Privacy Policy and Data Protection of Leichtbau BW GmbH

We take the protection of your personal data seriously and handle your  personal information with confidentiality in accordance with the statutory data protection regulations and the provisions of this data protection and privacy notice.

1. Name and contact information of the data controller and designated data protection officer

Data controller:
Leichtbau BW GmbH
Breitscheidstr. 4
70174 Stuttgart
Germany

Tel. +49 (0) 711 / 128988-40
info(at)leichtbau-bw.de

Data protection officer:

datenschutz(at)leichtbau-bw.de

2. Purpose of processing

2.1 Consent (Art. 6 para. 1A GDPR), right to revoke
The processing of personal data for specific purposes (e.g. sending you our newsletters by email after clicking on a confirmation link that is sent to you, transfer of your data to third parties, evaluation of data for marketing purposes) will proceed after you have granted us consent. You may revoke your consent at any time. The subscription to our newsletter can be canceled at any time by clicking the unsubscribe button in the newsletter. Please note that any revocation of consent will only apply to the future.

2.2 Contractual or precontractual obligations (Art. 6 para. 1B GDPR)
We process personal data which is required for the fulfillment of a contract to which you are a party or for the implementation of precontractual measures which become necessary due to a request submitted by you, e.g. through the contact form on our website. The purposes of the data processing are oriented on the contents of the contract (e.g. employment contract, service contract, management contract, framework agreement) and may include inter alia the evaluation, consultation and implementation of further action. In the course of your application for employment, the data provided by you (e.g. application letter, CV, employment history) which we require to evaluate your potential employment in our company will be carried out by those departments in our company which process employment applications (e.g. general management). The personal data of employees are processed for the purpose of fulfilling the employment contract if necessary in order to evaluate the establishment of an employment relationship or to implement the terms after the establishment of an employment relationship or to exercise or fulfill any rights and obligations arising from applicable law.

2.3 Processing required by law (Art. 6 para. 1C GDPR)
Data processing is carried out if required under applicable law for purposes including the prevention of fraud or money laundering, the fulfillment of fiscal monitoring and reporting purposes and in order to respond to inquiries by public authorities.

2.4 Legitimate interests (Art. 6 para. 1F GDPR)
In order to protect our legitimate interests or those of third parties, data processing will be carried out for certain purposes following a prior evaluation of interests, e.g. for premises security, for the production and distribution of image and sound recordings for marketing and PR purposes on our homepage, printed, online and social media as well as the daily and trade press, protection of legal claims, prosecution of criminal acts, improvements in product development, optimized customer outreach for marketing purposes including contacting other companies by telephone, delivery of advertising information by post (e.g. invitations to events, introduction of new services), business optimization or for improved data security.

3. Data processing through the use of our website

3.1 Collection and processing of http protocol data
When visiting our website and when accessing any file, our web server will collect protocol information about these procedures (e.g. browser type, time and date of the website access). These data are not personal data. It is not possible for us to allocate these data to a specific natural person.

All such information is evaluated by use strictly for statistical purposes. This information is not transferred to third parties. This information is not coupled by us to other data.

3.2 Newsletter
If you wish to subscribe to our newsletter, we require in addition to your email address the confirmation that you are the owner of the email address provided and that you agree to receive the newsletter and that we may send the newsletter to the address provided. Other information may be freely provided by you. The provision of our newsletter is carried out by the service provider CleverReach GmbH & co. KG, Mühlenstr. 43, 26180 Rastede, Germany (CleverReach). CleverReach provides comprehensive analysis possibilities for determining if the newsletter is opened and used. These analyses are carried out on groups of recipients and are not used by us to evaluate any individual newsletter recipient. Further information on CleverReach and their data protection policies are available at: www.cleverreach.com/en/privacy-policy/
You can unsubscribe at any time either by notifying us directly or by clicking the unsubscribe link in the newsletter.

3.3 Contact form
You have the option of contacting us at any time via the following address through the contact form on our homepage: www.leichtbau-bw.de/en/footer/contact/contact.html
In doing so it is necessary to provide a valid email address in order to allow us to contact you through this address and answer your requests and queries. Other information can be freely provided by you through the contact form.

3.4 Registration for events
For certain events, we occasionally offer the option of registering for the event through a registration form on our website. In such cases, it is necessary that you provide your name and your contact information in order for us to process your request and complete your registration. Other information can be freely provided by you through the registration form.

3.5 Use of cookies
Cookies are packets of data which are sent by the web server to the user's browser and stored by the browser for later access. You determine whether or not cookies may be collected by configuring your browser settings to inform you prior to storing cookies and only storing cookies once you have explicitly agreed to do so.

We use cookies for the exclusive purpose of collecting information on the use of our web presence and for statistical purposes.

Our cookies contain the following data: the cookies contain no personal information. The data are not coupled with any personal data that you may provide to us.

3.6 Social plugins from Facebook, Twitter, YouTube and XING
Our website implements social plugins (“Plugins”) provided by social networks and a social video platform. In order to improve the protection of your data when visiting our website, the plugins are not universally accessible on the website but only through an HTML link. This form of integration ensures that by accessing any part of our website which contains such plugins, no automatic connection with the servers of the providers of the respective social networks or video platform is created. If you click on any of the buttons, a new window will open in your browser to the site of the respective provider to which you may then (after entering your login details) click the like or share button. The purpose and scope of the data collected and the processing and use of the data by these providers as well as your rights and privacy protection options in regards thereto can be found in the privacy policies of the providers.
https://www.facebook.com/policy.php
https://twitter.com/privacy
https://policies.google.com/privacy
https://privacy.xing.com/en/privacy-policy

4. Categories of recipients, transfer to third countries
In order to carry out the intended processing purposes, the respectively required data may be made accessible to various separate departments within our company. External data processors may also be contracted by us and receive data for specific purposes, e.g. IT services, sensitive data destruction and marketing. Other recipients of personal data may also include public authorities, credit and financial service providers, lawyers, tax consultants or rating agencies. A data transfer to third countries will only occur to the extent necessary for e.g. the implementation of a contract, fulfillment of statutory obligations or if you have given consent. Through the integration of IT components, it cannot be ruled out that an IT service provider from a third country (e.g. USA) may have access to personal data. Otherwise, no transfer of personal data to third countries or any international organization is carried out.

5. Duration of data storage
Personal data is stored by us for the duration of the contractual relationship. In addition, the statute of limitation of legal claims extends in most cases to three years. Following the employment application procedure, we will normally delete your data after three months provided that no employment contract between you and our company is entered into. The personal data collected by us for the use of the contact form are automatically deleted after your request or query has been answered. Various retention and documentation statutes apply on the basis of e.g. the German Commercial Code (HGB) and the Tax Ordinance (AO) which may extend for up to ten years.

6. Obligation to provide data
You are only obligated to provide such personal data as required for the establishment, implementation and termination of a contract or which we are obligated by law to collect. If you do not provide us with the required information and documents, we will be unable to enter into or continue the business relations which you request.

7. Automated decision making in individual cases, profiling
We do not implement any fully automated decision-making processes for establishing and implementing our business relationship. We may process your data through partially automated means for the purpose of evaluating specific personal aspects (profiling), e.g. in the evaluation of targeted customer outreach, tailored advertising including market and opinion research as well as for scoring and rating procedures. The evaluation may take into account for example data on payment history (e.g. account statements and balances) as well as criteria such as business sector affiliation and experiences from the current business relationship.

8. Categories of personal data, data sources
We process for example the following categories of personal data: person master data, contract master data, data for the implementation and termination of contracts, service instruction data, data for the fulfillment of legal obligations, marketing and sales data, data on the use of our telecommunications (e.g. time and date of website access, apps or newsletter, clicks on our provided links and entries) as well as other data comparable to these data categories. We process the data that we receive from you in the course of our business relationship as well as the data received legitimately by us from other third parties. Furthermore, we collect data from publicly accessible sources (e.g. business directories and records of debtors, commercial registries, media).

9. Your right to information
You have the right to request at any time information on the personal data which we store in relation to you, including the sources and recipients of your data and the purpose of the data processing. Information requests should be submitted in writing (to: Leichtbau BW GmbH, Breitscheidstraße 4, 70174 Stuttgart, Germany) or by email (to: info@leichtbau-bw.de).

Below you will find a summary of your information and data subject rights:

- Art. 15 GDPR: Purpose of processing, categories of personal data that are processed, recipients or categories of recipients to whom personal data are disclosed, in particular third countries, the provisional retention period or criteria for determining the retention period, information on your rights to data correction, deletion, restriction of processing as well as the right to object to the processing, right to appeal to the data protection regulatory authority, source of the data, the implementation of automated decision making and profiling if applicable, the appropriate guaranties pursuant to Art. 46 in cases of transfer to third countries/international organizations.

- Art. 16 GDPR: You have the right to demand the correction of any incorrect or incomplete personal data held by the data controller.

- Art. 17 GDPR: You have the right to demand the immediate deletion of the personal data stored by us provided that you have e.g. revoked your consent to the storage of your personal data or the data are processed illegitimately.

- Art. 18 GDPR: You have the right to demand the restriction of the processing of your personal information by Leichtbau BW provided that the correctness of the data is disputed by you, the processing is illegitimate but you reject deletion or you have objected to the processing in accordance with Art. 21 GDPR.

- Art. 20 GDPR: You have the right to receive information on the personal data held by us in a structured, common and machine readable format. Furthermore, you may demand from us the transfer of your data to another data controller.

- Art. 7 para. 3 GDPR: You have the right to revoke any consent you have issued to the storage and processing of your personal data at any time. This revocation has the consequence that we may in the future no longer continue the data processing and storage carried out on the basis of this consent.

- Art. 77 GDPR: You have the right to appeal to a data protection regulatory authority at any time. You may contact the data protection regulator for you typical place of residency or employment or you may contact the data protection regulator responsible for our place of business (Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

10. Validity of and changes to this data protection and privacy policy notice
This data protection and privacy policy notice is currently valid as of 1st May 2018. Amendments and updates to this data protection and privacy notice may become necessary due to changes in statutory or administrative requirements. The respectively valid data protection and privacy policy notice can be accessed at any time through the following link: http://www.leichtbau-bw.de/privacy-policy
Furthermore, a link to the data protection and privacy policy is available in the footer of our website.

This data protection and privacy notice applies only to the contents of our own servers and does not extend to the external websites accessible through links on our website.


Information on your right to object pursuant to Art. 21 of the General Data Protection Regulation (GDPR)

Objection due to particular situation

You have the right to object, on reasons relating to your particular situation, to object to processing of personal data concerning you which is processed based on Article 6 para. 1e GDPR (data processing in public interest) and Article 6 para. 1f GDPR (data processing based on legitimate interests); this also applies to profiling carried on this basis. If you object, we will no longer process your personal data unless we can provide necessary vital interests in the processing which override your interests, rights and liberties or which serves the pursuit, exercise or defense of legal claims.

Right to object to the processing of data for the purpose of direct marketing

We process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data relating to you for the purposes of such advertisement; this also applies to profiling to the extent used in connection with direct marketing procedures. If you object to the processing for direct marketing, we will no longer use your personal data for such purposes. The objection does not require any specific form and should be addressed to the extent possible to:

Leichtbau BW GmbH
Landesagentur für Leichtbau Baden-Württemberg
Breitscheidstraße 4
70174 Stuttgart
Germany
Email: info(at)leichtbau-bw.de


If you have any questions which are not answered in this data protection and privacy notice, you can contact us at any time through the following email address:
info(at)leichtbau-bw.de