Source: https://www.heubachcolor.com/data-protection/
Timestamp: 2019-04-25 20:22:53+00:00

Document:
We are very delighted that you have shown interest in our enterprise and our web presence www.heubachcolor.com („Website“). Data protection is of a particularly high priority for the management of the Heubach GmbH. The website is operated by Heubach GmbH ("data controller", "Heubach", "we" or "us"), and offers you as a user (hereinafter "user" or "you") an opportunity to learn about us, our products and our services. You can contact us and our partners via our contact form, by phone or e-mail.
The processing of personal data shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the Heubach GmbH. The legal basis of data protection can be found in the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the Telemedia Act (TMG), and, where appropriate, in the other overriding legal provisions.
As the controller, the Heubach GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.
Heubach takes the protection of your personal data very seriously. We treat your personal data as confidential and follow the statutory data protection requirements and the provisions of this Data Protection Statement. When you use this website, various forms of personal data are collected.
Personal data are collected and processed only insofar as this is permitted by statutory provisions, or you have consented to the respective use. Once the purpose of the data processing no longer applies, the data will be deleted unless you have agreed to further use or the erasure is prohibited under statutory retention requirements.
The responsible entity is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email address and the like).
Many data processing operations are only possible with your express consent. If you have already given consent, you can withdraw it at any time. An informal notification by email to us suffices. The lawfulness of the data processing performed before the withdrawal remains unaffected by the withdrawal.
In the event of violations of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the data protection supervisor of the federal state in which our company is domiciled. For our company, the data protection supervisor in Lower Saxony is the competent supervisory authority. You can find a list of the data protection supervisors of the federal states and their contact data at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
You have the right to have data that we process automatically on the basis of your consent or for the performance of a contract handed over to you or third parties in a commonly used machine-readable format. If you request direct transfer of the data to another controller, this will occur only insofar as this is technically possible.
You can object at any time with effect for the future to the use and processing of data for safeguarding legitimate interests of our company, e.g., for purposes of advertising and offering customer-oriented information and services, through an informal notification communicated to: Heubach GmbH, Heubachstraße 7, 38685 Langelsheim; tel. +49 5326 52 0 / Fax +49 5326 52 213 or by emailing widerspruch@heubachcolor.de.
Within the scope of the applicable statutory data protection regulations, you have the right to obtain information at no charge at any time about the personal data stored concerning you, their origin and recipients and the purpose of the data processing, and, if applicable, a right to rectification of the stored data, restriction of processing (blocking) or erasure of these data.
The existence of automated decision-making, including profiling, and any more detailed information on this.
Where your personal data are transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
Right to rectification: You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you.
The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead.
You have objected to processing (see below), pending the verification whether our legitimate grounds override yours.
You withdraw your consent, and there is no other legal ground for the processing.
You object (see below) to the processing.
We have collected personal data on the basis of consent given by a child.
Notification obligation: Where you have asserted toward us your right to rectification, erasure or restriction of processing, we are obligated to communicate any rectification or erasure of personal data or restriction of processing carried out to each recipient to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We must inform you about those recipients if you request it.
The legal basis for data processing is Art. 6(1)(f) of the General Data Protection Regulation ("GDPR"), which allows the processing of data in order to safeguard legitimate interests of the controller, provided that this does not conflict with the overriding interests, fundamental rights and fundamental freedoms of the user.
The temporary storage of this data is necessary to display the contents of the website to the user. Therefore, the collection of this information is required for the representation of our website. For this purpose, the IP address of the user, too, must remain stored for the duration of the session. Data are stored in log files to ensure the functionality of the website and to optimize it in order to improve our services. In addition, this is to ensure the security of our IT systems. It is on these purposes that the legitimate interest of the controller is based in accordance with Art. 6(1)(f) GDPR.
This data are deleted when further storage is no longer required for the purpose of storage. For the provision of the website, this is the case when the respective session ends. Additional storage is possible if the IP addresses of the users are deleted or shortened, so that an assignment of the calling user is not possible. The server log data are stored for 90 days and then deleted.
The collection of data for the provision of the website, and the storage of the data in log files, is essential for the operation of the website. Accordingly, the user has no right to object to this.
When you visit our website, cookies from affiliated companies are also stored on your device (third-party cookies). This is done to make our website more interesting for you. The use of such cookies and the extent of the data collected by them are explained in more detail in Section 5 below. Some of third-party cookies we use result in data being processing in the USA. These providers (e.g., Google) have undertaken to respect the privacy provisions of the EU-US Privacy Shield, the legal framework for the transatlantic transfer of data agreed between the European Commission and the United States of America (IMPLEMENTING DECISION (EU) 2016/1250) OF THE COMMISSION dated 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of protection provided by the EU-US Privacy Shield (notified under file number C(2016) 4176)). In addition, these providers are registered with the U.S. Department of Commerce's "Privacy Shield" program. Furthermore, we have concluded contract data processing agreements with these providers to safeguard the data protection requirements.
Analysis cookies are used to improve the quality of our website and to optimize our offer. The data collected here are only used in pseudonymized user profiles. We pursue in this way – through market research – the legitimate interest of identifying which offers are interesting for you. This allows us to adapt our online offer as needed. It is also on these purposes that the legitimate interest in processing personal data is based in accordance with Art. 6(1)(f) GDPR.
Cookies are stored on your device. "Session cookies" are deleted automatically after you leave the site. Other cookies remain on your device until you delete them – these are so-called "permanent cookies". These cookies allow us or our affiliated companies (third-party cookies) to recognize your browser on your next visit. Permanent cookies are automatically deleted after a specified period, which may differ depending on the cookie.
You can set your browser so that you are informed about the setting of cookies and in order to allow cookies only in individual cases, to exclude acceptance of cookies for certain cases or generally exclude, and to activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
If users do not want to store cookies on their device, or want to delete a stored cookie or be notified of the storage of cookies, they can set their browser accordingly. For details on how to do this, refer to the help information of your browser. We expressly point out that in this case not all functions of the website may be fully accessible.
If you send us queries through the contact form, via Email or Phone, we store your information from the information form, including the contact data you provide there, for the purpose of processing the query and in case of follow-up questions. We do not share these data without your consent. We do not share such data without your consent.
For this purpose, the following data are transmitted to us and stored: Your first and last name, name of the company, address, e-mail address, and any information about personal data that you reference in the text of your inquiry.
If you have specified a country selection outside of Germany in connection with your inquiry, your inquiry and also the personal data you provide to process your inquiry will be forwarded directly to the partner company indicated in the corresponding field as the contact for the country, and processed directly. You consent to this by sending your inquiry.
In this case, Heubach does not receive any personal data and information from you, nor any copy of your inquiry.
The data provided in the contact form, by e-mail or telephone are processed based on your consent (Art. 6(1)(a) GDPR). If, in the case of contact by telephone, no consent to data processing and storage should be evident from the user's call, data processing must be considered justified in accordance with Art. 6(1)(f) GDPR. Otherwise, the user's request cannot be processed.
The transmitted data must be processed for processing the request and in case of follow-up questions. Contact by telephone also implies the required legitimate interest in the processing of the data.
You can withdraw this consent at any time. An informal notification by email to us suffices. The lawfulness of the data processing operations performed before the withdrawal remains unaffected by the withdrawal. We retain the data you enter in the contact form until you request erasure, withdraw your consent to storage, or the purpose of the data storage ceases to exist (e.g., after the processing of your query concludes). Mandatory legal requirements – especially retention periods – remain unaffected.
In particular, the processed categories of personal data include your master data (such as name, first name, nationality), contact details (such as private address, e-mail address and telephone number), information on education, qualifications, certificates, previous employers, professional experience and previous activities. This may also include special categories of personal data, such as health data.
As a rule, your personal data are collected directly from you during the application process. In certain situations, your personal data are also collected by other entities due to legal regulations. In addition, we may have received data from third parties (e.g., job placement agencies).
The provision of personal information is neither required by law nor by contract, nor are you required to provide your personal information. However, the provision of personal data is required to assess the suitability and, if necessary, the commencement and maintenance of employment, as well as fulfillment of the related contractual obligations. Without such data we will not be able to complete the application process with you, and we cannot enter into any employment with you.
Your personal data are collected, stored and processed in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and all other relevant laws (e.g., German Works Constitution Act (BetrVG), German Working Hours Act (ArbZG), etc.).
First and foremost, the data are processed for the purposes of the aptitude test to assess and, if necessary, prepare employment on the basis of Art. 26 BDSG. Insofar as this is necessary, we also process your data in order to safeguard our legitimate interests or those of third parties (e.g., authorities). The legal basis for this is Art. 6(f) GDPR.
As far as special categories of personal data under Art. 9(1), Art. 26(3) GDPR, are processed, this is done, in the context of the preparation of an employment relationship, for the purpose of exercising rights or fulfilling legal obligations under labor law, social security law and social protection (e.g., provision of health data to the health insurance, documentation of severe disability in connection with, inter alia, the arrangement of additional leave).
If we are to process your personal data for a purpose not mentioned above, we will inform you in advance.
Within our company, only the persons and entities (e.g., department of works council, representative council for employees with disabilities) receive your personal data that require them to fulfill our contractual and legal obligations.
Within our group of companies, your data will be transmitted to specific companies within the scope of the purposes set out and legal basis, if these perform data processing tasks centrally for the group's affiliated companies.
In addition, we rely to some degree on external service providers to fulfill our contractual obligations. Each service provider receives only the data that are necessary for the performance of the respective service.
We may also transfer your personal information to other recipients outside the company where this is necessary to fulfill legal obligations. A transfer to a third country is not intended.
Your personal data will be deleted as soon as they are no longer required for the above purposes – generally, after six (6) months.
After completion of the application process, your personal data will be deleted or destroyed in accordance with data protection regulations, unless we have received consent for a longer storage period, and the erasure does not conflict with any other legitimate interests of the controller. Another legitimate interest in this sense, for example, is a burden of proof in a procedure under the German General Equal Treatment Act (AGG).
If the application results in employment, your data will be transferred to our personnel administration system to establish an employment relationship and stored in accordance with the statutory retention periods. We will store your application documents beyond the aforementioned six (6) months only with your express consent.
If we have covered the costs of your arrival and departure for the interview, we will be obligated to store the data of your arrival and departure for the duration of the retention period. We will delete such personal data at the latest at the end of the statutory retention period (Section 147(3) of the German Regulation on Taxation (AO)), that is, after the expiration of 10 years, starting with the departure day.
If you have consented to the storage of the applicant data without time limit, we will store your data until you revoke your consent or until you instruct us to delete the data.
We may ask you to give us your consent so that we may save your application data beyond the end of the application process and use it for future application procedures.
We use the data and documents collected with your consent exclusively for the purposes of future application procedures. This data processing is justified by your consent under Art. 6(1)(a) GDPR.
You can revoke your consent by e-mail at any time with future effect. We will delete all your applicant data upon receipt of your revocation.
We record your declaration of consent electronically for the purpose of traceability. You can view and inspect your consent given at any time.
For more detailed information on the rights to which you are entitled, refer to Section 1.
This Offering uses Google Analytics, a web analysis service of Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses “cookies,” i.e. text files stored on your computer to enable analysis of website usage by you. Information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States and stored there.
However, if IP anonymization is activated on this website, Google will first shorten your IP address within member states of the European Union or in other states that are parties to the Agreement on the European Economic Area. Only in exceptional cases will your complete IP address be transmitted to a Google server in the United States and shortened there. IP anonymization is enabled on this website. Google will use this information on behalf of this website’s operator to evaluate your use of the website, compile reports about website activities, and provide the website’s operator with further services related to website and Internet usage. The IP address sent from your browser as part of Google Analytics is not merged with other data by Google.
Google Analytics cookies are stored in accordance with Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
We have a contract processing agreement with Google, and fully implement the stringent requirements of the EU Data Protection Regulation in connection with the utilization of Google Analytics.
On behalf of the operator of this website, Google will use this information to evaluate users' use of the website, to compile reports on website activity, and to provide the website operator with other services related to website activity and internet usage. It is on these purposes that our legitimate interest in processing personal data is based in accordance with Art. 6(1)(f) GDPR.
You can prevent storage of cookies by appropriately setting your browser software; in this case, however, please note that you might not be able to fully use all functions offered by this website. Furthermore, you can prevent data generated by the cookie and relating to your use of the website (including your IP address) from being recorded and sent to Google, along with the processing of this data by Google, by downloading and installing the browser plugin under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.de/intl/de/policies/privacy/ and under http://www.google.com/analytics/terms/de.html.
For security reasons and to protect the transfer of confidential content such as queries or messages you send to us as the site operator, this site uses SSL or TLS encryption. You can identify an encrypted connection by the fact that the address bar of the browser switches from “http://” to “https://” and by the padlock symbol in your browser bar. When SSL or TLS encryption is enabled, the data you send us cannot be read by third parties.
We take all technical and organizational security measures necessary in order to save your personal data in a manner that is not accessible to third parties or the public. However, please note that data transfer over the Internet (e.g., during email communication) can involve security gaps. End-to-end protection of data against third-party access is not possible.
We use an external service provider to make these web pages available to you. All of the information is saved in a secure operating environment. This area is not accessible to the public. The service provider is only responsible for the technical availability of the web pages.
If you wish to contact us by email, please note that this communication method cannot guarantee the confidentiality of the information you transmit.
Therefore, we recommend that you send confidential information exclusively by post.
If our website provides links to content from other providers, your IP address will be transmitted to the respective provider if you click on these offerings.
If you have further questions on data protection, e.g. the processing of your personal data, please contact us. You can find the individual contact details in sections 2 and 3 of this Statement and in our site notice.
If this Data Protection Statement is modified, the modification will be noted in this Data Protection Statement, on the homepage and in other appropriate places.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 26
 Art. 6
 Art. 9
 Art. 26
 Art. 6
 Art. 6
 Art. 6