1. Automated Collection and Storing of Access Data
We make every effort to constantly improve the services on our website. For this purpose, we collect and store certain access data by automated means as soon as you access the website.
This data set consists of the following information:
- the page from which the link to our website was made,
- the date and time of access,
- the duration of your visit to the website,
- the amount of data transmitted,
- the anonymised IP address of the accessing computer,
- a description of the type and version of the web browser used,
- the installed operating system and the resolution selected by the user.
These data are evaluated and temporarily stored for internal statistical purposes and for the technical administration of the website. In addition, temporary storage of the user’s IP address is necessary to ensure the functionality of the website for the duration of the session. Neither the data nor extracts from them are passed on to third parties. The data are stored separately from the records of personal data and will in no case be merged with your personal data; hence, no conclusions can be drawn as to the identity of the user.
The legal basis for the temporary storage of these data and the log files is Art. 6 (1) f) GDPR.
The data will be deleted as soon as they are no longer required to fulfil the purpose for which they were collected. In the event that the purpose of data recording is the provision of the website, this is the case when the session concerned has ended. For further details, see below under clause 3.
2. Collecting and Storing Personal Data
Personal data will only be collected by us if you inform us of them voluntarily, e.g. via the contact form. Specifically, this may occur in the following cases:
a. Contact via contact form or email
If you contact us via our contact form or by email, the personal data you transmit (email address, name, address, telephone, subject of your enquiry) will be saved automatically for the purpose of processing your enquiry or in order to contact you. The data are used only to process your enquiry and for this purpose they will, if necessary, be forwarded to one of the group companies of Hirschvogel Holding GmbH listed in the masthead. No transfer to other third parties will be made.
If you send us application documents via the contact form or other contact data given on the website, we shall use the personal data they contain exclusively for the purpose of processing the application procedure. Data processing in this connection may also be via electronic means. If necessary, we shall forward your data to one of the group companies of Hirschvogel Holding GmbH listed in the masthead. The legal basis for processing data transmitted via the contact form or by sending an email is Art. 6 (1) f) GDPR. If the aim of the email contact is to conclude a contract, Art. 6 (1) b) is also the legal basis for the processing.
We process and store your personal data only for the period of time necessary to achieve the purpose for which the data were collected or if there is another statutory basis. Thereafter, erasure of the data will take place. For details, see clause 3.
b. Contact via the recruitment portal
In order to make the process of applying for a position as easy as possible for you, you can also send your job application to us, either as an unsolicited application or in response to a vacancy announcement, via our recruitment portal. Data you transmit via the recruitment portal will be collected and processed exclusively for the purpose of handling the application procedure. To this end, the data will, if necessary, be forwarded to one of the group companies of Hirschvogel Holding GmbH listed under “Legal” and made available to the relevant department. When creating your personal Candidate Profile you can individually set the visibility of your Data for Recruiters in the system. If you send an unsolicited application, your documents will be made available to those departments in the group companies of Hirschvogel Holding GmbH listed under “Legal” which could have an interest in your application, in so far as you consent to your data being made visible to additional parties regarding other job postings.
The legal basis for processing the data is Art. 6 (1) a) GDPR and Art. 6 (1) b) GDPR.We process and store data you have transmitted via the recruitment portal for the duration of the application procedure and – in the event that we are unable to offer you a position – for a further six months in accordance with the statutory requirements. When this time limit of 6 months of inactivity in your personal Candidate Profile expires, your application documents such as your CV and certificates as well as your Candidate Profile will be permanently erased.
You can withdraw your application at any time. In this case, your data will then be erased or anonymized, taking into account the aforementioned legal requirements.
c. Cookies - SuccessFactors
By clicking on the current job postings, data will be collected and stored by using the web analysis service from SuccessFactors for the purpose of optimizing our recruiting process. SuccessFactors uses cookies, i.e. small text files that are stored locally in the cache of your computer. Cookies make it possible to recognize your Internet browser and thus to analyze your use of the website.
When calling up our website, the user is informed about the use of cookies for analysis purposes and consent is obtained for the processing of personal data used in this context.
The legal basis for processing personal data using cookies for analysis purposes is Art. 6 (1) a) GDPR.
You can prevent the use of cookies and thus the use of tracking functions by selecting the appropriate settings in your browser software. However, in this case, you may not be able to use the full functionality of our website.
d. Use of YouTube
We have installed components of YouTube on our website. YouTube is an internet video portal that enables users to upload, view, evaluate and comment on video clips free of charge.
The company that operates YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Every time a page of this website is visited on which a YouTube video is installed, the internet browser on your IT system is automatically prompted by the YouTube component to download a display of the corresponding YouTube component. Further information on YouTube is available under https://www.youtube.com/yt/about/. In the context of this technical process YouTube and Google receive information regarding the specific page of our website that you visited.
If you are simultaneously logged in on YouTube, when you access a sub-page containing a YouTube video, YouTube recognises which specific sub-page of our website you are visiting. This information is collected by YouTube and Google and assigned to your YouTube account.
YouTube and Google receive information through the YouTube components that you have visited our internet page if at the time that you access our internet pages you are simultaneously logged in on YouTube; this occurs regardless of whether or not you click on a YouTube video.
When the user accesses corresponding individual pages of our website, he will be informed of the use of YouTube and his consent to processing of the data used in this connection will be obtained. At the same time, a reference is made to this privacy statement.
The legal basis for the processing of personal data when using cookies for purposes of analysis is Art. 6 (1) a) GDPR.
You can prevent the transmission to YouTube described above by logging out of your YouTube ac-count before you visit our website.
The privacy statement published by YouTube, available at https://www.google.de/intl/en/policies/privacy/, provides information on the collection, processing and use of personal data by YouTube and Google.
e. Newsletter
In so far as you have consented to receive our electronic newsletter, we will use the service provider rapidmail to send it to you. Your data will therefore be transmitted to rapidmail GmbH. rapidmail GmbH is not permitted to use your data for purposes other than sending the newsletter, nor is rapidmail allowed to pass on or sell your data. rapidmail is a German, certified newsletter software provider that has been carefully selected in accordance with the requirements of the GDPR and the German Data Protection Act (BDSG).
The legal basis for the processing of the data is Art. 6 (1) lit. a GDPR.
We process and store your personal data only for the period necessary to fulfil the purpose for which it was collected or in so far as another legal basis exists. Thereafter the data is deleted. More information can be found under Section 3.
3. Your Rights as The Data Subject
It is important to us to process your personal data in a way that is transparent and in conformity with the law. When we process personal data concerning to you, you are the data subject as defined in the GDPR and you have the following rights vis-à-vis the responsible persons named in clause 4:
a. Right of access and right of rectification
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed and, where that is the case, information on the purpose of the processing, the recipients, the source of the data, the envisaged period for which the personal data will be stored or the criteria used to determine that period and the associated rights of the data subject (rectification, erasure, restriction of processing, withdrawal, complaint). You also have the right to obtain information as to whether the personal data concerning you have been transmitted to a third country or an international organisation. In this regard, you have a right to be informed of the appropriate safeguards in connection with the transmission of data pursuant to Art. 46 GDPR.
If we have processed personal data concerning you that is inaccurate or incomplete, you have a right to rectification and/or completion.
b. Right to restriction of processing, erasure and notification
You have the right to demand from us that we restrict the processing of your personal data without delay where you contest the accuracy of the data for a period that enables the controller to verify the accuracy of the personal data; or where the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; or where the controller no longer needs the personal data for the purposes of the processing but they are required by you for the establishment, exercise or defence of legal claims; or where you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.
In addition, if the statutory requirements are met you may also demand the erasure of your personal data without undue delay, in particular if the data processing was carried out on the basis of your consent and you withdraw this consent, or if the data have been unlawfully processed, or if another requirement pursuant to Art. 17 GDPR is fulfilled.
If you have asserted the right to rectification, erasure or restriction of processing against us, we have a duty to communicate the rectification or erasure of the data or the restriction of processing to each recipient to whom we have disclosed your personal data unless this proves impossible or involves disproportionate effort. You have the right to be informed by us about these data recipients.
c. Right to data portability
You have the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance and to have the personal data transmitted directly by us, insofar as this is technically feasible. This shall not adversely affect the freedoms and rights of others.
d. Right to object and right of withdrawal
You have the right to object, on grounds relating to your particular situation, at any time to pro-cessing of personal data concerning you which is based on point (e) or (f) of Art. 6 (1). In this case, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
You also have the right to withdraw your consent to the processing of your personal data at any time without this affecting the lawfulness of the processing of your personal data based on consent before its withdrawal.
In the case of an objection or withdrawal we shall no longer process your personal data unless we can demonstrate compelling legal grounds for processing or processing serves the establishment, exercise or defence of legal claims.
4. Controller and Data Protection Officer
The controller in the meaning of the statutory provisions on data protection is:
Hirschvogel Holding GmbH
Dr.-Manfred-Hirschvogel-Straße 6
D-86920 Denklingen
Germany
Telephone: +49 8243 291-0
E-Mail: hhg(at)hirschvogel(dot)com
Website: www.hirschvogel.com
You may contact our data protection officer directly at any time if you have any questions or suggestions regarding data protection, and especially if you wish to assert your rights under clause 3:
Data protection officer of Hirschvogel Holding GmbH
Dr.-Manfred-Hirschvogel-Straße 6
86920 DenklingenGermany
E-Mail: data.protection.officer(at)hirschvogel(dot)com
Website: www.hirschvogel.com
5. Right of Complaint to a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of alleged infringement if you consider that the processing of data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Responsible supervisory authority:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 27
91522 Ansbach
Germany
Telephone: 0951/53-1300
E-Mail: poststelle(at)lda.bayern(dot)de
Website: www.lda.bayern.de