Data Protection

We at Grünbeck Wasseraufbereitung GmbH are pleased that you have decided to visit our website and by your interest in our company. We take the protection of your personal data very serious and want you to feel good and secure when visiting our website.
Protecting and safeguarding all personal data with which you entrust us is therefore a particular concern for us. This document will provide you with more information on how we use and process your personal data.

In the following, we describe which data is processed during your stay on our website.

 

1.    Name and address of the person responsible

The person responsible within the scope of the Datenschutz-Grundverordnung (General Data Protection Regulation) and other national data protection legislation of the member states of the European Union and other privacy law provisions is as follows:

Grünbeck Wasseraufbereitung GmbH

Josef-Grünbeck-Strasse 1

89420 Hoechstaedt/GermanyGermany

Phone: +49-9074 41-0

E-mail: info@gruenbeck.com 

Website: www.gruenbeck.com

 

2.    Name and address of the data protection officer

Data Protection Officer

Grünbeck Wasseraufbereitung GmbH

Josef-Grünbeck-Str. 1

89420 Hoechstaedt/Germany

E-mail: Datenschutzbeauftragter@gruenbeck.de 

Fax: +49-9074/4170-303

 

3.    General information on data processing

Personal data

Personal data constitutes individual information on the personal or factual situation of a determined or determinable natural person. This includes information such as the IP address, your proper name, your address, your telephone number and your date of birth. Information that cannot be directly connected to your real identity, such as favourite websites or the number of users to a website, are not considered to be personal data.

Scope of the processing of personal data

We process the personal data of our users basically only insofar as required for the provision of a functional website, as well as our content and services.


Legal basis for the processing of personal data

Obtaining the consent of the pertinent person for the processing of personal data takes place on the legal basis of Art. 6 Sect. 1 lit. a EU-Datenschutzgrundverordnung (DSGVO) (General Data Protection Regulation (GDPR)).

Processing personal data intended for the fulfilment of a contract of which the affected person is one of the contracting parties takes place on the legal basis of Art. 6 Sect. 1 lit. b DSGVO (General Data Protection Regulation (GDPR)). This also applies to processing procedures required to perform precontractual measures.

If a processing of personal data is required for the fulfilment of a legal obligation to which our company is subject, Art. 6 Sect. 1 lit. c DSGVO (General Data Protection Regulation (GDPR)) serves as the legal basis.

If the processing of this data is required to safeguard a legitimate interest of our company or third party and the interests, basic rights and basic freedoms of the user do not prevail over the interest of our company, Art. 6 Sect. 1 lit. f DSGVO (General Data Protection Regulation (GDPR)) serves as the legal basis for processing.


Use and disclosure of personal data

Within the course of our business processes, we may need to pass on your data to a partner that is contractually connected to Grünbeck (an overview of these partners can be found here) for processing.
If you do not specify a specialist installer from your region, we reserve the right to pass on your data to a specialist installer from your region for the creation of a quotation. In this case, you consent that Grünbeck, a contractually connected partner of Grünbeck or a specialist installer in your region is authorised to contact the person named in the inquiry by e-mail, telephone, fax and text message in order to create a quotation.
Insofar as you have given your consent, Grünbeck or a contractually connected partner may contact you for advertising purposes (product information/newsletter/promotions) by e-mail, telephone, fax and text message. You can revoke this consent at any time with future effect from Grünbeck and/or the contractually connected partner of Grünbeck.

Consent for the establishment of contact for advertising purposes

By giving your consent for the establishment of contact for advertising purposes, you agree that you will received personalised information on news, products, applications, events and advertising promotions and that you can be contacted by e-mail, text message, telephone, push notifications or post for such purposes. You can revoke your consent at any time.

Data deletion and storage duration

The personal data of the affected person are deleted or blocked as soon as the processing purposes is not longer relevant. In addition, processing can take place if provided by European or national legislators in ordinances, laws or other regulations subject to the law of the European Union to which the responsible party is subject. The data is blocked or deleted even if a storage term required by the named standards expires unless the data must remain stored for a conclusion of a contract or fulfilment of a contract.

 

4.    Provision of the website and creation of log files

Description and scope of data processing
Each time our website is called, our system automatically collects data and information from the computer system of the computer calling the site.
In the process, the following data is collected:
(1)    Information on the browser type and version used
(2)    The operating system of the user
(3)    The Internet service provider of the user
(4)    The IP address of the user
(5)    Date and time of access
(6)    Websites from which the system of the user has reached our website
(7)    Websites called by the system of the user from our website

The data is also saved in the log files of our system. Processing this data together with other personal data of the user does not take place.

Legal basis for data processing
The legal basis for the temporary storage of the data and log files is our legitimate interest according to Art. 6 Sect. 1 lit. f DSGVO (General Data Protection Regulation (GDPR)).

Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable a delivery of the website to the computer of the user. For this purpose, the IP address of the user must remain saved for the duration of the session.
Storage in log files takes place to guarantee the functionality of the website. In addition, we use the data to optimise the website and guarantee the security of our IT systems. In this context, the data is not analysed for marketing purposes.

Duration of storage
The data is deleted as soon as they are no longer required to achieve the purpose of their collection. If a collection of the data is required for the provision of the website, this occurs when the respective session has come to an end.

5.    Use of cookies

Description and scope of data processing
Our website uses cookies. Cookies are text files that are locally stored in the Internet browser itself and/or on the computer system of the user by the Internet browser. If the user calls a website, a cookie can be saved on the operating system of the user. This cookie contains a characteristic sequence of characters that enables a clear identification of the browser the next time the website is called.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser remains identifiable even after a page change.
In the process, the following data is stored and transmitted in the cookies:
(1)    Language settings
(2)    Login information

Legal basis for data processing
The legal basis for the processing of personal data using cookies is our legitimate interest according to Art. 6 Sect. 1 lit. f DSGVO (General Data Protection Regulation (GDPR)).

Purpose of data processing
The purpose of the utilisation of technically required cookies is to simplify the use of websites for the user. Some functions of our website cannot be provided without the use of cookies. For these functions, the browser must be able to be recognised even after a page change.
We require cookies for the following applications:
(1)    Assumption of language settings
(2)    Saving of search terms

The user data collected by technically required cookies is not used to create user profiles.

The abovementioned purposes are also the basis for our legitimate interest according to Art. 6 Sect. 1 lit. f DSGVO (General Data Protection Regulation (GDPR)).
Duration of storage, possibility of revocation and elimination

Cookies are stored on the computer of the user and sent to our site by the computer. As a user, you therefore also have complete control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or limit the transmission of cookies. Previously stored cookies can be deleted at any time. This deletion procedure can take place automatically. If cookies are deactivated for our website, it is possible that the full scope of all functions of the website will no longer be able to be used.

The transmission of flash cookies can not be prevented through the settings of the browser, but rather by changing the settings of Flash Player.

 

6.    Registration

Description and scope of data processing

On our website, we offer users the opportunity to register by entering personal data. The data is entered on an entry screen and sent to us.
In the process, the following data is stored and transmitted in the cookies:
(1)    The IP address of the user
(2)    Date and time of registration

Product registration
By consenting to our data protection provisions, you confirm that the personal data you specified are correct and actually describe you and no other natural person. If you are not registering a product for yourself, but rather for another natural person, you confirm that you have a release to do so by consenting to our data protection provisions. In this case, you also confirm that you have the consent of the specified person to establish contact for advertising purposes, whereby Grünbeck, a contractually connected partner of Grünbeck or a specialist installer in the vicinity of the specified person is authorised to contact this person by e-mail, telephone, fax and text message.

Legal basis for data processing
The legal basis for the processing of the data is the presence of a declaration of consent of the user according to Art. 6 Sect. 1 lit. a DSGVO (General Data Protection Regulation (GDPR)).
If the registration serves the fulfilment of a contract whose contracting party is the user or if it serves the performance of precontractual measures, the additional legal basis for processing the data is Art. 6 Sect. 1 lit. b DSGVO (General Data Protection Regulation (GDPR)).

Purpose of data processing
A registration of the user is required for the provision of certain content and services on our website.
A registration of the user is required for the fulfilment of a contract with the user or for the performance of precontractual measures.

Duration of storage
The data is deleted as soon as they are no longer required to achieve the purpose of their collection.
This is the case for data collected during the registration procedure when the registration on our website is revoked or changed.
This is the case for data collected during the registration procedure for the fulfilment of a contract or for the performance of precontractual measures if the data is no longer required for the performance of the contract. Even after the conclusion of the contract, a requirement to store personal data of the contracting party may exist in order to meet contractual or legal obligations.

Possibility of revocation and elimination
As the user, you can revoke the registration at any time. You can change the data you have saved at any time.
If the data is required for the fulfilment of a contract or to perform precontractual measures, a premature deletion of the data is possible only insofar as it does not contradict any contractual or legal obligations regarding a deletion.
 

7.    Contact form and e-mail contact

Description and scope of data processing
Our website has a contact form that can be used for establishing contact electronically. If a user takes advantage of this opportunity, the data entered on the entry screen is sent to us and stored.
At the point in time at which the message is sent, the following data is saved:
(1)    The IP address of the user
(2)    Date and time of registration

For the processing of the data, your consent is obtained within the scope of the sending procedure and you are referred to the data protection declaration.
Alternatively, contact is possible through the provided e-mail address. In this case, the personal data of the user transmitted by e-mail is saved and forwarded according to Section 3 if pertinent.

Legal basis for data processing
The legal basis for the processing of the data is the presence of a declaration of consent of the user according to Art. 6 Sect. 1 lit. a DSGVO (General Data Protection Regulation (GDPR)).
The legal basis for the processing of the data sent in an e-mail is Art. 6 Sect. 1 lit. f DSGVO (General Data Protection Regulation (GDPR)). If the objective of the e-mail contact is the conclusion of a contract, the additional legal basis for processing the data is Art. 6 Sect. 1 lit. b DSGVO (General Data Protection Regulation (GDPR)).

Purpose of data processing
We process personal data from the entry screen solely to establish contact, as well as advertising purposes according to Section 3. An establishment of contact by e-mail also constitutes a necessary, legitimate interest in the processing of the data.
The other personal data processed during the sending procedure are used to prevent a misuse of the contact form and guarantee the security of our IT systems.

Duration of storage
The data is deleted as soon as they are no longer required to achieve the purpose of their collection.

Possibility of revocation and elimination
The use may revoke his or her consent for the processing of personal data at any time with future effect. If the user contacts by e-mail, he or she may revoke the storage of his or her personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored within the course of establishing contact is deleted in this case.

 

8.    Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. Google Analytics uses cookies, which are text files that are stored on your computer to permit an analysis of your use of the website. The data generated by the cookie regarding your use of this website is usually sent to a Google server in the United States and stored there. In case of an activation of IP anonymisation on this website, your IP address is previously shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is sent to a Google server in the United States and stored there only in exceptional cases.On behalf of the website operator, Google will use this information to analyse your use of the website, compile reports on website activities and render additional services connected to the use of the website and Internet for the website operator. The IP address transferred from your browser within the scope of Google Analytics is not combined with other data from Google. You can prevent the saving of cookies through a corresponding browser software setting, but we would like to inform you that you will possibly not be able to use all functions of this Website to the full extent in this case. In addition, you can prevent the recording of the data generated by the cookie related to your use of the Website (including your IP address), as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link. Detailed information can be found under General information on Google Analytics. Please note that Google Analytics has been expanded by the code “gat._anonymizeIp();” on this website to guarantee an anonymised collection of IP addresses.

 

9.    XING

The “XING Share Button” is used on this website. When this website is called, your browser sets up a short-term connection to the servers of XING AG (“XING”), by means of which the “XING Share Button” functions (especially in regard to the calculation/display of the counter value) are executed. XING does not save your personal data when this website is called. In particular, XING does not store IP addresses. Your use behaviour is not analysed through the utilization of cookies in connection with the “XING Share Button”. The respectively current data protection information on the “XING Share Button” and supplementary information can be called on this website: www.xing.com/app/share;

 

10.    Rights of people affected

If your personal data is processed, you are an affected person within the scope of the DSGVO (GDPR) and have the following rights in regard to the party responsible.

Right to information
You can request a confirmation from the party responsible as to whether we are processing any of your personal data.
If such processing is taking place, you can request the following information from the party responsible:
(1)    The purposes for which the personal data is processed
(2)    The categories of personal data that is processed
(3)    The recipients and/or categories of recipient to whom your personal data has been or will be disclosed
(4)    The planned duration of the storage of your personal data or, if concrete information in this regard is not possible, criteria for determining the storage duration
(5)    The existence of a right to the correction or deletion of your personal data, the right to a limitation of processing by the party responsible or a revocation right against this processing
(6)    The existence of a right to complain to a supervisory body
(7)    All available information on the origin of the data if the personal data is not collected from the affected person
You have the right to demand information on whether your personal data is transmitted to a third-party country or international organisation. In this context, you can demand to be informed about suitable guarantees in conjunction with the transmission in accordance with Art. 46 DSGVO (GDPR).

Right to correction
You have a right to demand corrections and/or completion of data from the party responsible insofar as your processed personal data is incorrect or incomplete. The party responsible must make the correction immediately.

Right to the limitation of processing
Under the following prerequisites, you can demand the limitation of the processing of your personal data:
(1)    If you dispute the correctness of your personal data for a duration that enables the party responsible to check the correctness of your personal data
(2)    The process is unlawful and you reject the deletion of your personal data and demand the limitation of the use of the personal data instead
(3)    The party responsible no longer requires the personal data for the purposes of processing, but you require this data for the assertion, exercise or defence of legal claims or
(4)    If you object to processing according to Art. 21 Sect. 1 DSGVO (GDPR) and it has not yet been determined whether the legitimate grounds of the party responsible have priority over your own
If the processing of your personal data is limited, this data – with the exception of its storage – may be processed only with your consent or for the assertion, exercise or defence of legal claims or for the protection of rights against other natural or legal persons or for reasons of an important public interest of the European Union or member state thereof.
If the limitation of processing was implemented according to the abovementioned prerequisites, you will be informed by the party responsible before the limitation is rescinded.

Right to deletion
a)    Obligation to delete
You can demand that the party responsible deletes your personal data immediately and the party responsible is obliged to delete this data immediately insofar as one of the following reasons applies:
(1)    Your personal data is no longer required for the purposes for which it was collected and/or processed in another manner.
(2)    You revoke your consent on which the processing according to Art. 6 Sect. 1 lit. a or Art. 9 Sect. 2 lit. a DSGVO (GDPR) was based and no further legal basis for processing exists.
(3)    You object to processing according to Art. 21 Sect. 1 DSGVO (GDPR) and no legitimate grounds for processing have priority or you object to processing according to Art. 21 Sect. 2 DSGVO (GDPR).
(4)    Your personal data was unlawfully processed.
(5)    The deletion of your personal data is required for the fulfilment of a legal obligation according to the law of the European Union or the member states to which the party responsible is subject.
(6)    Your personal data was collected in regard to offered information society services according to Art. 8 Sect. 1 DSGVO (GDPR).

b)    Information to third parties
If the party responsible has published your personal data and is obliged to delete this data according to Art. 17 Sect. 1 DSGVO, it will take appropriate measures, even of a technical nature, under consideration of the available technology and implementation costs to inform the parties responsible for the processing of personal data that you as the affected person have demanded the deletion of all links to this personal data or that you have demanded copies or reproductions of this personal data.
c)    Exceptions
The right to deletion is not applicable as long as processing is required:
(1)    For the exercising of the right to freedom of expression and information
(2)    For the fulfilment of a legal obligation that requires processing according to the law of the European Union or member states to which the party responsible is subject or for the exercising of a task that lies within public interest or in the exercising of public authority for which the party responsible has been appointed
 (3)    For the assertion, exercise or defence of legal claims

Right to notification
If you have asserted your right to correction, deletion or limitation of processing to the party responsible, the party responsible is obliged to inform all recipients to which your personal data has been disclosed of the correction or deletion of your data or the limitation of its process unless such an undertaking proves impossible or is associated with undue effort.
You have the right to be notified of such measures by the recipient.

Right to data transferability
You have the right to obtain any personal data you have provided to the party responsible in a structured, common, machine-readable format. In addition, you have the right to transfer this data to another party responsible without prevention by the party responsible to which you have provided the personal data if:
(1)    The processing is based on consent granted according to Art. 6 Sect. 1 lit. a DSGVO (GDPR) or Art. 9 Sect. 2 lit. a DSGVO (GDPR) or pursuant to a contract according to Art. 6 Sect. 1 lit. b DSGVO (GDPR).
(2)    Processing takes place using an automated method.
In exercising this right, you furthermore have the right to ensure that your personal data is transferred directly from one party responsible to the other if technically feasible. The freedoms and rights of other people must not be violated in the process.
The right to data transferability does not apply to the processing of personal data required for the exercising of a task that lies in the public interest or in the exercising of public authority for which the party responsible has been appointed.

Right of objection
For reasons arising from your particular situation, you have the right to object to the processing of your personal data that takes place on the basis of Art. 6 Sect. 1 lit. e or f DSGVO (GDPR) at any time; this also applies to any profiling based on these provisions.
The party responsible will no longer process your personal data unless it can prove it has grounds for processing that are absolutely worthy of protection that have priority over your interests, rights and freedoms or unless the processing of this data serves the assertion, exercise or defence of legal claims.
If your personal data is processed to engage in direct advertising, you have the right to object to the processing of your personal data for the purpose of such advertising at any time; this also applies to profiling insofar as this profiling is connected to such direct advertising.
If you object to the processing of your personal data for the purpose of direct advertising, your personal data will no longer be processed for this purpose.
In connection with the use of information society services, you have the opportunity – Directive 2002/58/EC notwithstanding – to exercise your right of objection using automatic methods for technical specifications apply.

Right to the revocation of the declaration of consent pursuant to data protection law
You have the right to revoke your declaration of consent pursuant to data protection law at any time with future effect. Through the revocation of consent, the legality of any processing performed up to the point in time of the revocation of consent is not affected.

Right to complain to a supervisory body
Notwithstanding another legal remedy in regard to administrative and judicial law, you have the right to complain to a supervisory body, especially in the member state of your place of residency, your workplace or the place of the supposed violation if you are of the opinion that the processing of your personal data violates the DSGVO (GDPR).
The supervisory body to which the complaint has been submitted informs the complainant about the status and result of the complaint, including the possibility of a judicial legal remedy according to Art. 78 DSGVO (GDPR).

Obligation to provide personal data
Insofar as a contract exists between you and our company, you must provide any personal data that is legally required for the assumption, execution and termination of the contractual relationship and for the fulfilment of the associated contractual obligations or for the collection of such data. Without the provision of this data, we are generally not able to conclude a contract with you, execute it and terminate it.
Insofar as the processing of data within the scope of the use of this website is neither necessary nor legally required for the assumption, execution and termination of a contractual relationship or for the fulfilment of contractual obligations, your data is provided on a voluntary basis. Please consider that certain functionalities of the website or services in case of the non-provision of the required data cannot be used in this case.


Data protection guidelines for the processing of job applicant data

Which personal data do we collect and where does it come from?

Within the scope of an application process, we process the following personal data:

•    Your master data (e.g., first name, last name, name affixes, date of birth, etc.)
•    Contact data (e.g., private address, mobile/fixed-net telephone number, e-mail address)
•    Additional data from the application documents (e.g., skills and abilities)
•    Work and/or residency permits, if pertinent
•    If relevant or legally required for the advertised position: suitability in regard to health

Your personal data is fundamentally collected directly from you within the scope of the application process, particularly from the application documents and job interview(s) You yourself are responsible for the correctly of the provided data.

In addition, we might process data obtained permissibly from publicly accessible sources, such as professional networks.

For what purposes and on what legal basis is data processed?
We process your personal data under consideration of the EU Daten¬schutz-Grundverordnung (DSGVO) (General Data Protection Regulation (GDPR)) and the Bundesdatenschutzgesetzes (BDSG – German Federal Data Protection Act).

The processing of data primarily serves the selection of applicants and/or the establishment of an employment relationship. The overriding legal basis here is Art. 88 Sect. 1 DSGVO (GDPR) in conjunction with § 26 Sect. 1 BDSG.

Your data will be used solely to occupy the concrete position for which you have applied.

The processing of health data for the assessment of your ability to work according to Art. 9 Sect. 2 h) in conjunction with § 22 Abs. 1 b) BDSG may be required.

How long is your data stored?

In case of a rejection, your personal data will be stored for the duration of the application procedure and deleted six months after its conclusion insofar as you have not granted us your consent for longer storage (applicant pool).

In case of employment, we will add your application documents to your personnel file. At the end of the employment relation¬ship, the personal data that we are legally obliged to keep on file will continue to be stored. This storage is determined by legal obligations of verification and storage regulated by the German Commercial and Fiscal Codes, amongst others. The terms of storage amount to up to ten years according to these sources. It may also occur that personal data is stored for the period in time in which claims can be asserted against us (legal period of limitation between three and thirty years).
 
Who receives your data?

Within our company, only those persons and function (e.g., department, works council, the representative for employees with disabilities) involved in the hiring decision receive your personal data.

What rights can you assert as the person affected?

You have the rights from Art. 15 – 22 DSGVO (GDPR):

•    Right to information (Art. 15 DSGVO (GDPR)):
•    Right to correction (Art. 16 DSGVO (GDPR)):
•    Right to deletion (Art. 17 DSGVO (GDPR)):
•    Right to the limitation of processing (Art. 18 DSGVO (GDPR)):
•    Right to object to processing (Art. 21 DSGVO (GDPR))
•    Right to data transferability (Art. 20 DSGVO (GDPR))

For more information, please contact: job@gruenbeck.de

You have the possibility to submit a complaint to the abovementioned data protection officer (Datenschutzbeauftragter@gruenbeck.de) or to a data protection super¬visory body.

Are you obliged to provide your data?

To take your application into consideration, we require he personal data required for the applicant selection process and/or decision on the establishment of an employee relationship.

You have the right to revoke your consent to the use of your personal data at any time with future effect. To do so, just send an e-mail to job@gruenbeck.de. A revocation will result in the termination of the application procedure.


Our general data protection guidelines also apply (https://www.gruenbeck.de/de/datenschutz/).