, cookies and similar technologies are used that enable the platform operator to recognize you when you visit a social media profile. For members of the social media platform, the platform operator also carries out a comprehensive analysis of your interactions on the platform (clicks, comments and likes) and processes the information you provide to the platform operator, such as your master data, your profile picture or name. In particular, demographic information (age, gender, country, industry, profession, etc.) from your own member profile may also be processed.
The collected data can be used to create user profiles. These are then used by the platform operator to place advertisements inside and outside the platform that presumably correspond to your interests.
Although we do not have direct access to the data processed by the platform operator, we also benefit from this data processing by placing corresponding advertisements inside or outside the platforms based on the target groups identified by the platform operator.
The legal basis for the processing of your personal data is your consent given to the platform operator pursuant to Art. 6 para. 1 lit. a GDPR.
Please note that we have no influence on the data collection and further processing under the responsibility of the platform operator. As a result, we cannot provide any information about the extent. Location, and duration of data storage by the platform operator.
Further information on this can be found in the data protection information of the respective provider.
Data processing in the context of “Insights” or “Analytics”
In addition, your data is processed jointly responsible in connection with so-called “Page Insights” or “Page Analytics”.
“Page Insights” or “Page Analytics” are analysis functions provided by the platform operator, by means of which the master data processed by you, in particular demographic data and the data on your interactions with our profile, are collected jointly by the platform operator and us.
The platform operator then analyses this data and creates summarized (so-called aggregated data) for us, from which we can see which demographic target group has visited our profile and how our profile was used by them.
In this respect, we also have no direct access to the data processed by the platform operator. This data is only made available to us by the platform operator in aggregated form. This means that we cannot recognize individual visitors or their interactions from the aggregated data.
We then use this aggregated data to tailor our social media profile to the target group and generally to optimize it in relation to the aforementioned advertising purposes (increasing the reach and awareness of our profile and evaluating the success of marketing campaigns).
The legal basis for the processing of your personal data is your consent given to the platform operator pursuant to Art. 6 para. 1 lit. a GDPR.
Please note that we have no influence on the data collection and further processing under the responsibility of the platform operator. As a result, we cannot provide any information about the extent to which, where and for how long the data is stored by the platform operator.
Further information on this can be found in the data protection information of the respective provider.
Data processing based on consent
If you are asked by the respective platform operator for consent to processing for a specific, common purpose, the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR. Any consent given can be revoked at any time with effect for the future.
Recipients and data transfer to third countries
If we pass on personal data to the operators of social media platforms, the latter are recipients of the data within the meaning of Art. 4 No. 9 GDPR.
Platform |
Recipients |
|
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland |
|
LinkedIn Ireland Unlimited Company, Wilton Plaza, Gardner House 4,5,6, Dublin 2, Ireland |
When you visit our social media profiles, your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries, in particular in the USA.
For data transfers to the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework, which can be viewed at the following link: Data protection adequacy for non-EU countries.
Recipients |
Ensuring an adequate level of data protection |
Meta Platforms, Inc. |
Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/list |
LinkedIn Corp. |
LinkedIn Corp. is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/list |
If your data is transferred to other third countries for which no adequacy decision exists, there is a risk that the authorities there may access your data for security and surveillance purposes without you being informed or having the right to appeal.
To ensure an adequate level of data protection when transferring your data to the third country, standard data protection clauses of the European Commission are concluded in accordance with Art. 46 para. 2 lit. c GDPR. They oblige the recipient of the data to process it in accordance with the European level of protection.
If the standard data protection clauses are not sufficient to guarantee the level of protection, additional technical, contractual or organizational measures will be implemented to secure data transmission. We also regularly review and assess whether these additional measures continue to ensure an adequate level of data protection or whether further additional measures may need to be taken.
Exercising your rights in the event of joint responsibility
Your rights as a data subject of data processing
If, as a visitor to the site, you would like to exercise your rights (information, correction, cancellation, restriction, data portability, complaint to the supervisory authority, objection or revocation), you can contact both the platform operator and us.
Platform |
Platform account settings |
|
You can (also) restrict the visibility of your Facebook account to us via the Facebook settings. You can also adjust your advertising settings yourself in your platform account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads For more information on asserting your rights, please refer to Facebook’s privacy policy at the following link: https://www.facebook.com/about/privacy |
|
You can (also) restrict the visibility of your LinkedIn account to us via the LinkedIn settings. For more information on asserting your rights, please refer to LinkedIn's privacy policy at the following link: https://www.linkedin.com/legal/privacy-policy |
Responsibility of the platform operators
If your personal data is processed by one of the operators of social media platforms listed below, this processing is the responsibility of the platform operator within the meaning of Art. 7 No. 4 GDPR.
Platform |
Platform operator |
YouTube |
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland |
We have no influence on data processing by the platform operators. For further information, please check the privacy policy of the respective platform operator:
Platform |
Privacy policy |
YouTube |
For the assertion of your rights as a data subject, we would like to point out that these can be asserted most effectively with the respective providers. Only they have access to the data collected from you. Should you nevertheless require assistance, please feel free to contact us at any time.
Our own responsibility
We are solely responsible for the following data processing via our social media profiles.
Data processing through the operation of the social media profile
When you visit or interact with our social media profile, we process your personal data.
This may be information that you actively provide (comments, likes and information that you make publicly available, such as your profile picture or name). Depending on the provider and your settings on the provider's platform, we may also be informed about who has accessed our profile on the platform.
The legal basis for the processing of personal data when operating our social media profile is Art. 6 para. 1 sentence 1 lit. f GDPR.
The legitimate interest lies in addressing visitors with advertising and in providing an effective opportunity for communication and interaction with our company on the social media platform.
Data processing when contacting us
We collect personal data ourselves if you contact us, for example, via the contact form or a messenger function on the respective platform.
Which data is collected depends on the information you provide and the contact details you provide or share. This data is stored by us for the purpose of processing the request and in the event of follow-up questions.
The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
Your data will be deleted after final processing of your request, provided that there are no legal storage obligations to the contrary. We assume that processing has been completed when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
Data processing for the fulfilment of a contract
If your contact via a social network or other platform is aimed at concluding a contract for the delivery of goods or the provision of services with us, we process your data to fulfil the contract or to carry out pre-contractual measures or to provide the desired services.
The legal basis for the processing of your data in this case is Art. 6 para. 1 sentence 1 lit. b GDPR.
Your data will be deleted if it is no longer required for the performance of the contract or if it is clear that the pre-contractual measures will not lead to the conclusion of a contract in accordance with the purpose of the contact.
Please note, however, that it may be necessary to store personal data of our contractual partners even after conclusion of the contract in order to comply with contractual or legal obligations.
Data processing based on consent
If we ask you for your consent to processing for a specific purpose, the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR. Any consent given can be revoked at any time with effect for the future.
5. Data processing in the application process
Description of data processing and purpose
In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of personal data transmitted by you as part of the application process and any personal data collected by us and your rights in this regard. To ensure that you are fully informed about the processing of your personal data as part of the application process, please take note of the following information.
Legal basis for data processing
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with Section 26 BDSG for the purposes of the employment relationship, if this is necessary for the decision on the establishment of an employment relationship.
Furthermore, we may process your personal data if this is necessary to fulfil legal obligations (Art. 6 para. 1 lit. c GDPR) or to defend or assert legal claims. The legal basis for this is Art. 6 para. 1 lit. f GDPR. The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
If you grant us your express consent to process personal data for specific purposes, the legality of this processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, Section 26 para. 2 BDSG. Any consent given can be revoked at any time with effect for the future.
If there is an employment relationship between you and us, we may, in accordance with Art. 88 GDPR in conjunction with Section 26 BDSG, further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of employees' interests arising from a law or a collective agreement, a works or service agreement (collective agreement).
Source
We process personal data that we receive from you by post or e-mail when you contact us or submit your application.
Recipients of the data
We only pass on your personal data within our company to those departments and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interest.
Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfil legal obligations or if we have your consent.
Data processing in third countries
A transfer to a third country is not intended.
Duration of data storage
We store your personal data for as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted no later than six months after the end of the application process (e.g. the announcement of the rejection decision), unless longer storage is legally required or permitted. We only store your personal data beyond this if this is required by law or in a specific case for the assertion, exercise or defence of legal claims for the duration of a legal dispute.
In the event that you have consented to your personal data being stored for a longer period, we will store it in accordance with your declaration of consent.
If the application procedure is followed by an employment, training or internship relationship, your data will, if necessary and permissible, initially continue to be stored and then transferred to the personnel file.
Necessity of the provision of personal data
The provision of your personal data as part of the application process is voluntary. However, we can only decide to establish an employment relationship or establish an employment relationship with you if you provide the personal data that is required to complete the application.
Your rights
Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that your personal data is being processed unlawfully. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the revocation only takes effect for the future. Processing that took place before the withdrawal is not affected. Please also note that we may have to retain certain data for a certain period of time in order to comply with legal requirements.
Right to object:
Insofar as your personal data is processed in accordance with Art. 6 para. 1 lit. f GDPR to safeguard legitimate interests, you have the right to object to the processing of this data at any time in accordance with Art. 21 GDPR for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims.
To protect your rights, you can contact us using the contact details provided in section 1.
6. Data protection information for visitors
Description of data processing and purpose
In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your rights under data protection law in this regard. Which data is processed in detail and how it is used depends largely on the reason for your visit. To ensure that you are fully informed about the processing of your personal data in the course of your visit, please take note of the following information.
Purposes and legal bases of processing
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary to document your visit.
If you give us your express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. Any consent given can be revoked at any time with effect for the future.
Your personal data is processed to protect our legitimate interests and to defend and assert legal claims in accordance with Art. 6 para. 1 lit. f GDPR. We have an interest in knowing which persons are in our company, when and for what reason, in order to ensure security in our company and to be able to prosecute any criminal offenses.
Categories of personal data
We only process data that is related to your visit. This may be general data about you or people in your company (name, address, contact details, etc.) as well as any other data that you transmit to us during your visit.
Data sources
We process personal data that you provide during your visit.
Recipients of the data
We only share your personal data within our company to those departments and persons who need this data to document your visit or to implement our legitimate interest.
Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to process your visit, if we have your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example:
- Public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office) if there is a legal or official obligation
- Recipients to whom the disclosure is directly necessary for the assertion of any damages (e.g. lawyers, courts)
Transfer to a third country
A transfer to a third country is not intended.
Duration of data storage
Your data will be deleted as soon as it is no longer required for the above-mentioned purpose, but at the latest after 48 hours. Deletion takes place in particular when we have been able to carry out any necessary investigations for the prosecution of criminal offenses.
In addition, we are subject to various retention and documentation obligations, including those arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods stipulated there are two to ten years.
Finally, the storage period also depends on the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.
Necessity of the provision of personal data
The provision of personal data for the processing of your visit is voluntary. However, we can only process your visit if you provide the personal data required to document your visit and ensure security in our company.
Your rights
Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that your personal data is being processed unlawfully. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the revocation only takes effect for the future. Processing that took place before the withdrawal is not affected. Please also note that we may have to retain certain data for a certain period of time in order to comply with legal requirements.
Right to object:
Insofar as your personal data is processed in accordance with Art. 6 para. 1 lit. f GDPR to safeguard legitimate interests, you have the right to object to the processing of this data at any time in accordance with Art. 21 GDPR for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims.
To protect your rights, you can contact us using the contact details provided in section 1.