Data Protection Obligation Information
Introduction
We, the Fischer Mess- und Regeltechnik GmbH, Bielefelder Str. 37a, 32107 Bad Salzuflen, Germany, +49 5222 974 0, info@fischermesstechnik.de, as the responsible body, would like to explain to you below what data we process from you and how.
Data Protection Officer
If you have any questions about data protection, please contact our data protection officer Mr. Thomas Werning. He can be reached at: werning.com GmbH, Dieselstraße 12, 32791 Lage, Germany, teamDatenschutz@werning.com, +49 5232 980-4700.
With this data protection information, we, as the responsible body, fulfil our duty to inform you in accordance with Art. 12-14 German General Data Protection Regulation (DSGVO).
Information on data collection and processing
Below you will find information on which personal data (this is all data that identifies you or makes you identifiable as a natural person [hereinafter "data subject"] ) may be collected.
These are for example:
- Customer master data for the performance of the contract/fulfillment of the service, name, address, e-mail address, data in connection with payment processing, correspondence (e.g. written correspondence or e-mail correspondence with you), advertising and sales data (e.g. to inform you about new potentially interesting offers by post or, if you have given your consent, also by e-mail).
- Contact data such as name, telephone number, e-mail address
- Supplier data such as name, telephone number, e-mail address
- Employee data such as name, address, bank data, religious affiliation, personnel number, national insurance number, log data arising from the use of the IT systems as well as other and special categories of personal data
- Applicant data such as name, address, e-mail address, marital status, religious affiliation
- Data due to video surveillance
Data subject rights
Right of complaint
If you are of the opinion that the processing of personal data concerning you violates the General Data Protection Regulation, you have the right to lodge a complaint with the data protection supervisory authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Germany, https://www.ldi.nrw.de/ and also with any other data protection supervisory authority.
Right of revocation
Consents given can be revoked by you with effect for the future in accordance with Art. 7 DSGVO.
Right to information, deletion and correction
In accordance with Art. 15 DSGVO, you have the right to obtain information about the data stored about you - including any recipients and the planned storage period. Should incorrect personal data be processed, you have the right to rectification in accordance with Art. 16 DSGVO. If the legal requirements are met, you may request deletion or restriction of processing as well as object to processing (Art. 17, 18 and 21 DSGVO).
If you wish data to be deleted but we are still legally obliged to retain it, access to your data will be restricted (blocked). The same applies in the event of an objection. You can exercise your right to data portability, insofar as the technical possibilities are available to the recipient and to us.
Mr Thomas Werning will be pleased to be your contact person for your data subject rights under the above contact details.
Obligation to provide
Without correct information from you, it is generally not possible to conclude a contract.
Categories of recipients
In the context of providing special services, we use service companies which we have separately committed to secrecy and data protection. Access to personal data cannot be excluded in this context.
These categories of recipients are:
- Order processors used by us (Art. 28 DSGVO), in particular in the area of IT services,
taxes, logistics and printing services, who process your data for us in accordance with
instructions. - Public bodies and institutions (tax authorities) in the event of a legal or official
obligation. - Other bodies for which you have given us your consent to the transfer of data.
Data will only be passed on to authorities in the event of overriding legal requirements.
Privacy policy
Customer data/interested parties
Purpose of processing
We process data that we receive in the course of handling our business relationship with you. We receive the data directly from you. Either in the case of enquiries from interested parties and contacts, the placing of orders or order processing (see point "Information on data collection and processing").
Legal basis:
The collection and processing of data is necessary for the performance of the contract and is based on Art. 6 para. 1 p. 1 b) DSGVO. The use for direct advertising is based on Art. 6 para. 1 p. 1 f) DSGVO. It is our legitimate interest to draw your attention to special offers by means of direct advertising. The data will not be passed on to third parties unless required by law, e.g. to the tax office within the framework of tax laws. The data will be deleted as soon as it is no longer required for the purpose of its processing or after expiry of the statutory retention periods.
You have the right to object to the use of your data for the purpose of direct advertising at any time. In addition, you are entitled to request information about the data we have stored about you and to demand that the data be corrected if it is incorrect or deleted if it has been stored inappropriately. You also have the right to lodge a complaint with a supervisory authority (see "Right to lodge a complaint").
Suppliers
Purpose of processing
We process data that we receive in the course of handling our business relationship with you. We receive the data directly from you when placing an order or processing an order (see point "Information on data collection and processing").
Legal basis:
The collection and processing of data is necessary for the performance of the contract and is based on Art. 6 para. 1 p. 1 b) DSGVO. The data is not passed on to third parties unless required by law, such as to the tax office within the framework of tax laws. The data is deleted as soon as it is no longer required for the purpose of its processing or after expiry of the statutory retention periods.
You are entitled to request information about the data we have stored about you and, if the data is incorrect, to request that it be corrected or, in the case of unauthorised data storage, that it be deleted. You also have the right to lodge a complaint with a supervisory authority (see "Right to lodge a complaint").
Employee data
See separate template to be handed out to employees.
Newsletter
Purpose of processing
If you would like to receive the newsletter offered on the website, we require an e-mail address from you. The registration for the newsletter is done in a double opt-in procedure. This means that after registration you will receive an e-mail with which you must confirm your registration. This procedure prevents unauthorised persons from registering with your e-mail address. Your registration for the newsletter is logged (storage of the registration and confirmation time and the IP address). With the help of the logging, the registration process can be proven in accordance with legal requirements.
You can revoke your consent to the storage of the e-mail address (and optionally first name and surname for the purpose of personal addressing) and its use for sending the newsletter with associated performance measurement at any time. A cancellation link is provided at the end of each newsletter. So that we can prove consent formerly given in the case of an unsubscribed e-mail address, we may store it for up to 2 years before deleting it.
Legal basis:
This is done on the basis of consent of the recipients according to Art. 6 para. 1 p. 1 a) DSGVO, Art. 7 DSGVO together with Art. 7 para. 2 no. 3 German Unfair Competition Act (UWG) or on the basis of legal permission according to Art. 7 para. 3 UWG.
As well as Art. 6 para. 1 p. 1 f) DSGVO: Our legitimate interest in measuring success results from recognising the reading habits of our users based on the openings of the newsletters, opening times and the links clicked on, in order to be able to create and send them interestbased and useful content as a result.
Our legitimate interest in logging arises from the fact that we use a secure and user-friendly newsletter system that is useful for sending and protects the personal data of newsletter subscribers. Furthermore, it allows us to prove consent.
You are entitled to request information about the data we have stored about you and to request that the data be corrected if it is incorrect or deleted if it has been stored inappropriately. You also have the right to lodge a complaint with a supervisory authority (see "Right to lodge a complaint").
Applicants
Purpose of processing
Applications online, by e-mail or by post: If you apply to us on the basis of a job advertisement, we will collect your personal data such as first name, surname, address, telephone number, e-mail address, attachments (covering letter, CV, certificates, photo) and store them for the duration of the selection procedure.
Your data will only be used by authorised persons of the personnel department or the management for processing within the scope of the selection procedure. Your personal data will not be passed on to third parties.
If the specific position for which you are applying has already been filled elsewhere, but your profile makes you eligible for future employment or employment in a partner or subsidiary company, we will obtain your express consent before further storing or forwarding your application, unless you have already consented to such storage or forwarding in your application.
There is a requirement that application documents are forwarded immediately to the HR department unopened and the incoming email is deleted. If you apply to us and use our general contact e-mail address for this purpose, the content of your application e-mail can be viewed by unauthorised personnel. To exclude this, please send your application to: karriere@fischermesstechnik.de.
Legal basis:
Art. 6 para. 1 p. 1 b) DSGVO for the processing of precontractual measures.
Unless you inform us otherwise, the data will be deleted 6 months after completion of the application process or destroyed in the case of postal applications. Due to the long application and selection periods for trainees, we store their data in Germany for up to 18 months.
You have the following rights, provided the respective legal requirements are met: the right to information about your data stored by us; correction, deletion, restriction of the processing of your data or objection to the processing, as well as data portability. Furthermore, you can of course request the deletion or destruction of all your application documents at any time by sending an e-mail to karriere@fischermesstechnik.de.
Server Data Collection
Purpose of processing
When you visit our site, various server statistics are automatically stored, which your browser transmits to our provider's server: Among other things, the IP address of your device, date and time of access, name and URL of accessed files, website (from which access is made or from which you were directed to our site (referrer URL)), browser used and, if applicable, the operating system of your device as well as the name of your provider are logged.
The aforementioned data is processed by us for the purposes of smooth connection setup and system security. This data is not merged with other data sources. The IP address is anonymised. The accruing connection data is automatically deleted, usually after a maximum of seven days. If the website is misused, log data whose further storage is necessary for evidentiary purposes will be retained until the incident has been clarified.
Legal basis:
Art. 6 l (f) DSGVO. Our legitimate interest arises from the fact that we want to ensure secure operation of the website and detect any attacks.
Video surveillance
Purpose of processing
Our purpose of video surveillance is vandalism prevention, protection against theft, exercising house rights, protection of persons and property, protection against plant espionage, access control and burglary. As the responsible body, we process personal image files that we collect as part of the video surveillance on the company premises. As we do not always notice break-ins and theft immediately, the storage period is 60 days.
Legal basis:
Art. 6 para. 1 p. 1 f) DSGVO. Our legitimate interest lies in burglary protection and the protection of our property and access control.
This data is only passed on to investigating authorities in the event of criminal offences.
You have the right to request confirmation from us as the controller as to whether personal data relating to you is being processed: If so, you have the right to obtain information about this personal data; to request that the data be corrected if it is incorrect; or to request that the data be deleted if it is being stored inappropriately. You also have the right to lodge a complaint with a supervisory authority (see "Right to lodge a complaint").
Up-to-dateness and change of this obligatory information
We reserve the right to adapt the content of this mandatory information at any time. This is usually done in the event of further developments or legal adjustments.
Status of this declaration: November 2020