Duty to provide information when
collecting
Personal data pursuant to Art. 13 and 14
GDPR
Details of the data controller (the company)
J.G. WEISSER SÖHNE GmbH & Co. KG
Johann-Georg-Weisser-Straße 1
78112 St. Georgen
Germany
PO Box 1531
78107 St. Georgen
Germany
Phone: +497724881-0
Fax: +497724881-371
E-mail: info@weisser-web.com
Data Protection Officer
If you have any questions regarding data protection, please contact our data
protection officer by e-mail: datenschutz@weisser-web.com or at the following postal address:
vimopro GmbH
Benediktinerring 10
78050 Villingen-Schwenningen
Germany
Phone: +49 7721 6981151
Processing your personal data – purposes and legal basis
Log files
When our website is accessed, log files are recorded and remain stored for 14 days. Such log files are automatically transmitted by your browser to us or the service provider of the website.
These are the following data:
• Browser type and version
• Referrer URL (from which website you came to us)
• Host name of the accessing computer
• Operating system used
• Time of the server request
• IP address
This data serves to ensure a technically flawless website and is therefore collected on the basis of Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the error-free presentation of our online presence and the resulting optimisation of the website, if necessary.
Hosting
We host our website with the following provider:
Go Daddy Netherlands B.V
Schiphol Boulevard 359 1118 BJ,
Luchthaven Schiphol, Noord-Holland Netherlands
This company is the recipient of your personal data and acts as a data processor for us. The servers are located in Europe. Information on data protection at GoDaddy can be found in the provider’s data protection notice: https://www.godaddy.com/de- en/legal/agreements/privacy-policy
Cookies
When you visit our website, small data records containing information may be stored in the browser of your end device. These data records are called cookies.
On our website, we only use cookies to a very limited extent. They are used, for
example, to enable certain functions such as the storage of your consent to data processing. When we use cookies, they are usually technically necessary cookies that do not require consent in accordance with the General Data Protection Regulation (GDPR) and the Telecommunications Telemedia Data Protection Act (TTDSG). If we cookies that cannot be classified as necessary, we will ask you for your consent beforehand. Our legal basis for setting technically necessary cookies is based on our legitimate interest (pursuant to Article 6(1)(f) of the General Data Protection Regulation) to improve the functionality of our website. Session cookies are deleted when you close your internet browser.
Contact requests / contact possibility
If you contact us (e.g. by contact form, telephone or e-mail), the data you provide will be stored by us for the purpose of processing the enquiry and in case of follow- up questions. The processing of this data is based on Art. 6 para. 1 lit. b) GDPR, insofar as your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 (1) a) GDPR) by implied conduct with the contact. The data you send us will remain with us until you request erasure, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
Newsletter
If you have subscribed to the newsletter on our website, we will use your e-mail address to send you the newsletter regularly and to provide you with interesting facts about our company. The legal basis for sending the newsletter is your consent (Article 6 (1) sentence 1 a) GDPR). You can revoke your consent at any time to stop receiving the newsletter. To do so, you can click on the unsubscribe link in every newsletter email. Or you can write to us at datenschutz[at]weisser-web.com or by post. By unsubscribing or exercising your right to erasure, the purpose for which we collected your data ceases to exist and we delete your data. To send the newsletter, we use CleverReach, a service provided by CleverReach GmbH & Co KG (hereinafter referred to as CleverReach). We have concluded a contract for data processing with the provider. Information on data protection and your rights in this regard with the provider can be found at: https://www.cleverreach.com/de-de/datenschutz/
When you subscribe to our newsletter, the information requested during the registration process in the form, including your email address and optionally your name and address, is processed by CleverReach. We also store your IP address and the time of your subscription. Before sending the newsletter, your consent is required, we will inform you about the contents of our newsletters and refer you to this privacy policy.
Google Fonts
To display external fonts, we have dynamically integrated Google Fonts on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of the US-based Google LLC, hereinafter referred to as “Google”. We integrate the fonts on the basis of Art. 6 para. 1 lit f. Our legitimate interest lies in the uniform, optimised and economic operation of our websites. The dynamic integration of the fonts means that network connections to Google servers are established when our websites are called up in order to reload the fonts. For technical reasons, your IP address, among other things, is transmitted to Google. Since Google has its headquarters in the USA and a large part of its servers are located there, data transfers also take place outside the EU. The EU Commission has not issued an adequacy decision for the USA, as the legal situation there does not guarantee that you can fully exercise your rights under the GDPR. The transmission of your IP address as personal data therefore involves a risk that cannot be completely minimised even by our EU standard contractual clauses with Google.
Google holds under
https://adssettings.google.com/authenticated (for registered users),
https://adssettings.google.com/ (for non-registered users) and
https://policies.google.com/privacy
The following information is available to you on our website: how the Group handles the data collected and what options are available to you to prevent the use of the data.
Consent Management Borlabs Cookie
This website uses Borlabs cookie, which sets a technically necessary cookie (borlabs- cookie) to store your consent to cookies and data processing that is not technically necessary. According to the provider, Borlabs Cookie does not process any personal data. The borlabs-cookie cookie stores the consent that you have given when If you wish to revoke these consents, simply delete the cookie from your browser. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent. provider of the tool is:
Borlabs GmbH
Rübenkamp 32
D-22305 Hamburg
YouTube
We have an account on YouTube and use the platform to communicate with customers, applicants and interested parties. YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
To illustrate and advertise our products, you will find YouTube videos embedded directly on our pages. A connection with YouTube is only established after you have actively given your consent to data processing by YouTube either via our Consent Management Tool or by clicking on the overlay of a video. The legal basis is thus your consent in accordance with Art. 6 Para. 1 lit. a GDPR. In this way, we ensure that no data processing by YouTube takes place when our pages with embedded videos are merely called up. The YouTube videos on our website are implemented using “extended data protection mode”. According to Google, the “Enhanced Privacy Mode” the playing of videos without cookies, which is intended to achieve a higher standard of data protection. Nevertheless, by calling up YouTube videos, at least your IP address, the exact time as well as the internet address on which the video is embedded are collected. In addition, when a video is played, connections to other Google addresses are established over which we have no control. In particular, we cannot prevent Google from processing the information collected for profiling purposes and using it for its own purposes. If you have a Google account and are logged in to this account when you view a video, Google will link the information collected to your account. You can prevent this aggregation of information by first logging out of your Google account. In the settings of your Google account, you can also make further configurations, for example, to prevent your YouTube history from being saved permanently. Please note that when using YouTube, users’ data may be processed outside the European Union, in particular in the USA. YouTube is a joint data controller with us with regard to the data that YouTube forwards to us as a company. This may result in increased risks for users, for example if access to user data is made more difficult. We do not have access to this user data. The accountability lies exclusively with YouTube.YouTube clarifies the explicit processing and sharing of your information in its ownprivacy notices:
https://policies.google.com/privacy
Instagram
Our company uses Instagram as part of our marketing strategy to promote our products and services and to communicate with prospects and customers. We are jointly accountable with Meta Platforms Ireland Limited for our presence on this social media platform. When you visit our online presence on Instagram, user data is processed by Meta Platforms Ireland Ltd, operator of the platform in the EU. This data includes, among other things, personal information and the IP address of the user. This data is used for statistical purposes and is also used by Meta Platforms Ireland Ltd. for market research and advertising as well as to create user profiles. As a company, we process personal data on the basis of our legitimate interest in analysing, communicating, selling and advertising our products and services (Art. 6 para. 1 lit. f GDPR). In some cases, the user’s consent may also be given in accordance with Art. 6 (1) a GDPR. The user can transmit the revocation of this consent to the platform operator at any time (Art. 7 para. 3 GDPR). If you contact us via Instagram, we use the personal data you provide to process your enquiry. As soon as we have answered your enquiry and there are no legal retention obligations, we delete your data. Meta Platforms Ireland Ltd. may set cookies when processing your data. However, it is possible to prevent the installation of cookies by setting your browser accordingly. Cookies that have already been stored can be deleted at any time. Please note, however, that restricting or preventing the installation of cookies may mean that not all functions of Instagram can be fully used. You can find more information on this in Instagram’s privacy policy. We have set out the joint accountability with Meta Platforms Ireland Limited in an agreement available at https://www.facebook.com/legal/terms/page_controller_addendum. For more information on the processing activities, how to stop them and how to erase the data processed by Instagram, please refer to Instagram’s privacy policy:
https://help.instagram.com/519522125107875. Please note that it is not excluded that the processing of your data also takes place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
XING
We have a company page on the career platform XING. The provider of the platform is New Work SE, Am Strandkai 1, 20457 Hamburg. There we can inform about news in our company, present ourselves and get in direct contact with interested parties and business partners. XING also allows you to use interactive functions such as sharing or commenting on posts or to write direct messages to us. When you use or access our XING Company Page, personal data is processed by us and by XING. This data includes, among other things, personal information and the IP address of the user. We are joint data controllers within the meaning of the GDPR. XING describes in its data protection information how the provider processes personal data and how you can exercise your rights in this regard:
https://privacy.xing.com/de/datenschutzerklaerung
As the operator of our company page on XING, we receive information through the platform about statistical evaluations that relate to the views of our company page. Unless you are logged into your XING profile, the data is anonymised so that we cannot draw any conclusions about individual page visitors. However, the statistics help us to continuously improve our corporate presence and make it more attractive. If you visit our company page while logged into your XING user account, we can track the visit to our page by your user account. If you do not wish this, you can log out of your user account before accessing our company page. If you use interactive XING functions as a registered user, these activities are linked to your user account and are processed by XING. We have no influence on the functionality or visibility of your activities. As a company, we process personal data on the basis of our legitimate interest in analysing, communicating, selling and advertising our products and services (Art. 6 para. 1 lit. f GDPR). In some cases, the user’s consent may also be given in accordance with Art. 6 (1) a GDPR. The user can transmit the revocation of this consent to the platform operator at any time (Art. 7 para. 3 GDPR). If you contact us via XING (e.g. by direct message), we process the information received from you for the purpose of responding to your enquiry on the basis of Art. 6 (1) lit. f GDPR. Depending on the enquiry, Art. 6 (1) lit. b GDPR may also serve as a legal basis for us if, for example, you are interested in a position in our company and this therefore involves pre-contractual measures. As soon as we have answered your enquiry and there are no legal obligations to retain data, we delete your data.
LinkedIn
We have a company page on the career platform LinkedIn. The provider of the platform is LinkedIn Ireland Unlimited Company in Ireland, a subsidiary of the LinkedIn Corporation based in the USA. There we can inform about news in our company, present ourselves and get in direct contact with interested parties and business partners. LinkedIn also allows you to use interactive functions such as sharing or commenting on posts or to write direct messages to us. When you use or access our LinkedIn company page, personal data is processed by us and by LinkedIn. This data includes, among other things, personal information and the IP address of the user. We are joint data controllers within the meaning of the GDPR. LinkedIn describes in its data protection notices how the provider processes personal data and how you can exercise your rights in this regard:
https://www.linkedin.com/legal/privacy-policy
Please note that it is not excluded that the processing of your data also takes place via the LinkedIn Corporation based in the USA. As the operator of our company page on LinkedIn, we receive information through the platform about statistical evaluations that relate to the views of our company page. Unless you are logged into your LinkedIn profile, the data is anonymised so that we cannot draw any conclusions about individual page visitors. However, the statistics help us to continuously improve our company website and make it more attractive. If you visit our company page while logged into your LinkedIn user account, we can track the visit to our page by your user account. If you do not wish this, you can log out of your user account before you visit our company page. If you use interactive LinkedIn functions as a logged-in user, these activities are linked to your user account and are processed by LinkedIn. We have no influence on the functionality or visibility of your activities. As a company, we process personal data on the basis of our legitimate interest in analysing, communicating, selling and advertising our products and services (Art. 6 para. 1 lit. f GDPR). In some cases, the user’s consent may also be given in accordance with Art. 6 (1) a GDPR. The user can transmit the revocation of this consent to the platform operator at any time (Art. 7 para. 3 GDPR). If you contact us via LinkedIn (e.g. by direct message), we process the information received from you for the purpose of responding to your enquiry on the basis of Art. 6 (1) lit. f GDPR. Depending on the enquiry, Art. 6 (1) lit. b GDPR may also serve as a legal basis for us if, for example, you are interested in a position in our company and this therefore involves pre-contractual measures. As soon as we have answered your enquiry and there are no legal obligations to retain data, we delete your data.
Social media link via graphic or text link
If we include links to social networks such as Facebook, Instagram, etc. on our website, this is done solely as part of our marketing strategy and to provide an easy connection to our social media presences. Please note that we cannot accept any accountability for data protection and data processing on the social media platforms in question. Only by clicking on the corresponding graphic or a link to a social media profile or account will you leave our website and be redirected to the corresponding platform. The data processing is then carried out exclusively by the operators of the platforms. Please read the data protection notices of the social networks concerned to find out about data processing and your data protection rights in this respect. Please note that we have no control over the processing of your personal data by the operators of the social networks. If you have concerns about data processing on these platforms, we recommend that you contact the platform operator directly or adjust the settings in your user account accordingly in order to exercise your data protection rights. The following social networks are integrated into our site by linking:
YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA Data protection information: https://policies.google.com/privacy
Instagram
Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA, a subsidiary of Meta Platforms Inc, 1601 Willow Road, Menlo Park, California 94025, USA.
Data protection information: https://privacycenter.instagram.com/policy/
LinkedIn
LinkedIn Ireland Unlimited Company, Ireland, (subsidiary of the LinkedIn Corporation based in the USA)
Data protection information: https://www.linkedin.com/legal/privacy-policy
Data processing in the company
We process personal data on the basis of data protection regulations of the General Data Protection Regulation (GDPR) as well as the Federal Data Protection Act (BDSG) and, if applicable, the data protection laws of the individual federal states. The data of the following groups of persons are processed by processed by the respective responsible persons in the company for the fulfilment of tasks.
In detail, this means:
• Customer and prospective customer data is processed for the purpose of implementing and servicing the contractual relationship or the pre-contractual
relationship as well as contact enquiries and communication on the basis of
Art. 6 para. 1 sentence 1 letter b) GDPR and Art. 6 para. 1 sentence 1 letter c)
GDPR.
• Personal data of our suppliers and service providers as well as their
employees are processed for the initiation and implementation of our
contractual relationships on the basis of Art. 6 (1) sentence 1 letter b) GDPR
and Art. 6 (1) sentence 1 letter c) GDPR.
• Employee data is stored for the purpose of establishing, implementing and
terminating employment relationships (Art. 88 GDPR, § 26 BDSG).
• Applicant data is stored for the purpose of carrying out the application
procedure and deciding on the establishment of an employment relationship
(Art. 88 GDPR, § 26 BDSG). Records of unsuccessful applicants are deleted a
maximum of six months after the end of the application process.
Storage period
The personal data stored by us will be deleted in accordance with legal requirements. We delete the data as soon as they are no longer required for the purpose of processing, a given consent is revoked or other permissions cease to apply. Data that must still be stored, e.g. for reasons of commercial or tax law, or whose storage is still required for the assertion, exercise or defence of legal claims, will be deleted as soon as this is no longer the case.
Data subject rights
When we process personal data about you, you have the following data subject rights:
• a right of access to the data processed and a right to obtain a copy,
• a right of rectification if we process incorrect data about you,
• a right to erasure, unless exceptions apply as to why we are still storing the data, e.g. retention obligations or limitation periods
• a right to restriction of processing,
• a right to withdraw consent to data processing at any time,
- a right to object to processing in the public or legitimate interest,
• a right to data portability,
• a right of appeal to a data protection supervisor authority if you find that we are not processing your data properly. The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg is responsible for our company. However, if you are in another federal state or not in Germany, you can also contact the data protection authority there.
Automated decision making
No automatic decision-making or profiling takes place