EN Data privacy Thank you for visiting our website. We take compliance with data protection regulations very seriously. The aim of this Data Protection Statement is to explain to you, as a website user, the nature, scope and purpose of processing of personal data and the rights you have as a data subject as defined in Article 4, no. 1 of the General Data Protection Regulation (GDPR). Controller H. von Gimborn GmbH Albert-Einstein-Straße 6 46446 Emmerich am Rhein CEO: Jordi Queralt Fone: +49 2822-964-0 Fax: +49 2822 964-113 /-114 E-Mail: info@gimborn.de General We have developed the website so that we collect as little data as possible from you. Basically, it is possible to visit our website without providing personal data. Only when you decide to use specific services (e.g. use the contact form) will it be necessary to process personal data. In so doing, we always ensure that we process your personal data only in accordance with the law, or on the basis of your consent. We abide by the rules contained in the General Data Protection Regulation (GDPR), which has been in force since 25 May 2018 and the respective applicable national provisions, such as the German Federal Data Protection Act, the German Telemedia Act, or other, more specific data protection laws. Intended use and legal basis for processing personal data We always process your personal data for a specific purpose. In summary, we process your personal data for the following purposes: a) so that we can deal with your enquiry when you contact us (e.g. e-mail address, first name, last name) b) so that we can send you a quote in response to your request for a quote (quotation form) c) so that we can receive and process an application by you in response to one of our job vacancies d) so that we can provide the technical features of our website and provide you with our information on this website (e.g. IP address, cookies, browser information) e) for participation in prize draws or photo competitions The specific purposes are described for each type of processing mentioned here (e.g. contact form, web analysis, order process etc.) With regard to the legal basis for the processing of your data, the following applies: We process personal data required for substantiating, rendering or implementing our services (contract processing) on the basis of Article 6 (1) b GDPR. If we obtain your consent to the processing of your personal data, in accordance with Art. 6 (1) a GDPR, that consent forms the legal basis for the processing of your data. Data processing is also permitted if we are processing your data in order to pursue our legitimate interests and your interests or fundamental rights and freedoms with regard to the processing of personal data do not override our legitimate interests. If we use external service providers within the scope of data processing, processing is carried out on the basis of Article 28 GDPR. Collected and processed personal data As part of our web offering, we collect and process certain personal data concerning you. Specifically, we process the data you have to provide when filling in forms on the website (e.g. contact form or order form) and the data pertaining to each of the processing operations described here. In summary, we collect and process the following data about you via our website: General contact details: Last name, first name E-mail address Content of message Media enquiries: Last name, first name E-mail address Content of message Online application by e-mail: Last name, first name Street, house number Postcode Town E-mail address Message Application documents We will collect and process your data only for the purposes mentioned in this Data Protection Statement. Your express consent is required for use that exceeds the stated purpose. The same applies also to transfer and transmission of your data to third parties. Collection of personal data when visiting our website If you use our website solely to gather information, i.e. if you do not register or otherwise share information with us, we only collect the personal data that your browser transmits to our server. If you would like to browse our website, we collect the following data which we require for technical purposes in order to show you our website and ensure its stability and security (on the legal basis of Art. 6(1)f GDPR): IP address date and time of enquiry time zone difference compared with Greenwich Mean Time (GMT) content of the enquiry (specific page) access status/HTTP status code volume of data transmitted each time website from which the request was received browser operating system and its interface access status/HTTP status code language and version of the browser software In addition to the abovementioned data, when you use our website cookies are stored on your computer. More information about this can be found under the “Cookies” heading in this Data Protection Statement. Inclusion of third-party services Our website uses content and services from other providers, such as services for the statistical evaluation of usage of and visits to our website, or in order to embed videos from video platforms such as YouTube or Vimeo. It is essential for the user’s IP address to be transmitted to these third-party providers so that this data can be retrieved and displayed in the user’s browser. Even if we strive to only use third-party providers who need the IP address solely to be able to supply content or who work with anonymised IP addresses, we are unable to influence whether or not the IP address is stored. Information about the third-party providers used can be found below in this Data Protection Statement. Use of Google Analytics Our website uses functions from web analysis service Google Analytics. The web analysis service provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies. These are little text files that your web browser stores on your device and that facilitate analysis of website use. Information about your use of our website generated by these cookies is transmitted to a Google server and stored there. The servers are usually located in the USA. Google Analytics cookies are stored on the basis of Article 6 (1) f GDPR. As this website’s operator, we have a legitimate interest in analysing user behaviour, in order to optimise our web offering and advertising as applicable. We use Google Analytics in conjunction with the IP anonymisation function. It ensures that Google abbreviates your IP address within EU Member States or in other states that are party to the European Economic Area treaty, before transmission of your IP address to the USA. In some cases, however, Google may transmit the full IP address to a server in the USA and abbreviate it there. Google will use this information on our behalf to analyse your use of the website, to generate reports about website activities and to provide us with other services associated with website and internet use. The IP address transmitted by Google Analytics is not combined with other Google data. You can prevent cookies being placed by your web browser. This may, however, restrict some of our website’s functions. You can also prevent data about your website use, including your IP address, being collected and subsequently processed by Google. This is possible by downloading and installing the browser plugin via the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Details about Google Analytics’ handling of user data can be found in Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de. We have concluded an agreement with Google concerning processing in order to meet statutory data protection regulations in full. Our website uses Google Analytics’ ‘Demographics’ feature. It generates reports containing information about the age, gender and interests of website visitors. This data is generated by Google’s interest-related advertising and also obtained from visitor data from Third-Party Providers. It is not possible to attribute data to a specific person. You can deactivate this function at any time. You can do this using the advertising settings in your Google account, or by generally prohibiting collection of your data by Google Analytics as explained under ‘Object to data collection’. Alternatively, you can prevent data collection by Google Analytics by installing what is known as an ‘opt-out cookie’, by clicking here. If you delete cookies from your browser, you will have to click on this link again. Google’s Privacy Policy can be found at: https://policies.google.com/privacy/partners?hl=de Contact (contact forms, e-mail) You can contact us by e-mail or by using our contact forms. In this case, we save the personal data you send to deal with your enquiry and to contact you to resolve your query. If we request information on our contact form, we have marked the required fields in order to contact us (asterisk). We use the voluntary information to gain a better understanding of your enquiry and to enable us to resolve your query more efficiently. You send the requested data to us on a purely voluntary basis. Depending on the type of enquiry, the legal basis for this processing is Art. 6(1)b GDPR for enquiries which you make yourself as part of steps prior to entering into a contract or Art. 6(1)f GDPR if your enquiry is of a different nature. Our legitimate interest is based on the purposes stated in 3a.). If personal data is requested which we do not need in order to perform a contract or pursue legitimate interests, that data is sent to us on the basis of consent given by you in accordance with Art. 6(1) a GDPR. Application process We publish job vacancies on our website for which you can apply by e-mail. If you decide to apply for a vacancy, we process the personal data you provide and send to us solely for the purposes of conducting the application process. If your application is unsuccessful, we erase your data as soon as a retention period of 6 months required by employment law has elapsed. This period commences when we send you the rejection. If you have expressly consented to the further use of your data in order for us to subsequently contact you about jobs which may be of interest to you, we will retain your data in accordance with your consent. We will not share your personal data with third parties who are not involved in the specific application process without your express consent or a legal basis. In the application process, we do not require information about “special categories of personal data” in order to assess an application. Special categories are data from which racial and ethnic origin (including your photo), political views, religious or philosophical beliefs or trade union membership can be deduced, as well as genetic data, biometric data which clearly identify a natural person, health data or data about a natural person’s sex life or sexual orientation. We strongly advise you not to include any information about such data in your stored data. If the data you provide contains such information, we can only process your application if you send us your explicit consent to storing these special categories of personal data. We would have to obtain this consent separately from you and this would cause a delay in the application process. Please note that applications that you e-mail to us are transmitted unencrypted. There is therefore a risk that unauthorised persons could intercept and use this data. The legal basis for the processing of your personal data in the application process is Section 26(1) in conjunction with (2) German Federal Data Protection Act. DATA PROTECTION INFORMATION FOR APPLICANTS Which sources and data do we use? We process personal data which we receive from you as part of the application process. Type of data: In particular, relevant personal data includes: personal details (name, address and other contact details, date and place of birth, nationality), bank details (for reimbursement of travel expenses), identification data (e.g. ID card details) health data (e.g. information about disability/severe disability), qualification papers (e.g. certificates, assessments and other training certificates) photographs (only provided voluntarily). For what purpose do we process your data (purpose of processing) and on what legal basis? We process your personal data in compliance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and sectoral data protection standards which may apply to the application process (Social Insurance Code, Telecommunications Act, Works Constitution Act, etc.). In order to carry out the application process Personal data (Art. 4(2) GDPR) is processed in order to carry out the application process, having due regard for Art. 88 GDPR and Section 26 BDSG. There is no contractual obligation. In pursuit of legitimate interests To the extent necessary, we also process your data to pursue our legitimate interest or legitimate interests of third parties. For example: establishing legal claims and defence in legal disputes, measures involved in managing the business and development measures. On the basis of your consent: If you have given us your consent to the processing of personal data for certain purposes (e.g. sharing application data with affiliated companies), the lawfulness of this processing is based on your consent. Consent given can be withdrawn at any time. Please be aware that withdrawal applies only for the future. Processing undertaken prior to the withdrawal is unaffected. If you withdraw consent to the processing of personal data collected, the purpose for which that data was collected can no longer be fulfilled or implemented. On the basis of legal requirements: As a company, we are also subject to various legal obligations (e.g. tax laws, social legislation). The purposes of processing include measures in fulfilment of monitoring and reporting obligations. Who receives my data? Within the company, the parties who require your data in order to complete the application process and fulfil legal obligations have access to that data. Processors used by us may also receive data for these purposes. As well as companies belonging to the group, these include companies in the IT services category. With regard to the transmission of data to recipients outside the company, it must first be noted that we abide by the applicable data protection rules. We are only permitted to share information about you if legal provisions require us to do so, you have consented or we are authorised to share information. Under these conditions, recipients of personal data can include affiliated companies (for the purposes of the application process for other jobs). Other potential recipients of data are the parties to whom we may transmit data based on your consent. For how long will my data be stored? To the extent necessary, we process and store your personal data for the duration of the application process. Your personal data will be erased once the purpose has been fulfilled (application process) but at the latest after 6 months. As soon as the storage of the data is no longer necessary in order to carry out the application process and there are no statutory retention periods or you have not given your consent to longer storage (e.g. for future application processes), your data will be deleted without undue delay. Is data transmitted to a third country or to an international organisation? Data is not transmitted to third states (states outside the European Economic Area, EEA). What are my data protection rights? Every data subject has the right by law to information about the processing of their personal data, the right to rectification, the right to erasure, the right to restriction of processing, the right to object to processing and the right to data portability. The restrictions in accordance with Sections 3 and 35 BDSG apply to the right to information and the right to erasure. There is also a right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). Do I have an obligation to provide data? As part of the application process, you have only to provide the personal data necessary for the application process. There is no obligation to provide us with this data. Normally, we cannot carry out the application process without this data. If you apply to us for an internship or training course and are not yet 16 years of age, please ask the person who is your legal guardian to complete the consent provided via the link below. Otherwise, we are unfortunately unable to process your application. Consent pursuant to Article 8 GDPR for minors up to age 16 Download: Einwilligung_Verarbeitung_Minderjaehrigen.pdf To what extent does automated decision-making take place in individual cases? We do not use any automated processing operations to reach a decision on the substantiation and conduct of the application process. To what extent is my data used for profiling (scoring)? We do not use any data for profiling (scoring) for the purposes of substantiating and conducting the application process. Information about your right to object: You have the right to object at any time to the processing of your personal data. If you object, we will no longer process your personal data unless we can demonstrate compelling reasons for such processing which override your interests, rights and freedoms, or if the processing is in order to establish, exercise or defend legal claims. The objection is not subject to any formal requirements and should preferably be sent to: H. von Gimborn GmbH Albert-Einstein-Straße 6 46446 Emmerich am Rhein datenschutz@gimborn.de Data subjects’ rights You have the right: in accordance with Art. 15 GDPR to obtain information about your personal data which we process. In particular, you can obtain information about the purposes of the processing, the category of personal data concerned, the categories of recipient to whom your personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to rectification or erasure, restriction of processing or the right to object, the source of your data if not collected by us and the existence of automated decision-making including profiling and, in those cases, meaningful information about the logic involved; in accordance with Art. 16 GDPR, to obtain without undue delay the rectification of inaccurate personal data concerning you stored by us; in accordance with Art. 17 GDPR, to obtain the erasure of personal data concerning you stored by us, provided the processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims; in accordance with Art. 18 GDPR, to obtain the restriction of the processing of your personal data, if the accuracy of the data is contested by you, the processing is unlawful but you oppose its erasure and we no longer need the data but you require the data for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21 GDPR; in accordance with Art. 20 GDPR to receive your personal data which you have provided to us, in a structured, commonly used and machine-readable format or to have that data transmitted to another controller (data portability); in accordance with Art. 7(3) GDPR, to withdraw the consent you gave to us at any time. If you do this, we will not be able to continue the data processing to which such consent related in future and in accordance with Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can lodge a complaint with the supervisory authority for your habitual residence or place of work or for our registered office. Right to object If your personal data is processed on the basis of legitimate interests in accordance with Art. 6(1) f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data provided there are grounds to do so relating to your particular situation or the objection relates to direct marketing. In the latter case, you have a general right to object, which we will implement without you telling us about a particular situation. To exercise your right to withdraw consent or to object, simply send an e-mail to datenschutz@gimborn.de Forwarding of your personal data Your personal data is forwarded as described below. The website is hosted by an external service provider in Germany. We will ensure that data processing takes place in Germany only. This is required in order to operate the website and to substantiate, execute and implement the existing licence agreement and is also possible without your consent. Your data may also be forwarded if, due to statutory provisions and/or official or court orders, we are authorised or obliged to forward data. In particular, this may be a question of provision of information for the purposes of prosecution, to avert risks, or to enforce intellectual property rights. If your data is forwarded to service providers to the extent necessary, they have access to your personal data only insofar as is necessary for fulfilment of their duties. These service providers are obliged to handle your personal details in accordance with the applicable data protection laws, in particular the GDPR. Over and above these circumstances, in principle we do not transmit your data to third parties without your consent. In particular, we do not pass personal data on to an agency in a third country or to an international organisation. Data security Unfortunately, transmission of data via the internet is never 100% secure, which is why we are unable to guarantee security of the data transmitted to our website via the internet. We use technical and organisational measures, however, to secure our website against loss, destruction, access, modification or dissemination of your data by unauthorised persons. In particular, we transfer your personal data in encrypted form. We use the SSL/TLS (Secure Sockets Layer/Transport Layer Security) coding system. We continually improve our security measures in accordance with technological developments. Duration of personal data storage With regard to storage duration, we erase personal data as soon as we no longer need to store it to fulfil the original purpose and all statutory periods of retention have elapsed. The statutory periods of retention ultimately are the criterion for the final duration of personal data storage. The corresponding data is routinely erased after the period has expired. Data processing is restricted by blocking the data if statutory retention periods have to be observed. References and links If you visit websites that are referred to on our website, you may be asked to provide information such as your name, address, e-mail address, browser properties, etc again. This Data Protection Statement does not govern the collection, forwarding or handling of personal data by third parties. Third-party service providers may have their own provisions on collecting, processing and using personal data that differ from ours. We therefore advise that before inputting personal data, you visit the third party’s website to learn how they handle personal data. Amendment of Data Protection Statement We are continually developing our website in order to provide you with a continuously improved service. We will always keep this Data Protection Statement up to date and adapt it accordingly, if and insofar as this should become necessary. You can view the latest version of our data protection provisions at any time online at www.gimborn.eu. Data Protection Officer We have appointed a Data Protection Officer. Philipp Herold www.mein-datenschutzbeauftragter.de Hafenstraße 1a 23568 Lübeck, Germany E-mail: datenschutz[at]gimborn.de Status: May 2021 Cookies Use of cookies Our website collects and stores information by using what are known as browser cookies. What are cookies? These are little text files that are stored on your computer and store specific settings and data for exchange with our system via your browser. In general, a cookie contains the name of the domain that sent the cookie data, as well as information about the cookie’s age and an alphanumeric identification code. Why do we use cookies? Cookies make it possible for our system to identify the user’s device and potentially to make preferences available immediately. A cookie is transmitted to the hard drive of the user’s computer as soon as a user accesses the platform. Cookies help us to improve our website and to offer you a better, more customised service. They let us recognise your computer or (mobile) end device if you return to our website and, as a result: save information about your preferred activities on the website and thus tailor our website to your individual interests accelerate the speed with which we process your enquiries. We use third-party services that help us to make the internet offering and website more interesting for you. When you visit the website, cookies from these partner companies (third-party providers) are also stored on your hard drive. These are cookies that are automatically erased after the specified time. Can I decide about the use of cookies? If you do not want us to store browser cookies on your device, you can adjust your browser’s settings so that they are not stored. Please note that in this case you may have only restricted use of our website, or not be able to use it at all. If you only want to accept our cookies, but not those of our service providers and partners, you can choose the ‘Block third-party cookies’ setting in your browser. We do not assume any responsibility for use of third-party cookies. Cookie-Status: Show Cookie-Settings GIMBORN Cats. Dogs. Love. GIMBORN Headquarter H. von Gimborn GmbH Albert-Einstein-Straße 6 46446 Emmerich am Rhein +49 2822-964-0 Data privacy Legal information GIMBORN ISO-Certificate Gimborn is an ISO-certified company. The standard ISO 9001 creates the foundation for a continual improvement process for the internal quality management system. Ⓒ H. von Gimborn GmbH