Data Protection Declaration
Thank you for visiting our website. The information provided is intended to explain how data protection is handled in our company and show you that we take the legal provisions on data protection seriously and adhere to them strictly.
1. Subject matter of data protection
The aim of data protection is to protect personal data and therefore the right of individuals to determine themselves how their data is used. Personal data includes, for example: Name, postal address, email address or telephone number as well as user data such as your IP address. In other words, specific details by means of which a person can be identified or reference to a person can be made.
As a matter of principle, we collect and process the personal data of our users exclusively to the extent and for the purpose of providing this website, and also the content and services it includes.
We shall regularly contact you to obtain consent to process your personal data, unless it is not possible to obtain consent for practical reasons and unless the processing of the data is permitted by statutory regulations.
We try to avoid passing on personal data to third parties or permitting such to have access to the data. In some cases, however, this may be unavoidable, e.g. if we do not have the necessary expertise for the intended processing of the data. Should this be the case we shall only publish these data if you have given us your consent to do so, if we are legally permitted to do this on the basis of justified interests or we are legally obliged to do this. There is no processing of the data in third-party countries.
2. Entity responsible and data protection officer
The entity responsible for the data processing in the sense of legal provisions relating to data protection is:
GT Rostock GmbH
Mälzereistr. 1a
18147 Rostock
Telephone +49 (0) 1 71 – 1 74 11 09
E-Mail: jacob.lubig@gt-rostock.com
The responsible entity has appointed the following person as Data Protection Officer:
Alexander Matzelsberger
Hämpfergasse 10
D-89073 Ulm
Telephone: +49 731 1533897
Fax: +49 731 1533759
EMail: dsb@matzelsberger.com
3. Legal basis for the processing of personal data
If we obtain consent from the person concerned to process the personal data, Section 6, paragraph 1a, EU General Data Protection Regulation (GDPR) shall serve as the legal basis.
If we process personal data required for the fulfilment of a contract, to which the person concerned is the contractual partner, Section 6, paragraph 1a, EU General Data Protection Regulation (GDPR) shall serve as the legal basis. This also applies with regard to processing procedures which are necessary for the execution of pre-contractual measures.
Insofar as processing of personal data is necessary for the fulfilment of a legal obligation, to which our company is subject, Section 6, paragraph 1c, EU General Data Protection Regulation (GDPR) shall serve as the legal basis.
In case vital interests of the person concerned or another natural person render processing of personal data necessary, Section 6, paragraph 1d, EU General Data Protection Regulation (GDPR) shall serve as the legal basis.
If the processing is necessary to uphold a justified interest of our company or of a third party and if the interests, basic rights and basic freedoms of the person concerned do not have predominance over the first-mentioned interest, Section 6, paragraph 1f, EU General Data Protection Regulation (GDPR) shall serve as the legal basis for the processing.
4. Deletion of data and duration of storage
We shall delete or block personal data of persons concerned as soon as the purpose of storing them ceases to apply.
Storage can continue beyond the original purpose of the data storage if this has been provided for by the legislator in regulations which apply to us. Blockage or deletion of the data is to be carried out if a storage period prescribed by these regulations expires, unless conclusion of a contract or fulfilment of a contract renders it necessary to continue storing the data.
5. Preparation of the website and creation of logfiles
a) Description and scope of the data processing
If you call up our internet site, our system automatically records data and information from the computer system from which you access our site.
In this process the following data are collected:
(1) Information on the browser type and version used
(2) The user’s operating system
(3) The user’s internet service provider
(4) The user’s IP-address
(5) Date and time of access
(6) Websites from which the user’s system reaches our internet site
(7) Websites which are called up by the user’s system via our website
These data are also stored in so-called logfiles in our system. In this process we store these data separately from other personal data affecting you and do not merge such data at any point in time.
b) Legal basis for the data processing
Section 6, paragraph 1f, EU General Data Protection Regulation (GDPR), constitutes the legal basis for the temporary storage of the data and the logfiles.
c) Purpose of the data processing
The temporary storage of the IP address is necessary to enable the website to connect with the user’s computer. For this purpose the user’s IP address must remain stored for the duration of the session.
The storage takes place in logfiles in order to ensure the functionality of the website. In addition, the data serve the purpose of optimising the website and ensuring the security of our information technology systems. This constitutes the reason for our justified interest in data processing in accordance with Section 6, paragraph 1f, General Data Protection Regulation (GDPR). An evaluation of the data for marketing purposes does not take place in this context.
d) Duration of the storage
The data are deleted as soon as the purpose for which they have been collected has been fulfilled and such data are no longer required.
In the case of recording the data for preparation of the website, the data will be deleted when you leave our website.
In the case of storing the data in logfiles, the data will be deleted after seven days at the latest. Storage which goes beyond this is possible. In this case the IP addresses of the users are deleted or altered in such a way that the client who calls up the website can no longer be identified.
e) Possibility to object and have data removed
It is absolutely necessary to record the data to prepare the website and to store the data in logfiles in order to operate the internet page. The user, therefore, has no possibility to object.
6. Use of cookies
7. Newsletter
a) Description and scope of the data processing
You have the possibility to register for a complimentary newsletter on our homepage. Following this registration, the newsletter will be sent to you until we either stop circulation of the newsletter or you inform us that you would no longer like to receive the newsletter.
If you use the input mask to register that you would like to receive the newsletter, the data entered there will be transferred to us. Here it is essential that you enter the following data:
(1) First name and surname
(2) Email address
(3) Postal address
Furthermore, the following data are collected in connection with the registration
(1) IP address of the computer used to register
(2) Date and time of the registration
Within the context of this registration procedure, we obtain your consent to process these data and refer to this Data Protection Declaration.
Your data will be used solely for the dispatch of the newsletter and will not be passed on to third parties.
b) Legal basis for the data processing
Section 6, paragraph 1a, General Data Protection Regulation (GDPR), represents the legal basis according to which we process personal data in connection with circulating the newsletter.
c) Purpose of the data processing
We store your personal data for the purpose of sending the newsletter to you. We collect other personal data in context with the registration procedure in order to prevent misuse of the services or the email address used.
d) Duration of the storage
The data are deleted as soon as the purpose for which they have been collected has been fulfilled and such data are no longer required. Your email address will be stored as long as the subscription to the newsletter is active.
Other personal data collected in the context of the registration procedure will normally be deleted after a period of seven days.
e) Possibility to object and have data removed
You can terminate your subscription to the newsletter at any time. For this purpose follow the link which you can find in every newsletter or use the following email address.
In this way you revoke, at the same time, your consent to store your personal data which were collected during the registration. These data will subsequently be deleted
8. Contact form and email contact
a) Description and scope of the data processing
On our internet page there is a contact form which you can use for making contact electronically. If you make use of this possibility, the data entered into the input mask will subsequently be transferred to us and stored. Here it is essential that you enter the following data:
(1) Name
(2) Email adress
(3) Postcode
You may also supply the following data voluntarily:
(1) Name of your company
(2) Telephone number
As soon as you inform us about this, the following data will also be transferred and stored:
(1) IP address
(2) Date and time of the registration
Before you can send us some information via the contact form, your consent to sending and storing your data will be obtained within the scope of the sending procedure. In this context we refer to this Data Protection Declaration.
Alternatively, you can also contact us via the email address which we have supplied. In this case we will store the personal data sent with the email.
We will use these data solely for the dialogue with you and will not pass them on to third parties in any form.
b) Legal basis for the data processing
The legal basis for the processing of the data, providing consent has been granted, is Section 6, paragraph 1a, General Data Protection Regulation (GDPR).
The legal basis for the processing of the data which are transferred in the process of sending an email is Section 6, paragraph 1f, General Data Protection Regulation (GDPR). If the purpose of the email contact is to conclude a contract, the additional legal basis for the data processing is Section 6, paragraph 1b, General Data Protection Regulation (GDPR).
c) Purpose of the data processing
The personal data from the input mask will be used solely for processing the contact.
If you contact us by email our justified interest in processing the data, which is required, is in connection with dealing with the contact.
All other personal data which are transmitted during the sending process serve the purpose of ensuring the security if our information technology systems and preventing any misuse of our contact form.
d) Duration of the storage
The data are deleted as soon as the purpose for which they have been collected has been fulfilled and such data are no longer required.
Concerning the personal data from the input mask of the contact form, this is the case when the dialogue about which you have enquired has been terminated. This is the case at the latest when, from our point of view, it can be seen from the circumstances that the matter concerned has been clarified conclusively.
All other personal data collected in the context of making contact via the form or email will be deleted at the latest following a period of seven days.
e) Possibility to object and have data removed
You have the possibility to revoke your consent to process the personal data at any time. If you contact us by email, you can object to the storage of your data at any time. In this case we will delete all personal data which have been stored in connection with your contact with us. Subsequently we will not be able to continue the dialogue with you.
Use the following contact possibilities to state your objection:
Magirusstr. 7-9
89077 Ulm
By email: info@beiselen.de
9. Job offers
On our website you have the possibility to find out about our job offers. At the same time we offer you the possibility to respond to these job offers by email or by means of the contact form supplied.
a) Description and scope of the data processing
The prerequisite for an application process is that the interested party provides us with application data. The data concerned are specifically related to the respective job description in each individual case. As a rule this comprises data relating to one’s own person, contact data and the papers normally required for an application e.g. a curriculum vitae. Beyond that, it is your choice whether you wish to provide us with additional information.
Should you send us your application by email, we will store the data transferred with the email. In this connection, however, we would ask you to take note that fundamentally emails are transferred in unencrypted form in so far as you do not have this done yourself. We can, therefore, not accept any responsibility for the security of the dispatch to our servers and therefore recommend that you send your application by post or use the contact form supplied.
If you apply using the contact form, you also transfer to us the data entered, which we subsequently store. In this case the data are sent to our server in encrypted form.
b) Legal basis for the processing of personal data
Legal basis for the data processing in the application procedure is Section 6, paragraph 1b, General Data Protection Regulation (GDPR) and Section 6 paragraph 1f , in each case in connection with Section 26 paragraph 1 German Federal Data Protection Act (BDSG).
Should you inform us about special categories of personal data in the context of your application (Section 9, paragraph 1, General Data Protection Regulation (GDPR). e.g. status as a severely handicapped person, etc.), then Section 9, paragraph 2b GDPR additionally constitutes a legal basis for processing the data.
c) Purpose of the data processing
The purpose of the data processing is to deal with the application for a job offered by us. The data are called up solely for the internal selection procedure. Should we have recourse in individual cases to services of third parties for this purpose, this takes place in the context of a commissioned processing in accordance with Section 28 GDPR. Should this be the case, you will be informed about this.
If the applicant is offered a position, the data will be further processed in connection with implementation of this working relationship.
d) Duration of the storage
The applicant’s data will be deleted by us within a certain period if the application does not result in a working relationship. The deletion takes place within six months in so far as the application procedure has been completed and the application does not result in a working relationship In this way it is possible for us to answer any subsequent questions which may crop up and to fulfil our obligation to produce evidence according to the General Equal Treatment Act (GETA).
If the application procedure has not yet been concluded, the application data will be deleted immediately if the applicant objects to the data being processed. In this case we assume that the application will be withdrawn and that there is no longer any interest in the respective job offer.
e) Possibility to object and have data removed
You have the right to object to the processing of your data in the application procedure. In this case we delete your data according to the steps described under d).
In so far as you object to the data processing before the application procedure has been completed, we will consider your objection simultaneously to be a withdrawal of your application.
10. Web analysis by means of Google Analytics
We use Google Analytics for the analysis of our website. This is a web analysis service provided by Google. Google Analytics uses cookies for this task.
a) Scope of the processing of the personal data
The cookies used by Google Analytics will be stored on your computer. If individual pages of our website are called up, this automatically involves storage of the following data:
(1) IP address of the system used to register
(2) Operating system
(3) Browser type
(4) The website called up
(5) The sub-pages called up by the website which has been called up
(6) The length of time on the website
(7) The frequency with which the website is called up
(8) Date and time of your visit to our website
This information is transferred to a Google server in the USA and stored there. Should it be prescribed according to the laws there, Google will pass on this information to third parties. This also occurs in the case that Google has these data processed by third parties.
The data are used and collected in an anonymised or pseudonymised form. Because Google Analytics has been extended on this website by the code “gat._anonymizeIp();”. This guarantees an anonymised recording of your IP address (so-called IP-Masking). This is achieved by shortening your IP address while still within the European Union or in contractual states in which the Treaty on the European Economic Area is valid before it is transmitted to the USA. Only in exceptional cases (e.g. technical problems in the European Infrastructure) is the complete IP address transmitted to a Google server in the USA and only shortened when it is there.
Google is commissioned by us to use the information collected to evaluate your use of our website. Furthermore, Google compiles evaluations of the website activities for us and provides further services for us which are linked to the use of the website and the use of the internet.
b) Legal basis for the processing of personal data
Legal basis for the data processing is Section 6, paragraph 1f, General Data Protection Regulation (GDPR).
c) Purpose of the data processing
Processing of the personal data enables us to analyse the surfing conduct of users of our website. The knowledge gained in this way enables us to compile information about the use of individual components of our website. This helps us consistently to improve our website and its user-friendliness. Our justified interest in the processing of data in accordance with Section 6, paragraph 1f, General Data Protection Regulation (GDPR) is in connection with these purposes.
As a result of the anonymisation of the IP address sufficient account is taken of the interests of the user in the protection of their personal data.
d) Duration of the storage
The data are deleted as soon as the recording purpose has been fulfilled and such data are no longer required. In our case this is the case for 14 days.
e) Possibility to object and have data removed
Cookies are stored on the computer and transferred from the computer of the user to our site. Thus you as user, consequently, have full control over the use of cookies. You can deactivate or limit the transfer of cookies by changing the settings in your internet browser. Cookies which have already been stored can be deleted at any time. This can also be set to take place automatically. If cookies for our website are deactivated, it is possible that all functions of the website can no longer be used in their full scope.
We offer you the possibility of a so-called “opt-out” from the analysis procedure.
For this purpose, please follow this link:
http://tools.google.com/dlpage/gaoptout?hl=de
In this way a further cookie is installed on your system. This gives a signal to our system not to store the data of the user. If, in the meantime, you delete the corresponding cookies from your system, you must follow the link described above to enable it to set the opt-out cookie once again.
You can find Conditions of Use and Information on Data Protection within the context of using Google Analytics here:
http://www.google.com/analytics/terms/de.html
http://www.google.com/intl/de/analytics/privacyoverview.html.
11. Integration of Social Media (Facebook, Instagram)
On our website there are links to the following social networks. There, in addition to this website, we also maintain an internet presence, so that we can inform our customers who use the respective network about our offers and services:
• Facebook social network, 1601 South California Avenue, Palo Alto, CA 94304, USA.
• Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA
The links can be seen on the respective logo of the Facebook operator. By clicking on the link you can access our internet presence there. On such websites their own Terms and Conditions of Business and Data Processing Guidelines apply. If you have a user’s account with Facebook and are logged in there, the websites visited by you will be linked with your Facebook account and possibly made known to other users. In this process data will be transmitted to Facebook. We receive no information about the content of the data which have been transmitted or about the use of the data. We have no knowledge whether and to what extent the company which operates Facebook possibly collects other data. You can find further information about this here:
Data Protection Declaration of Facebook
Data Protection Declaration of Instagram
As a member of the social network you prevent the transmitting of your membership data and their linkage by logging yourself out – ideally before you use the corresponding link.
12. Youtube – Links
On our homepage we have embedded YouTube videos which we ourselves have produced by means of the YouTube software. This software is operated by YouTube – represented by Google – , LLC, 901 Cherry Avenue, San Bruno, CA 94066 USA (YouTube).
As soon as you click on such a video / watch it, a link is created by the YouTube software to the YouTube servers in order to present the video for you. At the same time data are also transmitted to YouTube. You can find further information about this here:
https://support.google.com/youtube/answer/171780?hl=de
Please refer to the data protection information of YouTube / Google to find out which specific data YouTube collects and stores when the video is called up:
Data Protection Declaration of YouTube
If you are logged into YouTube as a member, YouTube will attribute the data / information collected to your personal user account of the YouTube platform in each case.
As a member of the social network you prevent the transmitting of your membership data and their linkage by logging yourself out – ideally before you use the corresponding link.
13. Integration of Google Maps
Maps of the Google Maps service are embedded on our website. Google is also the company which offers these maps.
In so far as you use these embedded maps by clicking on them, for example, or zooming into them, data are transmitted to Google. As far as we know this is, above all, the IP address and, if possible, location data. Further information can be found in the
Data Protection Declaration of Google
You have the possibility to prevent data processing by Google by means of the so-called “Opt-Out”.
For this purpose, please follow this link:
https://adssettings.google.com/authenticated.
14. Links
At this point we would like to point out that this Data Protection Declaration does not apply to other websites which you access via links positioned on our website. We have no influence over the adherence to data protection and security regulations by other parties providing goods or services. Therefore please inform yourself on the internet pages of these other parties about the data protection declarations available there.
15. Rights of the person concerned
In so far as your personal data are processed, you are a person concerned in the sense of the GDPR. You then have the following rights in connection with us:
a) Right to information
You can demand a confirmation from us whether personal data which concern you are processed by us. If this is the case, you can demand information from us about the following information:
(a) the purposes for which the personal data are processed;
(b) the categories of personal data which are processed;
(c) the recipients or the categories of recipients to whom the personal data concerning you were revealed or will still be revealed;
(d) the planned duration of the storage of the data concerning you or, in case no concrete information is possible on this, criteria for stipulating the duration of storage;
(e) the existence of a right to correction or deletion of the personal data concerning you,
a right to limitation of the processing by the person responsible or a right of objection to this processing;
(f) the existence of a right to complain to a supervisory authority
(g) all available information about the origin of the data if the personal data are not collected from the person concerned;
(h) the existence of automated decision-making including profiling according to Section 22, paragraphs 1 and 4, GDPR and – at least in these cases – detailed information about the logistics involved, the consequences and desired effect of such processing for the person concerned.
You are entitled to demand information about whether personal data which concern you are being transmitted to a third country or to an international organisation. In this context you can demand to be advised about appropriate guarantees according to Section 46 GDPR in connection with the transmission.
b) Right to correction
You have a right to correction and/or completion in so far as the personal data concerning you are incorrect or incomplete.
c) Right to limitation of the processing
Under the following conditions you can demand limitation of the processing of the personal data concerning you:
(a) if you contest the correctness of the personal data concerning you for a period, which makes it possible for us to check the correctness of the personal data;
(b) the processing is illegal and you reject the deletion of the personal data and demand instead the limitation of the use of the personal data;
(c) we no longer require the personal data for the purposes of processing but you require them for the enforcement, exercise or defence of legal claims or
(d) if you have raised an objection against the processing according to Section 21, paragraph 1, GDPR and it has still not been decided whether our justified grounds outweigh your grounds.
If the processing of personal data concerning your person has been restricted, these data – apart from being stored – may only be processed with your permission or for the enforcement, exercising or defence of legal rights or for protections of rights of another natural or legal person or for reasons of an important public interest of the Union or a member state. If the limitation of the processing was implemented according to the above-mentioned conditions, you will be advised by us before the restriction is lifted.
d) Right to deletion
(1) Obligation to delete
You can make a demand for us to delete personal data concerning your person immediately. We are then obliged to delete these data immediately if one of the following reasons applies:
(a) The personal data concerning your person are no longer required for the purposes for which they were collected or in some other way processed.
(b) You revoke your consent on which the processing was based according to Section 6, paragraph 1a or Section 9, paragraph 2a, GDPR, and another legal foundation for the processing is missing.
(c) You raise an objection to the processing in accordance with Section 21 paragraph 1 GDPR and there are no overriding justifiable grounds for the processing, or you raise an objection to the processing in accordance with Section 21 paragraph 2 GDPR.
(d) The personal data concerning your person have been processed illegally.
(e) The deletion of the personal data concerning your person is required to fulfil a legal obligation, by which we are governed.
(f) The personal data concerning your person were collected in connection with services offered by the information society according to Section 8 paragraph 1 GDPR.
(2) Information to third parties
If we have made the personal data concerning you public and if we are obliged to delete such according to Section 17, paragraph 1, GDPR, then we take appropriate measures under consideration of the available technology and the implementation costs. These can also be of a technical nature in order to inform the persons responsible for the data processing who process the personal data that you as a person concerned have demanded from them the deletion of all links to these personal data or of copies or replications of these personal data.
(3) Exceptions
The right to deletion does not exist if the processing is necessary
(a) for exercising of the right to free opinion and information;
(b) for fulfilment of a legal obligation which the processing requires according to the law of the Union or the member states to which we are subject, or for the execution of a task which lies in the public interest or takes place in the exercise of public authority which has been assigned to us;
(c) for reasons of public interest in the field of public health according to Section 9 paragraph 2h and i and Section 9 paragraph 3 GDPR;
(d) for archive purposes which lie in the public interest, scientific or historical research purposes or for statistical purposes according to Section 89 paragraph 1, GDPR, in so far as the right mentioned under a) probably makes the realisation of the aims of this processing impossible or seriously impairs it, or
(e) for enforcing, exercising or defending legal claims.
e) Right to instruction
If you have enforced the right to correction, deletion or limitation of the processing against us, we are obliged to inform all recipients to whom the personal data concerning you were disclosed about this correction or deletion of the data or limitation of the processing. This is not the case if it proves to be impossible or can only be done with a disproportionate amount of time and expense. You can enforce against us the right to be informed about these recipients.
f) Right to transferability of data
You have the right to receive the personal data concerning you and made available to us in a structured, widely used and machine-readable format. Furthermore, you have the right to transmit these data to another responsible person, in so far as
(a) the processing is based on permission in accordance with Section 6 paragraph 1a GDPR or Section 9 paragraph 2a GDPR or another contract in accordance with Section 6 paragraph 1b GDPR and
(b) the processing takes place with the assistance of automated procedures.
In the exercise of this right you have further the right to enforce that the personal data concerning you are transmitted directly by us to another responsible person, in so far as this is technically possible. Freedoms and rights of other persons may not be impaired by this process.
The right to transferability of data does not apply concerning processing of personal data necessary to carry out a task which is in the public interest or ensues in exercising public authority, which has been transferred to the responsible party.
g) Right to object
You are entitled, for reasons ensuing from your personal situation, to object at any time to the processing of personal data concerning your person which ensues on the basis of Section 6 paragraphs 1e or 1f GDPR.
We will then no longer process the personal data relating to your person, unless we are able to prove compelling and legitimate reasons for the processing, which outweigh your interests, rights and liberties, or the processing serves the purpose of enforcing, exercising or defending legal claims.
If the personal data relating to your person are processed for purposes of direct advertising, you have the right to raise an objection to the processing of the personal data concerning your person for purposes of this kind of advertising at any time. If you object to the processing for purposes of direct advertising, the personal data concerning your person will no longer be processed for this purpose.
You have the possibility, in connection with the use of services of the information society – irrespective of Directive 2002/58/EG – to exercise your right to object by means of automated procedures, within the scope of which technical specifications are applied.
h) Right to revocation of the Declaration of Consent relating to data protection law
You have the right to revoke your Declaration of Consent relating to data protection law at any time. The legality of the processing which has taken place on the basis of the consent until revocation shall not be affected by the revocation of the consent.
i) Right to complain to a supervisory authority
Irrespective of any other legal remedy relating to administrative law or the courts, you have the right to complain to a supervisory authority, especially in the member state of your place of abode, your workplace or the place of the purported infringement, if you are of the opinion that the processing of the personal data concerning you constitutes a breach of the GDPR.
The supervisory authority to whom the complaint was submitted shall advise the complainant on the status and the results of the complaint including the possibility of judicial remedy according to Section 78, GDPR.
j) Contact data
Please use the following contact data in order to uphold your rights which you can enforce against us:
By post:
Beiselen GmbH
Magirusstr. 7-9
89077 Ulm
By email: info@beiselen.de