DATA PRIVACY NOTICE
Data privacy is important to our company. We therefore guarantee our customers, business partners and users of our websites to protect their personal rights.
We guarantee to collect, store and use personal data only within the framework of the rules and regulations on data protection. Your data, which are collected on our websites to the technically necessary extent, will not be sold to any third party and will only be circulated on judicial order for prosecution purposes.
To give you security and peace of mind in this point, we would like to inform you about kind, scope and purpose of the collection and use of personal data. You can call up this information on our websites at any time.
Notes on handling of your personal data and your respective rights
(Information according to Articles 13, 14 and 21 of the General Data Protection Regulation GDPR)
This Data Privacy Notice includes terms and definitions, which are also used in the General Data Protection Regulation (hereinafter GDPR). As our aim is to be transparent and clear in this regard we would like to explain the terms used in our Data Protection Notice as they can also be found in Article 4 of the GDPR (‘Definitions’).
- Personal data
‘Personal data’ means any information relating to an identified or identifiable natural person (hereinafter ‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as name, an identification number, location data, an online identifier or to one or more factors to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transfer, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- Restriction of processing
‘Restriction of processing’ means the marking of stored personal data with the aim of limiting their processing in the future.
‘Controller’ means a natural or legal person, public authority or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
‘Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
‘Recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
- Third party
‘Third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
‘Consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Authorised to represent:
Legally represented by phG,
Express Küchen Geschäftsführungsgesellschaft mbH, Melle,
which is on its part represented by their managing directors
Marc Hogrebe, Eckhard Wefing and Manfred Wippermann
Data Protection Officer (DPO):
Stephanie Neitzel (Lawyer)
Websites are to some extent using what is also referred to as cookies. Cookies do not harm your computer and do not contain any viruses. The purpose of cookies is to make our offer more user-friendly, effective and safe. Cookies are small text files, which are filed on your computer and stored by your browser.
Most of the cookies we use are so-called ‘session cookies’. They are automatically deleted at the end of your session. Other cookies remain stored on your end device until you delete them. Such cookies allow us to recognize your browser when you visit our website the next time.
You can set your browser in a way that you are notified whenever cookies are set and such cookies are only allowed in certain individual cases; you can exclude the acceptance of cookies for individual cases or generally and such cookies are automatically deleted when the browser is closed. The functionality of this website might be impaired, though, if cookies are disabled.
Collection of access data /server log files
The supply and representation of contents via our website technically calls for the collection of certain data. Whenever you access our website, these so-called server log files are collected by the respective provider which is hosting the web service HOCH5 GmbH & Co. KG or a processor in compliance with Article 28 GDPR). No conclusions to individual persons can be drawn based on these log files.
The respective information consists of the name of the website, the file, the current date, the amount of data, the web browser along with its version, the operating system used, the domain name of your internet provider, the referrer URL as site from which you have changed to our page, and the respective IP address.
We use this data to represent and supply our contents on and to your end device as well as for statistical purposes. This information supports the provision and permanent improvement of our services. We do not merge the data of the server log files with any other data. We reserve the right to check the data in the server log files at a later stage if there is probable cause for illegal use of our website.
Encryption of data transfer
Our website uses SSL/TLS encryption technology. Thus, all data of forms and similar input masks relating to the user are safely transmitted.
This website uses the functions of Google Analytics, a web analytics service offered by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. This web analytics service uses so-called ’cookies’ (see above). The information regarding your usage behaviour of this website generated by the cookie is usually sent to a Google server in the US and is stored there.
If IP anonymisation is enabled on this website your IP address will, however, be shortened by Google within member states of the European Union or in other signatories of the agreement regarding the European Economic Area. Only in exceptional cases, the full IP address will be sent to a Google server in the US and then shortened there. On behalf of the operator of this website, Google will use this information to evaluate your website usage, to compose reports concerning the website activities and to provide more services in connection with the website and internet usage to the website operator. The IP address sent from your browser within Google Analytics will not be merged with the other data of Google.
You can prevent the collection of data generated by the cookie concerning your usage of our website (incl. your IP-address) along with the transfer to Google as well as the processing of these data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Google Maps Plugin
Our website uses a Google Maps plugin. The service of Google Maps is offered by Google Inc., based in the USA, CA 94043, 1600 Amphitheatre Parkway, Mountain View.
Whenever you use Google Maps on our website, information concerning your usage of this website and your IP address will be sent to a Google server in the US and will also be stored there. We have neither any knowledge about the exact contents of sent data nor about their usage by Google. In this regard, the company clearly denies the linking of data with information emanating from other Google services and the collection of personal data. However, Google is allowed to send information to third parties.
By using our website, you agree with the described collection and processing of information by Google Inc..
Handling of personal data
We collect personal data in the framework of data avoidance and data minimization to such an extent and for such a period as it is required for the use of our website and the services offered there or as long as prescribed by the legislator. We take the privacy of your personal data very serious and strictly abide to the respective legal regulations and to this data privacy notice when it comes to the collection and processing of personal data. If the purpose of data collection ceases to apply or if the maximum storage period has expired the collected data will be blocked or erased.
Our website can regularly be used without the circulation of personal data. When we collect personal data – such as your name, your address or your email-address – these data are collected on an optional basis. Such data will not be circulated to any third party without your explicitly given consent.
Please note that, in general, data are not always safely circulated in the internet. Especially when it comes to email correspondence, a full protection during data exchange cannot be guaranteed.
Purpose of processing
The processing of personal data is carried out in accordance with the regulations of the European General Data Protection Regulation (GDPR) and the German Bundesdatenschutzgesetz (BDSG):
- Due to your consent (Article 6, para. 1a GDPR)
The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
- For the performance of a contract (Article 6, para. 1b GDPR)
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
- Due to compliance with legal obligation (Article 6, para. 1c GDPR)
Processing is necessary for compliance with a legal obligation to which the controller is subject.
- For the purpose of legitimate interest (Article 6, para. 1f GDPR)
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
Withdrawal of given consent
According to Article 7, para. 3 GDPR, the data subject shall have the right to completely withdraw or change his or her consent regarding the processing of personal data for one or more specific purposes at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. If not offered via special functions, you can send us your withdrawal either by post, email or by using our contact form on our website. There will be no other costs for you than the postal charges or the transfer costs in compliance with the currently valid basic tariffs.
Data collection at third parties
If, in connection with our brand, our product or our company, personal data are collected, stored, processed at third parties and are circulated to us for a certain purpose, the transfer of such data to us is especially subject to the lawfulness of the respective collector. If data is sent to us (e.g. in connection with brochures of our company ordered on kitchen information platforms on the internet), we assume consent of the data subject regarding the circulation to and processing by our company. Hereby, however, we only accept data transfers and process them if they come from authorized sources known to us due to active business relationships.
Circulation of data
For the purpose of fulfilment of our contractual and statutory obligations or also services required by the user, business partners assigned by our company – such as a processor (Article 28 GDPR) will be granted access to your data.
Should a data subject explicitly request the communication of contact data between this data subject and a business partner of our company due to initial approaches of a purchase contract, such business partner receives the personal data of the data subject in line with the framework information concerning the intended purchase. Should you request the erasure of your data we will forward your request to the previous recipient for its information with the request to evaluate the lawfulness of a continued storage of data on its part.
Transfer of data into a third-party country or to an international organisation
There will only be a transfer of data into third-party countries if this is necessary for order fulfilment or statutory or if the data subject has given his or her consent.
Maximum storage period of data
If necessary, we process and store your personal data for the period required for the fulfilment of the respective purpose for which consent to data processing has been given.
Apart from that, we are subject to certain retention and documentation obligations resulting from the German Commercial Code (HGB), amongst others. The maximum retention or documentation periods respectively indicated there are two to ten years.
If you send us your enquiry via our contact form, your data of the enquiry form plus the contact data entered there will be stored in order to process your enquiry and in case of later enquiries. These data will not be given to any third party without your consent.
Your online application
Express Küchen GmbH & Co. KG is happy about your visit on our career page and about your interest in our company. The protection of your privacy during the processing of personal data is very important to us and we consider it in all our business processes.
Personal data which we only need to process your application and to correspond with you, such as master data (name, address), telecommunication data (phone number, email), personal data profiles with picture, CV and certificates will only be stored when you enter these data voluntarily in line with your application. Your personal information and data will be collected, stored and only used for the dedicated purpose with utmost diligence and integrity. In this process, we only collect data that are mandatorily necessary for your application at Express Küchen GmbH & Co. KG.
You agree with the processing and transfer of your data exclusively for the purpose of the application process. You guarantee that all details specified are true and correct.
Apart from that, you are aware of the fact that false details might result in termination of a possible employment contract.
All data will be encrypted by way of TLS encryption technology.
With your application via the contact form on our website, your personal contact details and PDF attachments (resume, etc.) will be automatically sent to a mailbox exclusively for applications and evaluated confidentially by the HR department and the relevant department.
Your data will be erased six months after completion of the application process. You can withdraw your consent to the storage and usage of your data in writing at any time.
Should your application not be fruitful, we will – upon you have given your consent – store your personal data which you have given us in the course of the entire application process beyond the end of the concrete application process. We will use your data in accordance with your consent in order to contact you and to continue the application process, should you come into consideration for another position.
Explanations regarding the data subjects’ rights
As a user of our website, the data subject is entitled – upon proof of their identity – at any time and free of charge to access the data stored about the data subject and for the purpose of storage (Article 15 GDPR). Apart from that, the data subject has the right to rectification (Article 16 GDPR), right to erasure (Article 17 GDPR), right to restriction of processing (Article 18 GDPR) or right to data portability (Article 20 GDPR). Please feel free to contact us or our Data Protection Officer, lawyer Stephanie Neitzel in writing. In case of an assumed infringement against data privacy rights, the data subject also has the right to lodge a complaint with a supervisory authority (Article 77 GDPR i.c.w. § 19 of the Federal Data Protection Act). The supervisory authority responsible for Express Küchen GmbH & Co. KG is the data protection authority of Lower Saxony.
Right to object
According to Article 21 GDPR, the data subject shall have the right to object at any time to processing of personal data concerning him or her which is based on Article 6, para. 1f GDPR (data processing for the purpose of legitimate interest). Full or partial objection can be sent to Express Küchen GmbH & Co. KG together with a respective message (per mail or email).
If there are no longer mandatory reasons requiring protection for processing outweighing your interests, rights or freedoms or if the processing serves for the enforcement, exercising or defending of legitimate claims, your personal data will no longer be processed if you object to processing.
Objection to email marketing
The usage of contact data published within the framework of imprint obligation for the purpose of providing not specifically requested advertisements and information is herewith objected to. The website operators explicitly reserve all legal steps if advertising material, e.g. spam emails, are sent unrequested.