Privacy policy

03/2020

We process the personal data of the user (hereinafter “data”) only insofar as they are required for the provision of a functional, convenient website as well as for our content and services.

“Processing” includes collection, use, forwarding and/or storing. According to the General Data Protection Regulation (hereinafter “GDPR”), “personal data” are fundamentally all data which can identify a natural person. The precise definition is set out in Article 4 of the GDPR.

The following clauses provide information about the nature, scope, purpose, duration and legal basis of the processing of personal data, the purposes and means of processing of data about which we make decisions alone or together with others, as well as any use of components for the optimisation and quality of use from third parties who process data under their own responsibility:

  1. Information about the controller
  2. Rights of users
  3. Information about data processing

1. Information about the controller

The controller (hereinafter the “provider”) as understood in the GDPR and other national data protection legislation of Member states as well as other data protection regulations is:

Schwelm Anlagentechnik GmbH
Loher Straße 1
D-58332 Schwelm

Phone: +49 (0) 2336 / 809 - 0
Fax: +49 (0) 2336 / 809 - 222
E-mail: info(at)schwelm-at(dot)de

The data protection officer of the provider is:

Herr Kornel Mierau
c/o Schwelm Anlagentechnik GmbH

E-mail: datenschutz(at)schwelm-at(dot)de

2. Rights of users

With regard to their personal data processed by the provider, the user has the right,

  1. To request confirmation whether their data will be processed and precise information about such data, as well as other information and copies of the data according to Article 15 of the GDPR;
  2. To request immediate correction of incorrect data affecting them, or the completion of such data according to Article 16 of the GDPR;
  3. To request the immediate deletion of data affecting them according to Article 17 of the GDPR, or alternatively, if further processing is required according to Article 17 para. 3 of the GDPR, to request the restriction of the processing of the data in accordance with Article 18 of the GDPR;
  4. To receive the data affecting him or her and supplied by him or her according to Article 20 of the GDPR, and to request the transfer thereof to other controllers;
  5. To submit a complaint to the supervisory authorities according to Article 77 of the GDPR, if the user believes that the processing of his or her data by the provider is in violation of the GDPR.
  6. The user is entitled to object to future processing of the data affecting him or her by a controller based on Article 6 para. 1 lit. f of the GDPR, at any time in accordance with Article 21 of the GDPR. The objection may in particular be made against processing for direct marketing purposes.
  7. The provider is obliged at all times to inform all recipients of the data to whom he has published the data of any correction or deletion of personal data, or a restriction in processing due to Article 16 GDPR, Article 17 Para. 1 GDPR and Article 18 GDPR. This obligation does not apply in the event that this communication is impossible or is associated with excessive effort. The client has the right to information regarding these recipients.

3. Information about data processing

Insofar as no detailed information is given below regarding the individual data processing, the data of the user processed by the provider shall be deleted or blocked as soon as the purpose of the storage no longer applies and the deletion does not conflict with any statutory storage requirements.

Server data

For communication and security reasons, during the visit of the website the following data among other are collected, which the internet browser of the user transmits to the provider or to his or her web space provider (so-called server log files):

  • Browser type and version;
  • Operating system used;
  • Website from which the user switched to the website of the provider (Referrer URL);
  • Website the user is visiting;
  • Date and time of access;
  • Internet protocol (IP) address of the user

The data is also saved temporarily. This data is not stored together with other personal data relating to the user. The legal basis for the temporary storage of data is Art. 6 Para 1 letter f GDPR based on the entitled interest of improving stability, functionality and security of the website.

The data will be deleted after seven days at the latest. Data which must be stored for purposes of documentation is excluded from deletion until the event in question is fully clarified.

Cookies

a) “Session” cookies/ „persistente“ cookies

The provider uses cookies on its website. Cookies are small text files or other storage technology which the internet browser of the user places and stores on their device. These cookies process certain user information in an individually defined scope, such as browser and location data, plus IP address values.

This processing helps the provider make its website more user friendly, effective and more secure. They facilitate the processing or possible forwarding of content in different languages or, if required, the use of a shopping basket function.

The "persistent" cookies allow the website to recognize the user through his browser in a timely repeated visit to the website to not reproduce the already issued notice on the use of cookies.

The processing serves the legitimate interest of the provider with regard to improving functionality of the website and the fulfillment of legal requirements and is based on the legal basis of Article 6 para. 1 lit. f of the GDPR.

The “session” cookies are deleted once the user closes his or her browser. The "persistent" cookies are automatically deleted after a deadline set by the provider. This period varies by cookie but does not exceed one year.

b) Cookies from third party providers

Cookies from third party providers may be used on the website of the provider if required. These third party providers are partner companies which the provider works with for purposes of advertising, analysis or the functionality of the website. If this is the case, the purposes and legal basis of the corresponding processing shall be shown in the subsequent sections.

c) Option of removal

The user can prevent or restrict the installation of cookies by changing the settings in his or her browser software accordingly. Cookies already stored can also be deleted at any time. The settings for this depend on the browser in question. For Flash cookies, the processing cannot be prevented via the browser settings, rather the corresponding settings of the Flash player. If the user prohibits or restricts the installation of cookies, this may mean that all functions of the website may not be fully usable.

Contract processing

a) Processing

The personal data supplied by the user as part of the purchase of goods or services shall be processed by the provider as part of contract processing. The data are required for the conclusion of the contract, without providing the data, it is not possible to complete the contract. The legal basis for processing the data is Article 6 para. 1 lit. b of the GDPR. Once the contract has been completed, the personal data of the user shall be deleted, taking into account the retention periods stipulated under tax and commercial legislation.

b) Transfer

The personal data of the user shall be passed on to a service provider used to process the purchase of goods or services, to the carrier in charge of the delivery or to the financial service provider, insofar as this is necessary for the processing, delivery or payment of the goods or services.

The legal basis for the transfer of data in this case is Article 6 para. 1 lit. b of the GDPR.

Contact questions

If the user makes contact with the provider via the contact form or email, the personal data entered as part of this shall be used to process the query. Entering the data is required to answer the query, without providing the data, it is not possible to answer the query, or only possible to a limited extent.

If the contact helps fulfil a contract or execute contractual activities, the legal basis is Article 6 para. 1 lit. b of the GDPR.

The data of the user shall be deleted once the user query has been answered conclusively, and no legal storage obligations contradict this, such as for subsequent contract processing.

The legal basis may also be the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR.

According to Art. 7 para. 3 DSGVO, the user can revoke this consent at any time for the future by sending a message to the provider. The data of the user shall be deleted once the user query has been answered conclusively, and no legal storage obligations contradict this, such as for subsequent contract processing.

Job applications

With regard to digital applications, the application data shall be electronically collected and dealt with by us for the purpose of processing the application.

The legal basis for this processing is § 26 para. 1 S.1 of the Federal Data Protection Act combined with Article 88 para. 1 of the GDPR.

If your application is followed by the conclusion of a contract of employment, your data may be stored by us in your personal file for the purpose of the normal organisational and administrative process, in compliance with the relevant legal provisions.

The legal basis for this processing is § 26 para. 1 S.1 of the Federal Data Protection Act combined with Article 88 para. 1 of the GDPR.

The deletion of the data transmitted takes place upon rejection of the job application automatically two months after the notification of the rejection. This does not apply if we are required to keep the data for a longer period of up to four months, or on completion of a court process due to legal requirements (documentation obligation pursuant to the General Equality Act).

The legal basis is Article 6 para. 1 lit. f of the GDPR or § 24 para. 1 no. 2 of the Federal Data Protection Act.

The legitimate interest of the provider is in the legal defence.

If a prolonged storage of the data in a prospect database was expressly agreed, the data shall be further processed on the basis of the consent.

The legal basis is Article 6 para. 1 lit. a of the GDPR. The consent for this may be withdrawn at any time for the future pursuant to Article 7 para. 3 of the GDPR by notification to the provider.