Privacy Statement
Contents
Our data protection information is organized as follows:
- Controller
- Data protection officer
- Storage duration
- Your rights
B. Supplemental information for website visitors
- Technical and functional availability of the websites
- Contact support
- Orders via the online shop
- Advertising campaigns
- Integrated services on our websites
- Transmission of data collected on the websites to third parties
- Third country transmission
- Additional setting options
C. Supplemental information for business partners and prospective customers
- Purpose and legal basis for processing personal data of our business partners and prospective customers
- Transmission of personal data of our business partners and prospective customers to third parties
D. Supplementary information for applicants
- Purpose and legal basis for processing the personal data of our applicants
- Erasure of applicant data
For improved readability, we will refrain from the contemporaneous use of the male and female linguistic forms. All references to persons apply equally for all genders.
Version: 3.0
Version release date: 05/07/2021
A. General informati
The general information applies equally to data processing on our websites www.index-werke.de and www.ixshop.index-traub.com (additional information on this in B.), as well as to processing the personal data of our business partners and prospective customers (additional information on this in C.) and our applicants (additional information on this in D.).
1. Controller
The controller responsible for processing the personal data is:
INDEX-Werke GmbH & Co. KG Hahn & Tessky
Plochinger Straße 92
73730 Esslingen
Tel.: +49 711 3191-0
Email: info@index-werke.de
2. Data protection officer
You may reach our data protection officer at:
INDEX-Werke GmbH & Co. KG Hahn & Tessky
attn: Data Protection Officer INDEX-Werke
Plochinger Straße 92
D-73730 Esslingen
Tel.: +49 711 3191-0
Email: dsb@index-werke.de
3. Storage duration
The data we process will be stored for as long as is required for the respective purpose, while observing the statutory retention periods (e.g., according to the Commercial Code and the Tax Code, ten years for tax-relevant documents or six years for other business letters) (Art. 6(1)(c) GDPR). Data storage beyond the statutory retention periods is possible if you have given consent as per Art. 6(1)(a) GDPR or the purpose for the data processing is still valid.
4. Your rights
4.1 Right to information, rectification, erasure or restriction and portability
Pursuant to the prerequisites set out in Art. 15 to 20 GDPR, you have the right, free of charge, to receive information concerning the data we have stored about you, to have the data rectified, and to request the erasure or restriction of processing as well as the transfer of your personal data. In some cases, we may nevertheless not completely erase your data due to statutory storage obligations.
4.2 Right to lodge a complaint
You have a right to lodge a complaint with a supervisory authority. The supervisory authority with jurisdiction over us is the State Data Protection and Freedom of Information Officer for Baden-Württemberg, Königstraße 10a, 70173 Stuttgart.
4.3 Right to object
You may object at any time to the use of your data for purposes of direct marketing; you may also object any time to the use of your data (on the basis of Art. 6(1)(e) or (f) GDPR) for reasons arising from your particular situation, with future effect. Transmission costs according to the basic rates are the only cost incurred when asserting an objection.
4.4 Right to withdraw consent
Insofar as we process your data based on your consent, you may withdraw your consent at any time with effect for the future.
B. Supplementary information for visits to the website
In addition to our general information (more on this in A.), we wish to inform you about how personal data is collected and for what purposes and on what legal basis it is processed on our websites www.index-werke.de and www.ixshop.index-traub.com. We also wish to inform you about whom we disclose the data to and for what purpose, as well as the setting options you have with respect to data processing.
1. Technical and functional availability of the websites
We process personal data in order to make our websites available to the greatest extent possible without technical and functional limitations and according to statutory requirements.
a. Logs
When you access our website, we store certain access data, for example the type of browser and the version, operating system used, the previously visited web page, access data and time of the server request, and the data query of the client (file name and URL). We use these data on an anonymized basis for statistical analysis without this data being associated with specific users.
The purpose of this data processing is to facilitate accessibility and the correct presentation of the websites on your device as well as for technical optimization. In this respect, we have a legitimate interest in this data. The basis for the processing is Art. 6(1)(f) GDPR as well as Section 15 of the Telemedia Act (TMG).
b. Consent Management Tool (CMT)
To obtain and document your consent to data processing, we have integrated a Consent Management Tool (CMT) on our website using various service providers.
When you access our website, you may provide respective consent declarations by means of the CMT for categories of data processing operations, which are stored by the CMT. With aid of the CMT, the next time you visit our website we will be able to track which data processing through which services you have consented to or not consented to. Thus, it is not necessary for you to once again make your selection every time you visit our website. For this purpose, the CMT stores a cookie, a small text file, on your computer. The cookies used are as follows:
C. Supplemental information for business partners and prospective customers
In addition to our general information (more on this in A.), we wish to inform you below how the personal data of our business partners and prospective customers is collected and for what purposes and on what legal basis it is processed. We also inform you about who receives the data of our business partners and prospective customers and for what purpose.
1. Purpose and legal basis for processing personal data of our business partners and prospective customers
We process personal data according to Art. 6(1)(b) GDPR that is required for complying with our obligations within the scope of initiating a contract and arising from the contractual relationships with our business partners, in particular for the purchase of products, supply of our products, correspondence, and for invoicing and payment. Included in this is in particular, the first name, last name, a valid email address, telephone number (landline and/or mobile cellular) and bank account.
We may process the personal data of our existing customers for the purpose of sending information about our services (e.g., product information, promotions or invitations to events). We have an associated, legitimate interest in this within the meaning of Art. 6(1)(f) GDPR. You may object to this processing at any time. Transmission costs according to the basic rates are the only cost incurred when asserting an objection.
2. Transmission of personal data of our business partners and prospective customers to third parties
Your personal data is only transmitted to third parties insofar as data protection law allows for this, in particular, if you have consented to this transmission (Art. 6(1)(a) GDPR) or this is necessary for performance of a contract (Art. 6(1)(b) GDPR).
D. Supplementary information for applicants
In addition to our general information (more on this in A.), we wish to inform you below how the personal data of our applicants is collected and for what purposes and on what legal basis it is processed. In addition, we provide information concerning when the applicant data is once again erased.
1. Purpose and legal basis for processing the personal data of our applicants
We store and process the personal data that you voluntarily communicate to us within the scope of the application process, such as, in particular, first and last name, address, email address, birth date, place of birth, profession, curriculum vitae, certificates, and special categories of personal data (for example, information about your religious beliefs or health data). In the course of the application process, additional data may accumulate that is relevant for the application, which will likewise be stored and processed. Your personal data will only be processed for the purpose of conducting the application process. In this respect, the legal basis for data processing is Section 26(1)(1) of the Federal Data Protection Act [Bundesdatenschutzgesetz (BDSG)]. In the event of a successful application process, the data will be applied to your personnel file for the purpose of implementing the employment relationship, Section 26(1)(1) BDSG.
2. Erasure of applicant data
If your application is not successful, your personal data will be erased no later than six months after the end of the application process unless processing your data is required for asserting, exercising, or defending legal claims (cf. Art. 17(3)(e) GDPR).
Your data will only be processed beyond the specific application process if you have also expressly consented to your data's continued storage in our database after the expiration of the respective application process so that we may potentially contact you at a later date if there are job vacancies. In the event that we no longer contact you, you may withdraw your consent at any time, effective for the future, via email or by telephone. Otherwise, your data will be erased after two years. If we contact you within this time period with respect to new positions, this time period commences once again with each such contact.