Purposes and legal basis of our data processing activities
When making use of our website, personal data of yours (hereinafter briefly referred to as “data”) is processed. The data may, for example, include your name, address, e-mail address and further details regarding your identity. Basically, any type of handling of such data constitutes processing.
You are therefore given some information below on the processing of your data when using www.pur-montage.de based on the provisions of the General Data Protection Regulation (GDPR), as well as the applicable Federal and State data privacy laws.
1. Newsletter
We also process data in order to send you e-mails based on any consent given by you to send you newsletters. The legal basis for the processing of said data is your consent under Art. 6(1)(1)(a) GDPR.
2. IT security
Finally, in both your interests and ours, we also process data in order to guarantee the integrity, confidentiality and availability of the data processing systems, i.e. in particular the security and availability of your data with our service provider. It is not possible to use our website or app without data being processed for this purpose. The legal basis for the processing of said data is Art. 6(1)(1)(f) GDPR. Our legitimate interest consists in maintaining our services and providing them in a secure manner.
3. Contact form
The website makes a contact form available intended for contacting us. The data entered, in this context, will, insofar as personal data is concerned, be stored on the server of the hosting provider and then passed on by e-mail to the recipient's inbox intended for this purpose. It is to be noted that the data is only passed on on internal servers, so that it is effectively excluded that the confidentiality of the data can be put at risk. Art. 6(1)(1)(b) of the General Data Protection Regulation constitutes the legal basis for the processing. By way of derogation from the latter, the legal based for recording the name is Art. 6(1)(1)(f) GDPR. The legitimate interest for doing so is the aim to personally address the enquirer.
4. E-mail contact
In various places on the website it is possible to make contact via the e-mail address provided. When doing so, the personal data transmitted is stored, in particular the e-mail address itself. Said data is not passed on to third parties. The data are used exclusively for the purpose of processing the inquiry/request. The legal basis for the processing of the data is Art. 6(1)(1)(f) GDPR. The legitimate interest in processing the data lies in handling the communication. The data is deleted once the purpose has lapsed or the communication has come to an end. Should an offer procedure be involved in the communication, the data processed will be deleted following the expiry of the archival periods stipulated for storing offer procedure communications.
5. Contact form for enquiries about applications
The website provides a form-based application procedure for applying digitally for vacancies published. To the extent that the data entered in this case is personal data, it is stored on the server of the hosting provider and then passed on by e-mail to the recipient's inbox intended for the purpose. It is to be noted that the data is only passed on on internal servers, so that it is effectively excluded that the confidentiality of the data can be put at risk. Art. 6(1)(1)(b) of the General Data Protection Regulation constitutes the legal basis for the processing. Should an employment contract result from your application, your data transmitted may be stored by us in your staff file for the purpose of the usual organisational and administrative procedure, observing the pertinent legal provisions.
If your application for the job post is unsuccessful, the data transmitted by you is automatically deleted two months after we have informed you that you have not been successful on this occasion. This does not apply if, based on statutory requirements (for instance, the obligation to provide evidence pursuant to the General Equal Treatment Act (AGG)), it is necessary to store the data for a longer period of time, or if you have expressly agreed to your data being stored in our database of interested parties for a longer period of time.
Passing on data beyond the borders of the EU
The data gathered by us is exclusively stored on servers in the European Union. Data is not transmitted to companies outside the European Union without your express consent. This also applies to any service providers commissioned by us to process data.
Recipients of data
We shall only transmit your data to - or receive it from - the recipients chosen by you, via a secure connection, based on the organisation of our website with you or your consent. So that we are able to provide with you all the functions available at www.pur-montage.de, we also instruct selected service providers, who process data on our behalf and in our name. When doing so, we only pass on data within the context of statutorily admissible contract data processing, to service providers carefully selected by us and commissioned in writing. The latter only receive such data as is necessary to fulfil the contract. The aforementioned contractors cover the following categories: Identification service providers, software developers, server hosting companies, newsletter dispatchers, customer support, web analysis services.
Duration of data retention
The data provided by you in order to enable communication is stored by us for as long as the contact between you and www.pur-montage.de exists. Should a contractual relationship subsequently arise, the data necessary for handling it is stored. Otherwise, your data is deleted once the purpose for which it was processed has lapsed. The legal basis for storing your data to make contact is Art. 6(1)(1)(f) GDPR, as a legitimate interest on our part exists to be able to contact you personally and individually. Should a contract subsequently materialise, Art. 6(1)(1)(b) GDPR forms the legal basis for continuing to store your data in order to execute the contract.
Data processing for web analysis purposes
1. Google Analytics
We use the Google Analytics analysis service. The provider of Google Analytics is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you visit our website, further usage data is therefore gathered and stored, namely your region, the operating system used, information concerning your terminal, information on web pages linking to this site, as well as social networks. Data additionally gathered by Google Analytics includes the time that you spent on the individual web pages, clicking paths and the pages that you came from before you arrived at our respective web page. We exclusively use the data gathered to provide our services and make the website more user-friendly, more effective and safer, in both your interests and ours. The data gathered is not used to identify you or set up a profile personally connected with you. Personal data given by you or any other data is not merged without your prior express consent either. Google Analytics uses cookies. The information generated by the cookie about your use of this website (including your IP address) is sent to and stored on a Google server in the USA. Based on IP anonymisation being enabled on these web pages, your IP address will, however, be truncated in advance within the Member States of the European Union or other contracting states of the Treaty on the European Economic Area. Only in exceptional cases is the full IP address sent to and truncated on a Google server in the USA. You may prevent the collection of data generated through cookies (incl. your IP address) and related to the use of this website as well as the processing of such data by Google by downloading and installing the plugin under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser plug-in, you can click on this link to prevent Google Analytics from collecting data on this website in future. Upon doing so, an opt-out cookie is stored on your terminal device. If you delete your cookies, you will need to click the link again. You can infer further information on Google Analytics and the data privacy settings from the Data Privacy Policy (https://policies.google.com/privacy?hl=de) and the terms and conditions of use (https://www.google.com/analytics/terms/de.html) of Google Inc. The legal basis for the processing of this data is Art. 6(1)(1)(f) GDPR. Our legitimate interest consists in providing our services in a secure and the most convenient way for you.
2. Google Maps
This site uses the map service of Google Maps, via an API. The provider of Google Maps is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a server of Google in the USA and stored there. The provider of this site has no control over such data transmission. If you are not in agreement with such processing, the option exists to disable the “Google Maps” service, and thus prevent data from being transferred to Google. To do that, disable the JavaScript function in your browser. You can infer further information on Google Maps and the data privacy settings from the Data Privacy Policy (https://policies.google.com/privacy?hl=de) and the terms and conditions of use (https://www.google.com/intl/en_en/help/terms_maps.html) of Google Inc.
3. Use of script libraries (Google web fonts)
In order to display our content correctly and in a visually appealing manner across all browsers, we use script libraries and font libraries, such as Google Web Fonts (https://www.google.com/webfonts/) on this website. Google Web Fonts are transmitted into the cache of your browser in order to avoid repeated loading. Should the browser not support Google Web Fonts or prevent access, content is displayed in a standard font. Accessing script libraries or font libraries automatically triggers a connection to the operator of the library. In the process, it is theoretically possible – however, presently also unclear whether it occurs or for what purposes – for operators of corresponding libraries to gather data. You can find the Data Privacy Policy of the library operator Google here: https://www.google.com/policies/privacy/. Data security All the data stored by us or any contract data processors is protected from unauthorised access, loss and alteration involving current security standards. Extensive technical and organisational security measures are implemented for this purpose, based on a standard that at least adheres to the statutory requirements.
Your rights and opportunities to complain
(1) You have the following rights vis-à-vis us in regard to the data concerning you:
- The right to be given information,
- The right to correction or deletion,
- The right to restriction of the processing,
- The right of revocation of your consent,
- The right to object to the processing,
- The right of data portability.
You can assert all of these rights by contacting our Data Protection Officer or us.
(2) In addition, you are entitled to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us.
Party responsible for the data processing
The party responsible for the data processing within the meaning of data privacy law is:
PUR Montage-Dienstleistungs-GmbH
Hainsberger Str. 10b
01159 Dresden, Germany
Tel.: +49 (0) 351 42 305-0
Fax: +49 (0) 351 42 305-37
E-Mail: info@pur-montage.de
Website: www.pur-montage.de
Data protection officer
If you have any questions on data privacy, you are also welcome to contact our Data Protection Officer, Richard Bode, Attorney-at-Law, Merz & Stöhr Datenschutzgesellschaft mbH.
Comeniusstr. 109
01309 Dresden, Germany
Phone:+49 (0) 351 31 841-0
Fax:+49 (0) 351 31 841-10
E-Mail: datenschutz@merz-dresden.de
Date: 08/18