1. Data Protection at a Glance
Data collection on our website
Who is responsible for data collection on this website?
Data is processed on this website by the operator of the website. The contact information for the operator of this website is provided in the Legal Notice.
How do we collect your data?
Your data will be collected when you provide it to us. For example, this can be data that you enter in a contact form. Other data is automatically collected by our IT systems when you visit our website. This is primarily technical data (e.g. web browser, operating system, or time the page was accessed). This data is collected automatically, as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other data can be used to analyze your behavior as a user of the website.
What rights do you have relative to your data?
Analysis tools and tools from third-party providers
2. General instructions and mandatory information
Information concerning the responsible party (controller)
The responsible party (controller) for the data processing on this website is:
Spohn & Burkhardt GmbH & Co. KG
Managing director: Markus Seifert
89143 Blaubeuren, Germany
Telephone: +49 7344 171-0
The responsible party is the natural or legal person, who alone or together with others decides on the purposes and means of the processing of personal data (e.g. name, email addresses, etc.).
Legally prescribed data protection officer
For our company we have appointed a data protection officer.
Kulitz & Twelmeier GmbH
Mr. Lars Twelmeier
Magirus – Deutz – Straße 12
Telephone: +49 731 - 206 431 15
Revocation of your consent to data processing
Many data processing procedures are only possible with your express consent. You can revoke a previously granted consent at any time. An informal communication via email sent to us suffices in this regard.
The legality of the data processing that occurred until the revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to object to data collection for advertising purposes (Article 21 GDPR)
Right to file a complaint with the responsible supervisory authority
If there are violations of the GDPR, the concerned party has a right to file a complaint with a supervisory authority, particularly in the EU Member State of your habitual residence, of your workplace or of the location of the presumed violation. The right to file a complaint exists without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to have the data that we process through automated procedures on the basis of your consent or in fulfillment of a contract, provided to you or to a third-party in a prevalent, machine-readable format. If you demand direct transmission of the data to a different responsible party (controller) this will only occur if it is technically feasible.
SSL encryption or TLS encryption
For security reasons, and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this website uses SSL encryption or TLS encryption. You can identify an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock icon in your browser bar. When the SSL or TLS encryption is activated the data that you transmit to us cannot be read by third parties.
Encrypted payment transactions on this website
If after entering into a contract against payment, an obligation exists to transmit your payment data (e.g. account number for direct debit authorization) to us, this data will be required for payment processing. Payment transactions via the standard means of payment (Visa/Mastercard, direct debit) occur exclusively via an encrypted SSL or TLS connection. You can identify an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock icon in your browser bar. With an encrypted communication the payment data that you transmit to us cannot be read by third parties.
Information, blocking, deletion, and correction
Within the framework of the applicable statutory regulations, you have the right, at any time, to free-of-charge information concerning your stored personal data, its origin and recipients, and the purpose of the data processing, and possibly a right to correction, blocking or deletion of this data. In this regard, or if you have questions concerning personal data, you can contact us at any time via the address specified in the Legal Notice.
Right to restriction of the processing
You have the right to demand restriction of the processing of your personal data. To do this, you can contact us at any time at the address specified in the Legal Notice. The right to restriction of the processing exists in the following cases:
If you dispute the correctness of your personal data that we have stored; as a rule we require some time to verify this. For the duration of verification, you have the right to demand that the processing of your personal data be restricted. If the processing of your personal data occurred/occurs unlawfully, instead of deletion you can demand restriction of the data processing.
If we no longer require your personal information but you require your personal data to assert, exercise or defend legal claims, then you have the right, instead of deletion, to demand that the processing of your personal data be restricted. If you have objected in accordance with Article 21(1) GDPR, then your interests must be weighed against our interests. As long as it is not determined whose interests prevail, you have the right to demand that the processing of your personal data be restricted. If you have restricted the processing of your personal data, this data – other than for its storage – may only be processed with your consent or for assertion, exercise or defense of legal claims or for protection of the rights of another natural or legal person or for reasons of an important public interest on the part of the European Union or of a Member State.
Objection to advertising emails
We hereby object to use of contact information published as part of the legal notice requirement to send us advertising and information material that we have not expressly requested. The operator of the website expressly reserves the right to take legal steps in the event of unsolicited sending of advertising information, for example, through spam mail.
3. Data collection on our website
In some cases the website uses so-called cookies. Cookies do not cause any damage to your computer, nor do they contain viruses. Cookies are used to make our offering more user-friendly,
Server log files
The provider of the website automatically collects and stores information in so-called log files that your browser automatically transmits to us. This information consists of:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
A combination of this data with other data sources does not take place. Collection of this data occurs the on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in technical error-free presentation and optimization of the operator's website – for this purpose the server log files must be collected.
If you send inquires to us via the contact form, we will store your information from the contact form, including the contact data specified there, for the purpose of processing the inquiry and for the eventuality of follow-up questions. We do not forward this data without your consent. Thus, the processing of the data entered in the contact form occurs exclusively on the basis of your consent (Article 6(1)(a) GDPR). You can revoke this consent at any time. An informal communication via email sent to us suffices in this regard. The legality of the data processing that occurred until the revocation, remains unaffected by the revocation. The data you enter in the contact form remains with us until you request that we delete it, revoke your consent to storage, or the purpose for which the data is stored no longer applies (e.g. after the processing of your inquiry has been concluded). Mandatory statutory regulations – in particular retention periods – remain hereby unaffected.
Inquiry via email, telephone, or fax
If you contact us via email, telephone or fax, your inquiry, including all personal data (name, inquiry) arising therefrom for the purposes of processing your concern
will be stored and processed in our facilities. We do not forward this data without your consent. The processing of this data occurs on the basis of Article 6(1)(b) GDPR, if your inquiry is related to fulfillment of a contract or is required for execution of pre-contractual measures. In all other cases the processing is based on your consent (Article 6(1)(a) GDPR) and/or on our legitimate interests (Article 6(1)(f) GDPR), as we have a legitimate interest in effectively processing the inquiries directed to us. The data sent to us via contact inquires remains with us until you request that we delete it, revoke your consent to storage or until the purpose for which the data is stored no longer applies (e.g. after the processing of your inquiry has been concluded). Mandatory statutory regulations – in particular statutory retention periods – remain hereby unaffected.
Registration on this website
You can register on this website in order to use additional functions on the website. We only use the data entered in this regard for purposes of utilization of the respective offering or service for which you have registered. The mandatory information requested at registration must be completely specified. Otherwise we will reject the registration. For important changes, such as the scope of the offering or in the case of necessary technical changes, we use the email address specified at registration to inform you of these changes via this channel. The processing of the data entered at registration occurs on the basis of your consent (Article (6)(1)(a) GDPR). You can revoke a consent that you have granted, at any time. An informal communication via email sent to us suffices in this regard. The legality of the data processing that has already occurred remains unaffected by the revocation.
We store the data collected at registration for as long as you are registered on our website, thereafter it will be deleted. Statutory retention periods remain hereby unaffected.
Processing of data (customer data and contract data)
We collect, process, and use personal data only to the extent required for establishment, development or modification of the legal relationship (contract data). This occurs on the basis of Article 6(1)(b) GDPR, which permits the processing of data for fulfillment of a contract or pre-contractual measures. Personal data concerning the utilization of our websites (use data), we only collect, process, and use to the extent required to enable utilization of the service for the user or for billing. The collected customer data will be deleted after conclusion of the order or termination of the business relationship. Statutory retention periods remain hereby unaffected.
Data transmission when a contract is entered into for online shops, dealers and shipment of goods
We transmit personal data to third parties only if this is necessary as part of contract data processing, for example to the company entrusted with delivery of the goods or the credit institute commissioned with payment processing. A more extensive transmission of the data does not occur, or it only occurs if you have expressly consented to the transmission. Forwarding of your data to a third party without express consent, i.e. for advertising purposes, does not occur. The basis for the data processing is Article 6(1)(b) GDPR, which permits the processing of data for fulfillment of a contract or pre-contractual measures.
4. Analysis tools and advertising
This website uses functions of the Google Analytics web analysis service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called "cookies". These are text files, which are stored on your computer and that allow an analysis of your use of the website. As a rule, the information generated by the cookie about your use of this website will be transferred to a Google server in the USA and stored there. Storage of Google Analytics cookies and use of this analysis tool occur on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the analysis of user behavior in order to optimize his web offering as well as its advertising.
On this website we have activated the IP Anonymisation function. Through this measure, within the Member States of the European Union, or in other States party to the Agreement on the European Economic Area, your IP address will be truncated by Google before transmission to the USA. The complete IP address is transmitted to a Google server in the USA and truncated there in exceptional cases only. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to produce reports on website activities and to provide other services related to the use of the website and of the Internet to the operator of the website. Google does not combine the anonymized IP address transmitted by your browser in the scope of Google Analytics with other data.
Objection to data collection
You can prevent collection of your data through Google Analytics by clicking the following link. An opt-out cookie will be set that prevents the collection of your data at future visits to this website:
Job data processing
We have entered into a contract with Google for job data processing and completely implement the strict requirements of the German data protection authorities for the use of Google Analytics.
Duration of storage
Data on the user level and event level stored by Google, which is linked with cookies, user identifiers (e.g. user ID) or ad IDs (e.g. double-click cookies, android ad-ID) will be anonymized or deleted after 14 months. Details in this regard are provided at the following link:
5. Payment providers and resellers
Among other options on our website we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). If you select payment via PayPal the payment data that you enter will be transmitted to PayPal. Transmission of your data to PayPal occurs on the basis of Article 6(1)(a) GDPR (consent) and Article 6(1)(b) GDPR (processing for fulfillment of a contract). You have the right to revoke your consent to the data processing at any time. A revocation has no influence on the effectiveness of the data processing procedures of the past.
6. Our own services
We offer you the possibility of applying for employment with us (e.g. via email, regular mail or via the online job application form). Below, we inform you of the scope, purpose, and use of your personal data collected as part of the job application process. We assure that collection, processing, and use of your data occur in compliance with applicable data protection legislation and all other statutory regulations, and that your data will be processed with strict confidentiality.
Purpose and scope of data collection
If you send us your application, we process your personal data associated with the application (e.g. contact data and communication data, application documents, notes associated with job interviews, etc.), if such processing is required for the decision concerning establishing an employment relationship. In this regard the legal basis is Article 26 of the German Federal Data Protection Act (revised) (BDSG-neu), Article 6(1)(b) GDPR (general initiation of a contract), and – if you have granted your consent – Article 6(1)(a) GDPR. You can revoke your consent at any time. Within our company, your data will only be forwarded to persons participating in the processing of your application. If your application is successful, the data you have submitted will be stored in our data processing systems on the basis of Article 26 of the German Federal Data Protection Act (revised) (BDSG-neu) and Article 6(1)(b) GDPR for the purpose of executing the employment relationship.
Retention period of the data
If we cannot offer you a job, if you refuse a job offer, withdraw your application, revoke your consent for data processing, or request that we delete your data, then the data you have provided to us, including any remaining physical application documents will be saved or stored (retention period) for a maximum of 6 months after the application process is concluded, in order to verify discrepancies (Article 6(1)(f) GDPR).
YOU CAN OBJECT TO SUCH STORAGE, IF LEGITIMATE INTERESTS ON YOUR PART, OUTWEIGH THE LEGITIMATE INTERESTS ON OUR PART.
After the storage period expires, the data will be deleted, unless a statutory retention obligation or other legal grounds for further storage are present. If it is evident that storage of your data will be required after the storage period expires (due to a threatened or pending legal dispute), then deletion will not occur until after the data has become irrelevant. Other statutory retention obligations remain hereby unaffected.
7. Use of data and credit check
For purchase on account or debit, it is necessary for entry into the contract in accordance with Article 22(2)(a) GDPR to obtain identification and credit information from service providers specializing in this area (credit agencies). This information serves as protection of our legitimate interests in minimizing payment defaults, which takes priority when interests are weighed. For this purpose, we transfer your necessary personal data to the following company(ies):
Creditreform Boniversum GmbH
41460 Neuss, Germany
Appropriate measures for protection of your rights, liberties, and legitimate interests will hereby be taken into consideration.. You have the possibility, by using the contact information provided below, of presenting your point of view and contesting the decision.