Privacy Policy
§ 1 Information on collecting personal data
(1) In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour. We process your personal data in accordance with this privacy policy, the European General Data Protection Regulation ("GDPR"), the Federal Data Protection Act (BDSG new) of the Federal Republic of Germany and the relevant country-specific data protection regulations. The German version of this privacy policy is authoritative.
(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is
Magnet-Schultz GmbH & Co. KG
Allgäuer Strasse 30
87700 Memmingen
Telefon: +49 (0) 8331- 1040
E-Mail: info@magnet-schultz.de
(please see Imprint)
You may reach our Data Security Officer via:
or the postal address:
Datenschutzbeauftragter der Magnet-Schultz GmbH & Co. KG
Allgäuer Straße 30
87700 Memmingen
Phone: +49 (0) 8331- 1040
§ 2 Your rights
(1) You can carry out the following rights at any time using the contact details of our data protection officer:
Information about your data stored by us and its processing (Art. 15 GDPR),
Correction of incorrect personal data (Art. 16 GDPR),
Deletion of your data stored by us (Art. 17 GDPR),
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
Objection to the processing of your data by us (Art. 21 GDPR) and
Data portability provided that you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).
(2) If you have given us your consent, you can revoke it at any time with effect for the future.
(3) You can contact a supervisory authority at any time with a complaint, e.g. the competent supervisory authority in the federal state of your place of residence or the authority responsible for us as the controller. A list of supervisory authorities (for the non-public sector) with addresses can be found at https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html
§ 3 Collecting personal data upon visiting our website
(1) When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):
IP address
Date and time of the enquiry
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request comes
Browser
Operating system and its interface
Language and version of the browser software.
This data is processed for the following purposes in particular:
Ensuring a smooth connection to the website,
Ensuring the smooth use of our website,
Evaluation of system security and stability and
To optimise our website.
We do not use your data to draw conclusions about your person. Information of this kind may be statistically evaluated by us in anonymised form in order to optimise our website and the technology behind it.
Legal basis and legitimate interest:
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website.
Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage duration:
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.
If the data is stored in log files, this is the case after 7 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are anonymised so that it is no longer possible to identify the calling client.
Provision prescribed or required:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, an objection is excluded.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies cannot execute programmes or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.
You can delete the individual cookies or the entire cookie inventory. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:
Mozilla Firefox: support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Internet Explorer: support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Google Chrome: support.google.com/accounts/answer/61416
Opera: http://www.opera.com/de/help
Safari: support.apple.com/kb/PH17191
(3) Use of cookies:
a) The following cookies are used on our website:
- Technically necessary cookies (see b)
- Cookies for analytical purposes (see c)
b) Storage duration and cookies used:
If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:
Cookie name: fe_typo_user
Purpose: This cookie is used by our CMS (Content Management System). A randomly selected key is generated with which logged-in users can be recognised.
Category: Necessary
Stored data: Identifies the user data in a CMS session.
Storage duration: Session
Cookie name: dp_cookieconsent_status
Purpose: Saves the user's consent status for cookies on the current domain.
Category: Necessary
Storage period: 12 months
Cookie name: et_allow_cookies
Purpose: If the parameter "data-block-cookies" is used, this cookie is set by the API call _etracker.enableCookies() to indicate that etracker is allowed to set cookies
Category: Necessary
Storage period: 16 months
Additional information: https://www.etracker.com/support/etracker-cookies-2/
c) The following cookies make it possible to collect anonymised data about the user behaviour of our visitors. They are analysed to improve our website content and functionalities.
Cookie name: _et_coid
Purpose: Cookie recognition
Category: Statistics
Storage period: 24 months
Additional information: https://www.etracker.com/support/etracker-cookies-2/
Cookie name: BT_sdc
Purpose: Contains Base64-encoded data of the current visitor session (referrer, number of pages, number of seconds since the start of the session), which is used for personalisation purposes.
Category: Statistics
Storage duration: Session
Additional information: https://www.etracker.com/support/etracker-cookies-2/
Cookie name: BT_pdc
Purpose: Contains Base64-encoded visitor history data (is a customer, newsletter recipient, etc.) for personalisation.
Category: Statistics
Storage duration: Session
Additional information: https://www.etracker.com/support/etracker-cookies-2/
(d) Technically necessary cookies
Nature and purpose of the processing:
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.
We need cookies for the following applications:
Recognising the selection of the cookie banner
Analysis of usage data by eTracker
Legal basis and legitimate interest:
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a user-friendly design of our website.
We use cookies that are technically necessary to provide services expressly requested by the user based on a legitimate interest in the provision of such services.
Recipient:
Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.
Provision prescribed or required:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
Contradiction
Please read the information on your right to object under Art. 21 GDPR below.
(e) Technically not necessary cookies
Furthermore, we use cookies to better customise the offer on our website to the interests of our visitors or to generally improve it on the basis of statistical analyses.
To find out which providers set cookies, please refer to the information below on the display, tracking, remarketing and web analysis technologies used.
Legal basis:
The legal basis for this processing is your consent, Art. 6 para. 1 lit. a GDPR.
Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
For further recipients, please refer to the information below on the display, tracking, remarketing and web analysis technologies used.
Third country transfer:
Please refer to the lists of the individual display, tracking, remarketing and web analysis providers for more information.
Provision prescribed or required:
Of course, you can also view our website without cookies. Web browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings (see Revocation of consent).
Please note that individual functions of our website based on cookies may not work if you have deactivated the use of cookies or have not given your consent.
Revocation of consent:
You can revoke your consent at any time via our cookie consent tool.
Profiling:
To what extent we analyse the behaviour of website visitors with pseudonymised user profiles, please refer to the information below on the display, tracking, remarketing and web analysis technologies used.
(f) eTracker (with cookies)
Nature and purpose of the processing:
We use the services of the German company etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg.
We use etracker to improve the quality of our website and our offering. Cookies are used to enable a statistical reach analysis of this website and to measure the success of our online marketing measures, e.g. to test and optimise different versions of our online offering or its components.
Legal basis:
When using etracker with analysis and optimisation cookies, the legal basis for this processing is your consent, Art. 6 para. 1 lit. a GDPR.
Recipient:
The data generated with etracker is processed and stored by etracker on our behalf exclusively in Germany. It is not used for any other purpose, merged with other data or passed on to third parties. In addition, the data is anonymised immediately after collection.
Service providers who act as our processors maintain our website. All service providers are contractually obliged to treat your data confidentially.
Provision prescribed or required:
The provision of your personal data is voluntary, solely based on your consent. You will not suffer any disadvantages.
You can revoke your consent at any time.
(g) eTracker (without cookies)
Nature and purpose of the processing:
We use the services of the German company etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg.
By default, etracker does not use cookies for tracking on a website, as this has been implemented in the so-called cookie-less mode by privacy-by-design.
In cookieless mode, there is neither "storage of information" nor "access to information that is already stored in the end device of a subscriber or user". Only website data from web servers is used, as well as certain information that the web browser transmits to the web server to access websites. This information makes it possible to link individual page views to related sessions. Linking to a time stamp prevents page views beyond a 24-hour time window from being linked to customer journeys or user profiles.
This is therefore not device fingerprinting in accordance with "Statement 9/2014 on the application of Directive 2002/58/EC to the use of virtual fingerprints", but an aggregated statistical analysis of website usage.
Legal basis:
When using etracker in cookieless mode, the legal basis is the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest is based on the optimisation of our online offering and our website. We receive analysis reports on how you use our website in order to better adapt our offer to your wishes.
Recipient:
The data generated with etracker is processed and stored by etracker on our behalf exclusively in Germany. It is not used for any other purpose, merged with other data or passed on to third parties.
Service providers who act as our processors maintain our website. All service providers are contractually obliged to treat your data confidentially.
Provision prescribed or required:
The provision of the aforementioned personal data is neither legally nor contractually prescribed. However, without this information we cannot improve and optimise our services and performances.
You can object to reach measurement by etracker at any time by setting an opt-out cookie. You can manually delete all cookies stored on your computer in your browser.
(4) Contact us by e-mail or contact form
(a) When you contact us, the data you provide (title, first and last name, street, house number, postcode, city, telephone number, e-mail address, company) will be stored by us in order to answer your questions.
(b) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.
Nature and purpose of the processing:
The data you enter will be stored for the purpose of individualized communication with you. This requires you to provide a valid e-mail address and your name. This is used to allocate the enquiry and subsequently answer it. The provision of further data is optional.
Legal basis:
The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).
By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions.
If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
Recipient:
Recipients of the data may be processors.
Storage duration:
Data will be deleted no later than 6 months after the enquiry has been processed.
If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.
Provision prescribed or required:
The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with your name, e-mail address and the reason for the enquiry.
(5) Applications (by e-mail or application form)
(a) Scope of the processing of personal data
An application form is available on our website, which can be used for electronic applications. By clicking on "Send application", the data entered in the input mask will be transmitted to us and saved.
These data are:
Salutation
First name
Surname
Job description
Address
Telephone number
Email address
Period of notice
Income expectations
Recruiting channel
Additional remark
Additional application documents, certificates and CVs can also be uploaded as PDF files.
After sending your application, you will receive confirmation of receipt of your application documents by email from us.
Your data will not be passed on to third parties. The data will be used exclusively for processing your application.
Purpose of data processing
The processing of personal data from the application form is solely for the purpose of processing your application. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data.
Legal basis for data processing
The processing is carried out to establish an employment relationship, Art. 6 para. 1 lit. b) GDPR
Recipient:
Within the company, access to your data is granted to those departments that require it to fulfil contractual, legal and regulatory obligations as well as to protect legitimate interests.
Duration of storage
If your application is rejected by us, it will be deleted six months after notification of the decision. If an employment relationship is established, the application documents will be stored for at least the period of employment.
Provision prescribed or required:
The provision of your data is: voluntary. If you do not provide us with the data, it cannot be processed correctly. No automated decision-making or scoring takes place as part of this processing.
(6) Supplier application
An application form for suppliers is available on our website, which can be used for electronic applications. By clicking on "Send application", the data entered in the input mask will be transmitted to us and saved.
These data are:
Salutation
First name
Surname
Function in the company
Company
Address
Telephone number
Email address
Fax
Type of company and material group
Contact person at MSM
Message
In addition, further documents such as supplier self-disclosure, non-disclosure agreement and presentations will be uploaded as PDF files.
After sending your application, you will receive confirmation of receipt of your application documents by email from us.
Your data will not be passed on to third parties. The data will be used exclusively for processing the supplier application.
Purpose of data processing
We process the personal data from the supplier application form solely for the purpose of processing the supplier application. If contact is made by email, this also constitutes the necessary legitimate interest in processing the data.
Legal basis for data processing
We process your personal data (contact details), which you have transmitted to us as part of the supplier application, on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR.
Recipient:
Within the company, access to your data is granted to those departments that require it to fulfil contractual, legal and regulatory obligations and to protect legitimate interests.
Duration of storage
Your personal data will only be processed in this context as long as the corresponding consent has been given. You can revoke your consent to the processing of your personal data at any time. In this case, all personal data stored in the course of the supplier application will be deleted with effect for the future. Depending on the time of your cancellation, it may no longer be possible for us to contact you
Provision prescribed or required:
The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with your name, e-mail address and the reason for the enquiry.
(7) Whistleblower system
a) We provide a link to the whistleblower system on our website for submitting reports. It is generally possible to submit a report without providing any personal data, thus complying with the requirements of the Whistleblower Protection Act regarding the anonymity of the reporting system. The personal data of the whistleblower will only be processed if the whistleblower deliberately and voluntarily decides to provide his or her personal data as part of the report. In addition, personal data of third parties provided by the whistleblower in connection with the report (e.g. parties involved in the reported violation, witnesses, etc.) will be processed. When you submit a report through the reporting system, we collect the following personal data and information:
- Your name (if you provide it)
- Your email address (if you provide it)
- any personal content of the report you have submitted and the fact that you have submitted a report (if this fact can be attributed to you)
- the names and other details and personal information of any persons named in the report as parties to or witnesses to the infringement (if included in the report).
After submitting your report, you will receive an email from us confirming receipt of your report.
Purpose of data processing:
We have established a whistleblower system in accordance with the Whistleblower Protection Act to securely and confidentially receive, process, document and manage reports and information regarding possible violations of law. This is also the purpose of the data processing.
Legal basis for data processing:
The processing of the reporting person's personal data is based on consent (Art. 6 para. 1 lit. a GDPR). Consent is given by submitting the report and providing your name and e-mail address. As stated above, consent and the provision of personal data are voluntary.
Insofar as personal data of third parties (affected parties or witnesses of infringements) are transmitted by the reporting party within the framework of the reporting procedure, we process such data on the basis of our company's legitimate interest in the detection and prevention of infringements and thus the prevention of damage to the controller, its employees and customers (Art. 6 para. 1 lit. f GDPR).
Recipient:
Internal Ombudsman (internal reporting office)
Technical provider of the reporting system
The reporting system is operated by a specialised company on behalf of the data controller. The reporting system is provided as a SaaS service and complies with all current data protection and IT security requirements. Data processing takes place exclusively in Germany. Access to the data is only possible for a limited group of employees of the controller, as defined by the controller. Data security is guaranteed by extensive technical and organisational measures in a certified process.
Third country transfer:
The processing of data as part of the whistleblowing system takes place exclusively on servers in Germany. There is no transfer of data to third countries and there are no plans to do so.
Duration of storage:
Personal data will be kept for as long as is necessary for the clarification and final assessment of the notification or for as long as is required by a legitimate interest of the controller or a legal obligation.
Once the processing of the notification has been completed, the data will be deleted in accordance with the legal requirements.
Provision prescribed or required:
The provision of your personal data is voluntary.
Withdrawal of consent:
Where data processing is based on your consent, you may withdraw your consent at any time with effect for the future by informing the data controller. Withdrawal of consent has no negative consequences for you.
However, in the event that consent is withdrawn, we would like to expressly point out that, depending on the processing status of the respective process, it may no longer be possible to stop further processing of the personal data if we, as the data controller and responsible for the reporting system, have involved authorities or courts due to the content and nature of the report. We would like to point out that in these cases, after the withdrawal of consent, we will continue to process the personal data on the basis of a legal authorisation, in particular on the basis of a legal obligation due to our involvement in criminal, administrative or judicial proceedings (Art. 6 para. 1 lit. c GDPR) or on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR); in these cases, our legitimate interest lies in the detection and prevention of misconduct and legal violations.
(8) Integration of YouTube videos
(a) We have integrated YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter "YouTube"). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter "Google"). YouTube videos are all integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer.
(b) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 3 of this declaration will be transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
(c) Third country transfer and guarantee:
The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. We have concluded so-called standard contractual clauses with Google LLC.
(d) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://policies.google.com/privacy . Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
(e) Withdrawal of consent:
The provider does not currently offer the option of simply opting out or blocking data transmission. If you wish to prevent your activities on our website from being tracked, please revoke your consent for the corresponding cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool.
§ 4 Additional functions and services of our website
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you must generally provide additional personal data that we use to provide the respective service and for which the aforementioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound to our instructions and are regularly monitored.
(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, the conclusion of contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer below.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
§ 5 Objection or revocation against the processing of your data
(1) If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.
(2) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
(3) Information about your right to object pursuant to Art. 21 GDPR
Individual right of objection
You have the right to object, on grounds relating to your particular situation, at any time against the processing of personal data concerning you which is based on point (f) of Article 6 paragraph 1 GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4 No. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Recipient of an objection
You can reach our data protection officer at
or the postal address:
Datenschutzbeauftragter der Magnet-Schultz GmbH & Co. KG
Allgäuer Straße 30
87700 Memmingen
Phone: +49 (0) 8331- 1040
(4) Changes to our data protection provisions
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
(5) Questions to the data protection officer
If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organisation directly:
You can reach our data protection officer at
datenschutz@magnet-schultz.de
or the postal address:
Datenschutzbeauftragter der Magnet-Schultz GmbH & Co. KG
Allgäuer Straße 30
87700 Memmingen
Phone: +49 (0) 8331- 1040
§ 6 Use of SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
§ 7 Balancing of interests
If the above-mentioned tracking software or plug-ins do not fulfil the European data protection standards with regard to the lawful processing of Art. 6 of the GDPR, the following balancing of interests will be made as an alternative:
The processing of the data is lawful if the processing is necessary for the fulfilment of the legitimate interests of the responsible person or a third party, unless the interests or fundamental rights and freedoms of the person affected, which require the protection of personal data, prevail. The legitimate interests include both legal and actual, economic or ideal interests.
The purpose of data processing is to make the website easier to find and to analyse user behaviour.
The tracking software and plug-ins used are suitable for achieving this purpose.
Necessity is given because they are necessary to achieve the purpose.
They are appropriate because they are reasonable for the user and do not jeopardise the appropriate level of data protection.
§ 8 Other processing outside the website
(1) Magnet-Schultz GmbH & Co KG is represented in various social networks. For information on the storage and use of your data as well as your rights and options for settings to protect your privacy, please refer to the data protection information of the respective network operator:
(a) Facebook and Instagram
Magnet-Schultz GmbH & Co KG is represented on the social networks Facebook and Instagram. These platforms are provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. We maintain these Facebook/Instagram pages in order to inform users, interested parties and customers about our services.
We cannot rule out the possibility that a transfer to a third country, e.g. to servers located in the USA, may take place when our company pages are accessed on these social networks. We would also like to point out that, as the operator of a Facebook/Instagram fan page, we are jointly responsible with Facebook for processing the personal data of visitors to the page (Art. 26 GDPR). We have concluded corresponding contracts with Facebook for this purpose.
Facebook recognises that it shares responsibility for the Insights data with the operators of the pages and assumes primary responsibility, see https://www.facebook.com/legal/terms/page_controller_addendum
If you have a Facebook/Instagram profile and are logged in, Facebook can, for example, analyse your usage behaviour and create a user profile corresponding to your usage behaviour. This user data is regularly processed for market research and (personalised) advertising purposes.
The processing of the data is based on your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
If you wish to assert requests for information or your user rights, you can assert these rights against Facebook or us.
Further information regarding the collection and use of data as well as your rights and protection options can be found at https://facebook.com/about/privacy/ https://instagram.com/about/legal/privacy/
(b) LinkedIn
Magnet-Schultz GmbH & Co KG maintains a corporate presence on LinkedIn. This is located on a platform operated by LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland.
We provide information on our website and offer users the opportunity to communicate. The company website is used for applications and information/PR.
When you visit our LinkedIn company page, follow our page or engage with our page, LinkedIn processes personal data to provide us with statistics and insights in anonymised form. This gives us insights into the types of actions that visitors take on our site (so-called page insights). In particular, LinkedIn processes data that you have already provided to LinkedIn via the information in your profile. In addition, LinkedIn will process information about how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page. Personal data is not transmitted to us by LinkedIn. It is also not possible for us to draw conclusions about individual members using the information from the page insights.
This processing of personal data in the context of Page Insights is carried out by LinkedIn and us as joint responsible parties. We have entered into an agreement with LinkedIn on processing as joint responsible parties, which sets out the distribution of data protection obligations between us and LinkedIn. Under this agreement, LinkedIn is responsible for responding to requests from data subjects. To do this, you can contact LinkedIn online or reach LinkedIn using the contact details in the privacy policy.
You can contact us regarding the exercise of your rights in connection with the processing of personal data in the context of the Page Insights by contacting us via the contact form with the selection of your request "Data protection". In such a case, we will forward your enquiry to LinkedIn.
The processing of the data is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which you have given to LinkedIn as part of your registration.
Further information on data processing by LinkedIn can be found in LinkedIn's privacy policy
We cannot rule out the possibility that a transfer to a third country, e.g. to servers located in the USA, may take place when you visit our LinkedIn page. Your visit to our website may therefore be tracked by LinkedIn.
(c) YouTube
Magnet-Schultz GmbH & Co KG is also represented on YouTube. YouTube is a service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google")).
We cannot rule out the possibility that a transfer to a third country, e.g. to servers located in the USA, may take place when you access our YouTube channel. Your visit to our website may therefore be tracked by YouTube.
When using YouTube, your personal data is collected, transmitted, stored, disclosed and used by Google. Google analyses your user behaviour and creates a corresponding user profile, regardless of whether you have a Google account. This data can be used to tailor content or advertising to you.
The processing of the data is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
Further information regarding the collection and use of data as well as your rights and protection options can be found at https://policies.google.com/technologies/product-privacy and https://policies.google.com/privacy
(d) Microsoft Teams
As part of our business processes, we use Microsoft Teams to organise communication and collaboration efficiently. The following personal data is processed to enable the organisation and conduct of audio and video conferences and other digital meetings:
Identification and contact information (name, first name, email address, etc.)
Data relating to the meeting (date and time of the meeting, subject of the meeting, list of participants, etc.)
Communication data (audio and video data, chat messages, screen sharing and presentations, etc.)
Technical data (IP addresses, connection data, device information, etc.)
Usage data (duration of participation, data on session quality and technical problems, etc.)
Purpose of data processing:
Microsoft Teams is used for audio and video conferencing, communication and collaboration. Personal data is processed for the following purposes:
Organise online meetings
Conduct online meetings
Recording meetings - only in certain cases (e.g. training, special meetings). Please note that participation in recorded meetings is only possible with the written consent of all participants.
Other purposes and categories of data: Microsoft Privacy Policy https://privacy.microsoft.com/de-DE/privacystatement
Legal basis for data processing:
The data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR, insofar as online meetings take place within the framework of contractual relationships. If there is no contractual relationship, the legal basis is Art. 6 para. 1 lit. f GDPR. In these cases, our interest is in the effective organisation of the online meetings.
Recipient:
Personal data processed in connection with participation in online meetings will not be disclosed to third parties unless it is intended to be disclosed. Please note that the content of online and in-person meetings is often used to communicate with customers, prospects, or third parties and is therefore intended to be shared.
Other recipients can be found on the Microsoft Subprocessor List: https://servicetrust.microsoft.com/DocumentPage/aead9e68-1190-4d90-ad93-36418de5c594
Third country transfer:
Personal data is also processed in a third country. We have entered into an order processing agreement with Microsoft that meets the requirements of Art. 28 GDPR.
Duration of storage:
We will only keep your personal information for as long as necessary to fulfil the purpose for which it was collected or for as long as we have a legitimate interest in keeping it. Records of meetings will only be made with your consent and will be deleted once the purpose has been fulfilled or your consent has been withdrawn.
Provision prescribed or required:
The provision of your personal data is voluntary.
+49 8331 1040
info@magnet-schultz.com