We are delighted that you have shown interest in our company and our website (hereinafter referred to as the "Website"). Data protection is a matter that the company's management attaches great importance to. You can contact us and our partners through our contact form, phone or email.
In the following text, if you visit our website, make a request through our contact form, or contact us to apply for a position, we will inform you of the nature, scope, and purpose of the personal data we collect, use, and process. This privacy policy explains the legal basis and purpose for doing so. We also inform you of your rights regarding the use of personal data. If you have any questions about how we use your personal information, please contact us as a data controller (in accordance with Section 1).
As controllers, we have implemented numerous technical and organizational measures to ensure the most comprehensive protection of personal data processed through this website. However, in principle, Internet based data transmission may have security vulnerabilities, so absolute protection may not be guaranteed. Therefore, each data subject can freely transmit personal data to us through other means, such as telephone.
1. General information and required information
Heubach attaches great importance to protecting your personal data. We treat your personal data as confidential and comply with legal data protection requirements and the provisions of this data protection statement. When you use this website, various forms of personal data will be collected.
Personal data refers to any information related to identified or identifiable natural persons ("data subjects"). Identifiable natural person refers to a person that can be identified directly or indirectly, especially by referring to the name, ID card number, location data, online identifier and other identifiers, or by referring to one or more factors unique to the physical, physiological, genetic, spiritual, economic, cultural or social identity of the natural person.
Personal data is only collected and processed within the scope permitted by law, or you have agreed to the corresponding use. Once the purpose of data processing is no longer applicable, the data will be deleted unless you agree to further use or deletion is prohibited according to legal retention requirements.
If you claim to us that you have the right to correct, delete, or restrict processing, we have an obligation to communicate any correction or deletion of personal data or restriction of processing information to each recipient to whom your personal data is disclosed, unless it is proven to be impossible or involves disproportionate effort. If you request, we must notify you of these recipients.
2. Data collection on our website
2.1 Creation of Server Log Files
Data processing instructions:
Users can access our website without registration. When you visit our website, every time you open a file, the browser on your device automatically sends the information to our website's server and temporarily stores it in a so-called log file. This is beyond our control. The following information will also be recorded and stored without your intervention until it is automatically deleted:
Legal Basis and Purpose
The legal basis for data processing is Article 6 (1) (f) of the General Data Protection Regulation (GDPR), which allows the processing of data to safeguard the legitimate interests of controllers, provided that it does not conflict with the primary interests, fundamental rights, and fundamental freedoms of users. The temporary storage of these data is necessary for displaying website content to users. Therefore, we need to collect this information to represent our website. For this reason, the user's IP address must also be kept stored during the session. Data is stored in log files to ensure website functionality and optimize it to improve our services. In addition, this is to ensure the security of our IT system. It is precisely for these purposes that the legitimate rights and interests of the controller comply with Article 6 (1) (f) of GDPR.
Storage time and object options
When further storage is no longer required, this data will be deleted. For website provision, this is the case when the corresponding session ends. If the user's IP address is deleted or shortened, additional storage can be performed, making it impossible to allocate the calling user. Server log data is stored for 90 days and then deleted. Collecting data to provide a website and storing it in log files is crucial for the operation of the website. Therefore, users have no right to object to this.
2.2 Inquiry through contact form, email or phone
Data Processing Instructions
If you send us a query through a contact form, email, or phone, we will store your information in the information form, including the contact data you provided there, for the purpose of processing the query and subsequent questions. We will not share this data without your consent. For this purpose, we will transmit and store the following data to you: your name, company name, address, email address, and any personal data information referenced in the inquiry text.
Purpose and Legal Basis of Processing
The data provided in the contact form via email or phone will be processed with your consent (Article 6 (1) (a) GDPR). If the user does not explicitly agree to data processing and storage during a phone call, the data processing must be considered reasonable in accordance with Article 6 (1) (f) of GDPR. Otherwise, the user's request cannot be processed. The transmitted data must be processed in order to handle requests and subsequent issues. Contacting by phone also implies a necessary legitimate interest in data processing.
Storage time; Object and erase options
You can revoke this consent at any time. Sending us informal notifications via email is sufficient. The legality of data processing operations performed before revocation is not affected by revocation. We retain the data you enter in the contact form until you request deletion, withdraw your consent to storage, or the purpose of data storage no longer exists (e.g. after your query processing is completed). Mandatory legal requirements, especially retention periods, are not affected.
2.3 Data Protection of Applications and Applications
Data Processing Instructions
We collect and process personal data of job seekers for the purpose of processing and executing the application process. In the following text, we will inform you of the data processing during the application process: in particular, the categories of personal data processed include your master data (such as name, name, nationality), contact information (such as personal address, email address, and phone number), education, qualifications, certificates, previous employers, professional experience, and previous activity information. This may also include special categories of personal data, such as health data.
Usually, your personal data will be collected directly from you during the application process. In some cases, due to legal regulations, your personal data may also be collected by other entities. In addition, we may have received data from third parties such as employment placement agencies.
Provide data; Purpose and Legal Basis of Processing
Neither the law nor the contract requires the provision of personal information, and you do not need to provide your personal information. However, personal data is required to evaluate the applicability of employment and, if necessary, assess the commencement and maintenance of employment, as well as the fulfillment of relevant contractual obligations. Without this data, we will not be able to complete the application process with you, nor will we be able to sign any employment relationship with you. The collection, storage, and processing of your personal data comply with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and all other relevant laws such as the German Constitution on Work (BetrVG), the German Working Hours Act (ArbZG), etc.
Firstly, for the purpose of aptitude testing, the data is processed to evaluate and, if necessary, prepare for employment in accordance with Article 26 of the BDSG. As long as necessary, we will also process your data to protect the legitimate rights and interests of us or third parties (such as authorities). Its legal basis is Article 6 (f) of GDPR.
In terms of special categories of personal data as defined in Article 9 (1) and Article 26 (3) of GDPR, this is carried out in the context of preparing an employment relationship, with the aim of exercising rights or fulfilling legal obligations under labor law, social security law, and social protection regulations (such as providing health data to health insurance, recording and arranging severe disabilities related to additional leave, etc.).
If we want to process your personal data for the above purposes, we will notify you in advance.
Consent and revocation rights
We may request your consent so that we can save your application data after the application process is completed and use it for future application procedures. We will only use the data and documents you agree to collect for future application procedures. According to Article 6 (1) (a) of GDPR, your consent proves that this data processing is reasonable.
You can revoke your consent at any time by email and it will have future effect. We will delete all of your applicant data upon receiving your revocation notice.
We record your consent statement electronically for traceability purposes. You can review and check your consent form at any time.
For more detailed information about the rights you are entitled to, please refer to Section 1.
3. Security Notice
For security reasons and to protect the transmission of confidential content such as queries or messages sent to us by you as a website operator, this website uses SSL or TLS encryption. You can identify encrypted connections by switching from "http://" to "https://" in the address bar of your browser and the padlock symbol in the browser bar. After enabling SSL or TLS encryption, third parties are unable to read the data you send us.
We take all necessary technical and organizational security measures to store your personal data in a way that is inaccessible to third parties or the public. However, please note that the transmission of data over the Internet (for example, during e-mail communications) may involve security vulnerabilities. Unable to provide end-to-end protection for data to prevent third-party access.
We use external service providers to provide you with these web pages. All information is stored in a secure operating environment. This area is not open to the public. The service provider is only responsible for the technical usability of the webpage.
4. Links, banners, and content from other providers
If our website provides content links from other providers, your IP address will be transmitted to the corresponding provider if you click on these products.
In this case, you will leave Heubach's website and be taken to an external webpage. The address of the target page may use cookies. Heubach is not legally responsible for these cookies. The content and design of these websites, as well as compliance with data protection regulations, are the sole responsibility of their respective providers. For more information about the use of such cookies and the information they store, please refer to the data privacy statement of the responsible content provider.
5. More information
If you have any questions about data protection, such as the processing of personal data, please contact us.
6. Notification during modification
If this data protection statement is modified, the modification will be indicated in this data protection agreement, homepage, and other appropriate places.
