Privacy policy
The data controller as defined by data protection legislation, in particular the EU Data Protection Regulation (GDPR) is:
HIMMEL Antriebstechnik GmbH & Co. KG
Venneweg 28
48712 Gescher
Deutschland
+49 (0) 2542 910 0
+49 (0) 2542 910 290
info@himmelinfo.de
Your rights as a data subject
You may exercise your rights at any time by contacting our data protection officer using the contact information provided:
- information on the data we store about you and how it is processed (Article 15 GDPR),
- correction of any incorrect personal data (Article 16 GDPR),
- deletion of your personal data (Article 17 GDPR),
- restrict the processing of your data where we are legally obligated to retain it (Article 18 GDPR),
- object to the processing of your data by us (Article 21 GDPR) and
- data portability, provided you have consented to the processing of your data or have concluded a contract with us (Article 20 GDPR).
Where you have provided your consent, you may withdraw this at any time with effect from that time on.
You may submit a complaint at any time to a supervisory authority, e.g. the relevant authority in your state of residence or to the relevant authority in our region as body responsible for your data.
A list of supervisory authorities (for the private sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Newsletter
Type and purpose of processing:
Your data will be used exclusively for the purpose of delivering the email newsletter to which you have subscribed. You are asked to enter your name for the purposes of personalising the newsletter and in order to identify you in the event that you wish to exercise your rights as a data subject.
To receive the newsletter, it suffices to provide only your email address. When subscribing to receive our newsletter, the personal data you provide will be used exclusively for this purpose. Subscribers may on occasion be informed via email where relevant changes affecting the service or registration are made (e.g. changes to the newsletter offering or technical issues).
A valid email is required for registration to take place. In order to check that a newsletter subscription has in fact been requested by the owner of an email address, we use a “double opt-in” process. This processes logs the newsletter subscription request, the sending of a confirmation email and the response requested by this email. No further data is collected. The data are used exclusively for sending the newsletter and are not forwarded to third parties.
Legal basis:
On the basis of your expressly given consent (Article 6 (1)(a) GDPR), we will regularly send you our newsletter and similar information via email to the email address you provide.
The consent to store your personal data and its use for sending the newsletter can be withdrawn at any time with effect from that point on. A link is provided in every newsletter for this purpose. You may also directly unsubscribe at any time on this website or inform us of your withdrawal of consent via the contact information provided at the end of this privacy policy.
Recipient:
The recipient of the data are the order processors.
Retention period:
Data will only be processes for the duration that we have your consent to do so. Data will be deleted after this time.
Provision mandated or required:
Your personal data will be provided voluntarily and entirely upon the basis of your consent. Without your consent, we are unable to send you our newsletter.
Contact form
Type and purpose of processing:
The personal data you provide will be used stored for the purposes of communicating with you personally. To do this, we require you to enter a valid email address and your name. These allow us to allocate your enquiry and subsequently respond. All other data is optional.
Legal basis:
The processing of your data entered into the contact form is done on the basis of a legitimate interest (Article 6 (1)(f) GDPR).
By making available this contact form, we would like to provide you with a simple way to contact us. The data you enter will be stored for the purposes of processing your enquiry and any subsequent follow-up questions.
Where you contact us to request an offer, the data you enter into the contact form is processed on the basis of precontractual actions (Article 6 (1)(b) GDPR).
Recipient:
The recipient of the data are the order processors.
Retention period:
Data are deleted at the latest 6 months after the enquiry has been processed.
Where a contractual relationship comes into being, we are subject to mandatory minimum retention periods according to German Commercial Law and will delete your data once this period has expired.
Provision mandated or required:
Your personal data is provided voluntarily. However, we are only able to process your enquiry if you provide us with your name, email address and reason for the enquiry.
Data protection information for applicants
Purpose and legal basis for processing:
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (EU-GDPR) and the German Federal Data Protection Act insofar as this is necessary for making a decision on an employment relationship with us. The legal basis for this is Article 88 GDPR in connection with Section 26 Federal Data Protection Act as well as Article 6 (1)(b) GDPR for initiating or implementing a contractual relationship.
Further, we can process your personal data where this is necessary to fulfill legal obligations (Article 6 (1)(c) GDPR) or to defend against legal claims made against us. The legal basis for this Article 6 (1)(f) GDPR. The legitimate interest is, for example, an obligation to provide evidence in proceedings relating to the General Equal Opportunities Act.
Where you provide us with your express consent to process your personal data for specific purposes, the legal basis such processing based is your consent as defined by Article 6 (1)(a) GDPR. Consent that has been given may be withdrawn at any time with effect from that point on (see 9 in this privacy policy).
Where an employment relationship between you and us comes into being, we may, on the basis of Article 88 GDPR in connection with Section 26 New Federal Data Protection Act, further process the personal data you have already provided to us for the purposes of this employment relationship, insofar as this is necessary for beginning or ending the employment relationship or to exercise or fulfill any rights and obligations arising from legislation or a collection pay agreement, an employer/works agreement that are in the interests of the employees.
Categories of personal data:
We process only data that is relevant to your application. This may include general information about your person (name, address, contact data, etc.), information about your professional qualifications and education, information about your professional development as well as any other data that you send to us in relation to your application.
Data sources:
We process personal data that we receive from you as part of making contact and your application via post, email or web form or which you have provided to us via an application portal.
Data recipients:
We will pass your personal data on to only those areas and persons within the company that require this data to fulfill contractual and legal obligations and to exercise our legitimate interest.
We may pass your data on to other companies with which we are associated, insofar as this is permitted within provisions of the purpose and legal basis found under 1 of this privacy policy.
Your personal data will be processed on our behalf on the basis of data processing agreements according to Article 28 GDPR. In such cases we will ensure that your personal data is processing in accordance with the provision of the GDPR. The categories of recipients in this case are providers of internet services as well as providers of application management systems and software.
Data will otherwise only be passed on to recipients outside of the company where such is legally permitted, where such is necessary to fulfill legal obligations, or where you have given us your consent to do so.
Transfer to third countries:
No transfer of data to third countries is expected.
Duration of data retention:
We will store your personal data for as long as is necessary to make a decision regarding your application. Your personal data and application documents will be kept for a maximum period of six months after the completion of the application process (e.g. notification that rejection) after which they will be deleted, insofar as there exists no legal obligation to retain the data for a longer period or where this is not permitted.
Furthermore, we store your personal data only insofar as this is legally necessary or specifically to assert, exercise or defend legal claims for the duration of the legal proceedings. Where you have consented to a longer retention period for your personal data, we will store it in accordance with your consent declaration.
If the application process results in an employment relationship, apprenticeship or internship, your data will be, to the extent necessary, stored and later transferred into the HR file.
Following the application process, you may receive an invitation to be entered into our talent pool. This allows us to consider you again in the future should a suitable vacancy arise. Where you have given us your consent, we will store your application data in our talent pool in accordance with your consent and/or any future consent declarations.
Requirement to provide personal data:
The provision of personal data as part of an application process is neither legally nor contractually required. You are therefore under no obligation to provide information about your personal data. Please note, however, that such data is necessary in order to make a decision regarding an application or to conclude a contract of employment with us.
If you provide us with no personal data, we will be unable to make a decision on your application that would form the basis of an employment contract. We recommend, providing only personal data with your application that is necessary for your application to be processed.
Automatic decision making:
Since a decision regarding your application is not made exclusively on the based of automated processes, no automatic decision making process takes place as defined by Article 22 GDPR.
Embedded YouTube videos
Type and purpose of processing:
We embed YouTube videos into our own webpages. Operation of the plugin is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page containing the YouTube plugin, a connection to YouTube’s servers is established. YouTube is thus informed which pages you are visiting. If you are logged into your YouTube account, then YouTube is able to record your surfing behaviour. To prevent this, you must log out of your YouTube account before visiting the site.
If a YouTube video is started, the providers will set cookies that collect information about user behaviour.
Further information about the purpose and scope of data collection and how it is processed by YouTube can be found in the provider’s privacy policy. There you will also find further information about your rights in regard to your data and settings for protecting your privacy (https://policies.google.com/privacy). Google processes you data in the USA and subjects itself to the EU-US Privacy Shield www.privacyshield.gov/EU-US-Framework
Legal basis:
The legal basis for the embedding of YouTube videos and the associated data transfer to Google is your consent (Article 6 (1)(a) GDPR).
Recipient:
Accessing YouTube automatically triggers a connection to Google.
Retention period and withdrawal of consent:
If you have deactivated the storage of Google advertising cookies, no such cookies should be set when viewing YouTube videos. However, YouTube does store non-personal data on usage information in other cookies. To prevent this, you must block the storage of cookies by your browser.
Further information about data protection at “YouTube” can be found in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/
Transfer to third countries:
Google processes you data in the USA and subjects itself to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision mandated or required:
Your personal data will be provided voluntarily and entirely upon the basis of your consent. Prevent access to cookies can restrict the functionality of the website.
SSL encryption
In order to protect your data while it is being transmitted over the Internet, we make use of the latest encryption processes (e.g. SSL) over HTTP.
Changes to our privacy policy
We reserve the right to make changes to this privacy policy so that it reflects the current legal requirements or in order to implement any changes to our services in our privacy policy, e.g. the introduction of new services. The updated privacy policy will then apply from your next visit.
Queries for the data protection officer
If you have any questions regarding data privacy, please write to us via email, or directly contact our organisation’s data protection officer:
Sven Effkemann
Venneweg 28
48712 Gescher
datenschutzbeauftragter@himmelinfo.de
This privacy policy has been created with the help of activeMind AG, the experts for external data protection officers (Version #2019-04-10).
