Privacy Policy

Data protection notice for website visitors

Thank you for visiting our website. In the following, we would like to inform you about the handling of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

1. Responsible body

The entity named in the imprint is responsible for the data processing described below.

2. Usage data

When you visit our websites, so-called usage data is temporarily evaluated on our web server for statistical purposes as a log in order to improve the quality of our websites. This data set consists of

  • the name and address of the requested content,
  • the date and time of the query,
  • the amount of data transferred,
  • the access status (content transmitted, content not found), the description of the web browser used and the operating system,
  • the referral link, which indicates from which page you came to ours,
  • the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established.

The aforementioned log data is only analyzed anonymously. The legal basis for the processing of usage data is Art. 6 para. 1 lit. f GDPR. The processing is carried out in the legitimate interest of providing the content of the website and ensuring a device- and browser-optimized display.

3. Data security

We take technical and organizational measures to protect your data from unwanted access as comprehensively as possible. We use an encryption process on our websites. Your data is transmitted from your computer to our server and vice versa via the Internet using TLS encryption. You can usually recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address bar begins with https://.

4. Required cookies

We use cookies on our websites that are necessary for the use of our websites.

Cookies are small text files that can be stored and read on your end device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

We do not use these necessary cookies for analysis, tracking or advertising purposes.

Some of these cookies only contain information on certain settings and are not personally identifiable. They may also be necessary to enable user guidance, security and implementation of the site.

We use these cookies on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

You can set your browser so that it informs you about the placement of cookies. You can also delete them at any time via the corresponding browser setting and prevent the setting of new cookies. Please note that our web pages may then not be displayed in full and some functions may no longer be technically available.

5. Consent banner

We use a consent management platform (consent or cookie banner) on our websites when optional cookies are used. The processing in connection with the use of the consent management platform and the logging of the settings you have made is carried out on the basis of Art. 6 para. 1 lit. f GDPR, in our legitimate interest to play out our content according to your preferences and to be able to prove your consent(s). The settings you have made, the consent you have given and some of your usage data are stored in a cookie. This means that it is retained for subsequent page requests and your consent can still be tracked. You can find further information on this under the heading “Required cookies”.

The provider of any consent management platform that may be used acts for us as a service provider strictly bound by instructions (processor). An order processing contract in accordance with Art. 28 GDPR has been agreed.

6. Visitor measurement

We may use web analysis tools to design our websites in line with requirements. This creates user profiles on the basis of pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. In addition, it is possible that we may retrieve recognition features for your browser or your end device (e.g. a so-called browser fingerprint or your unabridged IP address). In this way, we are able to recognize returning visitors and count them as such.

In addition, we use the following functions as part of visitor measurement:

  • We enrich the pseudonymous data with additional data provided to us by third-party providers. In this way, we are able to record the demographic characteristics of our visitors, e.g. information on age, gender and place of residence.
  • We use a recognition method that allows us to record and subsequently evaluate the mouse pointer movements of our visitors.
  • We create exploratory click paths and browsing behavior analyses using contextual data, including the usage history on other pages with cookies also activated.

Data processing is based on your consent, provided that you have given your consent via our banners. You can revoke your consent at any time. Please follow this link and make the appropriate settings via our banner.

Which third-party providers do we use in this context?

Below we list the third-party providers with whom we work in connection with visitor measurement. If the data is processed outside the EU or the EEA (in particular in the USA) in this context, we provide information on the level of data protection in the following list.

  • Provider: None
  • Maximum storage duration: –
  • Adequate level of data protection: –
  • Revocation of consent: –

Tracking technologies from third-party providers for advertising purposes

We may use cross-device tracking technologies so that you can be shown targeted advertising on other websites based on your visit to our websites and so that we can recognize how effective our advertising measures were.

Data processing is based on your consent, provided that you have given your consent via our banner. Your consent is voluntary and can be revoked at any time.

How does tracking work?

When you visit our websites, it is possible that the third-party providers mentioned below may retrieve recognition features for your browser or your end device (e.g. a so-called browser fingerprint), evaluate your IP address, store or read recognition features on your end device (e.g. cookies) or gain access to individual tracking pixels.

The individual features can be used by third-party providers to recognize your device on other websites. We can commission the relevant third-party providers to place advertisements based on the pages you visit on our website.

What is cross-device tracking?

If you log in to the third-party provider with your own user data, the respective recognition features of different browsers and end devices can be linked with each other. If, for example, the third-party provider has created a separate feature for the laptop, desktop PC or smartphone or tablet you are using, these individual features can be assigned to each other as soon as you use a service of the third-party provider with your login data. In this way, the third-party provider can also target our advertising campaigns across different end devices.

Which third-party providers do we use in this context?

Below we list the third-party providers with whom we work for advertising purposes. If the data is processed outside the EU or the EEA (in particular in the USA) in this context, we provide information on the level of data protection in the following list.

  • Provider: –
  • Maximum storage duration: –
  • Adequate level of data protection: –
  • Revocation of consent: –

7. Embedded videos

We embed videos on our websites that are stored exclusively on our servers. For reasons of data protection, no third-party content is loaded when you visit our website.

8. Integration of other technical third-party content and functions

We use the technical functions and content of third-party providers listed below to display our websites.

Calling up our pages means that the content of the third-party providers is not reloaded, as the third-party content is integrated locally. It is possible that these functions and contents may be provided by third-party providers. As a result, the third-party provider may receive the information that you have accessed our site and the usage data technically required in this context.

We have no influence on further data processing by the third-party provider. Data processing takes place on the basis of your consent, provided that you have previously given your consent via our banner solution.

Please note that the use of third-party content and functions may result in your data being processed outside the EU or the EEA (in particular in the USA). For transfers to the USA, an adequate level of data protection is guaranteed on the basis of the adequacy decision (EU-U.S. Data Privacy Framework).

  • Provider: None
  • Technical function or content: –
  • Maximum storage period, if applicable: –
  • Adequate level of data protection: –
  • Revocation of consent: –

9. Further processors

We pass on your data to service providers who support us in the operation of our websites and the associated processes as part of order processing in accordance with Art. 28 GDPR. These are hosting service providers, for example. Our service providers are strictly bound by our instructions and are contractually obligated accordingly.

In the following, we will name the processors with whom we work if we have not already done so in the above text of the data protection declaration. If data can be processed outside the EU or the EEA in this context, we will inform you about this in the following table.

  • Data processor: nuts communication (Germany)
  • Purpose: Web hosting and support
  • Adequate level of data protection: processing only within the EU/EEA

10. Your rights as a data subject

When processing your personal data, the GDPR grants you certain rights as a data subject:

10.1. Right to information (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR.

10.2. Right to rectification (Art. 16 GDPR)

You have the right to demand the immediate correction of incorrect personal data concerning you and, if necessary, the completion of incomplete data.

10.3. Right to deletion (Art. 17 GDPR)

You have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies.

10.4. Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have lodged an objection to the processing, for the duration of the examination by the controller.

10.5. Right to data portability (Art. 20 GDPR)

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transmission of this data to a third party.

10.6. Right of withdrawal (Art. 7 GDPR)

If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 (3) GDPR. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected by this.

10.7. Right to object (Art. 21 GDPR)

If data is collected on the basis of Art. 6 para. 1 lit. f GDPR (data processing is necessary for the purposes of legitimate interests) or on the basis of Art. 6 para. 1 lit. e GDPR (data processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority), you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

10.8. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection regulations. The right to lodge a complaint can be asserted in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.

10.9. Assertion of your rights

Unless otherwise described above, please contact the office named in the legal notice to assert your rights as a data subject.

11. Contact details of the data protection officer

Our external data protection officer will be happy to provide you with information on the subject of data protection using the following contact details:

datenschutz süd GmbH
Wörthstraße 15 97082
Würzburg

Web: https://www.dsn-group.de/
E-Mail: office@datenschutz-sued.de

If you contact our data protection officer, please also indicate the responsible body named in the imprint.

Privacy information for applicants and employees

1. Detailed data protection information in accordance with Art. 13 and 21 GDPR

Compliance with data protection regulations is a high priority for our company. We would like to inform you below about the collection of your personal data by us:

2. Responsible body

Responsible for data collection and processing is Sembach GmbH Co. KG, Oskar-Sembach-Straße 15, 91207 Lauf an der Pegnitz, Germany, is responsible for data collection and processing.

3. Required data

When you apply, we process the data that we need from you as part of the application process. This may include contact details, all data related to the application (CV, certificates, qualifications, answers to questions, etc.) and, if applicable, bank details (to reimburse travel expenses). The legal basis for this arises from Art. 88 para. 1 GDPR in conjunction with. § 26 BDSG. We need data from you for recruitment. These questions are necessary for the performance of the employment relationship pursuant to Art. 6 para. 1 lit. b or f GDPR in conjunction with Art. 88 para. 1 GDPR, § 26 BDSG required:

  • In addition to master data required for the performance of the employment relationship (e.g. sick leave, vacation, special leave, other absences or working hours), this includes information about your employment with us and your application data.
  • In addition, we process data relevant to tax and social security law, such as your tax identification number, tax class, any child allowances, marital status and information on religious denomination (if relevant under tax law) in accordance with Section 39 e of the German Income Tax Act (Einkommenssteuergesetz) – if necessary also directly with the responsible tax authorities.
  • We also collect information on your health insurance and, if applicable, on other employment-related supplementary insurances such as pension funds, direct insurances, etc. in order to be able to meet any payment obligations and reporting obligations.
  • In the case of company health insurance, we transmit your data (personnel number, gender, surname, first name, date of birth, postal address) to the insurer AXA so that you can make use of these additional benefits. The declaration of release from the duty of confidentiality issued by you in favor of the insurer is administered directly by the insurer AXA. The transfer of this declaration of release from the duty of confidentiality therefore takes place directly between you and the insurer AXA. In addition, the information on the use of your data by the insurer applies: www.axa.de/datenschutz
  • As part of the calculation of social security contributions, we ask about your parental status. We need this information to determine whether a supplementary contribution to long-term care insurance is payable in accordance with Section 55 (3) of the German Social Security Code XI (SGB XI). We may ask you to provide evidence of your parental status in the form of appropriate documents. These documents are filed in the personnel file.
  • If you are under the age of majority at the time of recruitment, we may ask you to submit an initial medical examination certificate. We are legally obliged to do this in accordance with § 32 of the Youth Employment Protection Act (JArbSchG). In certain cases, we will ask you to present a work permit or residence permit. This will only be done if it is absolutely necessary for checking the legality of your employment.
  • In connection with compliance with customs regulations on export control, we compare your surname, first name and, if applicable, date of birth with so-called sanctions lists on a monthly basis, starting with your employment. This comparison is carried out by a precisely defined group of responsible persons from the HR department, supported by an external service provider on the basis of an order processing contract. The resulting documentation is stored with access protection until the next regular inspection – max. 2 months.
  • In connection with data protection awareness-raising measures, your business contact details are processed by an external service provider on behalf of your employer for the following purposes: sending review emails, providing feedback to users in the context of learning pages in the browser, providing an e-learning platform, providing an evaluation (reporting dashboard).

The provision of your data is necessary for the conclusion of the contract. Failure to provide the data may have legal disadvantages for you, such as the loss of legal positions (e.g. no employment contract can be concluded with you without the provision of data).

4. Data deletion

If there is no statutory retention period, the data will be deleted as soon as storage is no longer necessary or the legitimate interest in storage has expired. In individual cases, individual data may be stored for longer periods (e.g. travel expense reports). The duration of storage then depends on the statutory retention obligations, e.g. from the German Fiscal Code (6 years) or the German Commercial Code (HGB, 10 years).

5. Data processing on the basis of consent

If you give your consent, data processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR. Your consent can be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal. If consent is withdrawn, we will cease the corresponding data processing.

When hiring, we ask whether you have a severe disability. This question is asked in order to protect your rights under the German Social Code IX and to calculate any compensation levy in accordance with Section 77 of the German Social Code IX. You only have to answer this question after six months of employment. Before that, answering is voluntary.

If we ask you for photos as part of the recruitment process, this is done on the basis of a separate declaration of consent. The submission is voluntary and can be revoked by you in writing at any time.

6. Confidential treatment of your data

We will of course treat your data confidentially. This means that only the persons and departments that are responsible for the specific case will have access to your data. When you are hired, we keep a personnel file in which we store all key information required for your employment relationship. If you would like to view the contents of your personnel file, please contact the HR department.

We only transfer data to third parties if this is absolutely necessary and there is a legal basis, e.g. to

  • Banks for the payment of wages and salaries,
  • social security institutions and tax offices to comply with our legal obligations.
  • If insurance policies have been taken out, to insurance companies for the purpose of premium payment / account reconciliation / registration and deregistration.
  • As part of the training to the IHK for registration of the vocational training contract.

If necessary, we use service providers who are strictly bound by our instructions and who support us, for example, in the areas of IT or the archiving and destruction of documents and with whom separate contracts for order processing have been concluded.

In addition, there may be further legal obligations to transfer data in individual cases, but these may only arise in specific individual cases and not in general.

7. Automated decision-making and profiling

No automated decision-making, including profiling, takes place with your data in accordance with Art. 22 §1 and §4 GDPR.

8. Your data protection rights

As a data subject, you have the right to information about the personal data concerning you (Art. 15 GDPR) and to rectification of incorrect data (Art. 16 GDPR) or to erasure if one of the reasons stated in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued. There is also the right to restriction of processing if one of the conditions set out in Art. 18 GDPR applies and, in the cases set out in Art. 20 GDPR, the right to data portability.

You can assert your data protection rights here:

Sembach GmbH Co. KG
Andrea Doms
Oskar-Sembach-Str. 15
91207 Lauf a. d. Pegnitz
personal@sembach.de

As a data subject, you also have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you is in breach of data protection regulations. The supervisory authority responsible for you is the Bavarian State Office for Data Protection Supervision (BayLDA), Postfach 1349, 91504 Ansbach, phone: +49 (0) 981 180093-0, fax: +49 (0) 981 180093-800, poststelle@lda.bayern.de.

9. Our data protection officer

We are supported by our data protection officer in the fulfillment of our data protection obligations.

The contact details of our data protection officer are:

datenschutz süd GmbH Wörthstr. 15
97082 Würzburg
office@datenschutz-sued.de
www.datenschutz-nord-gruppe.de

Privacy information business partners

1. Responsible body

Co.KG, Oskar-Sembach-Straße 15, 91207 Lauf an der Pegnitz, Germany, is responsible for data collection and processing.

2. Data processing for the purposes of legitimate interests

We process your contact data within the company for internal administrative purposes and, if necessary, for the purpose of direct advertising.

Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR and in the interest of promoting the conclusion or execution of contracts and other business relationships, to carry out the associated customer service or to handle internal administrative tasks (such as the administration of business contacts, accounting, etc.).

In addition, your data is processed on the basis of Art. 6 para. 1 lit. f GDPR in the interest of sending you advertising tailored to you by e-mail if the legal requirements are met and to inform you about our company and our products by post or telephone.

The data will generally be deleted after the end of the business relationship or as soon as it is no longer required for the purpose of direct advertising.

In the event of the existence of statutory and contractual retention periods, the data concerned will be archived for the duration of these periods.

3. Data processing for the performance of a contract

We may also process your collected data in accordance with Art. 6 para. 1 lit. b GDPR for the fulfillment of contracts and other business relationships that we maintain with you as an individual. This includes, for example, the processing of purchase orders, deliveries or payments or the assertion of warranty rights. If necessary, personal data will be passed on to the companies involved in the processing of this contract, such as credit institutions for payment processing. The data required to fulfill the contract will be deleted after termination of the contractual relationship. The data will not be deleted if receivables are still outstanding after termination of the contract and are to be collected. In the event of the existence of statutory and contractual retention periods, the data concerned will be archived for the duration of these periods.

4. Data processing for compliance with a legal obligation

We may process your data in order to comply with legal obligations that may arise from tax law, foreign trade law or sanction law regulations, for example. Data processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR.

The data is archived for the duration of the respective statutory retention period and then deleted.

5. Data processing on the basis of consent

We may process your data for the purpose of direct advertising by e-mail if you have given us your consent to do so and the processing is not already based on the exercise of legitimate interests.

The data is processed on the basis of the consent given in accordance with Art. 6 para. 1 lit. a GDPR.

We delete your data as soon as it is no longer required for the purpose of direct advertising.

6. Data acquisition when ordering our sample box

Scope, purposes and legal basis of data proce

We process your personal data (mandatory information: Title, first and last name, business e-mail address, company address) as part of the processing of your order for our sample box for sending an electronic order confirmation and for shipping to the company address you have provided. If you also voluntarily provide us with your business telephone number, we will use this to contact you following your order to initiate further contract negotiations.
Data processing is carried out for the fulfillment of the contract and for further contract initiation on the basis of Art. 6 para. 1 lit. b GDPR if you as a natural person are our client (customer).
If you are an employee of a client (customer) and order our sample box for them, we process your data in our legitimate interest in the fulfillment of the contract and further contract initiation. Our legitimate interest outweighs any possible counter-interest on your part in not processing your business contact data. The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR.
If you have also given us your separate consent, your data (title, first and last name, business e-mail address) will be processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in order to inform you in future by e-mail about products, services, events and promotions of Sembach GmbH Co. KG and to contact you for advertising purposes. You can revoke yourconsent at any time with effect for the future by sending an e-mail to info(at)sembach.de or by using the other contact details provided in the privacy policy.
Finally, we process your personal data (title, first and last name, company address) for the purpose and in our legitimate interest of informing you by post about products, services, events and promotions of Sembach GmbH Co. KG and to address you in advertising. Our legitimate interest in this outweighs any possible counter-interest on your part in not processing your business contact data. The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR.

Storage duration

We store your data as long as this is necessary to fulfill the aforementioned purposes, you have not objected to the data processing or have not exercised your right of revocation and the processing is not necessary to achieve other purposes mentioned in this declaration, in particular not to fulfill legal storage or documentation obligations.

Recipient

The recipients of your data are the shipping service providers we use to send the sample box. Web service provider: nuts communication GmbH, Karl-Grillenberger-Str. 3a, 90402 Nuremberg

7. Automated decision-making and profiling

In general, no automated decision-making, including profiling, takes place with your personal data in accordance with Article 22 (1) and (4) GDPR.

An exception exists if we use your personal data in connection with a check by the credit reference agency CRIF. Details can be found in the corresponding chapter.

8. Data recipient

We only transfer your data to third parties if we are authorized to do so under data protection law. We will neither sell your personal data to third parties nor market it in any other way. Within the company, only authorized Sembach employees with the appropriate responsibilities have access to your personal data. Your data may also be passed on by us to external service providers (e.g. IT service providers, companies that destroy or archive data), which support us in data processing within the framework of order processing strictly in accordance with instructions. Data processing outside the EU or the EEA does not take place.

9. Processing of your data with the involvement of the credit agency CRIF

We transmit personal data collected within the scope of this contractual relationship regarding the application, execution and termination of this business relationship as well as data on non-contractual or fraudulent behavior to CRIF GmbH, Leopoldstraße 244, 80807 Munich.

The legal basis for this transfer is Article 6 para. 1 lit. b) and f) of the General Data Protection Regulation (GDPR). The exchange of data with CRIF GmbH also serves to fulfill legal obligations to carry out creditworthiness checks (§§ 505a and 506 of the German Civil Code, BGB).

CRIF GmbH processes the data received and also uses it for the purpose of profiling (scoring) in order to provide its contractual partners in the European Economic Area and in Switzerland and, if applicable, other third countries (insofar as an adequacy decision of the European Commission exists for these) with information, among other things, to assess the creditworthiness of natural persons.

Further information on the activities of CRIF GmbH can be found in its information sheet or online at www.crif.de/privacy-policy.

10. Contact details of the data protection officer

We are supported by our data protection officer in the fulfillment of our data protection obligations.

The contact details of our data protection officer are:

datenschutz süd GmbH
Wörthstr. 15
97082 Würzburg
office@datenschutz-sued.de
tel. +49 (0) 931 304 976 0

11. Rights of the data subject

Data subjects have the right to obtain information from the controller about the personal data concerning them and to have incorrect data corrected or deleted if one of the reasons stated in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued. There is also the right to restriction of processing if one of the conditions set out in Art. 18 GDPR applies and, in the cases set out in Art. 20 GDPR, the right to data portability.

If data is collected on the basis of Art. 6 para. 1 lit. e GDPR (data processing for the fulfillment of official tasks or for the protection of the public interest) or lit. f GDPR (data processing to safeguard legitimate interests), the data subject has the right to object to the processing at any time on grounds relating to his or her particular situation in accordance with Art. 21 GDPR. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.

If data is processed in accordance with Art. 6 para. 1 lit. a GDPR (data processing on the basis of consent), the data subject has the right to withdraw consent at any time in accordance with Art. 7 para. 3 GDPR. The objection and revocation are effective for the future from the time they are exercised and do not affect the lawfulness of the processing that has already taken place.

12. Right to lodge a complaint with a supervisory authority

Every data subject has the right to lodge a complaint with a supervisory authority if they consider that the processing of data relating to them infringes data protection regulations. The right to lodge a complaint may be exercised in particular with a supervisory authority in the Member State of the data subject’s habitual residence or place of the alleged infringement. In Bavaria, the competent supervisory authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, phone: +49 (0) 981 180093-0, fax: +49 (0) 981 180093-800, e-mail: poststelle@lda.bayern.de.

Data protection notice for social media

When you visit our social media pages, data relating to you is processed. In the following, we would like to inform you in accordance with Art. 13 of the General Data Protection Regulation (GDPR) about how we collect and process of your personal data and your rights resulting from this

1. Controller

We, Sembach GmbH Co. KG, operate the following social media:

You can find our contact details in the imprint.

2. Our data processing

Public relations
The data you provide on our social media pages, such as user names, comments, videos, images, likes, public messages, etc., are published by the social media platform and are not processed by us for any other purposes at any time. We only reserve the right to delete content should this be necessary. We may share your content on our site if this is a function of the social media platform and communicate with you via the social media platform.

If you send us an enquiry on the social media platform, we may also refer you to other, secure communication channels that guarantee confidentiality, depending on the content. For example, you can send us your enquiry at any time to the address given in the imprint or to info@sembach.de. You are responsible for choosing the appropriate communication channel.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. We process your data in the legitimate interest of public relations work for our company and being able to communicate with you.

3. Data processing as joint controllers

We are jointly responsible for some of the processing activities with the respective operator of the social media platform.

We have concluded the necessary agreement in accordance with Art. 26 GDPR, provided that the operator of the social media platform allows this.

Facebook:

LinkedIn:

The main elements of the joint controllership can be found in the following section.

Statistics (Insights)

The social media platforms used regularly compile statistics (insights) based on usage data that contain information about your interaction with our social media site. We cannot influence or prevent the performance and provision of these statistics.

However, we do not utilise optional statistics from the social media platform.

We process the aforementioned information (statistics) in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR in the legitimate interest of validating the use of our social media pages and improving our content in a target group-oriented manner.

Target group- orientated advertising

We do not use target group definition based on location data. We do not transfer any personal data to the operator of the social media platform as part of the target group definition.

4. Data processing by the operator of the social media platform

The operator of the social media platform uses web tracking methods. Web tracking can also take place regardless of whether you are logged in or registered with the social media platform.

We would therefore like to point out that it cannot be ruled out that the operator of the social media platform may use and evaluate your profile and behavioural data for its own purposes. We have no influence on the processing of your data by the operator of the social media platform. Please bear this in mind when using the social media platform.

For more information on data processing by the operator of the social media platform, configuration options to protect your privacy and other objection options, please refer to the operator’s privacy policy.

5. Storage period

We erase your personal data when it is no longer necessary for the processing purposes mentioned above, unless the controller has a legal duty to store it beyond this period.

6. Your rights as a data subject

As a user, you have the option of asserting the following rights both against us and against the operator of the social media platform if the requirements are met:

6.1. Right to information (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right of information about your personal data and to the information listed in detail in Art. 15 GDPR.

6.2. Right to rectification and erasure („right to be forgotten“) (Art. 16 and 17 GDPR)

You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, where applicable, to have incomplete personal data completed. You also have the right to demand that personal data concerning you will be erased without undue delay if one of the grounds listed in Art. 17 GDPR applies, e.g. if the data is no longer necessary in relation to the purposes for which they were collected or otherwise processed.

6.3. Right to restriction (Art. 18 GDPR)

You have the right to obtain from the controller restriction of processing, if one of the requirements listed in Art. 18 GDPR is met, e.g. if you objected to processing, for the duration of any review.

6.4. Right to data portability (Art. 20 GDPR)

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transfer of this data to a third party.

6.5. Right to object (Art. 21 GDPR)

If data is collected on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR (data processing is necessary for the purposes of legitimate interests) or on the basis of Art. 6 para. 1 sentence 1 lit. e GDPR (data processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority), you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

6.6. Right of withdrawal (Art. 7 GDPR)

If the processing of data is based on your consent, you have the right to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 para. 3 GDPR. Please note that the withdrawal is only effective for the future.

Processing that took place before the withdrawal is not affected and remains lawful.

6.7. Right of appeal

In accordance with Art. 77 GDPR, as a data subject, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of your personal data violates data protection provisions. The right of complaint may, in particular, be brought before a supervisory authority in the Member State of the place of your habitual residence, your workplace, or of the place of the alleged infringement.