Privacy Policy

Thank you for visiting our website. Compliance with data protection regulations is of particular importance to us. The aim of this privacy policy is to inform you as a user of the website about the nature, scope and purpose of the processing of personal data and the rights that exist for you, insofar as you are considered a data subject within the meaning of Article 4 No. 1 of the General Data Protection Regulation.

1. Responsible Party

This website and the range of services are operated by:

Welding GmbH & Co. KG

Esplanade 39
20354 Hamburg
Deutschland

Tel: +49 40 35908-0
Fax: +49 40 35908-251
E-Mail : datenschutz@welding.eu

2. Data Protection Officer

We have appointed a data protection officer.

www.mein-datenschutzbeauftragter.de
Herr Philipp Herold
Hafenstraße 1a
23568 Lübeck

E-Mail: datenschutz@welding.eu

3. General information

We have designed the development of the website to collect as little data from you as possible. In doing so, we always ensure that your personal data is only processed in accordance with a legal basis or consent granted by you. We comply with the regulations of the General Data Protection Regulation (DSGVO), which has been in force since 25.5.2018, and the respective applicable national regulations, such as the Federal Data Protection Act, the Telecommunications Telemedia Data Protection Act or other more specific laws on data protection.

4. Purpose and legal basis of the processing of personal data

We always process your personal data for a specific purpose.

In summary, we process your personal data for the following purposes:

  • a) In order to be able to process your request when you contact us (e.g. e-mail address, first name, last name);
  • b) For the technical realization of our website and to be able to provide you with our information on this website (e.g. IP address, cookies, browser information).
  • c) To receive and process an application from you for one of our job offers.

With regard to the legal basis for the processing of your personal data applies:
We process personal data that is required for the justification, implementation or processing of our service offer (contract processing) on the legal basis of Art. 6 (1) lit. b DSGVO. Insofar as we obtain consent from you for the processing of your personal data, the consent forms the legal basis for the data processing in accordance with Art. 6 (1) lit. a DSGVO. Data processing is also permissible if we process your data to protect our legitimate interests and your interests or fundamental rights and freedoms with regard to the processing of personal data are not overridden. (Art. 6 para. 1 lit. f DSGVO) Insofar as we use external service providers within the scope of commissioned data processing, the processing is carried out on the legal basis of Art. 28 DSGVO.

5. Collection of personal data when visiting our website

In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

In addition to the aforementioned data, cookies are stored on your computer when you use our website. You can find more information on this under the item "Cookies" in this data protection declaration and in the consent management tool used.

6. Integration of services from other providers

Our website uses content, services and performances of other providers. These are, for example, services for the statistical evaluation of the use and visit of our website. In order for this data to be called up and displayed in the user's browser, it is necessary to transmit the user's IP address to the third-party providers used.
Even though we strive to use only third-party providers that only require the IP address to deliver content or even work with anonymized IP addresses, we have no influence on whether the IP address may be stored. Information on the third-party providers used can be found below in this privacy policy.

Google Tag Manager

Nature and scope of processing
We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and allows us to control the precise integration of services on our website.
This allows us to flexibly integrate additional services to evaluate user access to our website.

Purpose and legal basis
The use of Google Tag Manager is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, particularly the United States. The data transfer to the United States is carried out in accordance with Article 45(1) of the GDPR, based on the adequacy decision of the European Commission. The involved US companies and/or their US sub-processors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Google Analytics

Nature and scope of processing
We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of times our online offer is called up, sub-pages visited and the length of time visitors stay.
Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.
This information is used, among other things, to compile reports on website activity.

Purpose and legal basis
The use of Google Analytics is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, particularly the United States. The data transfer to the United States is carried out in accordance with Article 45(1) of the GDPR, based on the adequacy decision of the European Commission. The involved US companies and/or their US sub-processors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Cookiebot

Nature and scope of processing
We have integrated Cookiebot on our website. Cookiebot is a consent solution provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, to obtain and document consent to store cookies. Cookiebot uses cookies or other web technologies to recognize users and store consent given or revoked.

Purpose and legal basis
The use of the service is based on obtaining the legally required consent to use cookies according to Art. 6 para. 1 lit. c. DSGVO.

Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Cybot A/S. You can find further information in the privacy policy for Cookiebot: https://www.cookiebot.com/de/privacy-policy/.

Cookiebot CDN

Nature and scope of processing
We use Cookiebot CDN to properly deliver the content of our website. Cookiebot CDN is a service provided by Cybot A/S, which acts as a content delivery network (CDN) on our website to ensure the functionality of other Cybot A/S services. For said services, you will find a separate section in this Privacy Policy. This section is only about the use of the CDN.

A CDN helps to provide content of our online offer, especially files such as graphics or scripts, faster with the help of regionally or internationally distributed servers. When you access this content, you connect to servers of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, where your IP address and possibly browser data such as your user agent are transmitted. This data is processed solely for the purposes stated above and to maintain the security and functionality of Cookiebot CDN.

Purpose and legal basis
The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimization of our online offer according to Art. 6 para. 1 lit. f. DSGVO.

Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Cybot A/S. Further information can be found in the privacy policy for Cookiebot CDN: https://www.cookiebot.com/de/privacy-policy/.

Matomo

Nature and scope of processing
We use the open source software tool Matomo (formerly PIWIK) on our website. The software sets a cookie in your browser (for cookies, see already above). If individual pages of our website are called up, the following data is stored:

  • Two bytes of the IP address of the calling system of the user (anonymized IP address).
  • The accessed web page
  • The website from which the user accessed the accessed website (referrer)
  • The subpages accessed from the accessed website
  • The time spent on the website
  • The frequency with which the website is accessed

The software runs exclusively on the servers of our website. Your personal data is only stored there. The data is not passed on to third parties.

Purpose and legal basis
We process your data with the help of the analysis software Matomo for the purpose of evaluating the use of individual components and contents of our website on the basis of your consent pursuant to Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future pursuant to Art. 7 para. 3 DSGVO. There is no legal or contractual obligation to provide your data. If you do not give us your consent, a visit to our website is possible without restriction, but not all functions may be fully available.

Storage period
The specific storage period of the cookies set is 13 months.

d.vinci Applicant Management

Nature and scope of processing
We have integrated components of d.vinci Applicant Management on our website. d.vinci Applicant Management is a service offered by d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg, Germany, that provides applicant and personnel management software.
d.vinci Applicant Management is used in connection with application procedures to optimize applicant management, for example, by automated analysis of references. Furthermore, d.vinci Applicant Management allows us to create and evaluate job advertisements.

Purpose and legal basis
The use of the service is based on our legitimate interests, i.e., the interest in optimizing our application procedures in accordance with Art. 6(1)(f) of the GDPR. The legal basis for the data processing is § 26 of the German Federal Data Protection Act (BDSG).

Storage period
The specific storage period of the processed data is not influenced by us but determined by d.vinci HR-Systems GmbH. Further information can be found in the privacy policy for d.vinci Applicant Management: https://www.dvinci.de/en/privacy-policy.

OpenStreetMap

Nature and scope of processing
We use the mapping service OpenStreetMap to provide directions. OpenStreetMap is an open-source project of the OpenStreetMap Foundation that displays a map on our website.

When accessing this content, you establish a connection to servers of the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed solely for the aforementioned purposes and to maintain the security and functionality of OpenStreetMap.

Purpose and legal basis
The use of OpenStreetMap is based on your consent in accordance with Art. 6(1)(a) of the GDPR.

We intend to transfer personal data to third countries outside the European Economic Area. The data transfer to the United Kingdom is carried out in accordance with Article 45(1) of the GDPR, based on the European Commission's adequacy decision.

Storage period
The specific storage period of the processed data is not influenced by us but determined by the OpenStreetMap Foundation. Further information can be found in the privacy policy for OpenStreetMap: https://wiki.osmfoundation.org/wiki/Privacy_Policy.

7. Cookies

Cookies are small text files that are stored on your hard drive and store certain settings and data for exchange with our system through your browser. A cookie usually contains the name of the domain from which the cookie data was sent, as well as information about the age of the cookie and an alphanumeric identification code.

Cookies allow our systems to recognize the user's device and make any preferences immediately available. Once a user accesses the platform, a cookie is transmitted to the hard disk of the respective user's computer. Cookies help us improve our website and provide you with a better and more personalized service. They allow us to recognize your computer or mobile device when you return to our website and thereby:

  •     Store information about your preferred activities on the website and tailor our website to your individual interests.
  •     Speed up the processing of your inquiries.

We work with third-party services that help us make the internet offering and website more interesting for you. Therefore, when visiting the website, cookies from these partner companies (third-party providers) are also stored on your hard drive. These are cookies that are automatically deleted after the specified time.

For more information on the individual third-party providers, please refer to the Cookie Consent Tool and the privacy notices contained therein.

If you do not wish to use browser cookies, you can set your browser so that cookies are not accepted. Please note that in this case you may only be able to use our website to a limited extent or not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can select the setting in your browser "Block third-party cookies". We assume no responsibility for the use of third-party cookies.

8. Contact

You can contact us by e-mail or via our contact form. In this case, we store the personal data you provide in order to process your request and to contact you to handle your request. If we request information via our contact form, we have marked the mandatory fields required for contacting us accordingly (asterisk). The voluntary information is used to specify your request and to improve the processing of your request. The requested data is transmitted to us by you on a purely voluntary basis.

Depending on the type of request, the legal basis for this processing is Art. 6 para. 1 lit. b DSGVO for requests that you yourself make as part of a pre-contractual measure or Art. 6 para. 1 sentence 1 lit. f DSGVO if your request is of a different nature. The legitimate interest follows from the purposes mentioned under point 4 a.). If personal data is requested that we do not need for the fulfillment of a contract or for the protection of legitimate interests, the transfer to us will be based on your consent pursuant to Art. 6 para. 1 lit. a DSGVO.

9. Application procedure

On our website, we publish job offers to which you can apply by e-mail. If you decide to apply for a vacancy, we will process the personal data you provide there and send to us exclusively for the purpose of carrying out the application process.

The legal basis for processing your personal data as part of the application process is Section 26 (1) in conjunction with (2) BDSG.

In the event of a rejection, we will delete your data as soon as a retention period of 6 months required by labor law has expired. The period begins with the dispatch of the rejection. If you have expressly consented to the further use of your data for subsequent contact regarding positions that may be of interest to you, we will continue to store your data in accordance with your consent.

If an employment relationship is established following the application process, the data will initially continue to be stored to the extent necessary and permissible and then transferred to the personnel file.

Your personal data may be processed on our behalf on the basis of order processing contracts pursuant to Art. 28 DSGVO. In these cases, we ensure that personal data is processed in accordance with the General Data Protection Regulation.

Otherwise, data will only be transferred to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfill legal obligations, or if you have consented to it. A transfer to a third country is not intended.

The provision of personal data in the context of application processes is neither legally nor contractually required. You are therefore not obliged to provide the personal data. However, the provision of personal data is necessary for the decision on an application or the conclusion of a contract for employment with us. However, in the context of your application, you should only provide personal data that is required for the acceptance and execution of the application. If you do not provide us with any personal data in an application, we will not be able to make a decision on the establishment of an employment relationship.

Please note that applications sent to us by e-mail are transmitted unencrypted. In this respect, there is a risk that unauthorized persons may intercept and use this data.

10. Presence in social media

In order to be able to present our company in the best possible way and to communicate with you as a user, customer or interested party and to inform you about the services we offer, we make use of our presence in social networks.

You can find us on the following platforms or social networks

  • YouTube
  • Xing
  • LinkedIn

When using social networks, data processing occurs outside of the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection, as found in the EU, cannot be guaranteed in all countries outside of the EU.

In this context, there may be risks for you as a user if the transmitted data is processed in so-called third countries with inadequate data protection levels. This makes it more difficult to enforce known user rights. Additionally, there may be a possibility that your data is processed by the provider in the third country in a way that is not in your best interest.

We only transfer personal data to third countries where an adequate level of protection has been confirmed, or when the transfer of personal data can be ensured through contractual agreements or other appropriate guarantees.

Data subject rights

Below you will find a detailed description of the respective data processing by the providers and their objection options (so-called opt-out) via the corresponding links to the providers' websites:

  • Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Datenschutzerklärung: https://policies.google.com/privacy , Opt-Out: https://adssettings.google.com/authenticated
  • LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland) - Datenschutzerklärung: https://www.linkedin.com/legal/privacy-policy , Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
  • Xing (New Work SE, Am Strandkai 1, 20457 Hamburg, Deutschland) – Datenschutzerklärung: https://privacy.xing.com/de/datenschutzerklaerung

11. Rights of the data subject

You have the right:

  • In accordance with Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • pursuant to Art. 16 DSGVO, to request the correction of incorrect or incomplete personal data stored by us without undue delay;
  • pursuant to Art. 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
  • pursuant to Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;
  • pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller (data portability);
  • in accordance with Art. 7 (3) DSGVO, to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing, which was based on this consent, for the future; and
  • complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.
    Right of objection
  • If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.

If you would like to make use of your right of revocation or objection, it is sufficient to send an e-mail to datenschutz@welding.eu.

12. Disclosure of your personal data

Your personal data will be passed on as described below.

Data will also be disclosed if we are entitled or obliged to disclose data on the basis of statutory provisions and/or official or court orders. In particular, this may involve the disclosure of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.

Insofar as your data is passed on to service providers to the extent necessary, they will only have access to your personal data to the extent necessary to fulfill their tasks. These service providers are obliged to treat your personal data in accordance with the applicable data protection laws, in particular the DSGVO. Insofar as your personal data is processed on our behalf on the basis of order processing contracts pursuant to Art. 28 DSGVO, we ensure that the processing of personal data is carried out in accordance with the General Data Protection Regulation.

We attach importance to processing your data within the EU / EEA. However, it may happen that we use service providers who process data outside the EU / EEA. In these cases, we ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient prior to the transfer of your personal data. This can be achieved, for example, via EU standard contracts or Binding Corporate Rules or special agreements to whose regulations the company may be subject.

13. Data security

We secure our website by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons.

In particular, your personal data is transmitted encrypted with us. We use the SSL/TLS (Secure Sockets Layer/ Transport Layer Security) coding system for this purpose. Our security measures are continuously improved in line with technological developments.

14. Storage period for the personal data

With regard to the storage period, we delete personal data as soon as their storage is no longer necessary for the fulfillment of the original purpose and there are no longer any legal retention periods. The statutory retention periods form the criterion for the final duration of the storage of personal data. After expiry of the period, the corresponding data is routinely deleted. In the case of the existence of retention periods, a restriction of processing takes place in the form of blocking the data.

15. References and links

When calling up Internet pages referred to within the framework of our website, information such as name, address, e-mail address, browser properties, etc. may be requested again. This privacy policy does not regulate the collection, disclosure or handling of personal data by third parties.

Third party service providers may have different and their own regulations regarding the collection, processing and use of personal data. It is therefore advisable to inform yourself on the websites of third parties about their practices regarding the handling of personal data before entering personal data.