Data Protection Policy
for the website career.shiot.com
A. Data protection goals
We strive to establish long-term relationships with our employees and maintain a consistently high level of satisfaction among our users. In that respect, we focus, in particular, on shaping our individual relationship with you and coordinating all our other objectives with this goal. A key part of these relationships is based on trust. We are, therefore, fully committed to protecting privacy and the right to data protection. We aim to offer employees and users a secure, risk-free, service.
We coordinate our processes and technical design with the General Data Protection Regulation, the Federal Data Protection Act and other relevant laws to ensure that personal data is only processed in accordance with the legal basis. Personal data should not be collected, in particular, in excess of what is required for the respective purpose. Furthermore, data subjects’ rights should be easy to exercise.
The following statement applies to data processing as part of our website. Although we have adopted organisational and technical measures to ensure the most comprehensive protection of our website, security breaches in electronic communication channels cannot be entirely ruled out. Visitors to the website are, therefore, free to obtain information about us or send us information by other means.
We process the usage and communication data generated by your visit to our website for the purpose of displaying this website. No further use is made of such data. Additional processing operations may be performed via the integrated services of third parties, which we use to improve this website’s presentation or functionality.
B. Definition of terms
Personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter “Data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing
Processing is any operation or set of operations performed involving personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by forwarding, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Pseudonymisation
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information provided such additional information is kept separately and is subject to technical and organisational measures, which ensure that the personal data is not attributed to an identified or identifiable natural person.
Controller or party responsible for the processing
The Controller, or party responsible for the processing, is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the Controller or the specific criteria for its designation may be provided for under Union or Member State law.
Processor
The Processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the Controller.
Recipient
A Recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients.
Third parties
A third party is a natural or legal person, public authority, agency or other body other than the data subject, the Controller, the Processor and the persons authorised to process the personal data under the direct responsibility of the Controller or the Processor.
Consent
Consent is any freely given, specific, informed and unambiguous expression of a data subject’s will by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Health data
“Health data” is any personal data relating to the physical or mental health of a natural person, including the rendering of health services, and from which information about their state of health can be derived.
C. General details
Controller
The Controller within the meaning of the General Data Protection Regulation is:
GUBSE AG
Bahnhofstraße 26-28
66578 Schiffweiler
Tel.: +49 6821 9646 – 0
E-mail: info@sihot.com
Internet: https://sihot.com
(hereinafter: Gubse AG)
Data protection officer
You can contact our data protection officer at:
datenschutz@hjp.de
Tel.: +49 (0) 6841 9816-0
Fax: +49 (0) 6841 9816-29
Our data protection officer will help you quickly and easily with any questions you may have or with asserting your rights as a data subject.
Type and scope of the processed data
Usage data (e.g. websites visited, access times) and communication data (e.g. browser information and IP addresses) are processed as a matter of principle.
Browser and server data
Please note that your browser forwards information to us when you use the website. Such forwarding is aimed at enabling you to visit the website from a technical point of view. The data is required to process the information request. The type of information that is forwarded also depends on your settings and technical specifications. Therefore, the following data may be collected when you access our website:
- IP address
- Time of access
- accessed page or name of accessed file (URL)
- Status information (e.g. error codes)
- amount of data transferred
- Browser information (web browser used, operating system and language settings etc.)
The data is used for statistical and security-related purposes. The data shall not be forwarded to third parties. This website does not use any techniques aimed at evaluating individual users’ access behaviour. Personal usage profiles are not created. The data is stored for 7 days at most for the specified purposes.
Cookies
Cookies are stored on your computer when using this website. The legal basis for the use of such Cookies is Section 15 (1) TMG (German Telemedia Act) and Section 15 (3) TMG in accordance with Article 6 (1) letter f) GDPR. Cookies are small text files that are stored on your hard drive by the browser you are using and by way of which certain information flows to the entity that sets the cookies. Cookies are a technical means of ensuring the functionality of the website and improving the user experience. For example, they are used to store information across multiple pages. We use Cookies for the following purposes:
- Storing user settings.
We use the following types of Cookies:
- Transient Cookies (temporary use)
- persistent Cookies (time-limited use).
The latter may be used by third party providers. The Cookies are used in our interest in respect of ease of use and improving our website.
Transient Cookies are automatically erased when you close your browser. Persistent Cookies are automatically erased following a specified period, which may vary depending on the Cookie. The erasure periods correspond to the specifications of the respective third party provider.
You can erase Cookies at any time in your browser’s security settings. You can also set your browser to reject certain or all Cookies. However, we would like to point out that the website functionality may be limited in such a case. We store information related to Cookies separately from other data that may be made available to us. This data is expressly not linked to your other data.
Data subject categories
Visitors to the website are affected by data processing by our website.
- Provision of a website
- Interaction options for users
- Security measures
Storage period
The criterion for the duration of the storage of personal data is the respective statutory storage period and the purpose of processing. Following expiry of the period, the corresponding data is routinely erased, provided that it is no longer required for the purpose of processing.
The specific storage periods are stated within this statement for each individual data processing procedure.
Legal basis
Several GDPR provisions may apply as legal bases: firstly, Article 6 (1) letter a) GDPR serves as the basis for processing operations for which your consent is obtained for the processing operation. In the case of processing operations that are required to implement pre-contractual measures, for example in cases of enquiries about our services, the processing is based on Article 6 (1) letter b) GDPR. In the case of fulfilling tax obligations, the processing is based on Article 6 (1) letter c) GDPR. With regard to this website, data is primarily processed based on Article 6 (1) letter f) GDPR. This basis for permission applies if the processing is required to safeguard a legitimate interest of the Controller or a third party, provided that this is not outweighed by the interests, fundamental rights and freedoms of the data subject.
The specific interests are reflected in each case at the point of processing.
Technical security measures
We maintain up-to-date technical and organisational measures to ensure data security, in particular to protect your personal data from risks during data forwarding and third party access. These are adapted accordingly in line with the latest technological developments.
D. Third party service providers
Sofern wir Dritte an der Verarbeitung teilhaben lassen, geschieht dies ausschließlich auf der Grundlage einer gesetzlichen Erlaubnisnorm und unter Einhaltung der gesetzlichen Bestimmungen. Diese Erlaubnisnorm kann in Ihrer Einwilligung, einer rechtlichen Verpflichtung oder unseren berechtigten Interessen bestehen.
Hosting
The hosting services we may use are aimed at providing the following services: infrastructure and platform services, software tools, computing capacity, storage space and maintenance services that we need for the purpose of operating this website.
The hosting provider processes the usage data based on our legitimate interest in the effective and secure provision of this website in accordance with Article 6 (1) letter f) GDPR.
The usage data includes the data described in “Type and scope of the processed data.” This data is erased after seven days.
Links to other websites
Our website contains links to third party websites. This data protection policy applies only to the content of our website and does not cover the third party websites linked to this site. We exert no influence on the legality of the content of these sites or how they handle personal data. If you have any questions about the content or data protection of such third party providers, please contact the respective provider.
Plug-ins
WordPress/Plug-ins
Our website uses a web service of the company Automattic Inc., 94043 San Francisco, CA. We use the WordPress web service and associated plug-ins to guarantee and enhance the full functionality of our website. In this context, your browser may transmit personal data to WordPress.com or the plug-in developers. The legal basis for data processing is Article 6 (1) letter f) GDPR. The legitimate interest is based on fault-free website functions and continually improving the website. Automattic Inc. and, where applicable, the plug-in developers ensure and provide sufficient guarantees that they comply with European data protection law. Further information about handling the transferred data can be found in the WordPress.com Privacy Policy at https://automattic.com/privacy/.
Google Tag Manager
We use the so-called Tag Manager from the provider Google LLC, 1600 Amphitheatre Parkway Mountain View, CA94043, USA. The data protection policy for this service is available at: https://policies.google.com/privacy. A control option for the processing of your data by the provider is offered at: https://adssettings.google.com/authenticated. The tags set up via Google Tag Manager ensure that data is collected and forwarded to the target system. The system does not collect or store the data itself because the data is only forwarded. According to the provider, Google Tag Manager is a Cookie-free domain and, therefore, cannot collect any personal data in this manner.
Google Fonts
We integrate the fonts (“Google Fonts”) of the provider Google LLC, 1600 Amphitheatre Parkway Mountain View, CA94043, USA. The data protection policy for this service is available at: https://policies.google.com/privacy. A control option for the processing of your data by the provider is offered at: https://adssettings.google.com/authenticated. This service is aimed at improving the website’s visual design. Forwarding data to other Google servers cannot be ruled out. Google LLC guarantees and provides sufficient assurances that it complies with European data protection law.
Google Apis
We use Google Apis, which is made available by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA94043, USA. The service’s privacy policy can be viewed at: https://policies.google.com/privacy. You can control how the provider processes your data at: https://adssettings.google.com/authenticated. This renders our website more resilient to bottlenecks in available bandwidth and enables our visitors to enjoy a fast and reliable connection to our website. When you access a page, your browser loads the necessary files (in particular web fonts) via the Content Delivery Network (CDN) using the address provided in your browser cache to display text and fonts correctly. This service enables the operator to ascertain that our website has been accessed using your IP address. The CDN is used to ensure a consistent and attractive website design, as well as a fast and reliable connection to our website. The legal basis for this is Article 6 (1) letters a) and f) GDPR. In that regard, the transmission of data to other servers cannot be ruled out. Google LLC guarantees and provides sufficient assurances that it complies with European data protection law.
Gstatic
We use a web service made available by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The service’s privacy policy can be viewed at: https://policies.google.com/privacy. You can control how the provider processes your data at: https://adssettings.google.com/authenticated. The legal basis for the data processing is Article 6 (1) letters a) and f) GDPR. The legitimate interest is based on fault-free website functions and the continual improvement, optimisation and economically viable operation of our website. Use is geared towards a purpose that solely reflects our interests. Further information about handling transmitted data can be found in Google’s stated privacy policy. You can control how the provider processes your data at: https://adssettings.google.com/authenticated. The transmission of data to other servers cannot be ruled out. Google LLC guarantees and provides sufficient assurances that it complies with European data protection law.
Google Analytics
Based on your consent, primarily via our consent banner (Article 6 (1) (a) GDPR), we use Google Analytics, an analysis service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA94043, USA, for continual improvement and optimisation as well as operations that are economically viable. Its use is geared towards our interests only. Google Analytics uses so-called “cookies”, text files that are stored on your computer and that facilitate analysis of your use of the website. In that respect, the information generated by the Cookie about your use of this website can be sent to and stored on a server operated by Google and located in the USA. However, in the case of the IP anonymization on this website, your IP address will be shortened by Google before it is forwarded. This applies within the Member States of the European Union or in other signatory states to the European Economic Area. Only in exceptional cases will the entire IP address be sent to a Google server in the USA and shortened there. By order of the operator of this website, Google shall use this information to evaluate your use of the website, to put together reports on the website activities and render additional services associated with the website and internet use for the website operator.
The IP address forwarded as part of Google Analytics from your browser shall not be grouped together with other data from Google.
You can prevent the saving of Cookies by way of a corresponding setting in your browser software; however, we draw attention to the fact that in such a case you may not be able to fully use all the functions on this website. Furthermore, you can prevent the recording and forwarding of the data created by the Cookie and related to your use of the website (including your IP address) and forwarding to Google as well as the processing of such data by Google by downloading and installing the browser plug-in via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses Google Analytics with the “_anonymizeIp()” extension. As a result, IP addresses are processed in abbreviated form, which means that personal references can be ruled out. If the data collected about you are related to a person, this is immediately excluded and the personal data are erased immediately.
We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. In exceptional cases where personal data is transferred to the USA, Google LLC guarantees and provides sufficient assurances that it shall comply with European data protection law.
Information from the third party provider: Google LLC, 1600 Amphitheatre Parkway Mountain View, CA94043, USA, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, Data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and the data protection policy: http://www.google.de/intl/de/policies/privacy.
This website also uses Google Analytics for cross-device analysis of visitor flows, which is conducted via a user ID. You can deactivate cross-device analysis of your usage in your customer account.
A large number of websites use Google Analytics in the manner described. You can permanently prevent the collection of data by installing a plug-in your browser: http://tools.google.com/dlpage/gaoptout?hl=de. Furthermore, you can also prevent the storage of Cookies by adjusting your basic browser settings. You also have the option of deactivating Google Analytics for your visit to our site by opting out:
Borlabs
This website uses a cookie consent banner featuring technology from Borlabs – Benjamin A. Bornschein, Rübenkamp 32, D-22305 Hamburg (hereinafter: Borlabs) – to obtain valid user consent for cookies and cookie-based applications that require consent.
By integrating a corresponding JavaScript code, users are shown a banner when they visit the website, in which they can grant their consent for certain cookies and/or cookie-based applications by ticking the corresponding boxes. The banner blocks the setting of all cookies that require consent until the respective user grants their consent by ticking the boxes. This ensures that such cookies are only set on the user’s device once consent has been granted. For the cookie consent banner to clearly assign page views to individual users and individually record, log and store the consent settings made by the user for the duration of a session, certain user information (including the IP address) is collected by the cookie consent banner when our website is accessed, forwarded to Borlabs servers and stored there.
This data is processed in accordance with Article 6 (1) letter f GDPR based on our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and, consequently, in the legally compliant design of our website. A further legal basis for the described data processing is Article 6 (1) letter c GDPR. As the Controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
We have entered into a data processing agreement with Borlabs, as required, in which we place Borlabs under obligation to protect the data of visitors to our website and not to forward it to third parties. Further information about the use of data by Borlabs can be found in the Borlabs Privacy Policy at https://de.borlabs.io/datenschutz/.
E. Contact form
You can use the contact form to send a message to our specialist departments. It is primarily used to enable interested parties to contact us about our products and services. Please note that your message cannot initially be assigned to a specific recipient, but will be distributed by the designated department to the relevant contact persons in our company. Insofar as you would like to send your enquiry directly to a specific contact person without informing other contact persons, please send your enquiry by telephone or post, stating the specific contact person.
Your e-mail address is the only compulsory information for sending the contact form. Providing additional, separately marked, data is voluntary and such data shall be used to address you personally. You may also use a pseudonym if you do not wish to provide your name.
We erase enquiries if they are no longer required and there is no further legal obligation to retain them. We regularly review the necessity of this. Furthermore the statutory archiving obligations apply, which may result, in particular, from tax law or commercial law.
F. Data subjects’ rights
You have the right to obtain information about your data stored by us at any time, free of charge and without giving reasons, as well as about the origin, recipient or categories of recipients to whom this data is forwarded and the purpose of storage. You can correct or erase your data collected by us at any time, restrict its processing or exercise your right to data portability. Furthermore, you have the right to object.
Correction, erasure or restriction of processing: You have the right to request that Gubse AG correct any inaccurate personal data concerning you without delay. Taking into account the processing purposes, you have the right to request that incomplete personal data be completed, including by way of a supplementary declaration.
Right to object: insofar as the processing of personal data concerning you is based on Article 6 (1) letter f) GDPR, you have the right to object to the processing of this data at any time for reasons resulting from your particular situation. We shall then no longer process this personal data unless Gubse AG can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Right of withdrawal: if the processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing performed based on the consent up until withdrawal. To that end, you can contact us or our data protection officer at any time using the aforementioned contact details.
Right to erasure: you have the right to request that Gubse AG erase personal data concerning you without delay, and Gubse AG undertakes to erase personal data without delay if one of the following reasons applies:
- The personal data are no longer required for the purposes for which they were collected or otherwise processed.
- You object to the processing and there are no overriding legitimate grounds for the processing.
- Erasure of the personal data is required to comply with a legal obligation under Union law or the law of the Member States to which we are subject. This does not apply if the processing is necessary to comply with a legal obligation that requires processing under Union or Member State law to which we are subject.
Right to restriction of processing: you have the right to request that Gubse AG restrict processing if one of the following conditions applies:
- You contest the accuracy of the personal data, namely for a period that enables us to verify the accuracy of the personal data.
- The processing is unlawful and you oppose the erasure of the personal data and request the restriction of use of the personal data instead.
- Gubse AG no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or you have objected to the processing and it is not yet clear whether or not our legitimate reasons outweigh yours.
- If processing has been restricted, such personal data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have obtained a restriction on processing, we shall inform you before the restriction is lifted.
Right to lodge a complaint: irrespective of any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you hold the view that the processing of personal data relating to you infringes upon the GDPR. You can also contact the data protection officer at Gubse AG. Our data protection officer’s contact details are set out below:
datenschutz@hjp.de
Tel.: +49 (0) 6841 9816 0
Fax: +49 (0) 6841 9816 29
We would be pleased at any time to answer any further questions you may have about our information, data protection and the processing of your personal data. Further information about data protection in the Federal Republic of Germany also be found at www.bfdi.bund.de.