1. Data Protection at a Glance
General Information
The following information provides you with an overview of what happens to your personal data when you visit this website. Personal data comprise all data by means of which you can be personally identified. Detailed information can be found in the Privacy Policy set out below.
Collection of Data on This Website
Who is responsible for collecting data on this website?
The processing of personal data on this website is carried out by the website operator. The controller’s contact details can be found in the relevant section of this Privacy Policy.
How do we collect your data?
Some data are collected when you provide them to us yourself, for example when you submit a contact enquiry.
Other data are collected automatically when you visit the website or, where applicable, following your consent, by the IT systems used. These include, in particular, technical information such as your browser, operating system and the time at which the page was accessed.
What do we use your data for?
Some data are required to ensure the technically error-free provision of the website. Other information may be used to analyse user behaviour. Where contracts are initiated via the website or enquiries are submitted, the data provided may also be processed for the purpose of preparing quotations, processing orders or handling other contractual enquiries.
What rights do you have?
You have the right to obtain information, free of charge, about the origin, recipients and purpose of the personal data stored concerning you. You may also request the rectification or erasure of your data.
You may withdraw any consent you have given at any time with effect for the future. Under certain conditions, you also have the right to request restriction of the processing of your personal data. You further have the right to lodge a complaint with the competent data protection supervisory authority.
2. Hosting
External Hosting
The website is hosted by an external service provider. Personal data collected when visiting the website may be stored on the hosting provider’s servers. Such data may include, in particular, IP addresses, contact enquiries, metadata and communications data, contractual and contact details, names and information concerning access to the website.
Hosting is carried out for the purpose of fulfilling contractual and pre-contractual obligations pursuant to Article 6(1)(b) GDPR and on the basis of our legitimate interest in the secure, fast and efficient provision of our online services pursuant to Article 6(1)(f) GDPR.
Where consent has been obtained, processing is additionally based on Article 6(1)(a) GDPR and Section 25(1) TDDDG. This applies, in particular, where cookies are stored or information on the user’s terminal equipment is accessed. Consent may be withdrawn at any time.
The hosting provider processes personal data only insofar as this is necessary for the performance of its contractual services and complies with the website operator’s instructions.
Hosting Provider Used
Webspace-Verkauf.de ISP e.K.
Lichtenfelser Straße 17 a
96271 Grub am Forst
Germany
Processing on Behalf of the Controller
A data processing agreement has been concluded with the hosting provider. This ensures that the personal data of website visitors are processed exclusively in accordance with our instructions and in compliance with the GDPR.
3. General Information and Mandatory Information
Data Protection
The protection of your personal data is taken seriously. Personal information is treated confidentially and in accordance with the applicable data protection legislation and this Privacy Policy.
When you use the website, various personal data are processed. This Privacy Policy explains which data are collected, the purposes for which they are used and the legal bases on which such processing is carried out.
Data transmission over the internet, for example by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties therefore cannot be guaranteed.
Information on the Controller
The controller responsible for data processing on this website is:
Heinrich Schulte GmbH & Co. KG
Managing Directors:
Henning de Gruyter
Olaf Stach
Grünlandweg 11
58640 Iserlohn
Germany
Telefon: 02371 9090-0
E-Mail: info@heinrichschulte.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
Storage Period
Unless a more specific storage period is stated, personal data will be stored until the relevant purpose of processing no longer applies.
Where a justified request for erasure is made or consent is withdrawn, the data will be erased unless there are statutory or other lawful grounds for continued storage. Statutory retention periods remain unaffected.
Legal Bases for Data Processing
Where processing is based on consent, the legal basis is Article 6(1)(a) GDPR. Where special categories of personal data are processed, Article 9(2)(a) GDPR may additionally apply.
An expressly authorised transfer of personal data to third countries may additionally be based on Article 49(1)(a) GDPR.
Where cookies are stored or information on terminal equipment is accessed, processing is additionally based, where the relevant consent has been obtained, on Section 25(1) TDDDG.
Data required for the performance of a contract or in order to take steps prior to entering into a contract are processed on the basis of Article 6(1)(b) GDPR.
Where processing is necessary for compliance with legal obligations, Article 6(1)(c) GDPR may apply. In addition, processing may be based on a legitimate interest pursuant to Article 6(1)(f) GDPR.
Data Protection Officer
A Data Protection Officer has been appointed:
Mr. Burghaus
Telephone: +49 2371 9090-0
Email: datenschutz@heinrichschulte.com
Recipients of Personal Data
In the course of our business activities, cooperation with external parties may be necessary. Personal data are disclosed only where this is necessary for the performance of a contract, where a statutory obligation exists, where a legitimate interest permits the disclosure or where another legal basis authorises the transfer.
Processors receive personal data only on the basis of a valid data processing agreement. Where joint controllership exists, an appropriate agreement is concluded.
Withdrawal of Consent
Consent that has been given may be withdrawn at any time. The lawfulness of processing carried out prior to the withdrawal remains unaffected.
Right to Object under Article 21 GDPR
Where processing is based on Article 6(1)(e) or (f) GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. This also applies to profiling based on those provisions.
Following an objection, the personal data concerned will, as a general rule, no longer be processed. Further processing may nevertheless be lawful where compelling legitimate grounds can be demonstrated or where processing serves the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you may object to such processing at any time. Following your objection, your data will no longer be used for direct marketing purposes.
Right to Lodge a Complaint
In the event of infringements of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. This applies in particular to the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.
Right to Data Portability
You have the right to receive data which are processed by automated means on the basis of your consent or for the performance of a contract in a commonly used and machine-readable format. Where technically feasible, you may also request the direct transmission of such data to another controller.
Access, Rectification and Erasure
Within the scope of the applicable statutory provisions, you have the right to obtain information, free of charge, about the personal data stored concerning you, their origin and recipients and the purposes of the processing. You may also request the rectification or erasure of such data.
Recht auf Einschränkung der Verarbeitung
You may request restriction of the processing of your personal data, in particular where:
- you contest the accuracy of the personal data stored concerning you and verification is required;
- the processing is unlawful and you request restriction of processing instead of erasure;
- the data are no longer required for their original purposes, but you require them for the establishment, exercise or defence of legal claims;
- you have objected to processing pursuant to Article 21(1) GDPR and the balancing of interests has not yet been concluded;
- data whose processing has been restricted may — apart from storage — be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest.
SSL or TLS Encryption
For security reasons, the website uses SSL or TLS encryption. An encrypted connection can be recognised, among other things, by the padlock symbol in the browser and by the use of “https” in the address bar.
Where encryption is activated, the data transmitted cannot, as a general rule, be read by third parties.
4. Collection of Data on This Website
Cookies
The website uses cookies. Cookies are small data packages that are stored on terminal equipment and do not cause any damage to it.
Session cookies are automatically deleted at the end of the visit. Persistent cookies remain stored until they are manually deleted or automatically removed by the browser.
Cookies may originate directly from the website operator or from third-party companies. Technically necessary cookies enable basic functions of the website. Other cookies may be used to analyse user behaviour or for advertising purposes.
Necessary cookies are generally stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified. The legitimate interest lies in the technically error-free and optimised provision of the website.
Where consent has been obtained, processing is based on Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
You can use your browser settings to restrict or prevent the storage of cookies or to delete cookies that have already been stored. If cookies are completely disabled, some functions of the website may be restricted.
Borlabs Cookie
The website uses the Borlabs Cookie consent technology to obtain and document consent to the storage of cookies and the use of certain technologies.
Provider:
Borlabs GmbH
Rübenkamp 32
22305 Hamburg
Germany
When the website is visited, a Borlabs cookie is stored. The consent given, or its subsequent withdrawal, is documented in this cookie. According to the information provided on the website, these data are not transmitted to Borlabs.
The data remain stored until you request their erasure, delete the cookie yourself or the purpose for which they were stored no longer applies. Statutory retention periods remain unaffected.
The service is used for compliance with legal obligations on the basis of Article 6(1)(c) GDPR.
Enquiries by Email, Telephone or Fax
If you contact us by email, telephone or fax, your enquiry and the associated personal data will be stored and processed for the purpose of handling your request.
Where the enquiry relates to a contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR. In all other cases, processing may be based on a legitimate interest pursuant to Article 6(1)(f) GDPR or, where consent has been obtained, on Article 6(1)(a) GDPR.
The data will be stored until you request their erasure, withdraw consent or the purpose of storage no longer applies. Statutory retention obligations remain unaffected.
5. Plugins and Tools
Google Fonts
Google Fonts used on the website are hosted locally. According to the information provided in the Privacy Policy, no connection to Google servers is established in this context.
Adobe Fonts
The website uses Adobe Fonts for the uniform presentation of typefaces.
Provider:
Adobe Systems Incorporated
345 Park Avenue
San Jose, CA 95110-2704
USA
When the website is accessed, the browser may establish a connection to Adobe servers in the United States. As a result, Adobe may become aware that the website was accessed using the respective IP address. According to Adobe, no cookies are stored when the fonts are provided.
Processing is based on the legitimate interest in ensuring a uniform presentation of the website’s typography pursuant to Article 6(1)(f) GDPR.
Where consent has been requested, processing is based on Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Transfers to the United States are based on the European Commission’s Standard Contractual Clauses. According to the information contained in the Privacy Policy, Adobe is also certified under the EU-U.S. Data Privacy Framework.
6. Our Own Services
Processing of Applicant Data
You may apply to us, for example, by email, by post or using an online application form. Personal data collected during the application process are treated confidentially and in accordance with the statutory data protection provisions.
Scope and Purpose of Processing
In connection with an application, we may process, in particular, contact and communication data, application documents and notes from job interviews.
Processing is carried out insofar as this is necessary for the decision on establishing an employment relationship. The legal bases are Section 26 BDSG, Article 6(1)(b) GDPR and — where the relevant consent has been given — Article 6(1)(a) GDPR.
Within the company, access to the data is granted only to those persons involved in processing the application.
If an employment relationship is established, the application data will be stored on the basis of Section 26 BDSG and Article 6(1)(b) GDPR for the purpose of administering the employment relationship.
Retention Period for Applicant Data
If no offer of employment can be made, an offer is rejected or an application is withdrawn, the data may be retained for up to six months after completion of the application procedure on the basis of legitimate interests. Electronic data will subsequently be erased and physical application documents destroyed.
The purpose of this retention is, in particular, to enable potential claims arising from the application procedure to be addressed or defended.
Where longer retention is necessary because of ongoing or anticipated legal proceedings, erasure will take place only once that purpose no longer applies.
A longer retention period may also apply where the relevant consent has been given or statutory retention obligations prevent erasure.
