1.Privacy policy on the use of our website

1.1. Data processing by visiting our website

When you call up our web pages, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

• Date and time of the request
• Name of the requested file
• Page from which the file was requested
• Access status
• Web browser and operating system used
• (Complete) IP address of the requesting computer
• Amount of data transferred

We collect the listed data to ensure a smooth connection setup of the website and to enable a comfortable use of our website by the users. In addition, the log file serves the evaluation of system security and stability as well as administrative purposes. The legal basis for the temporary storage of the data or the log files is Art. 6 para. 1 lit. f DSGVO.

For reasons of technical security, in particular to defend against attempted attacks on our web server, we may store this data for a short period of time. It is not possible for us to draw conclusions about individual persons on the basis of this data. After seven days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a link to the individual user. There is no evaluation of this data except for statistical purposes in anonymous form. This data is not merged with data from other data sources.

1.2. Contact form and contact by e-mail

If you send us inquiries via contact form or e-mail, your data from the inquiry form or your e-mail, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f DSGVO and, if applicable, Art. 6 (1) lit. b DSGVO, if your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, provided that there are no legal obligations to retain data.

 

1.3. Google Analytics

Our website uses Google Analytics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies”.

Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, and compiling reports on website activity. Google will also use this information to provide the website operator with other services related to the use of the website and the Internet. The IP address sent by your browser as part of Google Analytics is not combined with other data from Google. The processing is carried out in accordance with Art. 6 para. 1 lit. a DSGVO on the basis of the consent given by you.

We use Google Analytics only with IP anonymization enabled. This means that your IP address is only processed by Google in a shortened form.

We have concluded an order processing agreement with the service provider in which we oblige it to protect our customers’ data and not to pass it on to third parties.

Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured by this contractual extension, we will endeavor to obtain additional regulations and commitments from the recipient in the USA.

The terms of use of Google Analytics and information on data protection can be accessed via the following links:

http://www.google.com/analytics/terms/de.html

https://www.google.de/intl/de/policies/

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Deletion of user-level and event-level data linked to cookies, user identifiers (e.g., user ID), and advertising IDs (e.g., DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) takes place no later than 14 months after their collection.

You can prevent cookies from being stored by adjusting the settings of your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website without restrictions. You can also prevent Google from collecting the data generated by the cookie and from analyzing your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plugin available under https://tools.google.com/dlpage/gaoptout?hl=de verfügbar ist.

1.4. Google Maps

Our homepage uses the online map service provider Google Maps via an interface. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently. The provider of the map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To use the functionalities of Google Maps, it is necessary to store your IP address. The legal basis for the processing of your personal data is your consent given for this purpose in accordance with Art. 6 (1) p. 1 lit. a DSGVO.

By using the service, personal data is transferred to the USA. The legal basis for the transfer of your personal data to the USA is your consent granted in accordance with Art. 49 (1) p. 1 lit. a DSGVO. Please note that for such transfers of personal data without the existence of an adequacy decision and without appropriate safeguards, there is a risk for you. The risk is that, due to legislation in the USA, access to the personal data by American authorities (in particular the intelligence services) may occur. Legal protection options or information on the handling of your data with the US authorities are only possible to a very limited extent or not at all. Accordingly, a level of data protection in accordance with the requirements of the GDPR cannot be guaranteed.

Further information on the handling of user data can be found in Google’s privacy policy:
https://www.google.de/intl/de/policies/privacy/
Opt-out: https://www.google.com/settings/ads/

1.5 Vimeo

Videos from “Vimeo” are embedded on this website. “Vimeo” is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA.

If you have given us your consent, the processing is carried out for the optimal marketing of our offer in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO.

For videos from “Vimeo”, which are integrated on our website, the tracking tool Google Analytics is automatically integrated. We have no influence on the tracking settings and the analysis results collected via this and cannot view them. In addition, web beacons are set for website visitors via the embedding of “Vimeo videos”.

To prevent the setting of Google Analytics tracking cookies, you can prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we point out that in this case you may not be able to use all features of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.

For the purpose and scope of the data collection and the further processing and use of the data by the providers, as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policy of “Vimeo”: https://vimeo.com/privacy

1.6. Cookies

Our website uses cookies, which are stored by the browser on your device and contain certain settings for the use of the website (e.g. for the current session). Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted after closing the browser. Other cookies remain stored on your terminal device until you delete them or the storage period expires. These cookies allow us to recognize your browser on your next visit.

In part, the cookies serve to simplify website processes by storing settings (e.g. providing already selected options). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, as well as activate the automatic deletion of cookies when closing the browser. The cookie settings can be managed under the following links for the respective browsers:

Firefox
Internet Explorer
Chrome
Safari
Opera

You can also individually manage the cookies of many companies and functions that are used for advertising. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ oder http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a do-not-track feature that allows you to indicate that you do not want to be “tracked” by websites. When this feature is enabled, the browser tells ad networks, websites, and applications that you do not want to be tracked for behavioral advertising and the like. For information and instructions on how to edit this feature, depending on your browser provider, see the links below:

Google Chrome:
https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de

Mozilla Firefox:
https://www.mozilla.org/de/firefox/dnt/

Internet Explorer:
https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track

Opera:
http://help.opera.com/Windows/12.10/de/notrack.html

Safari:
https://support.apple.com/kb/PH21416?locale=de_DE

Additionally, you can prevent loading of so-called scripts by default. NoScript allows JavaScripts, Java, and other plug-ins to run only on trusted domains of your choice. For information and instructions on how to edit this feature, contact your browser vendor (for example, for Mozilla Firefox, see: addons.mozilla.org/de/firefox/addon/noscript/).

Please note that if you disable cookies, the functionality of this website may be limited.

1.7. Data sharing and recipients

A transfer of your personal data to third parties does not take place unless

– if we have explicitly referred to this in the description of the respective data processing.
– if you have given your express consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO,
– the disclosure according to Art. 6 para. 1 p. 1 lit. f DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
– in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c DSGVO, and
– as far as this is necessary for the processing of contractual relationships with you according to Art. 6 para. 1 p. 1 lit. b DSGVO.

We also use external service providers for the processing of our services, which we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. With whom we have, if necessary, concluded order processing contracts in accordance with Art. 28 DSGVO. These are service providers for web hosting, sending emails and maintenance and care of our IT systems, etc. The service providers will not share this data with third parties.

1.8. Duration of the storage of personal data

The duration of the storage of personal data is measured by the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for the fulfillment or initiation of a contract or if we have a legitimate interest in continuing to store it, the data will be deleted when it is no longer required for these purposes or you have exercised your right of revocation or objection.

1.9. Your rights

In the following, you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:

 

• The right to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
• The right to request the correction of inaccurate or incomplete personal data stored by us without undue delay in accordance with Art. 16 DSGVO.
• The right to request the erasure of your personal data stored by us in accordance with Art. 17 DSGVO, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.
• The right to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO
• The right, pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.
• The right to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace.
• Right to revoke consent given in accordance with Art. 7 (3) DSGVO: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;

Right of objection

Insofar as your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to info(at)allguth.de.

Automated decision making

Automated decision making or profiling according to Art. 22 DSGVO does not take place.

Changes to our privacy policy

We reserve the right to adapt or update this data protection declaration if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The most current version applies to your visit.

Status of this privacy policy: 10.02.2023

 

2. Privacy policy for our social media channels and career networks

Introduction and general information

In the following, you will find information on the handling of your personal data that is collected through your use of our social media presences on social networks, career networks and platforms. Your data will be processed in accordance with the statutory regulations.

2.1. Provider

2.1.1. Facebook Fanpage

2.1.1.1. Responsible entity

In the event that the data you provide to us is also or exclusively processed by Facebook, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (= Meta Platforms Ireland Limited), is the controller for data processing within the meaning of the GDPR in addition to us or in our place. For this purpose, we have concluded an agreement with Facebook pursuant to Art. 26 DSGVO on joint responsibility for the processing of data (Controller Addendum). This agreement specifies the data processing operations for which we or Facebook are responsible when you visit our Facebook fan page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

Since a transfer of personal data by Facebook Ireland Ltd.(= Meta Platforms Ireland Limited) to the USA takes place to Facebook Inc. among others, further protection mechanisms are required to ensure the data protection level of the GDPR. For this purpose, the provider uses standard data protection clauses pursuant to Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe.

If you as a visitor to the site would like to exercise your rights (information, correction, deletion, restriction, data portability, complaint to the supervisory authority, objection or revocation), you can contact both Facebook and us.

You can independently adjust your advertising settings in your user account. To do so, click on the following link and log in:

https://www.facebook.com/settings?tab=ads oder http://www.youronlinechoices.com

For further details, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/

 

2.1.1.2. Facebook Privacy Officer

To contact Facebook’s Privacy Officer, you may use the online contact form provided by Facebook at the following link https://www.facebook.com/help/contact/540977946302970.

 

2.1.1.3. Data processing for statistical purposes by means of page insights

Facebook provides so-called page insights for our Facebook fan page: https://www.facebook.com/business/a/page/page-insights. These are aggregated data that provide information about how people interact with our page. Site Insights may be based on personal data collected in connection with a visit or interaction by individuals to or with our Site and in connection with content provided. Please be aware of what personal data you share with us through Facebook. Your data may be processed for market research and advertising purposes even if you are not logged into Facebook or do not have a Facebook account. For example, user profiles can be created from the usage behavior and resulting interests of the users. The user profiles can in turn be used, for example, to display advertisements within and outside the platforms that presumably correspond to the interests of the users. This data collection takes place via cookies that are stored on your terminal device. Furthermore, data that is independent of the devices used by the users may also be stored in the user profiles; in particular, if the users are members of the respective platforms and logged in to them. The legal basis for the processing is Art. 6 (1) lit. f DSGVO. Our legitimate interest lies in the optimized presentation of our offer, effective information and communication with customers and interested parties, as well as the targeted placement of advertisements. Please note that we have no influence on the data collection and further processing by Facebook. As a result, we cannot provide any information about the extent to which, where and for how long the data is stored by Facebook. Furthermore, we cannot make any statements about the extent to which Facebook complies with existing deletion obligations, which evaluations and links are made with the data on the part of Facebook and to whom the data is passed on by Facebook. If you wish to avoid the processing of your personal data by Facebook, please contact us by other means.

 

2.2. Other social media providers and career networks

2.2.1. Responsible entity

If your personal data is processed by a provider listed below, this provider is the data controller within the meaning of the GDPR. For the assertion of your data subject rights, we point out that these can be asserted most effectively with the respective providers. Only they have access to the data collected from you. Should you still require assistance, please feel free to contact us at any time.

We have online presences on the social media platforms of the following providers:

 

• Instagram Inc., Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (= Meta Platforms Ireland Limited)
• YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
• XING / kununu: New Work SE, Dammtorstraße 29-32, 20354 Hamburg, Deutschland

 

2.2.2. Data Protection Officer

Instructions on how to contact the data protection officer of the other social media providers can be found here:

• Instagram Inc.: https://de-de.facebook.com/help/instagram/155833707900388
• LinkedIn Ireland Unlimited Company: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
• XING/kununu: New Work SE: Datenschutzbeauftragter@xing.com
• YouTube: To contact YouTube’s Privacy Officer, please contact Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

2.3. General information on social media platforms and career networks

Responsible entity

The controller for data processing within the meaning of the GDPR is the following entity, insofar as these data transmitted to us by you via one of the social media platforms are processed by us ourselves:

ALLGUTH GmbH
Würmtalstraße 35
82166 Gräfelfing
Tel. (089) 71052-0
Fax (089) 71052-50
Email: info@allguth.de

 

Our data protection officer

If you have any concerns about data processing carried out by us as the data controller, you can reach our data protection officer at the following contact details:

PROLIANCE GmbH / datenschutzexperte.de
Datenschutzbeauftragter
Leopoldstr. 21
80802 Munich
E-Mail: datenschutzbeauftragter@datenschutzexperte.de

 

2.3.1. Data processing for market research and advertising

As a rule, personal data is processed on the company website for market research and advertising purposes. For this purpose, a cookie is set in your browser, which enables the respective provider to recognize you when you visit a website. By means of the collected data, usage profiles can be created. These are used to display advertisements within and outside the platform that presumably correspond to your interests. Furthermore, data can also be stored in the usage profiles regardless of the devices you use. This is regularly the case if you are a member of the respective platforms and logged in to them.

 

2.3.2. Data processing when contacting us

We ourselves collect personal data when you contact us, for example, via a contact form or through a messenger service such as Facebook Messenger. Which data is collected depends on the information you provide and the contact data you have provided or released. These are stored by us for the purpose of processing the request and in case of follow-up questions. Under no circumstances will we pass on the data to third parties without your consent. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f DSGVO and, if applicable, Art. 6 (1) lit. b DSGVO if your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, provided that this does not conflict with any statutory retention obligations. We assume that processing is complete if it can be inferred from the circumstances that the matter in question has been conclusively clarified.

2.3.3. Data processing for contract management

If your contact via a social network or other platform aims at the conclusion of a contract for the delivery of goods or the provision of services with us, we process your data for the performance of the contract or for the implementation of pre-contractual measures or for the provision of the requested services. The legal basis for the processing of your data in this case is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted if it is no longer required for the performance of the contract or if it is determined that the pre-contractual measures do not lead to the conclusion of a contract corresponding to the purpose of the contact. Please note, however, that it may be necessary to store personal data of our contractual partners even after the conclusion of the contract in order to comply with contractual or legal obligations.

 

2.3.4. Data processing due to consent

If you are asked by the respective providers of the platforms for consent to processing for a specific purpose, the legal basis of the processing is Art. 6 (1) lit. a., Art. 7 DSGVO. Consent given can be revoked at any time with effect for the future.

 

2.3.5. Data sharing and recipients

When visiting and using the platforms listed above, a transfer of personal data to the USA or other third countries outside the EU may occur, which is why further protection mechanisms are required in these cases to ensure the level of data protection of the GDPR. For more information on whether and which suitable guarantees the providers can demonstrate for this, please see the list below.

We have no influence on the processing of your personal data by the provider and how it is handled. Likewise, we do not have any information on this. For more information, please check the privacy policy of the respective provider and, if necessary, use the opt-out / personalization options regarding data processing by the provider:

 

• Instagram
  • Privacy Policy/Opt-out: http://instagram.com/about/legal/privacy/
  • According to its privacy policy, Instagram (Facebook) uses standard data protection clauses to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfers to the USA or other third countries outside the EU: http://instagram.com/about/legal/privacy/
  • Meta Privacy Policy – How Meta collects and uses user data | Privacy Center | Manage your privacy on Facebook, on Instagram and in Messenger | Facebook Privacy

• YouTube/Google
  • Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de
  • Opt-out: https://adssettings.google.com/authenticated
  • The use of YouTube results in a transfer of personal data to the USA. YouTube cannot currently demonstrate any safeguards provided by the GDPR for a data transfer to the US. Please note that there is a risk to you for such transfers of personal data without the existence of an adequacy decision and without appropriate safeguards. The risk is that, due to legislation in the USA, American authorities (in particular the intelligence services) may access the personal data. Legal protection options or information on the handling of your data with the US authorities are only possible to a very limited extent or not at all. A level of data protection in accordance with the requirements of the GDPR can therefore not be guaranteed.
• LinkedIn
  • Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
  • According to its privacy policy, LinkedIn uses standard data protection clauses to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfers to the USA or other third countries outside the EU: https://www.linkedin.com/legal/privacy-policy und https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de
• XING / kununu
  • Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung
  • Opt-Out: https://nats.xing.com/optout.html?popup=1&locale=de_DE
  • According to its privacy policy, XING uses standard data protection clauses to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfers to the USA or other third countries outside the EU: https://privacy.xing.com/de/datenschutzerklaerung/wer-erhaelt-daten-zu-ihrer-person/drittlaender

 

2.3.6. Your rights

In the following, you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the data controller. You have the right to:

 

• Request information about your personal data processed by us; Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
• Immediately demand the correction of incorrect or completion of your personal data stored by us; Art. 16 DSGVO.
• Request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims; Art. 17 DSGVO.
• To request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO; Art. 18 DSGVO.
• To receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller; Art. 20 DSGVO.
• Complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or that of your usual place of residence or workplace.
• Revoke consent to the processing of data given once at any time with effect for the future; Art. 7 (3) DSGVO. In the event of revocation, we will immediately delete the data concerned, unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right of objection

Insofar as your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 (1) lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement of specific grounds.

If you wish to exercise your right of revocation or objection, simply send an e-mail to info@allguth.de.

 

2.3.7. Storage duration

The personal data collected by us will be deleted from our system when it is no longer required for the purposes specified at the time of collection or when you have exercised your right of revocation or objection. Legal retention periods remain unaffected. We have no influence on the storage period of your data that is stored by the social media providers for their own purposes. For details, please contact them directly.

 

Subject to change

We reserve the right to adapt or update this data protection declaration if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The most current version applies to your visit.

Status of this privacy policy: 19.03.2021

 

3. Data protection information for applicants for the Allguth head office or as a leaseholder

Thank you for your interest in working for or with our company. In accordance with the requirements of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we would like to inform you below about the processing of personal data provided by you as part of the application process and, if applicable, collected by us, and your rights in this regard. To ensure that you are fully informed about the processing of personal data as part of the application process, please take note of the following information.

 

3.1. Responsible body in the sense of data protection law

ALLGUTH GmbH
Würmtalstr. 35
D – 82166 Gräfelfing
Tel.: +49 89 71052 0
bewerbung(at)ALLGUTH.de
www.allguth.de

 

3.2. Contact details of our data protection officer

If you have any concerns about data processing carried out by us as the data controller, you can reach our data protection officer at the following contact details:

PROLIANCE GmbH / datenschutzexperte.de
Datenschutzbeauftragter
Leopoldstr. 21
80802 Munich
E-Mail: datenschutzbeauftragter@datenschutzexperte.de

 

3.3. Purposes and legal basis of processing

We process your personal data in accordance with the provisions of the European Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG) for the purpose of your application for an employment relationship or tenant relationship, insofar as this is necessary for the decision on the establishment of an employment relationship or tenant relationship with us. The legal basis for this is Art. 88 DSGVO in conjunction with § 26 BDSG (new) and, if applicable, Art. 6 (1) lit. b DSGVO for the initiation or implementation of contractual relationships.

Furthermore, we may process personal data about you insofar as this is necessary for the fulfillment of legal obligations (Art. 6 para. 1 lit. c DSGVO) or for the defense of asserted legal claims against us. The legal basis for this is Art. 6 (1) lit. f DSGVO; the legitimate interest is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG). Insofar as you give us express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent pursuant to Art. 6 (1) lit. a DSGVO. Consent given can be revoked at any time (see section 3.9 of this privacy information). Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

If an employment relationship or tenant relationship arises between you and us, we may, in accordance with Art. 88 DSGVO in conjunction with § 26 BDSG (new), further process the personal data already received from you for the purposes of the employment relationship or tenant relationship, insofar as this is necessary for the implementation or termination of the employment relationship or tenant relationship or for the exercise or fulfillment of the rights and obligations of the representation of the interests of the employees resulting from a law or a collective agreement, a company or service agreement (collective agreement).

In exceptional cases, we may receive your application for one of our lease stations incorrectly at info@allguth.de. We will inform you of this immediately. We will not share your information unless you give us your consent. If you have given us your consent, your data will be deleted after forwarding, otherwise with immediate effect.

 

3.4. Categories of personal data

We process data related to your application. This may be general data about you (such as name, address and contact details), information about your school education, professional qualifications, professional experience or further professional training, or other information that came to our attention in connection with your application.

 

3.5. Sources of the data

We process the personal data provided by you for the purpose of establishing and implementing the employment relationship or tenant relationship.

In addition, in some cases we also process personal data that we have obtained via internet research (including social media) or that has been made available to us about you by personnel service providers commissioned to fill vacancies.

 

3.6. Recipient of the data

We only pass on your personal data within our company to those areas that require this data to fulfill contractual and legal obligations or to implement our legitimate interests.

Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfill legal obligations, or if you have given your consent.

 

3.7. Transfer to a third country

A transfer to a third country is not intended.

 

3.8. Duration of data storage

We store your personal data as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted a maximum of six months after the end of the application process (e.g. notification of the rejection decision), unless longer storage is required or permitted by law. We store your personal data beyond this only insofar as this is required by law or in the specific case for the assertion, exercise or defense of legal claims for the duration of a legal dispute.

In the event that you have consented to a longer storage of your personal data, we will store your personal data in accordance with your declaration of consent.

If, following the application process, an employment relationship, training relationship, trainee relationship or tenant relationship is established, the data will – to the extent necessary and permissible – initially continue to be stored and then transferred to the personnel file or tenant records.

If necessary, you will receive an invitation to join an applicant pool following an application process. This will enable us to include you in our pool of applicants for future suitable vacancies. In the event of your consent, we will store your application data in our talent pool in accordance with your consent or, if applicable, future consents.

 

3.9. Your rights

Every data subject has the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.

In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 DSGVO if you believe that the processing of your personal data is not lawful. The right of appeal is without prejudice to any other administrative or judicial remedy.

If the processing of data is based on your consent, you are entitled under Article 7 of the GDPR to revoke your consent to the use of your personal data at any time with effect for the future. Please note that we may need to retain certain data for a certain period of time in order to comply with legal requirements (section 8 of this privacy information).

 

Right to object:

Insofar as the processing of personal data relating to you is carried out on the basis of Art. 6 (1) f DSGVO for the protection of legitimate interests, you have the right pursuant to Art. 21 DSGVO to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

To protect your rights, you can contact us at any time using the above data.

 

3.10. Necessity of the provision of personal data

The provision of personal data in the context of application processes is neither legally nor contractually required. You are therefore not obliged to provide the personal data. However, the provision of personal data is necessary for the decision on an application or the conclusion of a contract on an employment relationship or tenant relationship with us. However, in the context of your application, you should only provide personal data that is required for the acceptance and execution of the application. If you do not provide us with any personal data in an application, we cannot make a decision on the establishment of an employment relationship or tenant relationship.

 

3.11. Automated decision making

The decision about your application is not based on automated processing. Therefore, no automated decision in individual cases within the meaning of Art. 22 DSGVO takes place.

 

3.12. Subject to change

We reserve the right to adapt or update this information if necessary in compliance with the applicable data protection regulations. The most current version applies to your application.

Status of this privacy policy: 25.02.2020