Purposes and legal basis of our data processing activities
When making use of our website, personal data of yours (hereinafter briefly referred to as “data”) is processed. The data may, for example, include your name, address, e-mail address and further details regarding your identity. Basically, any type of handling of such data constitutes processing.
You are therefore given some information below on the processing of your data when using www.pur-montage.de based on the provisions of the General Data Protection Regulation (GDPR), as well as the applicable Federal and State data privacy laws.
We also process data in order to send you e-mails based on any consent given by you to send you newsletters. The legal basis for the processing of said data is your consent under Art. 6(1)(1)(a) GDPR.
2. IT security
Finally, in both your interests and ours, we also process data in order to guarantee the integrity, confidentiality and availability of the data processing systems, i.e. in particular the security and availability of your data with our service provider. It is not possible to use our website or app without data being processed for this purpose. The legal basis for the processing of said data is Art. 6(1)(1)(f) GDPR. Our legitimate interest consists in maintaining our services and providing them in a secure manner.
3. Contact form
The website makes a contact form available intended for contacting us. The data entered, in this context, will, insofar as personal data is concerned, be stored on the server of the hosting provider and then passed on by e-mail to the recipient's inbox intended for this purpose. It is to be noted that the data is only passed on on internal servers, so that it is effectively excluded that the confidentiality of the data can be put at risk. Art. 6(1)(1)(b) of the General Data Protection Regulation constitutes the legal basis for the processing. By way of derogation from the latter, the legal based for recording the name is Art. 6(1)(1)(f) GDPR. The legitimate interest for doing so is the aim to personally address the enquirer.
4. E-mail contact
In various places on the website it is possible to make contact via the e-mail address provided. When doing so, the personal data transmitted is stored, in particular the e-mail address itself. Said data is not passed on to third parties. The data are used exclusively for the purpose of processing the inquiry/request. The legal basis for the processing of the data is Art. 6(1)(1)(f) GDPR. The legitimate interest in processing the data lies in handling the communication. The data is deleted once the purpose has lapsed or the communication has come to an end. Should an offer procedure be involved in the communication, the data processed will be deleted following the expiry of the archival periods stipulated for storing offer procedure communications.
5. Contact form for enquiries about applications
The website provides a form-based application procedure for applying digitally for vacancies published. To the extent that the data entered in this case is personal data, it is stored on the server of the hosting provider and then passed on by e-mail to the recipient's inbox intended for the purpose. It is to be noted that the data is only passed on on internal servers, so that it is effectively excluded that the confidentiality of the data can be put at risk. Art. 6(1)(1)(b) of the General Data Protection Regulation constitutes the legal basis for the processing. Should an employment contract result from your application, your data transmitted may be stored by us in your staff file for the purpose of the usual organisational and administrative procedure, observing the pertinent legal provisions.
If your application for the job post is unsuccessful, the data transmitted by you is automatically deleted two months after we have informed you that you have not been successful on this occasion. This does not apply if, based on statutory requirements (for instance, the obligation to provide evidence pursuant to the General Equal Treatment Act (AGG)), it is necessary to store the data for a longer period of time, or if you have expressly agreed to your data being stored in our database of interested parties for a longer period of time.
Passing on data beyond the borders of the EU
The data gathered by us is exclusively stored on servers in the European Union. Data is not transmitted to companies outside the European Union without your express consent. This also applies to any service providers commissioned by us to process data.
Recipients of data
We shall only transmit your data to - or receive it from - the recipients chosen by you, via a secure connection, based on the organisation of our website with you or your consent. So that we are able to provide with you all the functions available at www.pur-montage.de, we also instruct selected service providers, who process data on our behalf and in our name. When doing so, we only pass on data within the context of statutorily admissible contract data processing, to service providers carefully selected by us and commissioned in writing. The latter only receive such data as is necessary to fulfil the contract. The aforementioned contractors cover the following categories: Identification service providers, software developers, server hosting companies, newsletter dispatchers, customer support, web analysis services.
Duration of data retention
The data provided by you in order to enable communication is stored by us for as long as the contact between you and www.pur-montage.de exists. Should a contractual relationship subsequently arise, the data necessary for handling it is stored. Otherwise, your data is deleted once the purpose for which it was processed has lapsed. The legal basis for storing your data to make contact is Art. 6(1)(1)(f) GDPR, as a legitimate interest on our part exists to be able to contact you personally and individually. Should a contract subsequently materialise, Art. 6(1)(1)(b) GDPR forms the legal basis for continuing to store your data in order to execute the contract.
Data processing for web analysis purposes
1. Google Analytics
2. Google Maps
3. Use of script libraries (Google web fonts)
Your rights and opportunities to complain
(1) You have the following rights vis-à-vis us in regard to the data concerning you:
- The right to be given information,
- The right to correction or deletion,
- The right to restriction of the processing,
- The right of revocation of your consent,
- The right to object to the processing,
- The right of data portability.
You can assert all of these rights by contacting our Data Protection Officer or us.
(2) In addition, you are entitled to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us.
Party responsible for the data processing
The party responsible for the data processing within the meaning of data privacy law is:
Data protection officer
If you have any questions on data privacy, you are also welcome to contact our Data Protection Officer, Richard Bode, Attorney-at-Law, Merz & Stöhr Datenschutzgesellschaft mbH.
01309 Dresden, Germany
Phone:+49 (0) 351 31 841-0
Fax:+49 (0) 351 31 841-10