Data protection information according to GDPR
We take the protection of personal data very seriously. We treat your personal data confidentially and process the data in accordance with the statutory data protection regulations and this data protection information.
1 Name and address of the
person responsible
The controller within the meaning of the GDPR is:
Glassware factory Karl Hecht GmbH & Co KG
Represented by Mr. Steffen Wachter
Stettener Street 22 – 24
97647 Sondheim before the Rhön
info@assistent.eu [SH1]
2 Data processing
The website is used to represent the company, to advertise our products and job vacancies, to download information material and to provide contact options. When you visit the website, personal data is processed, about which we would like to inform you below.
2.1 Web server log files
When using the website, the access to the page, whether the access was successful, the time of access, the volume of data transferred, the IP address, the browser type, the browser version and the operating system used by the requesting computer are collected. The processing is necessary in order to display the website to you properly and to maintain the security of our systems. The legal basis for processing is Art. 6 para. 1 lit. b) EU GDPR for the fulfillment of contractual obligations and rights or for the implementation of pre-contractual measures. The stored log data is deleted after 30 Calendar days [SH2] automatically deleted.
2.2 E-mails and contact form
If you send us inquiries by email or via the contact form, your details from the email or the inquiry form, including the contact details you provide there, will be processed for the purpose of processing the inquiry and stored by us in the event of follow-up questions. The legal basis for processing is Art. 6 para. 1 lit. b EU GDPR for the fulfillment of contractual obligations and rights or for the implementation of pre-contractual measures. The stored log data will be deleted in accordance with the legal requirements.
2.3 Customer and contract data
We process personal data insofar as it is necessary for the establishment, content, execution or amendment of the contractual relationship with customers or potential customers. This involves master data, contact data and contract data such as name, address, email address, telephone number, contract content data, etc. The legal basis for processing is Art. 6 para. 1 lit. b EU GDPR for the fulfillment of contractual obligations and rights or for the implementation of pre-contractual measures. Insofar as collected data is not subject to statutory retention periods, it will be deleted after completion of the order or termination of the business relationship.
2.4 Cookies
No cookies are stored in your browser when you use the website.
The legal basis for the processing of technically necessary cookies is Art. 6 para. 1 lit. b EU GDPR for the fulfillment of contractual obligations and rights or for the implementation of pre-contractual measures.
The legal basis for the processing of cookies for the analysis of website visitor behavior and marketing is consent pursuant to Art. 6 para. 1 lit. a EU GDPR. Consent is given on a voluntary basis and can be withdrawn at any time with effect for the future. The data will no longer be processed or deleted after receipt of the declaration of revocation. Withdrawal of consent does not affect the lawfulness of the processing carried out up to that point.
2.5 Application procedure
If you take part in an application procedure published by us or send us an unsolicited application, we process personal data to initiate an employment relationship or to carry out the application procedure. As part of the application process, we process your master data, proof of professional and personal qualifications (references, certificates, CV), photographs, desired salary, your motivation, any information on disability (only if relevant for the advertised position) and any references you provide us with. The legal basis for processing is Art. 6 para. 1 lit. b EU GDPR for the fulfillment of contractual obligations and rights or for the implementation of pre-contractual measures and in particular § 26 para. 1 BDSG.
Should the data be required for legal prosecution after completion of the application process, data processing may be carried out to safeguard legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. Our interest then lies in the assertion of or defense against claims.
Applicant data will be deleted 6 months after the end of the application process in the event of rejection. If you have been accepted for a position as part of the application process, the data will be transferred to our personnel master data.
If an employment relationship is sought with an applicant, the relevant data will – after consultation and with your consent – be provided to the company’s appointed lawyer for the purpose of drawing up an individual employment contract. For the payment of wages, payments to social insurance and employers’ liability insurance associations, etc., the data required for this purpose will be transmitted to the company’s appointed tax consultant. [SH5]
2.6 External content, especially Google Maps
This site uses the Google Maps map service via an API. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to forward your IP address to Google. This information is usually transmitted to a Google server in the USA and stored there.
The legal basis for data transmission is consent in accordance with Art. 6 para. 1 lit. a EU GDPR and Art. 45 para. 1 EU GDPR [SH6] for third country transfers based on an adequacy decision of the European Union. Google LLC is registered under the EU-US Privacy Framework. You can find more information here:
Consent is given on a voluntary basis and can be withdrawn at any time with effect for the future. Withdrawal of consent does not affect the lawfulness of the processing carried out up to that point.
You can find more information on the handling of user data and deletion periods in Google’s privacy policy:
https://www.google.de/intl/de/policies/privacy/
2.7 External hyperlinks esp. LinekdIn
The website contains links to third-party websites, e.g. LinkedIn. If you follow the link to one of these websites, we would like to point out that they have their own data protection notices and that we assume no responsibility for them. Please check the data protection notices before you voluntarily disclose personal data to the websites. The data transmitted are in particular Date of access to the page, whether the access was successful, the volume of data transferred and the IP address, browser type and browser version and operating system used by the requesting computer.
You can find more information on the handling of user data and deletion periods in LinkedIn’s privacy policy:
https://de.linkedin.com/legal/privacy-policy
2.8 Recipients or categories of recipients of the personal data
Transmission of the data specified in section 2.X to third parties outside the company (external recipients) is made to XXXXX.[SH7]
2.9 Processor
The data is processed exclusively under the responsibility of Glaswarenfabrik Karl Hecht GmbH & Co KG. However, we use a service provider who provides the website for us. The service provider has been checked from a data protection perspective and has suitable data security measures in place. This service provider is
Morenotless
Gustav-Stresemann-Straße 121
86199 Augsburg
2.10 Automated decision making:
There is no automated decision-making or profiling.
2.11 Obligation to provide the
personal data:
In principle, you are not obliged to provide the above-mentioned data. If you wish to use our website and services or apply for a job with us, you must at least provide the data required to initiate or fulfill the contractual relationship.
3 General information on
data processing
3.1 Scope of the processing of
personal data
We only process personal data to the extent necessary.
3.2 Rights of the data subject affected by the processing
The person affected by the processing has rights in accordance with Art. 15 – 23 GDPR, which can be asserted against us. An overview of the most important rights is listed below:
- Right to information about data stored by the controller in accordance with Art. 15 GDPR
- Right to rectification of data stored by the controller in accordance with Art. 16 GDPR
- Right to erasure of data stored by the controller in accordance with Art. 17 GDPR
- Right to restriction of processing of data stored by the controller in accordance with Art. 18 GDPR
- Notification obligation in connection with the rectification or erasure of personal data or the restriction of processing pursuant to Art. 19 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to object pursuant to Art. 20 GDPR
3.3 Exercise of rights
If you would like to exercise your rights, please send an e-mail to info@assistent.eu
3.4 Right of appeal
You also have the right to lodge a complaint with a supervisory authority. The competent supervisory authority in the state of Bavaria is
Bavarian State Office for Data Protection Supervision
P.O. Box 1349
91504 Ansbach
3.5 Data security
In order to adequately and comprehensively protect the security of the data during processing and in particular during transmission, we use appropriate technical and organizational measures to ensure the security of personal data, where necessary and based on the current state of the art.
4 Status, changes and validity
of the general
data protection information
This privacy policy is valid as of 11/2023. We reserve the right to update this privacy policy regularly in order to comply with current legal requirements and technical changes and to implement our services and offers in compliance with data protection regulations. We will inform you of any significant changes to the legal framework.