As defined by the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions regarding data protection law the party responsible is
Metallform Wekzeugbau GmbH & Co. KG
Gielster Stück 11
Phone +49 2351 550 60
Fax +49 2351 550 611
II. Data Protection Officer
Mr. Markus Knuth
Höveler Weg 2
Phone: + 49 (0) 2353 9096 31
Fax: + 49 (0) 2353 9096 49
III. General information
1. Definitions according to art. 4 GDPR
Personal data is any information relating to an identified or identifiable natural person (hereinafter “person concerned”). A natural person is considered to be identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, to an identification number, to location data, to online identification data or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
Person concerned is any identified or identifiable natural person whose personal data are processed by the party responsible for the processing.
2. Legal basis for the processing
Art. 6 I letter a GDPR serves our company as a legal basis for any processing operations, for which we obtain permission for a certain processing purpose. Should the processing of personal data be necessary for the performance of a contract whose contractual party is the person concerned such as in the case of processing operations necessary for the delivery of goods or the performance of any other service or return service, such processing is based on art. 6 I letter b GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures, such as in the case of enquiries regarding our products or services. Should our company be subject to legal obligations due to which the processing of personal data becomes necessary, such as for the fulfilment of tax obligations, the processing is based on art. 6 I letter c GDPR. In rare cases the processing of personal data could become necessary to protect vital interests of the person concerned or of another natural person. This would be the case, for example, if a visitor to our factory was injured and subsequently his name, age, health insurance data or other vital information had to be passed on to a physician, a hospital or any other third party. In this case, processing would be based on art. 6 I letter d GDPR. Ultimately, processing operations could be based on art. 6 I letter f GDPR. Processing operations, which are not covered by any of the aforementioned legal frameworks, are based on this legal basis if the processing is necessary for the protection of the legitimate interests of our company or a third party provided that the interest, fundamental rights and fundamental freedoms of the party concerned do not prevail. In particular, we are permitted to perform such processing operations since they were specifically mentioned by the European legislators. They took the view that a legitimate interest could be assumed if the person concerned was a customer of the responsible party (recital 47 sentence 2 GDPR).
3. Collection of general information
If you access our website, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider and the like. This is solely limited to information, which does not allow conclusions to be made about your person. This information is technically necessary in order to correctly supply the website contents requested by you and is mandatory for using the Internet. Anonymous information of this kind is evaluated statistically by us in order to optimize our online presence and the supporting technology. The basis of data processing is art. 6 para. 1 letter b GDPR, which permits the processing of data for the implementation of a contract or pre-contractual measures.
4. Storage period
The criterion for the storage period of personal data is the respective legal retention period. After the expiry of this period the relevant data are routinely deleted, provided that they are no longer required for the fulfilment of a contract or contract initiation.
5. Server log files
The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information includes:
• Type and version of browser
• Operating system used
• Referrer URL
• Host name of accessing computer
• Time of server request
• IP address
For technical reasons, and in particular to ensure a safe and stable online presence, these data are transmitted to our web space provider. The data that have been collected in this way are temporarily stored, however, separately from your other data.
The storage is effected on the legal basis of art. 6 para. 1 letter f) GDPR. We have a legitimate interest in the improvement, stability, functionality and safety of our online presence.
The data are then deleted, provided that they do not have to be kept longer for evidence purposes. Otherwise the data are completely or partially excluded from deletion until the final clarification of an incident.
1. Session cookies
On our website we use so-called cookies. Cookies are small text files or other storage technologies, which your Internet browser places and stores on your terminal device. To an individual extent, these cookies process specific information of yours, such as your browser or location data or your IP address.
Due to this processing our online presence becomes more user-friendly, more effective and safer, since the processing enables, for example, the presentation of our website in different languages or the provision of a shopping cart function.
Art. 6 para. 1 letter b.) GDPR forms the legal basis of this processing as long as these cookie data are processed for the purpose of contract initiation or contract implementation.
If the processing does not serve the purpose of contract initiation or contract implementation, our legitimate interest is in the improvement of the functionality of our website. In this case, the legal basis would be art. 6 para. 1 letter f) GDPR.
The session cookies are deleted as soon as you close your web browser.
2. Possibility of removal
You can prevent or restrict the installation of cookies using the settings of your web browser. Stored cookies can also be deleted at any time. However, the steps and measures necessary for these operations depend on the type of browser used. Should you have any questions, please use the help function or documentation of your web browser or contact its manufacturer resp. its support. In the case of so-called Flash cookies, though, the processing cannot be prevented via browser settings. Instead you have to change the settings of your Flash Player to this respect. Also in this case, the steps and measures necessary for these operations depend on the type of Flash Player used. Should you have any questions, please also use the help function or documentation of your Flash Player or contact its manufacturer resp. its user support.
If you prevent or restrict the installation of the cookies, this can lead to the circumstance that not all functions of our online presence may be utilizable to their full extent.
V. Job applications
In accordance with the legal provisions, we process applicant data only for the purpose and within the scope of the application procedure. The processing of applicant data is carried out for the fulfilment of our (pre)contractual obligations within the scope of the applicant procedure as defined by art. 6 para. 1 letter b. GDPR and art. 6 para. 1 letter f. GDPR, provided that data processing e.g. as part of legal procedures becomes necessary for us (in Germany, sect. 26 Federal Data Protection Act [BDSG] also applies).
For an application procedure it is necessary that applicants disclose their data to us. If we provide an online form, the required applicant data are marked, otherwise they can be derived from the job descriptions. In general these data include the personal details, postal and contact addresses and the documentation required for an application, such as cover letter, CV and school reports. Applicants can also give us additional information on a voluntary basis.
In the case of a successful application the data provided by applicants can be further processed by us for the purposes of the employment relationship. Otherwise, if the application for an employment has not been successful, the applicants’ data are deleted. The applicant data are also deleted if an application is withdrawn, which an applicant is entitled to do at any time. Subject to the applicants’ justified revocation, the deletion is effected after a period of six months so that we are able to respond to any follow-up questions with reference to the application and meet our burden of proof from the Act on Equal Treatment.
VI. Contact possibility via this website
This website contains details such as name, company, e-mail address and telephone number enabling fast and direct contact or communication with our company via electronic means. When a person concerned contacts, by e-mail or via contact form, the party responsible for the processing, the personal data transmitted by the person concerned are automatically stored. Such personal data which have been transmitted by a person concerned to the party responsible for the processing are stored for the purpose of processing or contacting the person concerned. The legal basis for this processing would be art. 6 para. 1 letter b) GDPR. These personal data are not passed on to a third party. Your data are deleted as soon as your enquiry has been conclusively answered and no statutory storage obligations preclude the deletion.
VII. Analytical tools
This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files, which are stored on your computer and enable an analysis of your use of our website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA where it is stored. We have activated IP anonymization, which is why, within the member states of the European Union or in other countries that are contracting parties to the Agreement on the European Economic Area, Google priorly abbreviates your IP address on this website. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website Google will use this information to evaluate your usage of this website, to compile reports on the activities on this website and to provide the website operator with other services connected with the use of this website and the Internet. The IP address which is transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google. You can prevent the storage of cookies using the appropriate settings of your browser software; however, we should point out that in this case you may not be able to fully use all the functions of this website. Moreover, you can prevent the collection of the data generated by the cookie and the data related to your usage of this website (incl. your IP address) as well as the processing of these data through Google by downloading and installing the browser plugin available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering as defined by art. 6 para. 1 letter f. GDPR) we use the analysis service “etracker” of etracker GmbH, Erste Brunnenstraße 1 20459 Hamburg.
In this process the data collected are analysed exclusively pseudonymously, are only stored on servers in Germany and are not merged with other data or passed on to third parties.
When storing the user data, in particular the IP addresses and the device and domain data of the user are only stored in abbreviated form, respectively encrypted, so that conclusions cannot be drawn in respect of the individual user. The abbreviation of the IP address is an automatic standard feature which is carried out at the earliest possible point in time. Using cookies, pseudonym user profiles are created from the data processed by etracker. However, identifiers for the recognition of an app user, the implementation of session and cross device tracking as well as the provision of behavioural data for remarketing are securely pseudonymised resp. encrypted. In addition, etracker contractually guarantees the protection of the processed user data by concluding an order processing contract according to art. 28 para. 3 sentence 1 GDPR.
You can at any time object to the collection and storage of data with effect for the future. In order to object to the collection and storage of your visitor data for the future, send an e-mail to the above contact address.
On account of the opt-out, an opt-out cookie named “cntcookie” is set by etracker. Please do not delete this cookie as long as you wish to maintain your objection.
VIII. Google Maps
On our website we employ Google Maps to represent our location and to provide you with directions to our company. It is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter called only “Google”.
Through its certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Google guarantees that the EU data protection requirements will also be complied with when data are processed in the USA.
To be able to display certain fonts on our website, a connection with the Google server in the USA is established when our website is accessed. If you access Google Maps, which is a component integrated into our online presence, Google will store a cookie on your terminal device via your web browser. In order to show our location and set up a route description to our company, your user settings and data will be processed. In this process we cannot exclude that Google may use servers in the USA. In this case, the legal basis would be art. 6 para. 1 letter f) GDPR. We have a legitimate interest in the optimization of the functionality of our online presence. Once the connection to Google has been established in this way, Google can determine, from which website your enquiry has been sent and to which IP address the directions are to be transmitted.
IX. Google Fonts
On our website we use Google Fonts for displaying external fonts. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter called only “Google”. Through its certification according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Google guarantees that the EU data protection requirements will also be complied with when processing data in the USA. To be able to display certain fonts on our website, a connection with the Google server in the USA is established when our website is accessed. The legal basis for this would be art. 6 para. 1 letter f) GDPR. We have a legitimate interest in the optimization and the economic operation of our online presence. When accessing our online presence, the connection to Google is established so that Google can determine, from which website your enquiry has been sent and to which IP address the presentation of the font is to be transmitted.
On https://adssettings.google.com/authenticated and https://policies.google.com/privacy Google provides further information in particular about the possibilities of preventing the usage of data.
X. Rights of persons concerned
You are entitled to the following rights against the party responsible with regard to your stored personal data:
• Information (art. 15 EU-GDPR)
• Correction (art. 16 EU-GDPR)
• Deletion or restriction of processing (art. 17 and 18 EU-GDPR)
• Objection against the processing (art. 21 EU-GDPR)
• Data portability (art. 20 EU-GDPR)
• Right to complain to a supervisory authority (art. 77 EU-GDPR)
You have the right to be informed about your personal data stored with us at any time. Equally, you have the right to correction, blocking or, apart from the prescribed data storage for business processing, deletion of your personal data.
To enable the blocking of data at any time, these data must be kept in a locked file for control purposes. You can also request the deletion of the data, provided that there is no statutory archiving obligation. If such an obligation exists, we will block your data upon request.
You can effect changes or the revocation of consent by sending us a corresponding notice with effect for the future.