DE | EN Data protection declaration as of 23.10.2018 1. Data protection at a glance General information The protection of your personal data is of the utmost importance to our company. The processing of this data by us takes place strictly in accordance with the data protection laws. These are the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other legal regulations. In accordance with the GDPR, we are obliged to provide you with the following information concerning the processing of your data. Data recording on our website Who is responsible for the data recording on this website? The data processing on this website is carried out by the website operator. You can find the contact details of the website operator in the legal notice of this website. How do we record your data? On the one hand, your data is gathered when you notify us of this, for example by email or in the course of the performance of your orders. Other data is automatically recorded by our IT systems when you visit the website. This is primarily technical data (for example Internet browser, operating system or time the site was accessed). The recording of this data takes place automatically when you visit our website. What do we use your data for? When you send comments to us: You can send comments to us at any time. You can do this by telephone, letter, email, fax or personally. When you send us data during this process, the following applies: Personal data: Information which you provide to us voluntarily. Purpose of the processing: Dealing with your comment Legal basis: Article 6 Paragraph 1 Letter a) GDPR Data recipients: – Company management and internal departments – Bodies to which we forward your data on your request Retention period: Once the processing is complete, the data is archived. The data in the archive is deleted after 10 years. Business partners (customers, suppliers, service providers): Most of our service partners nominate one of their employees to Saalemühle Alsleben GmbH and Dresdener Mühle as a point of contact. The contact data of these points of contact is processed by us as follows: Personal data: – Name – Company name and address – Function, role – Telephone number, fax number – Email address Purpose of the processing: Agreements in relation to engaged services / deliveries Legal basis: Article 6 Paragraph 1 Letter f) GDPR Origin of the data: – Notification by the point of contact himself / herself – Notification by another contact person of the service provider / supplier Data recipients: – Company management and internal departments Retention period: Once the order has been completed, the data is archived. The data in the archive is deleted after 10 years. There is no obligation to transmit this data. The processing is not absolutely necessary for the service / delivery. However, without designated points of contact, the time and expense of concluding agreements would be disproportionately high. In addition, there would be a serious risk of misunderstandings. Therefore, there is a legitimate interest in this processing. Job applicants: You are welcome to send us your application by email. When you apply to us, we process the following data belonging to you: Personal data: Data which you send together with the application Purpose of the processing: Deciding the outcome of the application Legal basis: – Article 88 GDPR and §26 BDSG – Article 6 Paragraph 1 Letter a) GDPR (consent to longer retention of the documents) Data recipients: – Company management and internal departments Retention period: – In case of appointment: 10 years following the end of your employment with us – In case of rejection: 3 months following the rejection (unless you agree to longer retention period) The processing of the data is necessary in order to assess the application. It is not possible to enter into an employment contract without this data being provided. During this process, we observe the principles of data economy and data minimisation. Only the data which is necessary in order to perform our business relationship is processed. The data is not used for other purposes and is not made accessible to others for different types of use. We wish to point out that we will continue to save data of the type described above in the future, as this is absolutely necessary in order to carry out our business processes. Data which we no longer require and where no statutory requirements or obligations under commercial law to continue to retain this exist will be destroyed by us in accordance with data protection laws. What right do you have in relation to your data? You have the following rights in relation to this processing of your personal data: – Information concerning the data relating to your person which is being saved (Article 15 GDPR) – Rectification of incorrect data (Article 16 GDPR) – Erasure, should this be legally permitted (Article 17 GDPR) – Restriction of the processing (Article 18 GDPR) – Receipt of your data in a current, up-to-date and machine readable format (Article 20 GDPR) – Objection to the processing (Article 21 GDPR) – Complaint to a supervisory authority (Article 77 GDPR) Any processing is based on your consent (for example for the processing of a request, the retention of job applications for longer than 3 months). In these cases, you have the right to revoke your consent at any time with effect for the future. Analysis tools and tools of third party providers Only a so-called “session cookie” will be set. This is necessary for technical reasons. Once you leave our website, this is automatically deleted by your browser. No other cookies are used. Purpose of the processing: Operation of the website, evaluation of disruptions Legal basis: Article 6 Paragraph 1 Letter f) GDPR Data recipients: none Retention period: 3 months 2. General notice and mandatory information Data protection concept We take the protection of your personal data extremely seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations, as well as this data protection declaration. Your personal data is only saved and used by us in order to communicate with you and carry out the business transaction with you. During this process, we observe the principles of data economy and data minimisation. The data is not used for other purposes and is not made accessible to others for different types of use. Your data is protected by us against external and unauthorised access in the course of our technical and organisational measures. We use suitable technical and organisational security measures in order to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised third party access. Our security measures are constantly improved in accordance with technical developments. We wish to point out that data transfer via the Internet (for example email communication) can represent security risks. It is not possible to fully protect the data against third party access. Information concerning the controller The controller for the data processing on this website is: Saalemühle Alsleben GmbH, Bernburger Straße 35b, D-06425 Alsleben Tel. +49 (0) 34692 263 0, Fax +49 (0) 34692 263 50, E-Mail: info@saalemuehle.de Michael Gutting (board of directors) Data protection officer Anja Twietmeyer E-Mail: bds@saalemuehle.de Revocation of your consent to data processing Certain data processing procedures are only possible with your express consent. You can revoke consent which has already been issued at any time. The sending of an informal email to us suffices for this purpose. The lawfulness of the data processing which took place prior to the revocation remains unaffected by this. SSL and TLS encryption For security reasons and in order to safeguard the transfer of confidential content, for example orders or queries which you send to us as the site operator, this website uses SSL and/or TLS encryption. You can recognise an encrypted connection by the address line of the browser changing from “http://” to “https://” and from the lock symbol in your browser line. Should SSL and/or TLS encryption be activated, the data which you send to us cannot be read by third parties. Information, blocking, erasure Within the framework of the applicable statutory provisions, you have the right at any time to free-of-charge information concerning the personal data saved in relation to you, its origin and recipients and the purpose of the data processing and, if applicable, a right of rectification, blocking or erasure of the said data within a reasonable period of time. In this respect and should you have any other queries concerning data protection, you can get in touch with us via the address provided in the legal notice. Objecting to advertising emails The use of contact data published in the mandatory legal notice for the sending of advertising and information materials which have not been expressly requested is hereby being expressly objected to. The operators of the website expressly reserve the right to take legal action in case of the unsolicited sending of advertising information, for example by means of spam emails. 3. Data protection officer Data protection officer mandated by law We have appointed a data protection officer for our company. Anja Twietmeyer bds@saalemuehle.de 4. Data recording on our website Cookies Only a so-called “session cookie” will be set. This is necessary for technical reasons. Once you leave our website, this is automatically deleted by your browser. No other cookies are used. Purpose of the processing: Operation of the website, evaluation of disruptions Legal basis: Article 6 Paragraph 1 Letter f) GDPR Data recipients: none Retention period: 3 months Server logfiles The provider of the sites automatically gathers and saves information in so-called server logfiles which your browser transfers to us automatically. This information includes: browser type and version operating system used referrer URL host name of the accessing computer time of the server request IP address This data is not combined with other data sources. The basis for the data processing is Article 6 Paragraph 1 Letter b) GDPR, which permits the processing of data in order to fulfil a contract or pre-contractual measures. Contact form Should you send us queries via the contact form, the information which you provide in the contact form, including your contact data which you provide, will be saved by us for the purpose of processing the matter as well as in case of any follow up queries. We do not pass this information on without your consent. You can revoke consent at any time. The sending of an informal email to us suffices for this purpose. The lawfulness of the data processing procedures which took place prior to the revocation remains unaffected by this. 5. Plugins and tools Leadinfo We use the lead generation service provided by Leadinfo B.V., Rotterdam, The Netherlands, which recognizes visits of companies to our website based on IP-addresses and shows us related publicly available information, such as company names or addresses. In addition, Leadinfo places two first-party cookies for providing transparency on how our visitors use our website and the tool processes domains from provided form inputs (e.g. “leadinfo.com”) to correlate IP addresses with companies and to enhance its services. For additional information, please visit www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In the event of an opt-out, your data will no longer be used by Leadinfo. Google Web Fonts In order to display fonts in a standardised manner, this site uses so-called web fonts which are provided by Google. When accessing a site, your browser loads the required web fonts into your browser cache, in order to correctly display texts and fonts. For this purpose, it is necessary for the browser used by you to establish a connection to the servers of Google. By means of this, Google is informed that our website was accessed via your IP address. The use of Google Web Fonts takes place in the interest of a standardised and attractive display of our online services. This represents a legitimate interest in accordance with Article 6 Paragraph 1 Letter f) GDPR. Should your browser not support web fonts, a standard font is used by your computer. Google Maps This site uses the map function Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In order to use the functions of Google Maps, it is necessary to save your IP address. This information is generally sent to a Google server in the USA and saved there. The provider of this site has no control over this data transfer. The use of Google Maps takes place in the interest of an attractive display of our website and in order to find the locations stated on the website more easily. This represents a legitimate interest in accordance with Article 6 Paragraph 1 Letter f) GDPR. 6. Social Media Instagram Feed: We use an Instagram feed plugin from the company Smash Balloon (LLC, P.O. Box 126 Long Lake, MN 55356, USA) to display social media content on our website. As a result, our website makes requests to Instagram’s servers to obtain the data to populate the feeds and display images and videos. These requests make your IP address visible to Instagram, which may use it in accordance with its privacy policy: https://help.instagram.com/519522125107875 7. Visits to our premises Our operating premises and particularly sensitive locations in relation to product security are subject to video monitoring. Other work locations are not monitored. Persons from outside the company are only permitted to visit the monitored areas. Saalemühle Alsleben GmbH and Dresdener Mühle have a legitimate interest (GDPR Article 6 Paragraph 1 Letter f) in following the company rules and regulations and defending against negative effects on product security. The video monitoring is a required tool for observing sensitive areas. Imprint Disclaimer Data protection declaration Instagram Harvest report (German) Unified Contract Terms (German) D&P Certificates