Privacy Policy
We appreciate your visit to our website and your interest in our company. The protection of your personal data is important to us and we take the protection of this data very seriously. We therefore adhere to the valid data protection regulations in all our business processes. Our data protection declaration does not extend to the websites of other providers with whom we may be linked. By visiting our website, you consent to the use of your personal data and agree to the following privacy policy.
Information on the collection of personal data
(1) In the following we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
(2) The person responsible pursuant to Art. 4 para. 7 of the EU Data Protection Act (DSGVO) is Schildknecht AG, Haugweg 26, 71711 Murr. (Contact details can be found in the imprint)
(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions. We will delete the data that arises in this context after it is no longer required to be stored, or restrict processing if there are legal storage obligations.
(4) If we wish to use contracted service providers for individual functions of our offer or use your data for advertising purposes, we will inform you below in detail about the respective processes. We will also specify the criteria for the storage period.
(5) If required, you can contact our officially appointed data protection officer at the following contact details: datenschutz@schildknecht.ag
Definitions
This data protection declaration is based on the terms of the European Data Protection Act (DSGVO) and should be easy to read and understand both for the public and for our customers and business partners. In order to guarantee this, we would like to explain the terms used in advance.
Personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). A natural person shall be considered identifiable if he can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
Data subject
Data subject means any identified or identifiable natural person whose personal data are processed by the controller.
Processing
Processing” means any operation or set of operations which is carried out with or without the aid of automated processes and which relates to personal data, such as collection, recording, organisation, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or association, qualification, erasure or destruction.
Limitation of processing
Limitation of processing is the marking of stored personal data with the aim of limiting their future processing.
Profiling
Profiling is any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movement of that natural person.
Pseudonymisation
Pseudonymisation means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the provision of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data are not attributed to an identified or identifiable natural person.
Data controller or controller
The controller or data controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the controller or controllers may be designated in accordance with Union law or with the law of the Member States on the basis of specific criteria.
Processors
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Receivers
The recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party. However, authorities which may receive personal data in the course of a specific investigation task under Union law or the law of the Member States shall not be considered as recipients.
Third parties
Third party means any natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or processor
Consent
Consent shall mean any voluntary, informed and unambiguous expression by the data subject of his or her will in the particular case, in the form of a statement or other unequivocal confirmatory act, indicating that he or she consents to the processing of his or her personal data.
The processing of personal data and the nature and purpose of their use
We process personal data exclusively within the legal framework of the relevant legal norms and, if applicable, your consent. Personal data is all information that relates to a natural person or at least can be obtained and thus allows conclusions to be drawn about the person.
Processing means any operation or set of operations which is carried out with or without the aid of automated processes and which involves personal data, such as collection, recording, organisation, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or association, limitation, erasure or destruction.
Collection of personal data when you visit our website
(1) If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f DSGVO):
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Contents of the request (concrete page)
– Access status/HTTP status code
– amount of data transferred in each case
– Website from which the request originates
– browser
– Operating system and its interface
– Language and version of the browser software.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the location that sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective.
Disclosure of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:
– you have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO,
– the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
– in the event that there is a legal obligation to pass on data pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO, and
– this is legally permissible and required for the execution of contractual relationships with you pursuant to Art. 6 para. 1 sentence 1 lit. b DSGVO.
Log files
This data is technically necessary for us to display our websites to you and to guarantee stability and security. Since we can thus offer protection against misuse, we have come to the conclusion that this data can be processed – with a state-of-the-art guarantee of data security – whereby your interest in data protection-compliant processing is appropriately taken into account. The data is also stored in the log files of our system. These data will not be stored together with other personal data of yours.
The data will be deleted as soon as you leave our websites and the respective session has ended. The IP addresses are stored anonymously and the data is deleted after 190 days. Since the collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website, you have no opportunity to object.
Your data will be forwarded to our hosting service provider.
Cookies
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
– Transient cookies (see b)
– Persistent cookies (see c).
b) Transient cookies are automatically deleted when you close your browser. These include in particular session cookies. They store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
d) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.
e) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you will have to log in again for each visit.
f) The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects, which are stored on your end device. These objects store the required data regardless of the browser you are using and do not have an automatic expiration date. If you do not wish the Flash cookies to be processed, you must install an appropriate add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.
Analysis Tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f DSGVO. With the tracking measures used, we want to ensure that our website is designed in line with requirements and continuously optimised. On the other hand, we use the tracking measures in order to statistically record the use of our website and to evaluate it for you for the purpose of optimising our offer. These interests are to be regarded as justified within the meaning of the aforementioned provision.
The respective data processing purposes and data categories can be found in the corresponding tracking tools.
Possibility to contact us via the website
Due to legal regulations, the website contains information that enables quick electronic contact with our company as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the data controller by e-mail or via a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data transmitted voluntarily by a data subject to the data controller will be stored for the purposes of processing or contacting the data subject. This personal data will not be passed on to third parties.
Google Analytics
We use Google Analytics, a web analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”), for the purpose of tailoring our pages to meet your needs and for continuous optimisation. In this context, pseudonymised user profiles are created and cookies (see explanation above) are used. The information generated by the cookie about your use of this website such as
- Browser type/version,
- operating system used,
- Referrer URL (the previously visited page),
- Time of the server request,
are transferred to a Google server in the USA and stored there. This information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for market research purposes and to tailor these internet pages to meet requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of third parties. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that an allocation is not possible (IP masking).
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie is set to prevent your information from being collected in the future when you visit this website. The opt-out cookie applies only to this browser and only to our website and is placed on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=en).
To prevent Universal Analytics from capturing across multiple devices, you must opt-out on all systems in use. If you click here, the opt-out cookie will be set: Click here to turn off Google Analytics tracking.
The data sent by us and linked to cookies, user IDs or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.
Use of Google Maps
(1)On this website we use the offer of Google Maps. This allows us to display interactive maps directly on the website and allows you to conveniently use the map function.
(2)By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 3 of this declaration will be transmitted. This takes place regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in at Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and / or needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
(3)For further information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The terms of use for Google Maps can be found under terms of use for Google Maps. Detailed details can be found in the google.de Privacy Center: Transparency and Choices as well as Privacy Policy.
Appointments scheduling via calendly
For simple, fast and uncomplicated Appointments scheduling we use the tool calendly. The use of calendly is to improve our service for existing and new customers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f of the German Data Protection Act (DSGVO).
When using the tool, you will be asked for personal data such as name, e-mail address and telephone number. You also have the opportunity to present your request and provide us with further information. If you use the tool, your data from the inquiry form, including the information you provide there, will be stored and, of course, transmitted on the Internet. The processing of the data entered is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO).
This privacy policy and the provider’s privacy policy apply to the handling of data collected through the use of calendly. You can find the privacy policy of calendly at: https://calendly.com/pages/privacy
HubSpot
On this website, we use the service HubSpot for various purposes. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, phone: +353 1 5187500.
Hubspot is an integrated software solution that we use to cover various aspects of our online marketing. These include:
Email Marketing, Social Media Publishing & Reporting, Reporting, Contact Management (e.g. user segmentation & CRM), Landing Pages and Contact Forms.
Our sign-up service allows visitors to our website to learn more about our company, download content, and provide their contact information and other demographic information. This information, as well as our website content, is stored on servers operated by our software partner HubSpot. It may be used by us to contact visitors to our website and to determine which of our company’s services are of interest to them. All information we collect is subject to this privacy policy. We use all collected information exclusively to optimize our marketing measures.
More information about HubSpot’s privacy policy
More information from HubSpot regarding EU data protection regulations
More information about the cookies used by HubSpot can be found here & here
As part of the optimization of our marketing measures, the following data may be collected and processed via Hubspot:
– Geographic position
– Browser type
– Navigation information
– Referral URL
– Performance data
– Information about how often the application is used
– Mobile apps data
– HubSpot subscription service credentials
– Files that are displayed on site
– Domain names
– Pages viewed
– Aggregated usage
– Operating system version
– Internet service provider
– IP address
– Device identifier
– Duration of visit
– Where the application was downloaded from
– Operating system
– Events that occur within the application
– Access times
– Clickstream data
– Device model and version
The legal basis of the processing is your consent pursuant to Art. 6 (1) lit. a of the German Data Protection Act (DSGVO). If you do not want Hubspot to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with effect for the future. The personal data will be kept for as long as it is necessary to fulfill the purpose of processing. The data will be deleted as soon as they are no longer required to achieve the purpose.
In the context of processing via HubSpot, data may be transferred to the USA. The security of the transfer is secured via so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent pursuant to Art. 49 (1) lit. a DSGVO may serve as the legal basis for the transfer to third countries.
Newsletter
1) With your consent, you can subscribe to our newsletter with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
(2) We use the so-called double opt-in procedure to register for our newsletter. This means that after your registration we will send you an e-mail to the specified e-mail address in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the dates of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
(3) Your e-mail address is the only mandatory information for sending the newsletter. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation we save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 Para. 1 S. 1 lit. a DS-GVO.
(4) You can revoke your consent to the sending of the newsletter at any time and cancel your subscription to the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail, by sending an e-mail to info@schildknecht.ag or by sending a message to the contact details given in the imprint.
[(5) We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files stored on our website. For the evaluations we link the data mentioned in § 3 and the web beacons with your e-mail address and an individual ID. The data is collected exclusively under a pseudonym, i.e. the IDs are not linked to your other personal data, a direct personal reference is excluded.
You can object to this tracking at any time by clicking on the separate link provided in each e-mail or by informing us of another contact method. The information is stored as long as you have subscribed to the newsletter. After you have unsubscribed, we store the data purely statistically and anonymously. Such tracking is also not possible if you have deactivated the display of images in your e-mail program by default. In this case, the newsletter will not be displayed completely and you may not be able to use all functions. If you display the images manually, the above tracking will take place.
Social Media
We use the retargeting tool as well as the conversion tracking of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). For this purpose, the LinkedIn Insight Tag is integrated on our website, which enables LinkedIn to collect statistical data about your visit and use of our website and to provide us with corresponding aggregated statistics on this basis. In addition, the service is used to be able to show you interest-specific and relevant offers and recommendations after you have found out about certain services, information and offers on the website. The information in this regard is stored in a cookie. Further information on data processing can be found in the LinkedIn privacy policy.
As a rule, the following data is collected and processed:
– IP address
– Device information
– Browser information
– Referrer URL
– Timestamp
The legal basis for the processing is your consent pursuant to Art. 6 (1) lit. a of the DSGVO. If you do not want the aforementioned data to be collected and processed via LinkedIn, you can refuse your consent or revoke it at any time with effect for the future. The personal data will be kept for as long as it is necessary to fulfill the purpose of processing. The data will be deleted as soon as they are no longer required to achieve the purpose.
In the context of processing via LinkedIn, data may be transferred to the USA and Singapore. The security of the transfer is regularly secured via so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security that corresponds to that of the DSGVO. If the standard contractual clauses are not sufficient to establish an adequate level of security, consent will be obtained from you in advance as part of the Usercentrics consent management system in accordance with Article 49 (1) lit. a of the DSGVO.
Integration of YouTube videos
(1) We have included YouTube videos in our online offering which are stored at http://www.YouTube.com and can be played directly from our website. These are all integrated in the “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transmission.]
(2) By visiting the Website, YouTube receives the information that you have accessed the corresponding subpage of our Website. In addition, the data specified under § 3 of this declaration will be transmitted. This occurs regardless of whether YouTube provides a user account that you are logged in to or whether there is no user account. If you are logged in at Google, your data will be assigned directly to your account. If you do not wish your profile to be associated with YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for advertising, market research and/or the design of its website to meet your needs. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
(3) Further information on the purpose and scope of data collection and processing by YouTube can be found in the Privacy Policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Rights
Rights concerned
As we process your personal data, you have the following rights:
(1) You have the following rights against us with regard to your personal data:
– Right to information,
– Right to rectification or deletion,
– Right to limit the processing,
– Right to object to the processing,
– Right to data transferability.
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
Right to information
In accordance with Art. 15 DSGVO, you may request information about your personal data processed by us. In particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data, unless it has been collected from us, as well as the existence of an automated decision-making process including profiling and, where applicable, meaningful information on its details;
Correction
In accordance with Art. 16 DSGVO, you may immediately request the correction of incorrect or incomplete personal data stored by us.
Deletion
In accordance with Art. 17 DSGVO, you may request the deletion of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
Restriction
Pursuant to Art. 18 DSGVO, you may request the restriction of the processing of your personal data insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing pursuant to Art. 21 DSGVO.
Data transferability
In accordance with Art. 20 DSGVO, you may receive your personal data that you have provided to us in a structured, common and machine-readable format or request transmission to another responsible person.
Right of withdrawal
In accordance with Art. 7 para. 3 DSGVO, you can revoke your consent to us at any time.
As a result, we may no longer continue the data processing based on this consent in the future.
Right of appeal
Pursuant to Art. 77 DSGVO, you may complain to a supervisory authority if you are of the opinion that the processing of your personal data violates data protection regulations. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.
Right of objection
If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO, you have the right, pursuant to Art. 21 DSGVO, to object to the processing of your personal data if there are reasons for doing so which arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without stating a particular situation.
If you wish to exercise your right of revocation or objection, simply send us an e-mail.
Data protection for applications and in the application process
We process the personal data of applicants for the purpose of processing the application process. The processing can also be carried out electronically. This is particularly the case if an applicant submits corresponding application documents to us electronically, for example by e-mail or via a web form on the website. If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the data controller does not conclude an employment contract with the applicant, the application documents shall be automatically deleted two months after the rejection decision has been announced, provided that no other legitimate interests of the data controller conflict with such deletion. Other legitimate interests in this sense include, for example, the duty to provide evidence in proceedings under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz – AGG).
Duration for which the personal data is stored
The criterion for the duration of the storage of personal data is the respective legal retention period. After this period has expired, the corresponding data will be routinely deleted unless they are no longer required for the fulfilment or initiation of the contract.
Existence of an automated decision-making process
As a responsible company, we refrain from automatic decision-making or profiling.
Data security
We use the widespread SSL procedure (Secure Socket Layer) for encryption within the website visit. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
Modification of this data protection declaration
This privacy policy is currently valid. Due to the further development of our website and offers about it or due to changed legal or official requirements, it may be necessary to change this privacy policy. You can call up and print out the current data protection declaration on our website at any time.
Status May 2018