Privacy Policy

For our website
For our Social Media Channels
In general
For our website

Thank you for visiting our website and your interest in our company. In the following we would like to inform you about the management of your personal data in accordance with Art. 13 General Data Protection Regulation (GDPR).

Controller

The controller responsible for the described data collection and processing is named in the imprint.

Usage Data 

When you visit our website, the data collected from the use of the website is temporarily stored on our web server for statistical purposes in order to improve the quality of our website. This data set contains

- the name and address of the data file,
- the date and time of the query,
- the amount of data transferred,
- the access status (file transmitted, file not found),
- a description of the type of browser used,
- the page, from which the data is requested
- the IP address of the requesting computer shortened to such an extent that no reidentification of any persona data is possible.

The listed usage data is stored anonymously.

Storage of IP address

In addition, we do not store any IP addresses.

Data Security

To avoid unauthorized access to your data, we have implemented technical and organizational measures. We use encryption technologies on our website. Your data will be transferred to our servers and back again via a connection that is protected by a TLS encryption technology. You can recognize that you are browsing on an encryption secured website by the lock-symbol shown in the address bar of your browser and by the address bar starting with https://.

Necessary Cookies

We use cookies on our website. Cookies are small pieces of data that are stored and read in your end-device. A distinction is made between session cookies, which are deleted when you close your browser, and permanent cookies, which are stored even after your visit has expired. 

We do not use these necessary cookies for the purposes of analyses, tracking or advertisement.

Some of these cookies only contain information about certain settings and cannot be related to a person. They may also be necessary to enable user guidance, security and implementation of the site.

We use these cookies in accordance to Art. 6 Para. 1 S. 1 lit. f GDPR.

Please be aware that you can set your browser to inform you when cookies are being stored or used on the website you are visiting. Thus, any use of cookies is transparent to you. You have the possibility to delete your browser configuration at any time and prevent any use of new cookies. In the event you refuse the use of cookies, please note that our web sites may not be displayed optimally and some functions are then no longer technically available.

Cookies Table

Depending on your settings via our banner, the following cookies are used.

Technically necessary cookies
These cookies are necessary for the operation of the website and can therefore not be deselected.
WSESSIONID
Duration of storagesession
Necessary standard cookie to be able to use PHP session data.
hideCookieNotice
Duration of storagedepending on selection up to 30 days
Saves that the cookie or data protection notice is not displayed again each time it is called up.
allowLoadExternRessources
Duration of storagedepending on selection up to 30 days
Remembers the user decision whether external components may be loaded automatically.
allowTracking
Duration of storagedepending on selection up to 30 days
Remembers the user decision that visitor behavior may be tracked.
Marketing-/Tracking Cookies
These cookies serve marketing purposes and analyze your visitor behavior.
_ga
Duration of storage2 years
Contains a randomly generated User-ID. This ID enables Google Analytics to recognize returning users on this website and to merge data from previous visits.
_gid
Duration of storage24 hours
Contains a randomly generated User-ID. This ID enables Google Analytics to recognize returning users on this website and to merge data from previous visits.
_gat
Duration of storage1minute
Certain data is only sent to Google Analytics once per minute at most. The cookie has a lifetime of one minute. As long as it is set, certain data transfers are blocked.
1P_JAR
Duration of storage1 month
Is set when playing embedded YouTube videos: This Google cookie is used to optimize advertising to deliver ads relevant to users, improve campaign performance reports, or to prevent a user from seeing the same ads multiple times.
ANID
Duration of storage1 year
Is set when playing embedded YouTube videos: This cookie is used for advertising on google.com. Data is collected anonymously and automatically. Information collected includes browser type, referring/exit page, content viewed on the site, operating system, clickstream data for trend analysis and optimization services.
CONSENT
Duration of storage20 years
Is set when playing embedded YouTube videos: These cookies are needed to watch videos on YouTube. They enable Google to collect user data for videos on YouTube.
DV
Duration of storage5 minutes
Is set when playing embedded YouTube videos: This cookie is used to support Google's advertising services.
NID
Duration of storage6 months
Is set when playing embedded YouTube videos: Google uses these cookies to store customer preferences. Based on web searches and actions performed, Google sites display customized ads.
OTZ
Duration of storage1 month
Is set when playing embedded YouTube videos: This cookie is used to support Google's advertising services.
S
Duration of storagesession
Is set when playing embedded YouTube videos: session-ID.

Google Analytics

We use Google Analytics to create pseudonymous user profiles for improving and designing our website on demand. Google Analytics uses “cookies”, which are text files placed on your end device and can be read by us. In this way, we are able to recognize and count returning visitors.

Google Ireland Limited and Google LLC support us as part of Google Analytics (USA) as a processor according to Art. 28 GDPR. The data processing can therefore also take place outside the EU or the EEA. With regard to Google LLC, no adequate level of data protection can be assumed due to processing in the USA. There is a risk that authorities will access the data for security and surveillance purposes without you being informed or being able to appeal. Please take this into account if you decide to give your consent to our use of Google Analytics.

This data processing is carried out on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR if you have given your consent via our banner. The transfer to a third country is based on Art. 49 Para. 1 lit. a GDPR.  

You can withdraw your consent at any time. Please use the following button and make the appropriate settings via our banner.

Embedded Videos

We embed videos on our websites that are not stored on our servers. So that calling up our website with embedded videos does not automatically result in third-party content being reloaded, in a first step we only display locally saved preview images of the videos. This means that the third party provider does not receive any information.

Only after clicking on the preview image will the content of the third-party provider be reloaded. In this way, the third-party provider receives the information that you have accessed our site and the usage data that is technically required in this context. In addition, the third-party provider is then able to implement tracking technologies. We have no influence on further data processing by the third party provider. By clicking on the preview image, you give us your consent to reload content from the third-party provider.

The embedding takes place on the basis of your consent in accordance with. Art. 6 Para. 1 S. 1 lit. a GDPR, provided you have given your consent by clicking on the preview image. Please note that the embedding of many videos means that your data will be processed outside the EU or the EEA. In some countries, there is a risk that authorities will access the data for security and monitoring purposes without you being informed of this or being able to appeal. If we use providers in insecure third countries and you consent, the transfer to an insecure third country takes place on the basis of Art. 49 Para. 1 lit. a GDPR.

ProviderAppropriate level of data protectionRevocation of consent
YouTube / Google (USA)No adequate level of data protection. The transmission takes place on the basis of Art. 49 Para. 1 lit. a GDPR.If you have clicked on a preview image, the content of the third-party provider will be reloaded immediately. If you do not want such a reload on other pages, please do not click on the preview images any more.

Social Media

We maintain an online presence within social networks and platforms in order to be able to communicate with customers, interested parties and users who are active there and to provide them with additional information about our services. When calling up the respective networks and platforms as well as links to other providers, the terms and conditions and data protection guidelines of the respective operator apply.

We do not integrate any social plugins directly into our website. When you visit our website, no data is transmitted directly to social media services such as Facebook, LinkedIn or XING. Only when you click on the logos will you be directed to the respective website. Further data from you may be processed on these. We have no influence on this data processing on the respective linked websites.

Contact

You have the possibility to get in touch with us via our contact form. To use our contact form, we first need the data marked as mandatory fields from you. We use this data on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR to answer your request.

In addition, you can decide for yourself whether you would like to provide us with further information. This information is provided voluntarily and is not absolutely necessary to contact you. We process your voluntary information on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.

If the contact is aimed at concluding a contract, Art. 6 Para. 1 lit. b GDPR provides an additional legal basis for processing.

Your data will only be processed to answer your request. We delete your data if it is no longer required and if there are no statutory retention requirements.

Insofar as your data transmitted via the contact form are processed based on Art. 6 Para. 1 S. 1 lit. f GDPR, you can object to the processing at any time. You can also revoke your consent to the processing of the voluntary information at any time. For this purpose, please contact the email address given in the imprint.

You also have the option of contacting us via email or telephone. In this case too, your data will only be processed to answer your request on the basis of Art. 6 Para. 1 S. 1 lit. f or Art. 6 Para. 1 S. 1 lit. a. We delete your data if it is no longer required and if there are no legal retention requirements.

Callback Service of our Customer Sales Service

We offer you the opportunity to contact us via our "CALL ME BACK" callback service. For this we first need the data marked as mandatory fields from you. We use this data on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR, to contact you by phone at your request and to advise you on the topics you have mentioned.

In addition, you can decide for yourself whether you would like to provide us with further information. This information is provided voluntarily and is not absolutely necessary for our callback service. We process your voluntary information on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.

Your data will only be processed as part of the recall and the associated advice. We delete your data if it is no longer required and if there are no statutory retention requirements.

Insofar as your data transmitted via the recall form are processed based on Art. 6 Para. 1 S. 1 lit. f GDPR, you can object to the processing at any time. You can also revoke your consent to the processing of the voluntary information at any time. For this purpose, please contact the email address given in the legal notice.

Applications

We offer vacancies via our job / career portal, which you can use to send us your application. We inform you about the processing of your data in this context in the privacy policy for our career portal - you can find this in the separate tab. 

You have also the option of applying for the positions advertised by us via the email or postal address provided. In order to be able to consider your application, at least the following information is required:
· Cover letter
· Curriculum vitae
· Certificates and qualifications
· Further documents and information according to the respective job advertisement.

We process your data exclusively for the purpose of selecting applicants in accordance with Art. 88 Para. 1 GDPR. There is no data processing for other purposes. In addition, you can decide for yourself whether you want to provide us with further information, such as your telephone number, your leisure interests, a picture, etc. for a better assessment of your application or for easier communication. This information is provided voluntarily and is not absolutely necessary for the application. If you include voluntary information in your application, you give your consent that we use this data exclusively for the purpose of applicant selection in accordance with Art. 88 Para. 1 GDPR. You can revoke your consent at any time with effect for the future. Please send your revocation to the office named in the imprint.

Your details will be treated as strictly confidential. If your application is unsuccessful, your documents will be deleted no later than six months after you have sent the notification of rejection. The legal basis for this processing is Art. 6 Para. 1 S. 1 lit. f GDPR in the legitimate interest of warding off any legal claims.

In the event that your application should also be considered for other or future job advertisements, this will only be done on the basis of your consent. Please inform us of this in your application letter. We then process your data on the basis of Art. 6 Para. 1 S. 1 lit. a GDPR and delete your application after 2 years at the latest. You can revoke your consent at any time with effect for the future. Please send your revocation to the office named in the imprint.

Storage Duration

Unless we have already informed you in detail about the storage period, we delete personal data when it is no longer required for the aforementioned processing purposes, you have revoked your consent to data processing and there are no statutory retention requirements to prevent deletion.

Other Processors

We give your data in the context of order processing acc. Art. 28 GDPR to service providers who support us in the operation of our website and the related processes. These are e. g. hosting service provider. Our service providers are strictly bound by our instructions and contractually obliged to do so.

In the following, we will name the processors with whom we work, insofar we have yet done in the text of the privacy policy above. Should data be transferred outside of the EU or the EEA in this context, we will provide information on the appropriate level of data protection.

ProcessorPurposeAppropriate level of data protection
Profihost AG, 30539 Hannover (Germany)Webhosting and supportProcessing only within EU/EEA

Your Rights as a Data Subject

As a data subject, the GDPR grants you certain rights when processing your personal data.

Right of access (Art. 15 GDPR)
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case to obtain access to the personal data and the information specified in Art. 15 GDPR.

Right to rectification (Art. 16 GDPR)
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the right to have incomplete personal data completed.

Right to erasure (Art. 17 GDPR)
You have the right to obtain an erasure of the personal data concerning you without undue delay, if one of the reasons listed in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR)
If one of the conditions set forth in Art. 18 GDPR applies, you shall have the right to restrict the processing of your data to mere storage, e.g. if you revoke consent, to the processing, for the duration of a possible examination.

Right to data portability (Art. 20 GDPR)
In certain situations, listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or demand a transmission of the data to another third party.

Right of withdrawal (Art. 7 GDPR)
If the processing of data takes place on the basis of your consent, you are entitled according to Art. 7 Para. 3 GDPR to revoke your consent to the use of your personal data at any time. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected.

Right to object (Art. 21 GDPR)
If the data is processed pursuant to Art. 6 para. 1 s. 1 lit. f GDPR (data processing for the purposes of the legitimate interests), you have the right to object to the processing at any time for reasons arising out of your particular situation. We will then no longer process personal data, unless there are demonstrably compelling legitimate grounds for processing, which override the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising or defending legal claims.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider the processing of the data concerning you infringes data protection regulations. The right to lodge a complaint may be invoked in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

Asserting your rights
Unless otherwise described above, please contact the office named in the imprint to assert your rights as a data subject.

Contact Details of our Data Protection Officer

In fulfilling our data protection obligations, we are supported by our data protection officer, who can be reached under the following contact details:

datenschutz nord GmbH
Sechslingspforte 2
22087 Hamburg
Germany
www.datenschutz-nord-gruppe.de
schlkdtnschtz-nrdd

If you contact our data protection officer, please also indicate the responsible body that is named in the imprint.

For our Social Media Channels

When you visit our social media sites, it may be necessary for the data relating to you to be processed. We would therefore like to inform you about the management of your personal data and your resulting rights in accordance with Art. 13 General Data Protection Regulation (GDPR).

Responsibility

We, Schülke & Mayr GmbH, operate the following social media sites:

- Twitter: https://twitter.com/schuelkemayr
- Facebook: https://www.facebook.com/myschulke/
- XING: https://www.xing.com/companies/sch%C3%BClke%26mayrgmbh
- LinkedIn: https://www.linkedin.com/company/schulke-&-mayr/
- YouTube: https://www.youtube.com/user/schuelkeChannel

You can find our contact details in the imprint.

In addition to us, the respective operator of the social media platform is also responsible for processing your personal data. As far as we can influence this and parameterize the data processing, we work within the scope of the possibilities available to us to ensure data protection-compliant handling by the operator of the social media platform. In this context, please also note the privacy policies of the respective social media platform.

Data processing by us

The data you enter on our social media sites, such as user names, comments, videos, pictures, likes, public messages, etc., are published by the social media platform and are never processed by us for other purposes. We only reserve the right to delete content if this is necessary. Where appropriate, we will share your content on our site, if this is a function of the social media platform, and communicate with you via the social media platform.

If you send us a request on the social media platform, we may also refer you to other, secure communication channels that guarantee confidentiality, depending on the content. For example, you have the option at any time to send us your inquiries to the address given in the imprint or via our contact form. It is your own responsibility to choose the appropriate communication channel.

The legal basis for processing your data is Art. 6 Para. 1 S. 1 lit. f GDPR. The data processing takes place in the legitimate interest to conduct public relations for our company and to be able to communicate with you.

Some social media platforms create statistics that are created on the basis of usage data and contain information about your interaction with our social media site. We cannot influence or prevent the implementation and provision of these statistics. However, we do not use optional statistics from the social media platform.

We process this information in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR in the legitimate interest of validating the use of our social media sites and improving our content in a target group-oriented manner.

In addition, we can occasionally use the social media platforms described to display targeted advertising. In this case, we use target group definitions that are made available to us by the social media provider. We only use anonymous target group definitions - we define characteristics, for example, on the basis of general demographic information, behavior, interests and connections. The operator of the social media platform uses these to display advertisements accordingly to its users. The legal basis for this is the consent that the operator of the social media platform has obtained from its users. If you want to revoke this consent, please use the revocation options provided by the provider of the social media platform, as the social media platform operator is responsible for this processing. Occasionally we or the provider of the social media platform also use publicly available data to define target groups. The legal basis for this processing is then Art. 6 Para. 1 S. 1 lit. f GDPR. The legitimate interest on our part is to define a target group that is as suitable as possible. We never use sensitive categories of personal data, which are mentioned in Art. 9 and 10 GDPR, to define target groups.

We do not use targeting based on location data. We do not pass on any personal data within the scope of the target group definition to the operator of the social media platform.

Occasionally we also use information about visits to or interaction with other sites (so-called remarketing) to define target groups. For this we use, among other things, also cookies. In these cases, however, we obtain the consent of the users in advance on the respective other sites via a consent banner and at this point provide information about the data processing. You can revoke this consent at any time by calling up the consent banner on the relevant website again.

If you would like to object to certain data processing over which we have an influence, please refer to the contact details given in the imprint.

Storage duration 

We delete your personal data when it is no longer required for the aforementioned processing purposes and there are no statutory retention requirements to prevent deletion.

Data procession by the operator of social media platform

The operator of the social media platform uses web tracking methods. The web tracking can also take place regardless of whether you are logged in or registered with the social media platform.

We would therefore like to point out that it cannot be ruled out that the provider of the social media platform will use your profile and behavioral data to evaluate your habits, personal relationships, preferences, etc. In this respect, we have no influence on the processing of your data by the provider of the social media platform, so that you use the social media platform at your own risk.

You can find more detailed information on data processing by the provider of the social media platform, configuration options to protect your privacy and other options for objection and, if available and concluded, the agreement pursuant to Art. 26 GDPR in the provider's privacy policy:

- Twitter: https://www.twitter.com/privacy
- Facebook: https://www.facebook.com/about/privacy und
https://www.facebook.com/legal/terms/page_controller_addendum
- XING: https://privacy.xing.com
- LinkedIn: https://www.linkedin.com/static?key=privacy_policy und
https://legal.linkedin.com/pages-joint-controller-addendum
- YouTube: https://www.youtube.com/privacy

Your rights as a website user

As a website user, you have the option of asserting the following rights towards us as well as towards the provider of the social media platform if the requirements are met:

Right of access (Art. 15 GDPR)
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case to obtain access to the personal data and the information specified in Art. 15 GDPR.

Right to rectification (Art. 16 GDPR)
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the right to have incomplete personal data completed.

Right to erasure (Art. 17 GDPR)
You have the right to obtain an erasure of the personal data concerning you without undue delay, if one of the reasons listed in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR)
If one of the conditions set forth in Art. 18 GDPR applies, you shall have the right to restrict the processing of your data to mere storage, e.g. if you revoke consent, to the processing, for the duration of a possible examination.

Right to data portability (Art. 20 GDPR)
In certain situations, listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or demand a transmission of the data to another third party.

Right to object (Art. 21 GDPR)
If the data is processed pursuant to Art. 6 para. 1 s. 1 lit. f GDPR (data processing for the purposes of the legitimate interests), you have the right to object to the processing at any time for reasons arising out of your particular situation. We will then no longer process personal data, unless there are demonstrably compelling legitimate grounds for processing, which override the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising or defending legal claims.
If the data is processed on the basis of legitimate interest for the purpose of direct advertising, you have your own right of objection, which you can assert at any time without giving reasons and the exercise of which leads to the termination of the processing for the purpose of direct advertising.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider the processing of the data concerning you infringes data protection regulations. The right to lodge a complaint may be invoked in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

Asserting your rights
Unless otherwise described above, please contact the office named in the respective imprint to assert your rights.

Contact Details of our Data Protection Officer

Please contact our data protection officer if you have any further questions, suggestions or wishes regarding data protection:

datenschutz nord GmbH
Sechslingspforte 2
22087 Hamburg
Germany
www.datenschutz-nord-gruppe.de
schlkdtnschtz-nrdd

If you contact our data protection officer, please also indicate the responsible body that is named in the imprint.

In general

In the following we would like to inform you about the management of your personal data. Please note that this general data protection information does not represent the privacy policy of our website - you can find it in the separate tab.

Controller

The controller responsible for the described data collection and processing is named in the imprint.

We collect and process personal data in accordance with the legal basis of Art. 6 Para. 1 S. 1 General Data Protection Regulation (GDPR), in particular on the following bases:

the data subject has given consent to the processing of his or her personal data for one or more specific purposes (right of withdrawal see "Your rights as a data subject"); 

the processing of your personal data is necessary to carry out pre-contractual measures that precede a contractually regulated business relationship or to fulfill the obligations arising from a contract concluded with you. This can include, for example, the processing of purchase orders, deliveries or payments, or the preparation and answering of requests for quotations from individuals, to determine the establishment or conditions of a contractual relationship;

processing is necessary for compliance with a legal obligation to which the controller is subject (e.g. tax, commercial and foreign trade or sanctions law); 

the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. The legitimate interests are in particular the conclusion or implementation of contracts and other business relationships with our business partners, suppliers or interested parties for whom you may act as a representative or as an employee. Furthermore, legitimate interests are internal administrative purposes (e.g. for accounting) or to ensure IT security and IT operations as well as to carry out compliance investigations, to guarantee building and system security or to assert, exercise or defend of legal claims (right to object see "Your rights as a data subject").

Regarding any data processing in detail:

1. Direct Marketing

If we receive your business or private e-mail address or postal address in connection with the sale of a product or service, we can use this address for direct advertising for our own similar products or services, provided you have not objected to the processing. When collecting your address and every time it is used, we clearly point out that you can object to its use at any time without incurring any costs other than the transmission costs according to the basic tariffs.

It is used on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR and in the interest of promoting the sale of our goods or services. If you do not want direct mail, you can object to data processing for this purpose by contacting the office named in the imprint. If we are not allowed to process your data on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR, we will only do so on the basis of your previously declared voluntary consent (right to withdrawal see "Your rights as a data subject").

2. Data Processing in the Context of Contacting

We process your data that you transmit to us in connection with the establishment of contact exclusively to process your request.

Depending on the content of your request, the legal basis here is, among other things, Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest follows from the aforementioned purpose of processing and answering your request. If your request is aimed at the conclusion of a contract, the legal basis for processing can also be Art. 6 Para. 1 S. 1 lit. b GDPR.

3. Sale of Goods and Services

We process your personal data in the context of the sale of goods and services for the purpose of performing pre-contractual measures and fulfilling the contract. The legal basis for this is Art. 6 Para. 1 S. 1 lit. b of the GDPR.

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of processing your personal data in the context of the sale of goods or services, this is the case when the contract has been fulfilled and all claims from the contractual relationship are statute-barred or there are no longer any statutory retention periods.

4. Supplier Creation and Ongoing Business Relationship

The legal basis for the processing of your personal data and the personal data of your company's contact persons in the context of the supplier questionnaire, supplier system and ongoing business relationship is Art. 6 Para. 1 S. 1 lit. b GDPR and Art. 6 Para. 1 S. 1 lit. f GDPR. The purpose of processing the aforementioned personal data is the awarding, execution and billing of the respective order as well as our legitimate interest in taking you into account when placing future orders or tenders (right to object in case of data processing acc. to Art. 6 Para. 1 S. 1 lit. f GDPR see "Your rights as a data subject").

Your personal data as well as the personal data of the contact persons of your company will be deleted as soon as they are no longer required for the award, execution and billing of the respective order, i.e. when the contract on which the order is based has been fulfilled and all claims from the contractual relationship are statute-barred or there are no longer any statutory retention periods. If it is taken into account in future orders or tenders, we will delete your personal data (contact details of the contact person) if your company is finally no longer interested in being taken into account in future orders or tenders or has declared a corresponding objection to data processing, at the latest however after 10 years.

II. Storage Duration

Unless we have already informed you in detail about the storage period, we delete personal data when it is no longer required for the aforementioned processing purposes, you have revoked your consent to data processing and there are no statutory retention requirements to prevent deletion.

III. Data Recipients

We only transfer your data to third parties if this is permitted under data protection law. We can also pass on your data to external service providers (providers for IT service, marketing, data and document destruction) who support us with data processing in the context of order processing, strictly bound by instructions and on the basis of an order processing contract. Should we transfer personal data to recipients outside the European Economic Area (EEA), the transfer will only take place if the EU Commission has confirmed an appropriate level of data protection for the third country, an appropriate level of data protection has been agreed with the data recipient (for example by means of standard contractual clauses) and further measures required to ensure an adequate level of data protection have been taken or you have given us your consent in accordance with the requirements of Art. 49 Para. 1 S. 1 lit. a GDPR.

IV. Your Rights as a Data Subject

As a data subject, the GDPR grants you certain rights when processing your personal data.

Right of access (Art. 15 GDPR)
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case to obtain access to the personal data and the information specified in Art. 15 GDPR.

Right to rectification (Art. 16 GDPR)
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the right to have incomplete personal data completed.

Right to erasure (Art. 17 GDPR)
You have the right to obtain an erasure of the personal data concerning you without undue delay, if one of the reasons listed in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR)
If one of the conditions set forth in Art. 18 GDPR applies, you shall have the right to restrict the processing of your data to mere storage, e.g. if you revoke consent, to the processing, for the duration of a possible examination.

Right to data portability (Art. 20 GDPR)
In certain situations, listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or demand a transmission of the data to another third party.

Right of withdrawal (Art. 7 GDPR)
If the processing of data takes place on the basis of your consent, you are entitled according to Art. 7 Para. 3 GDPR to revoke your consent to the use of your personal data at any time. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected.

Right to object (Art. 21 GDPR)
If the data is processed pursuant to Art. 6 Para. 1 S. 1 lit. f GDPR (data processing for the purposes of the legitimate interests), you have the right to object to the processing at any time for reasons arising out of your particular situation. We will then no longer process personal data, unless there are demonstrably compelling legitimate grounds for processing, which override the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising or defending legal claims.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider the processing of the data concerning you infringes data protection regulations. The right to lodge a complaint may be invoked in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

Asserting your rights
Unless otherwise described above, please contact the office named in the imprint to assert your rights as a data subject.

V. Contact Details of our Data Protection Officer

Please contact our data protection officer if you have any further questions, suggestions or wishes regarding data protection:

datenschutz nord GmbH
Sechslingspforte 2
22087 Hamburg 
Germany
www.datenschutz-nord-gruppe.de 
schlkdtnschtz-nrdd 

If you contact our data protection officer, please also indicate the responsible body that is named in the imprint.

Privacy Policy

We use analysis methods (e. g. cookies) to measure how often our site is visited and how it is used.
We embed third-party content from other providers (e. g. videos) on our site. We have no influence on further data processing and any tracking by the third party provider.
In this context, we also use service providers in third countries outside the EU that do not have an adequate level of data protection, which harbors the following risks: Access by authorities without informing the data subject, no data subject rights, no legal remedies, loss of control.
With your settings you consent to the processes described above. You can revoke your consent with effect for the future. You can find more information in our privacy policy.