Privacy policy
Data protection information
for website visitors, customers, suppliers, interested parties, applicants and other data subjects
With the following information, we would like to give you as a visitor to our online offer, as a customer or prospective customer of our services, as a supplier, as an applicant or other data subject an overview of the processing of your personal data by us and of your rights under data protection law. Which data is processed in detail and how it is used depends largely on the agreed services. Therefore, not all parts of this information will apply to you.
1. responsible body and contact details of the data protection officer
Responsible for the processing of personal data in the context of this website is
Julius Zöllner GmbH & Co. KG
Kaullache 4
D-96328 Küps
Phone: +49 (0) 9264 807 0
Web: https://www.julius-zoellner.de
Email: [email protected]
(hereinafter "Company" called)
You can reach our data protection officer at
Julius Zöllner GmbH & Co. KG
- Data Protection Officer -
Kaullache 4
D-96328 Küps
[email protected]
2. processing of personal data in connection with your use of our websites, applications and online platforms
Data collection when visiting our website
If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
Hosting
Hosting by Shopify
We use the store system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online store on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transferred to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc as part of further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than the aforementioned Shopify servers only takes place within the scope specified below.
Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable your browser to be recognized the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website may be restricted.
Integration of the Trusted Shops Trustbadge / other widgets
Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g. seal of approval, collected reviews) and to offer Trusted Shops products to buyers after an order.
This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in optimal marketing by enabling secure shopping in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, with whom we are jointly responsible for data protection in accordance with Art. 26 GDPR. In the context of this data protection notice, we inform you below about the essential contents of the contract in accordance with Art. 26 para. 2 GDPR.
The trust badge is provided by a US CDN provider (content delivery network) as part of a shared responsibility. An appropriate level of data protection is ensured by standard data protection clauses and other contractual measures. You can find further information on data protection at Trusted Shops GmbH in theirprivacy policy at .
When the Trustbadge is accessed, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data) and documents the access. The IP address is anonymized immediately after collection so that the stored data cannot be assigned to your person. The anonymized data is used in particular for statistical purposes and for error analysis.
After completing your order, your e-mail address hashed using the cryptographic one-way function will be transmitted to Trusted Shops GmbH. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. This serves to check whether you are already registered for services with Trusted Shops GmbH and is therefore necessary for the fulfillment of our and Trusted Shops' overriding legitimate interests in the provision of the buyer protection linked to the specific order and the transactional evaluation services in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. If this is the case, further processing will be carried out in accordance with the contractual agreement concluded between you and Trusted Shops. If you have not yet registered for the services, you will then be given the opportunity to do so for the first time. Further processing after registration is also based on the contractual agreement with Trusted Shops GmbH. If you do not register, all transmitted data will be automatically deleted by Trusted Shops GmbH and a personal reference is then no longer possible.
Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 para. 1 lit. f GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in the USA by standard data protection clauses and other contractual measures and in Israel by an adequacy decision.
Within the framework of the joint responsibility existing between us and Trusted Shops GmbH, please contact Trusted Shops GmbH in the event of data protection issues and to assert your rights using the contact options provided in the data protection information linked above. Irrespective of this, you can always contact the controller of your choice. If necessary, your request will then be forwarded to the other responsible party for a response.
Contact us
Personal data is collected when you contact us (e.g. via contact form or email). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your request. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
Data processing when opening a customer account and for contract processing
In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you to process the contract. After completion of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use of your data as permitted by law.
Data processing for order processing
In order to process your order, we work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you of this explicitly below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.
Use of special service providers for order processing and fulfillment
Shipcloud
Shipping is carried out via the shipping portal "shipcloud" (shipcloud GmbH, Lüdmoor 35a,
22175 Hamburg). In accordance with Art. 6 para. 1 lit. b GDPR, we pass on your data (name,
address and, if applicable, further information) to shipcloud exclusively for the purpose of
processing your online order. Data will only be passed on to
if this is actually necessary for processing.
Details on shipcloud's data protection can be found on the shipcloud website
under "shipcloud.io".
Use of payment service providers (payment services)
Apple Pay
If you opt for the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment will be processed via the "Apple Pay" function of your device operated with iOS, watchOS or macOS by charging a payment card stored with "Apple Pay". Apple Pay uses security functions that are integrated into the hardware and software of your device to protect your transactions. To authorize a payment, you must therefore enter a code that you have previously defined and verify it using the Face ID or Touch ID function on your device.
For the purpose of payment processing, the information you provide during the order process, together with information about your order, will be forwarded to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to process the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the source website to confirm the success of the payment.
If personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.
When you use Apple Pay on your iPhone or Apple Watch to complete a purchase made via Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can be used to identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and deactivate "Allow payments on Mac".
You can find further information on data protection with Apple Pay at the following Internet address: https://support.apple.com/de-de/HT203027
Google Pay
If you choose the "Google Pay" payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment will be processed via the "Google Pay" application on your mobile device running at least Android 4.4 ("KitKat") and equipped with an NFC function by charging a payment card stored with Google Pay or a payment system verified there (e.g. PayPal). To approve a payment via Google Pay of more than €25, your mobile device must first be unlocked using the verification measure set up in each case (e.g. facial recognition, password, fingerprint or pattern).
For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, will be passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a unique transaction number to the source website, which is used to verify that a payment has been made. This transaction number does not contain any information about the real payment data of your means of payment stored with Google Pay, but is created and transmitted as a uniquely valid numerical token. For all transactions via Google Pay, Google only acts as an intermediary for processing the payment process. The transaction is carried out exclusively in the relationship between the user and the source website by debiting the means of payment stored with Google Pay.
If personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Google reserves the right to collect, store and analyze certain transaction-specific information for each transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description provided by the merchant of the goods or services purchased, photos you have attached to the transaction, the name and email address of the seller and buyer or the sender and recipient, the payment method used, your description of the reason for the transaction and, if applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, the verification of transaction data and the optimization and maintenance of the Google Pay service.
Google also reserves the right to combine the processed transaction data with other information that is collected and stored by Google when using other Google services.
The Google Pay terms of use can be found here:
Further information on data protection at Google Pay can be found at the following Internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
Klarna
If you select a Klarna payment service, the payment will be processed by Klarna Bank AB (publ)[https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable payment processing, your personal data (first and last name, street, house number, zip code, city, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, delivery method) will be passed on to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Art. 6 para. 1 lit. a GDPR during the ordering process. You can see which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Klarna uses the information obtained on the statistical probability of a payment default to make a balanced decision on the establishment, execution or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.
Your personal data will be processed in accordance with the applicable data protection regulations and in accordance with the information in Klarna's privacy policy for data subjects based in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for affected persons domiciled in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy .
Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by installments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment will be processed by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on your information provided during the ordering process together with the information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. You can find more information on Shopify Payments' data protection at the following Internet address: https://www.shopify.com/legal/privacy.
Data protection information about Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy
IMMEDIATELY
If you select the "SOFORT" payment method, payment will be processed via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we will pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 para. 1 lit. b GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be passed on for the purpose of payment processing with the payment service provider SOFORT and only to the extent that it is necessary for this purpose. You can obtain further information about SOFORT's data protection provisions at the following Internet address: https://www.klarna.com/sofort/datenschutz.
Stripe
If you choose a payment method from the payment service provider Stripe, the payment will be processed via the payment service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process together with the information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. You can find more information about Stripe's data protection at the URL https://stripe.com/de/privacy#translation.
Online marketing
Use of Google Ads conversion tracking
This website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising material (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the advertising campaign data. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your end device. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can block this use by deactivating the Google Conversion Tracking cookie via your Internet browser under the keyword "User settings". You will then not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in targeted advertising in accordance with Art. 6 para. 1 lit. f GDPR. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
You can find more information about Google's privacy policy at the following Internet address: https://www.google.de/policies/privacy/
You can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
Please note that if you have deactivated the use of cookies, certain functions of this website may not be available or may only be available to a limited extent.
Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website or alternatively follow the option described above to make an objection.
Web analysis services
Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies", which are text files placed on your device, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server and stored there; it may also be transmitted to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes direct personal reference. This extension means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
All processing described above, in particular the setting of Google Analytics cookies for reading information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to our website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website. We have concluded an order processing contract with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
Tools and miscellaneous
beeclever
This website uses the cookie consent tool "GDPR Legal Cookie" from beeclever GmbH, Universitätsstraße 3, D-56070 Koblenz a. Rh. ("beeclever") to obtain effective user consent for cookies requiring consent and cookie-based applications.
By integrating a corresponding JavaScript code, users are shown a banner when they call up a page in which they can give their consent for certain cookies and/or cookie-based applications by ticking a box. The tool blocks the setting of all cookies requiring consent until the respective user gives their consent by ticking the appropriate box. This ensures that such cookies are only set on the user's end device if consent has been granted.
So that the cookie consent tool can clearly assign page views to individual users and individually record, log and store the consent settings made by the user for the duration of a session, certain user information (including the IP address) is collected by the cookie consent tool when our website is accessed, transmitted to beeclever's servers and stored there.
This data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Another legal basis for the data processing described is Art. 6 para. 1 lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Further information on the use of data by beeclever can be found at https://beeclever.de/pages/datenschutz
Applications for job advertisements by e-mail
We advertise current vacancies on our website in a separate section, for which interested parties can apply by e-mail to the contact address provided.
In order to be included in the application process, applicants must provide us with all personal data required for a well-founded and informed assessment and selection together with their application by e-mail.
The required information includes general personal information (name, address, telephone or electronic contact details) as well as performance-specific proof of the qualifications required for a position. In addition, health-related information may be required, which must be given special consideration under labor and social law in the interest of the applicant's social protection.
Please refer to the respective job advertisement to find out which components an application must contain in order to be considered and in what form these components must be sent by e-mail.
After receipt of the application sent using the email contact address provided, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. For any queries arising in the course of processing, we may choose to use either the e-mail address provided by the applicant with their application or a telephone number provided.
The legal basis for this processing, including contacting us for queries, is generally Art. 6 para. 1 lit. b GDPR (for processing in Germany in conjunction with § 26 para. 1 BDSG), in the sense of which the application process is considered to be the initiation of an employment contract.
Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data such as information on severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 para. 2 lit. b. GDPR so that we can exercise the rights arising from labor law and social security and social protection law and fulfill our obligations in this regard.
Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 para. 1 lit. h GDPR if it is carried out for the purposes of preventive health care or occupational medicine, for the assessment of the applicant's fitness for work, for medical diagnostics, health or social care or treatment or for the management of health or social care systems and services.
If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws their application prematurely, their data transmitted by email and all electronic correspondence including the original application email will be deleted after 6 months at the latest following a corresponding notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to comply with our obligations to provide evidence under the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be further processed on the basis of Art. 6 para. 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 para. 1 BDSG) for the purposes of implementing the employment relationship.
Google Maps
On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps in order to visualize geographical information. Using this service will show you our location and make it easier for you to find us.
Information about your use of our website (such as your IP address) is transmitted to Google servers and stored there when you access those subpages in which the Google Maps map is integrated; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. The collection, storage and evaluation are carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google's legitimate interest in the display of personalized advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google in connection with the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.
You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/
Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. To exercise your revocation, please follow the option described above for making an objection.
3. processing of personal data of business partners
As part of the cooperation with business partners, the company processes personal data of contact persons at customers, suppliers, interested parties, sales partners and cooperation partners (hereinafter referred to as "business partners"). "business partners"):
- Contact information, such as first and last name, business address, business telephone number, business cell phone number, business fax number and business e-mail address,
- Payment data, such as information required to process payment transactions or prevent fraud, including credit card information and card verification numbers,
- other information whose processing is necessary in the context of a contractual relationship and which is provided voluntarily by business partners, such as orders, inquiries or details of projects,
- personal data collected from publicly available sources, information databases or credit agencies and
- Where legally required as part of compliance screenings: date of birth, ID and ID numbers, information on relevant legal proceedings or other legal disputes involving business partners.
Furthermore, personal data is processed for the following purposes:
- Communication with business partners about products, services and projects, for example to process inquiries from business partners or to provide technical information about products,
- Planning, execution and administration of the contractual business relationship, for example to process orders for products and services, to collect payments, for accounting and billing purposes and to carry out deliveries, maintenance activities or repairs,
- Implementation of marketing campaigns, market analyses, competitions, etc.,
- Maintaining and protecting the security of our products and services and our websites, preventing and detecting security risks, fraudulent activity or other criminal or malicious acts,
- Comparison of personal data with US sanctions lists on the basis of European Regulations 2580/2001 and 881/2002,
- Compliance with (i) legal requirements (e.g. retention obligations under tax and commercial law), (ii) existing obligations to carry out compliance screenings (to prevent white-collar crime or money laundering) and (iii) guidelines and industry standards, and
- Settlement of legal disputes, enforcement of existing contracts and for the assertion, exercise and defense of legal claims.
The processing of personal data is necessary to achieve the aforementioned purposes. Unless expressly stated otherwise when the personal data is collected, the legal basis for data processing is
- the performance and fulfillment of a contract with you in accordance with Art. 6 para. 1 lit. b GDPR,
- the fulfillment of legal obligations to which the company is subject pursuant to Art. 6 para. 1 lit. c GDPR, or
- the protection of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the initiation, implementation and processing of the business relationship in commercial transactions.
If you have expressly given your consent to the processing of your personal data in individual cases, this consent is the legal basis for the processing in accordance with Art. 6 para. 1 lit. a GDPR.
4. processing of personal data of applicants
a. Data categories and purpose of data processing
We generally process the following categories of personal data as part of the application process:
- Personal data (first and last name, date of birth, address, school-leaving qualification)
- Communication data (telephone number, mobile phone number, fax number, e-mail address)
- Data on the assessment and evaluation in the application process
- Education data (school, vocational training, civilian or military service, studies, doctorate)
- Data on your professional career to date, training and job references
- Information on other qualifications (e.g. language skills, PC skills, voluntary work)
- Application photo
- Details of desired salary
- Application history
Personal data that you provide to us as part of your application will be stored and used exclusively for the purpose of processing the application and, if necessary, for the subsequent employment relationship.
b. Legal basis for data processing
Your personal data is processed as part of the application process on the basis of Art. 6 para. 1 lit. b GDPR (establishment and performance of a contract) and Section 26 para. 1 sentence 1 BDSG.
c. Disclosure of data
Your data will be made available to the responsible employees of the HR department and the responsible employees or supervisors of the specialist department(s) for the position for which you have applied. In the case of an unsolicited application, your documents will be made available to the responsible employees of the HR department and the responsible employees or supervisors of the relevant specialist departments for whom your application may be of interest.
Data will also be passed on if we are obliged to do so due to legal provisions and/or official or court orders.
d. Transfer of personal data to third countries
A transfer to third countries is not planned.
e. Deletion periods for applicant data
If no employment relationship is established, the application documents will be deleted six months after rejection. The legal basis for the storage in this regard is Art. 6 para. 1 lit. f GDPR. Our legal interest in this regard is the defense against any claims arising from the General Equal Treatment Act ("AGG"). In all other respects, the general deletion periods and information under Section 8 apply.
5. processing of personal data for customer satisfaction surveys and direct marketing
If you have given us your consent or if we are authorized to do so within the scope of existing customer relationships, your contact data will also be used for direct marketing purposes (such as trade fair invitations, newsletters) or to conduct customer satisfaction surveys. You have the right to object to the use of your contact data for these purposes at any time. If you wish to exercise your right to object in this regard, please send an email to [email protected] or follow the corresponding instructions that you have received from us in any advertising e-mail. The legal basis for the processing of your data for advertising purposes is Art. 6 para. 1 lit. f GDPR in the case of existing customer relationships or Art. 6 para. 1 lit. a GDPR if you have given us your consent.
6. social media
We use links on our website on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR ("links") to the social networks Facebook, Google+, Instagram and YouTube to draw attention to our services and products and to get in touch with you as a visitor and user of these social media pages and our website.
You can recognize the links by the logo of the respective social network. By clicking on the logo, a direct connection is established between your browser and the server of the respective service and you are redirected to the website of the service provider.
These are not so-called social plug-ins, where a connection and data transmission to the respective social network is already established when you visit our website. We would like to point out that you use the following services and their functions at your own risk. Please also note that when accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply. In detail, these are the following third-party providers:
- Facebook , 1 Hacker Way, Menlo Park, California 94025, USA, data protection information at: https://de-de.facebook.com/policy.php
- Google+ of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Data protection information at: https://policies.google.com/privacy?hl=de
- Instagram by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, data protection information at: https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram help section&bc[1]=Privacy%C3%A4re%20and%20Security
- YouTube of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Data protection information at: https://policies.google.com/privacy?hl=de
7. recipients and categories of recipients
Within our company, those departments that need your data to fulfill contractual and legal obligations will have access to it. Service providers and vicarious agents employed by us may also receive data for these purposes if they maintain confidentiality and integrity in particular. These are companies in the categories of IT services, logistics, printing services, telecommunications, debt collection, consulting, sales and marketing.
With regard to the transfer of data to recipients outside our company, it should first be noted that we only pass on necessary personal data in compliance with the applicable data protection regulations. We may only pass on information about you if this is required by law, if you have given your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be
- public bodies and institutions (e.g. tax authorities, criminal prosecution authorities, family courts, land registries) if there is a legal or official obligation,
- Credit and financial services institutions or comparable institutions to which we transfer personal data in the course of the business relationship (e.g. banks, credit agencies),
- Creditors or insolvency administrators who make inquiries in the course of enforcement proceedings,
- Auditor,
- Service providers that we use in the context of order processing relationships.
8. transfer to third countries
Data is transferred to bodies in countries outside the European Union (so-called third countries) if
- it is necessary for the execution of your orders (e.g. delivery orders),
- it is required by law (e.g. reporting obligations under tax law) or
- you have given us your consent.
Furthermore, a transfer to bodies in third countries cannot be excluded in the following cases:
- to maintain and ensure the company's IT operations and IT security, and
- to combat money laundering, terrorist financing and other criminal acts.
9. storage period
We process and store your personal data for as long as is necessary to fulfill our contractual obligations and exercise our rights.
If the data are no longer required for the fulfillment of contractual or legal obligations, they are regularly deleted, unless their - temporary - further processing is necessary for the following purposes:
- Fulfillment of retention obligations under commercial and tax law arising from the German Commercial Code (HGB), the German Fiscal Code (AO) and the German Money Laundering Act (GwG). The retention and documentation periods specified there are generally two to ten years.
- Preservation of evidence within the framework of the statutory limitation periods. According to Sections 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is 3 years.
10. data security
Our employees and the service companies commissioned by us are obliged to maintain confidentiality and to comply with the provisions of the applicable data protection laws. The company takes appropriate technical and organizational security measures to protect your personal data from loss, alteration, destruction and access by unauthorized persons or unauthorized disclosure. Our security measures are constantly being improved in line with technological developments.
11. rights of data subjects
Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR.
The restrictions under Sections 34 and 35 BDSG apply to the right to information and the right to erasure. In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).
You can withdraw your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the revocation is only effective for the future.
You also have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based in particular on point (f) of Article 6(1) GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. In particular, this includes that the processing is necessary for the establishment, exercise or defense of legal claims.
You also have the right not to be subject to fully automated decision-making in accordance with Art. 22 GDPR. In principle, we do not use fully automated decision-making to establish, implement and terminate the business relationship. Should we use these procedures in individual cases (e.g. to improve our products and services), we will inform you separately about this and about your rights in this regard, insofar as this is required by law.
12. obligation to provide data
As part of our business relationship, you must provide the personal contractual data that is required for the establishment, execution and termination of a business relationship and for the fulfillment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we will generally not be able to conclude, execute and terminate a contract with you.
The same applies to visits to our online offering and the collection of usage data. Without the collection of usage data, we and our service providers will not be able to make our online offering available to you.
13. profiling
We do not process your personal data automatically in such a way that it has a legal effect on you or significantly impairs you in a similar way.
14. topicality and changes to this privacy policy
This privacy policy is currently valid and was last updated in September 2021.
