Source: https://platestahl.com/en/privacy-statement/
Timestamp: 2019-04-18 11:27:21+00:00

Document:
IMPORTANT Please note that the German version of this privacy statement is legally binding – the English translation on hand is only for your convenience and in no way modifies the German version. For the German version, please simply switch the language of this website.
Personal data is information relating to an identified or identifiable natural person (hereinafter ‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The data subject is any identified or identifiable natural person, whose personal data is processed by the data controller responsible for the processing.
Art. 6(1) lit. a EU GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Art. 6(1) lit. b EU GDPR. The same applies to such processing operations, which are necessary for carrying out pre-contractual measures, for example in the case of enquiries concerning our products or services. If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Art. 6(1) lit. c EU GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if visitors were injured in our company and their name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or another third party. Then the processing would be based on Art. 6(1) lit. d EU GDPR. Finally, processing operations could be based on Art. 6(1) lit. f EU GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 EU GDPR).
When calling up our website, a series of general data and information is automatically collected. This general data and information (server log files) collected may be the browser types and versions used, the operating system used, the domain name of your internet service provider and other similar data and information. When using such general data and information, we cannot draw any conclusions about the data subject. This information is technically necessary in order to deliver the content of our website correctly and inevitably accrue when using the Internet. We analyse anonymously collected data and information statistically, with the aim of optimizing the content of our website as well as the underlying website technology. The processing of data and information is based on Art. 6(1) lit. b EU GDPR, which allows the processing of data and information necessary for the completion of a contract or for carrying out pre-contractual measures.
This data is transmitted to our webspace provider for technical reasons, in particular in order to provide a secure and stable website. The data collected will be stored temporarily, but will not be joined with your other personal data. The legal basis for the storage is Art. 6(1) lit. f EU GDPR. Our legitimate interest is based in the improvement, stability, functionality and safety of our website.
The data will be deleted as far as further storage for evidence purposes is not necessary. Otherwise, the data are completely or partially excluded from deletion until the incident has been conclusively resolved.
You can prevent or restrict the setting of cookies by means of a corresponding setting of the Internet browser used. Furthermore, you can delete already set cookies at any time. However, the necessary steps and measures to do so depend on the specific Internet browser you use. If you have any questions, please refer to the help function or documentation of your Internet browser or contact the respective producer or rather the user support. For so-called flash cookies, however, the processing cannot be prevented through the settings of the browser. You must instead change the settings of your Flash Player in this respect. Again, the necessary steps and measures to do so depend on the specific Flash Player you use. If you have any questions, please refer to the help function or documentation of your Flash Player or contact the respective producer or rather the user support. Please note that certain functions of our website may not be entirely usable if you have deactivated or restricted the installation of cookies.
We process personal data of candidates only for the purpose and within the scope of the application procedure and in accordance with legal provisions. We process personal data of candidates in order to fulfil our (pre-) contractual duties within the scope of the application procedure within the meaning of Art. 6(1) lit. b EU GDPR Art. 6(1) lit. f EU GDPR , provided that data processing is required, e.g. within the scope of a legal procedure (in Germany, § 26 BDSG also applies). It is a prerequisite for the application procedure that the candidates disclose personal data. Provided that we offer an online form, the personal data necessary are identified. Otherwise, they will be identifiable in the respective job descriptions. In general, they include the personal details, address, and contact information as well as documents accompanying the application, such as the cover letter, CV, and certificates. In addition, candidates may give us further information on a voluntary basis. By submitting the application to us, the candidates agree to the processing of their data for the purpose of the application procedure according to the nature and extent set out in this privacy statement. As far as special categories of personal data within the meaning of Art. 9(1) EU GDPR are voluntarily disclosed during the application process, they will also be processed according to Art. 9(2) lit. b EU GDPR (e.g. health-related data as for example severe disability or ethnic background). As far as candidates are asked to disclose information on special categories of personal data within the meaning of Art. 9(1) EU GDPR during the application process, the data will also be processed according to Art. 9(2) lit. a EU GDPR (e.g. health-related data, if they are necessary for professional practice). As far as an online form is provided, the candidates may transmit their applications via this form. The data is transmitted to us using state-of-the-art encryption. In the event of a successful application, we may further process the data provided by the candidates for the purposes of the employment relationship. Otherwise, if the application for a job opening is unsuccessful, the candidates’ data are deleted. The candidates’ data are also deleted if an application is withdrawn, something which applicants are entitled to do at any time. Provided that the candidates withdraw the application in a legitimate manner, the data will be deleted after a period of six months, which is the time required to ensure that we can answer any follow-up questions on the application and fulfil our contractual obligations on record-keeping as stipulated in Germany’s General Act on Equal Treatment (AGG).
This website contains information (e.g. name, company, email, telephone number) that enables quick electronic contact to our company as well as direct communication with us. If a data subject contacts the data controller by email or through a contact form, the personal data provided by the data subject will be automatically saved. Such personal data, transmitted by a data subject to the data controller, is stored for the purpose of processing or contacting the data subject. The legal basis for such processing is Art. 6(1) lit. b EU GDPR. There is no disclosure of personal data to third parties. Your data will be deleted once the matter has been conclusively dealt with, provided that statutory storage obligations do not exist.
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation, and economic operation of our website within the meaning of Art. 6(1) lit. f. EU GDPR), we use the analytical service “etracker“ by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg. The data collected are analysed solely pseudonymously, saved only on servers in Germany, not merged with other data nor disclosed to third parties. When storing website visitor data, certain data, including visitors’ IP addresses, device and domain data in particular, is stored in shortened and/or encrypted form so that the individual user cannot be identified based on the data. The IP address is shortened as soon as possible on an automated basis by default. The data gained by using ‘etracker’ and cookies is used to create pseudonymous user profiles. Identifiers for the recognition of app users, the implementation of session and cross device tracking, as well as the provision of behavioural data for remarketing are collected in strictly pseudonymous and/or encrypted form. Furthermore, etracker provides a contractual guarantee of the protection of the processed user data by concluding a contract about processing in accordance with Art. 28(3) (1) EU GDPR. You can object to such data collection and data processing at any time with effect for the future. In order to object to data collection and data processing of your visitor data for the future, please write an email to the abovementioned contact address. Through the opt-out an opt-out cookie called “cntcookie“ is set by etracker. Please do not delete this cookie as long as you want to maintain your objection. For further information, refer to the data protection regulations of etracker: https://www.etracker.com/datenschutz.
This website uses the services of Google Maps, a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”) in order to conveniently present our location and give directions. Google is certified under the EU-US Privacy Shield framework which offers a guarantee of compliance with European data protection legislation, even if the data are processed in the USA (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). When calling up our website, a connection to the Google server in the USA will be established in order to enable the correct display of certain fonts used on our website. Provided that you use the component Google Maps featured on our website, Google will save a cookie on your device via your Internet browser. Your user settings and data are processed in order to display our location and create directions. In this context, we cannot exclude that Google uses servers in the USA. Art. 6(1) lit. f EU GDPR serves as the legal basis for this. Our legitimate interest is justified by the optimisation of the functionality our website. Such a connection to Google enables Google to identify the website from which the request has been sent and to which IP address the directions are to be transmitted. In case you do not agree to such processing, you have the possibility to prevent the installation of cookies by changing the corresponding settings in your Internet browser. Please refer to the “cookies“ section for further details. Moreover, the use of Google Maps as well as the information retrieved from Google Maps is subject to the terms and conditions of Google https://policies.google.com/terms?gl=DE&hl=de and Google Maps https://www.google.com/intl/de_de/help/terms_maps.html. Please refer to https://adssettings.google.com/authenticated and https://policies.google.com/privacy for additional information.
This website uses the services of Google Fonts, a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”) in order to display external fonts. Google is certified under the EU-US Privacy Shield framework, which offers a guarantee of compliance with European data protection legislation even if the data are processed in the USA (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). When calling up our website, a connection to the Google server in the USA will be established in order to enable the correct display of certain fonts used on our website. Art. 6(1) lit. f EU GDPR serves as the legal basis for this. Our legitimate interest is justified by the optimisation and economic operation of our website. When calling up our website, a connection to Google will be established. Such a connection enables Google to identify the website from which the request has been sent and to which IP address the display of the font is to be transmitted. Please visit https://adssettings.google.com/authenticated and https://policies.google.com/privacy for further information, especially on how to prevent the use of data.
You may, at any time, claim whether we have stored personal data referring to you and what this data involves. Likewise, you have the right to demand correction, blocking or deletion (apart from the mandatory data storage for business transactions) of your personal data. In order to enable the blocking of data at any time, the data in question must be available on a black list for control purposes. You can also request the deletion of the data, unless this is excluded by a legal archiving obligation. Should such an obligation exist, we will, on your request, block your data. You can make changes or revoke your permission by sending us notification thereof. Such changes will apply to subsequent transactions.
We reserve the right to update our privacy statement from time to time in order to take into account changes in legislation or jurisdiction or in order to incorporate changes to our services into the privacy statement, e.g. following the launch of new services. The new privacy statement will apply for your new visit.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 26
 Art. 9
 Art. 9
 Art. 9
 Art. 9
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6