Source: https://www.castolin.com/wherteceurope/privacy-statement
Timestamp: 2019-04-22 04:46:32+00:00

Document:
​We are committed to safeguarding the privacy of our website visitors and customers. The protection and security of personal data has the highest priority for us. Castolin Eutectic GmbH, represented by its Managing Director, Messer-Platz 1, 65812 Bad Soden ( E-Mail: info@castolin.com hereinafter referred to as "we" or "us") therefore strictly complies with the rules of the General Data Protection Regulation (GDPR) and with those of the German Federal Data Protection Act (BDSG). As controllers, in accordance with Art. 4 No. 7 GDPR, with this privacy statement we inform you below as to how we handle your personal data, i.e. which type of data are collected by us and for what purpose they are processed.
(1) What are personal data?
The GDPR sets forth the definition of personal data. As such, it involves any information relating to an identified or identifiable natural person. This includes, amongst others, your real name, telephone number or your date of birth.
In general, it is not necessary to provide personal data to use our website. When visiting our website the web server does, however, automatically register so-called log files. The data saved in these files contain, for example, the browser type and version, the operating system used, URL referrer (the site visited previously), IP address of the inquiring computer including the geographical location, access date and time of the server query, duration of your visit and the client’s file request (file name and URL). These data are only collected for statistical purposes. There is no transfer to third parties, for commercial or non-commercial purposes. We undertake no combination of these data with other data from other sources. The collection and processing of these data take place to enable the actual use of the website on the basis of Art. 6 Para. 1 P.1 lit. f) GDPR. Our legitimate interest is the provision and administration of our website with all functionalities.
The data saved in server log files are only stored for a limited period and are automatically deleted at regular intervals after 60 days.
We reserve the right to verify these data at a later date if specific indications regarding an unlawful use have become known to us. This verification only takes place for the disclosure and prevention of an unlawful use of our website on the basis of Art. 6 Para. 1 P. 1 lit. f) GDPR. Our legitimate interest is to guarantee the security of our offer and to prevent any abusive use.
We only collect or process personal data if you voluntarily provide such data, e.g. within the context of a request. In this case, all your data from the request are saved and used by us. This includes the contact details provided by you in order to meet the purpose associated with the data disclosure, e.g. to process your request and for the case of follow-up queries. The basis of storing and using these personal data is Art. 6 Para. 1 P. 1 lit. b) GDPR, provided you enter these personal data with us for the purpose of the initiation of a contractual relationship. It is only in this case that the input of personal data is required pursuant to Art. 13 Para. 2 e) GDPR. Otherwise, the saving and use of data takes place pursuant to Art. 6 Para. 1 P. 1 lit. f) GDPR, whereby our legitimate interest is the diligent processing of your concerns.
If you commission us with the provision of a service or the shipment of goods, we collect, store and use your personal data fundamentally only to the extent required for the provision of the service or for the execution of the contract. The legal basis for the related data processing is in each case Art. 6 Para. 1 P. 1 lit. b) GDPR. To this end, it may be necessary to disclose your personal data to companies that we use for the provision of the service or for the contract processing. These include, for example, transport companies or other service providers. This disclosure to service providers used by us also takes place pursuant to Art. 6 Para. 1 P. 1 lit. b) GDPR.
In all cases in which data processing, as described above, is used for contract fulfilment, the provision of your personal data for the contract conclusion is required (see Art. 13 Para. 2 lit. e) GDPR). An execution of the contract is not possible for us without your personal data.
We need a valid email address from you if you subscribe to our website services, or wish to order our newsletter. In order to verify that you are the owner of the email address provided and that you agree to the receipt of the subscribed email news, or the newsletter respectively, after your registration we immediately send you an email to the address given which features a confirmation link for the registration to the respective service, i.e. website service or newsletter. Your registration will not become effective until you have confirmed it by clicking on the link provided (so-called double opt-in process). Other data will not be collected. These data will only be collected and used to send you the subscribed service or newsletter and to record our authorisation in this respect. No disclosure of data to third parties will be made. The approval given for the storage of the email address, as well as its use for shipment and email news or the newsletter respectively, can, at any time, be revoked by you for the future by clicking on the “Unsubscribe” link in the newsletter. The legal basis in relation to the newsletter and other subscribed email news is your consent (Art. 6 Para. 1 P. 1 a) GDPR).
Your personal data provided by you as part of an application (as a rule, contact details, cover letter and application documents, summarised as "application data"), will only be electronically saved and used for the purpose of processing the application. A disclosure to third parties outside Castolin Eutectic GmbH does not take place. The following group of people has access to your data: Employees in the human resources areas, the responsible supervisors and the workers’ council (if any). Should there be a second personal interview, future colleagues are given your CV in order to prepare for the interview. All the aforementioned individuals are obliged to data secrecy and will treat your application in absolute confidence.
The collection and processing of data as part of the application for a job vacancy at Castolin Eutectic GmbH takes place according to Art. 88 GDPR in conjunction with § 26 Para. 1 P. 1 German Federal Data Protection Act . Insofar as we store your personal data after conclusion of the application procedure for the duration of one year in our applicant management system, this occurs in accordance with Art. 6 Para. 1 P. 1 lit. a) GDPR on the basis of your voluntary consent which we obtain separately if required during the application procedure. Otherwise, your data (application data and interview results) will be completely deleted from our applicant management system at the latest after six months have elapsed as from the end of the application procedure .
We use so-called session cookies in order to track your navigation on the website. We use so-called persistent cookies so that our website can identify you as soon as you visit it. The session cookies are removed by your computer if you close your browser. The persistent cookies remain on your computer until they are deleted.
As an alternative to the browser plug-in you can prevent the recording by Google Analytics by clicking on the following link. An opt-out cookie is set which prevents the future recording of your data when visiting this website: http://tools.google.com/dlpage/gaoptout?hl=de. Please do not delete this cookie if you would like to maintain your opposition. Insofar as you delete this cookie, you must click on the link again to store such a cookie again if you wish to oppose the recording of your data by Google.
For more detailed information on handling user data at Google Analytics please refer to the privacy statement by Google at http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection).
For the transmission of personal data to the USA there is a decision on the adequacy of protection by the EU Commission (No. 2016/1250), according to which companies, who meet specific criteria, guarantee an adequate level of protection, also referred to as the "EU-US Privacy Shield.” These companies are featured in a list; the so-called “Privacy Shield List.” Google pertains to the companies listed therein. The transmission to Google in relation with Google Analytics is based on Art. 45 and 28 GDPR.
The legal basis for our use of Google Analytics is Art. 6 Para. 1 P. 1 lit. f) GDPR. Our legitimate interest is the improvement and continued development of our website in order to optimise your browsing experiences through the personalisation of the website and, thereby, to guarantee the greatest possible user comfort.
We do not performe an automated decision including profiling according to Art. 2 Para. 1 and 4 GDPR.
We do not disclose your personal data to third parties without your express consent, provided this is not required for the provision of the service or for the execution of the contract. Accordingly, your data are only transmitted to third parties on the basis of your consent according to Art. 6 Para. 1 P. 1 lit. a) GDPR or for the purposes of contract fulfilment according to Art. 6 Para. 1 P. 1 lit. b) GDPR. Any disclosure to government agencies and authorities with the right to information only takes place within the framework of legal information obligations or if obligated to do so by a legal decision for information. In such a case, the disclosure of your data is required by Art. 6 Para. 1 P. 1 lit. c) GDPR for the fulfilment of a legal obligation to which we are subject.
Insofar as service providers come into contact with your personal data, we have ensured by virtue of legal, technical and organisational measures, as well as regular controls, that the regulations of data protection legislation are complied with.
We store your personal data as long as required for the fulfilment of the intended purpose (e.g. contract fulfilment, answer to your request) or justified reasons in accordance with Art. 17 Para. 3 GDPR such as legal retention periods with a storage requirement. Insofar as legal retention obligations such as legal tax and trade regulations impede the removal of your personal data, we restrict the processing of your data; you data will then be deleted according to legal regulations.
Applicant data will be deleted within a maximum of six months after completion of the application procedure insofar as you have not given us your consent for storage above and beyond this, or justified reasons on our part, such as the defence of legal claims which prevent data removal.
We adopt technical and organisational prevention measures to prevent a loss, misuse or an unauthorised change to your personal data. We save all personal data provided to us on our secure (password and firewall protected) servers. All electronic transactions which you perform with us or which you receive from us are encrypted. Please take into account that data transmission via the internet is not, in itself, completely secure and we are unable to guarantee the security of the data transmitted via the internet. You are responsible for the secrecy of your password and user identification. We will not ask you for the password you used to register with our website services.
You are given information on the data saved on you by us free of charge at any time without having to justify your reasons. Moreover, you have the right to rectify incorrect data (Art. 16 GDPR), as well as to erase your personal data (Art. 17 GDPR) or to restrict data processing (Art. 18 GDPR). Insofar as the basis for data processing is Art. 6 Para. 1 P. 1 lit. f) GDPR (compliance with legitimate interests), you have the right, according to Art. 21 GDPR, to oppose the processing of your personal data at any time provided that reasons exist which arise from your special situation or if the opposition to data processing is intended for the purposes of direct advertising. In the last case referred to above, you are granted a general right of objection which, without providing reasons, as a result of your special situation, will be implemented by us (Art. 21 Para. 2 GDPR). If you lodge an objection for reasons arising from your special situation, we will cease to process your personal data unless we can provide obligatory reasons worthy of protection for the processing, which prevail over your interests, rights and freedoms, or the processing is used to enforce, exercise or defend legal claims (Art. 21 Para. 1 GDPR).
You can also freely revoke your consent given to us for data collection and use without providing reasons with effect in the future.
Insofar as your provide data, related to you, and we process these data as the result of your consent or for contract performance, you can demand that these data are obtained by you from us in a structured, conventional and machine-readable format or that we transfer these data to another controller provided this is technically possible (so-called right to data portability). Moreover, you have the right to complain to a supervisory authority if you believe that data processing by us violates legal regulations.
For the enforcement of the above listed rights, please refer to our contact address given above or send an email to us, or to our data protection officer.
In our company we have appointed internal data protection coordinators and an external data protection officer. They perform organisational and technical measures and ensure that your personal data are properly protected. Please contact the data protection officer at Castolin Eutectic GmbH for queries on data protection at privacy@castolin.com.
For postal contact details please use the postal address featured at the top in the introduction.
Our website may contain links to other providers who are not covered by the privacy statement. It does not encompass such contents and the websites of third parties to which our website merely provides a link. This is applicable in particular to social networking sites such as Linkedin, YouTube, etc. The processing of your personal data via these social networking sites takes place by the respective operators of the network and we are not able to affect said processing. This is also applicable with regard to your personal data which you provide us with via such a platform, e.g. by writing to our profile in the respective social networking site. Insofar as the use of the internet sites of other providers means the collection, processing or use of personal data, please take into account the data protection terms of the respective provider. Information on handling your personal data and their protection on these platforms can be found in the privacy statement of the respective platform provider. Provided that we do, however, store and use your personal data provided to us via a social networking site or which we receive from a social networking site, on our own servers for the purposes of processing your request or concerns or for other purposes, then the statements made above in this privacy statement are, of course, applicable.
We reserve the right to change the existing privacy statement within the framework of the current legal regulations and to publish an updated version on our website provided this is indicated, e.g. due to new technical developments or changes to the jurisdiction or to our business operation. Therefore, you should check this site from time to time to ensure that you are familiar with our current privacy statement.

References: Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 13
 Art. 6
 Art. 6
 Art. 6
 Art. 13
 Art. 88
 § 26
 Art. 6
 Art. 45
 Art. 6
 Art. 2
 Art. 6
 Art. 6
 Art. 6
 Art. 17
 Art. 6
 Art. 21