Data protection

The following information has been translated from German. Only the original text in German applies.

 


§ 1 Information on the collection of personal data

(1) In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

(2) The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is SITEC GmbH, Johann-Georg-Herzog-Str. 19, personally liable partner: Olaf Clausen GmbH & Co. KG, Management: Lukas Clausen, 96369 Weissenbrunn, e-mail: [email protected]. Our data protection officer is ITs Hein GmbH, Kulmbacher Straße 27b, 95260 Bad Berneck im Fichtelgebirge, Germany, e-mail: [email protected].

"We expressly point out that when using this e-mail address, the contents are not exclusively taken note of by our data protection officer. If you wish to exchange confidential information, please contact the data protection officer directly via this email address first." 

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations.

(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.

(5) To ensure the security of your data during transmission, we use state-of-the-art encryption methods (SSL encryption) via HTTPS.

 


§ 2 Your rights

(1) You have the following rights vis-à-vis us with regard to your personal data:

a) Right to information, Art. 15 GDPR

According to Art. 15 GDPR, you have a right to information about your processed personal data. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint and the origin of your data if it was not collected by SITEC GmbH.

b) Right to rectification, Art. 16 GDPR

In accordance with Art. 16 GDPR, you have the right to demand the immediate rectification of incorrect or completion of incomplete stored personal data.

c) Right to erasure, Art. 17 GDPR

In accordance with Art. 17 GDPR, you can request the erasure of your stored personal data, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

d) Right to restriction of processing, Art. 18 GDPR

In accordance with Art. 18 GDPR, you can request the restriction of the processing of your stored personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.

e) Right to data portability, Art. 20 GDPR

You have the right to receive the personal data concerning you, which you have provided, in a structured, commonly used and machine-readable format.


(2) You also have the right to lodge a complaint with the supervisory authority. 

To the list of supervisory authorities for the non-public sector.


§ 3 Collection of personal data when visiting our website

(1) When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server using so-called server log files. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

 

- IP address
- Date and time of the enquiry
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request originates
- browser
- Operating system and its interface
- Language and version of the browser software.

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). Cookies cannot execute programmes or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.

(3) Use of cookies:

a) This website uses the following types of cookies, the scope and function of which are explained below:

- Transient cookies (see b)
- Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

d) Use of Google Analytics
On this website, we use Google Analytics in particular. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. This is a web analysis service of Google Inc. which uses such cookies. The information generated by the cookies about your visit to and use of our website is generally transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.   On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by selecting the appropriate settings in your browser. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data. Use the following link to download and install the available browser plug-in: tools.google.com/dlpage/gaoptout. In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our website by installing an opt-out cookie Disabling Tracking. This will prevent Google Analytics from collecting data for this website and for this browser in the future as long as the cookie remains installed in your browser.

e) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website.

 f) Use of Google Web Fonts
On this website, we use the services of the script/font library Google Web Fonts to display our content correctly across browsers. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google web fonts are transferred to the cache of your browser to avoid repeated loading, so that a connection to the operator of the Google library is automatically established when they are called up. Consequently, it is at least theoretically possible that the operator of the library collects data, although it is unclear whether and, if so, for what purposes this data is collected. This is governed by the privacy policy of the operator Google, which you can find at the following link: www.google.com/policies/privacy/.

g) We use cookies to be able to identify you for subsequent visits if you have an account with us. Otherwise you would have to log in again for each visit.


§ 4 Further functions and offers of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you must generally provide additional personal data that we use to provide the respective service and to which the aforementioned data processing principles apply.

(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer below.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer. 


§ 5 Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

(2) If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details: SITEC GmbH, Johann-Georg-Herzog-Str. 19, 96369 Weißenbrunn, e-mail: [email protected], Tel: 09261 6075 0


§ 6 Special forms of use of our website

1. registration on our website

a) When you register on our website to use our personalised services, we collect personal data such as your name, address, telephone number and email address. By registering, you can access services/content that we only offer to registered users.

b) As part of your registration, you also have the option of changing or deleting the data provided in connection with the registration if necessary. Of course, you can request information from us at any time about the personal data we have stored about you. You can also request that we correct or delete your data, provided that there are no statutory retention obligations to the contrary. You can get in touch with us using the following contact details SITEC GmbH, Johann-Georg-Herzog-Str. 19, 96369 Weißenbrunn, e-mail: [email protected], Tel: 09261 6075 0

2. Social Media

a) Use of social media plug-ins

aa) We currently use the following social media plug-ins: Facebook and Instagram. We use the so-called two-click solution. This means that when you visit our website, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or the logo. We give you the option of communicating directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it will the plug-in provider receive the information that you have accessed the corresponding website of our online offering. In addition, the data mentioned under § 3 of this declaration will be transmitted.

About Facebook: Our website uses so-called social plugins ("plugins") of the social network Facebook, which is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins are marked with a Facebook logo or the addition "Social plugin from Facebook" or "Facebook Social Plugin". You can find an overview of the Facebook plugins and their appearance here: developers.facebook.com/plugins

When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook.

This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plugins, for example by clicking the "Like" button or leaving a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options to protect your privacy can be found in Facebook's data protection information: www.facebook.com/policy.php

If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of Facebook plugins with add-ons for your browser, e.g. with the "Facebook Blocker" or the script blocker "NoScript" (http://noscript.net/).

About Instagram: Functions of the Instagram service are integrated on our pages. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

Further information on this can be found in Instagram's privacy policy.

bb) We have no influence on the data collected and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

cc) The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. We offer you the opportunity to interact with the social networks and other users via the plug-ins so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR.

dd) Data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.

ee) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy.

ff) Addresses of the respective plug-in providers and URL with their data protection notices:

- Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA;

www.facebook.com/policy.php; further information on data collection: www.facebook.com/help/186325668085084,

www.facebook.com/about/privacy/your-info-on-other and

www.facebook.com/about/privacy/your-info

Facebook has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework

 

- Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA

Instagram data protection and security area

b) Integration of YouTube videos

aa) We have integrated YouTube videos into our online offering, which are stored on www.YouTube.com and can be played directly from our website. [These are all integrated in "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer].

bb) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 3 of this declaration will be transmitted. This takes place regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

cc) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

c) Integration of Google Maps

aa) We use the Google Maps service on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. This enables us to show you interactive maps directly on the website and allows you to use the map function conveniently.

bb) By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 3 of this declaration will be transmitted. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

cc) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.

Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

d) Links to websites of other providers and social networks, services and platforms

Our website may contain links to websites of other providers, social services, networks and other platforms. This privacy policy applies exclusively to the website of SITEC GmbH. SITEC GmbH has no influence on and does not control whether other providers comply with the applicable data protection regulations.


§ 7 Data protection for applicants

We are pleased that you are interested in us and that you are applying or have applied for a position in our company. We would like to provide you with the following information on the processing of your personal data in connection with your application.

 

1 The controller within the meaning of data protection law is

SITEC GmbH

Johann-Georg-Herzog-Straße 19

96369 Weißenbrunn

You can find further information about our company, details of the authorized representatives and other contact options on our website: https://www.sitec.de

 

2 Which of your data do we process? And for what purposes?

We process the data that you have sent us in connection with your application in order to check your suitability for the position (or any other open positions in our companies) and to carry out the application process.


3 Legal basis for the processing

The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG in the version applicable from 25.05.2018. This permits the processing of data required in connection with the decision to establish an employment relationship. Should the data be required for legal prosecution after completion of the application process, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR. Our interest then lies in the assertion of or defense against claims.

4 How long will the data be stored?

Applicants' data will be deleted after 6 months in the event of rejection. In the event that you have consented to your personal data being stored for a longer period, we will transfer your data to our applicant pool. There the data will be deleted after two years. If you have been accepted for a position as part of the application process, the data will be transferred from the applicant data system to our personnel database.

5 To which recipients will the data be passed on?

Your applicant data will be reviewed by the HR department after receipt of your application. Suitable applications are then forwarded internally to the department managers responsible for the respective open position. The next steps are then agreed. Within the company, only those persons have access to your data who need it for the proper course of our application procedure.

6 Where is the data processed?

The data is processed exclusively in data centers in the European Union.

7 Your rights as a "data subject"

You have the right to information about the personal data we process about you. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require proof from you that you are the person you claim to be. Furthermore, you have a right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to do so. You also have the right to object to processing within the scope of the statutory provisions. The same applies to the right to data portability.

8 Our data protection officer

We have appointed a data protection officer in our company. You can reach him under the following contact options:

ITs Hein GmbH
Maintalstr. 155
95460 Bad Berneck

9. right to lodge a complaint

You have the right to complain to a data protection supervisory authority about the processing of personal data by us.

 


§ 8 Amendment of our data protection provisions

In order to ensure that this privacy policy always complies with current legal requirements, we reserve the right to amend it from time to time, in particular if our services change, e.g. when introducing a new service. The current version of this privacy policy will then apply to you.

 


Privacy policy as of March 2021