Choose your language :

1) Information regarding Collection of Personal Data and Contact Details of the Data Controller
 

1.1 Thank you for visiting our website, your interest in noltewerk and its products. Please find below information regarding the use of personal data when using our website. Personal data is any data with which you may be personally identified.
 

1.2 The Data Controller for data processing on this website - as defined by the General Data Protection Regulation (GDPR) - is noltewerk GmbH & Co. KG, Mergenthalerstr. 15, 48268 Greven, Germany, Phone: +49 (2571) 16-0, Fax: +49 (2571) 16-402, e-mail: info@noltewerk.de. Data Controller means the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
 

1.3 The Data Controller has appointed a Data Protection Officer, who may be contacted as follows: ‘Mr Matthias Brüggemeier, Mergenthalerstr. 15, 48268 Greven, Phone.: +49 (2571) 16-270, e-mail: datenschutz@noltewerk.de‘
 

1.4 This website uses SSL or TLS encryption for reasons of security and to protect the transmission of personal data as well as other confidential content (e.g. orders or enquiries to the person responsible). An encrypted connection can be recognized in the browser bar by the string ‘https://‘ and the symbol of a lock.

2) Data Collection when Visiting Our Website
 

The only personal data collected when using the website for informational purposes, without registration or other provision of any information for example, is such data the browser transmits to the server (so-called‘Server Logfiles). When accessing our website, the following data - which is technically required to display the website and guarantee its stability and security - is collected:

  • visited website

  • date and time at time of access

  • volume of data sent in bytes

  • source/reference from where you got to the page

  • browser used

  • operating system used

  • IP address used (If applicable: anonymized)

Processing is carried out pursuant Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving stability and functionality of our website. Data will not be passed on or used in any other way. We reserve the right to check such server logfiles if specific evidence of illegal use is becoming apparent at a later stage.

3) Cookies
 

In order to make visiting our website an experience and to enable use of certain functions, we use so-called cookies on various pages. Cookies are small text files that are stored on your terminal device. Some of the cookies used are deleted again after the browser session has ended, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our affiliates (third-party cookies) to recognize your browser when you visit again (persistent cookies). If cookies are set, they collect and process certain user information such as data about your browser and location and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.
 

If personal data of individual cookies implemented by us is also processed, the processing is carried out pursuant Art. 6 (1) lit. b GDPR either for the performance of contract or pursuant Art. 6 (1) lit. f GDPR to protect our legitimate interests in optimum functionality of the website as well as customer-friendly and effective design when visiting the page.


We may work with advertising partners who provide support in making our website more of an experience for you. For this purpose, cookies from affiliates are also stored on your hard drive when you visit our website (third-party cookies). If we co-operate with aforementioned advertising partners, we will provide individual and separate information in subsequent paragraphs about the use of such cookies and the scope of information collected in each case.


Please note that you may configure your internet browser to receive a warning before a cookie is stored and store such cookies on a case-by-case basis, to exclude acceptance of cookies in specific cases or in general. Each browser differs in the way it manages cookie settings. Such is described in the help menu of each browser, which explains how you may change your cookie settings. For help menu of respective browsers see the following links:


Internet Explorer: windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: support.google.com/chrome/bin/answer.py
Safari: support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: help.opera.com/Windows/10.20/de/cookies.html

 

Please note that not accepting cookies, may limit the functionality of our website.

4) Contacting
 

When contacting us (e.g. by contact form or e-mail) personal data is collected. Which data is collected when using a contact form is evident from respective contact form. This data is stored and used exclusively for the purpose of answering the request or contacting you as well as any technical administration relating thereto. Legal basis for processing this data is our legitimate interest in responding to your request pursuant Art. 6 (1) lit. f GDPR. If your contact aims at concluding a contract, additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after your request has been processed. This is the case when it is evident from the circumstances that the issue in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

5) Use of Customer Data for Direct Advertising
 

5.1 Subscription to Our e-mail Newsletter
 

If you subscribe to our newsletter, we will regularly send information about our offers by e-mail. The only information mandatory for transmission of the newsletter is your e-mail address. Provision of further data is voluntary and used to address you personally. When sending the newsletter, we use the so-called double opt-in procedure. This procedure entails that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you confirmation by e-mail asking you to confirm in turn, by clicking on a corresponding link, that you wish to receive the newsletter in future.
 

By activating the confirmation link, you consent to use of your personal data in accordance with Art. 6 (1) lit. a GDPR. When registering for the newsletter, noltewerk stores your IP address entered by your internet service provider (ISP) as well as date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. Data collected when registering for the newsletter will be used exclusively for the purpose of promotional approach by newsletter. You may unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the data controller named at the beginning. After unsubscribing, your e-mail address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data, or we reserve the right to use your data in a way extending beyond but permitted by law about which we provide information in this declaration.
 

5.2 Newsletter Dispatch by MailChimp

The e-mail newsletters by noltewerk are sent via the technical service provider ‘The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA‘ (http://www.mailchimp.com/), to whom the data provided upon registering for the newsletter is passed. Disclosure is made in accordance with Art. 6 (1) lit. f GDPR and serves legitimate interest by noltewerk in using a newsletter system that is promotionally effective, secure and user-friendly. Please note: Your data is generally transmitted to and stored on a MailChimp server in the USA.

MailChimp uses such information to send and statistically evaluate newsletters on our behalf. For evaluation purposes, e-mails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This makes it possible to track whether a newsletter message has been opened and which links, if any, have been clicked on. With the help of such web beacons, Mailchimp automatically creates general, non-personal statistics about the response behaviour to newsletter campaigns. On the basis of our legitimate interest in statistically evaluating newsletter campaigns for the improvement of advertising communication and better align content to recipient interests, web beacons also collect and utilize data of respective newsletter recipient (mail address, time of retrieval, IP address, browser type and operating system) in accordance with Art. 6 (1) lit f GDPR. Such data allows for individual conclusion to be drawn about newsletter recipient and is processed by Mailchimp for automated creation of statistics that indicate whether a specific recipient has opened a newsletter message.

If you wish to deactivate data analysis for statistical evaluation purposes, you need to unsubscribe from the newsletter.
MailChimp may also use such data in accordance with Art. 6 (1) lit. f GDPR on the basis of its own legitimate interest in designing and improving service in line with demand, as well as for market research purposes, for example to determine which countries recipients come from. However, MailChimp does not use data of our newsletter recipients to contact to them itself or to pass it on to third parties.

To protect your data in the USA, we have signed a ‘Data Processing Agreement‘ with MailChimp based on the Standard Contractual Clauses of the European Commission to enable transfer of your personal data to MailChimp.

This Data Processing Agreement can be viewed at the following Internet address  mailchimp.com/legal/data-processing-addendum/

MailChimp's privacy policy is provided here mailchimp.com/legal/privacy/

6) Web Analysis Services, Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google‘). Google (Universal) Analytics uses so-called ‘cookies‘. Cookies are text files that are stored on your terminal device and allows analysis of how you used the website. The information generated by the cookie in regards to how you used this website (including your IP address) is generally transmitted to and stored on a Google server. This may also result in a transmission to the servers of Google LLC. in the USA.

This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and such preventing information being directly traceable to a specific user. By such extension, your IP address is shortened by Google inside the member states of the European Union or in other treaty states of the Agreement of the European Economic area. Your full IP-Address is only transmitted in full to servers in the USA by Google LLC. as an exception and shortened there. Google uses this information on our behalf to evaluate user behaviour, compile activity reports for the site and to provide further services to the operator of the site in regards to use of website and internet. The IP-Address transmitted by your browser within the scope of Google (Universal) Analytics is not merged by Google with any other Data.
Any and all processing described above, in particular setting of Google Analytics cookies for retrieving information on the terminal device used, will only be carried out if you have provided us with express consent to do so pursuant Art. 6 (1) lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to the site.
You may revoke given consent with future effect at any time. To exercise revocation, please deactivate this service in the ‘cookie consent tool‘ provided on the website. We have signed an Order Processing Agreement with Google for the use of Google Analytics, which obligates Google to protect data of visitors of our website and not to pass such on to third parties. For the transfer of data from the EU to the USA, Google refers to so-called Standard Data Protection Clauses of the European Commission, which are supposed to ensure compliance with the European level of data protection in the USA.

For further information on Google (Universal) Analytics see: policies.google.com/privacy

7) Tools and Miscellaneous
 

7.1Applications regarding job ads by e-mail
 

In a separate section of our website we advertise current vacancies, to which interested parties may apply by e-mail to contact address provided.


Inclusion in the application process requires applicants to provide noltewerk with an application by e-mail containing any and all personal data necessary for valid and informed assessment and selection. Information required includes general information about the person (name, address, telephone or electronic contact details) as well as performance-specific evidence of the qualifications required for a position. Where necessary, health-related information may also be required. Such are to be given special consideration under labour and social law in the interest of social protection in the person of the applicant.
 

Respective job ad states all elements an application has to include in order to be considered and the form in which these are to be submitted by e-mail.

 

After receipt of application by e-mail address specified, applicant data will be stored by noltewerk and evaluated exclusively for the purpose of processing application. For any question arising during application processing, we either use, at our discretion, the e-mail address or phone number provided by the applicant with respective application.
 

Legal basis for such processing, including communication for reason of queries, is Art. 6 (1) lit. b GDPR in conjunction with Art. 26 (1) of the German Federal Data Protection Act (BDSG), in the sense of the application process being considered to be the initiation of an employment contract.
 

Insofar as special categories of personal data as laid out in Art. 9 (1) GDPR (e.g. health data such as information about severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 (2) lit. b. GDPR so that we may exercise the rights arising from labour law and social security and social protection law and fulfil our obligations in this regard.
 

Cumulatively or alternatively, the processing of the special categories of data may also be based on Art. 9 (1) lit. h GDPR if it is carried out for the purposes of preventive health care or occupational medicine, for the assessment of the applicant's fitness for work, for medical diagnosis, care or treatment in the health or social sector or for the management of systems and services in the health or social sector.
 

If the applicant is not selected during the course of the evaluation described above or an applicant withdraws application prematurely, data transmitted by e-mail as well as all electronic correspondence including the original application e-mail will be deleted following a corresponding notification after six months at the latest. This period is determined on the basis of legitimate interest in being able to answer any follow-up questions about the application, and, where appropriate, to meet our obligations to provide evidence under Equal Treatment of Applicants Regulations.
 

In the event of the application being successful, data provided will be processed on the basis of Art. 6 (1) lit. b GDPR in conjunction with Art. 26 (1) German Federal Data Protection Act for the purpose of implementation of employment relationship.
 

7.2 Online applications by form
 

On our website, we offer job applicants the opportunity to apply online by corresponding form. Inclusion in the application process requires applicants to provide noltewerk with an application by form provided containing any and all personal data necessary for valid and informed assessment and selection.
 

Information required includes general information about the person (name, address, telephone or electronic contact details) as well as performance-specific evidence of the qualifications required for a position. Where necessary, health-related information may also be required. Such are to be given special consideration under labour and social law in the interest of social protection in the person of the applicant.
 

By submitting the form, applicant data is encrypted and transmitted according to state of technology and will be stored by noltewerk and evaluated exclusively for the purpose of processing application. Legal basis for such processing is Art. 6 (1) lit. b GDPR in conjunction with Art. 26 (1) of the German Federal Data Protection Act (BDSG), in the sense of the application process being considered to be the initiation of an employment contract.
 

Insofar as special categories of personal data as laid out in Art. 9 (1) GDPR (e.g. health data such as information about severely disabled status) are requested from applicants as part of the application process, the processing is carried out in accordance with Art. 9 (2) lit. b. GDPR so that we may exercise the rights arising from labour law and social security and social protection law and fulfil our obligations in this regard.
 

Cumulatively or alternatively, the processing of the special categories of data may also be based on Art. 9 (1) lit. h GDPR if it is carried out for the purposes of preventive health care or occupational medicine, for the assessment of the applicant's fitness for work, for medical diagnosis, care or treatment in the health or social sector or for the management of systems and services in the health or social sector.
 

If the applicant is not selected during the course of the evaluation described above or an applicant withdraws application prematurely, data transmitted by means of a form including the original application e-mail will be deleted after corresponding notification after 6 months at the latest. This period is determined on the basis of legitimate interest in being able to answer any follow-up questions about the application, and, where appropriate, to meet our obligations to provide evidence under Equal Treatment of Applicants Regulations.
 

In the event of the application being successful, data provided will be processed on the basis of Art. 6 (1) lit. b GDPR in conjunction with Art. 26 (1) German Federal Data Protection Act for the purpose of implementation of employment relationship.

8) Rights of Data Subject
 

8.1 Applicable data protection law grants you as a data subject comprehensive rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, of which we would like to inform you below.
 

  • Right to Information pursuant Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the processing purposes, categories of personal data processed, recipients or categories of recipients to whom your data have been or will be disclosed, planned storage period or criteria for determining the storage period, existence of a right to rectification, deletion, restriction of processing, objection to processing, complaints to a supervisory authority, origin of your data if we did not collect it from you, existence of automated decision-making including profiling and, if applicable, significant information about the logic involved, the scope, and intended effects of such processing concerning you, as well as your right to be informed about which guarantees exist pursuant Art. 46 GDPR if your data is transferred to third countries;
     

  • Right to Rectification pursuant Art. 16 GDPR: You have the right to have any inaccurate personal data rectified without delay and/or to have any incomplete data which we store completed;
     

  • Right to Deletion pursuant Art. 17 GDPR: You have the right to demand deletion of your personal data if requirements of Art. 17 (1) GDPR are met. However, such right shall not apply in particular where the processing is necessary to exercise the right to freedom of expression and information, for compliance with any legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
     

  • Right to Restriction of processing pursuant Art. 18 GDPR: You have the right to demand restriction of processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse the deletion of your data due to unlawful data processing and instead demand restriction of processing of your data, if you require your data for the assertion, exercise or defence of legal claims after we no longer need this data when the purpose has been achieved or if you have lodged an objection for reasons relating to your particular situation as long as it has not yet been determined whether our legitimate reasons prevail;
     

  • Right to Information pursuant Art. 19 GDPR: If you have asserted the right to rectification, deletion or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom your personal data has been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about such recipients.
     

  • Right to Data Portability pursuant Art. 20 GDPR: You have the right to receive personal data you have provided us with in a structured, commonly used, and machine-readable format or to demand that it be transferred to another controller, insofar as this is technically feasible;
     

  • Right to Revocation of Consent given pursuant Art. 7 (3) GDPR: You have the right to revoke consent to the processing of data at any time with effect for the future. In case of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. Revocation of consent does not affect the lawfulness of processing carried out on the basis of the consent given up to the time of revocation;
     

  • Right to Lodge a Complaint pursuant Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if in your opinion the processing of your personal data infringes the GDPR.
     

8.2 RIGHT OF OBJECTION
 

IF WE PROCESS YOUR PERSONAL DATA WITHIN THE SCOPE OF A CONSIDERATION OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT OF OBJECTION TO SUCH PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE AT ANY TIME. IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE REASONS FOR SUCH PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.
 

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT ADVERTISING PURPOSES, YOU SHALL HAVE THE RIGHT TO OBJECT TO PROCESSING OF SUCH PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING IN SO FAR AS IT IS CONNECTED WITH SUCH DIRECT MARKETING AT ANY TIME. YOU MAY EXERCISE SUCH OBJECTION AS DESCRIBED ABOVE.
 

IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

9) Duration of Storage of Personal Data
 

The duration of the storage of personal data is determined on the basis of the respective legal basis, purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).
 

When processing personal data on the basis of explicit consent pursuant Art. 6 (1) lit. a GDPR, such data is stored until data subject revokes consent.
 

If there are statutory retention periods for data that is processed within the scope of legal transactional or quasi-legal transactional obligations on the basis of Art. 6 (1) lit. b GDPR, such data will be routinely deleted after expiry of retention periods, provided that it is no longer required for the fulfilment or initiation of contract and/or no justified interest in continued storage on our part exists.
 

When processing personal data on the basis of Art. 6 (1) lit. f GDPR, such data is stored until the data subject exercises the right of objection pursuant Art. 21 (1) GDPR unless we can prove compelling legitimate grounds for the processing which outweigh interests, rights and freedoms of the data subject or processing serves assertion, exercise or defence of legitimate claims.
 

When processing personal data on the basis of direct marketing pursuant Art. 6 (1) lit. a GDPR, such data is stored until data subject revokes consent pursuant Art. 21 (2) GDPR.
 

Unless otherwise indicated in any other information in this statement on specific processing situations, or else stored personal data is deleted when such data is no longer necessary for the purposes for which it was collected or processed in any other way.

Data Protection Declaration.

1. Data Protection at a Glance

General information

The following notes provide a simple overview of what happens to personal data when you visit this website. Personal data is any data with which you may be personally identified. For detailed information on the subject of data protection, please refer to our Data Protection Declaration below.
 

Data Collection on this Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. For contact details of the website operators see ‘Information on Responsible Body’ in this Data Protection Declaration.
 

How is your data collected?

Data is collected when you provide us with respective details. This may be data, for example, that you enter in a contact form.

Other data is collected by our IT systems automatically or with your consent when you visit the website. This is predominantly technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.
 

What is your data used for?

Part of the data is collected to ensure faultless provision of the website. Other data may be used to analyse your behaviour as a user.
 

What are your rights regarding your data?

You may request information about your personal data stored, its origin and recipient, and purpose of data processing at any time, and free of charge. You also have a right to demand correction or deletion of this data. If you have consented to data processing, you can revoke given consent with future effect at any time You also have the right, under certain circumstances, to demand restriction of processing of personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

For further information in regards to personal data feel free to contact us at any time.
 

Analysis Tools and Tools by Third-Parties

When visiting this website, your browsing habits may be statistically analysed. This is primarily done by use of so-called analysis programmes.

For detailed information about these analysis programmes see the following Data Protection Declaration.

2. Hosting

External Hosting

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website access and other data generated via a website.

The host is used for the purpose of contract fulfilment vis-à-vis potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of secure, fast and efficient provision of our online offering by a professional provider (Art. 6 (1) lit. f GDPR). If consent to the storage has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and Art 25 (1) TTDSG = Telekommunikation-Telemedien-Datenschutz-Gesetz [Telecommunications - Telemedia Data Protection Act]; insofar as the consent includes storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) in line with TTDSG. Consent may be revoked at any time.

Our host will only process your data to the extent necessary for the fulfilment of its service obligations and will follow our instructions with regard to this data.

Our host is:

ITM design GmbH, Hauptstraße 43, 48712 Gescher
 

Order Processing Agreement

We have signed an Order Processing Agreement with above-mentioned provider. This agreement is required by data protection regulations, which ensures that named company only processes personal data collected on our website in accordance with our instructions and in compliance with GDPR.

 

3. General and Mandatory Information

Data Protection

The provider of this site is committed to protecting the security of your personal data. We treat any personal data as confidential and according to statutory Data Protection Provisions as well as this Data Protection Declaration

When you use this website, various personal data is collected. Personal data is data with which you may be personally identified. This Data Protection Declaration explains what data is collected and what it is used for. It also explains how and for what purpose this is done.

Please note that data transfer on the internet such as communication by e-mail may be subject to security breaches. Complete protection of data from access by third parties is not possible.
 

Note on Responsible Body

The data controller for this website is

noltewerk GmbH & Co. KG
Mergenthalerstraße 15
48268 Greven, Germany
Germany

Phone: +49 (2571) 16-0
E-mail: info@noltewerk.de

Data Controller means the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data such as names, e-mail addresses, etc.
 

Storage Period

Unless a more specific storage period is stated within this data protection declaration, we will continue to store your personal data until the purpose for processing such data no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once such reasons no longer apply.
 

General Information on the Legal Basis for Data Processing on this Website

If you have consented to data processing, we process your personal data pursuant Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR if special categories of data are processed in accordance with Art. 9 (1) GDPR. Insofar as you have consented to storage of cookies or access to information on your terminal device (e.g. device fingerprinting) data processing is additionally carried out pursuant Art. 25 (1) TTDSG. Consent may be revoked at any time. If your data is required contractual performance or implementation of pre-contractual measures, we process your data pursuant Art. 6 (1) lit. b GDPR. In addition, we process your data if necessary for the fulfilment of a legal obligation pursuant Art. 6 (1) lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant Art. 6 (1) lit. f GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this data protection declaration.
 

Data Protection Officer

We have appointed a Data Protection Officer for our company.

Mr Matthias Brüggemeier, Mergenthalerstr. 15, 48268 Greven, Germany

Phone: +49 (2571)/16-270
E-mail: datenschutz@noltewerk.de
 

Note on Data Transfer to the USA and Other Third Countries

Among other things, we use tools from companies located in the USA or other third countries that are, according to data protection law, non-safe. If such tools are in operation, your personal data may be transferred to and processed in such third countries. It should be noted that in these countries a level of data protection comparable to the level in the EU cannot be guaranteed. For example, companies in the US are obligated to provide personal data to security authorities without you as a data subject being able to take legal action against this. Therefore, it may be possible that US authorities (e.g. intelligence services) process, evaluate and permanently store your data which is stored on servers in the US for surveillance purposes. We have no influence over such processing operations.
 

Revocation of Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You may revoke given consent at any time. Lawfulness of data processing carried out until revocation remains unaffected by the revocation.
 

Right of Objection to the Collection of Data in specific cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS CARRIED OUT PURSUANT ART. 6 (1) LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS RELATED TO YOUR PARTICULAR SITUATION INCLUDING PROFILING BASED ON THOSE PROVISIONS AT ANY TIME. RESPECTIVE LEGAL BASIS ON WHICH PROCESSING TAKES PLACE CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT ART. 21 (1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES; YOU SHALL HAVE THE RIGHT TO OBJECT TO PROCESSING OF SUCH PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING; INCLUDING PROFILING; INSOFAR AS IT IS CONNECTED TO SUCH DIRECT MARKETING AT ANY TIME. IF YOU OBJECT TO PROCESSING FOR PURPOSES OF DIRECT MARKETING, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR SUCH PURPOSES (OBJECTION PURSUANT ART. 21 (2) GDPR).
 

Right of Appeal to Competent Supervisory Authority

In case of breaches of the GDPR, data subjects shall have a Right of Appeal to a supervisory authority, in particular in the Member State of their regular residence, place of work or the place of alleged breach. The right of appeal exists irrespective of any other administrative or judicial remedy.
 

Right to Data Portability

You have the right to request provision of data - that we process automatically based on your consent or contractual performance - to be issued to you or a third party in a common, machine-readable format. If you request direct transfer of data to another controller, this will only be done as far as technically feasible.
 

SSL or TLS Encryption

This website uses SSL or TLS encryption for reasons of security and to protect the transmission of confidential content such as orders or enquiries to us as website operator. An encrypted connection can be recognized in the browser bar when the string changes from ‘http://‘ to ‘https://‘ and the symbol of a lock.

If SSL or TLS encryption is activated, data transmit to us cannot be read by third parties.
 

Disclosure, Deletion, Correction

Within applicable statutory provisions, you may request information about your personally identifiable data stored, its origin and recipient, and purpose of data processing at any time and free of charge. You may, where applicable, also have the right to have such data deleted and corrected. For further information in regards to personal data feel free to contact us at any time.
 

Right to Restriction of Processing

You have the right to demand restriction of processing of your personal data. To exercise such right please contact us at any time. Right to Restriction of Processing exists in the following cases:

  • If the accuracy of personal data held by us is disputed, we will usually need time to verify. For the duration of verification, you have the right to demand restriction of processing of your personal data.
  • If processing of your personal data was/is unlawful, you may demand the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to demand restriction of processing of your personal data instead of deletion.
  • If you have lodged an objection pursuant Art. 21 (1) GDPR, your interests and ours must be considered. As long as it has not yet been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data.

If processing of your personal data has been restricted, such personal data shall - besides its storage - not be processed, except with the consent of the data subject or for the assertion, exercise or defence of legal claims or the protection of rights of another natural or legal person or reasons of substantial public interest of the European Union or a Member State.

4. Data Collection on this Website

Cookies

Our internet pages use so-called cookies. Cookies are small text files and do not cause damage to your terminal device. Such are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of a session. Permanent cookies remain stored on your terminal device until they are manually deleted or until they are automatically deleted by your web browser.

In some cases, cookies by third-party companies (third-party cookies) may also be stored on your terminal device when you enter our site. These enable us or you to make use of certain services of third-party company (e.g. cookies for processing payment services).

Cookies have several functions. Many cookies are required for technical reasons, as certain website functions would not work without them (e.g. the shopping cart or the display of videos). Other cookies are used to analyse user behaviour or to display adverts.

Cookies necessary to carry out electronic communication processes or to provide certain functions that you have requested (e.g. the shopping cart) or to optimize the website (e.g. cookies to measure web audience) (necessary cookies) are stored pursuant Art. 6 (1) lit. f GDPR, unless any other legal basis is stated. The website operator has a legitimate interest in storing necessary cookies for technically error-free and optimum provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of such consent (Art. 6 (1) lit. a GDPR and Art 25 (1) TTDSG = Telekommunikation-Telemedien-Datenschutz-Gesetz [Telecommunications - Telemedia Data Protection Act]; consent can be revoked at any time.

If you do not wish to receive cookies, you can configure your Internet browser to receive a warning before a cookie is stored and store such cookies on a case-by-case basis, to exclude acceptance of cookies in specific cases or in general or activate automatic deletion of cookies upon closing the browser. Deactivating cookies may limit the functionality of the website.

If cookies are used by third-party companies or for analysis purposes, we will provide separate information within the scope of this Data Protection Declaration and, if necessary, request your consent.
 

Consent by Usercentrics

This website uses the consent technology by Usercentrics to obtain your consent to the storage of certain cookies on your terminal device or the use of certain technologies and to document such in accordance with data protection compliance. Provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, website: https://usercentrics.com/de/ (hereinafter ‘Usercentrics‘).

When you enter our website, the following personal data is transferred to Usercentrics:

  • your consent(s) or revocation of consent(s)
  • your IP address
  • information about your browser
  • information about your device
  • time when you visited the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to attribute consent granted or revoked to you. Data collected in this manner is stored until you request for its deletion, you delete cookies by Usercentrics yourself or if purpose for storing such data no longer exists. Mandatory statutory retention periods remain unaffected.

Usercentrics is used to obtain consent as required by law for the use of certain technologies. Legal basis: Art. 6 (1) lit. b GDPR.
 

Order Processing Agreement

We have signed an Order Processing Agreement with above-mentioned provider. This agreement is required by data protection regulations, which ensures that named company only processes personal data collected on our website in accordance with our instructions and in compliance with GDPR.
 

Server-Log-Files

The provider of the website automatically collects and saves information in so-called server log-files, which are made available to us by your browser. This is data such as

  • browser type and browser version
  • operating system used
  • referrer URL
  • host name of accessing computer
  • time of server inquiry
  • IP address

Consolidation of this data with other data sources is not undertaken.

The data is collected based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in technically error-free and optimum provision of its website. For this reason server logfiles have to be recorded.
 

Contact form

In case of enquiry by contact form, the information provided on the form, including contact data, is stored for the purpose of processing the enquiry and in case of further questions. Such data is not passed on without your consent.

Processing of such data is based on Art. 6 (1) lit. b GDPR, insofar as your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing takes place based on our legitimate interest in effectively handling enquiries addressed to us (Art. 6 (1) lit. f GDPR) or your consent (Art. 6 (1) lit. a GDPR) if such has been requested.

Data entered in the contact form will be stored by us until you request its deletion, revoke consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory statutory provisions - in particular, retention periods - remain unaffected.
 

Request by E-mail, Phone or Fax

If you contact us by e-mail, telephone or fax, your enquiry including all personal data (name, enquiry) resulting therefrom will be stored and processed by us for the purpose of processing your request. Such data is not passed on without your consent.

Processing of such data is based on Art. 6 (1) lit. b GDPR, insofar as your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing takes place based on our legitimate interest in effectively handling enquiries addressed to us (Art. 6 (1) lit. f GDPR) or your consent (Art. 6 (1) lit. a GDPR) if such has been requested.

Data provided by contact enquiry will be stored by us until you request its deletion, revoke consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

5. Social media

Social Media Plugins with Shariff

Social media plugins such as Facebook, Twitter, Instagram, Pinterest, XING, LinkedIn, Tumblr are used on this website.

These plugins can usually be recognized by respective social media logos. To ensure data protection on this website, we only use such plugins along with the so-called ‘Shariff‘ solution. This application prevents the plugins integrated on this website from transmitting data to respective provider when you first enter the page.

Only when you activate respective plugin by clicking on the associated button will a direct connection to the provider's server be established (consent). As soon as you activate the plugin, respective provider receives the information that you have visited this website along with your IP address. If you are logged into your respective social media account (e.g. Facebook) at the same time, particular provider can attribute your visit to this website to your user account.

Activating the plugin constitutes consent within the scope of Art. 6 (1) lit. a GDPR and Art. 25 (1) TTDSG. You may revoke given consent with future effect at any time.

 

Facebook Plugins (Like & Share Button)

Plugins by the social network Facebook are integral part of this website. Provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, data collected is also transferred to the USA and other third countries.

Facebook plugins are recognizable by the Facebook logo or the ‘Like‘ button on this website. For an overview of the Facebook plugins see: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When visiting this website, a direct connection is by the plugin is established between your browser and the Facebook server. Facebook thereby receives the information that you have visited this website along with your IP address. If you click the Facebook ‘Like‘ button whilst logged into your Facebook account, you can link content of this website on your Facebook profile. This allows Facebook to attribute your visit to this website with your user account. Please note that we, as the provider of the pages, have no knowledge of the content of data transmitted or its use by Facebook. For more information, please see Facebook's privacy policy: https://de-de.facebook.com/privacy/explanation.

If you do not wish for Facebook to be able to attribute your visit to this website with your Facebook user account, please log out of your Facebook user account.

Facebook plugins are used pursuant Art. 6 (1) lit. f GDPR. The operator of this website has a legitimate interest in the greatest possible visibility on social media. If consent to the storage has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and Art 25 (1) TTDSG = Telekommunikation-Telemedien-Datenschutz-Gesetz [Telecommunications - Telemedia Data Protection Act]; insofar as the consent includes storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) in line with TTDSG. Consent may be revoked at any time.

Insofar as personal data is collected by means of the tool described here on our website and transmitted to Facebook, Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland and ourselves are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is exclusively limited to the collection of data and its transfer to Facebook. Processing by Facebook occurring after transmission is not part of such joint responsibility. Joint obligations were set out in a joint processing agreement. For the text of the agreement see https://www.facebook.com/legal/controller_addendum. In accordance with this agreement, we are responsible for providing privacy information when using the Facebook tool and for implementing the tool on our website in a manner required by data protection law. Facebook is responsible for the data security of Facebook products. You may assert rights as data subject (e.g. request for information) regarding data processed by Facebook directly with Facebook. If you assert rights as data subject with us, we are obligated to refer such to Facebook.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. For details see https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

 

Instagram Plugin

Functions by Instagram are integral part of this website. These functions are provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If you click the Instagram ‘Like‘ button whilst logged into your Instagram account, you can link content of this website on your Instagram profile. This allows Instagram to attribute your visit to this website with your user account. Please note that we, as the provider of the pages, have no knowledge of the content of data transmitted or its use by Instagram.

Storage and analysis of such data is based on Art. 6 (1) lit. f GDPR. The operator of this website has a legitimate interest in the greatest possible visibility on social media. If consent to the storage has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and Art 25 (1) TTDSG = Telekommunikation-Telemedien-Datenschutz-Gesetz [Telecommunications - Telemedia Data Protection Act]; insofar as the consent includes storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) in line with TTDSG. Consent may be revoked at any time.

Insofar as personal data is collected by means of the tool described here on our website and transmitted to Facebook and Instagram respectively, Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland and ourselves are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is exclusively limited to the collection of data and its transfer to Facebook and Instagram, respectively. Processing by Facebook and Instagram respectively occurring after transmission is not part of joint responsibility. Joint obligations were set out in a joint processing agreement. For the text of the agreement see https://www.facebook.com/legal/controller_addendum. In accordance with this agreement, we are responsible for providing privacy information when using the Facebook and Instagram tool respectively and for implementing the tool on our website in a manner required by data protection law. Facebook is responsible for the data security of Facebook and Instagram products. You may assert rights as data subject (e.g. request for information) regarding data processed by Facebook and Instagram respectively directly with Facebook. If you assert rights as data subject with us, we are obligated to refer such to Facebook.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. For details see https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

For more information, please see Instagram's privacy policy: https://instagram.com/about/legal/privacy/.

6. Analysis Tools and Advertising

Google Analytics

This website uses Google Analytics. Provider is Google Ireland Limited (‘Google‘), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse behaviour of website visitors. In doing so, the website operator obtains various usage data, such as  page views, dwell time, operating systems used and origin of users. Such data is summarized in a user ID and assigned to respective terminal device of the website visitor.

In addition, Google Analytics allows us to record, among other things, mouse and scroll movements as well as clicks. Furthermore, Google Analytics uses various modelling approaches to augment data sets collected and use machine learning technologies in data analysis.

Google Analytics uses technologies that enable recognition of users for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google in regards to how this website was used is generally transmitted to and stored on a Google server in the USA.

Use of such analysis-tools is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimize both its website and its advertising. If consent to the storage has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and Art 25 (1) TTDSG = Telekommunikation-Telemedien-Datenschutz-Gesetz [Telecommunications - Telemedia Data Protection Act]; insofar as the consent includes storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) in line with TTDSG. Consent may be revoked at any time.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. For details see https://privacy.google.com/businesses/controllerterms/mccs/.
 

Browser Plugin

You may prevent compilation and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de .
 

Order Processing Agreement

We have signed an Order Processing Agreement with Google and fully implement the strict requirements by German data protection authorities when using Google Analytics.
 

Storage Period

Data at user and event level stored by Google which is linked to cookies, user identifiers (e.g. user ID) or advertising IDs (e.g. double-click cookies, android advertising ID) is anonymized or deleted after 14 months. For more details see the following link: https://support.google.com/analytics/answer/7667196?hl=de

7. Newsletter

Newsletter Data

If you would like to receive the newsletter as offered on the website, we require your e-mail address as well as information that allows us to verify that you are the owner of such e-mail address and that you agree to receipt of the newsletter. Further data is not collected or only collected on a voluntary basis. For handling of the newsletters, we use newsletter service providers described below.<br/>  

MailChimp

This website uses services by MailChimp for sending newsletters. Provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service with which, amongst other things, sending of newsletters may be organized and analysed. If you enter data for the purpose of receiving the newsletter (e.g. e-mail address), this data is stored on MailChimp's servers in the USA.

With the help of MailChimp, we are able to analyse our newsletter campaigns. When opening an e-mail sent by MailChimp, a file contained in the e-mail (so-called web beacon) connects to MailChimp’s servers in the USA. This makes it possible to track whether a newsletter message has been opened and which links, if any, have been clicked on. Also collected is technical information (e.g. time of access, IP address, browser type and operating system). Such information cannot be attributed to respective newsletter recipient. They are used exclusively for statistical analysis of newsletter campaigns. Results of these analyses can be used to better adapt future newsletters to the interests of recipients.

If you do not wish for any analysis by MailChimp, it is imperative to unsubscribe from the newsletter. In order to do so we provide a link in every newsletter message.

The data processing is based on your consent (Art. 6 (1) lit. a GDPR). You may revoke given consent by unsubscribing from the newsletter at any time. Lawfulness of data processing operations already carried out remains unaffected by the revocation.

Data provided for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. For details see https://mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses.

After you have unsubscribed from the newsletter distribution list, your e-mail address will be stored, if required, by us or the newsletter service provider in a blacklist to prevent future mailings. Data from the blacklist will only be used for this purpose and not be merged with other data. This serves your interest as well as our interest in complying with legal requirements when sending newsletters (legitimate interest in line with Art. 6 (1) lit. f GDPR). Storage in the blacklist is not subject to a time limit. You may object to storage if your interests outweigh our legitimate interest.

For more details, please refer to MailChimp's privacy policy: https://mailchimp.com/legal/terms/.<br/>  

Order Processing Agreement

We have signed an Order Processing Agreement with above-mentioned provider. This agreement is required by data protection regulations, which ensures that named company only processes personal data collected on our website in accordance with our instructions and in compliance with GDPR.

8. Plugins and Tools

YouTube with Enhanced Data Protection

This website embeds videos by YouTube. The operator of the site is Google Ireland Limited (‘Google‘), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode entails that YouTube does not store any information about visitors to this website before they watch the video. However, disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube - regardless of whether you watch a video - establishes a connection to the Google double-click network.

As soon as you start a YouTube video on this website, a connection to YouTube's servers is established. This provides the YouTube server with information as to which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to attribute your surfing behaviour directly to your personal profile. You may prevent this by logging out of your YouTube account.

Furthermore, YouTube may store various cookies on your terminal device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In doing so, YouTube may obtain information about visitors to this website. Such information is used, amongst other things, to collect video statistics, improve user experience and prevent scamming attempts.

If applicable, further data processing operations may be triggered after the start of a YouTube video over which is beyond our control.

YouTube is used in the interest of appealing presentation of our online offers. This constitutes a legitimate interest in line with Art. 6 (1) lit. f GDPR. If consent to the storage has been requested, processing is carried out exclusively on the basis of (Art. 6 (1) lit. a GDPR and Art 25 (1) TTDSG = Telekommunikation-Telemedien-Datenschutz-Gesetz [Telecommunications - Telemedia Data Protection Act); insofar as the consent includes storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) in line with TTDSG. Consent may be revoked at any time.

For more information in regard to Data protection by YouTube, please see its privacy policy: https://policies.google.com/privacy?hl=de.
 

 

Google Maps

On this website we use components by Google Maps. Through the Google Maps API, locations can be displayed on a world map and Google is able to calculate routes immediately.
 

The Operator of Google Maps services is: Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
 

By viewing pages featuring an integrated Google Maps API, the internet browser on the IT system of the data subject is automatically triggered by respective Google Maps API component to download a representation of the Google Maps API. This provides Information to Google Maps API and Google as to which specific sub-page of our website is viewed by the data subject. If the data subject is logged into Google at the same time, the information is attributed to respective Google account of such data subject. To prevent this kind of transmission, the person concerned has to log out of their Google account BEFORE accessing our website.

For further information on data protection by Google and Google Maps API see www.google.com/policies/privacy/. Details given provide information as to the collection, processing and use of personal data by Google.
 

9. Own Services

Handling of Applicant Data

We offer you the opportunity to submit a job application (e.g. by e-mail, mail or online application form). Hereafter, we provide you with information about scope, purpose and use of your personal data collected within the application process. We assure you that collection, processing and use of your data will be carried out in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strictest confidence.
 

Scope and Purpose of Data Collection

When submitting an application, we process your associated personal data (e.g. contact and communication data, application documents, notes in the context of job interviews, etc.), insofar as this is necessary for the decision on establishing an employment relationship. Legal basis for this is Art. 26 of the Federal Data Protection Act (BDSG) under German law (initiation of an employment relationship), Art. 6 (1) lit. b GDPR (general contract initiation) and - if you have provided consent - Art. 6 (1) lit. a GDPR. Consent may be revoked at any time. Within our company personal data will only be passed on to persons involved in the processing of your application.

If application is successful, data submitted by you will be stored in our data processing systems on the basis of Art. 26 Federal Data Protection Act and Art. 6 (1) lit. b GDPR for the purpose of implementing the employment relationship.
 

Retention Period for Data

If we are unable to offer you a job, if you reject a job offer or withdraw your application, we reserve the right to retain provided data on the basis of our legitimate interests (Art. 6 (1) lit. f GDPR) for up to 6 months after the end of the application process (rejection or withdrawal of the application). Data is then deleted, and the physical application documents destroyed. Storage particularly serves as evidence in the event of a legal dispute. If it is evident that data will be required after six-month period has expired (e.g. due to an impending or pending legal dispute), such data will only be deleted when the purpose for continued storage no longer applies.

Longer storage may also occur if you have given consent (Art. 6 (1) lit. a GDPR) or if legal storage obligations prevent deletion.
 

Admission to the Applicant Pool

If we do not offer you a job, we may be able to admit you to our pool of applicants. In case of acceptance, all documents and details from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.

Admission to the applicant pool is exclusively based on your express consent (Art. 6 (1) lit. a GDPR). Giving consent is voluntary and not related to the current application process. The data subject may revoke consent at any time. In such case, data will be irrevocably deleted from the applicant pool unless there are legal reasons for its retention.

Data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.