Privacy policy for the website www.debag.com
Our approach to the topic of data protection
Data protection law is part of our personal rights. Especially in our constantly developing and networked world, the importance of these rights must not be underestimated. DEBAG Deutsche Backofenbau GmbH attaches great importance to data protection law in all its forms and requirements, which is why we take the protection of your data very seriously and always endeavor to ensure an appropriate level of protection on our website, www.debag.comto be provided.
You are free to use our website without providing your personal data. However, if you wish to use one of our services, e.g. to contact us via our website, it may be necessary to collect and process your data. If this is the case and there is no legal basis for this processing, we will always obtain your consent for the respective process.
As the controller, we have implemented numerous technical and organizational measures to ensure that the personal data processed via this website is protected as completely as possible. Since, despite all technical precautions, absolute protection during data transmission cannot be fully guaranteed, you are free to transmit your personal data by other means, for example by telephone.
1. data protection details
Our privacy policy should be easy to read and understand both for the public and for you as our customers and business partners. To ensure this, we would like to explain some of the terms we use that you will come across in this privacy policy. Terms that require further explanation in terms of definition and use have been given their own paragraph (e.g. cookies).
Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Person concerned
Data subject is any identified or identifiable natural person whose personal data is processed by the controller. In case of doubt, you are therefore a data subject.
Processing
Processing is any operation or set of operations which is performed on personal data, whether or not by automated means. The term processing includes any handling of data, be it collection, analysis, storage, transmission or deletion.
Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate, analyze or predict certain personal aspects relating to a natural person.
We do not use profiling on our website to protect your personal data.
Pseudonymization
Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Controller or controller responsible for the processing
Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Processor
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Receiver
Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.
Third
Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
Consent
Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Tracking (German: "Verfolgung")
In the field of online marketing, tracking refers to the logging of a website visitor's user behavior. With the help of tracking, it is possible to trace which websites a visitor has used to reach your website, how long the visitor has been on the website, which pages have been accessed and what IP address the visitor has. In order to obtain this data, cookies are used and analyzed with tools such as Google Analytics. This allows the success of marketing campaigns to be determined and measures to optimize and adapt them to be derived. These measures can be used to make the website more user-friendly and better tailored to customers.
Reach measurement
The main purpose of reach measurement is to statistically determine the intensity of use, the number of visitors or users of a website and their surfing behavior - based on a uniform standard procedure. Website operators can use various tools to see exactly how many people are reached with a post. It is also possible to determine exactly how often a person clicks on an advertisement, for example, and from which websites, advertisements or articles people access their own website.
The data required for this purpose is collected and processed in accordance with the GDPR and German data protection law. Technical and organizational measures are taken to ensure that individual users cannot be identified at any time. Data that may have a reference to a specific, identifiable person is anonymized as soon as possible.
2. who we are
The controller of this website within the meaning of the General Data Protection Regulation is
DEBAG Deutsche Backofenbau GmbH
Managing Directors: Jost Straube, Oliver Theiß, Johannes Wilhelm
Dresdner Strasse 88
02625 Bautzen
Tel: 03591 / 360 - 0
E-Mail: info@debag.com
Website: www.debag.com
3. what data and information we collect
Our website collects a range of general data and information each time you access the website. This general data and information is stored in the server log files. The following are recorded can the
(1) browser types and versions used,
(2) the operating system used by the accessing system,
(3) the website from which an accessing system reaches our website (so-called referrer),
(4) the sub-websites which are accessed via an accessing system on our website,
(5) the date and time of access to the website,
(6) an Internet Protocol address (IP address),
(7) the Internet service provider of the accessing system and
(8) other similar data and information used for security purposes in the event of attacks on our information technology systems.
When using this general data and information, our company does not draw any conclusions about you. Rather, this information is required to display the content of our website correctly and to optimize the content and advertising for the content.
Furthermore, we require the above-mentioned information for the permanent functionality of our IT infrastructure and website technology. Last but not least, we may need the information in order to provide law enforcement authorities with the necessary data in the event of criminal prosecution.
This anonymously collected data and information is therefore evaluated by us for statistical purposes, but also to optimize data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all your personal data.
The Specific purpose of data processing on our website is, among other things
- Provision of our online offer with the associated user-friendliness
- Office and organizational procedures
- the performance of contractual services and services
- Managing and responding to inquiries
- Reach measurement
- Tracking
- Security measures
4. what rights do you have?
Under the General Data Protection Regulation, the European legislator has given you a number of options for asserting your rights, including against us. In order to comply with our duty to provide information in this regard, those rights are set out below:
a) Right to confirmation
You have the right to request confirmation from us as to whether your personal data is being processed.
b) Right to information
You have the right to receive free information from us at any time about your stored personal data (e.g. the purpose of processing or the categories of data being processed) and a copy of this information.
c) Right to rectification
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
d) Right to erasure (right to be forgotten)
You have the right to demand that we delete your personal data immediately. We are also obliged to delete personal data immediately if there is a reason that does not justify the processing of the data
e) Right to restriction of processing
You have the right to demand that we restrict the processing of your data,
f) Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us to whom the personal data has been provided.
g) Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR.
We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
h) Right of access and right to lodge a complaint with a supervisory authority
You have the right to contact a supervisory authority at any time with questions about data protection.
If you believe that the processing of your personal data violates data protection law, you still have the right to lodge a complaint with a competent supervisory authority.
However, to prevent this from happening in the first place, we would be grateful if we could find a solution together in the event of any disagreements.
i) Right to withdraw consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time.
If you wish to withdraw your consent, you can contact the following office at any time:
DEBAG Deutsche Backofenbau GmbH
Sabine Petermann
Dresdner Strasse 88
02625 Bautzen
Tel: 03591 / 360 - 0
E-Mail: sabine.petermann@debag.com
Website: www.debag.com
5. provision of the online offer and web hosting
In order to provide our website securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online offer can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services as well as security services and technical maintenance services.
The data processed on our website may include information that is generated in the course of use and communication. This regularly includes the IP address, which is necessary to display the content of our online offering, and all entries made within our online offering or from websites.
E-mail dispatch and hostingWe use web hosting services, which include sending, receiving and storing e-mails. For this purpose, the addresses of the recipients and senders as well as other information relating to the sending of e-mails (e.g. the providers involved) and the content of the respective e-mails are processed.
Please note that emails on the internet are generally not sent in encrypted form. In most cases, e-mails are encrypted in transit, but not on the servers from which they are sent and received (unless an end-to-end encryption method is used). We can therefore accept no responsibility for the transmission path of e-mails between the sender and receipt on our server.
Collection of access data and log filesWe collect data on every access to the server (so-called server log files). The server log files may include the address and name of the web pages and files accessed, date and time of access, data volumes transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider. In short, server log files record all processes that take place on a website.
The server log files are used, among other things, for security by detecting and preventing attacks or to ensure the utilization of the server and its stability.
- Processed data types: Content data (e.g. text input, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
- Persons concerned: Users (e.g. website visitors, users of online services).
- Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).
6. deletion and blocking of personal data
We process and store your personal data only for the period of time required to achieve the purpose of storage or if this has been provided for by the European legislator or another legislator in laws or regulations to which we are subject. The criterion for the duration of the storage of personal data is therefore the respective statutory retention period.
If the storage purpose no longer applies or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data is routinely blocked or deleted in accordance with the statutory provisions, provided that it is no longer required for the fulfillment or initiation of the contract.
7. protection of minors
Consent to the processing of personal data can only be given by a person of legal age. For information society services, the consent of a child is required from the age of majority. sixteenth year of age permitted in accordance with Art. 8 GDPR.
8. our handling of cookies
Our website is operated using cookies, among other things. Cookies are text files that are placed and stored on your computer system via your Internet browser.
Many websites and servers use cookies. Simply put, cookies are used to give the website a "memory". For many website operators, they are an essential means of providing you, the website visitor, with a smooth and technically flawless experience.
Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters through which websites and servers can be assigned to the specific internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish your individual browser from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID.
Through the use of cookies, our website can provide you with more user-friendly services that would not be possible without the setting of cookies. A distinction is made between the following cookie types and functions:
Cookies that differ according to their storage duration
- Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after you leave an online offer and close the browser.
- Permanent cookies: Permanent cookies remain stored even after the browser is closed. These are used, for example, to save your login status or to display frequently viewed or popular content.
Cookies that differ according to their origin
- First-party cookies: First-party cookies are set by us.
- Third-party cookies (also: third-party cookies)Third-party cookies are mainly placed by advertisers (so-called third parties) to process user information.
Cookies that differ according to their purpose
- Necessary (required) cookies: Cookies may be required for the operation of a website (e.g. to store logins or other user input or for security reasons).
- Statistics, marketing and personalization cookiesCookies may be used in the context of reach measurement (web analysis) if your interests or behavior (e.g. viewing certain content, use of functions, etc.) on individual websites are stored in a user profile. Such profiles are used, for example, to show users content that matches their potential interests. This process is also referred to as "tracking", i.e. tracking the potential interests of users. If we use such cookies or other "tracking" technologies, we will inform you separately in our privacy policy or by obtaining your consent directly when you open our website (cookie banner).
You can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via your Internet browser or other software programs. This is possible in all common Internet browsers. If you deactivate the setting of cookies in the Internet browser you are using, you may not be able to use all the functions of our website to their full extent.
What you can expect on our website
We offer a wide variety of content on our website to provide you as a user with an interesting surfing experience so that you receive a lasting and, above all, positive impression of us and our company. We use various programs, tools and much more content for this purpose. In the following, we would like to explain to you what these are in detail.
9. contact possibility via the website
Due to legal regulations, our website contains information that enables quick electronic contact to our company and direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address).
If you contact us by e-mail or via our contact form, the personal data you provide will be stored automatically. Such personal data transmitted to us on a voluntary basis will be stored for the purpose of processing or contacting you. This personal data will not be passed on to third parties.
Concrete data processing:
Processed data types: Inventory data (e.g. names, addresses), Contact data (e.g. e-mail, telephone numbers), Content data (e.g. text input, photographs, videos).
Affected persons: Communication partner.
Purposes of processing: Contact requests and communication.
Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR)
10. we offer a business service
We offer a business service on our website, which may make you our business partner. In doing so, we may process your data as part of the contractual or other comparable legal relationship when communicating with you, e.g. in order to respond to inquiries.
We process this data to fulfil our contractual obligations, to safeguard our rights and for the purposes of the administrative tasks associated with this information as well as for business organization. We only pass on your data to third parties within the framework of the applicable law insofar as this is necessary for the purposes stated by us or to fulfill legal obligations or with your consent (e.g. to participating telecommunications, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). We will of course inform you about any other data processing, e.g. for marketing purposes, as part of this privacy policy.
We will inform you which data is required for our business purposes before or during data collection, e.g. in online forms, by special marking (e.g. colors) or symbols (e.g. asterisks or similar), or personally.
We delete the data after the expiry of statutory warranty and comparable obligations, i.e. generally after 4 years, unless the data is stored in a customer account, e.g. as long as it must be retained for legal archiving reasons (e.g. for tax purposes, generally 10 years). We delete data disclosed to us by the contractual partner as part of an order in accordance with the specifications of the order, generally after the end of the order.
Insofar as we use third-party providers or platforms to provide our services, the terms and conditions and data protection notices of the respective third-party providers or platforms apply in the relationship between the users and the providers.
Offer for sale of goods: We process your or clients' data in order to enable you to select, purchase or commission the selected services or works and related activities, as well as their payment and delivery or execution or provision.
The required information is identified as such in the context of the conclusion of the order, purchase order or comparable contract and includes the information required for delivery and invoicing as well as contact information in order to be able to hold any consultations.
Concrete data processing:
Processed data types: inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers),
Affected persons: Interested parties, business and contractual partners.
Purposes of processing: Contractual services and service, contact requests and communication, office and organizational procedures, administration and answering inquiries.
Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).
11. you can find us on social media
You can find us and our company within social networks. We have integrated links to these sites on our website. If you click on the link, you will be forwarded directly to our company page on the respective network. We process your data in order to communicate with you, provided you are active on the respective platform or logged in at the same time, or to provide information about us.
It is possible that your data may be processed outside the European Union. This may result in risks for you because, for example, the enforcement of users' rights could be made more difficult. With regard to US providers, we must inform you that your data may currently be processed by US authorities for control and monitoring purposes, possibly without the possibility of intervention.
Furthermore, your data is generally processed within social networks for market research and advertising purposes. For example, user profiles can be created on the basis of usage behavior and the resulting interests of users. The user profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to your interests. As a rule, cookies are stored on the user's computer in which the user's usage behavior and interests are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
For a detailed description of the respective forms of processing and the opt-out options, please refer to the data protection declarations and information provided by the operators of the respective networks.
Should you wish to assert requests for information or other data subject rights to which you are entitled in this regard, we would like to refer you to the respective providers, as the providers have access to the users' data and can take appropriate measures and provide information directly.
If you still need help, you can contact us.
Facebook: Social network; service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA;
Website: https://www.facebook.com;
Privacy policy: https://www.facebook.com/about/privacy;
Option to object (opt-out): Settings for advertisements: https://www.facebook.com/settings?tab=ads;
Additional information on data protection: Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum,
Data protection information for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.
Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
Instagram: Social network; Service provider: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA;
Website: https://www.instagram.com;
Privacy policy: https://instagram.com/about/legal/privacy.
LinkedInSocial network; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;
Website: https://www.linkedin.com;
Privacy policy: https://www.linkedin.com/legal/privacy-policy;
Possibility of objection (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
XING: Social network; Service provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany;
Website: https://www.xing.de;
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.
Youtube: Social network; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;
Privacy policy: https://policies.google.com/privacy;
Possibility of objection (opt-out): https://adssettings.google.com/authenticated.
Concrete data processing:
Processed data types: Inventory data (e.g. names, addresses), Contact data (e.g. e-mail, telephone numbers), Content data (e.g. text input, photographs, videos), Usage data (e.g. websites visited, interest in content, access times),
Meta/communication data (e.g. device information, IP addresses).
Data subjects: Users (e.g. website visitors, users of online services).
Purposes of Processing: Contact requests and communication, Tracking (e.g. profiling based on interests and behavior, use of cookies), Remarketing, Web Analytics (e.g. access statistics, recognition of returning visitors).
Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).
12. we use online marketing tools
We process personal data on our website for the purpose of online marketing. This includes, among other things, the marketing of advertising space or the presentation of advertising and other content by means of your potential interests and the measurement of their effectiveness.
As part of this web analysis, user profiles are created and stored in a file ("cookie") or similar procedures are used, by means of which the information relevant to the presentation of the aforementioned content is stored by you. This includes, for example, content viewed, websites visited, online networks or communication partners used and technical information such as the browser used, the computer system used and information on usage times. If you have consented to the collection of your location data, this can also be processed.
Your IP address is also stored. However, we use an IP masking procedure for your protection (i.e. pseudonymization by shortening the IP address). As part of the online marketing process, we will not store any clear data from you (such as e-mail addresses or names), but only pseudonyms. We and the providers of the online marketing processes therefore do not know your actual identity, but only the information stored in their profiles. The storage in the profiles is generally carried out using cookies, which later generally also use the same online marketing process on other websites.
It may happen that clear data is assigned to the profiles. This is most likely the case if, for example, you are a member of a social network whose online marketing process we use and the network links the user profiles with the aforementioned data. Please note that you can make additional agreements with the respective providers, e.g. through separate consents as part of the registration process.
The aim of our online marketing is to be able to check which of our online marketing strategies have led to a conversion as part of a performance measurement. In other words, how many interested parties have actually become customers for us. This form of performance measurement or visit action measurement is used exclusively to analyze the success of our marketing measures.
Unless otherwise stated, we ask you to assume that cookies used are stored for a period of two years.
Google Analytics: Google Analytics: Online marketing and web analytics; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;
Website: https://marketingplatform.google.com/intl/de/about/analytics/;
Privacy policy: https://policies.google.com/privacy;
Possibility of objection (opt-out): Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=deSettings for the display of advertisements: https://adssettings.google.com/authenticated.
Google Tag ManagerGoogle Tag Manager is a solution with which we can manage so-called website tags via an interface and thus integrate other services into our online offer.
The Tag Manager itself (which implements the tags) does not process any personal user data. With regard to the processing of users' personal data, please refer to the following information on Google services.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;
Website: https://marketingplatform.google.com;
Privacy policy: https://policies.google.com/privacy;
Concrete data processing:
Processed data types: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Data subjects: Users (e.g. website visitors, users of online services).
Purposes of Processing: Tracking (e.g. profiling based on interests and behavior, use of cookies), Remarketing, Conversion Tracking, Interest-based and behavioral marketing, Profiling (Creating user profiles), Conversion tracking (Measurement of the effectiveness of marketing activities).
Security measures: IP masking (pseudonymization of the IP address).
Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).
Possibility of objection (opt-out): We refer to the data protection notices of the respective providers and the opt-out options specified for the providers. If no explicit opt-out option has been specified, you have the option of deactivating cookies in your browser settings. However, this may restrict the functions of our online offer. We therefore recommend the following additional opt-out options, which are summarized for each area:
a) Europe: www.youronlinechoices.eu.
b) Canada: www.youradchoices.ca/choices.
c) USA: www.aboutads.info/choices.
d) Cross-territory: optout.aboutads.info.
13. we use plugins and embedded functions
We integrate functional and content elements on our website that are obtained from third-party servers. These are, for example, graphics, videos or social media buttons and other contributions.
This integration always requires that the third-party providers of this content process your IP address, as without the IP address the content could not be sent to your browser. The IP address is therefore required to display this content or function. We are interested in only using content whose respective providers only use the IP address to deliver the content.
The respective providers may use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the websites. The pseudonymous information can also be stored in cookies on your device and contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as being linked to such information from other sources.
If we ask for your consent to the use of third-party providers, the legal basis for the processing of data is your consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this privacy policy (point 8.).
ReCaptchaWe integrate the "ReCaptcha" function to recognize bots, e.g. when entering data in online forms. The user's behavioral data (e.g. mouse movements or queries) are evaluated in order to distinguish between humans and bots.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: www.google.com/recaptcha/;
Privacy policy: https://policies.google.com/privacy;
Possibility of objection (opt-out): Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de,
Settings for the display of advertisements: https://adssettings.google.com/authenticated.
MyFontsFonts; in the context of font retrieval, your data is processed in the form of web font project identification numbers (anonymized), furthermore: the URL of the licensed website, which is linked to a customer number to identify the licensee and the licensed web fonts, and the referrer URL (website from which you came to our website). The anonymized web font project identification number is stored in encrypted log files with such data for 30 days to determine the monthly number of page views; after such aggregation and storage of the number of page views, the log files are deleted; Service provider: Monotype Imaging Holdings Inc, 600 Unicorn Park Drive, Woburn, Massachusetts 01801, USA;
Website: https://www.myfonts.co;
Privacy policy: https://www.myfonts.com/info/legal/#Privacy.
Concrete data processing:
Processed data types: Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses), Contact data (e.g. e-mail, telephone numbers), Content data (e.g. text input, photographs, videos), Inventory data (e.g. names, addresses).
Data subjects: Users (e.g. website visitors, users of online services), communication partners.
Purposes of Processing: Provision of our online services and usability, Contractual services and support, Contact requests and communication, Direct marketing (e.g. by e-mail or postal), Targeting (e.g. profiling based on interests and behavior, use of cookies), Profiling (Creating user profiles), Feedback (e.g. collecting interest/behavioral profiling, use of cookies), Interest-based and behavioral marketing, Profiling (Creating user profiles), Feedback (e.g. collecting feedback via online form), Web Analytics (e.g. access statistics, recognition of returning visitors), Security measures, Managing and responding to inquiries.
Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR), consent (Art. 6 para. 1 sentence 1 lit. a GDPR), contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR).
You have the opportunity to apply for vacancies on our website. The application is made by e-mail, including your application documents. We process the applicant data only for the purpose and in the context of the application process in accordance with the legal requirements. Applicant data is processed to fulfill our (pre-)contractual obligations in the context of the application process within the meaning of Art. 6 para. 1 lit. b. GDPR Art. 6 para. 1 lit. f. GDPR if the data processing becomes necessary for us, e.g. in the context of legal proceedings (in Germany, § 26 BDSG also applies).
Applicant data generally includes your personal details, postal and contact addresses and the documents relating to your application, such as cover letter, CV and references. Applicants can also voluntarily provide us with additional information.
By submitting your application to us, you consent to the processing of your data for the purposes of the application process in accordance with the type and scope set out in this privacy policy.
Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily communicated as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 lit. b GDPR (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 lit. a GDPR (e.g. health data if this is necessary for the exercise of the profession).
If your application is successful, the data you provide may be processed by us for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the applicant's data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which you can of course do at any time.
The deletion takes place, subject to a justified revocation by the applicant, after a period of six months so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the Equal Treatment Act.
Concrete data processing:
Processed data types: inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), applicant data (e.g. cover letter, CV, certificates and other personal or qualification information provided by applicants with regard to a specific position or voluntarily)
Special categories of personal data: Health data (Article 9 (1) GDPR), Data concerning sex life or sexual orientation (Article 9 (1) GDPR), Religious or philosophical beliefs (Article 9 (1) GDPR), Data revealing racial or ethnic origin, Biometric data (Article 9 (1) GDPR), Genetic data (Article 9 (1) GDPR).
Affected persons: Interested parties, applicants, customers, users
Purposes of processing: Recruitment management, in particular for the initiation and implementation of the application process, establishment and possible implementation as well as possible subsequent termination of the employment relationship, administration and answering of inquiries
Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR)
15. Legal permission for data processing
The legal basis for the above-mentioned processing operations is DEBAG Deutsche Backofenbau GmbH
- Art. 6 I lit. a GDPR, where we obtain your consent for a specific processing purpose.
- If the processing of personal data is necessary, for example, due to the fulfillment of a contract between you and us, this processing is justified by Art. 6 I lit. b GDPR.
- The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services.
- If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c GDPR.
- It may be necessary to process personal data in order to protect your vital interests or the interests of another natural person, Art. 6 I lit. d GDPR.
- Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations are based on this legal basis if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms. Our legitimate interest within the meaning of Article 6 I lit. f GDPR is, in particular, the performance of our business activities for the benefit of the well-being of all our employees and our shareholders.
16. obligation to provide the personal data
We inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). It may also be necessary for you to provide us with personal data in order to conclude a contract, which must subsequently be processed by us. For example, you are obliged to provide us with personal data if our company concludes a contract with you. Failure to provide the personal data would mean that the contract could not be concluded.
Before providing your personal data, you should contact one of our employees. Our employee will clarify to you on a case-by-case basis whether the provision of your personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences would be if you did not provide the personal data.
17. your contact person in our company
If you have any questions about data protection and the handling of your data on our website and in our company, you are welcome to contact us or our data protection officer at any time:
DEBAG Deutsche Backofenbau GmbH
Sabine Petermann
Dresdner Strasse 88
02625 Bautzen
Tel: 03591 / 360 - 0
E-Mail: sabine.petermann@debag.com
Website: www.debag.com
Data protection officer for our company:
Alexander Weidenhammer
Email: a.weidenhammer@dids.de
Phone: 0351 / 655 772 - 0
This privacy policy was created by:
Bastanier & Schmelzer
Lawyers PartmbB