Data protection declaration for visiting our website and other mandatory information according to Sect. 13, 14 EU General Data Protection Regulation (EU-GDPR)

Content:

I. General mandatory information according to Sect. 13, 14 EU-GDPR
II. Specific information regarding data collection on our website (incl. Social Media)
III. Further information on data processing in the context of application procedures

I. General mandatory information according to Sect. 13, 14 EU-GDPR

In connection with the provision of our services, we collect personal data to the extent that you provide it to us. In addition, we process personal data only in accordance with the applicable legal provisions or on the basis of your explicit consent. In doing so, we ensure compliance with the data protection regulations both technically and organizationally.

§ 1 Details of the responsible body:

Responsible for the data collection is:

OE Germany GmbH
Fritz-Müller-Str. 100-104
73730 Esslingen am Neckar
Germany

Phone.: +49 (0) 711 627698-0
Fax: +49 (0) 711 627698-51
E-Mail: info@oe-germany.de
Internet address: http://www.oe-germany.de/
Legal representatives: Mario Jahn (CEO), Thomas Schechinger (CFO)

§ 2 Information regarding the data protection officer:

You can reach our external data protection officer at:
Creditreform Compliance Services GmbH
Hammfelddamm 13
41460 Neuss
E-Mail: datenschutz@oe-germany.de

§ 3 Information on the supervisory authority

The competent supervisory authority for data protection is:

The state commissioner for data protection and freedom of information
postal address:
Mailbox 10 29 32
70025 Stuttgart
Phone.: 0711/615541-0
Fax: 0711/615541-15
E-Mail: poststelle@lfdi.bwl.de
https://www.baden-wuerttemberg.datenschutz.de/

§ 4 Rights of the persons concerned

(1) For the collection of your personal data you are entitled to the following rights:

Right of information, Sect. 15 GDPR: Under Sect. 15 Para. 1 GDPR, data subjects have the right to request confirmation as to whether personal data relating to them is being processed. If this is the case, they also have the right to be informed of this personal data and to receive further information in accordance with Sect. 15 Para. 1 Letters a to h of the GDPR.
Right of rectification, Sect. 16 GDPR: If the personal data is incorrect or incomplete in view of the purposes of processing, Art. 16 GDPR provides the right to demand that the personal data will be corrected or completed.
Right to deletion, Sect. 17 GDPR: According to Sect. 17 (1) GDPR, there is a right to request the deletion of personal data if the processing of personal data is not permitted for one of the reasons stated in this provision. However, deletion may not be requested if further processing is necessary in the cases set out in Sect. 17 (3) GDPR, e.g. to meet legal obligations.
Right to limited processing, Sect. 18 GDPR: Under the conditions set out in Sect. 18 (1) Letters a to d GDPR, the data subject has the option of requesting that the processing will be restricted (blocked).
Right to data transferability according to Sect. 20 GDPR: The persons concerned have the right to receive their personal data, which they themselves have provided to the OE Germany GmbH and which are automatically processed by the OE Germany GmbH based on a consent or a contract, in a common machine-readable format. This right is, among other things, subject to the reservation of technical feasibility.

As well as

The right to object, Sect. 21 GDPR: Data subjects have the right to object to the processing of their personal data processed on the basis of a weighing of interests (Sect. 6 Para. 1 Letter f GDPR), taking into account the requirements of Sect. 21 GDPR.

If the objection is directed against direct advertising (possibly with associated profiling), you can object to the processing of your personal data for advertising purposes at any time. In this case, data processing will no longer take place. In other cases, processing may continue despite objection only if compelling reasons for processing worthy of protection outweigh the interests, rights and freedoms of the data subject or if the processing serves the assertion, exercise or defense of legal claims.**

(2) You can contact us at any time to assert your rights. For contact details, please see below § 1.

§ 5 Right of withdrawal of a granted consent

In addition, a granted consent can be changed or revoked completely at any time and without giving reasons with effect for the future. Revocation does not affect the legality of the processing of your data that took place on the basis of your consent until any revocation.

You can revoke your consent either by mail (OE Germany GmbH Fritz-Müller-Str. 100-104, 73730 Esslingen am Neckar), by e-mail (to datenschutz@oe-germany.de) or by fax (+49 (0) 711 627698-51) to the OE Germany GmbH. This will not incur any additional costs beyond the basic rates.

§ 6 Right of appeal to the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The contact details of the supervisory authority responsible for us can be found above, under § 3.

II. Specific information about data collection on our website (incl. Social Media)

In the following we inform you about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail address, IP address.

§ 1 Which data are processed for which purpose?

(1) With each access to the contents of the website, data is temporarily stored. The following data is collected:

Date and time of access
IP address
Website from which the website was accessed
Visited page on our website
Message whether the retrieval was successful
Transferred data volume
Information about the browser type and version used as well as operating system

(2) Temporary storage of data is necessary for the course of a website visit to enable delivery of the website. Further storage in log files takes place to ensure the functionality of the website and the security of the information technology systems. These purposes are also our legitimate interest in data processing.

(3) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in accordance with the browser you are using and through which certain information flows to the site that sets the cookie (in this case us). Cookies cannot execute programs or transfer viruses to your computer. They are basically used to make the internet offer more user-friendly and effective.

§ 2 On which legal basis these data are processed?

We only use cookies that are not absolutely necessary for the operation of the website with the consent of the user, which can be revoked at any time, pursuant to Sect. 6 Para. 1 Letter a) GDPR.

As long as you have not given us your consent for the use in this respect, only the cookies required for the operation of the website will be set. The legal basis in this respect is our legitimate interest pursuant to Sect. 6 para. 1 Letter f.) GDPR in the functionality of our website.

Here you can check the current settings and adjust them if necessary or revoke the consent you have given by removing the checkmarks you have previously set:

COOKIE Settings

You can configure your browser settings according to your wishes and, for example, refuse to accept cookies. We would like to point out that you may not be able to use all functions of this website.

§ 3 Are there other recipients of the personal data besides the person responsible?

The website is hosted at byteXS GmbH, Fritz-Müller-Str. 100, 73730 Esslingen, info@bytexs.de. The hoster receives the above mentioned data as a processor of orders.

Within the scope of contract implementation, order processors outside the European Union can also be used.

§ 4 How long is the data stored?

The data will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of the provision of the website, this is the case when the respective session has ended. The log files are kept directly and exclusively accessible to administrators for a maximum of 14 days.

§ 5 Further functions and offers of our website

(1) In addition to the purely informative use of our website, we offer various services which you can use if interested. For this purpose, you will generally have to provide additional personal data which we use to provide the respective service and to which the aforementioned principles for data processing apply.

(2) In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.

§ 6 Newsletter

(1) With your consent, you can subscribe to our newsletter, with which we inform you about current interesting topics and our services. The details are named in the declaration of consent.

(2) For the registration to our newsletter, we use the so-called double-opt-in procedure. This means that after your registration, we send you an e-mail to the specified e-mail address, in which we ask you to confirm that you wish to receive the newsletter. We store your IP addresses used in each case as well as the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

(3) Mandatory information for sending the newsletter is only your e-mail address, title and surname to address you in our response. The provision of further data is voluntary. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Sect. 6 Para. 1 Letter a GDPR.

(4) You can revoke your consent to the sending of the newsletter at any time and thus unsubscribe from the newsletter. You can exercise the revocation by clicking on the link provided in each newsletter e-mail or by using one of the contact options given above, preferably e-mail. After your revocation, we will delete your email address from our mailing list.

§ 7 Use of our forms (contact form and catalogue order) and contact by e-mail

(1) On our website there is a contact form which can be used for electronic contact. Furthermore, you can use the form for ordering catalogues to request the desired printed versions of our catalogues.

When you contact us by e-mail or by using a contact or catalogue order form, the data you provide will be stored by us in order to answer your questions or process your request. We will delete the data collected in this context after the storage is no longer necessary or restrict the processing if there are legal storage obligations.

In this context, the data will not be passed on to third parties. The data is used exclusively for processing and answering your request.

(2) The legal basis for this is, depending on the request, Sect. 6 Para. 1 sentence 1 lit. b GDPR, i.e. a contract or its possible initiation, or Art. 6 para. 1 Cl. 1 Letter f GDPR and therefore both of us have a legitimate interest in processing and responding to your request.

§ 8 Google Services

We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland ("Google"). There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. For further information on data processing by Google, please refer to the privacy notices of Google [https://policies.google.com/privacy?hl=de] as well as in the "Order Data Processing Terms for Google Advertising Products" to be found at [https://privacy.google.com/businesses/processorterms/]

Google Analytics

(1) For web analytics, we use Google (Universal) Analytics. Google (Universal) Analytics uses cookies that allow us to analyze your use of our website. By activating IP anonymization on this website, the IP address is shortened before transmission within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be transmitted to a Google server in the USA and only shortened there. The anonymized IP address transmitted by your browser within the scope of Google Analytics is generally not merged with other Google data.

(2) We only process this data if you give us your consent to do so. The legal basis in this respect is Sect. 6 Para. 1 Letter a GDPR. You can revoke your consent at any time, see in particular section II § 2.

§ 9 Cookiebot Consent Management Plattform

On our website, we use Cookiebot to inform you about the cookies and the other technologies we use on our website as well as to obtain, manage and document your consent, if required, to the processing of your personal data by these technologies. This is necessary pursuant to Sect. 6 Para. 1 Letter c GDPR to fulfill our legal obligation under Sect. 7 (1) GDPR to be able to prove your consent to the processing of your personal data, to which we are subject.

Cookiebot is an offer of Cybot A/S, Havnegade 39, 1058 Kopenhagen, Denmark, which processes your data on our behalf.

After you submit your cookie declaration on our website, Cookiebot's web server stores your anonymized IP address, the date and time of your declaration, browser information, the URL from which the declaration was sent, information about your consent behavior, and an anonymous random key. In addition, a cookie is used that contains the information about your consent behavior and the key. After 12 months, the consent is automatically deleted from the log.

Change your cookie consent

§ 10 Social Media

Social buttons from social networks (social plugins from Facebook, Instagram, LinkedIn, YouTube) are used on our website. These are only integrated into the page as HTML links, so that when you call up our website, no connection is yet established with the servers of the respective provider. If you click on one of the buttons, the website of the respective social network opens in a new window of your browser. There you can, for instance, click the Like or Share button. Data processing by us does not take place through the embedding of the social buttons on our site.

§ 11 Our online presence on Facebook, Instagram, YouTube, LinkedIn, Xing

Insofar as you have given your consent to the respective social media operator in accordance with Sect. 6 (1) Para. 1 Letter a GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the above-mentioned social media platforms, from which usage profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as a contact option and your rights and setting options in this regard to protect your privacy, please refer to the privacy notices of the providers linked below. If you still need help in this regard, you can contact us.

Facebook [https://www.facebook.com/about/privacy/] is an offer of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Irland ("Facebook Ireland"). The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is usually sent to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and saved there. The data processing in the context of your visit to our Facebook Fanpage is based on an agreement between jointly responsible parties pursuant to Sect. 26 GDPR. You can find more information (insights data information) here [https://www.facebook.com/legal/terms/information_about_page_insights_data]

As the site operator, we do not have access to the personal data that is processed as part of events, but only to the summarized page insights. We only learn how users interact on our site, which of our posts register the most interactions and when as well as key figures about the performance of our site. In this respect, we have a legitimate interest pursuant to Sect. 6 (1) Letter f GDPR in making our Facebook company presence more user-friendly and interesting.

Instagram [https://help.instagram.com/519522125107875] is an offer of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Irland ("Facebook Ireland") The information automatically collected by Facebook Ireland about your use of our online presence on Instagram is usually sent to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and saved there. The data processing in the context of your visit to our Instagram Fanpage is based on an agreement between jointly responsible parties pursuant to Sect. 26 GDPR. You can find more information (insights data information) here [https://www.facebook.com/help/instagram/788388387972460].

As the site operator, we do not have access to the personal data that is processed as part of events, but only to the summarized page insights. We only learn how users interact on our site, which of our posts register the most interactions and when as well as key figures about the performance of our site. In this respect, we have a legitimate interest pursuant to Sect. 6 (1) Letter f GDPR in making our Instagram company presence more user-friendly and interesting.

YouTube [https://policies.google.com/privacy?hl=de] is an offer of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland ("Google"). The information automatically collected by Google about your use of our online presence on YouTube is usually sent to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and saved there.

As the site operator, we do not have access to the personal data that is processed as part of events, but only to the aggregated information. We only learn how users interact on our site, which of our posts/videos register the most interactions and when, as well as key figures about the performance of our site/videos. In this respect, we have a legitimate interest pursuant to Sect. 6 (1) Letter f GDPR in making our corporate presence more user-friendly and interesting.

LinkedIn [https://www.linkedin.com/legal/privacy-policy] is an offer of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland ("LinkedIn"). The information automatically collected by LinkedIn about your use of our online presence on LinkedIn is usually sent to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA and saved there.
As the site operator, we do not have access to the personal data that is processed as part of events, but only to the summarized page insights. We only learn how users interact on our site, which of our posts register the most interactions and when as well as key figures about the performance of our site. In this respect, we have a legitimate interest pursuant to Sect. 6 (1) Letter f GDPR in making our Instagram company presence more user-friendly and interesting.

Xing [https://privacy.xing.com/de/datenschutzerklaerung] is an offer of New Work SE, Dammtorstraße 30, 20354 Hamburg.

As the site operator, we do not have access to the personal data that is processed as part of events, but only to the summarized page insights. We only learn how users interact on our site, which of our posts register the most interactions and when as well as key figures about the performance of our site. In this respect, we have a legitimate interest pursuant to Sect. 6 (1) Letter f GDPR in making our Instagram company presence more user-friendly and interesting.

§ 12 Your rights in connection with the data processing on our website

In principle, you are entitled to the rights to information, to objection, to correction, deletion and restriction of processing. You also have the right to data transferability and the right to complain to a data protection supervisory authority.

For further details on your rights as a data subject, please refer to Sect. I. §§ 4, 5 and 6.

III. Further information to Sect. 13, 14 GDPR on data processing in the context of application procedures

In the following we will inform you about the scope, purpose and use of your personal data collected during the application process.

§ 1 For what purposes do we process your data and on what legal basis?

We will only process your data within the scope of the application procedure if this is permitted by an applicable legal provision, i.e. on the basis of the provisions of the GDPR, the Federal Data Protection Act and other applicable legal provisions, such as the Works Constitution Act. In doing so, we will base the processing of your personal data on the following legal bases, among others:

For the decision on the establishment of the employment relationship (Sect. 6 Para. 1 Letter b GDPR, § 26 Federal Data Protection Act) e.g. for the pre-selection and invitation of eligible applicants
For the fulfilment of legal obligations, Sect. 6 Para. 1 Letter c GDPR, e.g. if we have to record the settlement of travel expenses for the job interview as invoice-relevant documents
On the basis of your consent, Sect. 6 Para. 1 Letter a GDPR e.g. if you give us your consent that we may keep your application documents in order to be able to consider them directly in future job advertisements
To safeguard legitimate interests, Sect. 6 Para. 1 Letter f GDPR, e.g. to be able to examine possible claims under the General Equal Treatment Act following the application procedure.

§ 2 Which data or categories of data will we process?

As part of the application process, we will process your personal data to the extent necessary to determine your suitability to fill the open positions. This data processing may involve the following data or data categories, among others:

Personal data and contact information, such as name, e-mail address and telephone number, home address, date of birth, gender, nationality
Training, performance and employment data, such as information on school and university degrees, professional experience, skills and performance appraisals
Other application documents, that you make available to us, such as letters of application, certificates, resumes, driver's license class, passport photos or other information, e.g. relating to hobbies or volunteer work
Special categories of personal data: If you provide information in your application documents that contains special categories of personal data (e.g. information on marital status, which may allow conclusions to be drawn about your sexual orientation; information on your health; inclusion of a photograph that allows conclusions to be drawn about your ethnic origin and, if applicable, your eyesight and/or religion), we will also process this data only to the extent permitted by law.

§ 3 From which sources do we obtain your data?

We collect your personal data for the application relationship from various sources to determine their suitability.

Data that you provide us with:: First of all, we process personal data that you provide us with during the application process. This applies in particular to your application documents.
Data collected by third parties: We also process - as far as necessary - personal data that we have received from third parties (e.g. a job agency) in a manner permitted by data protection law.
Data from publicly available sources: We process personal data that we have permissibly obtained from publicly accessible sources (e.g. social or professional networks) to the extent that this is necessary to determine your suitability to fill the open positions in the application process.

§ 4 To which locations will my data be transmitted?

Within the OE Germany GmbH only those positions that are entrusted with the preparation and implementation of the application process will receive your data.

This includes employees of the human resources department and the departments in which an open position is to be filled.

If commissioned external service providers receive personal data for these purposes, we ensure that suitable technical and organizational measures are implemented and necessary agreements concluded in such a way that processing is carried out in accordance with the valid data protection regulations and guarantees the protection of the rights of the person concerned.

We may disclose personal data to third parties:

Business partners for whom the data transfer is necessary to fulfill their tasks, e.g. payment service providers/banking institutions, postal/parcel services.
IT service provider/computer center as service provider

§ 5 Is data transferred to a third country or to an international organization?

There is no transfer of data to third countries or international organizations.

§ 6 How long will we store your data?

We will store your personal data in accordance with the legal requirements, in particular Sect. 17 GDPR.

Storage during the application process: If necessary, we will store your data for the duration of the application process.
When an employment relationship comes into existence: Should we establish an employment relationship with you following the application process, we will transfer your data to the personnel file and then store it for as long as legally required.
If your application is rejected: If no employment relationship is established between you and us, the application process ends with the receipt of a rejection. Against the background of § 61 Para. 1 German Labour Court Law in conjunction with § 15 German Labour Court Law, we reserve the right to retain the data for up to six months after the rejection.
Storage due to legitimate interests: Under certain circumstances, we may also use your data for the duration of the statutory limitation period in accordance with §§ 195 et seq. German Civil Code.

§ 7 Your rights

You are basically entitled to the rights of information, objection, correction, deletion, restriction of processing and the right to data transferability. Furthermore, you have the right to revoke a given consent at any time and the right to complain to a data protection supervisory authority.

For further details on your rights as a data subject, please refer to the above, to Sect. I. §§ 4, 5 and 6.

§ 8 Is there an obligation for me to provide data?

In order to be able to decide whether we want to establish an employment relationship with you, we need the above-mentioned personal data. Without this data we cannot carry out the application procedure. However, there is no legal obligation to provide this data during the application process.

§ 9 Automated decision making or profiling

An automated decision making in individual cases including profiling according to Sect. 22 GDPR does not take place within the application procedure.