Privacy Policy
Data protection declaration and obligation to provide information pursuant to Art. 13 GDPR of Schaeff Group Holding AG and Schaeff Holding AG:
1. Information obligation according to GDPR
Person responsible for data processing, according to Art. 13 para. (1) lit. a) Company name according to §17 para. 1 HGB including contact details of the person responsible (GF)
Schaeff Group Holding AG
Karl-Kurz-Straße 6
74523 Schwäbisch Hall-Hessental
Alexander Schaeff
and
Schaeff Holding AG
Industriestrasse Briseck 4
CH 6144 Zell LU
Contact details of the data protection officer in accordance with Art. 13 (1) lit. b) GDPR
Helbig Datenschutz GmbH
Michaela Helbig
Bergstraße 11
91207 Lauf an der Pegnitz
Tel. 49 9123 70275-10
michaela.helbig@helbig-datenschutz.de
Purposes and legal basis of data processing, according to Art. 13 para. (1) lit. c) GDPR
The personal data is processed for the purpose of fulfilling contracts or for carrying out pre-contractual measures. This includes customer master data with contact persons as well as contact history, offers, orders, invoices, project data and other legal obligations of the controller.
The legal basis arises from Art. 6 GDPR. Other essential legal bases arise from the German Commercial Code, tax legislation, the German Limited Liability Company Act and other legal requirements relevant to Schaeff Maschinen GmbH & Co. KG. These also include contractual regulations. Newsletters are processed on the basis of the consent of the data subject.
Processing is necessary to safeguard the legitimate interests of the controller or a third party in accordance with Art. 13 (1) lit. d) GDPR
If necessary, we will process your data beyond the actual fulfillment of the contract to protect the legitimate interests of us or third parties. These include:
• Sales management and sales controlling
• Asserting legal claims and defending in legal disputes
• Ensuring IT security and IT operations
• Measures to ensure building and facility security (e.g. access controls) and to protect house rules
• Measures for business management and further development
Categories of recipients of personal data (data transfer) according to Art. 13 para. (1) lit. e) GDPR
Within Germany, the European Union and the European Economic Area of Germany: auditors, bailiffs and other creditors as well as other government agencies to fulfill legal obligations and for requested certificates, logistics companies, customers as well as suppliers and other bodies and business partners.
Third country including adequacy decision pursuant to Art. 13 para. (1) lit. f GDPR
In the context of international business relations, the transmission takes place in accordance with Art. 6 Paragraph 1 Letter b for the performance of contracts or for the implementation of pre-contractual measures. No adequacy decision is required for this.
Storage period according to Art. 13 para. (2) lit a)
The respective purposes arise from legal requirements and from relevant industry-specific regulations. The personal data will be deleted once the purpose has been achieved.
Rights of data subjects according to Art. 13 para. (2) lit b)
You can exercise your rights at any time using the contact details provided above. If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
Information on the rights of those affected
The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed; where this is the case, he or she has the right to access the personal data and to receive the information specified in Article 15 of the GDPR.
The data subject has the right to request the controller to immediately rectify inaccurate personal data concerning him or her and, where applicable, to complete incomplete personal data (Article 16 GDPR). The data subject has the right to request the controller to immediately erase personal data concerning him or her if one of the reasons listed in Article 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).
The data subject has the right to request the controller to restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if the data subject has objected to processing, for the duration of the controller's review.
The data subject has the right to object to the processing of personal data concerning him or her at any time for reasons related to his or her particular situation. The controller will then no longer process the personal data unless he or she can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims (Article 21 GDPR).
Rights of data subjects according to Art. 13 para. (2) lit. c) GDPR
If you have given us your consent to process personal data for certain purposes (e.g. processing images of the data subjects), the legality of this processing is based on your consent. Consent can be revoked at any time. This also applies to the revocation of declarations of consent that were given to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.
Right to lodge a complaint with a supervisory authority pursuant to Art. 13 para. (2) lit. d) GDPR
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data concerning him or her infringes the GDPR (Article 77 GDPR). The data subject may assert this right with a supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement.
In Baden-Württemberg the responsible supervisory authority is:
The State Commissioner for Data Protection and Freedom of Information
Street address:
Königstraße 10 a
70173 Stuttgart
Postal address:
PO Box 10 29 32
70025 Stuttgart
Tel.: 0711/615541-0
Fax: 0711/615541-15
E-mail:
poststelle@lfdi.bwl.de
Provision of personal data in accordance with Art. 13 para. (2) lit. e) GDPR
As part of our business relationship, you only have to provide the personal data that is necessary for establishing, carrying out and terminating the employment relationship or that we are legally obliged to collect. Without this data, we will generally not be able to carry out the employment relationship.
Change of the privacy policy
Change of purpose
We reserve the right to change this privacy policy in compliance with data protection regulations. The current version can be found under the privacy policy on our website. You can also request this at any time using the contact details provided above. If we intend to process your data for purposes other than those for which it was collected, we will inform you of this in advance in compliance with the statutory provisions.
2. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is all data with which you can be personally identified. You can find detailed information on the subject of data protection in our data protection declaration listed under this text.
Data collection on our website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find his contact details in the imprint of this website.
How do we collect your data?
On the one hand, your data is collected when you communicate it to us. This may, for example, be data that you enter in a contact form.
Other data is automatically recorded by our IT systems when you visit the website. This is primarily technical data (e.g. Internet browser, operating system or time of page access). This data is recorded automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior.
What rights do you have regarding your data?
You can find out about your rights in the information obligation above.
Analysis tools and third-party tools
When you visit our website, your surfing behavior can be statistically evaluated. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find detailed information about this in the following data protection declaration.
You can object to this analysis. We will inform you about the options for objection in this privacy policy.
3. General information and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. All you need to do is send us an informal email. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)
If the data processing is carried out on the basis of Art. 6 Para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims (objection in accordance with Art. 21 Para. 1 GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purposes of direct marketing (objection in accordance with Art. 21 Para. 2 GDPR).
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.
Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipient and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of this data. You can contact us at any time at the address provided in the imprint if you have any questions about this or other questions on the subject of personal data.
Objection to advertising emails
The use of contact data published as part of the imprint obligation to send unsolicited advertising and information materials is hereby prohibited. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example through spam emails.
4. Data collection on our website
Cookies
Some of the websites use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies are used to make our service more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time and date of the server request
• IP addresses (anonymized)
This data will not be merged with other data sources.
This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - for this purpose, the server log files must be recorded.
The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
Inquiry by email, telephone or fax
If you contact us by email, telephone or fax, your request, including all personal data resulting from it (name, request), will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 (1) (a) GDPR) and/or on our legitimate interests (Art. 6 (1) (f) GDPR), as we have a legitimate interest in the effective processing of the requests addressed to us.
The data you send to us via contact requests will remain with us until you request deletion, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular statutory retention periods - remain unaffected.
5. Social Media
Share content via plugins (Facebook, Google , Twitter & Co.)
The content on our pages can be shared in social networks such as Facebook, Twitter or Google in compliance with data protection regulations. This site uses the eRecht24 Safe Sharing Tool for this purpose. This tool only establishes direct contact between the networks and users when the user actively clicks on one of these buttons.
This tool does not automatically transfer user data to the operators of these platforms.
Our users can share the contents of this site in social networks in compliance with data protection regulations, without the network operators creating complete surfing profiles.
LinkedIn plugin
Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
The LinkedIn plug-in is used on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the greatest possible visibility in social media.
For more information, please see LinkedIn’s privacy policy at:
https://www.linkedin.com/legal/privacy-policy
XING plugin
Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
Further information on data protection and the XING Share button can be found in XING’s privacy policy at:
https://www.xing.com/app/share?op=data_protection
6. Analysis tools and advertising
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
IP anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser plugin
You can prevent cookies from being saved by selecting the appropriate settings on your browser software; however, please note that if you do this, you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to this website: Deactivate Google Analytics.
For more information on how Google Analytics handles user data, please see Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de
Contract data processing
We have concluded a contract for order data processing with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Storage period
Data stored by Google at user and event level that is linked to cookies, user IDs (e.g. user ID) or advertising IDs (e.g. double-click cookies, Android advertising ID) is anonymized or deleted after 14 months. You can find details at the following link:
https://support.google.com/analytics/answer/7667196?hl=dZ
YouTube
Our website uses plug-ins from the YouTube site operated by Google. The site is operated by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
https://www.google.de/intl/de/policies/privacy
Web Fonts
This site uses so-called web fonts for the uniform display of fonts, which are provided by Monotype GmbH and Hoefler & Co. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
If your browser does not support web fonts, a standard font from your computer will be used.
Further information about the web fonts can be found at the following addresses. Hoefler & Co.:
https://www.typography.com/home/privacy-cloud-declaration.php
and under
https://www.typography.com/home/privacy.php. Monotype GmbH:
https://www.monotype.com/legal/privacy-policy
Applications
We offer you the opportunity to apply to us (e.g. by email, post or via online application form). Below we will inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing and use of your data is carried out in accordance with applicable data protection law and all other legal provisions and that your data will be treated as strictly confidential.
Scope and purpose of data collection
If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes from job interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is Section 26 of the new Federal Data Protection Act under German law (initiation of an employment relationship), Art. 6 Para. 1 lit. b GDPR (general contract initiation) and - if you have given your consent - Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time. Your personal data will only be passed on within our company to people who are involved in processing your application.
Retention period of the data
If we are unable to make you a job offer, you reject a job offer, withdraw your application, revoke your consent to data processing or ask us to delete the data, the data you have submitted, including any remaining physical application documents, will be stored or kept for a maximum of 6 months after completion of the application process (retention period) in order to be able to understand the details of the application process in the event of discrepancies (Art. 6 Para. 1 lit. f GDPR).
You can object to this storage if you have legitimate interests that outweigh our interests.