Source: https://www.muehlhan.dk/privacy-policy/
Timestamp: 2019-04-24 06:11:34+00:00

Document:
Muehlhan AG (hereinafter “Muehlhan”) processes pd exclusively within the limits of the GDPR and within the limits of the provisions referred to in Art. 95 GDPR in combination with §§ 11-15a Telemediengesetz (German Telemedia Act – “TMG”).
The controller responsible for the operation of the website and thus for the handling of pd is Muehlhan AG, Schlinckstraße 3, 21107 Hamburg, Germany.
When the user makes use of the possibility to contact Muehlhan by email under myag@muehlhan.com, the email address including all technically related data as well as the content of the message are stored. It is particularly important to know that the email address, if personalised, may constitute pd in terms of Art. 4 no. 1 GDPR; the same is the case with the content of the message or parts thereof.
The email addresses of all groups affiliated with Muehlhan are also available on the website www.muehlhan.com. The entire communication which the user enters into with these affiliated groups via the said email addresses is also stored on a server in the EU. However, Muehlhan does not know whether any further data processing takes place at the registered office of the respective affiliated group and whether such data processing is required under the national legislation of the affiliated group; in case of doubt, the user must inform him-/herself by addressing an appropriate information request to the affiliated group in question.
Application documents can also be transmitted by email to jobs@muehlhan.com (see sub-page “career”). The data which is processed in this context constitutes pd in terms of Art. 4 no. 1 GDPR.
The log files are processed to ensure proper functioning of the website. In addition, the data serves to optimise the website and ensure the security of the information technology systems. The data is not analysed for marketing purposes.
The data provided by the user for communication purposes is processed for no purposes other than handling the user’s request.
The data is processed for the purpose of determining the qualification and aptitude of the applicant for the vacancy to be filled by Muehlhan.
Not only Muehlhan but also third parties that process the data on behalf of Muehlhan or can access the data in the context of the services they render to Muehlhan, may receive the data (e.g. IT service providers).
We do not transfer the user data to third parties (Art. 4 no. 10 GDPR) except when the user explicitly consents to the transfer.
All data is stored on servers and/or computers in the European Union, the data is not transferred to a third country and there is no intention to do so either.
Any other transfer of pd, e.g. to government bodies or authorities, is made only within the limits of the law.
The users can prevent data collection by Google Analytics by clicking the link below. In this case, an opt-out cookie is set which prevents any future collection of your data when you visit this website.
The said information, the IP address of the user and the delivery of advertisement formats are transferred to Google servers in the USA and stored there. Google may possibly transfer the entire afore-mentioned information to third parties if this is required by law or where third parties are engaged by Google to process the data as described above. However, Google does not combine or pool the IP address with other data of the user.
The users may also prevent the storage of the said cookies on their computers. For such purpose, they must set their Internet browser to prevent the storage.
The legal basis for the processing of data by means of cookies, analysis tools and log files is Art. 6 subs. 1 f) GDPR.
The legal basis for the processing of the data which the user transfers to us in the context of an email transmission is Art. 6 subs. 1 f) GDPR when the sender is not our customer yet or does not otherwise maintain a business relationship with us. If there is already a contractual relationship with the user or such a relationship is intended to be immediately established on the sender’s initiative, the legal basis for the data processing is Art. 6 subs. 1 b) GDPR.
The legal basis for the processing including but not limited to the storage of the data contained in the application documents is § 26 BDSG (German Federal Data Protection Act (new version).
The data is stored until it is no longer required for fulfilling the purpose of the data collection or until any consent given to the processing is withdrawn, which is in each case subject to the restrictions of Art. 17 subs. 3 GDPR.
- Log files: maximum storage duration: 14 days.
- Free download: upon completion of the download.
- Contact by contact form / email: for one month after the request has been answered unless further correspondence on the same issue has taken place before the expiry of the said period or the data is still required for the purposes of a contractual relationship (for the performance/ execution of a contract) or must be retained for the duration of the statutory retention periods that must be observed.
- Application documents: for one year after the application has been rejected. The documents of the applicants who are employed by Muehlhan will be transferred into a personnel file.
- Analysis tools: see above.
The user, subject to the statutory conditions being fulfilled, has the right at any time to request information which data relating to him or her we have stored, Art. 15 GDPR, as well as the right to rectification of this data, Art. 16 GDPR, the right to restriction of the processing, Art. 18 GDPR, and the right to erasure of his or her data, Art. 17 GDPR.
Where the user has asserted a right to rectification, erasure or restriction of the processing against Muehlhan, Muehlhan will communicate any such rectification or erasure of data or restriction of processing to each recipient to whom the relevant pd has been disclosed, unless this proves impossible or involves disproportionate effort.
Moreover, the user has the right to withdraw any consent he/ she has given (Art. 7, Art. 6 subs. 1 a) GDPR), see Art. 7 subs. 3 GDPR. The withdrawal of consent does however not affect the lawfulness of processing based on consent before its withdrawal.
In addition, the user has the right to object, on grounds relating to his or her particular situation, at any time to processing of pd concerning him or her which is based on Art. 6 subs. 1 e) or f) GDPR, see Art. 21 GDPR.
When the user wants to exercise any of the aforesaid rights, he/she must address to the bodies/ persons designated in sec. 1 or 2.
In all other respects, the user has the right to lodge a complaint with a supervisory authority provided that the statutory conditions are fulfilled, see Art. 77 GDPR.

References: Art. 95
 Art. 4
 Art. 4
 Art. 6
 Art. 6
 Art. 6
 § 26
 Art. 17
 Art. 15
 Art. 16
 Art. 18
 Art. 17
 Art. 6
 Art. 7
 Art. 6
 Art. 21
 Art. 77