INFORMATION ABOUT WHAT WE DO WITH YOUR DATA ON OUR WEBSITE
We process your personal data in accordance with the requirements of the German Telemedia Act and the EU General Data Protection Regulation.
Our purpose here is to inform you about what is done with your data and your rights in this connection.
1. PRELIMINARY REMARK
The purpose of the following points is to provide you with information about your data. The law has determined which information is necessary in this connection.
Those interested to learn more can consult Articles 12 through 22 and 34 of the General Data Protection Regulation. The text of the General Data Protection Regulation (GDPR) can be found online here: http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679 If you have any further questions about the General Data Protection Regulation, please feel free to contact the data protection officer and/or the administration at any time.
2. WHAT IS PERSONAL DATA?
Any information relating to an identified or identifiable person. A person is deemed identifiable if he or she can be identified directly or indirectly. This can be done, for example, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors.
3. BASIC INFORMATION
3.1 Who is responsible for the processing of my data?
The party responsible for data processing is Häcker Küchen GmbH & Co. KG, Werkstr. 3, 32289 Rödinghausen, Germany
Telephone: +49 5746 / 940-0, info(at)haecker-kuechen.de
3.2 Which authority is responsible for control and compliance with the laws governing data protection? Responsible supervisory authority for data protection The State Officer for Data Protection and Freedom of Information North Rhine-Westphalia Postfach 200444, 40102 Düsseldorf, Germany Telephone: +49 211 / 384240
3.3 How can I reach the company’s data protection officer?
Our company’s data protection officer is Martin Harbeke. The data protection officer can be reached as follows: e-mail: dsb(at)haecker-kuechen.de
4. OTHER IMPORTANT INFORMATION
4.1 Data collection in the application process (Why?)
Before you decide for us and us and for you, we would like to get to know each other. In a first step, we regularly use the information and documents that you send us in writing or in text form for this purpose. The next step is to get to know each other personally, during which we learn even more about each other. The purpose of this data collection is to make a well-founded decision for a long-term cooperation.
4.2 Why may we do this?
Data protection law permits (in accordance with § 26 paragraph 1 sentence 1 BDSG as amended in conjunction with Article 88 paragraph 1 DSGVO) the collection of the data required to establish the employment relationship. If you voluntarily provide us with information about yourself that goes beyond what is necessary, data protection law allows us to do so within the framework of a consent (pursuant to Article 6 paragraph 1 sentence 1 lit. a DSGVO).
The legal basis for the collection of the above-mentioned compulsory information is § 26 paragraph 1 sentence 1 BDSG n.F. in conjunction with Article 88 paragraph 1 DSGVO.
4.3 Who can receive data from me?
Within the scope of processing, your data may be transmitted to:
- persons within our company who are directly involved in data processing (e.g. human resources department)
- Service providers who are contractually bound and bound to secrecy and perform partial tasks of data processing
- External companies, if necessary. Examples are postal service providers for the delivery of letters
4.4 Will you transfer data from me to countries outside the European Union?
This is not planned by us. An exception to this would only be conceivable if you were to arrange for it, for example if you were to give us an account at a bank outside the European Union to which we should transfer money. The legal basis for this is Article 6(1)(b) DSGVO, Article 24 BDSG n.v., Article 49(1)(b) DSGVO
4.5 How long will you store my data?
We will store your data for the time we need it to achieve the purposes described above under 4.1. No later than six months after the decision, the paper documents will be returned or the digital documents will be deleted. This period results as a protection against claims under the General Equal Treatment Act (AGG). However, there may be statutory regulations (e.g. the German Fiscal Code § 147) which oblige us to retain certain documents for six or ten years respectively. After the retention period has expired, we delete any data no longer required.
4.6 Do I have to make my data available?
In order to achieve the reasons set out in point 4.1, you must provide us with your personal data.
This is absolutely necessary for the conclusion of a contract with you. If you do not provide us with your data, we cannot conclude a contract with you.
In the event of complaints, you can contact the relevant supervisory authority at any time. For our company the supervisory authority mentioned in point 3.3. is responsible.
You have the right to have this checked by a court of law, according to article 78 DSGVO, against a supervisory authority and, according to article 79 DSGVO, against our company.
4.7 Automated decision making / profiling
No automatic decision making / profiling takes place.
5. WHAT RIGHTS DO I HAVE?
5.1 About your rights
As a data subject of data processing, under the General Data Protection Regulation you have the following rights, among others (hereinafter referred to as ‘rights of data subjects’).
5.2 Rights to information (under Article 15 GDPR)
You have the right to obtain information as to whether or not your personal data are being processed. If we process personal data about you, you are entitled to learn
- why we process your data (see also Item 4.1);
- the types of data we process about you;
- the type of recipients that receive or are to receive data about you (see also Item 4.3);
- how long we will store your data; if details about the storage period are not available,
- we must indicate how the storage period is determined (e.g. following expiry of legal retention periods) (see also Item 4.5);
- that you have a right to rectification and erasure of the data relating to you, including the right to restrict processing and/or the option of objection (in this connection, see also Items 5.2, 5.3 and those that follow);
- that you have a right to lodge a complaint with a supervisory authority;
- where your data come from, if we have not collected them from you directly;
- whether your data are used for an automated decision-making, and, if this is the case, to learn which underlying decision-making logic is involved, along with the consequences and significance of automated decision-making for you;
- that, if data about you are transferred to a country outside the European Union, you are entitled to obtain information as to whether and, if so, which, appropriate levels of security are ensured on the part of the data recipient;
- that you have the right to request a copy of your personal data. Data copies are always provided in electronic form.
The first copy is free of charge; additional copies may be subject to a reasonable fee. A copy can be provided only if to do so does not impinge upon the rights of other persons.
5.3 Right to rectify data (under Article 16 GDPR)
You have the right to compel us to rectify your data if these are inaccurate and/or incomplete. This right also includes the right to have incomplete personal data completed by supplementary declarations or communications. A rectification and/or supplement must be forthcoming without undue delay.
5.4 Right to erasure of personal data (under Article 17 GDPR)
You have the right to obtain from us the erasure of your personal data if
- the personal data are no longer necessary in relation to the purposes for which they were collected and processed;
- the data processing is done on the basis of a consent you have granted, and you have withdrawn this consent; this does not apply, however, if there is another legal permission for processing these data;
- you have filed an objection to processing of the data the legal permission for which lies within the realm of so-called ‘legitimate interest’ (as set forth in Article 6 (1) (e) or (f)); there is no erasure requirement, however if overriding legitimate grounds for continued processing exist;
- you have objected to data processing for purposes of direct marketing;
- your personal data have been unlawfully processed;
- the data in question are those of a child and have been collected for information-society services (=electronic service) on the basis of the consent (pursuant to Article 8 (1) GDPR).
A right to erasure of personal data does not exist if
- the erasure request is in conflict with the right of freedom of expression and information;
- processing of personal data is required
- to comply with a legal obligation (e.g. statutory retention obligations),
- for the exercise of public functions and interests under applicable law (this also includes ‘public health’) or
- for archiving and/or research purposes;
- the personal data are required for the establishment, exercise or defence of legal claims.
Erasure must be carried out immediately (without undue delay). If we have made personal data public (e.g. online), we must see to it, to the extent technically feasible and reasonable, that other data processors are also notified of the erasure request, including the deletion of links, copies and/or replications.
5.5 Right to restriction of data processing (under Article 18 GDPR)
You have the right to obtain a restriction on the processing of your personal data in the following cases:
- If you have disputed the accuracy of your personal data, you may request that we make no other use of your data for the duration of the review of the accuracy of the personal data, thereby restricting their processing.
- In the event of unlawful data processing, you may request restriction of data usage instead of data erasure;
- If you need your personal data to establish, exercise or defend legal claims, but we no longer have a need for your personal data, you may request us to restrict processing to the legal purposes involved;
- If you have objected to data processing (under Article 21 (1) GDPR) (see also Item 5.7), and it has not yet been determined whether our interests in processing these data override your interests, you may request that your data not be used for other purposes for the duration of the review, thereby restricting their processing.
- Personal data the processing of which has been restricted at your request may, with the exception of storage, be processed only
- with your consent;
- for the establishment, exercise or defence of legal claims,
- for the protection of the rights of another natural or legal person, or
- for reasons of important public interest.
If a processing restriction is lifted, you will receive advance notification of this fact.
5.6 Right to data portability (under Article 20 GDPR)
You have the right to request that we furnish you, in a commonly used electronic format (e.g. as a PDF or Excel document), with the data that you provided to us.
You may also ask us to send these data directly to another company (specified by you), provided that it is technically feasible for us to do so.
The condition for your right in this regard is that the processing is done on the basis of consent, or for implementing a contract and carried out with the aid of automated means.
The exercise of the right to data portability must not adversely affect the rights and freedoms of other persons.
If you exercise the right to data portability, you will continue to enjoy the right to data erasure pursuant to Article 17 GDPR.
5.7 Right to object to certain forms of data processing (under Article 21 GDPR)
If your data are processed for the performance of a task carried out in the public interest or for the exercise of legitimate interests, you may object to this processing. Your objection must be accompanied by the grounds relating to your particular situation. These grounds may include special family circumstances, for instance, or a legitimate interest in maintaining confidentiality.
In the event of an objection, we must refrain from all further processing of your data for the purposes, unless
- there are compelling, legitimate reasons for processing that outweigh your interests, rights and freedoms, or
- processing is required for the establishment, exercise or defence of legal claims.
You may object at any time to the use of your data for the purpose of direct marketing; this also applies to profiling in connection with direct marketing. In the case of an objection, we may no longer use your data for purposes of direct marketing.
-> Under no circumstances do we initiate or carry out direct marketing and/or profiling.
5.8 Prohibition of automated decision-making/profiling (under Article 22 GDPR)
You have the right not to be subject to a decision by us that is based solely on automated processing of personal data and produces legal effects concerning you or significantly affects you in similar ways. This also includes profiling. This prohibition does not apply where automated decision-making
- is necessary for entering into, or performance of, a contract with you,
- is authorised by provisions of law, where these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests, or is carried out with your express consent.
Decisions based solely on automated processing of special categories of personal data (=sensitive data) are permitted only if
- they are taken pursuant to your express consent or
- a significant public interest in their processing exists
and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
5.9 Exercise of the rights of data subjects
Please contact the entities listed in Item 3 for further information on the exercise of your rights as a data subject. Requests submitted electronically will usually be answered electronically. As a matter of principle, the information, communications and measures that must be provided under GDPR, including the exercise of the rights of data subjects, are provided free of charge. Only in the case of manifestly baseless or excessive applications are we entitled to charge an adequate fee for processing or to refrain from taking action (under Article 12 (5) GDPR).
If there are reasonable doubts as to your identity, we may require additional information from you for identification purposes. If identification is not possible, we are entitled to decline to process your request. Where possible, we will notify you separately of any impossibility of verifying your identity (see Article 12 (6) and Article 11 GDPR).
Disclosure and information requests are usually processed immediately within one month after receipt of the request. The period may be extended for another two months if this is necessary taking into account the complexity and/or the number of requests; if this period is extended, we will notify you of the grounds for the delay within a month of receiving your request. If we should fail or decline to act on a request, we will notify you immediately, within one month of receiving your request, of the grounds for this and inform you of the option of filing a complaint with a supervisory authority or pursuing judicial remedies (see Article 12 (3) and Article 4 GDPR).
Please bear in mind that you can only exercise your rights as a data subject within the framework of the limitations and restrictions as provided within the European Union or its Member States (Article 23 GDPR).
Cookies are set after you grant your express consent:
- Vimeo sets cookies for the videos you use on our website.
- Google Maps sets cookies when in use.
7. Integration of third-party services and content
We can integrate videos from the ‘Vimeo’ platform of provider Vimeo Inc., 555 West 18th Street New York, New York 10011, USA. Privacy statement:
https://vimeo.com/privacy. We advise that Vimeo can use Google Analytics, and in this connection we
refer to the privacy statement (https://policies.google.com/privacy) as well
as opt-out options for Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=en) or Google’s settings for the use of data for marketing purposes (https://support.google.com/ads/answer/2662856?visit_id=0-636652511604053585-3357461401&rd=1/).
7.2 Google Maps
We integrate the maps of the ‘Google Maps’ service of Provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The data processed may include, in particular, users’ IP addresses and location data, although these are not collected without their consent (ordinarily completed through the settings on their mobile devices). Data may be processed in Ireland. Privacy statement: https://policies.google.com/privacy/, opt-out: https://tools.google.com/dlpage/gaoptout.