Source: https://www.pi-ag.com/data-processing/
Timestamp: 2019-04-24 14:21:34+00:00

Document:
For every query, our web server processes a number of data items, which your browser automatically transmits to our web server. These consist of the IP address which is currently assigned to your device, the date and the time of the query, the time zone, the specific page or file which is accessed, the http-status code and the volume of data transmitted. In addition, the website where your query originated, the browser which is used, the operating system of your end device and the language setting. The web server utilises those data in order to display the content of this website in an optimal manner on your device.
2.1.1 The purpose of the data processing is to present the corporate group and communicate with job applicants, interested parties and customers as well as to provide a registration form for seminars that we offer.
2.1.2 The legal basis for the processing is Art. 6 no. 1 lit. f) of the General Data Protection Regulation - GDPR (legitimate interest in presenting the company and providing options for establishing contact). In cases where the contact is established in order to procure offers, to apply for a job or to register for seminars, the legal basis is Art. 6 no. 1 lit. b) GDPR possibly in combination with Section 26 BDSG Federal Data Protection Law [Bundesdatenschutzgesetz (BDSG)] (Contract initiation).
2.1.3 Messages that are sent to us via the contact form are forwarded internally for processing to the employee who is responsible. In the absence of special circumstances, log and communication data are not disclosed to third parties. If a criminal offence is suspected or a criminal investigation has been initiated, data can be transmitted to the police and the public prosecutor. Service providers that operate within the scope of commissioned data processing pursuant to Art. 28 GDPR are deployed for data processing.
2.1.4 IP addresses are rendered anonymous within 24 hours at the latest. Communication content is deleted after six calendar years. Posting-relevant data are deleted ten years after the final posting.
2.1.5 Using the website is not possible without disclosing data that can be connected to a person, such as the IP address. Communication or registration for seminars via the website is not possible without providing information.
2.2.1 The purpose of the data processing is the selection of job applicants for an employment relationship.
2.2.2 The legal basis for the data processing is the initiation of an employment contract pursuant to Section 26 BDSG in combination with Art. 6 no. 1 lit. b) and Art. 88 GDPR. If you have consented to the processing of your data, the legal basis for the processing is your declaration of consent pursuant to Art. 6 no.1 lit. a) in combination with Art. 7 GDPR.
2.2.3 Job applicant data are disclosed internally to the employees who are in charge and responsible for making the decision. Transmission to other companies of the P&I Group can occur with the consent of the data subject (person concerned).
2.2.4 The data are deleted six months after the end of the job application process. If a job applicant is also interested in other positions, the data remain stored for up to 24 months. You can also request that your data be erased before the time limit has expired.
2.2.5 The disclosure of personal data is necessary for the evaluation of the job application and possibly for subsequent conclusion of an employment contract. A job application cannot be taken into consideration without disclosure of personal data. However, the job application can be submitted without disclosing the information that is designated as voluntary.
2.2.6 If the job applicant has commissioned a recruitment agency to transmit the job application documents to us, we receive all of the information provided in the job application from the recruitment agency.
2.3.1 The purpose of the processing is the establishment, performance and termination of the respective existing contract or order as well as the fulfilment of statutory obligations.
2.3.2 The legal basis for the processing are Art. 6 no. 1 lit. b) GDPR (contract, order) in the case of contracts with natural persons, Art. 6 no. 1 lit. f) GDPR (legitimate interest, namely communication with contractual contact partners) in the case of contracts with legal persons as well as invariably Art. 6 no. 1 lit. c) GDPR (statutory obligations, especially tax and commercial law regulations). In the case of evaluation, assertion or rejection of claims, the legal basis is Art. 6 no. 1 lit. f) GDPR (legitimate interest, namely assertion of claims or defence against claims). If we send information about our products and that is not necessary for performance of the contract, our legitimate interest is set out in Art. 6 no. 1 lit. f) GDPR (legitimate interest, namely information for contractual contact partners).
2.3.3 Contact and contractual information can be transmitted to other service providers, business partners as well as public offices and authorities, to the extent that is necessary for the performance of the contract or order. Transmission to other companies of the P&I Group can occur with the consent of the data subject (person concerned). Service providers that operate within the scope of commissioned data processing pursuant to Art. 28 GDPR are deployed for data processing.
2.3.4 Data of contract partners and service providers shall be deleted 10 calendar years after termination of the contract or order.
2.3.5 In the case of service providers and business partners, the processing of contact information is necessary in order to perform the contract or fulfil the order. If the information is not provided, communication can be impaired substantially.
2.4.1 The purpose of the processing are performance of the contract as well as support and liaison for the customers and interested parties.
2.4.2 The legal basis for the processing are Art. 6 no. 1 lit. b) GDPR (contract performance) in the case of contracts with natural persons, Art. 6 no. 1 lit. f) GDPR (legitimate interest, namely communication with contract-relevant contact partners) in the case of contracts with legal persons as well as invariably Art. 6 no. 1 lit. c) GDPR (statutory obligations, especially tax and commercial law regulations). In the case of evaluation, assertion or rejection of claims, the legal basis is Art. 6 no. 1 lit. f) GDPR (legitimate interest, namely assertion of claims or defence against claims). If we send information about our products and that it is not necessary for performance of the contract, the legal basis is our legitimate interest Art. 6 no. 1 lit. f) GDPR (namely our interest in providing information to contractual contact partners).
2.4.3 Data of customers and interested parties can be transmitted to other service providers, business partners as well as public offices and authorities, to the extent that is necessary for the conclusion or performance of the contract. Service providers that operate within the scope of commissioned data processing pursuant to Art. 28 GDPR are deployed for data processing.
2.4.4 Data of customers shall be deleted 10 calendar years after termination of the contract or order.
2.4.5 The processing of the data of customers and interested parties is necessary for preparation and performance of the contract. If the information is not provided, no contract can be concluded.
The data processing is carried out at your request and is required according to Art. 6 para. 1 no. 1 lit. b GDPR for the purposes stated for the appropriate processing of the employment contract and for the mutual fulfilment of obligations arising from the employment contract.
The personal data collected by us for the above-mentioned purposes will be stored until the expiry of the statutory storage obligation (see details in the respective procedure) and then deleted, unless we are obliged to store them for a longer period of time pursuant to Article 6 para. 1 no. 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from ’HGB’, ‘StGB’ or ‘AO’) or you have consented to storage going beyond this pursuant to Article 6 para. 1 no. 1 lit. GDPR.
to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace.
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 no. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR if there are reasons for doing so which arise from your particular situation.
If you wish to make use of your right to object, an e-mail is sufficient to presse@pi-ag.com.

References: Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 88
 Art. 6
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 21