Защита информации
Защита информации
The GRIMME Landmaschinenfabrik GmbH & Co. KG (following "GRIMME") takes the privacy of personal data very seriously and respects current data protection laws. We want you to know when which data is collected and how it is used by GRIMME. This data privacy statement provides you with information on the type, scope and purposes of the collection and use of personal data by GRIMME.
Contents
- Non-personal data collected when the website is accessed
- Cookies
- Handling of personal data
- Data protection information for the contact form
- Data protection information for the application procedure
- Right to information and other rights of the data subject
- Duty to provide information in accordance with Art. 13 General Data Protection Regulation (Datenschutzgrundverordnung (DSGVO))
- Data integrity
- Further information / Data protection officer
1. Non-personal data collected when the website is accessed
GRIMME automatically collects and stores information on the web server with log files for a statistical evaluation, which your browser transmits to us when calling up the website. This involves: Browser type/version, operating system used, visitor IP address, date and time of access, pages visited, data volume transmitted, notification of successful data request and the requesting provider. The IP address is only used by us for purposes of warding off attacks and optimising our website and is truncated by the last three digits.
The GRIMME website uses Google Analytics, a web analysis service provided by Google Inc. ("Google") for statistical analysis of user access. Google Analytics uses "cookies", which are text files placed on your computer, to help the analyse how you use our website. The information generated by the cookie about your use of the website will as a rule be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, Google will truncate your IP address within the area of Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the complete IP address be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet usage.
The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from Google processing this data by downloading and installing the browser plug-in available under the following link (http://tools.google.com/dlpage/gaoptout?hl=en).
You can find more information on the terms of use and data protection under Google Analytics under: http://www.google.com/analytics/terms/de.html.
2. Cookies
When you as a user access the GRIMME web pages, one or more cookies are stored on your computer. A cookie is a small file that contains a specific string of characters and uniquely identifies your browser. With the help of cookies we improve the convenience and quality of our service, for example by storing user settings. Cookies are stored as small text files on your computer and saved by your browser. "Session cookies" are automatically deleted at the end of your visit. Cookies do not cause any damage to your computer and do not contain any viruses.
The offer can also be used without cookies.Cookies do not cause any damage to your computer and do not contain any viruses. The offer can also be used without cookies. You can disable cookies in your browser, restrict them to certain websites or set your browser to notify you before a cookie is stored. You can delete the cookies from your computer's hard drive at any time using the data protection functions of your browser. In this case, however, the functions and user-friendliness of our Internet pages could be limited.
3. Handling of personal data
Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This includes for example the name, the e-mail address or the telephone number.
Personal data is only collected, used and passed on by GRIMME if this is permitted by law or if you as a user give your concrete consent to the data collection.This includes for example the name, the e-mail address or the telephone number.Personal data is only collected, used and passed on by GRIMME if this is permitted by law or if you as a user give your concrete consent to the data collection. When contacting GRIMME (for example via contact form or e-mail), your details will be stored for the purpose of processing the enquiry and in the event that follow-up questions arise. Further data is not collected.
4. Data protection information for the contact form
If you send us enquiries using the contact form, your details from the enquiry form, including the contact data you provided there, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.
The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. All you need to do is send us an informal e-mail. The legitimacy of the data processing operations carried out up to the revocation remains unaffected by the revocation.
The data entered by you in the contact form will remain with us until you request us to delete it, until you revoke your consent to the storage or until the purpose for the data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.
5. Data protection information for the application procedure
We process the applicant data only for the purpose and in the context of the application procedure in accordance with the legal requirements. The processing of the applicant data takes place in order to fulfil our (pre)contractual obligations in the context of the application procedure within the meaning of Art. 6 para. 1 lit. b. DSGVO Art. 6 para. 1 lit. f. DSGVO if data processing becomes necessary for us, e.g. within the framework of legal procedures (in Germany § 26 Federal Data Protection Act (BDSG) additionally applies).
The application procedure requires that applicants provide us with their data. If we offer an online form, the necessary applicant data are marked or otherwise result from the job descriptions and generally include personal data, postal and contact addresses and the documents belonging to the application, such as cover letter, curriculum vitae and certificates. In addition, applicants may voluntarily provide us with additional information.
By submitting the application to us, applicants agree to the processing of their data for the purposes of the application procedure in accordance with the type and scope set out in this data privacy statement.
Insofar as special categories of personal data within the meaning of Art. 9 para. 1 DSGVO are voluntarily communicated within the scope of the application procedure, they are additionally processed in accordance with Art. 9 para. 2 lit. b DSGVO (e.g. health data, e.g. severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 DSGVO are requested from applicants within the scope of the application procedure, they are additionally processed in accordance with Art. 9 para. 2 lit. a DSGVO (e.g. health data, if these are required for exercising the profession).
If made available, applicants can send us their applications via an online form on our website. The data is encrypted and transmitted to us according to the state of the art.
Applicants can also send us their applications by e-mail.The data is encrypted and transmitted to us according to the state of the art.Applicants can also send us their applications by e-mail. Please note, however, that e-mails are generally not sent in encrypted form and that the applicants themselves must ensure that they are encrypted. We therefore cannot accept any responsibility for the transmission path of the application between the sender and receipt on our server and recommend that you use an online form or the postal dispatch. Instead of using the online application form and e-mail, applicants can still make use of the option of sending us their application by post.
If the application is successful, the data provided by the applicants can be further processed by us for the purpose of the employment relationship. Otherwise, if the application for a job offer is not successful, the applicants' data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which the applicants are entitled to do at any time.
The deletion will take place after expiry of a period of six months, subject to a justified revocation of the applicants, so that we can answer any follow-up questions to the application and meet our obligation to produce supporting documents under the Equal Treatment Act.
6. Right to information and other rights of the data subject
You have the right to request confirmation from GRIMME whether personal data concerning you will be processed; if this is the case, you have a right of access to this personal data and to the information specified in Art. 15 GDPR.
You have the right to request GRIMME to correct any incorrect personal data concerning you without delay and, if necessary, to complete incomplete personal data (Art. 16 GDPR).
You have the right to request GRIMME to delete personal data concerning you without delay if one of the reasons listed in detail in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to deletion).
You have the right to request GRIMME to restrict processing for the duration of the investigation by the data controller if one of the conditions set out in Art. 18 GDPR is given, e.g. if the data subject has lodged an objection to the processing. In addition, in the instances of Art. 20 GDPR you have a right to data transferability.
You have the right of appeal to a supervisory authority, without prejudice to any other administrative or judicial remedy, if you are of the opinion that the processing of personal data concerning you is contrary to the GDPR (Art. 77 GDPR). You may exercise this right before a supervisory authority in the Member State of your place of residence, your place of work or the place where the alleged infringement occurred. In Lower Saxony the competent supervisory authority is: The State Commissioner for Data Protection of Lower Saxony (contact details at: https://www.lfd.niedersachsen.de/wir_ueber_uns/impressum/impressum-56113.html).
If data are collected on the basis of Art. 6 para. 1 lit. e (data processing for the fulfillment of official tasks or for the protection of the public interest) or lit. f (data processing for the protection of legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling and legitimate reasons for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. Please address the objection as far as possible to: datenschutz@grimme.de
7. Duty to provide information in accordance with Art. 13 GDPR
Data protection information according to Art. 13 and 21 GDPR
Responsible party: GRIMME Landmaschinenfabrik GmbH & Co. KG is responsible for data collection and processing.
Voluntary information: As a matter of principle, we only collect the data that is required by law or required for the conclusion and execution of the contract or that was provided to us voluntarily on the basis of a consent. The provision of further information is voluntary. No negative consequences are associated with the failure to provide this data. However, in individual cases, failure to make the information available may make subsequent communication more difficult or even delay it.
Data processing for contract fulfillment: We process the collected data according to Art. 6 Para. 1 lit. b GDPR for the purpose of contract fulfillment. This also includes the associated customer support. If necessary, personal data are passed on to the companies involved in the processing of this contract, e.g. credit institutions for payment processing. The data required for the fulfillment of the contract will be deleted after the purpose has been fulfilled and kept available for this period only for any queries. The data will not be deleted if claims are still outstanding after termination of the contract and are to be collected. If there are legal retention periods, the data concerned is archived for the duration of these periods.
Data processing to protect legitimate interests: We only process your data to protect legitimate interests if there is no corresponding consent and no other legal basis for data processing is apparent, and only if the requirements of Art. 6 para. 1 lit. f GDPR apply, i.e. if our interests in data processing or the interests of a third party in individual cases outweigh your interests, or fundamental rights and freedoms. The data will be deleted if the legitimate interest no longer exists, but at least for the duration of any statutory retention obligations.
You have the right to object to the data processing. You can find out more under the following point "Rights of the data subject".
Data processing on the basis of consent: If you have given your consent to be informed by us by telephone or e-mail about our company's own products and services, any corresponding processing will be based on Art. 6 para. 1 lit. a GDPR. Your consent can be revoked at any time without affecting the legitimacy of the processing that has taken place so far. If the consent is revoked, we will stop the corresponding data processing.
Data processing for direct advertising: We process your data - as far as permissible - for the purpose of direct advertising, in particular for the dispatch of our advertising, such as product information or event notes. Data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR and in the interest of informing you about new products, events and services. Each customer has a personal right of objection to such processing, the exercise of which leads to the termination of processing for the purpose of direct advertising. If data is stored exclusively for direct advertising, it will be deleted after the objection has been raised.
Data processing for the fulfillment of legal obligations: As far as necessary, we process your data in order to be able to comply with any legal obligations, e.g. towards the fiscal authorities. Data processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR. The legal obligation arises, among other things, from § 147 of the German Tax Code (Abgabenordnung (AO)). The data will be deleted after the period provided for by law, unless there is a legitimate interest in further storage.
Data recipients: We only transfer your data to third parties (e.g. to lawyers for the enforcement of open claims), provided that there is a transmission authorisation under data protection law (e.g. according to the above-mentioned case groups). We may also pass on your data to external service providers (e.g. IT service providers, companies that destroy or archive data, printing service providers, cloud providers), who support us in data processing as part of order processing in accordance with strict instructions.
Data processing outside the EU or the European Economic Area does in general not take place. If such a data transfer does take place, it will only take place in countries where an adequacy resolution of the EU on the basis of an EU standard contract pursuant to Art. 46 para. 2 lit c GDPR is available. Upon your request, we will be happy to grant you access to the contract or provide you with a copy. We will neither sell your personal data to third parties nor market them in any other way.
Rights of the data subject: Data subjects have the right to obtain information from the data controller about personal data concerning them and to have inaccurate data corrected or deleted provided one of the reasons stated in Art. 17 GDPR applies, e.g. if the data are no longer required for the purposes pursued. Furthermore, there is a right to limitation of processing if one of the conditions specified in Art. 18 GDPR applies and in the instances referred to in Art. 20 DSGVO there is a right to data transferability. If data are collected on the basis of Art. 6 para. 1 lit. e (data processing for the fulfillment of official tasks or for the protection of the public interest) or lit. f (data processing for the protection of legitimate interests), the data subject has the right to object to the processing at any time for reasons arising from his/her particular situation. We will then no longer process the personal data unless there are demonstrably compelling and legitimate reasons for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
Right of appeal to a supervisory authority: Any data subject concerned shall have the right of appeal to a supervisory authority if he or she is of the opinion that the processing of data concerning him or her is contrary to data protection provisions. The right of appeal may be exercised in particular before a supervisory authority in the Member State of the place of residence of the data subject or the place where the alleged infringement occurred. In Lower Saxony, the responsible supervisory authority is the state commissioner for data protection, Prinzenstr. 5, D-30159 Hanover.
Reference to a right of objection pursuant to Art. 21 GDPR: If data are collected on the basis of Art. 6 para. 1 lit. f (data processing for the protection of legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling and legitimate reasons for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. Please address the objection as far as possible to: datenschutz@grimme.de.
Reference to a right of objection against direct advertising: We process your data for the purpose of direct advertising. You have a personal right of objection to such processing, the exercise of which leads to the termination of processing for the purpose of direct advertising. Please address the objection as far as possible to: datenschutz@grimme.de
8. Safety precautions
We take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk, taking into account the state of the art, implementation costs and the nature, scope, circumstances and purposes of processing as well as the different probabilities of occurrence and severity of the risk to the rights and freedoms of natural persons, in accordance with Art. 32 GDPR.
Such measures shall in particular include ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transmission, safeguarding of availability and separation of such data. Furthermore, we have established procedures to ensure the exercise of data subject rights, deletion of data and reaction to a threat to the data. Furthermore, we already consider the protection of personal data during the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and data protection-friendly presettings (Art. 25 GDPR).
9. Further information / Data protection officer
Should you have any further questions regarding the processing of your personal data in addition to the above explanations, we are at your disposal at any time. Please contact the data protection officer of GRIMME:
Carla Holterhus
Phone: +49 157 532 500 64
Email: datenschutz@grimme.de
Damme, May 2018
