Data protection and privacy

Introduction

Legal information and information on data protection

Weblinks
Despite careful content control, we assume no liability for the content of external links. The operators of the linked pages are solely responsible for their content.

Liability
The content of this website and the information provided are carefully selected and regularly updated. Nevertheless, errors and incompleteness cannot always be avoided. Puettmann GmbH & Co. KG, hereinafter referred to as Puettmann, therefore assumes no liability or guarantee for the  correctness and completeness of the information provided on this website and reserves the right to make changes or additions without prior notice.

Copyright
The content of this website is protected by copyright and all rights belong exclusively to Puettmann. Commercial duplication or other commercial use of the content and information provided, in particular graphics or images, is not permitted without the written consent of Puettmann.

1.1 Privacy Policy
We are pleased that you are visiting our website and that you are interested in our company, our products and our services. The protection of your personal data is very important to us. Puettmann GmbH & Co. KG (hereinafter "Puettmann", "we" or "us") attaches great importance to the security of user data and compliance with data protection regulations.
Puettmann websites may contain links to websites of other providers to which this data protection declaration does not extend. What data the operators of these pages may collect is beyond our knowledge and our sphere of influence. Information can be found in the data protection notice of the respective page.

Below we inform you in detail about the handling of your data.

1.2 Definitions
The data protection declaration is based on the terms of the General Data Protection Regulation (GDPR).
"Personal data" is any information relating to an identified or identifiable natural person (hereinafter "data subject") (Art. 4 No. 1 GDPR). Your personal data includes information such as your master data (first and last name, address and date of birth), your contact details (telephone number, e-mail address), your billing data (bank details) and much more.
"Processing" is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data such as collecting, recording, organizing, organizing, storing, adapting or changing, reading out, querying, Use, disclosure by transmission, distribution or any other form of making available, matching or linking, restriction, deletion or destruction.
"Data subject" is any identified or identifiable natural person whose personal data is processed by the controller.
"Responsible" is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data. If the purposes and means of this processing are specified by Union law or the law of the Member States, the person responsible or the specific criteria for his naming can be provided for by Union law or the law of the Member States.
"Processor" is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the person responsible.
"Recipient" is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether a third party or not. However, authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law are not considered recipients.

"Third party" is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct responsibility of the controller or processor, are authorized to process the personal data.
"Consent" is any expression of will voluntarily given by the data subject in an informed manner and unequivocally for the specific case in the form of a declaration or other clear affirmative action, with which the data subject indicates that the processing affects them

1.3 Collection and processing of personal data
In principle, our website can be used without providing any personal data. However, if you would like to use special services of our company via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the person concerned.

1.4 Naming of manufacturers/suppliers - connections
In the case of the manufacturers/suppliers listed on the Puettmann website, we would like to point out that there are no financial or corporate links in the sense of holdings or balance sheet-relevant connections to any of the named companies. Puettmann is legally independent and is based solely in 61440 Oberursel.

2 Middle Part

Purposes of collection - category of data - legal basis for processing

2.1 Anonymous Data Collection

You can visit our site without actively providing any personal information. However, we automatically save access data (server log files) such as the name of your Internet service provider, the operating system used, the website from which you are visiting us, the date and duration of the visit or the name each time the website is accessed the requested file, as well as for security reasons, e.g. B. to detect attacks on our websites, the IP address of the computer used for a period of 7 days. These data are evaluated exclusively to improve our offer and do not allow any conclusions to be drawn about your person. This data is not merged with other data sources. The legal basis for processing the data is Art. 6 Para. 1 GDPR. We process and use the data for the following purposes: 1. Providing the Püttmann websites, 2. Improving our websites and 3. Preventing and detecting errors/malfunctions and misuse of the websites. Data processing of this type takes place either to fulfill the contract for the use of the Püttmann websites or we pursue a legitimate interest in ensuring the functionality and error-free operation of the Püttmann websites and in adapting these websites to user requirements.

2.2 Use of Cookie Tracking

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on our website. This is a standard Internet technology for storing and retrieving login and other usage information for all users of the Püttmann websites. Cookies are small text files that are stored on your end device. They enable us, among other things, Save user preferences so that our websites can be displayed in a format tailored to your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognize your browser on your next visit (so-called permanent cookies).

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Furthermore, the cookies can be deleted afterwards in order to remove data that websites have stored on your computer. Instructions for this can be found quickly on the Internet. The deactivation of cookies can lead to some limitations in the functionality of the Püttmann websites.

2.3 Use of Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookies about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required to do so by law or if third parties process this data on Google's behalf.

Prevent storage of cookies

You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you can if applicable not use all functions of this website in full. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

IP anonymization

We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA.

Objection to data collection

If you do not want Google to receive data from your browser when you access the pages, you will find the link to the opt-out solution for Google Analytics here: tools.google.com

2.4 Use of Google Remarketing

This website uses Google Inc.'s Google Remarketing Technology (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). This is a retargeting technology that enables us to address visitors to our website again through targeted advertising on the websites of the Google advertising network. The display of advertising takes place through the use of so-called cookies.

For this purpose, cookies are placed on your computer, with the help of which third parties, including Google, record which of our websites have been visited with your browser. This information can then be used at a later date on other websites, e.g. B. as part of the Google search or on websites of the Google network, our ads are presented. Further information on data protection at Google and how remarketing works can be found at: www.google.de/intl/de/policies/privacy/. Here, too, you can deactivate the storage of cookies through your browser settings and/or object to the collection of data as part of Google Remarketing by www.google.com/policies/technologies/ads/.

2.5 Use of Google AdWords

On our website we use Google Conversion Tracking, an analysis service provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). Google AdWords places a cookie on your computer (“conversion cookie”) if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If you visit certain of our pages and the cookie has not yet expired, we and Google can recognize that someone clicked on the ad and was thus forwarded to our page. Each AdWords customer receives a different cookie. This means that cookies cannot be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

If you do not want to participate in tracking, you can object to this use by preventing the installation of cookies by setting your browser software accordingly (deactivation option). You will then not be included in the conversion tracking statistics. You can find more information on terms of use and data protection at: www.google.de/policies/privacy/.

2.6 Use of Google Maps

We use Google Maps to display maps and to create directions. Google Maps is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

By using this website, you agree to the collection, processing and use of the automatically collected data and the data you have entered by Google, one of its representatives, or third parties.

You can find the terms of use for Google Maps at: www.google.com/intl/de_de/help/terms_maps.html.

You can find detailed information in the data protection center of google.de: transparency and options as well as data protection regulations at policies.google.com/privacy.

2.7 Use of Google Tag Manager

This website uses the Google Tag Manager. This service allows website tags to be managed via an interface. The Google Tool Manager only implements tags. This means: No cookies are used and no personal data is recorded. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.

You can find detailed information in the data protection center of google.de: transparency and options as well as data protection regulations at https://policies.google.com/privacy?hl=de&gl=de.

2.8 Google Web Fonts

This site uses so-called web fonts (http://www.google.com/webfonts/) for the optically improved representation of the font and information. The Services are provided by Google LLC ("Google"), Amphitheater Parkway, Mountain View, CA 94043, USA.

These web fonts are integrated by calling a server, usually a Google server in the USA. When you visit our site, your browser loads the required web font into your browser cache. This transmits to the server which of our Internet pages you have visited. The IP address of the browser of the end device of the visitor to this website is also stored by Google. This is necessary so that your browser can display our texts in a visually improved way. You can set your browser so that the fonts are not loaded from the Google servers (e.g. by installing add-ons such as NoScript or Ghostery for Firefox.). If your browser does not support this function or you prevent access, a standard font will be used by your computer for display.

You can find more information about Google Webfonts at developers.google.com/fonts/faq.

General information on the subject of data protection at Google can be found at www.google.com/intl/de-DE/policies/privacy/.

2.9 Use of Social Media

2.9.1 Short version:

Social media functions can be used on our website.

When accessing one of these pages, a connection to the respective social media servers can be established. They are informed that you have visited our website with your IP address. If you now comment, like or tweet something, etc. and you are logged into your respective account, it may be possible for the social medium to assign your visit to our website to you and your user account. We would like to point out that we as the provider of the pages have no knowledge of the content of the transmitted data or their use.

These services are provided by the following companies:

Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA

Google+ Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA

Linkedin Inc., 2029 Stierlin Court, Mountain View, CA 94043, USA

Twitter Inc., 1355 Market St., Suite 900, San Francisco, CA 94103, USA

Xing AG, Dammtorstrasse 30, 20354 Hamburg, Germany

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA

Kununu GmbH, Wollzeile 1-3 Top 5.1, 1010 Vienna, Austria

Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA

The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and setting options for the protection of your personal data can be found in the data protection information of the respective providers:

Facebook de-de.facebook.com/privacy/explanation

Google www.google.de/intl/de/policies/privacy/

Linkedin www.linkedin.com/legal/privacy-policy

Twitter twitter.com/privacy

Xing www.xing.com/privacy

YouTube www.google.de/intl/de/policies/privacy/

Kununu www.kununu.com/de/info/datenschutz

Instagram help.instagram.com/155833707900388

If you do not want the respective social medium to be able to assign your visit to our site to your respective account, you must log out of the respective service before visiting our website.

2.10 Live Chat

Puettmann offers advice via live chat as part of its website. Live chat allows you to have a text communication with one of our consultants. The purpose of data collection is to process your request. The text content you enter into the chat mask during the live chat (name, request, any contact details) is voluntary. If you would like further contact during the chat, we ask you to use our contact form when requested by the consultant. The legal basis for collecting and processing the data is Art. 6 Para. 1 GDPR.

If you call up and use the live chat, your internet browser automatically transmits data (date and time of access, duration of the visit) at the beginning of use for technical reasons. The legal basis for this is the fulfillment of our legal obligations in the area of data security and our legitimate interest in eliminating disruptions and ensuring the security of our offers. This data is also processed for analysis purposes - without being assigned to a specific person. The data is collected for the same purposes as for anonymous data collection (see above).

The data you enter in the live chat will remain with us until the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

2.11 Contact Form/Inquiries

On our website you have the possibility to send us inquiries via the contact form. Your information from the contact form (content of your request, subject of your request and date) including the contact data you provided there (name, surname, email, title, company, telephone, country, city and postal code) will be processed for the purpose of processing the request and for stored with us in the event of follow-up questions. We do not pass on this data without your consent. The legal basis for collecting and processing the data is Art. 6 Para. 1 GDPR.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

2.12 Email Contact

If you send us inquiries or information by e-mail, your details (e-mail address, content of your e-mail, subject of your e-mail and date) including the contact data you provided there (name, surname, possibly telephone number, address) for the purpose of processing the request and in the event of follow-up questions. We do not pass on this data without your consent. The legal basis for collecting and processing the data is Art. 6 Para. 1 GDPR.

The user is informed that e-mails can be read or changed in transit without authorization and unnoticed. Puettmann uses software to filter unwanted emails (spam filters). The spam filter allows e-mails to be rejected if certain characteristics incorrectly identify them as spam.

The data you enter will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

2.13 Subscription to our newsletter

On our website you have the option of subscribing to our company's newsletter. In this way, we inform our customers and business partners at regular intervals about company offers. For this we need a valid e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only collected on a voluntary basis. For legal reasons, a confirmation e-mail will be sent to the e-mail address entered by a data subject for the first time for the newsletter dispatch using the double opt-in procedure. We use this data exclusively for sending the newsletter and do not pass it on to third parties. The legal basis for collecting and processing the data is Art. 6 Para. 1 GDPR.

When registering for the newsletter, we also store the IP address assigned by the Internet Service Provider (ISP) of the computer system used by the person concerned at the time of registration, as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of the e-mail address of a person concerned at a later point in time and therefore serves to protect us.

You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe wenglor news" link in every newsletter. Alternatively, you are welcome to email your unsubscribe request to news.de@wenglor.com at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

The data you have stored with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you have canceled the newsletter.

2.13.1 Newsletter tracking

The newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in e-mails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. Based on the embedded tracking pixel, we can see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects.

Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by us on the basis of legitimate interests in order to optimize the newsletter dispatch and to adapt the content of future newsletters even better to the interests of the person concerned. The legal basis is Art. 6 Para. 1 GDPR. This personal data will not be passed on to third parties. Affected persons are entitled at any time to revoke the relevant separate declaration of consent given via the double opt-in procedure. After a revocation, this personal data will be deleted by the person responsible for processing. Unsubscribing from the receipt of the newsletter will be interpreted as an automatic revocation.

2.14 Career Section/Online Application

On our site you have the option of using the careers area and/or submitting applications by email. The personal data (master data, contact details, attachments such as cover letter, curriculum vitae, certificates, etc.) of applicants are collected and processed for the purpose of handling the application process. The processing can also take place electronically. This is particularly the case if an applicant sends the relevant application documents, e.g. by e-mail or via a web form on the website, to the person responsible for processing. If the person responsible for processing concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the person responsible for processing does not conclude an employment contract with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests of the person responsible for processing. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). The legal basis for collecting and processing the data is Art. 6 Para. 1 GDPR.

3 Transmission of data

3.1 Transmission internally, within Puettmann

We transmit your data internally to the administration, human resources department, works council and payroll office in order to comply with our contractual or legal obligations. Your data will only be transmitted or disclosed to the extent required for this, in compliance with the relevant data protection regulations.

3.2 Transmission

3.3 Transfer to Third Parties

We transmit your data to certain third parties in order to be able to provide corresponding applications and services (so-called "processors") who provide external services for us. For example, newsletter services, IT providers, tax offices, etc. A transfer to other third parties may take place in order to fulfill our obligations (authorities, banks, social security agencies, etc.). Third parties only process the data in accordance with our instructions, and they are also prohibited from using this data for their own commercial purposes that do not correspond to the agreed purposes.

We have to disclose personal data if we are obliged to do so as part of ongoing legal proceedings, based on an injunction, by law or under applicable law (Article 6 (1) (f) GDPR).

We only pass on your personal data to third parties if: you have given your express consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR, the transfer according to Article 6 paragraph 1 sentence 1 lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data, in the event that there is a legal obligation for the transfer according to Art. 6 Para. 1 S. 1 lit this is legally permissible and required for the processing of contractual relationships with you in accordance with Article 6 (1) sentence 1 lit. b GDPR. If the processing of your data takes place outside of Europe, this transmission will take place in compliance with all applicable data protection laws and in particular with Art. 44 f. DSGVO.

3.4 Transfer to a third country or international organization

We transmit your data to countries outside the EU or the EEA (so-called third countries) for the above purposes (transmission and transmission to third parties (No. 4.3)). The transmission only takes place for the execution of our contractual and legal obligations or on the basis of your consent. This transmission takes place in compliance with all applicable data protection laws and in particular according to Art. 44 f. DSGVO. In particular, either due to adequacy decisions issued by the European Commission or due to certain guarantees (e.g. standard data protection clauses, etc.).

4 Closing part of the data protection declaration

4.1 Duration of storage

In principle, we store your data for as long as this is necessary to provide our online offer and the associated services or if this is provided for by the European legislator for directives and regulations or another legislator in laws or regulations to which the person responsible for processing is subject became. In all other cases, we delete your personal data after the purpose has been fulfilled, with the exception of data that we must continue to store to fulfill legal obligations (e.g. due to tax and commercial law retention periods, we are obliged to keep documents such as contracts and keep invoices for a certain period of time).

4.2 Technical Security

Puettmann uses technical and organizational security measures to protect your data managed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

For security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator, this site uses SSL encryption (Secure Socket Layer) in conjunction with the highest level of encryption used by your browser is supported. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL encryption is activated, the data that you transmit to us cannot be read by third parties.

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

4.3 Legal Basis for Processing

Art. 6 I lit. a DS-GVO serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfill a contract to which the data subject is party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example in the case of inquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data could become necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d GDPR. Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and fundamental freedoms of the person concerned do not prevail. If the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest is conducting our business for the benefit of all our employees and our customers.

4.4 Statutory or contractual requirements for providing the personal data; Necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of non-provision

We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information on the contractual partner). Sometimes it may be necessary for a contract to be concluded that a person concerned makes personal data available to us, which must then be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with them. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact one of our employees. Our employee clarifies to the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences would be if the personal data were not provided.

4.5 Minority Notice

This online offer is not aimed at children under the age of 16. Persons who have not yet reached the age of 16 may not transmit any personal data to Puettmann without the consent of their legal guardian.

4.6 Rights of data subjects

You have the right to information about the data we have stored, the duration of the data, the purpose and legal basis for storage, and the origin and recipient of transmissions. Inaccurate data must be corrected, data stored inadmissibly or no longer required must be deleted. In addition, the data subject has a right to object, a right to restriction of processing and the right to data portability.

This information is created upon your request. This information is free of charge.

You also have the right to lodge a complaint directly with a supervisory authority.

4.7 Revocation of your consent to data processing

Some data processing operations are only possible with your express consent. You have the option to revoke consent that you have already given at any time. An informal message to info@puettmann.com by e-mail to us is sufficient. The legality of the data processing that took place up until the revocation remains unaffected by the revocation.

Publication of the contact details of the data protection officer in accordance with Art. 37 Para. 7 EU-DSGVO

Data protection officer / coordinator according to Art. 37 EU-DSGVO / § 38 BDSG-new:

Mr. Frederik Püttmann (managing partner)
Phone +49(0)6171/91878-0
info@püttmann.com