In the following, we inform you about the collection of personal data during use of our website.
The term “personal data”, with reference to the definition in Article 4 (1) Regulation (EU) 2016/679 (hereinafter referred to as the “General Data Protection Regulation” or GDPR for short), means all data relating to you personally. This includes for example your name, address, e-mail address, user behavior. With respect to other terminology, in particular the terms “processing”, “controller”, “processor” and “consent”, we refer to the legal definitions of data protection law as set out in Article 4 GDPR.
As a matter of principle, we process personal data only to the extent required for the provision of a functional website and the content and services we offer. Regular processing of personal data takes place only if you given us consent within the meaning of Article 6 (1) (a) GDPR or the processing is permitted by statutory provisions, in particular by one of the legal bases set out in Article 6 (1) (b) to (f) GDPR.
Your personal data will be deleted or blocked when the purpose for which it is stored is no longer applicable. In addition, data may be stored if so provided for by national or European provisions to which we are subject. In this case, the blocking or deletion of data takes place when the period for which the data is stored stipulated in the provision in question has expired. The latter does not apply if further storage of the data is required for conclusion or fulfillment of a contract.
Where we rely on commissioned service providers for individual functions on our website or would like to use your data for advertising purposes, we will provide you with detailed information about the relevant processes below.
If you have any questions or concerns regarding data protection, please contact our data protection officer in writing at email@example.com or by post at Data Protection Officer, Dr.-Kurt-Steim-Str. 35, 78713 Schramberg, Germany.
The responsible body within the meaning of Article 4 (7) GDPR, of other data protection laws applicable in the Member States of the European Union, and of other requirements and provisions concerning data protection, is:
CARL HAAS GmbH
as legally represented by Stefan Tschugmell
CARL HAAS GmbH
78713 Schramberg, Deutschland
Tel: +49-74 22 567 - 0
Fax: +49-74 22 567 - 239
For further details concerning the responsible body, please refer to our imprint.
Data protection officer
Our data protection officer can be reached and contacted at the following address:
Dr. Rainer Harwardt
ORGATEAM Unternehmensberatung GmbH
Im Ettenbach 13a
77767 Appenweier, Germany
Phone: +49 7805 918 255
Fax: +49 7805 918 292
Processing of personal data during use of our website for information purposes
If you visit our website without registering or providing us with any other information (“use for information purposes”), we collect only the personal data that your web browser sends to our server. If you wish to view our website, we collect only the following data, which we require for technical reasons to display our website to you and ensure stability and security:
· IP address
· Date and time of request
· Time zone difference to GMT
· Content of the website
· Access status (HTTP status)
· Amount of data transferred
· Website from which you accessed our website
· Web browser
· Operation system
· Language and version of the browser
This data is also stored in log files on our servers. This does not include your IP address or other data that allows the data to be associated with you. This data, together with other personal data associated with you, is not stored.
The collection and temporary storage of your IP address is required to enable delivery of our website to your device. This means that your IP address must be stored for the duration of your visit to our website. Storage of the aforesaid data in log files serves to ensure the functionality and optimization of our website and to ensure the security of our information technology systems. No analysis of this data for marketing purposes takes place. The above purposes constitute our legitimate interest in data processing. The legal basis for the collection and temporary storage of the aforesaid data is Article 6 (1) (1) (f) GDPR.
The above data for the provision of our website is deleted when the session is ended. The data in log files is deleted after seven days at the latest. We undertake any additional storage only when we have previously deleted or anonymized your IP address, so that assignment of the data to you as an individual is no longer possible. The collection of the above data for the provision of our website and the storage of this data in log files is essential for the operation of our website.
Objection is not possible.
Processing of personal data by cookies
Cookies stored with your web browser:
· Persistent cookies: these cookies are automatically deleted after a specified period, which may differ depending on the cookie. These cookies can be deleted at any time in your web browser’s settings.
The processing of personal data by the above cookies is used to make the services offered on our website more user-friendly and effective as a whole for you. Some features of our website cannot be offered without the use of these cookies. In particular, some features of our website require the ability to identify your web browser even after switching pages. The data processed by cookies and required to provide the features of our website is not used to create user profiles. Where cookies are used for analysis purposes, they serve to improve the quality and user-friendliness of our website, its contents and features. They allow us to understand how the website and it features are used and how often. This enables us to optimize our website continuously.
The above purposes constitute our legitimate interest in data processing.
The legal basis is Article 6 (1) (f) GDPR.
The above cookies are stored on your device and sent by it to our server. You can therefore configure the processing of data and information by cookies yourself. You can configure your web browser settings in various ways, for example to reject third-party cookies or reject all cookies. In this context, we would like to point out that you may not be able to use all features of our website properly. In addition, we recommend manually deleting cookies and your browser history on a regular basis.
Additional features and service on our website
In addition to use of our website for information purpose as described above, we also offer various services that you may be interested in using. For these services, it is usually necessary to provide further personal data. We require this data for provision of the services. The principles for data processing set out above also apply in this case.
In some cases, we use external service providers to process this data, which we commission after careful selection. These service providers are bound by our instructions and are monitored by us on a regular basis. Where personal data is passed on to third parties for the provision of services that we offer together with partners, you can find more detailed information in the descriptions of the individual services below. Where these third parties have their head office in a country outside the European Economic Area, you can obtain more detailed information on the consequences of this fact in the descriptions of the individual services below.
If you contact us by e-mail, the personal information you send to us with your e-mail is stored. We also provide a contact form on our website that you can use to contact us. The data you enter in this form is sent to us and saved.
· First name
· Last name
· E-mail address
· Company; request
The data is used exclusively to answer your questions. Where we do not use one of the third parties set out below for the provision of the contact feature, the data is not passed on to third parties. In addition, we collect your IP address and the time of sending.
Our processing of the above personal data is exclusively for the purpose of dealing with your requests. Our processing of further personal data collected as a result of use of the contact form provided on our website is for the purpose of preventing misuse and ensuring the security of our information technology systems.
This also constitutes our legitimate interest in the processing of your personal data.
Where you have given us your consent, the legal basis for the processing of this data is Article 6 (1) (a) GDPR. Other than that, the legal basis for the processing of this data is Article 6 (1) (f) GDPR, in particular in the event that the data is sent by you to us in an e-mail. Where the intention of your e-mail is to work towards conclusion of a contract, Article 6 (1) (b) GDPR constitutes an additional legal basis.
Subject to statutory retention periods, the data will be deleted as soon as we have completed processing of your request. If you contact us by e-mail, you may object to the storage of your personal data at any time. Please be informed that in this case, your request cannot be processed. Your statement of withdrawal or objection can sent by e-mail to the e-mail address specified in our imprint.
We offer you the ability to make online applications on our website. Your participation in the application process requires the provision of personal data. This data may include personal reference data such as first name, last name, address, date of birth and contact details such as telephone number or e-mail address, as well as data relating to your academic and/or professional career such as school certificates and employers’ references, data concerning training, internships or previous employers. This data may come from an application form to be filled in by you online on the application platform or from the documents you provide, such as a cover letter, resume, application photo, certificates or other evidence of professional qualifications. Data that is mandatory for participation in the application process is marked as such. If no third-party provider whose services we use to provide the online application feature is set out in this privacy statement, the data is not passed on to third parties.
We process the above data for the purpose of completing the application process.
Where you have given us your consent, the legal basis for the processing of this data is Article 6 (1) (a) GDPR. Where the processing of the above data is for the purpose of initiation of contractual relationships, the legal basis is Article 6 (1) (1) (b) GDPR.
The data is deleted when it is no longer required to achieve the purpose of its collection. In the event that the application process results in an employment relationship, apprenticeship, internship or other employment relationship, the data will continue to be stored and transferred to the personnel file. Otherwise, the application process ends with receipt of a rejection. In this case, the data is deleted after 6 months. The data is not deleted if further processing and storage of your personal data is required in individual cases to assert, exercise or defend legal claims. In this case, we have a legitimate interest in the further processing and storage of your personal data. The legal basis is Article 6 (1) (1) (f) GDPR. The data is also not deleted if we are obliged by law to continue to store your personal data.
You can withdraw any consent you have given us at any time. You can object to the processing of your personal data at any time. In particular, you have the option to withdraw your application at any time. During the application process, you should only provide us with the personal information required for participation in the application process and its completion. There is no legal or contractual obligation to provide data. Please be informed, however, that we cannot carry out the application process and cannot take your application into account without this data. The same applies in the case of any objection to the processing of your data. You can have stored data relating to you changed at any time.
We process and/or store your personal data on a server operated by an external provider in the European Union. This ensures adherence to the standards and provisions of European data protection law.
We use Google Analytics on our website, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as “Google”).
We use Google Analytics only with IP anonymization enabled, as described above. This means that your IP address is processed by Google only in truncated form, ruling out the possibility of identifying you personally.
We use Google Analytics for the purpose of analyzing the use of our website and continuously improving individual features, services and the user experience. The statistically analysis of user behavior allows us to improve our website and make it more interesting for you as a user. This also constitutes our legitimate interest in the processing of the above data by Google. The legal basis is Article 6 (1) (1) (f) GDPR.
You can prevent the storage of cookies created by Google Analytics by making the appropriate settings in your web browser. Please be informed that in this case, you may not be able to use all features of our website. If you wish to prevent the collection of data generated by cookies and relating to your user behavior (including your IP address) as well as the processing of this data by Google, you can download and install the web browser ad-on available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
To oblige Google to process the data submitted only in accordance with our instructions and to comply with the applicable data protection provisions, we have concluded a contract processing agreement with Google. For exceptional cases in which personal data is transferred to the United States, Google has subjected itself to the Privacy Shield agreement concluded between the European Union and the United States and has self-certified. Google thereby undertakes to adhere to the standards and provisions of European data protection law. You can find more detailed information at the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Further information on the use of data by Google, on settings and objection and on data protection can be found on the following Google websites:
The data is deleted when it is no longer required to achieve the purpose of its collection.
Data at the user and event level associated with cookies, user IDs and advertising IDs (e.g. doubleclick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) is deleted no later than 12 months after its collection.
You can prevent the collection of your data by Google Analytics by clicking on the link below. This sets an opt-out cookie that prevents the collection of your data when you visit this website inn the future:
Disable Google Analytics
We use Google Maps on our website, an online map service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as “Google”). This allows us to show you interactive maps directly on the website and allows you to conveniently use the map feature. When you visit our website, Google receives the information that you have accessed that section of our website. Your IP address is sent, regardless of whether Google provides a user account with which you are logged in, or if there is no user account. When you are logged in to Google, your data is assigned directly to your account. If you do not wish the data to be assigned to your Google profile, you must first log out. Google stores your data as usage profiles and uses it for the purposes of advertising, market research and/or tailored design of the website. Analysis of this kind is used in particular (even for users who are not logged in) to provide tailored advertising and to inform other users about your activities on our website.
We use Google Maps to show you interactive maps from Google Maps to improve your experience of our website. This also constitutes our legitimate interest in the processing of the above data by the third party.
The legal basis is Article 6 (1) (1) (f) GDPR.
You have a right to object to the creation of these user profiles, although you must contact Google to do so.
Google has subjected itself to the Privacy Shield agreement between the European Union and the United States and has self-certified. Google thereby undertakes to adhere to the standards and provisions of European data protection law. You can find more detailed information at the following linked entry:
Note on security
We make use of all available technical and organizational capabilities to ensure that we store your personal data so that it is not accessible to third parties. If you contact us with an unencrypted e-mail, we cannot guarantee complete data security, and we therefore recommend sending confidential information by post.
Your rights – right to self-determination of information
With us, you have the following rights with respect to personal data concerning you:
- The right to information
- The right to rectification and erasure
- The right to restriction of processing
- The right to object to processing
- The right to data portability
You also have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data by us.