The protection of your personal data is very important to us. You can therefore use our website in principle without providing such data. If, however, you wish to make use of certain offers on our website, this may result in the processing of your personal data in individual cases. In this regard, we seek your consent if there is no leagal basis for such data processing, but it is required to use our website
In our role as the controller, we have initiated a series of technical and organizational measures (TOMs) to provide you with the most complete protection possible for your personal data when using our website. However, we point out here already that the data transmission in the internet can have fundamental security gaps. Therefore, we cannot guarantee an absolute protection. You therefore always have the opportunity to transfer personal data to us by other means (e.g. via telephone or by mail)
a) Personal Data
Personal data means any information relating to an identified or identifiable natural person (hereinafter the data subject). An identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more particular features that expresses the physical, physiological, genetic, mental, economic, cultural or social identity oft hat natural person.
b) Affected Person
An affected person is any identified or identiifable natural person whose personal data is processed by the person who is responsible for data processing (controller).
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Restriction of Processing
Means the marking of stored personal data with the aim of limiting their processing in the future.
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
j) Third Party
Third Party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Controller withhin the meaning oft he GDPR is:
Lüderitzer Weg 6
D-39517 Tangerhütte OT Brunkau
Telefon: +49 39361-967-0
4. Privacy Officer
The privacy officer is:
KEHL Rechtsanwaltsgesellschaft mbH
06114 Halle (Saale)
Telefon: 0345 29267 202
Affected persons can contact our data protection officer at any time with data protection concerns.
By using cookies, we can provide userfriendly services through our website and constantly improve and optimize the offers or information on our website. The purpose of recognition and identification is therefore to simplify the use of our website.
You can prevent the setting of cookies at any time by appropriate settings in your browser. In this way, you can permantly deny the setting of cookies. You also have the option to delete already set cookies within your browser. If you object to the setting of cookies in this way, not all features of our website may be fully available.
6. General Information and Data Acquisition
When accessing our website, general information and data are collected and stored in so-called log files of our server. Usually, these are
- accessing browser type and its version,
- accessing operating system,
- Referrer-URL (Website that has been redirected to our site),
- subpages accessed,
- the date and time of access,
- IP address (internet protocol address),
- ISP of accessing system (Internet Service Provider) and
- The above named data and information similar to data and information we need to ward off cyberatatcks and other attacks on our IT system.
We use this information without drawing any conclusions about the data subject, but we need it to
- to display the content of our website correctly and truthfully and make it available,
- successfully improve the content of our website and its advertising,
- to ensure the general functionality and operability of our website and our IT systems
- to be able to provide tracking authorities with information in case of crimes related to our website..
The purpose of the processing is therefore the statistical evaluation as well as the increase of data and IT security.
The above named logfile data are saved anonymously and separately from possible other personal data of the data subject.
7. Registration Function of our Website
On our website we offer the possibility to register by providing personal data. Which concrete data is transmitted to us is given in the respective entry field. We use the data transmitted in this regard only internally and store them only for our own purpose. In case these personal data are transmitted to processors, we ensure they also use the data only internally and, if there is no other legal basis, we obtain the consent of the data subject.
In addition to the personal data requested by the input fields, we also collect and save the IP address of the registrant as well as the date and time of registration. In this way, we want to ensure that any potential misuse of our services is prevented and, in case of doubt, we are able to investigate possible crimes committed. We do not share this information with third parties unless we are required to do so by law or the disclosure is for law enforcement purposes.
By means of the registration function and the accompanying voluntary disclosure of personal data of the data subject, we can offer them services and content on our website, which by their nature can only be offered to registered users. At any time affected persons have the possibility to change the data given on their part or to have it deleted by the controller.
At any time and on request we provide information about which specific data we have stored. On request of the data subject, we will also delete or correct their personal data, as far as deletion is not in conflict with any statutory storage requirements.
8. Contact Form Function
Due to telemedia requirements, our website contains an e-mail address as well as a contact form which enable a quick electronic contact to us. If you contact us by means of these communication tools, the personal data you provide will be stored for the purpose of processing and responding to your request as well as for contacting us. This data is not passed on to third parties.
9. Privacy in the Application Process
We process personal data of applicants in the context of vacancies advertised by us or unsolicited applications for the purpose of the application process. This can be done electronically, which is especially the case if an applicant submits their documents electronically by e-mail or if necessary via webform offered for this purpose.
In case that such application results in a employment relationship between the data subject and the person responsible, the data is stored in compliance with applicable law for the purpose of the employment relationship.
If such an application does not result into an employment, the data will be deleted by the controller within six months at the latest. This does not apply if a longer retention of the data is in the legitimate interest of the person responsible ( for example for legal defense in proceedings under the General Treatment Act – German: AGG).
Our website uses components of Google analytics, a web analytics service to collect and analyze data about the behaviour of users of our website. In particular, the service collects the following data : from which website the user has visited our website (Referrer), which subpages the user has accessed and how long the user has spent on the respective pages. We use this data to improve our website and for cost-benefit analysis of online advertising.
Google Analytics is operated by the company Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States of America.
We have tagged Google Analytics with the addition “_gat.anonymizeIp“. This will shorten and anonymise the IP address of a user accessing our website from the European Union or a member state which is a signatory to the Agreement on the European Economic Area.
Google Analytics analyzes the Flow of visitors to our website, among other things, by using the data and information transmitted to provide us with detailed reports on the activities and behaviour of users of our website and to offer us other services related to our website.
Google Analytics places a cookie on the user’s computer, which makes it possible to create an analysis of the use of our website. If the user accesses one of our subpages on which Google Analytics is integrated, the user’s browser will be required to submit data to Google Analytics for the purpose of commission billing and online advertising. In this way, Google Analytics receives personal data, such as the user’s IP address, in ordert o track the origin of the users and the advertisement fees for commission billing.
The cookie collects and stores personally identifiable data (e.g. the location from which our website has been accessed, the time of access and its duration, or the frequency of visits by the users) This data, including IP address, are transmitted to and stored in the United States of America. Google Analytics may share this information with third parties.
Darüber hinaus hat jeder Betroffene das Recht, der Verarbeitung seiner personenbezogenen
Furthermore, each data subject has the right to permanently contradict the processing of their personal data by Google Analytics. For this, the data subject can load and install a browser add-on at https://tools.google.com/dlpage/gaoptout . This tells Google Analytics that the above named personal data may not be transmitted and is therefore considered as contradiction.
If the user’s computer system is later reset, formatted, deleted or reinstalled, the user must reinstall the above named browser add-on to disable Google Analytics. The same applies if the addon – ofr whatever reason – has been uninstalled.
Google Analytics‘ Privacy Polic can be found at: http://www.google.com/analytics/terms/de.html
A detailed srvice description is accessible at: https://www.google.com/intl/de_de/analytics/
Our website uses components of the video portal YouTube. YouTube allows users to upload and post free video, as well as view, rate and comment on other user’s video content through webstreaming.
YouTube is operated by the company YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States of America, einem Tochterunternehmen der Firma Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States of America.
If the user of our website accesses a subpage containing YouTube plug-in the user’s brower will automatically download a presentation of this YouTube component. In this content YouTube will know which subpage the user has visited.
An overview of YouTube services can be fount at : https://www.youtube.com/yt/about/de
If the user is also a member of youTube and logged into YouTube while visiting our site, YouTube recognizes which subpage of our site is visited ad assigns that information to ist YouTube profile. This also happens if the data subject clicks on a YouTube button using the compontents offered on our website.
The user may prevent the transfer of this information to YouTube by ending the session on youTube before visiting our website and logging out.
Wir weisen darauf hin, dass die Möglichkeit besteht, dass die unter Ziffer 6 dieser Datenschutzerklärung genannten allgemeinen Daten und Informationen an den Anbieter übertragen werden und dass dieser sie speichert.
Die Datenschutzbestimmungen von YouTube sind hier abrufbar: https://www.google.de/intl/de/policies/privacy
12. Telephonic Data Processing
In the event, you decide to contact our company by phone, personal information will automatically collected from you.
This refers, inter alia, to the collection of your surname and name and other personal data –such as your e-mail address – that you voluntarily provide us during the telephone conversation or that we collect from you for the purpose of processing your request on our part.
Due to the individual nature of each phone call and the reason for your call, the categories of collected personal data can not be determined in advance. Please take these categories from the history of each call.
The purpose of the data processing is the provision of a telephone system as well as the offer of a fast telephone contact with us and the fulfillment of legal obligations (imprint obligation).
The legal basis is therefore Article 6 (1) lit. b, lit. c, lit. f GDPR.
In the event that you have agreed to the telefphone contact to us, the legal basis is Art. 6 para. 1 lit. a GDPR. You may revoke this consent to anyone with future effect, without affecting the lawfulness of the data processing until the date of withdrawal.
Your personal data will be stored as long as it is necessary for the processing of your respective request, up to the statutory retention period. Afterwards your data will be deleted. Your telephone number is usually forwarded to third parties (providers of our telephone infrastructure). Furthermore, your data will not be disclosed to third parties, except in the context of an existing contractual relationship between you and us.
13. Data Subject Rights
a) Right of Access
Each data subject has the right to request a confirmation from the controller whether personal data concerning him or her are beeing processed. If so, the data subject has the right to demand free information about their personal data as well as receiving a copy thereof. The data subject may in particular request information about the following:
- the purposes of processing
- the categories of personal data
- the recipients or categories of recipients to whom the personal data has been disclosed
- the storage duration (if possible) or the criteria for determining the storage duration
- the existence of a right of rectification, a right of cancellation, a right to restriction of processing, a right to object to processing and a right of appeal to the data protection authority
- If the data are collected by third parties (i.e. not from the data subject), information about the origin of data
- about the existence of automated individual decisions including profiling and corresponding detailed information about profiling logic as well as its extent and impact on the data subject
- the transfer of personal data to a third country or international organisation and, if so, the appropriate guarantees regarding such transfer
b) Right to Rectification
Data subjects may require the controller to correct to correct inaccurate personal information concerning them. This also includes the right to request the completion of personal data concerning them by means of a supplementary declaration.
c) Right to Erasure („to be Forgotten“)
Data subjects have the right to ask the controller for deleting their personal data, un less legal provisions preclude or the processing is necessary and
- the data is no longer necessary for the processing purpose for which it was originally collected
- the data subject revokes their consent and is no longer and ther is no other legal bassis for further processing
- the data subject objects to the processing (Article 21 (1) GDPR) and there is no priority legitimate interest for further processing or the data subject objects to processing under Article 21(2) GDPR
- the data has been processed unlawfully
- the cancellation is required under a legal obligation to which the controller is subject
- the data relating to offered information society services has been collected pursuant to Article 8 (1) GDPR
If the personal data, subject to the erasure obligation, has been made public, wes hall take appropriate measures, taking into account the costs and availbale technical means, to inform other responsible persons, that the controller requested the deletion of all links and dublications of such data. This does not apply if an to the extent that further processing is required.
d) Right to Restriction of Processing
Data subjects have the right to require the controller to restrict processing, if:
- the data subject disputes the accuracy of the personal data for the period of time required for the review
- the processing is unlawful, but the data subject refuses the deletion and requires a limited processing
- the data controller no longer needs the data for their processing purposes, but the data subject needs them to excercise, assert or defend their rights
- the data subject has objected to the processing according to Art. 21 (1) GDPR, but it is not yet certain whether legitimate interests of the controller predominate
e) Right to Data Portability
Data subjects have the right to have the controller hand over the personal data they have provided to them in a standard, structured and machine-readable format. Data subjects also have the right to have these data transmitted by the controller without hindrance by the latter to another controller or to submit them themselves, as far as the processing is subject to the consent in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. b GDPR and the processing is carried out by an automated procedure. This does not apply if processing by the original controller is required to perform a public task assigned to him, or if the transfer from the original to the new controller is not technically feasible or if the rights and freedoms of other persons are adversely affected.
f) Right to Object
Data subjects have the right, for reasons arising from their particular situation, to object to the processing of their personal data if such data are processed on the legal basis of Art. 6 (1) lit. E or f. this also applies to profiling.
If the data subject raises such a contradiction, we will not further process the personal data concerned, unless we can prove the rights, freedoms and interests of the data subject for protection of further legitimate interests or the further processing serves our legal defense or the assertion or exercise of legal rights.
If the data processing on our part takes place for purpose of direct mail, the data subject has the right to objection at any time, which also refers to profiling as long as, and in so far as it is related to direct mail.
g) Right Not to be Subject to a Decision Based Solely on Automated Processing Including Profiling
Data subjects have the right not o be subject to a decision based solely on the automated processing of personal data relating tot hem, including profiling, which has legal effects or is otherwise of similar nature and adversely affects them. This does not apply if
- such a decision is required to conclude or fulfill a contract between the data subject and the controller
- such a decision is admissible under the law to which the controller is subject and that law provides reasonable safeguards for the rights, freedoms and legitimate interests of the data subject
- the data subject has expressly agreed
If an automated individual decision is required to fulfill or initiate a contract or if it is based on consent, we take measures to protect the rights, freedoms and legitimate interests of the data subject. This includes the data subject’s right to demand from the controller the intervention of a person, to be able to explain his or her own position and to challenge the decision.
h) Right to Revoke any Consent
Data subjects have the right to revoke any consent given for the processing of personal data at any time.
i) Contact Person for Data Subjects
In principle, data subjetcs may turn to any of our employees for the exercising the rights under this number.
j) Right to Appeal to the Data Protection Authority
Without prejudice to any other administrative or judicial remedy, any data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if the data subject considers that the processing of the personal data concerning him or her Data breaches the provisions of the GDPR.
14. Legal Basis of Processing
The legal basis of Art. 6 para. 1 lit. a) GDPR is relevant if the consent of the data subject to the processing of their personal data exists.
Processing of personal data that serves to fulfill a contract or to initiate a contract with the data subject is based on Art. 6 para. 1 lit. b) GDPR.
A processing of personal data is based on Art 6 (1) lit. c) GDPR, if it occurs due to legal obligations to which we are subject, such as the fulfillment of tax obligations.
A processing of personal data is based on Art. 6 ( 1) lit. d) GDPR, if it is necessary to protect vital interests of the data subject or another natural person. This would be the case if a visitor of our premises were injured and weh ad to give his or her name , age, health insuracne or other vital data to a doctor or hospital.
Art. 6 paragraph Lit. f) GDPR justifies the processing of personal data, which in each case has no basis in previously mentioned and which is necessary for the protection of a legitimate interest of our company or a third party. In doing so, the interests, fundamental rights and freedoms of the data subject must not predominate.
15. Eligible Interests in the Processing that Are Being Pursued by Us or a Third Party
In the case of processing personal data based on Art. 6 para. 1 lit. f GDPR our legitimate interest is in doing business that is geared to the welfare of our employees and owners.
16. Storage Duration of Personal Data
The standard for the storage of personal data is the legal retention period. Upon expiration of this period, the respective data will be routinely deleted, unless they are required to fulfill the contract or to initiate a contract.
17. Legal or Contractual Provisions for the Provision of Personal Data; Necessity for the Conclusion of the Contract; Obligation of the Data Subject to Provide the Personal Data; Possible Consequences of Non-Provision
The provision of personal data may result from contractual (e.g., information to the contractor) or legal (e.g., tax regulations) obligations. Thus, it may turn out that an affected person provides us with personal data for a contract, which is subsequently processed by us. Thus, a person may be required to provide personal information when entering into a contract with our company. In this case, a lack of provision of this data would lead to the conclusion of a contract being impossible.
Before providing personal information, the data subject may contact our company. We inform the data subject whether the provision of this data is required by contract or by law, is required for this purpose and what the concrete consequences of non-provisioning would be.
18. Existence of an Automatic Decision-Making
We, as a responsible company, consciously refrain from automated decision-making or profiling. We, as a responsible company, consciously refrain from automated decision-making or profiling.