Source: https://www.leitz.org/en/privacy/
Timestamp: 2020-08-10 18:40:46
Document Index: 33404940

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 12', 'Art. 12', 'Art. 6', 'Art. 88', '§ 26', 'Art. 6', 'Art. 88', '§ 26', '§ 611', 'Art. 9', 'Art. 9', 'Art. 9', 'Art. 88', '§ 26', 'Art. 9', 'Art. 9', 'Art. 9', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 9', 'Art. 17', 'Art. 9', 'Art. 9']

as at 2020/08/01
1.1 The following privacy policy is valid for using the website ‘leitz.org’ and the services it offers. This website is offered by Leitz GmbH & Co. KG, Leitzstraße 2, 73447 Oberkochen/Germany, email leitz@leitz.org as the party responsible as defined by section of 4 of the EU General Data Protection Regulation (“GDPR”).
Leitz GmbH & Co. KG is, directly or indirectly, the parent company of several subsidiaries domestically and abroad, for whom changed data privacy statements and legal notices are valid e.g. owing to national laws. Therefore, please adhere to the respective data privacy statements and legal notices of all the Leitz websites that you visit, for which the respective subsidiary is responsible.
You can contact the data protection officer of Leitz GmbH & Co. KG via email datenschutz@leitz.org or via post with the addendum “To the Data Protection Officer”.
1.2 The protection of your personal data is important for us, mainly with reference to the protection of the personal right while processing and using this information. Hereinafter we provide information about the collection of personal data while using our website. Personal data includes all the data that is personally relatable to you such as name, address, email addresses, user behaviour, etc.
2.1 Similar to every website, our server collects details automatically and temporarily in the server log files, which are transferred by the browser unless you have deactivated it. If you wish to view our website, we collect the following data that is technically necessary for us to show our website to you and to ensure stability and safety (legal basis, section 6 para. 1 lit f) GDPR):
the http-response code
operating system used of the requesting computer
The server log files are not evaluated personally. This data cannot be assigned to specific people at any point in time for the provider. This data is not merged with other data sources.
In order to design our Internet presence such that it is user-friendly and optimally customised to your requirements, we use cookies in some sections. We thereby rely on our legitimate interest of operating an attractive website for you. "Cookies" are small files that we transfer to your computer’s hard disk with the help of your internet browser or other programmes. They are saved locally on your computer’s hard disk and kept available for subsequent access. You allow our system to identify your browser and provide specific services to you.
A few of the cookies we use are deleted again at the end of the browser session, i.e. after closing your browsers (so-called session cookies). Other cookies remain on your end device and allow us or our partner companies to recognise your browser during the next visit (persistent cookies).
You can set your browser such that you will be informed about the setting of cookies and decide individually on their acceptance or the acceptance of cookies for specific cases or general exclusion (refer to acceptance or refusal of cookies).
When you first visit our website, you will be given the opportunity to choose which cookies you want to allow. You can recall or adjust your selection at any time in the cookie settings in the website footer.
If you do not accept the use of cookies, it can limit the functionality of our website.
On this website we use the services of etracker GmbH, Hamburg, Germany (www.etracker.com) to analyse usage data. We do not use cookies for web analysis by default. If we use analysis and optimisation cookies, we will obtain your explicit consent separately in advance. If this is the case and you agree, cookies are used to enable a statistical range analysis of this website, a measurement of the success of our online marketing measures and test procedures, e.g. to test and optimise different versions of our online offer or its components. Cookies are small text files that are stored by the Internet browser on the user's device. etracker cookies do not contain any information that could identify a user.
The data generated by etracker on behalf of the provider of this website is processed and stored by etracker solely in Germany by commission of the provider of this website and is thus subject to the strict German and European data protection laws and standards. In this regard, etracker was independently checked, certified and awarded with the ePrivacyseal data protection seal of approval.
The data processing is based on Art. 6 Section 1 lit f (legitimate interest) of the General Data Protection Regulation (GDPR). Our legitimate interest is the optimisation of our online offer and our website. As the privacy of our visitors is very important to us, the data that may possibly allow a reference to an individual person, such as IP address, registration or device IDs, will be anonymised or pseudonymised as soon as possible. etracker does not use the data for any other purpose, combine it with other data or pass it on to third parties.
On this website we also use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function primarily serves to differentiate whether an entry is made by a natural person or whether it is misused by mechanical and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in avoiding misuse and spam. As part of the use of Google reCAPTCHA, personal data can also be transmitted to the servers of Google LLC. in the US.
In case of the transfer of personal data to Google LLC. based in the United States, Google LLC. certified for the US-European data protection convention "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
Further information on Google reCAPTCHA and Google's privacy policy can be viewed at: https://policies.google.com/privacy?hl=en
The buttons for social media shown on our website are not plug-ins. The buttons contain a link that redirects you to the respective platform. We neither save cookies on your computer to this end nor do we transmit your data.
The data protection directives of the respective social media platform are applicable to other actions on these sites:
“Facebook” (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)
“Xing” (XING AG, Dammtorstraße 30, 20354 Hamburg, Germany)
“LinkedIn” (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA),
When you visit our websites that have a button of this sort, your browser does not establish any connection with the servers of the respective service unless you click the corresponding button. The information about the visit to our website is thus not forwarded to the respective service.
If you are also logged in to the respective service simultaneously via your personal user account while visiting our website (e.g. via another browser session) and you click the buttons, your visit to our website can be assigned to your account.
If you wish to stop such a data transfer, you must log out from your user account of the respective service before visiting our websites or not use the links. For the scope and purpose of the data collection by the respective service, as well as the local further processing and use of your data, please refer to the data privacy statements directly on the website of the service. You will also get additional information on your corresponding data protection rights and setting options for protecting your privacy.
4. Use of YouTube videos
We use embedded YouTube videos. YouTube is a service provided by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.
The IP address is transmitted while viewing the videos. It cannot be assigned unless you have logged in to or are permanently logged in to YouTube or another Google service before viewing the website.
As soon as you start playing an embedded video by clicking it, YouTube, to the best of our knowledge, saves only cookies on your computer, which do not contain any personally identifiable data. These cookies can be prevented using corresponding browser settings and extensions (source: YouTube “Activation of the extended data protection mode for embedded videos”).
For more information on embedding the YouTube videos, please visit the information page YouTube: https://support.google.com/youtube/answer/171780?hl=en.
We use the popular SSL protocol (Secure Socket Layer) together with the highest encryption level that is supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the display of a closed symbol of a key or lock in the status bar of your browser.
6. Hyperlinks to external websites
Our website contains so-called hyperlinks to websites of other providers. While activating these hyperlinks, you are forwarded directly to the website of other providers from our website. You can detect this from the change in the URL among other things. We cannot assume any responsibility for confidential handling of your data on these third-party websites as we have no influence on whether these companies comply with the data protection regulations. You can visit these websites directly to find out about how these companies handle your personal data.
7. Data collection and processing of voluntarily shared data
If you share personal data with us via email or on our website (name, first name, contact details, etc.), this is generally done voluntarily. This data shall be used for processing your queries and issues. The data shall be encrypted and transferred (transport encryption) via email to the relevant recipient in the company.
It is not used for any other purpose, especially forwarding of the data to a third party for purposes of promotion, market or opinion research. We delete the data collected in this context, after it is no longer necessary to save it, or limit its processing in case of any statutory obligation to preserve records. The legal basis is section 6 Para. 1 lit. b) of GDPR or section 6 Para. 1 lit. f) of GDPR.
The legal basis for processing your personal data for mailing the newsletter is section 6 Para. 1 lit. a of EU GDPR in case of consent.
Your data is not forwarded to third parties in connection with the mailing of the newsletter.
For mailing the newsletter, we use the so-called Double opt-in method, i.e. we shall send you the newsletter only if you previously confirm your application with a link contained in the confirmation email sent to you for this purpose. We would thus like to ensure that only you yourself can log in to the newsletter as the owner of the specified email address. Your confirmation in this respect must be provided shortly after receiving the confirmation email as otherwise your newsletter application will be automatically deleted from our database.
The collection of your personal data (at least your email address) helps to mail you the newsletter. The purpose of processing your personal data for mailing the newsletter is to ensure that you are regularly informed of the relevant topics from the field of wood working and plastics processing, advanced materials as well as the corporate development.
Your personal data shall be deleted as soon as it is no longer required for achieving the purpose of its collection. Your personal data shall thus be saved as long as the newsletter subscription is active.
d. Option to object or delete
You can cancel the newsletter subscription at any time. Every newsletter contains a corresponding link for this purpose. Cancellation of the subscription also allows revocation of consent.
On our website, we give you an option to contact us using a form that is provided. If you make use of the contact form, your personal data given below shall be processed in addition to the content that you have entered in the contact field:
The specification of your email address thereby serves the purpose of assigning your query and being able to respond to you. When using the contact form, your personal data is not forwarded to third parties.
Additional information about your company and its address as well as about your telephonic accessibility is voluntary and possible for clarification of your query about the corresponding fields.
The previously described data processing for purposes of establishing contact is based on section 6 Para. 1 lit. f of GDPR. The provision of an interface for communicating with you is in our legitimate interest that, as a rule, shall be aligned with your interest of being able to contact us quickly and easily.
As soon as the query posed by you is settled and the relevant issue is finally clarified, your personal data processed using the contact form shall be deleted. Continued storage is possible in an isolated case if it is legally stipulated.
7.3. Transfer of application documents
If you are interested in one of the jobs advertised by us or if you wish to apply proactively, you can always email us your application documents on karriere@leitz.org.
We assure you that we shall process the personal data that you have specified only for purposes of executing the application process.
The legal basis for processing your personal data from your application documents is section 6 Para. 1 lit. b of GDPR.
We shall store your data for 6 months after the application process (acceptance or rejection).
8. Forwarding to a third party
If you have shared personal data with us, it will not be forwarded to a third party in principle. It will be forwarded only
if you have consented to it. While collecting the data, you shall be notified of the recipient or category of recipients.
for processing your queries, your orders and the use of our services to authorised subcontractors, who are transferred the required data only for executing the order and use it for a specific purpose.
for processing the order data in accordance with section 28 of GDPR to external service providers. These are carefully selected and authorised by us, are committed to our instructions as well as the provisions of the GDPR and are inspected regularly.
for fulfilling the legal obligations towards authorities entitled to receive information.
9. Data transfer to third countries
Data is transferred to third countries exclusively on the basis of a consent, the necessity for contract fulfilment or investigation of legal claims (section 49 of EU GDPR).
Your data shall be used only insofar as it is required for the existing business relationship, unless you have already given us your consent or we have an legitimate interest in processing it further. In these cases, we shall process your data until you revoke your consent or until you object to our legitimate interests. Nevertheless, we are under an obligation to save your address, payment and order details for a duration of ten years owing to the commercial and tax specifications.
11.1. You have the following rights against us with respect to your personal data:
Right of information and access to personal data,
Please direct your written query to: The Data Protection Officer, Leitz GmbH & Co. KG, Leitzstraße 2, 73447 Oberkochen, or to the following email address: datenschutz@leitz.org.
11.2. Moreover, you have the right to complain to an independent data protection supervisory authority about processing of your personal data by us.
The relevant supervisory authority for us is:
The supervisory authority to whom you have submitted the complaint, shall inform you of the status and results of the complaints including the possibility of a legal remedy in accordance with section 78 of EU GDPR.
Information duties according to Art. 12, 13 et seq. of the EU GDPR for business partners
Status 09/16/2019
3. Privacy policy for job applicants
Information duties for applicants according to Art. 12, 13 et seq. of the EU GDPR (m/f/x)
Based on the legal provisions that are specified in the EU General Data Protection Regulation ("EU GDPR") we are obliged to provide you with comprehensive information about the processing of your personal data in the context of your application, and we are pleased to do so.
In relation to the processing of your personal data in the context of your application, we wish to inform you of the following:
Your point of contact as the controller within the meaning of the EU General Data Protection Regulation ("EU GDPR") and other national data protection laws within the member states as well as other data protection provisions is:
Leitzstraße 2, D-73447 Oberkochen
Please contact our Data Protection Officer directly concerning any questions relating to data protection and data security in our company. Email: datenschutz@leitz.org
3. Miscellaneous information about data processing
As a matter of principle we process your personal data only insofar as it is necessary to do so for setting up the employment relationship. Further processing of your personal data normally takes place only if we have obtained your consent to this beforehand. An exception applies in those cases in which it is not possible to obtain prior consent owing to factual reasons, or in cases in which the processing of your personal data is permitted by a statute.
4. Data processing within the application procedure
a. Legal basis for the processing of data
If we obtain your consent to the processing of personal data, the legal basis for us doing so is Art. 6 para. 1 (a) of the EU GDPR and Art. 88 para. 1 of the EU GDPR in conjunction with § 26 para. 2 of the BDSG (Federal Data Protection Act).
The legal basis for the processing of personal data which is required for the setting up of an employment relationship is Art. 6 para. 1 (b) of the EU GDPR and Art. 88 para. 1 of the EU GDPR in conjunction with § 26 para. 1 of the BDSG and § 611a BGB (German Civil Code).
If we obtain your consent for the processing of special categories of personal data (Art. 9 para. 1 EU GDPR), such as religious affiliation, nationality and health data, Art. 9 para. 2 (a) of the EU GDPR provides the legal basis for this.
If the processing of specific categories of personal data is necessary in order for us to be able to exercise the rights that are conferred on us by employment law and social security law, and in order for us to fulfil our duties in this respect, the legal basis for the processing is provided by Art. 9 para. 2 (b) of the EU GDPR and Art. 88 para. 1 of the EU GDPR in conjunction with § 26 para. 3 of the BDSG.
If the processing of specific categories of personal data is necessary in order for the protection of vital interests, the legal basis for the processing is provided by Art. 9 para. 2 (c) of the EU GDPR.
If the processing relates to specific categories of personal data which have evidently been made public by you, the legal basis for such processing is provided by Art. 9 para. 2 (e) of the EU GDPR.
If the processing of specific categories of personal data is necessary for healthcare or occupational medicine purposes, or for assessing working capacity, the legal basis for such processing is provided by Art. 9 para. 2 (h) of the EU GDPR.
The processing of your personal data is undertaken for the purposes of setting up the employment relationship, and in particular for the fulfilling of obligations under employment law and legal obligations – including colIective bargaining obligations if applicable as well as obligations under social insurance law.
Thereafter we will store your application documents and application details (among other data) for the following periods:
If you are appointed, the application documents become part of your personnel file.
If your application is rejected, the data is deleted 6 months after the corresponding information was provided.
The processing of your personal data in connection with the application procedure is absolutely essential for setting up the employment relationship. You have the right to object to further processing at any time.
If the processing of your personal data is carried out on the basis of a consent, you may revoke your consent at any time.
5. Legal defence and legal redress
The legal basis for the processing of your personal data in connection with legal defence and legal redress is Art. 6 para. 1 (f) of the EU GDPR and/or Art. 9 para. 2 (f) of the EU GDPR.
The purpose of the processing of your personal data in connection with legal defence and legal redress is the filing of a defence against unjustified claims as well as the legal enforcement of claims and rights. This purpose constitutes our justified interest in the processing of the data in accordance with Art. 6 para. 1 (f) of the EU GDPR and/or Art. 9 para. 2 (f) of the EU GDPR.
6. Categories of recipient
Those bodies and departments within our company receive personal data which need it in order to fulfil the aforementioned purposes. In order to do this we sometimes make use of a variety of service providers, and we send personal data to other recipients. Examples of these include:
Potential line managers of the applicant concerned
The financial accounting department
The representative body for disabled employees / the state integration agency
You may demand that we delete the personal data relating to you without delay, and we are obliged to delete such personal data without delay if one of the following reasons applies:
The personal data relating to you is no longer needed for the purposes for which it has been collected or otherwise processed.
(2) You revoke your consent on which the processing was based according to Art. 6 para. 1 (a) or Art. 9 para. 2 (a) of the EU GDPR, and there is no other legal basis for its processing.
d 2) Information provided to third parties
If we have disclosed the personal data relating to you and if we are obliged to delete it according to Art. 17 para. 1 of the EU GDPR, then – having due regard to the technology that is available and the implementation costs that are involved – we will take appropriate measures (including of a technical nature) to inform the data controllers who process the data that you as the data subject have demanded that they should delete any links to that personal data, or any copies or replicas of that personal data.
d 3) Exceptions
(2) in order to fulfil a legal obligation which requires processing according to the law of the European Union, or of the Member States, to which we are subject, or in order to carry out a task which is in the public interest or which is carried out through the exercising of official authority which has been transferred to us;
(3) for public-interest reasons in the public health field according to Art. 9 para. 2 (h) and (i) as well as Art. 9 para. 3 of the EU GDPR;
You have the right to receive the personal data which relates to you, and which you have provided to us, in a structured, up-to-date and machine-readable format. In addition, you have the right to transfer such personal data that has been provided to us to another controller without being hindered from doing so by us, provided that
(1) is required for the performance of a contract that has been concluded between you and us,
(2) is permitted based on legal regulations of the European Union or of its Member States to which we are subject, and if these legal regulations contain appropriate measures for safeguarding your rights and freedoms and your justified interests, or