Source: https://www.coroplast.de/en/legal-information/data-privacy-statement/
Timestamp: 2019-04-26 10:44:40+00:00

Document:
The protection of your privacy during the collection, processing and use of personal data when you visit our website is very important to us. Your data are protected as required by law. This Privacy Statement explains which personal data we process on this website and how we use it in accordance with Article 13 of the EU’s General Data Protection Regulation (GDPR).
Personal data are collected only for the purposes of data security, to improve our website and to enable us to analyse errors on the basis of Art. 6(1) f GDPR.
Your computer’s IP address is always evaluated in anonymised form.
Personal data (e.g. your name, address data or contact details) which you provide to us voluntarily, for example when you send an enquiry to one of the contact persons named on our website by email, are stored by us but are only processed to enable us to engage in correspondence with you and only for the purpose for which they were submitted. Such data are processed on the basis of Art. 6(1) a and f GDPR.
You can use our online careers portal to apply for a job at Coroplast. If you do so, we ask you to provide us with the usual personal data and your qualifications. For this purpose we additionally point out our separate terms regarding data protection.
We also provide you with the option to order our current job vacancies via e-mail on a regular basis. If you decide to do so, we at least require your e-mail address. To ensure that the order really comes from you or from your e-mail address, you will firstly receive confirmation via e-mail. You will only be included in our mailing list and receive our list of job vacancies when you have clicked on the enabling link in the e-mail. For verification purposes, the ordering of our job vacancies is logged (e-mail address, IP address, date, time).
You can cancel your order at any time by sending us an e-mail to that effect. In order to deregister, simply use the link we regularly send you together with our job vacancies.
We use so-called cookies on our Internet website. Cookies are small text files that your Internet browser stores and places on your computer. Cookies are used to make visiting our Internet website a user-friendlier experience. They make it possible, for instance, to recognise the user for the duration of their visit without having to continually re-enter their username and password. The basis for the data processing is Art. 6(1) f GDPR.
Some of the cookies we use are deleted automatically every time you close your browser (session cookies). Other cookies remain stored on your device and enable us to recognise your browser the next time you visit our website (persistent cookies).
This website uses “Google Analytics”, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. The legal basis for processing is Art. 6(1) f GDPR.
If, however, you activate the “anonymizeIP” option on this website, Google will remove the end of your IP address so it only locates you as within the member states of the European Union or other members of the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. Please note that on this website Google Analytics is supplemented by “anonymizeIP” to ensure anonymised collection of IP addresses (IP masking).
This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketed website tags to be managed using an interface. The Google Tag Manager itself (which only implements the tags) is a cookie-less domain and does not register personal data. The tool causes other tags to be activated which may, for their part, register data under certain circumstances. Google Tag Manager does not access this information. If recording has been deactivated on domain or cookie level, this setting will remain in place for all tracking tags implemented with Google Tag Manager. For more information on Google Tag Manager, follow this link: www.google.com/analytics/tag-manager/use-policy.html.
Tracking is implemented on the basis of Art. 6(1) f GDPR.
Our Internet website uses the social plug-ins of various social networks (Facebook, XING, LinkedIn, YouTube). The buttons are each marked with the logos of the various social networks.
When you visit our website, the corresponding buttons are disabled, or merely linked so that data will only be sent to the particular social network if its button is clicked.
Clicking on the button of the social network creates a direct connection to that particular website. If you are logged into a social network, the operator in question can assign the visit to your account. If you do not want that to happen, we suggest you log out of your account beforehand. Even if you are not a member of a social network, it is still possible for the operator to find out your IP address, for example, and store it. If you do not want this to happen, do not click on any of the buttons.
We have embedded YouTube videos in our Internet website, which are stored on www.youtube.com and can be viewed directly from our website. In order to integrate the videos, we use the so-called “extended data protection mode” provided by the operator of YouTube. According to YouTube, no information relating to visitors to our website is stored unless they actually watch the video. Despite the use of the extended data protection mode, it is possible that Google places a DoubleClick cookie for advertising purposes. You can permanently disable this cookie at www.google.com/settings/ads/plugin.
This website uses an API to provide the map service of Google Maps from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Your IP address must be stored in order to use the Google Maps function. This information is usually sent to and stored on a Google server in the USA. The provider of this website has no influence on this data transmission. Google Maps is used in order to present our online offers in an interesting way and to make it easier to find the locations given on our website. This is a legitimate interest within the meaning of Article 6 (1) f GDPR.
We may employ service providers to perform functions and provide services on our behalf (order processing). Specifically, our website is hosted, and our recruitment portal managed, by an external service provider.
The contractual relationships with our service providers are subject to the provisions of Art. 28 GDPR, which describes the legal requirements concerning data protection and data security.
Pursuant to §§ 15-21 GDPR, you may assert the following rights in relation to the personal data processed by us provided the specific conditions listed there are met.
Personal data are necessary for the establishment, exercise or defence of legal claims.
The data subject has the right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her which is based on point e or f of Article 6(1), including profiling based on those provisions. Where the processing of your personal data is based on consent, you have the right to withdraw your consent at any time.
Data which are not subject to a statutory retention period will be deleted and/or destroyed as soon as they are no longer needed to achieve the purpose for which they were processed. Different retention periods apply to different types of personal data: for example, data that may be relevant for tax purposes must normally be stored for a period of 10 (ten) years whereas other data prepared in accordance with commercial law generally have a retention period of 6 (six) years. Finally, the storage period can also be based on the statutory limitation periods, for example usually 3 (three) years pursuant to sections 195 ff. of the German Civil Code (BGB) or in certain cases up to 30 (thirty) years.
Under Art. 77 GDPR, every data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing of personal data relating to him or her infringes the GDPR. The responsible supervisory authority with regard to data protection issues is the state data protection officer for the federal state in which our company is based, in other words in our case the State Commissioner for the Protection of Data and Freedom of Information North Rhine-Westphalia (Landesbeauftragter für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 77