IMPORTANT Please note that the German version of this privacy statement is legally binding – the English translation on hand is only for your convenience and in no way modifies the German version. For the German version, please simply switch the language of this website.
I. Name and address of the data controller
Responsible within the meaning of the GDPR, other applicable data protection and privacy laws in member states of the European Union and other regulations regarding data protection is:
If you have any questions about this privacy statement, please send us an email or refer directly to our data protection officer:
IT Südwestfalen AG
Kalver Straße 23
Tel. +49 2351 672573-00
III. General information
1. Definitions acc. to Art. 4 EU GDPR
In this privacy statement we use, among others, the following terminology:
Personal data is information relating to an identified or identifiable natural person (hereinafter ‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The data subject is any identified or identifiable natural person, whose personal data is processed by the data controller responsible for the processing.
2. Legal basis for the processing
Art. 6(1) lit. a EU GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Art. 6(1) lit. b EU GDPR. The same applies to such processing operations, which are necessary for carrying out pre-contractual measures, for example in the case of enquiries concerning our products or services. If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Art. 6(1) lit. c EU GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if visitors were injured in our company and their name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or another third party. Then the processing would be based on Art. 6(1) lit. d EU GDPR. Finally, processing operations could be based on Art. 6(1) lit. f EU GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 EU GDPR).
3. Collection of general data and information
When calling up our website, a series of general data and information is automatically collected. This general data and information (server log files) collected may be the browser types and versions used, the operating system used, the domain name of your internet service provider and other similar data and information. When using such general data and information, we cannot draw any conclusions about the data subject. This information is technically necessary in order to deliver the content of our website correctly and inevitably accrue when using the Internet. We analyse anonymously collected data and information statistically, with the aim of optimizing the content of our website as well as the underlying website technology. The processing of data and information is based on Art. 6(1) lit. b EU GDPR, which allows the processing of data and information necessary for the completion of a contract or for carrying out pre-contractual measures.
4. Period for which the personal data will be stored
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfilment of the contract or the initiation of a contract.
5. Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in so-called server log files. These are:
• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address
This data is transmitted to our webspace provider for technical reasons, in particular in order to provide a secure and stable website. The data collected will be stored temporarily, but will not be joined with your other personal data. The legal basis for the storage is Art. 6(1) lit. f EU GDPR. Our legitimate interest is based in the improvement, stability, functionality and safety of our website.
The data will be deleted as far as further storage for evidence purposes is not necessary. Otherwise, the data are completely or partially excluded from deletion until the incident has been conclusively resolved.
a) Session cookies
b) Possibility to clear cookies
You can prevent or restrict the setting of cookies by means of a corresponding setting of the Internet browser used. Furthermore, you can delete already set cookies at any time. However, the necessary steps and measures to do so depend on the specific Internet browser you use. If you have any questions, please refer to the help function or documentation of your Internet browser or contact the respective producer or rather the user support. For so-called flash cookies, however, the processing cannot be prevented through the settings of the browser. You must instead change the settings of your Flash Player in this respect. Again, the necessary steps and measures to do so depend on the specific Flash Player you use. If you have any questions, please refer to the help function or documentation of your Flash Player or contact the respective producer or rather the user support. Please note that certain functions of our website may not be entirely usable if you have deactivated or restricted the installation of cookies.
V. Applications for employment
We process personal data of candidates only for the purpose and within the scope of the application procedure and in accordance with legal provisions. We process personal data of candidates in order to fulfil our (pre-) contractual duties within the scope of the application procedure within the meaning of Art. 6(1) lit. b EU GDPR Art. 6(1) lit. f EU GDPR , provided that data processing is required, e.g. within the scope of a legal procedure (in Germany, § 26 BDSG also applies). It is a prerequisite for the application procedure that the candidates disclose personal data. Provided that we offer an online form, the personal data necessary are identified. Otherwise, they will be identifiable in the respective job descriptions. In general, they include the personal details, address, and contact information as well as documents accompanying the application, such as the cover letter, CV, and certificates. In addition, candidates may give us further information on a voluntary basis. By submitting the application to us, the candidates agree to the processing of their data for the purpose of the application procedure according to the nature and extent set out in this privacy statement. As far as special categories of personal data within the meaning of Art. 9(1) EU GDPR are voluntarily disclosed during the application process, they will also be processed according to Art. 9(2) lit. b EU GDPR (e.g. health-related data as for example severe disability or ethnic background). As far as candidates are asked to disclose information on special categories of personal data within the meaning of Art. 9(1) EU GDPR during the application process, the data will also be processed according to Art. 9(2) lit. a EU GDPR (e.g. health-related data, if they are necessary for professional practice). As far as an online form is provided, the candidates may transmit their applications via this form. The data is transmitted to us using state-of-the-art encryption. In the event of a successful application, we may further process the data provided by the candidates for the purposes of the employment relationship. Otherwise, if the application for a job opening is unsuccessful, the candidates’ data are deleted. The candidates’ data are also deleted if an application is withdrawn, something which applicants are entitled to do at any time. Provided that the candidates withdraw the application in a legitimate manner, the data will be deleted after a period of six months, which is the time required to ensure that we can answer any follow-up questions on the application and fulfil our contractual obligations on record-keeping as stipulated in Germany’s General Act on Equal Treatment (AGG).
VI. Contact via the website
This website contains information (e.g. name, company, email, telephone number) that enables quick electronic contact to our company as well as direct communication with us. If a data subject contacts the data controller by email or through a contact form, the personal data provided by the data subject will be automatically saved. Such personal data, transmitted by a data subject to the data controller, is stored for the purpose of processing or contacting the data subject. The legal basis for such processing is Art. 6(1) lit. b EU GDPR. There is no disclosure of personal data to third parties. Your data will be deleted once the matter has been conclusively dealt with, provided that statutory storage obligations do not exist.
VII. Analytical tools
1. Privacy statement for the web analytics service Google Analytics
1. Privacy statement for the web analytics service Google Analytics This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses so-called “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will usually be transmitted to, and stored by, Google on servers in the United States. IP anonymisation is activated on this website. Thus, on this website, your IP address will previously be abridged by Google within the member states of the European Union or in other contracting states that were party to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will make use this information on behalf of the provider of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and Internet usage. In the context of Google Analytics, Google does not combine the IP address transmitted by your browser with other personal data. You can prevent the saving of the cookies through an appropriate setting in your browser software. However, we must point out that, in such cases, you may not be able to use the full scope of all the functions of this website. In addition, you can prevent the recording of the data (including your IP address), generated by the cookie and related to your use of the website, by Google and the processing of this data by Google by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de
2. Privacy statement for etracker
The provider of this website uses services of etracker GmbH from Hamburg, Germany (www.etracker.com) for the analysis of usage data. If visitors give us their explicit consent, cookies are used which enable a statistical analysis of the use of this website by their visitors and the display of use-related content or advertising. Cookies are small text files that are stored by the Internet browser on the user’s terminal device. etracker cookies do not contain any information that enables a user to be identified.
The data generated with etracker is processed and stored by etracker exclusively in Germany on behalf of the provider of this website and is therefore subject to the strict German and European data protection laws and standards. etracker has been independently audited, certified and awarded the data protection seal of approval ePrivacyseal.
The data processing takes place on the legal basis of Art. 6 Para. 1 lit a (consent) of the EU Data Protection Basic Regulation (EU-DSGVO) for the optimisation of our online offer and our website. Since the privacy of our visitors is particularly important to us, etracker anonymizes the IP address as early as possible and converts logon or device IDs into a unique key that is not assigned to a specific person. etracker does not use them for any other purpose, combine them with other data or pass them on to third parties.
You can withdraw your consent at any time. Your objection has no negative consequences for you.
Further information on data protection at etracker can be found here.
Translated with www.DeepL.com/Translator
In our internet presence we use Google Maps to show our location and to provide directions. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter only “Google”.
In order to enable the display of certain fonts on our website, a connection to the Google server in the USA is established when using Google Maps.
If you call up the Google Maps component integrated into our website, Google will store a cookie on your end device via your Internet browser. In order to display our location and to provide you with directions, your user settings and data are processed. We cannot exclude the possibility that Google uses servers in the USA.
The legal basis is Art. 6 para. 1 lit. a) DSGVO Your consent.
Through the connection to Google established in this way, Google can determine from which website your request has been sent and to which IP address the directions are to be sent.
Translated with www.DeepL.com/Translator (free version)
IX. Rights of the data subject
With regard to your personal data, you may exercise the following rights against the data controller:
• Right of Access (Art. 15 EU GDPR)
• Right to Rectification (Art. 16 EU GDPR)
• Right to Erasure or Restriction of Processing (Art. 17 and 18 EU GDPR)
• Right to Object the Processing (Art. 21 EU GDPR)
• Right to Data Portability (Art. 20 EU GDPR)
• Right to Lodge a Complaint With a Supervisory Authority (Art. 77 EU GDPR)
You may, at any time, claim whether we have stored personal data referring to you and what this data involves. Likewise, you have the right to demand correction, blocking or deletion (apart from the mandatory data storage for business transactions) of your personal data. In order to enable the blocking of data at any time, the data in question must be available on a black list for control purposes. You can also request the deletion of the data, unless this is excluded by a legal archiving obligation. Should such an obligation exist, we will, on your request, block your data. You can make changes or revoke your permission by sending us notification thereof. Such changes will apply to subsequent transactions.
We reserve the right to update our privacy statement from time to time in order to take into account changes in legislation or jurisdiction or in order to incorporate changes to our services into the privacy statement, e.g. following the launch of new services. The new privacy statement will apply for your new visit.
Further information can be found in the privacy statement.