Source: https://www.kolbus.com/datenschutz/
Timestamp: 2019-04-24 23:50:08+00:00

Document:
The protection of your personal data, we take seriously, because we want you to feel comfortable when you visit our website. Therefore we treat your personal data strictly confidential and do not pass them on to unauthorized third parties. As soon as you transmit us your personal data, these will always be processed in accordance with the terms of the General Data Protection Regulation (GDPR) and the specific national data protection legislation in force and they will be used only for the purpose intended as well as for the business interests of KOLBUS and in particular for the technical administration of the websites. Read on to learn how we collect data, what data we collect and why and how we use your data.
Insofar as we obtained your consent for the processing of your personal data for one or more specific purposes, Art. 6 (1) a of the EU General Data Protection Regulation (GDPR, or DSGVO in German) is the legal basis.
The legal regulation which governs the processing of personal data necessary for the fulfilment of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract, is Art. 6 (1) b of the GDPR.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which the controller is subject, Art. 6 (1) c is the legal basis.
In case that processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6 (1) d of the GDPR is the legal basis.
The legal regulation which governs the processing necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, is Art. 6 (1) f.
This website uses a SSL or TLS encryption to ensure confidentiality and security of processing of data as e.g. orders, log-in data or contact requests, you send us as controller of this website. You can see that you have an encrypted connection by „https://“ instead of „http://“ in the browser and a lock symbol in your browser line.
If a SSL or TLS encryption is activated, third parties will not be able to read data you transmit to us.
Every time you access our website or download a file from it, some non-personal data is recorded. We store this data for internal system-related and statistical purposes. We record the following data: name of the file, date and time, data volume, whether the download was successful, the name of the web browser and domain requesting the download. We also record the IP address of the requesting computer. We collect other personal data only when it is supplied voluntarily by website users and/or customers, for example when they register, when they enter into a contract or adjust their browser settings.
The legal regulation which governs the processing of data is Art. 6 (1) f of the GDPR. The above mentioned purposes describe our legitimate interest in data processing.
If a website user and/or customer prefers not to allow cookies, they can change the settings on the web browser installed on their computer. The web browser is the program used to open and display websites (for example, Internet Explorer, Mozilla Firefox, Opera or Safari). However, the blocking of cookies could bar you from using some products or services on our website.
When contacting us (e.g. per contact form or via email) personal data will be processed.
Which data are being processed in detail can be seen from the specific contact form.
These data will exclusively be processed to answer your request or to contact you by the related technical administration.
Art. 6 (1) f of the GDPR.
If contacting you is prior to the completion of a contract, then the additional legal basis is Art. 6 (1) b of the GDPR.
Your data will be deleted after final completion of your request. This will be the case if it is apparent that the respective issue is conclusively clarified and that there is no legal obligation to retain such data.
We collect and process personal data of applicants for the purpose of handling the application procedure. Data processing can be done electronically. This is the case when a candidate sends his/her application documents electronically, via email or via contact form on the website. If we conclude an employment contract with the candidate, the received data will only be further processed as it is necessary for the purpose of establishing employment in accordance with legal regulations.
If we do not conclude an employment contract with the candidate, the application documents will be automatically deleted six months after the rejection provided that this is not contrary to legitimate interests from our side. Other legitimate interests are for example a burden of proof in a proceeding under the General Equal Treatment Act (AGG).
The legal regulation which governs the processing of data for the application procedure is Art. 6 (1) f of the GDPR.
Our website uses so-called Social Plugins („Plugins“) of the social networks Facebook, Google+ and Youtube as well as Xing and LinkedIn. These services are provided by Facebook Inc., Google Inc., Youtube LLC, XING SE and LinkedIn Inc. („Provider“).
servers. The content of the plugin will be passed by the provider directly to your browser and it will be integrated into the website. By integrating the plugins, the providers receive the information that your browser opened the corresponding page of our website even if you do not have a profile or are not logged in. This information (including your IP address) will be sent by your browser directly to the server of the corresponding provider in the USA and will be stored there.
If you are logged-in to one of these services, the providers will be able to assign your visit of our website to your Facebook, Google+, Youtube, Twitter or Instagram network account. If you interact with the plugins, such as by pressing the "Like" button, the „+1“-, the „Youtube“-, the „Twitter“- or the „Instagram“-button, the corresponding information will also be sent directly to a server of the provider and will be stored there. The information will as well be published in the social network, on your Twitter or Instagram account and will be added to your contacts there.
To learn more about the purpose and extent of data collection, processing and the use of this data by the providers as well as all your rights and options for privacy, please refer to the data protection notes of the providers.
If you want to avoid that these services are able to assign your visit on our website to your network account, please log out of your account before visiting our website.
On this website, we have integrated the tool Matomo. Matomo is an Open Source software tool for web analytics. Web analytics means collecting, processing and evaluating of user data while visiting websites. A web analytics tool collects data from which other website the data subject comes to our website (so-called Referrer), on which sub-pages of the website the user was or how frequently and how long the user was on a sub-page. A web analysis is mainly used for optimizing the website and to do a cost-benefit-analysis for internet advertising. The software is run on the server of the controller, log file data which is particularly sensitive with regard to data protection are exclusively stored on this server.
The Matomo component is used to analyse visitor flows on our website. We use the collected data and information to evaluate visits on our website and to set up online reports showing activities on our website. Matomo sets a cookie on your IT system. By setting the cookie we will be able to analyse your visit on our website. Whenever you view a page of this website the internet browser on your IT system will - by Matomo - automatically be initiated to send data to our server for online analyzing purposes. Within the scope of these proceedings, we receive knowledge of personal data such as the IP address of the data subject serving for tracking the origin of visitors and clicks.
Via cookie personal data such as access time, access location and frequency of visits to our website will be stored. On each visit to our website, these personal data, including the IP address of the used internet connection will be transferred to our server. These data will be stored by us. We will not transmit these data to third parties.
You can always set your Internet browser to prevent cookies from being stored by our website and you can always disagree with a permanent extension for your browser. Such a setting of the Internet browser would also prevent Matomo from setting a cookie. In addition, a cookie set by Matomo can always be deleted by an Internet browser or other software programs.
Furthermore, you may object to the collection and use of data generated by Matomo while visiting this website and to prevent their use. To do this, you must set an Opt-Out Cookie. In case that at a later time your IT system is deleted, formatted or reinstalled, the data subject will have to set an Opt-Out Cookie again. However by setting the Opt-Out Cookie it may not be possible for you to make use of the full scope of all this website's functions.
KOLBUS websites contain links to third-party websites or affiliated companies.
If you click on these links, you leave the KOLBUS website and the scope of validity of our data protection declaration. KOLBUS is not responsible to ensure compliance with the legal provisions for third-party websites. Responsibility for data protection rests exclusively with the providers of these websites.
We point out that at the current state of technology, personal data protection during internet data communication (for example at communication per email) could show security flaws. It could be technically possible, under certain circumstances, for third parties to access the network security without authorization and to control data communication.
Please also take into account that all data which are sent by email are basically unencrypted.
You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data.
You have the right to obtain from us free of charge information as to what personal data concerning you are being stored and to obtain a copy of these data.
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed.
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the given legal grounds applies and insofar as the processing is not necessary.
You have the right to obtain from the controller restriction of processing where one of the legal grounds applies.
You have the right to receive personally identifiable information you have provided to the controller in a structured, standard and machine-readable format. You also have the right to transfer these data to another person without hindrance by the controller to whom the personal data were supplied, provided that the processing is based on consent in accordance with Art. 6 (1)a of the GDPR or Art. 9 (2) of the GDPR or on a contract in accordance with Art. 6 (1) b of the GDPR and the processing is performed using automated procedures. The right of data portability does not apply in the case of processing personal data necessary to carry out a task in the public interest or in the exercise of public authority which has been delegated to the controller.
In exercising this right (Art. 20 (2)), you also have the right to ensure that the personal data relating to you are transmitted directly from one controller to another, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected through this action.
You have the right at any time, for reasons relating to your own particular situation, to raise an objection against any processing of your personal data in accordance with Art. 6 (1) e (processing is carried out in public interest) or f (processing is necessary for the purposes of the legitimate interests pursued by the controller) of the GDPR; this also applies to profiling based on such provisions as to Art. 4 (4).
Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Art.89 (1), you, on grounds relating to your particular situation, have the right to object to processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
You have the right to revoke your data protection consent declaration at any time with effect for the future. Revocation of this consent does not affect the legality of any processing carried out subject to that consent until your revocation.
You have the right to complain to a supervisory authority if you believe that the processing of the personal data concerning you is in violation of the GDPR.
When personal data is provided to KOLBUS, it only will be used to the purpose of answering requests. In general, we process personal data provided exclusively to maintain customer relationships. Your personal data will not be disclosed to any third party. The employees of KOLBUS are obligated to maintain confidentiality.
We process and store personal data concerning you only for the period necessary for the purpose of storage or insofar as this is required by the legislation in force our company is subject to.
If the specific purpose of storage does no longer apply or a storage period required by law expires, personal data concerning you will be routinely and according to legal regulations deleted or blocked.
The respective period required by law is the criterion for the storage duration of personal data. After the expiry of applicable periods, corresponding data will routinely be deleted if they are no longer necessary for contractual fulfilment or business purposes such as contract preparations.
No personal data transfer to third countries is planned.
This data protection declaration is valid and is current as of September 2018.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 6
 Art. 6
 Art. 4
 Art.89