Source: https://www.janz.de/en/imprint-privacy-notice/
Timestamp: 2019-04-22 14:45:06+00:00

Document:
The use of this website may be associated with the processing of personal data. We would like to present you with an overview of this processing to ensure that it is transparent and verifiable. To ensure fair processing, we would also like to inform you on your rights in accordance with the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Janz Beteiligungen und Services AG, Im Dörener Feld 8, 33100 Paderborn, Germany (hereinafter referred to as “we” or “us”) is responsible for the data processing.
Use of this website may lead to the processing of personal data. The data protection term “personal data” means any information relating to an identified or identifiable natural person. The IP address can also be considered to be personal data. An IP address is assigned to every device connected to the internet by the internet provider so that it can send and receive data. We process personal data taking the relevant data protection provisions into account, in particular those of the GDPR and BDSG (Federal Data Protection Act). Data processing conducted by us is only done on the basis of a legal permit. We only process personal data with your consent (Art. 6 para. 1 sentence 1 a) GDPR) to fulfil a contract to which you are a party, or in order to take steps at your request prior to entering into a contract (Art. 6 para. 1 sentence 1 b) GDPR), to comply with a legal obligation (Art. 6 para.1 sentence 1 c) GDPR) or when processing is necessary to maintain the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms which require protection of personal data (Art. 6 para. 1 sentence 1 f) GDPR). When you apply to us for employment, we also process your personal data for employment-related purposes where necessary for recruitment decisions (§ 26 para. 1 sentence 1 BDSG).
Provided that the following information does not specify otherwise, we shall only store your personal data as long as is necessary for achieving the processing purpose or for the performance of our contractual or legal obligations. Legal storage obligations may in particular arise from commercial or tax-related regulations.
Provided that the following information does not specify otherwise, the processing of the data shall be conducted on the servers of technical service providers commissioned by us. These service providers will only process the personal data following explicit instructions and are contractually obligated to guarantee the implementation of sufficient technical and organisational data protection measures.
In case of a purely informative use of our website, general information which is transmitted by your browser to our server is automatically (hence not via registration) stored. By default, this includes: type of browser/version, operating system used, accessed page, previously accessed page (referrer URL), IP address, date and time of the server query and HTTP status code.
The processing is necessary for the purposes of pursuing our legitimate interests and is based on the legal foundation of Art. 6 para. 1 sentence 1 f) GDPR. This processing serves the technical administration and security of our website. The stored data is deleted when there are no specific indications that prompt us to suspect, on reasonable grounds, any illegal usage which requires the further review and processing of the information for this reason.
Our website contains a contact form which you can use to send us messages. The transfer of your personal data in these messages is encrypted. All data fields designated as mandatory fields are required for the processing of your request. Your request cannot be processed if you do not provide all the necessary information. The disclosure of other data is voluntary. Alternatively, you can send us a message via the contact email address.
The legal basis for the data processing is provided in Art. 6 para. 1 sentence 1 b) GDPR.
We use services and contents on our website that are provided by third-party vendors. Integration of these requires the technical processing of your IP address so that the contents can be sent to your browser. Your IP address is therefore forwarded to the respective third-party vendor. This data processing is conducted to safeguard our legitimate interests regarding the optimisation and economical operation of our website. They arise from the legal basis of Art. 6 para. 1 sentence 1 f) GDPR.
We have included the “Google Fonts” service for the depiction of fonts on our website. Google Fonts is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google is certified under the Privacy Shield agreement and thus guarantees adherence to European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
When you apply to us for employment, we only process application data for purposes related to your interest in current or future employment at our company and the processing of your employment application. Your application will only be processed and taken note of by the respective contact persons. All employees entrusted with data processing are obligated to maintain confidentiality of your personal data. Should we not be able to offer you employment, we shall store your application data for up to six months after a respective rejection in order to be able to answer questions arising in relation to your application and rejection. This shall not apply in the event that legal provisions prevent deletion, for example when they stipulate further storage in order to provide proof or when you have explicitly consented to a longer storage period. The legal basis for the data processing is provided in § 26 para. 1 sentence 1 BDSG. Should we store your application data for a period exceeding six months and you have provided explicit consent, we wish to point out that you can withdraw this consent at any time in accordance with Art. 7 para. 3 GDPR. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
In accordance with Art. 15 GDPR and § 34 BDSG, you have the right to demand information on whether we process your personal data, and if so, to what extent.
You have the right, in accordance with Art. 16 GDPR, to demand the rectification of your personal data.
You have the right, in accordance with Art. 17 GDPR and § 35 BDSG, to demand the deletion of your personal data.
You have the right, in accordance with Art. 18 GDPR, to demand the limitation of the processing of your personal data.
You have the right, in accordance with Art. 20 GDPR, to receive the data concerning your person which you have provided us with, in a structured, commonly used and machine-readable format, and to transmit this personal data to another controller.
As stipulated in Art. 21 GDPR, you have the right to object to any processing which arises from the legal basis in Art. 6 para. 1 sentence 1 e) or f) GDPR. If we process personal data for direct marketing purposes, you can object to this processing in accordance with Art. 21 para. 2 and para. 3 GDPR.
You can withdraw granted consent in accordance with Art. 7 para. 3 GDPR. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
If you are of the opinion that the processing of your personal data infringes on the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 § 26
 Art. 7
 Art. 15
 § 34
 Art. 16
 Art. 17
 § 35
 Art. 18
 Art. 20
 Art. 21
 Art. 6
 Art. 21
 Art. 7
 Art. 77