Source: https://www.mewa.co.uk/privacy-policy
Timestamp: 2019-04-20 07:12:37+00:00

Document:
How do we handle your personal data?
We attach great importance to the protection and security of personal data. Your personal data is processed by us in connection with this website with respect to the relevant data protection regulations. In particular, we are subject to the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) insofar as we process personal data.
Who is responsible for data processing and whom can you contact?
MEWA Textil-Service AG & Co. Management OHG is part of the MEWA Group with locations in Germany as well as in other European countries.
Personal data is data and information that relates to an identified or identifiable natural person.
For what purposes do we process your personal data? On which legal basis does this take place?
We can optimise our website content and make it user-friendly and tailored to your needs (including the display of advertising that suits your interests here and on other websites).
The storage of the aforementioned access data ensues in the context of so-called server log files on our web server and is required to provide a functional website and to ensure system security for technical reasons. In addition to the above purposes, we use access data solely for the needs-based design and optimisation of our website in a strictly statistical manner and without being traced back to you.
Insofar as you visit our website in order to obtain information about our product range and other services or to use such, the temporary storage of access data and log files is based on Art. 6, (1) lit. b of the GDPR (legal basis), in particular for the implementation of pre-contractual measures. In addition, Art. 6 (1) lit. f of the GDPR serves as the legal basis for the temporary storage of access data and log files. Our legitimate interest is to provide you with a technically-functioning and user-friendly website and to ensure the security of our systems.
The access data obtained through the use of our website is retained only for the period in which this data is needed to achieve the above purposes. In this case, your IP address will be stored on our web server for a maximum of 7 days.
If you contact us as part of an existing contractual relationship or contact us in advance for information about our product range or our other services, the data and information provided by you for the purpose of processing and responding to your contact request is processed in accordance with Art. 6 (1) lit. b of the GDPR (legal basis). The storage of the technical access data recorded during the sending process takes place for the purpose of technical provision of the contact options as well as to ensure system security on the basis of Art. 6 (1) lit. f of the GDPR (legal basis) and serves to safeguard legitimate interests.
We store the personal data collected in connection with your contact for the purpose and for the duration of processing your request. The technical access data stored in this context is retained only for the period for which this data is needed for technical reasons, in particular, for the functional provision of the contact options and to ensure system security. In this case, your IP address will be stored on our web server for a maximum of 7 days.
You can send us your application documents online. To do this, you can either complete a contact form, providing your personal details (surname, first name, address, phone numbers, date of birth and email address), details about your desired position and your career history (secondary school certificate, training/higher education, professional experience, languages, IT knowledge and other skills) (see above), or provide this information in an online application form. Our online application form collects personal details (surname, first name, address, phone numbers, date and place of birth and email address) as well as information about your reason for applying, your secondary school certificate, professional training, higher education studies, professional experience, language skills, IT knowledge and other skills. You may also upload a cover letter and your curriculum vitae. The data collected through the online application form is forwarded to the MEWA company advertising or filling the position, where that company stores it for the purposes of reviewing your application and is responsible for processing it. The MEWA company advertising or filling the position stores your application documents and personal data from your application generally for no longer than six months following completion of the application process, unless a longer or shorter retention period is required by the law or for other legal reasons. If you apply for a vacant sales position, your data collected through the online application form will be stored by the contracted data processor Knowledge Network GmbH for the duration of the application procedure on behalf of the MEWA company advertising the position.
If you have withdrawn your consent by sending an email, your application data will be deleted within the six months following completion of the application process, as described above.
We process the data you share through the online application for the purposes of taking a decision regarding the commencement of employment and carrying out the employment contract as per BDSG (Bundesdatenschutzgesetz, German Federal Data Protection Act) s. 26(1) (legal grounds) and with your consent for these purposes granted on the basis of GDPR art. 6(1)(a) and BDSG s. 26(2) (legal grounds).
Cookies are used by us for the storage of session-relevant information within the website. These cookies expire at the end of the browser session (so-called transient cookies) and are not stored permanently. Other cookies remain on your computer beyond the respective browser session and allow us to recognise your computer on your next visit (so-called persistent / permanent cookies). Persistent cookies are automatically deleted after a specified period, which may vary depending on the type of cookie.
Description / explanations: This cookie is created as soon as a user completes a form and sends it successfully.
Description / explanation: This cookie is automatically stored by our web server to save the session status information that is used by applications for storing user-specific information. It is deleted when the browser is closed. In particular, it is not used to identify individuals who visit the site.
Description / explanation: This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google is certified under the Privacy Shield Agreement (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
The Google Analytics cookies _ga / _gid are used to differentiate users. These are randomly generated values. Google Analytics uses these IDs to manage users, sessions, and campaigns and collect information about visits to our website. These cookies are not used to identify individuals and expire after a fixed period of 2 years (_ga) or 24 hours (_gid).
The Google Analytics cookies _gat_MewaTotal / _gat_MewaLKZ contain the number/ID of the connected "Google Analytics" accounts. These cookies are not used to identify individuals, but solely to define the rate/number of inquiries. These cookies expire after a specified period of 1 minute.
The information generated by the cookies is used by Google on our behalf to evaluate the use of our website, to compile reports on website activity and to provide us with other services related to website activity and internet usage.
The information generated by Google Analytics cookies about your use of this website is usually sent to a Google server in the USA and stored there. The retention period at Google for such data at the user and event levels is 14 months (shortest possible setting option). In addition, we would point out in this context that Google Analytics is only used on this website with activated IP anonymisation. This will ensure that your IP address is shortened by Google within member states of the European Union (EU) or other states party to the European Economic Area Treaty (EEA). Only in exceptional cases will the full IP address be sent to a Google server in the USA and be shortened there. In no case will your IP address be merged with other data provided by Google.
Google AdWords: In addition, we use the information generated by the Google Analytics cookies to use retargeting to increasingly deliver advertisements to users who have already visited our website. In this regard, we use Google AdWords to place ads on the Google Search Network and the Google Display Network. A separate Google AdWords Pixel is not included.
In this case, an opt-out cookie which prevents the future collection of your data when you visit this website will be set. If you delete your cookies in the browser concerned, you must click on this link again.
Description / explanation: These cookies are used to integrate other services provided by Google (e.g. Google Maps, YouTube). They are necessary to improve the presentation They may also be used for statistical, analytical or retargeting purposes.
Description / explanation: On our website we use technologies/widgets from Outbrain UK Ltd., 5 New Street Square, EC4A 3TW, London, UK ("Outbrain"), with which our users can access content that may also be of interest to them on our website and be referred to third party websites (retargeting ads). To make this possible, Outbrain uses session-based cookies. The display of recommendations by Outbrain via cookies is done on a purely pseudonymous basis, and personal data of users is not stored. The data collected by Outbrain is: Device source, browser type and the anonymised IP address of the user. To anonymise the IP address, the last octet of the IP address is removed to ensure full anonymisation. The data stored by Outbrain is stored for a period of 24 months from the user's last interaction.
Description / explanation: We use the so-called "visitor action pixel" / "Facebook Pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook") within our website. By means of the Facebook pixel, Facebook is able to designate the visitors to this website as the target group for the display of advertisements (so-called "Facebook ads"). In addition, the behaviour of users can be tracked by the Facebook pixel after they are forwarded to a website, e.g. by clicking on a Facebook ad. This process serves to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and may help to optimise future advertising efforts.
The Facebook pixel is integrated when viewing this website directly through Facebook and can set cookies on your device with the appropriate setting. If you subsequently log in to Facebook or visit Facebook with logged-in status, your visit to this website will be noted in your profile. The data collected is anonymous to us as the operator of this website, so we do not provide any information about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, according to the Facebook Data Usage Guideline ( https://www.facebook.com/about/privacy ). Facebook is certified under the Privacy Shield Agreement (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
You can limit the storage of your data by means of the Facebook pixel and the associated cookies by means of appropriate settings of your browser software (see above). In addition, you can prevent the collection of your data via Facebook pixels when you visit our website by clicking on the following link.
In this case, an opt-out cookie which prevents the future collection of your data will be set. If you delete your cookies in the browser concerned, you must click on this link again. In addition, the opt-out applies only to the browser used and only for the website/web domain on which the link was clicked. For cross-device and cross-domain settings, as a Facebook user, you can go to the page Facebook has set up for this and set preferences for usage-based advertising: https://www.facebook.com/settings?tab=ads.
Description / explanation: An opt-out cookie so that the user can deactivate Facebook tracking. If this cookie exists, the tracking code in the Facebook pixel will not be added to the source text.
Description / explanation: YouTube videos from the MEWA YouTube channel (https://www.mewa.de/newsroom/all-videos) are integrated into our website and can be played directly on our website. The provider of the YouTube Video Platform is YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA ("YouTube"). YouTube is an affiliate of Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google").
The integration of the YouTube videos takes place in the so-called "extended data protection mode", i.e. you do not transfer data about you as a user to YouTube if you are not playing the videos. Only when you activate the videos, such a data transfer is started, over which we have no influence. You can prevent YouTube from saving cookies by setting it in the browser software (see above).
The above cookie-based data processing takes place on the basis of Art. 6 (1) lit f of the GDPR (legal basis) for the protection of our legitimate interests. In particular, our legitimate interests are to be able to provide you with a technically optimised, user-friendly and needs-oriented website including corresponding advertisements (also on third-party websites) as well as to ensure the security of our systems.
Our website includes links to social media (SoMe) services like Facebook, Twitter, YouTube, LinkedIn and Xing. After clicking on the respective links or the integrated SoMe graphics, you will be redirected to the page of the respective provider. We would point out that we do not process your data in this context and we are not responsible for the contents of websites to which we link. In the event that you follow a link to the SoMe services, please refer to the respective data usage policies and privacy notices of these providers.
We take precautions to ensure the security of your personal information and protect our website and other systems through appropriate technical and organisational measures. Your data will be specifically protected against loss, destruction, falsification, manipulation and alteration by unauthorised persons as well as against unauthorised access and unauthorised disclosure or distribution. In addition, any information you provide through our website will be encrypted and transmitted via SSL over the Internet.
Who receives your data and is it sent to a third country or an international organisation?
Initially, only our employees who are involved with technical, commercial or editorial support will be aware of your personal data. For this purpose, your data may also be forwarded to employees of other companies within the MEWA Group, as far as this is necessary for the appropriate support (e.g. to answer your inquiry). If, for example, you are looked after as a customer by another national subsidiary, a corresponding request via our contact form would also be forwarded to this national subsidiary for processing and answering.
Collection agencies and legal advisers in asserting our claims.
As part of the use of the analysis services presented, we may transfer your IP address to the US (see the section "Using cookies and related functions/technologies" above). This is always done in an abbreviated/masked form. The respective data transfer is based on the EU Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-U.S. Privacy Shield or based on other appropriate protection measures. Other than this, we do not transfer your personal data to countries outside the EU or the EEA or to international organisations in the meaning of Art. 4 (26) of the GDPR.
What rights do you have as a data subject?
Right of access: In the context of Art. 15 of the GDPR, data subjects are entitled at any time to demand confirmation as to whether personal data relating to them is being processed; If this is the case, the data subject is further entitled under Art. 15 of the GDPR to receive information about such personal data and certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, their rights, the source of the data ) and a copy of the respective data. The restrictions of § 34 of the BDSG apply.
Right to rectification: Data subjects are entitled to demand, according to Art. 16 of the GDPR, that the personal data stored about them be corrected if this is inappropriate or incorrect.
Right to erasure: Data subjects are entitled to demand, under the requirements of Art. 17 of the GDPR, that personal data relating to them be deleted immediately. The right to erasure does not exist, among other things, if the processing of the personal data is required, for example, for the fulfilment of a legal obligation (e.g. statutory retention obligations) or for the assertion, exercise or defence of legal claims. The restrictions of § 35 of the BDSG apply in addition.
Right to restriction of processing: Data subjects are entitled to demand, under the requirements of Art. 18 of the GDPR, the restriction of the processing of personal data.
Right to data portability: Data subjects are entitled, under the requirements of Art. 20 of the GDPR, to demand that personal data concerning them and provided to them be provided in a structured, commonly used and machine-readable format.
Data subjects have the right at any time, for reasons arising from their particular situation, to object against the processing of personal data relating to them which takes place on the basis of Art. 6 (1) lit. e (carrying out a task in the public interest) or Art. 6 (1) lit. f (legitimate interest of the responsible person) of the GDPR; this also applies to profiling based on these provisions. In the event of an objection, we will cease to process your relevant personal data unless we can demonstrate compelling grounds, in the interests of a need for protection, for processing that outweigh the interests, rights and freedoms of the data subject, or if the processing is for the purposes of asserting, exercising or defending legal claims. This does not apply if we operate direct advertising based on the above provisions. In the event of an objection to the processing of personal data for direct marketing purposes, the personal data concerned will no longer be processed for these purposes without restriction and irrespective of any consideration of conflicting interests. Objections in accordance with Art. 21 of the GDPR may be addressed in writing or by e-mail to us or our Data Protection Officer at the specified contact addresses (see above "Who is responsible for data processing and whom can you contact?").
Right of revocation: Data subjects have the right to revoke any granted data protection declarations of consent at any time with effect for the future.
Right to lodge a complaint with a supervisory authority: Data subjects are entitled, under the conditions of Art. 77 of the GDPR, to make a complaint to a supervisory authority, in particular in the member state of their place of residence, their place of work or the place of alleged infringement, if they consider that the processing of the personal data concerning them violates the GDPR. The right of complaint is without prejudice to any other administrative or judicial remedy. Our supervisory authority is the Hessian Data Protection Officer, Gustav-Stresemann Ring 1, 65189 Wiesbaden, Germany.
Other concerns: For further privacy issues and concerns our Data Protection Officer is pleased to be at your disposal, by e-mail at datenschutzbeauftragter@mewa.de.
Is there an obligation to make data available?
In order to provide you with our website and to enable you to use the relevant services/functionalities (such as the contact form, online orders, etc.), you must provide the personal data required for this purpose. Without this data it is not possible to access our website content or to use the corresponding services/functionalities.
Is your data used in automated decision making / profiling?
Fundamentally, you have the right not to be subjected to a decision based solely on automated processing, including profiling, which will produce a legal effect concerning you, or similarly significantly affect you. In particular, these decisions may not be based on specific categories of personal data under Art. 9 (1) of the GDPR. We would like to point out that we do not use corresponding decision-making processes within the framework of our website and the associated data processing.
How do we otherwise handle customer data?

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 art. 6
 Art. 6
 Art. 4
 Art. 15
 Art. 15
 § 34
 Art. 16
 Art. 17
 § 35
 Art. 18
 Art. 20
 Art. 6
 Art. 6
 Art. 21
 Art. 77
 Art. 9