Source: https://www.schollglas.com/en/privacy-statement/
Timestamp: 2019-04-22 13:09:05+00:00

Document:
Thank you for your interest in our company and your visit to our website. We take the issue of data protection very seriously and would like to provide you in the following privacy statement with some information regarding the nature, scope and purpose of our processing of personal data.
As a general principle, our website can be utilised without the disclosure of any personal data. Insofar as you voluntarily provide us with personal data (e.g. via our contact form or an email), these data are processed in conformity with the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
We have implemented technical and organisational measures to ensure, as far as possible, the seamless protection of the personal data processed via our internet site. Please keep in mind, however, that data transmission via the internet is always vulnerable to possible security gaps that are beyond our control and that absolute protection, especially in email communication, cannot be guaranteed.
As defined in Art. 4 no. 1 GDPR, personal data are any and all information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Personal data are therefore any and all data that personally relate to you such as name, address, email address or phone number.
The legal basis for the data processing is point (f) of Art. 6 (1) GDPR. Our legitimate interest is derived from the purposes of the data collection listed above. Under no circumstances do we use the collected data for the purpose of identifying you.
In addition, we utilise cookies during your visit to our website. You will find more detailed information below in this privacy statement.
Whenever you have questions of any nature, you can contact us using the form we have provided on the website. In this case, you must enter a valid email address so that we know who the query is from and so that we can respond to it. Additional information can be submitted voluntarily. The data processing for the purpose of establishing contact with us is based on your freely given consent in accordance with point (a) of Art. 6 (1) GDPR. We store and use your information solely and exclusively for the processing of the initial contact. The personal data we collect for the use of the contact form is either restricted or erased after conclusion of the request you have submitted.
We collect and process personal data from job applicants for the purposes relating to the application procedure. Processing can also be done by electronic means. This is particularly the case when applicants submit their application documents by electronic means (such as email). If and when we conclude an employment contract with an applicant, the transmitted data will be stored in compliance with legal provisions for the purpose of processing the employment relationship. If we do not conclude an employment contract with the applicant, the application documents will be erased at the earliest six months after notification of the negative decision, provided that we do not have any other legitimate interests precluding the erasure. Other legitimate interests within this sense include, for instance, the obligation to present evidence in proceedings pursuant to the General Equal Treatment Act (AGG).
The transfer is necessary pursuant to point (f) of Art. 6 (1) GDPR and there is no reason to assume that you have an overriding legitimate interest in the non-transfer of your data.
It may in particular be necessary to transfer your query along with your personal data to affiliated companies within our group so that your queries and contractual matters can be processed. This is the case, for example, if your query concerns a company within our group that is different from the one to which you originally sent your query. The data are transferred on the basis of point (f) of Art. 6 (1) GDPR and solely insofar as the transfer is required for business reasons.
These companies are also obligated to treat your personal data with the same care that we use in their processing.
For instance, we use so-called session cookies to recognise when you have previously visited specific pages of our website. These cookies are automatically erased when you leave our site.
In addition, we use temporary cookies to optimise the user friendliness of the site; they are stored for a defined period of time (maximum of two years) on your device. If you visit our site again to take advantage of our services, the site automatically recognises that you have previously visited the site and remembers, for example, what entries and settings you made at that time so you do not have to go through this process again.
The data processed by cookies are necessary for the described purposes in the pursuit of our legitimate interests and the legitimate interests of third parties in accordance with point (f) of Art. 6 (1) GDPR. Most browsers accept cookies automatically. You can, however, configure your browser in such a way that no cookies are stored on your computer or that you are always notified before a new cookie is created. The complete blocking of cookies can, however, mean that you cannot use all the functions of our website.
We process and store personal data solely for the period necessary for fulfilment of the purpose of the storage (e.g. orderly processing of the business transaction) or as required by statutory storage/retention periods. If the purpose of the storage ceases to exist or if and when a statutory storage/retention period expires, we will erase the personal data. If statutory storage/retention obligations remain in effect (e.g. after orderly processing of the business transaction or concluding answer to your queries), we restrict the processing, e.g. by blocking your data. If mandatory retention periods prescribed by commercial and tax law apply, the duration of the storage of certain data may be a maximum of ten years.
During your visits to our website, we utilise the common SSL procedure (Secure Socket Layer) in conjunction with the highest encryption level that is supported by your browser. As a rule, 256-bit encryption is used. You can see whether a particular page of our internet site is transferred in encrypted form by the closed display of the key or a padlock icon in your browser’s status or address bar. In other respects, we use appropriate technical and organisational security measures to protect your data from accidental or intentional manipulations, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in step with technological development.
Our presence on the social network Facebook (a service of Facebook, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA) is to ensure a better and active communication with customers and prospects (Facebook fan page). There we inform about our products, ongoing promotions and other events that might be of interest to our customers and prospects. During the visit of our online presence on Facebook your data can be collected and stored automatically for market research and advertising purposes; furthermore, Facebook can by using pseudonyms create so called user profiles in order to f.i. place and display advertisement meeting your interests on Facebook or via other websites. However, as operator of the fan page we have merely access to anonymised data. To this end, Facebook ordinarily stores cookies on your device by means of which the visitor behaviour and interests of the user can be collected. The legal basis is point (f) of Art. 6 (1) GDPR (safeguarding our overriding legitimate interest in an optimised presentation of our range of products and the effective communication with customers and prospects). The data processing is based on an agreement between joint controllers (Facebook and we) under Art. 26 GDPR to which you will have access on: https://www.facebook.com/legal/terms/page_controller_addendum.
Please note that the Facebook button on our home page is configured in such a way that a direct connection between your browser and the Facebook server will be established only if you click this button and not automatically by just accessing the website.
Further information on the processing and use of data by Facebook as well as your rights and setting options related thereto to protect your private sphere are shown in the Facebook data protection guidelines: https://www.facebook.com/about/privacy/. Please find more detailed information on your opportunities to raise objections on Facebook in relation to individual advertising on the following website: https://www.facebook.com/settings?tab=ads.
Facebook is certified for the US-EU Privacy Shield Framework.
Our presence on the social network Youtube (a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) is to ensure a better and active communication with customers and prospects (Youtube channel). There we inform by video about our products, ongoing promotions and other events that might be of interest to our customers and prospects. During the visit of our online presence on Youtube your data can be collected and stored automatically for market research and advertising purposes; furthermore, Youtube can by using pseudonyms create so called user profiles in order to f.i. place and display advertisement meeting your interests or videos on Youtube or via other websites. To this end, Youtube ordinarily stores cookies on your device by means of which the visitor behaviour and interests of the user can be collected. The legal basis is point (f) of Art. 6 (1) GDPR (safe-guarding our overriding legitimate interest in an optimised presentation of our range of products and the effective communication with customers and prospects). However, as operator of the Youtube channel we have no access to personal data of the user. If necessary, we get personal user data only insofar as the user actively communicates with us. The data processing is based on an agreement between joint controllers (Google and we) under Art. 26 GDPR to which you will have access on: https://cloud.google.com/terms/data-processing-terms.
Please note that the Youtube button on our home page is configured in such a way that a direct connection between your browser and the Youtube server will be established only if you click this button and not automatically by just accessing the website.
Further information on the processing and use of data by Google as well as your rights and setting options related thereto to protect your private sphere are shown in the data protection guidelines of Google / Youtube: https://policies.google.com/privacy.
Google is certified for the US-EU Privacy Shield Framework.
This privacy statement is currently in effect. It may become necessary to modify or amend this privacy statement as a consequence of the continued development of our website and portfolio or because of changes in legal or official requirements. You can access and print out the most recently revised privacy statement from our website at any time.
Pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your habitual residence or place of work or the location of our firm for this purpose.
Right to object: If your personal data are processed for the purposes of legitimate interests pursuant to point (f) of Art. 6 (1) GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data insofar as there are grounds for objection relating to your particular situation or the objection is raised in reference to direct marketing. The latter is a general right to object with which we will comply without requiring any information relating to a particular situation.
If you wish to exercise any of your rights described above, please contact our data protection officer; the contact data have been made available at the beginning of this privacy statement.

References: Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 26
 Art. 6
 Art. 26
 Art. 77
 Art. 6
 Art. 21