Data protection policy
1. Data protection at a glance
General information
The following information provides a simple overview on what happens to your personal data when you visit this website. Personal data is all data that can be used to identify you personally. Please refer to our data protection policy shown below this text for detailed information on data protection.
Data capture on this website
Who is responsible for recording data on this website?
The website operator undertakes the data processing on this website. You can find their contact details in the section "Note regarding the responsible party" in this data protection policy.
How do we record your data?
On the one hand, your data is collected when you provide it to us. This may be, for example, data that you enter on a contact form.
Other data is collected, either automatically or after you have given your consent, by our IT systems when you visit the website. In particular, this concerns technical data, e.g. the Internet browser, operating system or the time the page was called up. This data is collected automatically as soon as you enter this website.
How do we use your data?
Some of the data is collected to ensure an error-free depiction of the website. Other data can be used to analyse your user behaviour.
What rights do you have regarding your data?
You always have the right to request information about your stored data, its origin, its recipients and the purpose of its collection free of charge. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you can revoke this consent at any time for the future. You also have the right to request a restriction on the processing of your personal data in certain circumstances. Furthermore, you have the right to complain to the relevant supervisory body.
You can contact us at any time with regard to this and other questions regarding data protection.
Analysis tools and tools from third-party suppliers
When visiting this website, your browsing behaviour can be analysed statistically. This primarily takes place through the use of so-called analytical programs.
You will find detailed information about these analytical programs in the following data protection policy.
2. Hosting
We host the contents of our website with the following provider:
IONOS
The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter IONOS). When you visit our website, IONOS will collect various log files, including your IP addresses. For details, see the IONOS data protection policy:
https://www.ionos.de/terms-gtc/terms-privacy.
This data is used by IONOS on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in presenting our website in the most reliable way. If appropriate consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDPA, insofar as the consent includes the storage of cookies or access to information on the user's terminal device, e.g. device fingerprinting, within the meaning of the TTDPA. Consent can be revoked at any time.
Order processing
We have concluded a data processing agreement (DPA) for the use of the aforementioned service. This is a contract prescribed by data protection laws, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
3. General information and compulsory information
Data protection
The operator of this site takes the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations as well as this data protection policy.
If you use this website, various types of personal data will be collected. Personal data is data that can be used to identify you personally. This data protection policy explains which data we collect and how it is used. It also explains how and the purpose for which this happens.
We point out that data transfers over the Internet, e.g. for email communication, can involve gaps in security. Seamless protection of data from access by third parties is impossible.
Note regarding the responsible party
The responsible party for data processing on this website is:
Pütz Group Holding GmbH
Am Saarufer 8
54439 Saarburg
GERMANY
Tel: 06581 92990
Email: infoinhalt1zeile12$%@;ednocontent:.h1undh1okpuetzgroup.de
The responsible party is the natural person or legal entity that solely or jointly with others takes decisions on the purposes and means of processing personal data, e.g. names, email addresses etc.
Storage period
Unless a specific storage period is specified in this data protection policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you make a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data, e.g. tax or commercial retention periods; in the latter case, the deletion takes place after these reasons no longer apply.
General information on the legal basis for the processing of data on this website
If you have consented to the data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, provided that special categories of data are processed in accordance with Art. 9 para. 1 GDPR. In the event of express consent to have personal data transmitted to third countries, the data processing will then also be based on Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or to access to information on your terminal device, e.g. via device fingerprinting, then the processing of the data will also be carried out on the basis of Section 25 para. 1 TTDPA. Consent can be revoked at any time. If your data is required to fulfil the contract or to carry out pre-contractual measures, we will then process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we will process your data if this is required to fulfil a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. The processing of the data may also take place based on our legitimate interest according to Art. 6 para. 1 lit. F GDPR. The following paragraphs of this data protection policy provide information on the relevant legal bases in each individual case.
Note on data transfers to the USA and other third countries
Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection laws. When these tools are active, your personal data can be transferred to these third countries and processed there. We would like to point out that in these countries, no level of data protection comparable to that in the EU can be guaranteed. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. As such, it cannot be ruled out that US authorities, for example, intelligence services, may process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.
Revocation of your consent to data processing
Many data processing processes are only possible with your explicit consent. You may revoke your consent at any time. The legality of the data processing that has taken place prior to the revocation shall remain unaffected by the revocation.
Right of objection to data collection in special cases and to direct advertising (Art. 21 GDPR)
IF THE PROCESSING TAKES PLACE ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM THE SPECIFIC SITUATION; THIS ALSO APPLIES TO PROFILING SUPPORTED BY THESE PROVISIONS. THE RELEVANT LEGAL BASIS ON WHICH PROCESSING IS BASED IS STATED IN THIS DATA PROTECTION POLICY. IF YOU SUBMIT AN OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVIDE COMPELLING GROUNDS FOR PROCESSING YOUR PERSONAL DATA THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING IS USED TO EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ART. 21 PARA. 1 GDPR). IF YOUR PERSONAL DATA HAS BEEN PROCESSED FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME; THIS ALSO APPLIES TO PROFILING IF THIS RELATES TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSES OF DIRECT ADVERTISING (OBJECTION UNDER ART. 21 PARA. 2 GDPR).
Right to complain to the relevant supervisory body
In the event of infringements of the GDPR, the persons concerned shall have the right to complain to a supervisory authority, particularly in the member state of their habitual residence, workplace or place of the presumed infringement. The right to complain exists notwithstanding other legal remedies available under administrative law or in court.
Right to data portability
You have the right to ask for the data that we process automatically on the basis of your consent or the fulfilment of a contract to be handed over to yourself or a third party in a common, machine-readable format. If you request that the data be transferred directly to another responsible party, this shall only take place if it is technically feasible to do so.
Information, deletion and correction
Within the framework of the current statutory provisions, you have a right to information, at any time and free of charge, as to what data is held about you on our database as well as its sources, recipients and the purpose for which they are processed, and, if applicable, you have a right to have this data corrected or deleted. You can contact us at any time about this and any other questions you may have on the subject of personal data.
Right to restriction on processing
You have the right to request a restriction on the processing of your personal data. You can contact us at any time to do this. The right to restrict the processing exists in the following cases:
- If you dispute the accuracy of your personal data stored with us; we usually need time to verify this. You have the right to request a restriction on the processing of your personal data for the duration of the check.
- If the processing of your personal data happened/is happening unlawfully, you may request the restriction of the data processing instead of deletion.
- If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
- If you have lodged an objection pursuant to Art. 21 para 1 GDPR, your interests as well as ours must be considered. You have the right to request a restriction on the processing of your personal data if no decision has been made on whose interests outweigh the other party’s interests.
If the processing of your personal data was restricted, then this data, aside from its storage, may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural person or legal entity or for reasons of an important public interest of the European Union or a Member State.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transfer of confidential content, such as orders or queries that you send to us as the site operator. You can recognise an encrypted connection by the change in the browser's address line from “http://” to “https://” and the padlock icon in your browser header. If the SSL or TLS encryption is activated, the data that you send to us cannot be read by third parties.
Objection to advertising emails
The use of contact data published under the obligation to state the owner of the website for the purpose of transferring advertising and information materials not explicitly requested is hereby explicitly opposed. The operator of these pages explicitly reserves the right to take legal action in the event of being sent unwanted advertising materials, e.g. spam emails.
4. Data capture on this website
Cookies
Our webpages use so-called cookies. Cookies are small data packages and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are deleted automatically when your visit ends. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.
Cookies can originate from us (first-party cookies) or from third parties (so-called third-party cookies). Third-party cookies allow for the integration of certain services by third-party companies within websites, e.g. cookies for the processing of payment services.
Cookies have various functions. Numerous cookies are technically necessary as certain website functions will not work without them, e.g. the shopping basket function or the displaying of videos. Other cookies can be used to evaluate user behaviours or for advertising purposes.
Cookies that are required to implement the electronic communication process, to provide certain functions you have requested, e.g. the shopping basket function, or to optimise the website, e.g. cookies to measure the web audience, are stored on the basis of Art. 6 para. 1 lit. f GDPR if no other legal basis is stated. The website operator has a legitimate interest in storing the necessary cookies to ensure the fault-free and optimised provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, the processing takes place exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDPA); consent can be revoked at any time.
You can set your browser, so that you are informed about when cookies are used and only permit their use in particular situations, refuse cookies for particular cases or generally exclude them as well as activate the automatic deletion of cookies when closing the browser. Deactivating cookies may restrict the functionality of this website.
To find out which cookies and services are used on this website, please take a look at this data protection policy.
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in so-called "server log files". This includes:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources.
This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a justified interest in the technically perfect depiction and optimisation of their website – which requires the recording of the server log files.
Contact form
If you send us enquiries using the contact form, your information from the contact form including the contact data stated there is used to process the enquiry and is stored by us in case subsequent questions arise. We do not pass this data on without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is associated with fulfilling a contract or the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.
The data you have entered in the contact form remains with us until you request its deletion, revoke your consent to the storage or the purposes of the data storage no longer apply, e.g. when your request has been completed. Mandatory statutory provisions, in particular storage periods, remain unaffected.
Query by email, phone or fax
If you contact us by email, phone or fax, your enquiry including all personal data that it generates (name, request) is stored and processed for the purposes of handling your request. We do not pass this data on without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is associated with fulfilling a contract or the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.
The data you have entered in the contact form remains with us until you request its deletion, revoke your consent to its storage or the purposes of the data storage no longer apply, e.g. when your request has been completed. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
5. Social media
Use of social media
On our website we use buttons with links to our contents on Facebook, LinkedIn, Xing and Instagram. When you click on the buttons, you leave our webpages and are then redirected to our contents on the selected social media networks. From then on, you will no longer be on our website but on the websites of the social media networks you clicked on. There, personal data about you will be collected in line with the settings of your browser or of the social media network. The conditions that apply in this case can be found in the data protection policies of the social media networks you have clicked on, and we cannot assume any responsibility for them.
6. Analysis tools and advertising
Matomo
This website uses the open source web analysis service Matomo. With the help of Matomo, we are able to collect and analyse data about how visitors to our website make use of our website. This allows us to find out, among other things, when which page views took place and from which region they originate. We also collect various log files, e.g. the IP address, referrers, the browsers and operating systems used, and can measure whether our website visitors perform certain actions, e.g. clicks, make purchases, etc.
This analysis tool is used on the basis of Art. 6 para 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDPA, insofar as the consent includes the storage of cookies or access to information on the user's terminal device, e.g. device fingerprinting, within the meaning of the TTDPA. The consent can be revoked at any time.
IP anonymisation
When using Matomo for analyses, we use anonymised IP information. For this purpose, your IP address is shortened before being analysed, so that it can no longer be uniquely assigned to you.
Hosting
We host Matomo exclusively on our own servers, so that all analysis data remains with us and is not passed on.
7. Newsletter
If you subscribe to our company newsletter, the data in the respective input mask will be transmitted to the controller. Subscriptions to our newsletter make use of a so-called double opt-in process. This means that once you have registered, you will receive an email asking you to confirm your registration. The confirmation is required to ensure that no one can subscribe using another person's email address. When registering for the newsletter, the user's IP address as well as the date and time of registration are stored. This serves to prevent a misuse of the services or of the affected individual’s email address. The data will not be passed on to third parties. An exception is made if there is a legal obligation to disclose said data. The data will be used exclusively for sending the newsletter. The data subject can terminate the subscription to our newsletter at any time. Likewise, consent to the storage of personal data can be revoked at any time. For this purpose, a relevant link can be found in every newsletter. Following the subscription to the newsletter, if the user's consent to the processing of the data has been obtained, the legal basis for said processing of the data is Art. 6 para. 1 lit. a GDPR. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 para. 3 UWG [Unfair Competition Act].
Use of rapidmail
Description and purpose: we use rapidmail to send out newsletters. The provider is rapidmail GmbH, Wentzingerstraße, 21, 79106 Freiburg, Germany. rapidmail is a service which organises and analyses the distribution of newsletters. The data you provide to subscribe to our newsletter will be stored on rapidmail servers in Germany. If you do not want rapidmail to perform their analyses, you will have to unsubscribe from the newsletter. We provide a link to do this in every newsletter we send. For analysis purposes, emails sent with rapidmail contain a so-called tracking pixel which connects to the rapidmail servers when the email is opened. This makes it possible to determine whether a newsletter message has been opened. Furthermore, using rapidmail, we can also to determine which links in the newsletter message have been clicked on. Optionally, links in the email may be set up as tracking links that can be used to count your clicks.
Legal basis
The legal basis for the data processing is Art. 6 para. 1 lit. a GDPR.
Recipient
The recipient of the data is rapidmail GmbH.
Transmission to third countries
The data will not be transmitted to third countries.
Duration
The data regarding you stored by us within the scope of consent for the purposes of the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from our servers as well as from rapidmail’s servers once you have unsubscribed from the newsletter. Data we have stored for other purposes, e.g. email addresses for the members’ area, remains unaffected by this.
Option of revocation
You have the option to revoke your consent to the processing of the data with effect for the future at any time. The legality of the data processing that has taken place prior to the revocation remains unaffected by the revocation.
Order processing
We have concluded a data processing agreement (DPA) for the use of the aforementioned service. This is a contract prescribed by data protection laws, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Further data protection notices
For more information, see rapidmail’s data protection notices at: https://www.rapidmail.de/datensicherheit.
For more information about rapidmail’s analysis functions, please click on the following link: https://www.rapidmail.de/wissen-und-hilfe
8. Plugins and tools
YouTube with extended data protection
This website integrates videos from the YouTube website. The operator of these pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in extended data protection mode. This mode ensures that YouTube does not store any information on the visitors to this website before they watch the video. The transfer of data to YouTube partners is however not necessarily prevented by the extended data protection mode, as YouTube will connect to the Google DoubleClick network, no matter whether you watch a video or not.
As soon as you start a YouTube video on this website, a connection is made to the YouTube servers. The YouTube server is informed about which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to directly assign your browsing behaviour to your personal profile. You can prevent this from occurring by logging out of your YouTube account.
In addition, once you start a video, YouTube may store various cookies or similar user recognition technologies on your terminal device, e.g. device fingerprinting. In this manner, YouTube can obtain information about the visitors to this website. This information is used, among other things, to record video statistics, improve user friendliness and prevent fraud attempts.
It is possible that additional data processing events may take place after a YouTube video has started over which we have no influence.
YouTube is used in the interest of providing an appealing display of our online products and services. This represents a justifiable interest as defined by Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDPA, insofar as the consent includes the storage of cookies or access to information on the user's terminal device, e.g. device fingerprinting, within the meaning of the TTDPA. Consent can be revoked at any time.
Additional information regarding data protection at YouTube can be found in their data protection policy at:
https://policies.google.com/privacy?hl=de.
Google Maps
This site uses the Google Maps service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the Google Maps functions your IP address must be stored. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google may use Google Fonts in order to display the fonts uniformly. When you access Google Maps, your browser will load the required web fonts into your browser cache in order to display texts and fonts correctly.
Google Maps is used in the interest of an attractive depiction of our online products and the ability to easily find the locations stated on the website. This represents a justifiable interest as defined by Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDPA, insofar as the consent includes the storage of cookies or access to information on the user's terminal device, e.g. device fingerprinting, within the meaning of the TTDPA. Consent can be revoked at any time.
The transfer of data to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/ and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
You can find more information on the handling of user data in the Google data protection policy:
https://policies.google.com/privacy?hl=de.
9.Handling applicant data
Categories of data processed and their origin
In particular, the categories of personal data that we collect and store as part of the application process include:
- Master data: surname, first name, date of birth
- Contact information: address, telephone number, email address
- Qualification data: CV, certificates, further training certificates
- Bank details: if applicable, your bank details for the reimbursement of costs
- other data: resulting from the application process, e.g. photographs, previous employments, religious affiliation, desired salary, hobbies, life status, disability status, data that you yourself have provided or entered or stored in our systems and media during the application process
As a general rule, your personal data is collected directly from you as part of the application process. In addition, we may have received data from third parties, e.g. from an employment agency.
Purpose and legal basis for the processing of personal data
The collection and processing of the data serves the possible establishment of an employment relationship. The primary legal basis for this is Art. 6 para. 1 lit. b GDPR in conjunction with Section 26 para. 1 BDSG [Federal Data Protection Act].
Existence of a need to provide personal data
The data collected is necessary for the execution of the application process (Art. 13 para. 2 lit. e GDPR). In the event of non-provision, the application process cannot be conducted.
Transmission of personal data
Within our company, your personal data will only be transmitted to those persons and positions that are directly involved in the application process (management, personnel department, specialist department). We may use service providers who, bound by strict instructions, support us, for example, in the areas of IT, personnel recruiting or the archiving and destruction of documents and with whom separate contracts for order processing have been concluded.
A transfer to third parties not included in this information does not take place.
Transfer of personal data to a third country
Your personal data will not be transferred to a third country (countries outside the European Economic Area – EEA).
Rights of the affected parties
You may request information about the personal data stored about you at the above address. In addition, under certain circumstances, you may request the correction or deletion of your data. Furthermore, you may still have a right to restrict the processing of your data and a right to demand that the information you have provided be released to you in a structured, common and machine-readable format.
Data retention period
We store your personal data until such storage is no longer necessary or the legitimate interest in its storage has expired. If no recruitment takes place, this is usually the case no later than six months after the application process has ended.
In individual cases, however, individual data may be stored for longer, e.g. for travel expense accounting. The duration of the storage then depends on the statutory retention obligations resulting, for example, from the Tax Code (6 years) or the Commercial Code (10 years).
Profiling/scoring
We do not use automated processing steps to make decisions within the framework of the applicant management process.
Right to revoke consent
You have the right to revoke your previously given consent to the processing of your data at any time. If you revoke your consent, we will delete the relevant data without delay, provided that there is no legal basis for further processing without your consent. The revocation of your consent shall not affect the legality of the processing performed on the basis of the consent prior to its revocation.