Privacy statement

IMPORTANT Please note that the German version of this privacy statement is legally binding – the English translation on hand is only for your convenience and in no way modifies the German version. For the German version, please simply switch the language of this website. 

I. Name and address of the data controller

Responsible within the meaning of the GDPR, other applicable data protection and privacy laws in member states of the European Union and other regulations regarding data protection is:

Platestahl Umformtechnik GmbH
Platehofstraße 1
58513 Lüdenscheid
Germany
phone+49 2351 439-0
fax +49 2351 439-355
email: info@platestahl.com

II. Data protection officer

If you have any questions about this privacy statement, please send us an email or refer directly to our data protection officer:

Markus Kowall
IT Südwestfalen AG
Kalver Straße 23
58515 Lüdenscheid
Tel. +49 2351 672573-00
E-Mail: datenschutz@it-swf.de

III. General information

1. Definitions acc. to Art. 4 EU GDPR

In this privacy statement we use, among others, the following terminology:

Personal data
Personal data is information relating to an identified or identifiable natural person (hereinafter ‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data subject
The data subject is any identified or identifiable natural person, whose personal data is processed by the data controller responsible for the processing.

2. Legal basis for the processing

Art. 6(1) lit. a EU GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Art. 6(1) lit. b EU GDPR. The same applies to such processing operations, which are necessary for carrying out pre-contractual measures, for example in the case of enquiries concerning our products or services. If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Art. 6(1) lit. c EU GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if visitors were injured in our company and their name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or another third party. Then the processing would be based on Art. 6(1) lit. d EU GDPR. Finally, processing operations could be based on Art. 6(1) lit. f EU GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 EU GDPR).

3. Collection of general data and information

When calling up our website, a series of general data and information is automatically collected. This general data and information (server log files) collected may be the browser types and versions used, the operating system used, the domain name of your internet service provider and other similar data and information. When using such general data and information, we cannot draw any conclusions about the data subject. This information is technically necessary in order to deliver the content of our website correctly and inevitably accrue when using the Internet. We analyse anonymously collected data and information statistically, with the aim of optimizing the content of our website as well as the underlying website technology. The processing of data and information is based on Art. 6(1) lit. b EU GDPR, which allows the processing of data and information necessary for the completion of a contract or for carrying out pre-contractual measures.

4. Period for which the personal data will be stored

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfilment of the contract or the initiation of a contract.

5. Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in so-called server log files. These are:
• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is transmitted to our webspace provider for technical reasons, in particular in order to provide a secure and stable website. The data collected will be stored temporarily, but will not be joined with your other personal data. The legal basis for the storage is Art. 6(1) lit. f EU GDPR. Our legitimate interest is based in the improvement, stability, functionality and safety of our website.

The data will be deleted as far as further storage for evidence purposes is not necessary. Otherwise, the data are completely or partially excluded from deletion until the incident has been conclusively resolved.

IV. Cookies

a) Session cookies

Our website uses so-called cookies. Cookies are small text files or other storage technology, which are transferred and saved to your terminal device via your web browser. Through the use of cookies an individual extent of personal information such as browser-type related information, location data, or IP address are processed. Such processing makes our website safer, more effective and more user-friendly, as it enables us, for example, to provide our website in different languages or offer a shopping basket function. The legal basis of this processing is Art. 6(1) lit b. EU GDPR, provided that the cookie data is processed for the purpose of initiating or carrying out a contract. If the processing does not serve the purpose of initiating or carrying out a contract, our legitimate interest is based in the improvement of the functionality of our website. The legal basis then is Art. 6(1) lit. f EU GDPR. Session cookies are deleted when you close your Internet browser.

b) Possibility to clear cookies

You can prevent or restrict the setting of cookies by means of a corresponding setting of the Internet browser used. Furthermore, you can delete already set cookies at any time. However, the necessary steps and measures to do so depend on the specific Internet browser you use. If you have any questions, please refer to the help function or documentation of your Internet browser or contact the respective producer or rather the user support. For so-called flash cookies, however, the processing cannot be prevented through the settings of the browser. You must instead change the settings of your Flash Player in this respect. Again, the necessary steps and measures to do so depend on the specific Flash Player you use. If you have any questions, please refer to the help function or documentation of your Flash Player or contact the respective producer or rather the user support. Please note that certain functions of our website may not be entirely usable if you have deactivated or restricted the installation of cookies.

V. Applications for employment

We process personal data of candidates only for the purpose and within the scope of the application procedure and in accordance with legal provisions. We process personal data of candidates in order to fulfil our (pre-) contractual duties within the scope of the application procedure within the meaning of Art. 6(1) lit. b EU GDPR Art. 6(1) lit. f EU GDPR , provided that data processing is required, e.g. within the scope of a legal procedure (in Germany, § 26 BDSG also applies). It is a prerequisite for the application procedure that the candidates disclose personal data. Provided that we offer an online form, the personal data necessary are identified. Otherwise, they will be identifiable in the respective job descriptions. In general, they include the personal details, address, and contact information as well as documents accompanying the application, such as the cover letter, CV, and certificates. In addition, candidates may give us further information on a voluntary basis. By submitting the application to us, the candidates agree to the processing of their data for the purpose of the application procedure according to the nature and extent set out in this privacy statement. As far as special categories of personal data within the meaning of Art. 9(1) EU GDPR are voluntarily disclosed during the application process, they will also be processed according to Art. 9(2) lit. b EU GDPR (e.g. health-related data as for example severe disability or ethnic background). As far as candidates are asked to disclose information on special categories of personal data within the meaning of Art. 9(1) EU GDPR during the application process, the data will also be processed according to Art. 9(2) lit. a EU GDPR (e.g. health-related data, if they are necessary for professional practice). As far as an online form is provided, the candidates may transmit their applications via this form. The data is transmitted to us using state-of-the-art encryption. In the event of a successful application, we may further process the data provided by the candidates for the purposes of the employment relationship. Otherwise, if the application for a job opening is unsuccessful, the candidates’ data are deleted. The candidates’ data are also deleted if an application is withdrawn, something which applicants are entitled to do at any time. Provided that the candidates withdraw the application in a legitimate manner, the data will be deleted after a period of six months, which is the time required to ensure that we can answer any follow-up questions on the application and fulfil our contractual obligations on record-keeping as stipulated in Germany’s General Act on Equal Treatment (AGG).

 

VI. Contact via the website

This website contains information (e.g. name, company, email, telephone number) that enables quick electronic contact to our company as well as direct communication with us. If a data subject contacts the data controller by email or through a contact form, the personal data provided by the data subject will be automatically saved. Such personal data, transmitted by a data subject to the data controller, is stored for the purpose of processing or contacting the data subject. The legal basis for such processing is Art. 6(1) lit. b EU GDPR. There is no disclosure of personal data to third parties. Your data will be deleted once the matter has been conclusively dealt with, provided that statutory storage obligations do not exist.

VII. Analytical tools

1. Privacy statement for the web analytics service Google Analytics

1. Privacy statement for the web analytics service Google Analytics This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses so-called “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will usually be transmitted to, and stored by, Google on servers in the United States. IP anonymisation is activated on this website. Thus, on this website, your IP address will previously be abridged by Google within the member states of the European Union or in other contracting states that were party to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will make use this information on behalf of the provider of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and Internet usage. In the context of Google Analytics, Google does not combine the IP address transmitted by your browser with other personal data. You can prevent the saving of the cookies through an appropriate setting in your browser software. However, we must point out that, in such cases, you may not be able to use the full scope of all the functions of this website. In addition, you can prevent the recording of the data (including your IP address), generated by the cookie and related to your use of the website, by Google and the processing of this data by Google by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de

2. Privacy statement for etracker

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation, and economic operation of our website within the meaning of Art. 6(1) lit. f. EU GDPR), we use the analytical service “etracker“ by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg. The data collected are analysed solely pseudonymously, saved only on servers in Germany, not merged with other data nor disclosed to third parties. When storing website visitor data, certain data, including visitors’ IP addresses, device and domain data in particular, is stored in shortened and/or encrypted form so that the individual user cannot be identified based on the data. The IP address is shortened as soon as possible on an automated basis by default. The data gained by using ‘etracker’ and cookies is used to create pseudonymous user profiles. Identifiers for the recognition of app users, the implementation of session and cross device tracking, as well as the provision of behavioural data for remarketing are collected in strictly pseudonymous and/or encrypted form. Furthermore, etracker provides a contractual guarantee of the protection of the processed user data by concluding a contract about processing in accordance with Art. 28(3) (1) EU GDPR. You can object to such data collection and data processing at any time with effect for the future. In order to object to data collection and data processing of your visitor data for the future, please write an email to the abovementioned contact address. Through the opt-out an opt-out cookie called “cntcookie“ is set by etracker. Please do not delete this cookie as long as you want to maintain your objection. For further information, refer to the data protection regulations of etracker: https://www.etracker.com/datenschutz.

VIII. Google-Maps

This website uses the services of Google Maps, a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”) in order to conveniently present our location and give directions. Google is certified under the EU-US Privacy Shield framework which offers a guarantee of compliance with European data protection legislation, even if the data are processed in the USA (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). When calling up our website, a connection to the Google server in the USA will be established in order to enable the correct display of certain fonts used on our website. Provided that you use the component Google Maps featured on our website, Google will save a cookie on your device via your Internet browser. Your user settings and data are processed in order to display our location and create directions. In this context, we cannot exclude that Google uses servers in the USA. Art. 6(1) lit. f EU GDPR serves as the legal basis for this. Our legitimate interest is justified by the optimisation of the functionality our website. Such a connection to Google enables Google to identify the website from which the request has been sent and to which IP address the directions are to be transmitted. In case you do not agree to such processing, you have the possibility to prevent the installation of cookies by changing the corresponding settings in your Internet browser. Please refer to the “cookies“ section for further details. Moreover, the use of Google Maps as well as the information retrieved from Google Maps is subject to the terms and conditions of Google https://policies.google.com/terms?gl=DE&hl=de and Google Maps https://www.google.com/intl/de_de/help/terms_maps.html. Please refer to https://adssettings.google.com/authenticated and https://policies.google.com/privacy for additional information.

IX. Google Fonts

This website uses the services of Google Fonts, a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”) in order to display external fonts. Google is certified under the EU-US Privacy Shield framework, which offers a guarantee of compliance with European data protection legislation even if the data are processed in the USA (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). When calling up our website, a connection to the Google server in the USA will be established in order to enable the correct display of certain fonts used on our website. Art. 6(1) lit. f EU GDPR serves as the legal basis for this. Our legitimate interest is justified by the optimisation and economic operation of our website. When calling up our website, a connection to Google will be established. Such a connection enables Google to identify the website from which the request has been sent and to which IP address the display of the font is to be transmitted. Please visit https://adssettings.google.com/authenticated and https://policies.google.com/privacy for further information, especially on how to prevent the use of data.

X. Rights of the data subject

With regard to your personal data, you may exercise the following rights against the data controller:
• Right of Access (Art. 15 EU GDPR)
• Right to Rectification (Art. 16 EU GDPR)
• Right to Erasure or Restriction of Processing (Art. 17 and 18 EU GDPR)
• Right to Object the Processing (Art. 21 EU GDPR)
• Right to Data Portability (Art. 20 EU GDPR)
• Right to Lodge a Complaint With a Supervisory Authority (Art. 77 EU GDPR)

You may, at any time, claim whether we have stored personal data referring to you and what this data involves. Likewise, you have the right to demand correction, blocking or deletion (apart from the mandatory data storage for business transactions) of your personal data. In order to enable the blocking of data at any time, the data in question must be available on a black list for control purposes. You can also request the deletion of the data, unless this is excluded by a legal archiving obligation. Should such an obligation exist, we will, on your request, block your data. You can make changes or revoke your permission by sending us notification thereof. Such changes will apply to subsequent transactions.

XI. Changes to our privacy policy

We reserve the right to update our privacy statement from time to time in order to take into account changes in legislation or jurisdiction or in order to incorporate changes to our services into the privacy statement, e.g. following the launch of new services. The new privacy statement will apply for your new visit.