1. DATA PROTECTION AT A GLANCE
DATA COLLECTION ON OUR WEBSITE
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator, whose contact details can be found in the legal notice of this website.
How do we collect your data?
Your data is collected firstly by you providing it to us. This could, for example, be data you enter on a contact form. Other data is automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure the website functions properly. Other data can be used to analyse your user behaviour.
What rights do you have regarding your data?
ANALYSIS TOOLS AND TOOLS FROM THIRD PARTIES
2. GENERAL AND MANDATORY INFORMATION
INFORMATION ON THE DATA CONTROLLER
The controller for data processing on this website is:
Herbrig & Co. GmbH
01773 Altenberg OT Bärenstein
Phone 035054 22331
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
STATUTORY DATA PROTECTION OFFICER
We have appointed a data protection officer for our company.
IfDDS GmbH – Institut für Datenschutz und Datensicherheit
Strehlener Straße 14
Phone 0351 27579057
REVOCATION OF YOUR CONSENT TO DATA PROCESSING
Many data processing operations are only possible with your express consent. You can revoke consent that you have already given at any time. To do so, an informal email to us is sufficient. The legality of the data processing performed prior to the revocation remains unaffected by the revocation.
RIGHT TO OBJECT TO DATA COLLECTION IN SPECIAL CASES AS WELL AS TO DIRECT ADVERTISING (ARTICLE 21 GDPR)
RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY
In the event of breaches of the GDPR, the data subjects have a right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or place of the alleged breach. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.
RIGHT TO DATA PORTABILITY
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of data to another controller, this will only be done to the extent technically feasible.
SSL OR TLS ENCRYPTION
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser’s address line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
INFORMATION, BLOCKING, DELETION AND CORRECTION
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient, and the purpose of data processing and, if necessary, a right to have this data corrected, blocked or deleted. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the legal notice.
RIGHT TO RESTRICT PROCESSING
You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time at the address given in the legal notice. The right to restrict processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
- • If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
- If you have filed an objection pursuant to Article 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may – apart from its storage – only be processed with your consent or to establish, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
OBJECTION TO ADVERTISING EMAILS
The use of contact data published within the scope of the legal notice obligation to send advertising and information material not expressly requested is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example through spam emails.
3. DATA COLLECTION ON OUR WEBSITE
SERVER LOG FILES
The provider of the pages automatically collects and stores information in server log files, which your browser automatically transmits to us. These are:
- • Browser type and version
- • Operating system used
- • Referrer URL
- • Host name of the accessing computer
- • Time of the server request
- • IP address
No merging of this data with other data sources is carried out. This data will not be combined with data from other sources. The collection of this data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – the server log files must be recorded for this purpose.
If you send us enquiries via the contact form, we will store your details from the enquiry form, including the contact details you provided there, for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent. The processing of the data entered in the contact form is thus based exclusively on your consent (Article 6(1)(a) GDPR). You can revoke this consent at any time. To do so, an informal email to us is sufficient. The legality of the data processing operations performed prior to the revocation remains unaffected by the revocation. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
ENQUIRY BY EMAIL, PHONE OR FAX
If you contact us by email, phone or fax, we will store and process your enquiry including all resulting personal data (name, enquiry) for the purpose of handling your request. We do not pass on this data without your consent. The processing of this data is based on Article 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Article 6(1)(a) GDPR) and/or on our legitimate interests (Article 6(1)(f) GDPR), as we have a legitimate interest in the effective handling of enquiries addressed to us. The data you send us via contact requests will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
PROCESSING OF DATA (CUSTOMER AND CONTRACT DATA)
We collect, process and use personal data only insofar as it is necessary to establish, design the content of or change the legal relationship (master data). This is done on the basis of Article 6(1)(b) GDPR, which allows the processing of data to fulfil a contract or pre-contractual measures. We collect, process and use personal data about the use of our website (usage data) only insofar as it is necessary to enable the user to utilise the service or to bill for it. The collected customer data will be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.
4. ANALYTICS TOOLS AND ADVERTISING
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and stored there. The storage of Google Analytics cookies and the use of this analysis tool are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise both its web offering and its advertising.
You can prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we would like to point out that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: www.tools.google.com/dlpage/gaoptout?hl=en.
Objecting to data collection
We have concluded a contract with Google for order processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
5. PLUGINS AND TOOLS
GOOGLE WEB FONTS
6. OWN SERVICES
We offer you the opportunity to apply to us (e.g. by email, post or via the online application form). Below we will inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that the collection, processing and use of your data will be in accordance with applicable data protection law and all other statutory provisions and that your data will be treated strictly confidentially.
Scope and purpose of data collection
When you submit an application to us, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) to the extent necessary to decide on the establishment of an employment relationship. The legal basis for this is Section 26 of the new Federal Data Protection Act (BDSG-neu) under German law (initiation of an employment relationship), Article 6(1)(b) GDPR (general contract initiation), and – if you have given consent – Article 6(1)(a) GDPR. Consent can be revoked at any time. Your personal data is shared within our company solely with individuals involved in processing your application. If the application is successful, the data you have submitted will be stored in our data processing systems on the basis of Section 26 BDSG-neu and Article 6(1)(b) of the GDPR for the purpose of carrying out the employment relationship.
Data retention period
If we cannot make you a job offer, you decline a job offer, withdraw your application, revoke your consent to data processing or request deletion of your data, the data you have provided, including any remaining physical application documents, will be stored or retained for a maximum of 6 months following the conclusion of the application process (retention period) to understand the details of the application process in case of discrepancies (Article 6(1)(f) GDPR). YOU CAN OBJECT TO THIS STORAGE IF YOU HAVE LEGITIMATE INTERESTS THAT OUTWEIGH OUR INTERESTS. After the retention period has expired, the data will be deleted unless there is a legal obligation to retain it or another legal reason for further storage. If it is apparent that the retention of your data will be necessary after the end of the retention period (e.g. due to an impending or pending legal dispute), deletion will only take place when the data has become irrelevant. Other statutory retention obligations remain unaffected.
7. DATA PROTECTION WHEN VISITING OUR SOCIAL MEDIA CHANNELS
DATA PROCESSING BY SOCIAL NETWORKS
Our social media sites are intended to ensure as comprehensive a presence on the internet as possible. This is a legitimate interest within the meaning of Article 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on different legal grounds to be specified by the operators of the social networks (e.g. consent in the sense of Article 6(1)(a) GDPR).
DATA CONTROLLER AND ASSERTION OF RIGHTS
When you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (access, correction, deletion, restriction of processing, data portability and complaint) in principle both against us and against the operator of the respective social media portal (e.g. against Facebook). Please note that despite the shared responsibility with the social media portal operators, we do not have full control over the data processing operations of the social media portals. Our options are determined largely by the company policy of the respective provider.
With the following data protection information, we (data controller in the sense of the General Data Protection Regulation) explain which personal data we collect about you when you visit our company’s Facebook presence www.facebook.com/Drehteile.Herbrig. Personal data is all data with which you can be personally identified. Our company’s Facebook presence www.facebook.com/Drehteile.Herbrig (fan page) serves as an information platform for a broad public and for targeted communication with interested visitors. We perform data processing exclusively to the extent that you provide us with this information using the interactive options available. We point out that you use this Facebook page and its functions voluntarily and under your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).
Data processing by Facebook
Herbrig & Co. GmbH is also present on Facebook. Herbrig & Co. GmbH has no influence on the privacy settings of this third-party platform. However, the European Court of Justice (Judgment of 05/06/2018 – C-210/16) has determined in one case that alongside Facebook itself, the operator of Facebook fan pages is also the (co-)controller for data processing. Therefore, we inform you here in accordance with the EU General Data Protection Regulation (GDPR) about data processing in connection with Facebook, as far as we know these data processing operations and can influence them. When you visit our Facebook company presence, Facebook collects your IP address and other information available on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides us as the page operator with the following data (anonymised and grouped) for evaluation purposes:
- Place of residence (nation and region or city)
For overall usage, the following are recorded anonymously:
- Time of use
- Interactions in the context of posts (e.g. reactions, comments, click rate, views, shares)
- Video viewing duration
- Devices, operating systems, software used
- Usage history (referring web offers)
- Location of use
Facebook provides further information at the following link: www.en-gb.facebook.com/help/pages/insights. The data is processed on the basis of Article 6(1)(1)(f) GDPR. The operators of Facebook process your data to operate and optimise their services and to pass on the data – possibly for commercial purposes. It is expressly pointed out that Facebook also sets cookies that enable the company Facebook to track user behaviour on other websites and apps of the group as well as on certain websites and apps that integrate Facebook technologies. This is especially true if you are already registered on Facebook. More details can be found in the privacy information of the third-party platform. The data is collected using the standard criteria and filtering functions of Facebook. Herbrig & Co. GmbH has no influence on these criteria. The data collected in this context about you is processed by Facebook and may also be transferred to countries outside the EU. What information Facebook receives and how it is used is described by Facebook in general terms in its data usage guidelines. There you will also find information about options for contacting Facebook and the settings for advertisements. The data policy is available at the following link: www.en-gb.facebook.com/about/privacy or www.en-gb.facebook.com/full_data_use_policy. How Facebook uses the data from visits to Facebook pages for its own purposes, the extent to which activities on the Facebook page are assigned to individual users, how long Facebook stores this data, and whether data from a visit to the company’s Facebook presence is passed on to third parties, is not conclusively and clearly stated by Facebook and is not known to us. When you access a company’s Facebook presence, the IP address assigned to your device is transmitted to Facebook. According to Facebook, this IP address is anonymised (for “German” IP addresses) and deleted after 90 days. Facebook also stores information about users’ devices (e.g. as part of the “login notification” function). This may allow Facebook to associate IP addresses with individual users. If you are currently logged in to Facebook as a user, there is a cookie on your device with your Facebook ID. This enables Facebook to track that you have visited this page and how you have used it. This also applies to all other Facebook pages. If you want to avoid this, you should log out of Facebook or disable the “stay logged in” function, delete the cookies on your device and restart your browser. This way, Facebook information that can directly identify you will be deleted. This allows you to use our company’s Facebook presence without revealing your Facebook identifier. Provided the respective legal requirements are met, you have the right to correction in accordance with Article 16 GDPR, deletion according to Article 17 GDPR, restriction of processing according to Article 18 GDPR, objection to processing according to Article 21 GDPR, and to lodge a complaint with a supervisory authority according to Article 77 GDPR. Please note, however, that Herbrig & Co. GmbH does not process any personal data of yours, but purely statistical data. If necessary, please contact the operator of the third-party platform. Information on how to manage or delete information about you can be found in the above-mentioned data policy (www.en-gb.facebook.com/about/privacy or www.en-gb.facebook.com/full_data_use_policy).
USE OF SALESVIEWER® TECHNOLOGY:
In doing so, an opt-out cookie for this website will be placed on your device. If you delete your cookies in this browser, you must click this link again.