28. November 2016

Privacy protection

This information is designed to give you an overview of how we process your personal data and your rights under data protection law. What specific data is processed and how it is used essentially depends on the services requested or agreed. Therefore not all parts of this information apply to you.

General policy: We, SIEPMANN-WERKE GmbH & Co. KG, take the protection of your personal data very seriously. Please note that this website is aimed exclusively at adults.

1.           Who is responsible for the data processing and whom can I contact?

The controller is

SIEPMANN-WERKE GmbH & CO. KG
Emil-Siepmann-Str. 28, 59581 Warstein
+49 2902 762412
datenschutz@siepmann.de

You can reach our company data protection officer at the above address with the reference DATA PROTECTION or at the following email contact: datenschutz@siepmann.de

2.           What sources and data do we generally use?

We process personal data that we receive from customers / applicants or interested parties among others who use our website (hereinafter: you).

3.           Why do we process your data (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG)

a) for the performance of contractual duties (Article 6(1)(b) GDPR)
Processing of data can occur for the purpose of implementing contracts with you as our customer or for carrying out pre-contractual measures.
b) in the context of balancing interests (Article 6(1)(f) GDPR)
If necessary, we can process your data beyond the actual fulfilment of the contract for the protection of our legitimate interests or those of third parties. Examples:

  • Testing and optimising procedures for demand analysis for the purpose of direct customer engagement,
  • Advertising or market and opinion research, insofar as you have not objected to the use of your data,
  • Assertion of legal claims and defence in legal disputes,
  • Ensuring the company’s IT security and IT operation,
  • Measures for business management and development of services and products,

c) on the basis of your consent (Article 6(1)(a) GDPR)

Insofar as you have given us consent to process your personal data for specific purposes (e.g. for marketing purposes, newsletter dispatch), the legitimacy of this processing is based on your consent.

d) on the basis of statutory provisions (Article 6(1)(c) GDPR) or in the public interest (Article 6(1)(e) GDPR)

In addition we are subject to diverse legal obligations, i.e. statutory requirements (e.g. tax laws). The purposes of processing include among others the fulfilment of control and reporting obligations under tax law and much more.

e) in the context of establishing an employment relationship (Article 88 GDPR in conjunction with Section 26 para. 1 BDSG)

If you submit an application to us, processing of your personal data may also occur.

4.           What does that mean specifically with regard to operation of this website with the available services?

4.1          Operation of the website and creation of log files

Every time our website is visited, our system automatically records data and information from the system of the requesting computer. The following data are collected in this way:

(1) Information on the browser type and version used
(2) The user’s operating system
(3) The user’s Internet service provider
(4) The user’s IP address
(5) The date and time of access
(6) Websites from which the user’s system reaches our website
(7) Websites which are visited by the user’s system via our website

The data are also stored in our system’s log files. These data are not stored together with the user’s other personal data.

The legal basis for the temporary storage of the data under log files is Article 6(1)(f) GDPR.

It is necessary for the system to store the IP address temporarily to enable the website to be sent to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our IT systems. An analysis of the data for marketing purposes is not carried out in this context. These purposes represent our legitimate interest in data processing in accordance with Article 6(1)(f) GDPR.

The data will be erased as soon as they are no longer required to achieve the purpose of their collection. When data are collected to operate the website, this is the case when the relevant session ends.

When data are stored in log files, this is the case after seven days at the latest. Extended storage is possible. In this case, users’ IP addresses will be erased or distorted so that assignment to the requesting client is no longer possible.

Recording data to operate the website and storing the data in log files is essential for running the website. Therefore, the user does not have any right to object.

4.2          Use of cookies

When you visit our website, we use cookies. They are designed to make our services more user-friendly, effective and secure.

These cookies store and transmit the following data: (e.g.)

  • Language settings
  • Item in a shopping basket
  • Login details

When using technically necessary cookies, we process your personal data in accordance with Article 6(1)(f) GDPR.

The purpose of using technically necessary cookies is to make your use of our website easier. Some functions of our website cannot be offered without the use of cookies. These services require the browser to be recognised again after a page change. We require your cookies for the following applications: (e.g.)

(1) Shopping basket
(2) Acquisition of language settings
(3) Recognising search terms

The user data collected by the technically necessary cookies are not used to create user profiles.

Cookies are stored on your computer, which transmits them to our website. You, as the user, therefore have full control over the use of cookies. You can disable or restrict the transmission of cookies by adjusting the settings in your web browser. Cookies which have already been saved can be deleted at any time. This can also be done automatically. If you disable cookies for our website, it may no longer be possible to fully use all the website’s functions.

Our website also uses cookies to allow us to analyse users’ behaviour. The following data can be transmitted in this way: (e.g.)

  • Search terms entered
  • Frequency of page views
  • Use of website functions

The data collected in this way are pseudonymised by technological means. Therefore, assignment of the data to the requesting user is no longer possible. The data are not stored together with users’ other personal data.

When visiting our website, you are informed of the use of cookies for analytical purposes and referred to this data protection statement by an info banner. Reference is also made in this regard to how the storage of cookies can be prevented in the browser settings.

The legal basis for the processing of personal data using cookies is Article 6(1)(f) GDPR.

Analytics cookies are used for the purpose of improving the quality of our website and its content. Analytics cookies tell us how the website is used so we can continually optimise our service. These purposes also establish our legitimate interest in the processing of your personal data in accordance with Article 6(1)(f) GDPR.

Cookies are stored on your computer, which transmits them to our website. You, as the user, therefore have full control over the use of cookies. You can disable or restrict the transmission of cookies by adjusting the settings in your web browser. Cookies which have already been saved can be deleted at any time. This can also be done automatically. If you disable cookies for our website, it may no longer be possible to fully use all the website’s functions.

When visiting our website, you are informed of the use of cookies for analytical purposes and your consent is obtained for processing the personal data used in this regard. Reference is also made to this data protection statement.

The legal basis for the processing of personal data using cookies for analytical purposes when the user’s consent has been obtained in this regard is Article 6(1)(a) GDPR.

Analytics cookies are used for the purpose of improving the quality of our website and its content. Analytics cookies tell us how the website is used so we can continually optimise our service.

Cookies are stored on your computer, which transmits them to our website. You, as the user, therefore have full control over the use of cookies. You can disable or restrict the transmission of cookies by adjusting the settings in your web browser. Cookies which have already been saved can be deleted at any time. This can also be done automatically. If you disable cookies for our website, it may no longer be possible to fully use all the website’s functions.

4.3          Newsletter

On our website there is an option to subscribe to a free newsletter. When signing up for the newsletter, data from the input form are transferred to us.

We request the following data for this purpose: (e.g.)

(a) User’s email address
(b) User’s name
(c) Subject of the message
(d) Message

In addition, the following data are collected on registration: (e.g.)

(a) IP address of the visiting computer
(b) Date and time of registration

Your consent for processing the data will be obtained during the registration process and you will be referred to this data protection statement.

No data are disclosed to third parties in connection with data processing for the sending of newsletters. These data shall only be used to send the newsletter.

If you have registered for the newsletter and have therefore declared your consent regarding the processing of your data, Article 6(1)(a) GDPR shall apply as the legal basis for this.

Collection of your email address is used to send the newsletter. Collection of other personal data during the registration process is used to prevent abuse of the services or the email address used.

The data will be erased as soon as they are no longer required to achieve the purpose of their collection. The email address will be stored as long as the newsletter subscription is active. The other personal data collected during the registration process are generally deleted after a period of 7 days.

You can cancel your subscription to our newsletter at any time. There is a corresponding link for this in each newsletter.

Revocation of consent to storage of the personal data collected during the registration process is also facilitated in this way.

4.5          Contact form and email contact

On our website there is a contact form which can be used to contact us electronically. If you choose this option, the data entered into the input form will be transferred to us and stored. These data are:

(a) Name (as entered by you)
(b) Email address
(c) Subject of your request
(d) Your message to us

The following data are also stored at the time of registration:

(a) User’s IP address
(b) Date and time of registration

Your consent for processing your data will be obtained during submission and you will be referred to this data protection statement.

Alternatively, you have the option to contact us via the email address provided. In this case, the personal data transmitted with your email will be stored. We will not distribute the data to third parties in this context. The data are used solely to process the conversation.

The legal basis for the processing of data when your consent has been obtained is Article 6(1)(a) GDPR.

The legal basis for the processing of data that are transmitted when sending an email is Article 6(1)(f) GDPR. If the aim of contact by email is to conclude a contract, Article 6(1)(b) GDPR is also a legal basis for processing.

We only process the personal data entered in the input form to facilitate contact. In the event of contact by email, there is also the necessary legitimate interest in processing the data. The other personal data processed during submission are used to prevent misuse of the contact form and ensure the security of our IT systems.

The data will be erased as soon as they are no longer required to achieve the purpose of their collection. For personal data from the input form and that which has been sent by email, this is the case when the respective conversation with you as the user ends. This is the case when it is clear from the circumstances that the matter in hand has been fully clarified. Additional personal data collected during submission will be erased after 7 days at the latest.

You have the option of withdrawing your consent to the processing of your personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. The conversation cannot be continued in such a case.

In this case, all personal data stored during contact will be erased.

4.6           Application management

Would you like to submit an application to us? We would be delighted for you to send us your application by email.

As part of application management, we process the personal data provided to us by you for initiation of an employment relationship on the basis of Article 88 GDPR in conjunction with Section 26 para. 1 BDSG. Alternatively, collective agreements (group, overall and works agreements as well as regulations under collective agreements) can be used in accordance with Article 88 GDPR in conjunction with Section 26 para. 4 BDSG as well as consent (e.g. for photographs) in accordance with Article 88 GDPR in conjunction with Section 26 para. 2 BDSG.

In individual cases we process your data to safeguard legitimate interests, e.g. for intra-group data exchange for administration purposes (Article 6(1)(f) GDPR in conjunction with Recital 48).

If special categories of personal data (e.g. severe disability) are processed, this takes place on the basis of Article 88 GDPR in conjunction with Section 26 para. 3 BDSG. In addition, processing of health data to assess your work ability in accordance with Article 9(2)(h) GDPR in conjunction with Section 22 para. 1 b) BDSG may be necessary.

We process and store your personal data so long as it is necessary for the fulfilment of the purposes of the data processing or from legal, contractual or statutory obligations. Afterwards the data are erased or processing restricted. In the event that no employment relationship results after completion of the application process, we shall delete your data 3 years at the latest after completion of the application process. At the end of the regular 3-year limitation period in accordance with Section 195 BGB (Civil Code), any claims in accordance with the General Equal Treatment Act (AGG) shall lapse.

Of course, you are also free to withdraw your application at any time. In this case, your data would be erased as soon as they are no longer required to achieve the purpose of their collection. Sending an email to us stating withdrawal of your application is sufficient to accomplish this. The revocation of any consent granted is likewise possible at any time.

4.7          Google Analytics

This website uses Google Analytics, including the Google Analytics Advertising Features. This is a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, which are text files placed on your computer to enable your use of the website to be analysed.

Google Analytics is equipped with enabled IP anonymisation (so-called IP masking). This means that the IP address of the user is abbreviated by Google within the Member States of the European Union or in other States party to the Agreement on the European Economic Area. Only in exceptional cases, e.g. if there are technical breakdowns in Europe, will the full IP address be transferred to a Google server in the USA and abbreviated there.

With the IP anonymisation method used by Google, the full IP address is at no time recorded on a hard drive, since the entire anonymisation takes place almost directly after receipt of the request in the memory.

The IP address transmitted by the user’s browser will not be merged with other data by Google.

Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide other services to the website operator relating to website and internet use, particularly functions for display advertising as well as Google Analytics reports on performance according to demographic characteristics and interests.

Google also transfers this information to third parties where necessary, insofar as this is required by law or where the third party processes this data on Google’s behalf. Under no circumstances will this include personal data.

In the Google Analytics reports on performance according to demographic characteristics and interests, data obtained about interest-based advertising by Google and visitor data from third-party providers (e.g. age groups, or interest groups) are used.

You may prevent cookies being stored on your computer by selecting the appropriate settings on your browser software; however, please note that if you do so, you may not be able to use the full functionality of this website.

You can also prevent the release of data generated by the cookies about your use of the website (including your IP address) to Google as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link:

Download and install Google Browser Plug-in

You can also prevent Google Analytics from collecting information by clicking on the following link. An opt-out cookie will be installed that prevents the future collection of your information when you visit this website:

Disable Google Analytics

You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/analytics/terms/ and at https://www.google.com/policies/.

5.           What rights can you assert?

Every data subject has the right to information pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR, the right to object pursuant to Article 21 GDPR and the right to data portability pursuant to Article 20 GDPR. The limitations according to Sections 34 and 35 BDSG apply to the right to information and the right to erasure. In addition, there is a right of appeal to a responsible data protection authority (Article 77 GDPR in conjunction with Section 19 BDSG).

You can withdraw consent granted to processing of personal data from us at any time. This also applies to the revocation of declarations of consent, which were issued to us prior to the application of the GDPR, i.e. before 25 May 2018. Please note that the revocation only works with future effect. This does not affect processing that occurred before revocation.

For information about any of these rights, please contact our data protection officer.

6.           Do I have to provide my personal data?

Within the scope of our business relationship, you need only provide the personal data which is necessary for the establishment and execution of a business relationship and fulfilment of associated contractual obligations or which we are legally obliged to collect. Without this data, we will as a rule have to reject the conclusion of the contract or the execution of the order, or cease to be able to execute an existing contract and, if necessary, have to terminate it.

7.           Is there automated decision-making?

No. We currently do not use any fully-automated decision-making to establish and execute business relationships in accordance with Article 22 GDPR. “Profiling” does not occur.

8.          Information on your right to object in accordance with Article 21 GDPR

Case-specific right to object

You have the right, for reasons of your own particular situation, to object at any time to the processing of personal data relating to you that is performed as a result of Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing based on a balancing of interests); this also applies to any profiling based on this provision, in accordance with Article 4(4) GDPR.

If you do object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is intended for the assertion, exercise or defence of legal claims.

Right to object to the processing of data for direct advertising purposes

In individual cases, we process your personal data in order to engage in direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct advertising purposes, we will no longer process your personal data for these purposes.

Recipient of the revocation

Revocation can occur without a form with the reference “Revocation” and stating your name, address and date of birth and should be sent to:

SIEPMANN-WERKE GmbH & Co. KG
Emil-Siepmann-Str. 28, 59581 Warstein
+49 2902 762412
datenschutz@siepmann.de

9.           More information

If you have any questions that have not been answered by this data protection statement or if you would like more detailed information on a particular topic, please contact our data protection officer, who will be glad to help.