Source: http://vestolit.de/vestolit-en/privacy-statement/privacy-statement.php
Timestamp: 2019-04-23 06:54:19+00:00

Document:
The purpose of this privacy statement is to inform you about how VESTOLIT GmbH will process your personal data and to inform you of your rights in respect of data protection law. The specific data that is processed and the way in which it is used depends predominantly on the services requested or agreed. Therefore, not all of the information below will concern you.
The main principle is that we, VESTOLIT GmbH, take the protection of your personal data very seriously. Please note that this Website is intended for use by adults only.
We process personal data that we receive in the course of customers/applicants or other interested parties (hereinafter: you), among others, using our Website.
Data processing may be carried out as part of performing contracts with you as our customer or for implementing pre-contractual measures.
If you have given us consent to process personal data for certain purposes (e.g. for marketing purposes, newsletter dispatch), the legality of this processing is based on your consent.
In addition we are subject to various legal obligations, meaning legal requirements (e.g. tax laws). The purposes of processing include inter alia fulfilling inspection and reporting duties under tax law and much more.
If you apply to work with us, we are also permitted to process your personal data.
4. What does this mean specifically for the provision of this Website with the services available on it?
The data is also stored in the log files of our system. This does not concern the user’s IP address or other data that enables the assignment of data to a user. This data is not stored with other personal data of the user.
The legal basis for temporary data storage is Art. 6 para. 1 letter f GDPR. It is necessary for the system to store the IP address temporarily to enable the delivery of the website to the user’s computer. For this, the user’s IP address must be stored for the duration of the session. These purposes constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 letter f GDPR.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the event that data is collected for the provision of the website, this means when the respective session ends.
Collecting the data for the provision of the Website and storing the data in log files is strictly necessary for the operation of the Internet page. It is therefore not possible for the user to object.
The data collected in this way is pseudonymised by technical measures. It is therefore no longer possible to assign the data to the visiting user. The data is not stored with other personal data of the user.
Our Website uses the web analysis service “Piwik” of the company PIWIK PRO GmbH, an open source software for statistically evaluating access to our Website by users. Piwik uses so-called “cookies”, text files that are stored on your computer and enable an analysis of how you use the Website. The information about your use of this Internet service that is generated by the cookies is stored on the VESTOLIT server in Germany. We want this to help us to further optimise our Website and process your personal data in accordance with Art. 6 para. 1 letter f GDPR.
Your IP address will be made anonymous immediately after the Processing and before it is stored.
If you do not want the Piwik web analysis cookie to be used, you may object to such use at any time by clicking below. In this case, a so-called deactivation cookie will be placed in your browser.
You can decide here whether you want to allow a unique web analysis cookie to be placed in your browser to enable the operator of the website to collect and analyse various statistical data.
If you would like to decide against this, please click the following link to place a Piwik deactivation cookie in your browser.
On the basis of our legitimate interest in the analysis, optimization and operation of our online service, this Website uses social plugins (“Plugins”) of the social network Facebook, operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). These can be recognised through the Facebook logo or the terms “Like”, “Share” in the colours of Facebook (blue and white). You can find information about all of the Facebook social plugins at: https://developers.facebook.com/docs/plugins/page-plugin.
Through the integration of the Plugins, Facebook will be informed that you have called up our Website. It is possible that your IP address may be stored. If you are logged into Facebook, Facebook can attribute the visit to your Facebook ac-count. If you interact with the Plugins (in particular, if you click the link button or “Like”), your browser will send this information directly to Facebook Inc.
We include maps of the Service "Google Maps" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The data processed may include, in particular, users IP addresses and location data, which are not collected without their consent (usually carried out within the settings of their mobile devices). The data is usually transferred to a Google server in the US and stored there. We have no influence on this data transfer.
The use of google maps is in the interest of an appealing presentation of our online offers and in an easy discoverability of the places we specify on the website. This constitutes a legitimate interest within the meaning of article 6 (1) lit. f GDPR.
Your consent is obtained for processing your data as part of the dispatch process and reference is made to this privacy statement.
Alternatively, it is possible to establish contact via the email address provided. In this case, the personal data transmitted with your email is stored. There is no forwarding of data to third parties in this context. The data is only used for processing the conversation. The legal basis for data processing is your consent Art. 6 para. 1 letter a GDPR.
The legal basis for data processing that is transmitted in the course of sending an email is Art. 6 para. 1 letter f GDPR. If email contact is made in the aim of arranging a contract, the additional legal basis for processing is Art. 6 para. 1 letter b GDPR.
Processing personal data on input screens only serves for us to process the contact. In the event of contact via email, this also constitutes the necessary legitimate interest in data processing. The other personal data processed during the dispatch procedure serves to prevent abuse of the contact form and to ensure the security of our information technology systems.
The data is deleted if it is no longer required to achieve the purpose for which it was collected. This is the case for personal data from the input screen of the contact form and which was sent via email when the respective conversation with you as a user has ended. This means when it can be inferred from the circumstances that the issue concerned has been conclusively resolved. The personal data collected in addition during the dispatch process is deleted after a period of 7 days at the latest. You have the option to revoke your consent to the processing of personal data at any time. If you establish contact with us via email, you may object to the storage of your personal data at any time. In such a case the conversation cannot be continued.
(Below is a description of how it is possible to withdraw consent and object to storage).
All personal data that was stored in the course of establishing contact shall be deleted in this case. We only use the information that you have given to answer your question. In this respect, it may be necessary to forward your data to internal recipients.
We are pleased to receive your application via email.
In the course of managing applicants, we process the personal data provided to us by you for initiating an employment relationship on the basis of Art. 88 GDPR in conjunction with Section 26 para. 1 BDSG. Alternatively collective agreements (group, overall and works agreements as well as contractual regulations) may be used in accordance with Art. 88 GDPR in conjunction with Section 26 para. 4 BDSG, and consent (e.g. with photographs) in accordance with Art. 88 GDPR in conjunction with Section 26 para. 2 BDSG.
In individual cases, we process your data to safeguard legitimate interests e.g. intragroup data exchange for administrative purposes (Art. 6 para. 1 f GDPR in conjunction with recital 48). If certain categories of personal data (e.g. severe disability) are processed, this takes places on the basis of Art. 88 GDPR in conjunction with Section 26 para. 3 BDSG. In addition, processing health data may be required for assessing your ability to work in accordance with Art. 9 para. 2 h) in connection with Section 22 para. 1 b) BDSG.
We process and store your personal data for as long as it is required to fulfil the purposes of data processing or to fulfil legal or contractual obligations. Afterwards, the data shall be deleted or its processing restricted. In the event that no employment relationship comes to fruition after the conclusion of the application process, we will delete your data 3 years after the end of the application process at the latest. After the end of the normal 3-year limitation period, according to Section 195 of the German Civil Code (BGB), this is the time in which any claims according to the German General Act on Equal Treatment (AGG) expire. Should we wish to save your application for a period of 3 years in a so-called “applicant pool”, we would ask for your consent for this after the end of the three years.
Of course, you are also free to withdraw your application at any time. In this case your data would also be deleted insofar as it is no longer required to achieve the purpose for which it was collected. Sending an email to us with the corresponding content is sufficient for this. Withdrawing any consent granted to us is also possible at any time.
Every person concerned has the right to information according to Article 15 GDPR, the right to correction according to Article 16 GDPR, the right to deletion according to Article 17 GDPR, the right to restrict processing according to Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. The restrictions according to Sections 34 and 35 BDSG apply for the right to information and the right to deletion. In addition, there is a right to complain to a responsible regulatory body for data protection (Article 77 GDPR in conjunction with Section 19 BDSG).
You can revoke the consent granted to us for processing personal data at any time. This also applies to the revocation of consent declarations that were granted to us prior to the GDPR coming into effect, so before 25th May 2018. Please note that the revocation only has effect for the future. Processing that has taken place prior to revocation is not affected by this.
Please contact our Data Protection Officer regarding this.
6. Do I have to provide my personal data?
As part of our business relationship, you must provide such personal data that is required for the initiation and performance of a business relationship and the fulfilment of the contractual duties associated with it, or the personal data which we are obligated to collect by law. Without this data, we will usually have to refuse to conclude the contract or execute the order, or no longer be able to perform an existing contract and have to terminate it where necessary.
7. Is there automated decision-making?
No. At present we do not use fully automated decision-making for initiating and performing business relationships in accordance with Art. 22 GDPR. “Profiling” does not take place.
You have the right to lodge an objection against the processing of personal data concerning you and which takes place on the basis of Article 6 paragraph 1 letter e GDPR (data processing in the public interest) and Article 6 paragraph 1 letter f GDPR (data processing on the basis of a balance of interests) for good reason arising from your particular situation at any time; this also applies to profiling based on this provision within the meaning of Article 4 No. 4 GDPR.
If you lodge an objection, we will no longer process your personal data unless we can prove compelling and reasonable grounds for processing which prevail over your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims.
In individual cases, we process your personal data in order to conduct direct advertising. You have the right to lodge an objection to the processing of the personal data concerning you for the purposes of such advertising at any time; this also applies for profiling insofar as it is connected to such direct advertising. If you object to processing for the purposes of direct advertising, we will no longer process your personal data for these purposes.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 88
 Art. 88
 Art. 88
 Art. 88
 Art. 9
 Art. 22