We are pleased to welcome you to our website and that you are interested in our company. It is important to us to protect your personal data. Personal data is all information relating to natural persons who are or can be identified on the basis of this information, whether personal or factual. The term personal data includes, for example, data such as surname, first name, address, telephone number, but nowadays the IP address also counts as personal data. We collect and process personal data on our website. This is subject to legal protection, which we adhere to. In the following points, we will provide you with information about data protection and tell you how we collect and process personal data. This processing is carried out in accordance with the EU General Data Protection Regulation, the Federal Data Protection Act 2018 and other national regulations.
CONTROLLER WITHIN THE MEANING OF ARTICLE 4(7) OF THE EU GDPR
G.RAU GmbH & Co. KG
Managing Director: Dr. Axel Pfrommer
Kaiser-Friedrich-Straße 7
DE - 75172 Pforzheim
info (at) g-rau.de
NAME AND CONTACT DETAILS OF THE DATA PROTECTION OFFICER
You can contact the person responsible for data protection in our company at any time:
VdE-Service GmbH
Sandro Berger
datenschutzbeauftragter@g-rau.de
RIGHTS OF DATA SUBJECTS
As a data subject, you have various rights under the EU General Data Protection Regulation, which you can of course also exercise with our company. Please contact us in this regard using the contact details above. You have the following rights as a data subject:
• Right to information
• Right to rectification
• Right to erasure (right to be forgotten)
• Right to restriction
• Right to object
• Right to data portability
You can also revoke any consent you have given us at any time using the contact details above.
You also have the right to lodge a complaint with the supervisory authority responsible for you. The supervisory authority responsible for you depends on the federal state in which you reside. You can find a list of the relevant supervisory authorities at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
DELETION / BLOCKING OF PERSONAL DATA
An important principle of the EU General Data Protection Regulation is data avoidance and data minimization. Our company adheres to these principles and we only store personal data for as long as is necessary for the purposes for which it was collected or in accordance with the statutory retention periods. Once a corresponding basis (contract, consent, legal regulation, etc.) no longer applies, we routinely delete or block this data.
SAFETY
G.RAU GmbH & Co. KG is aware of the importance of the security of the data it manages. We have therefore taken technical and organizational measures to protect the data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. These security measures are continuously updated in line with technological developments.
COLLECTION OF DATA WHEN VISITING OUR WEBSITE
When you visit our website, data is automatically collected by our server and the following data is stored in the log files of our system:
• Browser type and versioning
• Operating system used by the requestor
• IP address
• Date and time of the website request
• Domain name of the provider
Personal data will not be directly assigned to a specific user, which means that individual site visitors will not be identified. We collect this data based on our legitimate interest to further optimize the technology, to ensure the connection to our website, to ensure the availability of our web services and for other administrative purposes. If necessary, anonymized information is evaluated for statistical purposes, but this in turn does not allow any conclusions to be drawn about specific or identifiable persons.
(1) Contact form
You can contact us at any time using our contact form. In doing so, you give us your consent for the purpose of contacting you. A correct e-mail address or telephone number is required for this contact. Without this information, it is not possible for us to contact you. Further optional information may enable us to respond better to your request. If your request has been processed by us and there is no reason to continue processing this data, it will be deleted automatically.
(2) Newsletter
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose no longer applies. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.
Data stored by us for other purposes remains unaffected by this.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
(3) SSL encryption of the website
To protect the transmission of your data, we use appropriate encryption on our website (e.g. SSL) via HTTPS.
(4) HSTS - HTTP Strict Transport Security
HSTS is a security mechanism for HTTPS connections. The Bavarian data protection supervisory authority considers this security mechanism to be state of the art and we use this additional transmission security on our website to protect your data even more than normal HTTPS encryption.
COMMUNICATE WITH US BY EMAIL
If you contact us by email and you send us this email unencrypted, we cannot guarantee the data security of the transmission path to us. If you wish to send us data that requires protection, please send it to us in encrypted form only or send it by post.
REQUEST BY E-MAIL, TELEPHONE OR FAX
If you contact us by e-mail, telephone or fax, we will store and process your inquiry, including all personal data (name, inquiry), for the purpose of processing your request. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.
The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
EXTERNAL HOSTING
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time
Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.
We use the following hoster:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Deutschland
Tel.: +49 (0)9831 505-0*
Fax: +49 (0)9831 505-3
E-Mail: info@hetzner.com
CHANGES TO OUR PRIVACY POLICY
We reserve the right to amend our privacy policy at any time in order to keep it up to date with regard to our services. When you visit our website again, the current privacy policy will apply.
Pforzheim, 21.03.2024
DATA PROTECTION JOB APPLICATION MANAGEMENT