Data privacy

1 Notes on the privacy policy

Thank you for your interest in our organisation. Data protection is of a particularly high priority for the CG TEC Carbon und Glasfasertechnik GmbH.

If you wish to make use of certain services of our organisation, e.g. via our website, it will be necessary to process personal data. You are then a „data subject“ within the meaning of the data protection regulations - which is why you are also referred to as a „user“ below.

When processing personal data, such as the name, address, telephone number or e-mail address of a data subject, we always take into account the requirements of the General Data Protection Regulation and the applicable country-specific data protection regulations.

If there is no legal basis for processing personal data, we generally obtain the consent of the data subject for the required processing.

With this privacy policy, we would like to provide the public with information about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects can inform themselves about the rights to which they are entitled.

CG TEC Carbon und Glasfasertechnik GmbH maintains various technical and organisational measures to ensure that the personal data processed is protected as comprehensively as possible. Nevertheless, the transmission of personal data via the Internet can generally have security gaps, so that one hundred per cent protection cannot be guaranteed. For this reason, every data subject is free to transmit such data to us by alternative means, for example by telephone.

2 Terms

The terms used below follow the definitions set out in Article 12 para. 1 of the General Data Protection Regulation (GDPR) and §2 of the Federal Data Protection Act (BDSG). The text of the GDPR can be viewed here: https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679&from=DE, the text des BDSG here: https://www.gesetze-im-internet.de/bdsg_2018/BJNR209710017.html.

3 Contact information

Data subjects can contact us or our data protection officer at any time with any questions or suggestions regarding data protection.

We endeavour to ensure the security of contact within the framework of the applicable data protection laws and technical possibilities. Personal data entered via the contact form on the website is transmitted in encrypted form using the SSL (Secure Socket Layer) coding system. Other digital data transmission methods (e.g. by e-mail) may have security gaps - if in doubt, you should contact us by telephone or post.

3.1 The controller responsible for the processing

The controller within the meaning of the General Data Protection Regulation (GDPR) and other provisions of a data protection nature is:

CG TEC Carbon and Fiberglass Technology GmbH

Gewerbepark Hügelmühle 41

91174 Spalt, Germany

Tel: +49 9175 908070

Fax: +49 9175 9080720

Email: vasb@pt-grp.qr

3.2 The data protection officer

Our Data Protection Officer is:

Jörg Stroh (extern)

Gewerbepark Hügelmühle 41

91174 Spalt, Germany

Tel: +49 9175 908070

Fax: +49 9175 9080720

E-Mail: qngrafpuhgm@pt-grp.qr

4 General information on the use of the website

We cannot guarantee that our website will be available without interruption; disruptions, interruptions or failures cannot be ruled out. The servers we use are carefully backed up on a regular basis.

4.1 Contact via our website / by e-mail

The data subject has the option of contacting us using contact forms (provided on our website) or e-mail addresses (published on our website) on all topics.

Which personal data is transmitted to us in the process can be seen from the input screen of the contact form or from the email sent by the data subject. The legal basis for processing via the contact form is the consent of the data subject given before sending the contact (Art. 6 para. 1 lit. a GDPR). The legal basis for processing by email is our legitimate interest in responding to the data subject's enquiry (Art. 6 (1) (f) GDPR).

The data will not be passed on to third parties outside our group of companies. After clarification of the enquiry, it will be deleted.

The purpose of the data subject contacting us is to offer the data subject content or services which, due to the nature of the matter, can only be offered by making contact. Data subjects are free to change the personal data provided when contacting us at any time or to have it completely deleted from our database. We will provide any data subject with information about the personal data stored about them at any time on request. Furthermore, we will correct or delete personal data at the request or notice of the data subject, provided that this does not conflict with any statutory retention obligations. We are available to the data subject in this context as a contact person, also via qngrafpuhgm@pt-grp.qr.

In addition to the above-mentioned personal data, the IP address assigned by the data subject's internet service provider (ISP), the date and time of contact are also stored when contact is made via our website. This data is stored against the background that this is the only way to prevent misuse of our services and, if necessary, to enable criminal offences to be investigated. In this respect, the storage of this data is necessary for our security, the legal basis is therefore Art. 6 para. 1 lit. f EU General Data Protection Regulation (GDPR). This data will not be passed on to third parties unless there is a legal obligation to pass it on or it serves the purpose of criminal prosecution.

4.2 Cookies

Our website uses cookies. Cookies are text files that are stored on the data subject's IT system via the browser. If the data subject accesses our website, cookies may be stored on the data subject's IT system. These cookies contain characteristic character strings that enable the browser to be uniquely identified when the website is called up again.

This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consent. Borlabs Cookie does not process any personal data. The borlabs cookie stores the consent you gave when you entered the website. If you wish to revoke this consent, simply delete the cookie in your browser. If you then re-enter/reload the website, you will be asked for your cookie consent again. You can find detailed information on the Borlabs cookie privacy policy at https://de.borlabs.io/datenschutz/

4.2.1 Technically necessary / essential cookies

In order to ensure the functionality of our website, but also to fulfil legal obligations, we use technically necessary cookies. These cookies contain information about the visit (IP address, time of page view, device and browser information) as well as data on the use of the website (e.g. granting consent to the processing of your personal data). The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f (legitimate interest) of the GDPR.

The purpose of the use is to enable the use of websites for the data subject.

Some functions of our website cannot be offered without the use of cookies.

The data subject can deactivate or restrict the transmission of cookies by changing the settings in the browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. The cookie settings can be found in the help function of your browser. If cookies are deleted or deactivated, it may no longer be possible to use all functions of the website to their full extent.

4.2.2 Technically unnecessary cookies

We also use cookies on our website that enable an analysis of the data subject's surfing behaviour and the integration of external media.

The following data can be transmitted in this way: (1) search terms entered, (2) frequency of page views, (3) utilisation of website functions, (4). Information on the website from which our website was accessed, see also 4.3.

The user data collected in this way is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with other personal user data. When you visit our website for the first time, a window called „Data protection settings“ opens. By clicking on „Accept all“, you give us your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR to set the analysis cookies. You can revoke your consent by clicking on the blue circle at the bottom left of the website and then selecting „Accept essential cookies only“. Alternatively, you can delete the cookies stored by us in your browser - you can find the cookie settings in the help function of your browser.

4.3 Collection of general data and information

We collect, store and use data about every access to our online offer (so-called server log files). The access data includes the name and URL of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval (HTTP response code), browser type and version, operating system, referrer URL (i.e. the previously visited page), IP address and the requesting provider.

We use this log data without allocation to the person concerned or other profiling for statistical evaluations for the purpose of the operation, security and optimisation of our online offer, but also for the anonymous recording of the number of visitors to our website (traffic) and the extent and type of use of our website and services, as well as for billing purposes to measure the number of clicks received from cooperation partners. This information allows us to provide personalised and location-based content and to analyse traffic, troubleshoot and correct errors and improve our services. We reserve the right to check the log data retrospectively if there is a justified suspicion of unlawful use based on concrete evidence. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for the provision or billing of a service, e.g. if the data subject uses one of our services. We store IP addresses if we have a concrete suspicion of a criminal offence in connection with the use of our website.

The legal basis for the processing is Art. 6 para. 1 lit. f (legitimate interest) of the GDPR.

4.4 Links/redirection to third-party websites

We use links on our website that refer to our own content (within our website or our group of companies) and to third-party content (e.g. pages from partners or social media).

Links to our own content are usually in the form of text. As the content provider, we are responsible for our own content.

Links to external content are usually displayed as a logo or symbol. We would like to point out that third-party content may have its own data protection declarations and that we accept no responsibility for these. As soon as you click on the link to third-party content, data is transferred to this destination. These are in particular

  • Your IP address
  • the time of clicking on the link
  • Address of the website you came from
  • Operating system and browser version of your end device (user agent)

We would also like to point out that clicking on links may mean that the aforementioned data is transferred to non-European countries. If you do not want this to happen, do not click on links.

5 Other website functions and tools

 

5.1 Google Analytics (with anonymisation function)

We use Google Analytics (with anonymisation function) as a web analysis service from Google on our website. „Google“ is a group of companies consisting of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC. Web analysis is defined as the collection, collation and evaluation of data on visitor behaviour on websites. This service collects data, for example, about which website a data subject came to our website from (a so-called referrer), which subpages of our website were accessed or how often and for how long a subpage was displayed. Web analysis is mainly used to improve a website and to analyse the cost-benefit of internet-based advertising.

Operating company: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“).

Your data is processed on the basis of the consent you have given us when using our website (consent banner).

The information generated by the cookie about your use of our website (including your IP address) is usually transmitted to a Google server and stored there. We have activated IP anonymisation on our website so that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States of America and truncated there.

By using Google Analytics, personal data may be transferred to servers operated by Google LLC in the USA. A transfer to the United States of America takes place on the basis of an adequacy decision by the European Commission and Google LLC's participation in the Data Privacy Framework. Please note that American authorities, such as intelligence agencies, could possibly gain access to personal data that is inevitably exchanged with Google via the Internet Protocol (TCP) when integrating this service due to American laws such as the Cloud Act.

We use Google Analytics to analyse and improve the use of our website. The information generated by the cookie about your use of our website (including your IP address) is used to compile reports on website activity and to provide other services relating to website activity and internet usage.

The data transmitted by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.

The data subject can object to the storage of cookies by our website by making the appropriate selection in the consent banner, and cookies that have already been stored can also be deleted at any time via the web browser settings.

Furthermore, the data subject can object to and prevent the collection of data generated by Google Analytics relating to the use of our website and the processing of this data by Google.

To do this, the data subject must download and install an add-on for the web browser from the following page: https://tools.google.com/dlpage/gaoptout. This add-on informs Google Analytics that no information about visits to websites that use Google Analytics may be transmitted. The installation of the add-on is seen by Google as an objection. If the data subject's IT system is reinstalled, the data subject must reinstall the add-on to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated, it is possible to reinstall or reactivate it.

Further information and the applicable data protection provisions of Google may be retrieved under https://policies.google.com/privacy?hl=de&gl=de and http://www.google.com/analytics/terms/de.html.

5.2 Other services

5.2.1 Google Maps

We have integrated Google Maps components from Google on our website. „Google“ is a group of companies consisting of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC. The purpose of the component is to show the data subject our location on an interactive map and to give them the option of receiving route suggestions for reaching our location.

The operating company of Google Maps is Google Ireland Limited.

By calling up the component, Google receives information that you have called up the respective subpage of our website. This occurs regardless of whether you are logged into your Google account or not, or whether you do not have a Google account at all. If you are logged into your Google account, this data is directly assigned to your Google account. If you do not want this allocation to take place, you must log out of your Google account before clicking on the Google Maps component.

In any case, Google collects data to create user profiles, e.g. to create adverts via our website. If you do not want Google to process data about you, you must deactivate JavaScript in your browser settings. Our website may then only be usable to a limited extent.

By using Google Maps, personal data may be transferred to servers operated by Google LLC in the USA. The transfer to the United States of America takes place on the basis of an adequacy decision by the European Commission and Google LLC's participation in the Data Privacy Framework. Please note that American authorities, such as intelligence agencies, could possibly gain access to personal data that is inevitably exchanged with Google when this service is integrated on the basis of the Internet Protocol (TCP) due to American laws such as the Cloud Act.

Further information and the option to view and change the data protection settings can be found in Google's privacy policy: http://www.google.com/privacypolicy.html

6 Further data protection information

6.1 Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to processing operations necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR as the legal basis.

In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR as the legal basis for processing.

6.2 Data erasure and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract. Connection data to the web servers operated by us will be deleted after 6 weeks.

6.3 Existence of automated decision-making

Automated decision-making on the basis of the collected personal data does not take place.

6.4 Social media

6.4.1 Facebook

We operate a page about our company on Facebook. This page can be reached either via a link on this website or via the search function in Facebook. The page uses the services of Meta Platforms Ireland Limited, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland, as a technical platform. We would like to point out that you use this Facebook page and its functions at your own risk. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is stored on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more information on this under the following link: https://www.facebook.com/privacy/policy/?section_id=1-WhatInformationDoWe. The data collected about you in this context is processed by Meta Platforms Ireland Limited in cooperation with Meta Platforms, Inc. (1 Meta Way, Menlo Park, California 94025-1453) and may also be transferred to the United States of America. A transfer to the United States of America takes place on the basis of an adequacy decision of the European Commission and participation of Meta Platforms, Inc. in the Data Privacy Framework. Please note that American authorities, such as intelligence agencies, may be able to gain access to personal data collected when using this service due to American laws such as the Cloud Act.

 Facebook describes in general terms what information Facebook receives and how it is used in its data usage guidelines. There you will also find information on how to contact Facebook and the settings options for adverts. Information on how you can manage or delete information about you can be found in the complete Facebook data policy www.facebook.com/privacy/policy. Facebook does not conclusively and clearly state how it uses the data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties, and we are not aware of this. When you access a Facebook page, the IP address assigned to your end device is transmitted to Facebook. According to Facebook, this IP address is anonymised (for „German“ IP addresses). Facebook also stores information about the end devices of its users (e.g. as part of the „login notification“ function); Facebook may thus be able to assign IP addresses to individual users.

If you are currently logged in to Facebook as a user, a cookie with your Facebook ID is stored on your end device. This enables Facebook to recognise that you have visited this page and how you have used it. This also applies to all other Facebook pages. Facebook buttons integrated into websites enable Facebook to record your visits to these websites and assign them to your Facebook profile. This data can be used to offer you customised content or advertising. If you want to avoid this, you should log out of Facebook or deactivate the „stay logged in“ function, delete the cookies on your device and close and restart your browser. In this way, Facebook will delete information that can be used to directly identify you. This allows you to use our Facebook page without revealing your Facebook ID. When you access interactive functions on the page (like, comment, share, message, etc.), a Facebook login screen will appear. Once you have logged in, you will once again be recognisable to Facebook as a specific user. As the provider of the information service, we do not collect or process any other data from your use of our service.

6.4.2 Instagram

We operate a page about our company on Instagram. This page can be reached either via a link on this website or via the search function in Instagram. The page uses the services of Meta Platforms Ireland Limited, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland, as a technical platform. We would like to point out that you use this Instagram page and its functions at your own risk. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). When you visit our Instagram page, Instagram collects, among other things, your IP address and other information that is stored on your PC in the form of cookies. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides more information on this under the following link: https://privacycenter.instagram.com/policy/?section_id=1-WhatInformationDoWe. The data collected about you in this context is processed by Meta Platforms Ireland Limited in cooperation with Meta Platforms, Inc. (1 Meta Way, Menlo Park, California 94025-1453) and may also be transferred to the United States of America. A transfer to the United States of America takes place on the basis of an adequacy decision of the European Commission and participation of Meta Platforms, Inc. in the Data Privacy Framework. Please note that American authorities, such as intelligence agencies, may be able to gain access to personal data collected when using this service due to American laws such as the Cloud Act. Instagram describes what information it receives and how it is used in general terms in its data usage guidelines. There you will also find information on how to contact Instagram and on the settings options for adverts. Information on how you can manage or delete information about you can be found in Instagram's complete data policy: https://privacycenter.instagram.com/policy/. How Instagram uses the data from visits to Instagram pages for its own purposes, to what extent activities on the Instagram page are assigned to individual users, how long Instagram stores this data and whether data from a visit to the Instagram page is passed on to third parties is not conclusively and clearly stated by Instagram and is not known to us. When you access an Instagram page, the IP address assigned to your end device is transmitted to Instagram. According to Instagram, this IP address is anonymised (for „German“ IP addresses). Instagram also stores information about the end devices of its users (e.g. as part of the „login notification“ function); Instagram may thus be able to assign IP addresses to individual users. If you are currently logged in to Instagram as a user, a cookie with your Instagram ID is stored on your device. This enables Instagram to understand that you have visited this page and how you have used it. This also applies to all other Instagram pages. Instagram buttons integrated into websites enable Instagram to record your visits to these websites and assign them to your Instagram profile. This data can be used to offer you customised content or advertising. If you want to avoid this, you should log out of Instagram or deactivate the „stay logged in“ function, delete the cookies on your device and close and restart your browser. This will delete Instagram information that can be used to directly identify you. This allows you to use our Instagram page without revealing your Instagram ID. If you access interactive functions on the site (like, comment, share, message, etc.), an Instagram login screen will appear. After logging in, you will once again be recognisable to Instagram as a specific user. As the provider of the information service, we do not collect or process any other data from your use of our service.

6.4.3 YouTube

We operate a page about our company on YouTube. This page can be reached either via a link on this website or via the search function in YouTube. The page uses the services of Google as a technical platform. „Google“ is a group of companies consisting of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC. We would like to point out that you use this YouTube page and its functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our YouTube page, Google Ireland Limited collects your IP address and other information that is stored on your PC in the form of cookies. This and other data collected about you may also be transferred to the United States of America. A transfer to the United States of America takes place on the basis of an adequacy decision by the European Commission and Google LLC's participation in the Data Privacy Framework. Please note that American authorities, such as intelligence agencies, may be able to gain access to personal data collected when using this service due to American laws such as the Cloud Act.

What other information Google Ireland Limited receives and how it is used is described by Google Ireland Limited here: https://policies.google.com/privacy?hl=de.

We do not know how Google Ireland Limited uses the data from visits to YouTube pages for its own purposes, to what extent activities on the YouTube page are assigned to individual users, how long YouTube stores this data and whether data from a visit to the YouTube page is passed on to third parties. If you are currently logged in to YouTube as a user, a cookie with your YouTube ID is stored on your device. This enables YouTube to recognise that you have visited this page and how you have used it. If you want to avoid this, you should log out of YouTube or deactivate the „stay logged in“ function, delete the cookies on your device and close and restart your browser. This will delete YouTube information that can be used to directly identify you. This allows you to use our YouTube page without revealing your YouTube identifier. If you access interactive functions on the site (like, comment, share, news, etc.), a YouTube login screen will appear. After logging in, you will once again be recognisable to YouTube as a specific user. As the provider of the information service, we do not collect or process any other data from your use of our service.

6.4.4 LinkedIn

We operate a page about our company on LinkedIn. This page can be reached either via a link on this website or via the search function in LinkedIn. The page uses the services of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, as a technical platform. We would like to point out that you use this LinkedIn page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). When you visit our LinkedIn page, LinkedIn Ireland Unlimited Company collects, among other things, your IP address and other information that is stored on your PC in the form of cookies. This and other data collected about you may be transferred to countries outside the European Union. What other information LinkedIn Ireland Unlimited Company receives and how it is used is described by LinkedIn Ireland Unlimited Company here: https://privacy.LinkedIn.com/de.

We do not know how LinkedIn Ireland Unlimited Company uses the data from visits to LinkedIn pages for its own purposes, to what extent activities on the LinkedIn page are assigned to individual users, how long LinkedIn stores this data and whether data from a visit to the LinkedIn page is passed on to third parties. If you are currently logged in to LinkedIn as a user, a cookie with your LinkedIn ID is stored on your device. This enables LinkedIn to track that you have visited this page and how you have used it. If you want to avoid this, you should log out of LinkedIn or deactivate the „stay logged in“ function, delete the cookies on your device and close and restart your browser. In this way, LinkedIn information that can be used to directly identify you will be deleted. This allows you to use our LinkedIn page without revealing your LinkedIn identifier. When you access interactive functions on the site (like, comment, share, message, etc.), a LinkedIn login screen appears. Once you have logged in, you will once again be recognisable to LinkedIn as a specific user. As the provider of the information service, we do not collect or process any other data from your use of our service.

6.4.5 Xing

We operate a page about our company on Xing. This page can be reached either via a link on this website or via the search function in Xing. The page uses the services of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, as its technical platform. We would like to point out that you use this Xing page and its functions at your own risk. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). When you visit our Xing page, New Work SE collects, among other things, your IP address and other information that is stored on your PC in the form of cookies. This and other data collected about you may be transferred to countries outside the European Union. What other information New Work SE receives and how it is used is described by New Work SE here: https://privacy.xing.com/de.

We do not know how New Work SE uses the data from visits to Xing pages for its own purposes, to what extent activities on the Xing page are assigned to individual users, how long Xing stores this data and whether data from a visit to the Xing page is passed on to third parties. If you are currently logged in to Xing as a user, a cookie with your Xing ID is stored on your device. This enables Xing to recognise that you have visited this page and how you have used it. If you want to avoid this, you should log out of Xing or deactivate the „stay logged in“ function, delete the cookies on your device and close and restart your browser. This will delete Xing information that can be used to directly identify you. This allows you to use our Xing page without revealing your Xing ID. If you access interactive functions on the site (like, comment, share, message, etc.), a Xing login screen will appear. Once you have logged in, you will once again be recognisable to Xing as a specific user. As the provider of the information service, we do not collect or process any other data from your use of our service.

6.4.6 Kununu

We operate a page about our company on Kununu. This page can be reached either via a link on this website or via the search function in Kununu. The page uses the services of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, as its technical platform. We would like to point out that you use this Kununu page and its functions at your own risk. This applies in particular to the use of the interactive functions (e.g. rating). When you visit our Kununu page, New Work SE collects, among other things, your IP address and other information that is stored on your PC in the form of cookies. This and other data collected about you may be transferred to countries outside the European Union. What other information New Work SE receives and how it is used is described by New Work SE here: https://privacy.Kununu.com/de.

We do not know how New Work SE uses the data from visits to Kununu pages for its own purposes, to what extent activities on the Kununu page are assigned to individual users, how long Kununu stores this data and whether data from a visit to the Kununu page is passed on to third parties. If you are currently logged in to Kununu as a user, a cookie with your Kununu ID is stored on your device. This enables Kununu to recognise that you have visited this page and how you have used it. If you want to avoid this, you should log out of Kununu or deactivate the „stay logged in“ function, delete the cookies on your device and close and restart your browser. This will delete Kununu information that can be used to directly identify you. This allows you to use our Kununu page without revealing your Kununu ID. When you access interactive functions on the site (like, comment, share, message, etc.), a Kununu login screen appears. Once you have logged in, you will once again be recognisable to Kununu as a specific user. As the provider of the information service, we do not collect or process any other data from your use of our service.

6.5 Pre-contractual measures in the application process

We collect and process personal data from applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents electronically, for example by email or via a web form on the website (see also app.connectoor.com/agreements ), transmitted to us. If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests on our part. These include, for example, the obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG).

6.6 Newsletter to existing customers

We regularly inform our business partners (e.g. customers, suppliers) about information about our organisation by means of the newsletter. As the requirements of Section 7 (3) of the German Act Against Unfair Competition (UWG) are met, we do not require your consent to send the newsletter. This data is passed on to the service provider for sending the newsletter.
We store your email address for newsletter dispatch for 3 years after your last order.
You can unsubscribe from the newsletter at any time via a link in the newsletter or by sending us a direct message (see above for contact details).

6.7 Forwarding of contact data to logistics service providers

For the fulfillment of delivery contracts, we pass on your address to the logistics service provider in the case of a parcel shipment, and your address and telephone number in the case of a bulky goods/pallet shipment.

7 Rights of the data subject

The data subject may exercise the rights set out below by contacting the above-mentioned address in person or by post with a clear identification of the person concerned.

7.1 Right to information

The data subject may request confirmation from us as to whether personal data concerning him or her are being processed by us. If such processing takes place, you may request from us the following information:

  1. the purposes for which the personal data are processed;
  2. the categories of personal data processed;
  3. the recipients or categories of recipients to whom the personal data concerning them have been or will be disclosed;
  4. the planned duration of the storage of the personal data concerning them or, where specific information is not possible, the criteria for determining the duration of the storage;
  5. the existence of a right to rectification or erasure of your personal data, a right to restriction of processing by us or a right to object to such processing;
  6. the existence of a right of appeal to a supervisory authority;
  7. all available information on the origin of the data where the personal data are not collected from the data subject;
  8. the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

The data subject has the right to request information as to whether the personal data concerning them is being transferred to a third country or to an international organisation. In this context, they may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

7.2 Right to rectification

The data subject has a right to rectification and/or completion vis-à-vis us if the personal data processed concerning him or her are incorrect or incomplete. We must make the correction without delay.

7.3 Right to cancellation

The data subject has the right to request from us the erasure of personal data concerning him or her without undue delay, and we are obliged to erase personal data without undue delay if one of the following reasons applies:

  1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  2. The data subject withdraws his or her consent on which the processing was based pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR and there is no other legal basis for the processing.
  3. The data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or objects to the processing pursuant to Article 21(2) GDPR.
  4. The personal data has been processed unlawfully.
  5. The deletion of personal data is necessary to comply with a legal obligation under Union or Member State law to which we are subject.
  6. The personal data were collected in relation to offered information society services pursuant to Article 8(1) GDPR.

If we have made the personal data public and are we in accordance with Art. 17 para. 1 GDPR, we take reasonable measures, including technical measures, to inform controllers processing the personal data that the data subject has requested the erasure of all links to, or copies or replications of, such personal data, taking into account the available technology and the implementation costs.

7.4 Right to restriction of processing

Subject to the following conditions, the data subject may request the restriction of the processing of personal data concerning him or her:

  1. if you contest the accuracy of the personal data concerning you for a period that allows us to verify the accuracy of the personal data;
  2. the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of the use of the personal data;
  3. we no longer need the personal data for the purposes of processing, but we need it for the establishment, exercise or defence of legal claims; or
  4. if you object to processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether our legitimate reasons outweigh your reasons.

Where the processing of personal data concerning him or her has been restricted, such data may only be processed with his or her consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, the data subject will be informed by us before the restriction is lifted.

7.5 Right to data portability

The data subject has the right to receive the personal data concerning him or her, which he or she has provided to us, in a structured, commonly used and machine-readable format, and he or she has the right to transmit these data to another controller without hindrance from us, provided that:

  1. the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and
  2. the processing is carried out by automated means.

In exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly by us to another controller, insofar as this is technically feasible.

7.6 Right of objection

The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. We process the

personal data, unless we can demonstrate compelling legitimate grounds for the processing.

demonstrate grounds for the processing which override their interests, rights and freedoms

or the processing serves the establishment, exercise or defence of legal claims.

of legal claims.

Where personal data are processed by us for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.

7.7 Automated decisions including profiling

The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her.

has legal effect vis-à-vis them or significantly impairs them in a similar manner. This does not apply if the decision

  1. is necessary for the conclusion or performance of a contract between you and us;
  2. is permitted by Union or Member State legislation to which we are subject and that legislation contains appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject; or
  3. with the explicit consent of the data subject.

7.8 Right to withdraw consent under data protection law

The data subject has the right to withdraw consent to the processing of personal data at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.

7.9 Right to lodge a complaint with a supervisory authority

The data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement.

infringement if it considers that the processing of personal data relating to it is

personal data is unlawful.