Privacy policy
1. Introduction
Thank you for visiting our website. We take data protection very seriously and endeavour to protect your personal data within the scope of our website.
Personal data is understood to mean all data concerning the personal and material circumstances of a natural person. Any personal data collected on our website is used solely for our own purposes.
2. External Hosting
Our website is hosted on the server of a hosting provider (currently: Raidboxes GmbH, Hafenstraße 32, 48153 Münster) in the Federal Republic of Germany. The personal data we process, described in detail below, is stored on this server. Our systems are encrypted in accordance with the state of the art. Strictly speaking, this means it should be almost impossible for the hosting provider to access the personal data. Nevertheless and purely as a precaution, we have concluded an order processing agreement with the hosting provider.
3. Legal bases for data processing
The legal basis for our data processing under the EU General Data Protection Regulation (GDPR) is Art. 6 GDPR. Depending on the situation in which we process your data, different legal bases may apply.
Consent:
Insofar as your consent has been obtained for the processing of personal data, Article 6(1)(a) GDPR is the legal basis for data processing. Your consent may be revoked at any time with future effect.
Contract:
Article 6(1)(b) GDPR is the legal basis for the processing of personal data collected to fulfil a contract to which you are a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Legal obligation:
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
Vital interests:
In the event that vital interests of you or another natural person require the processing of personal data, Article 6(1)(d) GDPR is the legal basis.
Legitimate interest:
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6(1)(f) GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities.
Employment relationship:
Pursuant to Art. 88 of the General Data Protection Regulation (GDPR) in conjunction with Section 26 of the Federal Data Protection Act (BDSG), personal data of employees will be processed for the purposes of the employment relationship if this is necessary for making a decision on the establishment of an employment relationship or, after the employment relationship has been established, for its performance or termination, or to exercise or fulfil the rights and obligations of employee representation arising from a law or collective agreement, a works agreement or a service agreement (collective agreement).
4. Rights of data subjects
Your personal data will be processed as part of our data processing. You are entitled to the rights from Chapter Three of the GDPR vis-à-vis our company. You have,
- pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent described therein;
- pursuant to Art. 16 GDPR, the right to demand the immediate correction of incorrect or incomplete personal data stored by us;
- pursuant to Art. 17 of the GDPR, the right to request the deletion of your personal data stored by us, unless further processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims;
- pursuant to Art. 18 GDPR, the right to demand the restriction of the processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful but you oppose the deletion of the data, we no longer need the data but you require it to establish, exercise or defend legal claims, or if you have objected to processing pursuant to Art. 21 GDPR;
- pursuant to Art. 20 of the GDPR, the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit that data to another data controller;
- pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. To that end, you can generally contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.
5. Web server logs
As part of the use of our website, connection information is stored in the server log files.
The information includes:
- IP address of the accessing system
- Browser information such as the operating system used and
- screen resolution
- Accessed website
- Original website
- Time of access
The web server logs are processed exclusively for security purposes.
We use the log data only for statistical, operational and security purposes or to optimise the website. However, we reserve the right to check the log data retrospectively if there is a justified suspicion of unlawful use on the basis of concrete indications.
6. Cookies
This website and all its pages use cookies and other comparable tracking technologies, such as tracking pixels or local storage objects (LSO).
These are small text files that are stored on your end device. Cookies can be read, transferred and changed by the website when the website is accessed.
We use both “first-party cookies”, i.e., cookies controlled by the company that operates the domain on which the cookies are set, and “third-party cookies”. The latter are controlled by third parties and help us to analyse the impact of our website content and the interests of our visitors, to measure the performance of our website or to display needs-based advertising and other content on our or other websites.
Most of the cookies we use are “session cookies”. These are automatically deleted at the end of your visit or browser session (“transient cookies”). Other cookies remain stored on your end device for a specified period of time or until you delete them (“persistent cookies”). These cookies enable us to recognise your browser on your next visit. We only use cookies with random, pseudonymous identification numbers. These identification numbers are used to evaluate your usage behaviour on our website. At no point in time is the user profile assigned to the name of a natural person. If you use special functions of our website (such as the shopping basket or “stay logged in”), cookies are also used for these functions.
Web bugs are tiny graphics files used to retrieve data from your device, such as your device type, operating system, IP address or time of visit.
Local storage objects (LSO) work in a similar way to cookies. However, the information is stored locally in the browser.
Insofar as cookies and other technologies are used that are technically necessary for the operation of the website, the legal basis for the use of these and the associated processing of your personal data is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interests lie in particular in being able to provide you with a technically optimised, user-friendly and needs-based website and to ensure the security of our systems.
The use of cookies and other technologies that are not technically necessary for the operation of the website and that serve primarily analytical and marketing purposes, as well as the associated processing of your personal data, takes place pursuant to Art. 6(1)(a) GDPR only if you have given us your express consent.
When you first access our website or one of its pages, you will be informed about the cookies and other technologies used on the website in a cookie banner and will be given the opportunity to choose for yourself which of the cookies and other technologies requiring consent you would like to give your consent to.
You can also use the cookie banner at any time to find out more about the individual functions of cookies by clicking on the “Cookies” button or to view our detailed privacy policy by clicking on the “Privacy policy” button.
Once you have given your consent, you can revoke it at any time and change your settings regarding cookies requiring consent and other technologies at any time.
7. Borlabs Consent Management
We use the consent management tool from Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg.
By using the Consent Management Tool, we ensure that we fulfil our legal obligation to obtain consent for the use of cookies and third-party services requiring consent on our website.
The Consent Manager allows you to individually determine which use of cookies and third-party services requiring consent you allow and which you do not.
In order to properly log your consent or its revocation, a Borlabs cookie is stored in your browser and information about your consent and revocations is transmitted to the service provider.
The following information is stored in the Borlabs cookie:
- Cookie lifetime
- Cookie version
- Domain and path of the
- WordPress website
- Consents
- UID
For more information about data processing in the context of the Consent Manager, please visit https://borlabs.io/kb/what-information-does-borlabs-cookie-store/
The legal basis for the use of the Consent Manager is our legal obligation to obtain consent for cookies and third-party services requiring consent in accordance with Art. 6(1)(c) GDPR.
8. Google Tag Manager
We use Google Tag Manager, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), to control which scripts are executed on our website.
Google Tag Manager allows the management of website tags via a user interface, whereby Google Tag Manager only implements tags without using cookies and without collecting personal data. Google Tag Manager triggers other tags that can be used to collect data without Google Tag Manager accessing this data. To monitor the stability and performance of our system, Google Tag Manager collects some aggregated data for tag triggering. However, this data does not contain any IP addresses of users or user-specific IDs, so it cannot be assigned to a specific person.
The legal basis for the use of Google Tag Manager is your consent pursuant to Art. 6(1)(a) GDPR.
For more information about Google Tag Manager, please visit https://www.google.com/intl/de/tagmanager/use-policy.html
9. Google Analytics 4
This website uses Google Analytics 4, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyse how users use the site. The cookies contain information about interactions that are tracked when you use the website.
The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and stored there. The US intelligence services can gain access to this data as part of their extensive legal surveillance powers. According to Google, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area by means of automatic IP anonymisation before it is processed in the USA. However, your full IP address may also be transmitted to a Google server in the USA so that US intelligence services can access this data.
On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports regarding website activity and provide other services to the website operator related to website and internet usage. In addition, Google’s own processing, which is not defined in more detail by Google, is intended to provide and protect the Analytics service. However, we have not released any data to Google for its own processing using the data release settings.
We track the following events if you have consented to the use of Google Analytics:
- First visit
- Start of a session
- User engagement (the website is in focus for at least one second)
The following parameters are recorded by default for each event:
- language
- page_location
- page_referrer
- page_title
- screen_resolution
You can prevent the storage of cookies by changing the relevant settings of your browser. However, please note that if you do this you may not be able to use all the features of this website. You can also deactivate Google Analytics using the cookie settings.
The legal basis for our data collection with the Google Analytics software
is your consent in accordance with Art. 6(1)(a) GDPR, which you can revoke at any time with effect for the future using the procedure described above.
Your data will be deleted automatically after 2 months. When data reaches the end of the retention period, it is erased automatically once a month.
For more information on Google Analytics and data protection, please visit the website:
10. Contact form
You can use the contact forms on our website to send us any data you wish. The data is forwarded from our web server by email to our company’s email inbox.
The following data is also stored at the time the message is sent:
- Your IP address
- Date and time the message was sent
Alternatively, you can use an email address to contact us.
By sending your message, you agree that we may process your personal data for the purpose of handling your contact enquiry. You can object to the processing at any time and without giving reasons. Please note, however, that in the event of your revocation, we will no longer be able to deal with your request.
The legal basis for the processing of your personal data is, pursuant to Art. 6(1)(a) GDPR, your consent, insofar as it involves a contact enquiry.
If the contact is made in connection with initiating or concluding a contract, the legal basis is Art. 6(1)(b) GDPR.
11. YouTube Videos
This website uses videos and plugins from the service provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is legally represented by Google Inc. with its registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
As soon as a video is displayed on our website, even in a still image, a communication link is established to the YouTube server, through which the service receives various data. This data includes the IP address of your computer, any cookies already stored on your computer and information stored as part of previous interactions with YouTube. If no data has been saved yet, the service will store cookies on your computer for the first time. When you interact with YouTube, the service also receives information about your user account that you may have on YouTube. Further information when interacting with the video, such as clicking the start, pause or end button, will also be transmitted to the provider. You can stop the data processing if you visit a page without video and delete all cookies from your computer.
For more information on data processing and data protection by YouTube, please visit https://policies.google.com/privacy
The legal basis for the use of YouTube on our website is your consent pursuant to Art. 6(1)(a) GDPR.
12. LinkedIn
We use the services of LinkedIn Ireland Unlimited Company (“LinkedIn”), Wilton Plaza, Wilton Place, Dublin 2, Ireland to represent our company and as part of the search for new employees.
If you visit our LinkedIn page and react to our content, your personal data such as your user name, the content you publish on LinkedIn and your reactions to content from our company may be processed by us in such a way that we reply to them or mention your account or your content in content that we publish.
Users can object to certain data processing by LinkedIn. You can find the objection options here: https://www.linkedin.com/help/linkedin/answer/a1338610/Data-Processing-Restriction-and-Objection?lang=en-US
LinkedIn acts as a data processor with regard to the data collected in the context of our job offers. In this regard, we have concluded an agreement pursuant to Art. 28 GDPR.
LinkedIn provides us with statistics for our page in the form of company page analyses in anonymised form, with the help of which we can gain insights into the performance of our company page. To do this, LinkedIn processes the data you share with LinkedIn when you visit, follow or interact with our site. We have concluded a separate agreement with LinkedIn, which can be accessed at https://legal.linkedin.com/pages-joint-controller-addendum. LinkedIn has agreed to assume responsibility for this processing and assumes the obligations to guarantee the rights of data subjects. You can find more information about this processing here: https://www.linkedin.com/help/linkedin/answer/a547077/linkedin-page-analytics-overview?lang=en.
This processing of personal data serves our legitimate interest in communication via the LinkedIn medium and the optimisation of our offer on this medium. The legal basis for this processing is our overriding legitimate interest in this processing pursuant to Art. 6(1)(f) GDPR.
LinkedIn is responsible for the further processing of personal data in the context of using LinkedIn.
For example, LinkedIn processes the data that you voluntarily provide when using your LinkedIn account, such as your name, username, email address and telephone number.
If you publish and share content on LinkedIn, LinkedIn can analyse it to find out which topics you are interested in, to thereby provide you with information on similar content and possibly advertising.
LinkedIn additionally collects log data, such as your IP address, browser type, operating system, information about the previously visited website and the pages you visited, your location, your mobile service provider, the device you are using, the search terms you used and cookie information. Please note that this data will also be processed by LinkedIn if you do not have a LinkedIn account.
If you have a LinkedIn account, you may have the option of limiting the processing of your personal data by LinkedIn as part of the settings for your LinkedIn account.
We have no knowledge of or influence over the extent and type of data processing or the further processing and use of your personal data by LinkedIn.
For more information about data processing by LinkedIn, please visit https://www.linkedin.com/legal/privacy-policy
We would like to expressly point out that the use of LinkedIn may result in the transfer of personal data to a country outside the EU/EEA (“third country”) where the level of protection of personal data under the GDPR cannot be guaranteed.
13. Xing
We use the services of Xing (New Work SE, Am Strandkai 1, 20357 Hamburg, Germany) to present our company and to search for new employees and contact them via Xing.
We would like to point out that you use Xing and its functions offered here under your own responsibility. This applies in particular to the use of the interactive functions (e.g., sharing, commenting). Alternatively, you can also access the information offered via this account on our website at www.unionstahl.com.
The data collected about you when you use the service will be processed by Xing and may be transferred to countries outside the European Union. This includes your IP address, the application used, details of the end device you are using (including device ID and application ID), information on websites accessed, your location and your mobile phone provider.
This data is assigned to the data of your Xing account or your Xing profile. We have no influence over the type and scope of the data processed by Xing, the type of processing and use or the transfer of this data to third parties. Information about which data is processed by Xing and for what purposes it is used can be found in Xing’s privacy policy (https://privacy.xing.com/en/privacy-policy), along with information on how to find out whether and which personal data concerning you is processed by Xing. https://privacy.xing.com/en/privacy-policy/what-rights-can-you-assert/right-of-access.
We also process your data when you contact us via the Xing platform. In this case, Xing collects your data and provides it to us. Under some circumstances, this may also involve us storing and further processing your data.
Data which you freely publish and disseminate on Xing may be included by us and made accessible to third parties.
The click path function allows us to view accesses from logged-in users on our Xing page, including our job offers. If you do not want us to see that you have seen our offers, you should log out before accessing them.
You have the option of restricting the processing of your data in the settings. In addition, you can restrict Xing’s access to contact and calendar data, photos, location data, etc., on mobile devices (smartphones, tablet computers) in their setting options. However, that will depend on the operating system being used. For more information on these points, please visit https://privacy.xing.com/en/your-privacy.
If you have given your consent to the social network provider for the data processing described above to take place with effect for us, the legal basis is Art. 6(1)(a) GDPR.
14. Instagram
We maintain an Instagram page as part of our social media activities. We are the joint data controller with Meta Platforms Ireland Limited (“Meta”), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, for the collection of personal data on the Instagram page.
Meta processes personal data of visitors to the Instagram page for the provision of this page. The processing is carried out solely by Meta. Meta is therefore also the sole data controller for this processing. In this context, Meta processes, among other things, data that is collected every time the website is used. This includes data about user IDs, the type of content that users access, interactions with the site, information about the content and sites used. For more descriptions of the personal data processed, please visit: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.
Website visitors can object to certain data processing by Meta. The objection options can be found at https://help.instagram.com/284802804971822.
Insofar as we process personal data collected via our Instagram page, this is undertaken using the data provided by Meta. Meta provides us with statistics for our page in the form of “Instagram Insights” in anonymised form, with the help of which we can gain insights into the use of our Instagram offering. We have concluded a separate agreement with Meta, which can be accessed at https://www.facebook.com/legal/terms/page_controller_addendum.
This agreement also regulates the security precautions taken by Meta and that users can contact Meta directly with questions regarding the rights of data subjects under Chapter Three of the GDPR (e.g., for information and deletion). The rights of data subjects (in particular the rights to information, deletion and the right to be forgotten, objection and complaint to the competent supervisory authority) are not restricted by the agreement between us and Meta. These rights can be asserted both against us and against Meta. For more information on this data processing, please visit https://help.instagram.com/788388387972460.
This processing of personal data serves our legitimate interest in communication via the Instagram medium and the optimisation of our offer on this medium. The legal basis for this processing is our overriding legitimate interest in this processing pursuant to Art. 6(1)(f) GDPR.
We expressly point out that, in accordance with the Instagram data protection regulations, personal data of users of our Instagram page may also be processed in the USA or other third countries, i.e., outside the European Union and thus outside the protection of the GDPR. Meta assures that the personal data of visitors to our Instagram page is processed in accordance with the requirements for a third country transfer pursuant to Art. 44 ff GDPR. By visiting our Instagram page, you consent to the corresponding processing of your personal data.
15. WPML
To enable our website to be displayed in different languages, we use the WordPress plugin WPML from OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong.
As part of the use of WPML, a cookie is stored on your end device when you visit our website in order to log the language settings you have made.
In this context, personal data relating to you will also be collected and transmitted to the service provider, such as
- Information about the device
- Browser information
- Information about the operating system used
- IP address
- Information about the pages visited on the website
- Information about which elements were clicked.
The legal basis for the processing of your data in connection with the use of WPML is your consent pursuant to Art. 6(1)(a) GDPR.
16. Storage period
We only store your personal data for as long as is necessary and permissible for the purpose for which the data was collected, unless statutory retention periods prevent deletion or you have given us your express consent to continue storing your personal data.
Insofar as certain data is subject to statutory retention periods, we store this data until the corresponding retention periods have expired.
If you give us your express consent to continue storing this data for certain data, we will keep your data until you revoke your consent to us.
17. Data controller and data protection contact
The data controller within the meaning of Art. 4(7) GDPR is
UnionStahl GmbH
Europaallee 21
D-47229 Duisburg, Germany
Tel.: +49 2065 677-0
Fax: +49 2065 677-500
Email: info@unionstahl.com
Legal representatives
Oliver Hillekamp
Norman Sandrock
You can contact our data protection officers at:
Sicoda GmbH
Oliver Gönner
Rochusstraße 198
D-53123 Bonn, Germany
Tel.: +49 228 28614060
Email: dsb@sicoda.de
You can reach our data protection officer at
Sicoda GmbH
Oliver Gönner
Rochusstraße 198
D-53123 Bonn
Tel.: +49 228 28614060
E-mail: dsb@sicoda.de
©2024 UnionStahl GmbH
