At this point we inform you which data is collected, processed and used for which purposes when using this website.
I. Responsible Person for the Data Processing1. Name and contact information of the responsible persons
The person responsible within the meaning of the DS-GVO (Regulation (EU) 2016/679) and other applicable data protection laws, in particular, the BDSG as amended, is:
Süd-Fensterwerk GmbH & Co. operating-KG
represented by Süd-Fensterwerk GmbH, which represents the managing director Florian Kneer
Rothenburger Straße 39
Telefon: +49 (0) 7950 / 81-0
Fax: +49 (0) 7950 / 81-253
2. Jointly responsible for data processing
The persons responsible according to No. 1 decides together with the
represented by the managing director Florian Kneer
Windows and Doors
Telefon: +49 (0) 7333 / 83-0
Fax: +49 (0) 7333 / 83-240
represented by the managing director Florian Kneer
on the means and purposes of the processing of personal data described below. Süd-Fensterwerk GmbH & Co. Betriebs-KG, Kneer GmbH and Süd-Bauelemente GmbH are therefore jointly responsible within the meaning of Paragraph 26 DS-GVO (Regulation (EU) 2016/679). In an agreement, the companies have stipulated that Süd-Fensterwerk GmbH & Co. Betriebs-KG, as the responsible party, will fulfil all obligations arising from the DS-GVO (Regulation (EU) 2016/679), in particular with regard to the exercise of the rights of data subjects and the fulfilment of the information obligations under Paragraphs 13 and 14 of the DS-GVO (Regulation (EU) 2016/679).
II. General information on data processing
1. Legal basis for processing personal data
Unless otherwise indicated below, the following applies with regard to the legal basis for the processing of personal data:
Where we obtain the consent of the data subject for processing personal data, Paragraph Paragraph 6 Sec. 1 lit. a DS-GVO (Regulation (EU) 2016/679) serves as the legal basis. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Paragraph 6 Sec. 1 lit. b DS-GVO (Regulation (EU) 2016/679) serves as the legal basis. This also applies to processing necessary for pre-contractual proceedings. Insofar as processing personal data is necessary to fulfil a legal obligation to which we are subject, 6 Sec. 1 lit. c DS-GVO (Regulation (EU) 2016/679) serves as the legal basis. If vital interests of the data subject or of another natural person necessitate the processing of personal data, the legal basis for the processing is Paragraph 6 Section 1 lit. d DS-GVO (Regulation (EU) 2016/679). If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Paragraph 6 Sec. 1 lit. f DS-GVO (Regulation (EU) 2016/679)(1) serves as the legal basis for processing. In this case, the person responsible shall communicate these legitimate interests separately.
2. Data deletion and duration of storage
Personal data of affected persons will be deleted or blocked as soon as they are no longer required for their collection, except where longer storage period is required by law.
3. Location of Data Storage
Unless otherwise described in this data protection declaration, personal data is processed exclusively in computer centres located within the scope of the DS-GVO (Regulation (EU) 2016/679).
4. Data Security
The SSL (Secure Socket Layer) procedure is used when visiting these web pages to protect the security of your data. We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved to meet state-of-the-art requirements.
III. Data Processing
1. Usage data
1.1 If you only visit these web pages for information purposes, your Internet browser automatically transmits data to our web server or hosting provider for technical reasons. This includes:
- Date and time point of access
- URL of the referring website
- Content of the request (specific page)
- Access status (file found or file not found)
- Browser type, version and language
- Operating system and -version
- Time zone difference from Greenwich Mean Time (GMT)
- IP Address and Internet Access Provider
- The amount of data transmitted
By default, the data is stored in the log files of the system. This data is not stored together with other personal user data.
1.2 The above data is used to enable the use of the websites, to ensure system security and stability and to optimise the Internet offering. The IP address of the user is only evaluated in the event of an attack on the network infrastructure. Any further processing of the data may take place in anonymous form for statistical purposes. This also implies the legitimate interest within the meaning of Paragraph 6 Sec. 1 lit. f DS-GVO (Regulation (EU) 2016/679).
1.3 All data is deleted, as soon as it is no longer required to achieve the purpose for which it was collected. When collecting the data for providing the website with it, this is the case when the respective session is completed. Should any data be stored in log files, these will be deleted after seven days at the latest. Data may be stored for longer than this. In this case, the IP addresses are automatically shortened so that it is no longer possible to assign the calling client.
1.4 The legal basis for processing these data is your consent under Paragraph 6 Sec. 1 S. 1 lit. f DS-GVO
(Regulation (EU) 2016/679).
1.5 The collection of data for the provision of the websites and the storage of data in log files is mandatory for the operation of the websites. In this respect, there is no possibility of appeal.
2.1 In addition to the data above, so-called cookies are used on these web pages. These are text files that are stored on the data carrier of your terminal device. They make it possible to uniquely identify your browser on the basis of a characteristic string of signs. This does not give us direct knowledge of your identity.
2.2 The purpose of using cookies is to simplify the use of this website, to make it more user-friendly and effective and to improve the quality of the websites and their content. This also implies the legitimate interest within the meaning of Paragraph 6 Sec. 1 lit. f DS-GVO (Regulation (EU) 2016/679).
2.3 Some of the cookies created (so-called session cookies) are automatically deleted again after closing all browser windows. Without the use of such session cookies, you would present yourself to our system on each of our pages as a new, unknown user. Some features of our pages would not possibly function without these cookies. Other cookies remain on your computer and enable us to recognise your browser upon your next visit (persistent cookies). They are automatically deleted after a specified duration, which may vary depending on the cookie. Most browsers accept cookies by default. This can be deactivated or restricted at any time, in the security settings of your browser. There you will also find the option of deleting cookies that have already been saved. For details, please refer to the help function of your browser. We would like to point out that the acceptance of cookies is the basis for some of the functions of the websites. If cookies are not accepted, some of the website functions are not available or are not displayed correctly.
2.4 The legal basis for the processing of personal data using cookies is Paragraph 6 Sec. 1 lit. f DS-GVO (Regulation (EU) 2016/679).
3. Google Fonts
3.2 By using Google Fonts, a uniform display of these web pages can be achieved and their loading time optimised. This also implies the legitimate interest within the meaning of Paragraph 6 Sec. 1 lit. f DS-GVO (Regulation (EU) 2016/679).
3.3 Google also processes your personal data in the United States and has adopted the EU-US Privacy Shield to ensure compliance with European data protection laws. Further information can be found here: https://www.privacyshield.gov/EU-US-Framework
3.4 The legal basis is Paragraph 6 Section 1 lit. f DS-GVO (Regulation (EU) 2016/679).
4. Establish contact using the Contact form/E-mail
4.1 We offer you various ways to contact us on these websites. This can be done either via contact forms provided by us or via E-mail.
Alternatively, you may contact us via the E-mail addresses provided. In this case, the personal data transmitted with the E-mail will be transmitted to the responsible person and automatically stored there.
4.2 Personal data transmitted in this context will be used exclusively for the processing of the respective enquiry or, if applicable, for the execution of the contract. This also implies the legitimate interest within the meaning of Paragraph 6 Sec. 1 lit. f DS-GVO (Regulation (EU) 2016/679).
4.3 The data transmitted by you will be deleted as soon as they are no longer required for their collection. This is the case where it is apparent from the circumstances that the facts in question have been definitively clarified.
4.4 The legal basis for the processing of the data described in this paragraph is Paragraph 6 Sec. 1 lit. f DS-GVO (Regulation (EU) 2016/679)). If the contact is aimed at the conclusion of a contract, or if it is necessary for the fulfilment of a contract or pre-contractual measures, an additional legal basis for the processing is Paragraph 6 Sec. 1 lit. b DS-GVO (Regulation (EU) 2016/679).
5. Using our job portal
5.1 If you make use of our job portal, we process the contact data provided by you (in particular, your personal data). First and last name, address, phone number and E-mail address), qualification-related data (in particular information, certificates and attestations contained in the cover letter and curriculum vitae), as well as any photographs attached to your application if applies.
5.2 The data transmitted by you will be processed to the extent necessary for the application procedure. The legal basis in this respect is Paragraph 88 DS-GVO (Regulation (EU) 2016/679) in conjunction with § 26 of the German Federal Data Protection Act (BDSG).
5.3 If an employment relationship is concluded as a result of an online application, the transmitted data will be stored, to process it, in compliance with the statutory provisions. If an employment relationship is not established, the application documents will be deleted six months after notification of the rejection decision, unless deletion conflicts with any other legitimate interests of the data controller (e.g. a burden of proof in proceedings under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz - AGG)).
IV. Disclosure of personal dataFor certain data processing processes, we use the assistance of external service providers to whom we grant access to your personal data in order to provide these services. These service providers are carefully selected and meet high data protection and data security standards. They are bound to strict secrecy, and process data only on our behalf and according to our instructions. Except the cases described in this data protection declaration, we only transfer personal data to third parties in the following cases:
- You have, according to Paragraph 6 Sec. 1 S. 1 lit. a DS-GVO (Regulation (EU) 2016/679) given us your explicit consent to this;
- The disclosure is necessary in accordance with Paragraph 6 Sec. 1 S. 1 lit. b DS-GVO (Regulation (EU) 2016/679) for the execution of a contractual relationship with you;
- For the passing on of data, there exists, according to Paragraph 6 Sec. 1 S. 1 lit. c DS-GVO (Regulation (EU) 2016/679) a legal obligation;
- The disclosure is necessary in accordance with Paragraph 6 Sec. 1 S. 1 lit. f DS-GVO (Regulation (EU) 2016/679) in order to safeguard legitimate interests, and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.
V. Your rights as a concerned party
1. if we process personal data from you, you are affected in the sense of the DS-GVO (Regulation (EU) 2016/679). You have the following rights against us:
1.1 The right to information (Paragraph 15 DS-GVO (Regulation (EU) 2016/679))
1.2 The right to rectification (Paragraph 16 DS-GVO (Regulation (EU) 2016/679))
1.3 The right to cancellation (Paragraph 17 DS-GVO (Regulation (EU) 2016/679))
1.4 The right to the restriction of processing (Paragraph 18 DS-GVO (Regulation (EU) 2016/679))
1.5 The right to data transfer (Paragraph 20 DS-GVO (Regulation (EU) 2016/679))
1.6 The right to object
You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, which is carried out in accordance with Paragraph 6 Sec. 1 lit. e or f DS-GVO (Regulation (EU) 2016/679); this also applies to profiling, based on these provisions, which, however, does not take place here.
1.7 The right of revocation
You also have the right to revoke any declaration of consent under the data protection law with effect for the future, at any time (Paragraph 7 Sec. 3 DS-GVO (Regulation (EU) 2016/679). This revocation will not affect the lawfulness of any processing done beforehand.
2. The right to lodge a legal complaint with a supervisory authority
You also have the right to lodge a complaint with a data protection supervisory authority, concerning our processing of your personal data.
3. The Exercising of Rights
3.1 In order to exercise the rights set out in this section, and in the event of questions or complaints regarding the use of your personal data, users of these web pages and those affected in any other way may contact us, at any time.
3.2 In order to make it easier for you to exercise your rights, we have appointed the person responsible, in accordance with Section I, No. 1 of this Data Protection Statement, as the single point of contact. Irrespective of this, you may also assert your rights with and vis-à-vis each of those responsible or contact the data protection officer.
3.3 The contact details of the data protection officer are as follows:
Firma Süd-Fensterwerk GmbH & Co. Betriebs-KG
Data protection officer
Rothenburger Str. 39