Data protection / privacy declaration

1. Data protection / privacy at a glance

General information

The following information provides a basic overview of what happens to your personal data when you visit this website. Personal data is defined as all data which makes it possible to identify you as a person. For detailed information about data protection and privacy please see our data protection declaration.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Please see the “Note on the responsible body” section of this data protection declaration for the operator’s contact details.

How do we collect your data?

Among other things, your data is collected because you give it to us. This is the case, for example, for data which you enter on a contact form.

When you visit the website, other data is either automatically collected by our IT systems or after you give your consent. This primarily relates to technical data (for example Internet browser, operating system or time at which the page was retrieved). This data is collected automatically as soon as you enter the website.

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your user behaviour. Insofar as contracts can be concluded or initiated via the website, the data which is submitted will also be processed for contract offers, orders or other order enquiries.

What are your rights regarding your data?

You have the right at any time to receive free information about the origin, recipients and purpose of your personal data which we store. In addition to this you have the right to request rectification or erasure of this data. Should you have given your consent to data processing, then you can at any time withdraw your consent, effective for the future. Furthermore you have the right under certain circumstances to request restriction of processing of your personal data.

You also have the right to lodge a complaint with the competent supervisory authority.

For information on this as well as any questions which you may have regarding data protection, please contact us at any time.

Analysis tools and third-party tools

When visiting this website, your surfing behaviour may be statistically evaluated. This is primarily carried out using so-called analysis programmes.

For detailed information on these analysis programmes, see the data protection/ privacy declaration below.

2. Hosting

The following providers host our website content:

External Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider(s). This may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website access logs, and other data generated via a website.

External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If consent has been requested, processing is carried out exclusively based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Our hosting provider(s) will process your data only to the extent necessary to fulfill their service obligations and will follow our instructions regarding this data.

We use the following hosting provider:

SCHWARZ Computer Systeme GmbH
Altenhofweg 2a
92318 Neumarkt

Contract processors

We have concluded a contract processing contract (CPC) regarding the use of the above-mentioned service. This is a contract which is required under data protection law and ensures that the processor only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

3. General information and obligatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We handle your personal information confidentially and in line with statutory data protection regulations and this privacy policy.

When you use this website, we collect various types of personal data. Personal data refers to any information that can be used to personally identify you. This privacy policy explains what data we collect, how we use it, and for what purpose.

Please be aware that data transmission over the internet (e.g. email communication) can have security vulnerabilities. It is not possible to completely protect data from third-party access

Responsible entity

The entity responsible for data processing on this website is:

Schabmüller GmbH
Ralf Haag
Industriestr. 8
92334 Berching, Germany

Phone: +49 8462 204-0
Email: info@schabmueller.de

The responsible entity is the individual or legal entity that determines, alone or together with others, the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Data protection officer

We have appointed the following Data Protection Officer:

Mr Dominik Lange
Enquiries: privacy@schabmueller.de
Tel. +49 9122 98215-0
CMD GmbH & Co. KG
Industriestraße 6
91126 Schwabach, Germany
www.cmd-datenschutz.de

Reporting a data protection incident

You can access Schabmüller’s whistleblower platform here:
https://schabmullergmbh.sdwhistle.com/

Data retention

Unless a specific retention period is mentioned in this privacy policy, we will keep your personal data until the purpose for processing it no longer applies. If you request deletion of your data or withdraw your consent to processing, we will delete your information unless we are legally required or permitted to retain it (e.g. for tax or commercial record-keeping purposes). In such cases, the data will be deleted once these legal obligations no longer apply.

General information regarding the legal bases for data processing on this website

Insofar as you have consented to data processing, we will process your personal data on the basis of Art. 6 Para. 1 (a) GDPR or, insofar as special data categories as per Art. 9 Para. 1 GDPR are processed, of Art. 9 Para. 2 (a) GDPR. In the event of express consent to the transmission of personal data to third countries, data processing will, in addition to this, be carried out on the basis of Art.

49 Para. 1 (a) GDPR. Insofar as you have consented to the saving of cookies or to the accessing of information on your end device (e.g. via device fingerprinting), data processing will also be based on Art. 25 Para. 1 TDDDG. Consent may be withdrawn at any time. Should your data be required for performance of a contract or to take steps prior to entering into a contract, then we will process your data on the basis of Art. 6 Para. 1 (b) GDPR. In addition to this, insofar as your data is required to comply with a legal obligation, we will process it on the basis of Art. 6 Para. 1 (c) GDPR.

Data processing can, furthermore, be carried out the basis of our legitimate interest as per Art. 6 Para. 1 (f) GDPR. The following paragraphs of this data protection/ privacy declaration provide information regarding the relevant legal bases for individual cases.

Recipients of personal data

Within the scope of our business activities we work with various external bodies. When doing so, in some cases the transmission of personal data to these external bodies is required. We only transmit personal data to external bodies if this is required within the scope of performance of a contract; if we are legally obliged to do so (e.g. transmission of data to tax authorities); if we have a legitimate interest as per Art. 6 Para. 1 (f) GDPR in transmission or if any other legal basis permits data transmission. When using contract processors the personal data of our clients is only forwarded on the basis of a valid contract concerning data processing. In the event of joint processing a contract concerning joint processing will be concluded.

Withdrawal of your consent to data processing

Many data processing procedures can only be carried out with your express consent. You can withdraw any consent given at any time. The lawfulness of data processing which has been carried out prior to withdrawal of consent will remain unaffected by the withdrawal.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

Where data processing is carried out on the basis of Art. 6 Para. 1 (e) or (f) GDPR, you have the right to object to processing of your personal data at any time on grounds relating to your personal situation; the same applies to profiling which is based on these provisions. Please see this data protection/privacy declaration for information on the relevant legal basis on which processing is based. Should you lodge an objection, then we will no longer process your personal data unless we can prove urgent grounds for processing which are worthy of protection and which override your interests, rights and freedoms or if processing is required to establish, assert and defend legal claims (objection as per Art. 21 Para. 1 GDPR).

Where your data is processed in order to carry out direct marketing, you have the right to object at any time to processing of your personal data for direct marketing purposes; the same applies to profiling, insofar as it is linked to such direct advertising. If you object, then your personal data will subsequently no longer be used for direct marketing purposes (objection as per Art. 21 Para. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, the data subject has the right to lodge a complaint with a supervisory authority, in particular in the member state in which he or she is habitually resident, works or at the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other judicial remedies under administrative law or before the courts.

Right to data portability

You have the right to have data which is automatically processed on the basis of your consent or to perform a contract handed over to you or a third party in a commonly used, machine-readable format. Should you request direct transmission of the data to another data controller, then this will only be carried out insofar as it is technically possible.

Information, rectification and erasure

Under current statutory regulations you have the right at any time to receive free information about your personal data which is stored by us; its origin and recipients and the purpose of data processing. Where applicable, you also have the right to rectification or erasure of this data. For information on this as well as any questions which you may have regarding data protection, please contact us at any time.

Right to restriction of processing

You have the right to request restriction of processing of your personal data.

You can contact us at any time for information on this. You have the right to restriction of processing in the following cases:

Should you dispute the correctness of your personal data which has been stored by us, then we will generally require some time to investigate this. You have the right to request restriction of processing of your personal data while this investigation is being carried out.
Should processing of your personal data have been carried out / be being carried out unlawfully, then you can

request restriction of data processing instead of erasure of the data.

Should we no longer require your personal data, however you require it to assert, defend or establish legal claims, then you have the right to request restriction of processing of

your personal data instead of its erasure.

Should you have lodged an objection as per Art. 21 Para. 1 GDPR, then a weighing up of your and our interests must be carried out. So long as it is not clear whose interests override, you will have the right to request restriction of processing of your personal data.

Should you restrict processing of your personal data, then this data may – apart from its storage – only be processed with your consent or for the establishment, assertion or defence of legal claims or to protect the rights of another natural person or legal entity or for reasons of substantial public interest of the European Union or a member state.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential data, such as enquiries which you send to us as the site operator, this site uses SSL and/or TLS encryption. An encrypted connection can be recognised by the fact that your browser address bar changes from “http://” to “https://” and by the lock symbol in your browser line.

When the SSL and/or TLS encryption is activated, third parties are unable to read data which you transmit to us.

4. Data collection on this website

Cookies

Our Internet pages use so-called “cookies”. Cookies are small data packages which do not damage your end device. They are stored on your end device either temporarily for a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted when your visit ends. Permanent cookies remain saved on your end device either until you delete them yourself or they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of specific third-party company services within websites (e.g. cookies for the processing of payment services).

Cookies have various functions. Many cookies are necessary for technical reasons because specific website features would not be able to function without them (e.g. shopping basket feature or display of videos). Other cookies can be used to evaluate user behaviour or for advertising purposes.

Cookies which are required to carry out electronic communication processes or to provide specific features which you wish to use (e.g. shopping basket feature) or to optimise the website (e.g. cookies to measure the web audience) (necessary cookies) will be saved on the basis of Art. 6 Para. 1 (f) GDPR, insofar as no other legal basis is stated.

The website operator has a legitimate interest in saving necessary cookies to facilitate technically error-free, optimised provision of their services. Insofar as consent to the saving of cookies and comparable recognition technologies has been requested, processing will be carried out solely on the basis of this consent (Art. 6 Para. 1 (a) GDPR and Art. 25 Para. 1 TDDDG); consent may be withdrawn at any time.

You can change your browser settings to inform you when cookies are installed and to only allow them in individual cases; to block the acceptance of cookies in specific cases or in general and to automatically delete cookies when you close the browser. Deactivation of cookies may restrict the functionality of this website.

For information on which cookies and services are used, please see this data protection/ privacy declaration.

5. Analysis tools and advertising

Google Analytics

This website uses Google Analytics web analysis service features. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the website user’s behaviour. When doing so, the website operator receives a variety of usage data such as page views; length of stay; which operating systems are used and the user’s location. This data is assigned to the specific user end device. It is not assigned to a user ID.

In addition to this, among other things we can use Google Analytics to record your mouse and scroll movements and clicks. Furthermore Google Analytics uses a variety of modelling approaches to supplement the data sets which have been collected as well as machine learning technologies when analysing data.

Google Analytics uses technologies which enable recognition of the user for the purpose of analysing their user behaviour (e.g. cookies or device fingerprinting). The information collected by Google regarding use of this website is generally transmitted to a Google server in the USA, where it is stored.

Use of this service is based on your consent as per Art. 6 Para. 1 (a) GDPR and Art. 25 Para. 1 TTDSG. Consent may be withdrawn at any time.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. For more information visit: https://privacy.google.com/businesses/controllerterms/mccs/.

Browser plugin

You can block the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information about handling of user data by Google Analytics please see Google’s privacy notice at: https://www.google.de/intl/de/policies/privacy/.

Contract processors

We have concluded a contract with Google regarding contract processing and fully implement the strict regulations specified by the German data protection authorities when using Google Analytics.

Online job applications

Online application data which you submit to us will be collected and processed electronically to carry out the application process. This relates in particular to the following personal data: name, address, telephone number, email address. If your application results in an employment contract, then we may store the data which you provide in your employee file to facilitate the usual organisation and administration process, taking relevant legal regulations into consideration.

If your application is unsuccessful, then the data which you provide will automatically be erased two months after you are informed that your application has been rejected. This will not apply if legal requirements (such as the burden of proof as per the German General Equal Treatment Act (AGG)) mean that a longer storage period is required or if you have expressly consented to a longer storage period in our potential candidate database.

Contact form

If you send us enquiries via the contact form, then we will store the data which you provide on the contact form, including your contact details, so that we can process your enquiry and contact you if there are any follow-up questions. This data will not be forwarded

without your consent.

Processing of this data takes place on the basis of Art 6 Para. 1 (b) GDPR insofar as your enquiry is connected to performance of a contract or is required to take steps prior to entering into a contract. In all other cases processing will be based on our legitimate interest in the effective handling of enquiries which are sent to us (Art. 6 Para. 1 (f) GDPR) or on your consent (Art. 6 Para. 1 (a) GDPR) insofar as it was requested; consent may be withdrawn at any time.

We will store data which you send to us on the contact form until you request that we erase it; withdraw your consent to storage or the reason for storing the data ends (e.g. after your enquiry has been handled). Statutory legal regulations – in particular storage periods specified by law – will remain unaffected by this.

Enquiries via email or phone

If you contact us by email or phone, we will store and process your enquiry, including any personal data you provide (such as your name and the details of your enquiry), for the purpose of addressing your request. We will not share this data without your consent.

Processing of this data takes place on the basis of Art.6 Para. 1 (b) GDPR insofar as your enquiry is connected to performance of a contract or is required to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in efficiently handling enquiries (Art. 6 Para 1 (f) GDPR) or on your consent (Art. 6 Para. 1(a) GDPR), where applicable; consent may be withdrawn at any time.

Source: https://www.e-recht24.de