PRIVACY
With the following information, we would like to give you an overview of the processing of your personal data by us and your rights under data protection law. Personal data, e.g. name, contact details or function of a data subject are required for the purpose of communication, exchange of information and services as well as for other purposes related to an already existing business relationship.
Generally speaking: We, Harold Scholz & Co. GmbH take the protection of your personal data very seriously. Which data is processed in detail and how it is used depends largely on the commissioned or agreed services. Therefore, not all information mentioned in this privacy policy may apply to you.
1. data subject rights or what rights do I have as a data subject?
Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR and the right to data portability under Article 20 of the GDPR. With regard to the right to information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG apply. In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 DSGVO in conjunction with § 19 BDSG). You may revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the DSGVO came into force, i.e. before May 25, 2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. Please feel free to contact our data protection officer mentioned below in this regard.
Minors
In general, our website and our offer are not directed at persons under 16 years of age. We do not process information from persons who are known to us to be under 16 years of age without first obtaining the verifiable consent of a legal representative. Upon request, the legal representatives may inspect the information provided by their child or request that it be deleted.
Do I have to provide my personal data?
Within the scope of our business relationship, you must provide those personal data that are necessary for the establishment and execution of a business relationship and the fulfillment of the associated contractual obligations or that we are legally obligated to collect. Without this data, we will usually have to refuse to conclude the contract or execute the order, or will no longer be able to perform an existing contract and may have to terminate it.
Is there any automated decision making?
No. At present, we do not use fully automated decision-making pursuant to Art. 22 DSGVO for the establishment and implementation of business relationships. Profiling" does not take place.
2. information about your right to object according to Art. 21 DSGVO
Right to object on a case-by-case basis
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. Art. 6(1)(f) DSGVO (data processing based on a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 DSGVO.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing. This does not apply in the event that we can demonstrate that the processing is carried out in the context of your interests, rights or freedoms, or that the processing serves the assertion or the exercise or defense of legal claims.
Right to object to processing of data for direct marketing purposes
In individual cases, we process your personal data for the purpose of direct marketing. You have the right to object at any time to the processing of relevant personal data for the purpose of such advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
Recipient of the opposition
The objection can be made informally with the subject "Objection", stating your name and address, and should be addressed to this e-mail address: datenschutz@harold-scholz.de.
3. who is responsible for data processing and whom can you contact?
Responsible for data processing is
Harold Scholz & Co. GmbH
Ickerottweg 30
45665 Recklinghausen
Tel.: 02361/9888-0
Should you wish to make use of the rights mentioned in point 1 or should you have any further questions regarding data protection at Harold Scholz & Co. GmbH, you can reach our company data protection officer at the above address or via e-mail with the addition DATA PROTECTION at the following e-mail contact: datenschutz@harold-scholz.de
Data subjects can also submit complaints to the supervisory authority in their country. The contact details of the state data protection authorities can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
The supervisory authority responsible for our company is the:
State Commissioner for Data Protection and Freedom of Information
P.O. Box 20 04 44
40102 Düsseldorf
4. what sources and data do we use?
We process personal data that we:
- received in the course of using our website by, among others, customers/applicants or also interested parties (hereinafter: you).
- in connection with registration processes or a personal provision of data, e.g. by handing out a business card, by the company, e.g. when contact information is provided by their responsible persons.
5. what do we process your data for (purpose of processing) and on what legal basis?
Our data processing is carried out in accordance with the legal provisions, in particular with the regulations of the European Union's General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG) in its current version.
We process your data
a) for the fulfillment of contractual obligations (Art. 6 para. 1 b DSGVO)
The processing of data may take place in the context of the performance of contracts with you as our customer or for the performance of pre-contractual measures. This includes:
- Transaction processing, e.g. payment, invoicing and contract management
- Logistics / Transport
- Communication e.g. to clarify questions or appointments and to exchange information.
b) within the framework of the balancing of interests (Art. 6 para. 1 f DSGVO)
Where necessary, we may process your data beyond the actual performance of the contract to protect legitimate interests of us or third parties. Examples:
- Testing and optimization of demand analysis procedures for the purpose of direct customer contact,
- Advertising or market and opinion research insofar as you have not objected to the use of your data,
- Assertion of legal claims and defense in legal disputes,
- Measures for business management and further development of services and products
- Complaint Management
c) based on your consent (Art. 6 para. 1 a DSGVO)
Insofar as you have given us consent to process personal data for specific purposes (e.g. for marketing purposes), the lawfulness of this processing is based on your consent.
d) due to legal requirements (Art. 6 para. 1 c DSGVO) or in the public interest (Art. 6 para. 1 e DSGVO)
In addition, we are subject to various legal obligations, i.e. legal requirements (e.g. tax laws). The purposes of processing include, among others, the fulfillment of tax control and reporting obligations and much more.
e) in the context of the establishment of an employee relationship Art. 88 DSGVO in conjunction with. § Section 26 (1) BDSG)
If you apply for a job with us, your personal data may also be processed.
Data sharing
In compliance with legal requirements and existing internal regulations, data required for the respective purpose may be passed on to other internal and external bodies in the following cases:
Operational purposes
- to service providers/processors (forwarding companies, market research companies)
Reporting and information obligations
- to authorities and other government agencies
Clarification of claims and accusations
- to attorneys, courts and other government agencies and authorities
In order to process orders, personal data may be transferred to trading partners within the European Economic Area (EEA) and Switzerland. The EU Commission has determined that an adequate level of data protection exists in Switzerland.
Data storage
Your data will only be stored for as long as is necessary to fulfill the respective purpose and to comply with regulatory requirements, generally for the duration of the respective contractual relationship including any applicable statutory retention period. The personal data of business partners is usually deleted 10 years after the last contact. For other persons, e.g. visitors or newsletter subscribers, the data is deleted 5 years after the last contact or upon request. The deletion of data occurs within the framework of the deletion routines defined by the process owners. Further details on the deletion of personal data collected via our website can be found in 6.1 to 6.4 of this privacy policy.
Questions regarding the scope, correction or deletion of your data as well as requests for information can be clarified with the data protection officer (address see above).
6. what does this mean in detail with regard to the provision of this website with the services available therein?
6.1 Provision of the website and creation of log files
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:
- (1) Information about the browser type and version used.
- (2) the operating system of the user
- (3) the Internet service provider of the user
- (4) the IP address of the user
- (5) Date and time of access
- (6) Websites from which the user's system accesses our website
- (7) Websites that are accessed from the user's system via our website
The data is also stored in the log files of our system. Not affected by this are the IP address of the user or other data that allow the assignment of data to a user. A storage of this data together with other personal data of the user does not take place.
Legal basis for the temporary storage of the data of Art. 6 para. 1 lit. f DSGVO.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session. These purposes represent our legitimate interest in data processing pursuant to Art. 6 (1) lit. f DSGVO.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
6.2 Contact form and e-mail contact
On our website there is a contact form which can be used for electronic contact. If you take advantage of this option, the data entered in the input mask will be transmitted to us and stored. These data are:
- (a) Company name
- (b) Name
- (c) Street
- (d) Postcode
- (e) Place
- (f) Land
- (g) Telephone
- (h) Fax
- (i) E-mail
- (j) Industry
- (k) Interest
The following data is also stored at the time of registration:
(a) The IP address of the user
(b) Date and time of registration
For the processing of your data, your consent is obtained as part of the sender process and reference is made to this privacy policy.
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the personal data transmitted with your e-mail will be stored. The data will be used exclusively for processing the conversation. The legal basis for the processing of the data, if you have given your consent, is Art. 6 para. 1 lit. a DSGVO.The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
The processing of the personal data on the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted insofar as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you as a user has ended. This is the case when it is clear from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of 7 days at the latest.
You have the option to revoke your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.
6.3 Applicant management
You would like to apply for a job with us? We would be pleased if you send us your application by e-mail.
In the context of applicant management, we process the personal data you provide to us for the purpose of initiating an employment relationship on the basis of Art. 88 DSGVO in conjunction with Section 26 (1) BDSG. Alternatively, collective agreements (group, general and company agreements as well as collective bargaining agreements) pursuant to Art. 88 DSGVO in conjunction with. § Section 26 (4) BDSG as well as consent (e.g. for photographs) pursuant to Art. 88 DSGVO in conjunction with Section 26 (2) BDSG.
In individual cases, we process your data in order to protect legitimate interests, e.g. in the case of intra-group data exchange for administrative purposes (Art. 6 para. 1 f DSGVO in conjunction with recital 48).
If special categories of personal data (e.g. severe disability) are processed, this is done on the basis of Art. 88 DSGVO in conjunction with. § Section 26 (3) BDSG. In addition, the processing of health data for the assessment of your ability to work pursuant to Art. 9 para. 2 h) in conjunction with. § 22 para. 1 b) BDSG may be necessary.
We process your personal data as long as it is necessary for the fulfillment of the purposes of data processing or legal, contractual or statutory obligations. After that, the data is deleted or its processing is restricted. Your personal data will be stored until the application process is completed and beyond that for three years. In the event that your application is considered for a position, you will receive separate information about the storage of your personal data in the context of the employment relationship
Of course, you are also free to withdraw your application at any time. In this case, your data would also be deleted if it is no longer required to achieve the purpose for which it was collected. Sending an e-mail to us with the corresponding content is sufficient for this purpose. The revocation of any consent given is also possible at any time.
6.4 YouTube
This website has embedded YouTube videos in its online offering, which are stored on www.YouTube.com and can be played directly from our website.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
6.5 Google Web Fonts
This page uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you use must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
If your browser does not support web fonts, a default font is used by your computer.
7. further information
If you would like information that this data protection declaration cannot provide, or if you would like further information on a specific point, please contact our data protection officer named above. He or she will be happy to help you.