Data protection


We are delighted that you visit our website and would like to thank you for your interest in our company. Protecting your privacy when you use our website is of considerable importance to us. Therefore, we will strictly comply with the applicable legal data protection provisions when using your personal data. In the following, we will thus provide you with information as to how personal data is collected and used when using our website. What is personal data? The term 'personal data' is defined in the Federal Data Protection Act (BDSG / BDSG (new)) and in the General Data Protection Regulation (GDPR). Accordingly, this relates to individual information about personal or material circumstances of an identified or identifiable natural person. This thus includes, for ex., your name, address, phone number, e-mail address or date of birth. You can visit our website without providing us with information about your identity. In this context, we do not retain any personal data. To improve our services, we solely evaluate statistical data not allowing any conclusion to be drawn on your identity. Where personal data is collected on our websites (for ex. name, address or e-mail addresses), this is always made on a voluntary basis. Such data will not be forwarded to third parties without your explicit consent.

In the following, we would like to provide you with information about the processing of your personal data by us and your entitlements and rights acc. to legal data protection regulations.

I. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other legal data protection provisions is:

STEINCOnnector GmbH
Frohntaler Str. 30
42929 Wermelskirchen
Germany
Tel.: +49 (2196) 943-200
Email: steinconnector@steinco.de
Website: www.steinco.de

II. Name and Address of the Data Protection Officer

The controller's data protection officer is:

Sven Giesler
desegna Business IT Solutions
Eickhoffstr. 6
57234 Wilnsdorf
Germany
Tel.: +49 (2737) 9409-866
Email: datenschutz@desegna.de
Website: www.desegna.de

III. General Information on Data Processing

Scope of Personal Data Processing

Basically, we collect and use personal data of our users only where this is required to provide a functional website and our contents and services. Personal data of our users is collected and used regularly only after the user has given its consent. An exception to this applies in cases where prior obtainment of any consent is not possible for actual reasons and data processing is permitted by legal regulations.

1. Legal Basis for Personal Data Processing

Where we obtain any consent from the data subject for methods of personal data processing, Art. 6(1) Point a EU General Data Protection Regulation (GDPR) serves as a legal basis for personal data processing. If processing personal data is necessary for the performance of a contract to which the data subject is party, Art. 6(1) Point b GDPR serves as a legal basis. This also applies to processing methods required to take steps prior to entering into a contract.

Where personal data processing is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1) Point c GDPR serves as a legal basis.

If processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6(1) Point d GDPR serves as a legal basis.

If processing is necessary for the purposes of any legitimate interest pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6(1) Point f GDPR serves as a legal basis for processing.

2. Data Erasure and Retention Period

The data subject's personal data will be erased or blocked once the purpose of such retention ceases to be relevant. In addition, data may be retained if this is provided for by the European or national legislator in legal EU regulations, laws or other regulations to which the controller is subject. Data is also erased or blocked if any retention period prescribed by the aforementioned standards expires, unless there is any need to continue retaining the data to conclude or fulfil a contract.

IV. Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing terminal. In this context, the following data is collected:

  • information about the browser type and the version used
  • the user's operating system
  • the host name of the accessing computer
  • access date and time
  • websites from which the user's system accesses our website

This data is likewise retained in the log files of our system. This does not include the user's IP address or other data allowing to assign the data to a user. Such data is not retained together with other personal data of the user.

2. Legal Basis for Data Processing

The legal basis for temporary data retention is Art. 6(1) Point f GDPR.

3. Purpose of Data Processing

Temporary retention of the IP address by the system is necessary to ensure that the website contents can be delivered to the user's computer. To this end, the user's IP address must remain retained for the duration of the session.

Such purposes are also the basis for our legitimate interest in data processing acc. to Art. 6(1) Point f GDPR.

4. Retention Period

The data will be erased once it is no longer required to achieve the purpose of its collection. If data is collected to provide the website, this is the case once the respective session has been terminated.

5. Right to Object and Erasure

Collection of the data to provide the website and to retain the data in log files is absolutely necessary to ensure operation of the website. Consequently, the user does not have any right to object.

III. Use of Cookies

1. Description and Scope of Data Processing

Our website uses cookies. Cookies are text files stored in the Internet browser and/or by the Internet browser on the user's computer system. If a user accesses a website, a cookie may be stored on the user's operating system. Such cookie contains a characteristic string allowing to unequivocally identify the browser the next time the website is accessed. In this context, the following data is stored in the cookies and transferred:

  • language settings
  • log-in information

In addition, we use cookies on our website that allow to analyse the user's browsing habits.

In doing so, the following data may be transferred:

  • search terms entered
  • frequency of page views
  • utilisation of website functions

The users' data collected in this manner is pseudonymised by technical precautions. It is thus no longer possible to assign the data to the accessing user. The data is not retained together with other personal data of the users.

When accessing our website, the user is informed about the use of cookies for analysing purposes and its consent to the processing of the personal data used in this context is obtained. In light of this, reference is also made to this Privacy Policy.

2. Legal Basis for Data Processing

The legal basis for personal data processing using technically required cookies is Art. 6(1) Point f GDPR.

The legal basis for personal data processing using cookies for analysing purposes where the user has given its consent thereto is Art. 6(1) Point a GDPR.

3. Purpose of Data Processing

Technically required cookies are used to make it easier for the users to use websites. Some functions of our website cannot be provided without using cookies. To offer such functions, it is necessary for the browser to be recognised even after a page break.

We need cookies for the following applications:

  • adoption of language settings
  • memorisation of log-in data

The user data collected by technically required cookies are not used to create user profiles.

Such purposes are also the basis for our legitimate interest in personal data processing acc. to Art. 6(1) Point f GDPR.

4. Retention Period, Right to Object and Erasure

Cookies are stored on the user's computer and transferred from there to our website. As a user, you have thus full control over the use of cookies. By changing the settings in your Internet browser, you can disable or limit the transfer of cookies. Cookies already stored may be erased at any time. This can also be done automatically. If cookies are disabled for our website, it might no longer be possible to use all functions of the website in full.

IV. Contact Form and E-Mail Contact

Alternatively, we can be contacted using the e-mail address provided. In this case, the user's personal data transferred with the e-mail is retained. The data is not forwarded to third parties in this context. The data is exclusively used to process the conversation. In addition, our website offers a form to request a catalogue. If a user uses this service, the data entered in the input mask is transferred to and retained by us. This data includes:

  • corporate name (not mandatory)
  • title
  • first name
  • surname
  • street and no.
  • postcode
  • city
  • country
  • e-mail address
  • website (not mandatory)

Once the message has been sent, the following data is retained additionally:

  • the user's IP address
  • registration date and time

Before any data is processed within the framework of the sending process, your consent will be obtained and reference will be made to this Privacy Policy. Furthermore, our website offers a contact form for online applications which can be used to contact us electronically. If a user uses this service, the data entered in the input mask and the documents enclosed are transferred to and retained by us.

This data includes:

  • title
  • first name
  • surname
  • year of birth
  • street and no.
  • postcode
  • city
  • e-mail address
  • language skills (German)
  • language skills (English)
  • MS Office skills
  • salary expectation
  • period of notice
  • surname
  • file attachments

In case no additional documents are uploaded a cookie will be set. This cookie will be deleted after closing the browser.

Once the message has been sent, the following data is retained additionally:

  • the user's IP address
  • registration date and time

Before any data is processed within the framework of the sending process, your consent will be obtained and reference will be made to this Privacy Policy. The data is not forwarded to third parties in this context. The data is exclusively used for the application process.

2. Legal Basis for Data Processing

The legal basis for data processing where the user has given its consent thereto is Art. 6(1) Point a GDPR. The legal basis for the processing of data in the course of sending an e-mail is Art. 6(1) Point f GDPR. If the e-mail contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6(1) Point b GDPR.

3. Purpose of Data Processing

We process personal data from the input mask only to process the establishment of contact and/or application. Any contact established by e-mail thus also forms the basis for the necessary legitimate interest in data processing. The other personal data processed during the sending process is used to avoid any misuse of the contact form and to ensure an adequate level of security for our IT systems.

4. Retention Period

The data will be erased once it is no longer required to achieve the purpose of its collection. This applies to the personal data from the input mask of the contact form and to personal data provided by e-mail if the respective conversation with the user has been terminated. The conversation is deemed terminated once it becomes clear from the circumstances that the relevant issue has been conclusively resolved. The personal data additionally collected during the sending process is deleted after a period of seven days at the latest.

5. Right to Object and Erasure

The user can withdraw its consent to personal data processing at any time. If the user contacts us by e-mail, it may object to the retention of its personal data at any time. In such a case, the conversation cannot be continued. Further conversation in this case will only be possible by mail. In this case, all of the personal data retained in the course of the establishment of contact will be erased.

VII. Rights of the Data Subject

If your personal data is processed, you are the data subject w. t. m. of the GDPR and you have the following rights vis-à-vis the controller:

1. Right of Access

You can request a confirmation from the controller as to whether we process personal data related to you. If such processing is made, you can request the controller to get access to the following information:

  1. the purposes for which the personal data is processed
  2. the categories of personal data processed
  3. the recipients and/or categories of recipients to whom our personal data was or will still be disclosed
  4. the scheduled retention period of your personal data or, if specific information on this issue cannot be provided, criteria for defining the retention period
  5. the existence of any right to rectification or erasure of your personal data, of any right to restrict processing by the controller or of any right to object to such processing
  6. the existence of any right to lodge a complaint with a supervisory authority
  7. all of the information available about the origin of the data if the personal data is not collected from the data subject
  8. the existence of automated decision-making, including profiling, referred to in Art. 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

You have the right to get access to information as to whether your personal data is transferred in a third country or to an international organisation. In this context, you can request to be notified of appropriate safeguards acc. to Art. 46 GDPR in connection with the transfer.

2. Right to Rectification

You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data related to you is incorrect or incomplete. The controller must perform rectification immediately.

3. Right to Restriction of Processing

You may request restriction of the processing of your personal data under the following conditions:

  1. You challenge the accuracy of your personal data for a period enabling the controller to verify the accuracy of such personal data.
  2. Processing is unlawful and you refuse erasure of the personal data, requesting instead that use of the personal data be restricted.
  3. The controller does no longer require the personal data for processing purposes, but you need it for the establishment, exercise or defence of legal claims.
  4. You have objected to processing acc. to Art. 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of you.

If processing of your personal data has been restricted, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If processing has been restricted according to the conditions above, you will be informed by the controller before the restriction of processing is lifted.

3. Right to Erasure

(a) Erasure Obligation
You may demand the controller to erase your personal data without undue delay and the controller sis obliged to erase such data without undue delay where one of the following grounds applies:

  1. Your personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
  2. You withdraw your consent on which processing is based acc. to Art. 6(1) Point (a) or Art. 9(2) Point a GDPR, and there is no other legal ground for processing.
  3. You object to processing acc. to Art. 21(1) and there are no overriding legitimate grounds for processing, or you object to processing acc. to Art. 21(2) GDPR.
  4. Your personal data has been unlawfully processed.
  5. Your personal data has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
  6. Your personal data has been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.
  7. Information to Third Parties

Where the controller has made your personal data public and is obliged acc. to Art. 17(1) GDPR to erase it, the controller, taking account of available technology and the cost of implementation, takes reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, such personal data.

(b) Exceptions
The right to erasure does not apply to the extent that processing is necessary

  1. for exercising the right of freedom of expression and information;
  2. for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  3. for reasons of public interest in the area of public health acc. to Art. 9(2) Points h and i as well as Art. 9(3) GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes acc. to Art. 89(1) GDPR in so far as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  5. for the establishment, exercise or defence of legal claims.

5. Right of Information

If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the latter is obliged to notify all recipients, to whom your personal data have been disclosed, of such rectification or erasure of the data or restriction of processing, unless this turns out to be impossible or produces unreasonable burdens. You have the right vis-à-vis the controller to be informed of such recipients.

6. Right to Data Portability

You have the right to receive any personal data related to you that has been provided by you to the controller in a structured, commonly used and machine-readable format. Moreover, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data has been provided, where

  1. the processing is based on consent acc. to Art. 6(1) Point a GDPR or Art. 9(2) Point a GDPR or on a contract acc. to Art. 6(1) Point b GDPR; and
  2. processing is carried out by automated means.

In exercising such right, you further have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This must not adversely affect the rights and freedoms of others. The right to data portability does not apply to any personal data processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to any processing of your personal data which is based on Art. 6(1) Point e or f GDPR, including profiling based on those provisions. The controller no longer processes your personal data, unless the controller demonstrates compelling legitimate grounds for processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. Where your personal data is processed for direct marketing purposes, you have the right to object at any time to any processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

8. Right to Withdraw any Consent Given Under Privacy Law

You have the right to withdraw at any time your consent given under privacy law. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

9. Automated Individual Decision-Making Including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

  1. is necessary for entering into, or performance of, a contract between you and the controller;
  2. is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
  3. is made with your explicit consent.

Nevertheless, such decisions must not be based on special categories of personal data referred to in Art. 9(1) GDPR, unless Art. 9(2) Point a or g applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place. In the cases referred to in (1) and (3), the controller implements suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

10. Right to Lodge a Complaint With a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR. The supervisory authority with which the complaint has been lodged informs the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy acc. to Art. 78 GDPR. We reserve the right to amend this Privacy Policy at any time taking into account the applicable privacy regulations. The current version is of May 2019.