Source: https://www.savanna-ingredients.com/en/data-privacy/
Timestamp: 2019-04-21 00:20:18+00:00

Document:
On this website we, SAVANNA Ingredients GmbH, inform you about our offer. The protection of your personal data is important to us. The collection and processing of your personal data therefore complies with any applicable data protection laws. On this page we inform you about the processing of your personal data according to Art. 13, 14 of the European General Data Protection Regulation (GDPR).
When visiting this website and using the various offers, we process your personal data as described in detail below.
When operating the website with its wide range of services, we work together with external service providers which we have carefully selected and obligated in accordance with the legal requirements pursuant to Art. 28 GDPR.
Our web pages are hosted by the Manitu GmbH in Germany. The Manitu GmbH operates its own computer centre at its German corporate location (St. Wendel Saarland) and does, within the scope of the hosting services provided to us, not transfer any personal data to third parties.
Furthermore, the eukalyptusdesign GbR, based in Cologne, also has access to the server log files since it has access to the server. The eukalyptusdesign GbR takes care of the design and technical realisation of this website and does thereby not transfer any of your personal data to third parties.
We will under no circumstance transfer your personal data to countries outside the European Union.
The SAVANNA Ingredients GmbH is part of the corporate group of Pfeifer & Langen GmbH & Co. KG. The IT services provided amongst its group companies are provided by the sister company ISG Informatik Service Gesellschaft mbH: the provision of their services is based on contractual agreements pursuant to Art. 28 GDPR.
Every time you visit our website, your web browser automatically transfers data produced upon your access (so-called server log files), which we process in order to guarantee system security and to compile usage statistics. In particular, these data include the time of your visit request, the page from which you visited us (referrer URL), the subpages visited, the names of the requested file, your IP address, the data volume, the browser you are using and the requesting provider. These data are required to ensure system security, e.g. to identify and block the attacker in the event of a hacker attack. This is in our overriding, legitimate interest to defend us against attacks and to prevent data loss (Art. 6 para. 1 sent. 1 lit. f) GDPR).
These data may also be used for statistical purposes (scope of use and user behaviour, e.g. total number of visits to our website in one month and related to various sub-pages), which we use to optimise the design of the website. This is also in our overriding, legitimate interest (Art. 6 para. 1 sent. 1 lit. f) GDPR).
We will delete or anonymise this record within 45 days after your visit to our website at latest.
Savanna Ingredients GmbH does not use „profiling“ on this website. Profiling describes a fully automated data processing that aims to evaluate a person (e.g. in relation to his personal preferences) or to analyse or predict his behaviour.
You may use the contact form on our website to address us via e-mail. If you click on the e-mail addresses provided in the texts on our website, your e-mail program will open and you are able to send us a message to our pre-registered e-mail address. The use of the contact form is completely voluntary for you and not a prerequisite for the use of our website. Of course, we cannot process your request if you do not provide us with the contact data requested in the contact form. We have no influence on the data processing by the e-mail program of your respective provider. We merely create a link to the e-mail program.
We exclusively use the information you send us via e-mail to handle and answer your request. We will delete this information as soon as the communication has been completed, unless legal storage obligations require it to be stored. We will then delete them immediately after these retention periods have expired. This processing of the information you send us is in our legitimate interest (Art. 6 para. 1 sent. 1 lit. f) GDPR), otherwise we would not be able to contact you as requested.
In case you submit application documents to us, we will also process such personal data in the course and for the purpose of the application process. The submission of such application documents (whether for advertised positions or unsolicited applications) is completely voluntary for you and not a prerequisite for using the website.
Processing of your personal data is permitted in this context in particular if this is necessary for the decision on the establishment of an employment relationship or after the establishment of the employment relationship for its execution or termination (§ 26 Paragraph 1 BDSG, Art. 6 Paragraph 1 S. 1 b) GDPR). The same applies if the data processing is necessary to safeguard legitimate interests for other purposes than the employment relationship and there is no reason to assume that your legitimate interest as a data subject in the exclusion of the processing or use prevails (Art. 6 para. 1 sent. 1 f) GDPR).
In order to involve you in the application process for a specific position, you will need to provide us with application documents containing meaningful information on your personality profile and qualifications. In general, we only use your application documents to decide whether to fill the position for which you have expressly applied. To this end, we will evaluate your application documents in the HR-department and forward them to your future supervisor. In addition, when filling executive positions, the management will receive your application documents as well. We process your application documents electronically in our e-mail system and, if necessary, additionally by using printouts or copies (paper form). In the course of the application process, we may collect additional personal data for this information purpose from you personally, from generally accessible sources or from former employers and trainers. The legal basis for data processing in this case is Art. 6 para. 1 sent. 1 lit. b) GDPR, sec. 26 para. 1 BDSG. These processing operations are required to carry out the application procedure. In case this procedure does not lead to your recruitment, we will delete and destroy your applicant data as soon as a period of six months has elapsed after a final rejection decision has been made.
If the application procedure leads to your recruitment, we will include your application documents in your personnel file on the basis of Art. 6 para. 1 sent. 1 lit. b) GDPR, sec. 26 para. 1 BDSG, in order to inform you about your personality profile and your qualifications for the purpose of carrying out the employment relationship. In this case, your application documents will only be deleted and destroyed when your employment relationship has ended and a further three years have elapsed since the end of the year of the termination.
If you submit an unsolicited application that does not relate to a specific position, we may consult your application documents in the context of recruitment decisions for all relevant positions. We will first evaluate your application documents in the personnel department, then involve and inform colleagues from the department relevant regarding your potential hire. To this end, we process your application documents electronically in our e-mail system and, if necessary, additionally by using printouts or copies (paper form). As soon as your application documents have been included in a recruitment process, we may collect further personal data from you personally, from generally accessible sources or from former employers and trainers in order to obtain more detailed information about your personality profile and qualifications. Legal basis for this data processing is Art. 6 para. 1 sent. 1 lit. b) GDPR, sec. 26 para. 1 BDSG. We will regularly delete and destroy your applicant data after expiry of a period of one year upon receipt of your application, but not before a period of six months has elapsed in all application procedures to which your application documents have been added following your or our company’s final rejection.
If an application procedure should lead to a recruitment, we will include your application documents in your personnel file, if necessary, on the basis of Art. 6 para. 1 sent. 1 lit. b) GDPR, sec. 26 para. 1 BDSG, in order to inform you about your personality profile and your qualifications for carrying out the employment relationship. In this case, your application documents will only be deleted and destroyed when your employment relationship has ended and a further three years have elapsed since the end of the year of termination.
In order to protect your personal data to the best possible extent, we use technical and organisational security measures (SSL encryption (https standard)), which are also adapted to the current state of the art in accordance with the risks involved.
As far as your personal data are processed, you are entitled to various data protection claims against us.
In accordance with Art. 15 GDPR and sec. 34 BDSG you have the right to information about the data stored about your person and their origin, the recipients or categories of recipients to whom the data are provided to, and the purpose of the storage.
In addition, you may have a right to have your personal data corrected, deleted or restricted (in terms of processing) in accordance with Art. 16 – 18 GDPR and sec. 35 BDSG. In addition, you may request the transfer of the data to another controller in accordance with Art. 20 GDPR.
You may also object to the further processing of your data if we process your data on the basis of a legitimate interest (Art. 6 para. 1 sent. 1 lit. f) GDPR). As far as we do not process your data for advertising purposes, this requires a reason that results from your special situation. In the event of an objection, we will no longer process your personal data from the time it is received during the subsequent review and will delete it after completion of the review – if the objection is justified (Art. 21 GDPR, sec. 36 BDSG).
You may revoke your consent to data processing (Art. 6 para. 1 sent. 1 lit. a) GDPR) at any time; we will then not process your personal data unless there is a legal permission to do so. An objection or revocation does not affect the admissibility of data processing in the past. We will fulfil your rights immediately and free of charge. To do so, please contact us or our data protection officer; you will find our contact details at the beginning of this data privacy statement.
Finally, according to Art. 77 GDPR you have the right to file a complaint with the competent data protection supervisory authority.

References: Art. 13
 Art. 28
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 16
 Art. 20
 Art. 77