Art. 1 Controller and Data Protection Officer
I. Name and address of the Controller
The Controller, within the meaning of the General Data Protection Regulation (GDPR), as well as other data privacy provisions, is:
Schenck Process Europe GmbH
T +49 61 51-15 31 0
Christoph Haar Managing Director & President EMEA
Sven Hammer Managing Director & Senior Vice President EMEA
II. Name and address of the Data Protection Officer
The Controller’s Data Protection Officer is:
Graf von Westphalen Verwaltungs GmbH
Poststr. 9 – Alte Post
Art. 2 General remarks on data processing
I. Scope of the processing of personal data
We essentially only gather and use personal data of yours in so far as it is necessary to provide the website, as well as provide our services.
II. Legal basis for the processing of personal data
You will find out under the specific data processing procedures on what legal basis the processing is being undertaken.
III. Deletion of data and duration of storage
Your personal data is deleted or blocked by us once the purpose of the storage lapses. It may, however, be stored beyond the time limit for the purpose at hand if this has been stipulated by national or international legislation, to which we are subject. The data is, in such a case, blocked or deleted if a storage period prescribed by the said regulations expires, unless there is any necessity to store the data further in order to conclude or fulfill a contract.
Art. 3 Gathering of data when visiting our website
(1) When using the website merely to obtain information, i.e. if you do not register or transmit information to us in any other way, we shall only gather the data that your browser transmits to our server. If you look at the website, we thereafter gather the following data, which are technically required in order to display our website to you and ensure its stability and security:
· IP address
· Date and time of the request
· Time zone difference in relation to Greenwich Mean Time (GMT)
· The content of the request (specific page)
· The access status/http status code
· The respective volume of data transmitted
· The website from which the request comes
· The browser
· The operating system and its user interface
· The language and version of the browser software.
(2) The legal basis for the gathering of such data is Art. 6(1)(1)(f) GDPR.
(3) In order to operate the website, it is absolutely necessary to gather the data to provide the website and store the data in log files. Consequently, you do not have the opportunity to object.
Art. 4 Cookies
(1) In addition to the data mentioned above, when you use our website cookies are stored on your computer. Cookies are small text files that are stored on your hard drive, assigned to the browser used by you, and by means of which the organization that places the cookie (in this case, us) receives certain information. Cookies are not able to execute any programs or transmit viruses to your computer. They serve the purpose of making our website more user-friendly and effective.
(2) This website uses session cookies: Session cookies are automatically deleted when you close the browser. These save a so-called session ID, with which various requests of your browser can be allocated to the joint session. In this way your browser can be recognized if you return to our website. The session cookies are deleted once you log out or close the browser.
(3) You can configure your browser setting in line with your wishes, and, for example, refuse to accept third party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.
(4) The legal basis for the processing of personal data using cookies is Art. 6(1)(f) GDPR.
Art. 5 Use of plugins
Our website does not use any plugins of social networks. We only link to our profiles on the networks: LinkedIn, Xing, Facebook, Kununu. To that extent, we do not gather any personal data. If you wish to be sure that no data is stored with these providers in regard to the visit to our website, we recommended logging out of them.
Art. 6 Email contact
(1) If you contact us by email, the data notified by you (your email address, possibly your name and your telephone number) is saved by us to answer your inquiry. We delete this data once the purpose of storing it lapses.
It may, moreover, be stored beyond that time if this has been stipulated by the European or national legislative authority in EU ordinances, laws or other regulations to which the Controller is subject. The data is also blocked or deleted if a storage period prescribed by the regulations mentioned expires.
(2) When user consent exists, the legal basis for the processing of the data is Art. 6(1)(a) GDPR. Otherwise, the legal basis for the processing of the data that is transmitted in the course of sending an email is Art. 6(1)(f) GDPR. If the aim of the email contact is to conclude a contract, then the additional legal basis for the processing is Art. 6(1)(b) GDPR.
Art. 7 Rights of the data subject
If your personal data is processed by us, you have the following rights:
(1) Your right to information
You may request from us confirmation whether any personal data concerning you is processed by us. Should this be the case, you can request the following information from us:
a. The purposes for which the personal data is processed;
b. the categories of personal data that are processed;
c. the recipients or categories of recipients vis-à-vis whom you have disclosed or intend to disclose the personal data concerned;
d. the scheduled duration of storage of the personal data concerning you, or, if specific details concerning the latter are not available, criteria for laying down the period of storage;
e. the existence of a right to correction or deletion of the personal data affecting you, a right to limitation of the processing by the controller or a right to object to such processing;
f. the right to file a complaint with a supervisory authority;
g. if the data was not gathered from the data subject, any information available on the origin of the data;
h. the existence of automated decision making, including profiling, in accordance with Art. 22(1) and (4) GDPR and - at least in such cases - meaningful information on the logic involved, as well as the scope and intended effects of such processing on behalf of the data subject.
i. the transmission of personal data to a country outside the EU or an international organization, as well as the briefing on the appropriate warranties pursuant to Art. 46 GDPR in connection with the transmission.
(2) The right to correction
You have a right to correction and/or completion in regard to the data which is incorrect or incomplete.
(3) The right to restriction of processing
You may, on the following prerequisites, request that the processing of the personal data concerning you be restricted:
a. if you dispute the accuracy of the personal data concerning you, for a period of time that enables the controller to check the accuracy of the personal data;
b. if the processing is illegitimate and you decline to have the personal data deleted, and, instead, request that the use of the personal data be limited;
c. if we no longer need the personal data for the purposes of the processing, however you need it in order to assert, exercise or defend legal claims; or
d. if you have filed an objection against the processing pursuant to Art. 21(1) GDPR and it has not yet been established whether the controller’s legitimate grounds outweigh your grounds.
Should the processing of the personal data concerning you have been restricted, such data may – apart from being saved – only be processed with your consent or in order to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons involving a significant public interest on the part of the EU or a Member State.
Should the restriction of the processing have been limited in accordance with the above-mentioned prerequisites, you will be briefed by us before the limitation is lifted.
(4) The right to deletion
You may request us to have the personal data concerning you deleted without delay, and we are obliged to delete such data immediately, as long as one of the following reasons exists:
a. The personal data concerning you is no longer necessary for the purposes for which it was gathered or otherwise processed.
b. You revoke your consent, on which the processing pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR was based, and there is no other legal basis for the processing.
c. Pursuant to Art. 21(1) GDPR, you object to the processing and no overriding legitimate grounds for the processing exist, or you object to the processing pursuant to Art. 21(2) GDPR.
d. The personal data concerning you has been processed illegitimately.
e. The deletion of the personal data concerning you is necessary in order to fulfill a legal obligation under EU law or the law of the Member States, to which the controller is subject.
f. The personal data concerning you was gathered in relation to information society services offered pursuant to Art. 8(1) GDPR.
(5) Information given to third parties
Should we have made the personal data concerning you public in order to fulfill our contractual obligations, and should we, pursuant to Art. 17(1) GDPR, be obliged to delete it, we will also take appropriate steps of a technical nature, in order to provide the information that you, as a data subject, have requested us to delete any links to such personal data or copies or replications of such personal data.
The right to deletion does not exist if the processing is necessary
a. in order to exercise the right of freedom of expression and information;
b. in order to comply with a legal obligation which requires the processing in accordance with the law of the European Union or the Member States to which the controller is subject or in order to perform a task carried out in the public interest or by way of exercising official authority vested in us;
c. for reasons in the field of public health that are public interest-related pursuant to Art. 9(2)(h) and (i), as well as Art. 9(3) GDPR;
d. for archival purposes, scientific or historic research purposes or statistical purposes that are in the public interest pursuant to Art. 89(1) GDPR, if the right specified in Section a) is likely to make the implementation of the objectives of such processing impossible or seriously compromise them; or
e. in order to assert, exercise or defend legal claims.
(7) The right to a briefing
Should you have asserted the right to correction, deletion or restriction of the processing vis-à-vis us, we are obliged to inform all recipients to which you have disclosed personal data to correct or delete the data or restrict the processing, unless this proves impossible or involves disproportionate effort.
You are entitled to be informed about such recipients.
(8) The right to data portability
You are entitled to receive the personal data concerning you that you have provided us with in a structured, common and machine-readable format. In addition, you have the right to transmit such data to another controller, without being impeded by us, if
1. the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or a contract pursuant to Art. 6(1)(b) GDPR; and
2. the processing is performed using automated procedures.
In exercise of this right, you, moreover, have the right to arrange for the personal data concerning you to be transmitted directly by us to another controller, if this is technically feasible. Freedoms and rights of other persons may not be impaired thereby.
The right to the data being transmittable does not apply to any processing of personal data which is necessary in order to take on a task that is in the public interest or in exercise of public authority that has been vested in the controller.
(9) The right to object
a) You are entitled, for reasons which arise from your particular situation, to object to the processing of the personal data concerning you, which is being undertaken based on Art. 6(1)(e) or (f) GDPR, at any time.
We will then no longer process the personal data concerning you unless we can provide evidence of mandatory reasons for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
Should the personal data concerning you be processed for the purposes of direct advertising, you are entitled to object to the processing of the personal data concerning you for the purpose of such advertising at any time. This also applies to profiling, in so far as it is connected with such direct advertising.
Should you object to the processing for purposes of direct advertising, the personal data concerning you will no longer be processed for such purposes.
You have the opportunity, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right of objection using an automated procedure, where technical specifications are used.
b) You are entitled to revoke your declaration of consent under data privacy law at any time. The legitimacy of the processing performed based on consent prior to its withdrawal shall not be affected by the revocation of the consent.
c) You are entitled not to be subjected to a decision based solely on automated processing, – including profiling –, which develops a legal impact in relation to you or considerably impairs you in a similar way. This does not apply if the decision
1. is necessary for concluding or fulfilling a contract between you and us;
2. is permissible based on legislation of the European Union or the Member States to which we are subject, and such legislation includes appropriate steps to protect your rights and freedoms, as well as your legitimate interests; or
3. is undertaken with your express consent.
Such decisions may, however, not be based on special categories of personal data pursuant to Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms, as well as your legitimate interests.
In regard to the cases specified in (1) and (3), we shall take appropriate measures to preserve the rights and freedoms, as well as your legitimate interests, which at least includes the right to bring about the intervention of a person on the part of the controller, to explain one’s own point of view and to contest the decision.
(10) Right to file a complaint with a supervisory authority
Notwithstanding any other legal remedy, or legal remedy under administrative law or any of a judicial nature, you are entitled to file a complaint with a supervisory authority, in particular in the Member State that is your place of residence, your place of work or the place of the presumed violation if you are of the opinion that the processing of the personal data concerned violates the GDPR.
The supervisory authority with which the complaint has been filed will inform the complainant about the status and the results of the complaint, including the possibility of a judicial legal remedy pursuant to Art. 78 GDPR.