Privacy Policy

Privacy policy

Controller within the meaning of the GDPR:

KRAIBURG STRAIL GmbH & Co. KG

Göllstraße 8, 84529 Tittmoning

Phone: +49 (0) 8683 701-0

E-mail: info@strail.de

Data Protection Officer

c/o activeMind.legal Rechtsanwaltsgesellschaft mbH

Potsdamer Strasse 3

80802 Munich

Phone: +49 (0)89 / 91 92 94 – 900

E-Mail: Kraiburg-strail@activemind.de

1. Which processing activities are carried out?

1.1 Server log files

Nature, purpose and legal basis of the processing

When you access our website, i.e. even if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, referrer URL, date and time of access and similar.

We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and detecting misuse.

Recipients

We use service providers for the operation and maintenance of our website who act as our processors. All service providers are contractually obliged to treat your data confidentially.

Retention period

Data is retained in server log files in a form that enables the identification of the persons concerned for a maximum period of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack). In the event of such an incident, server log files are retained until the security-relevant incident has been eliminated and fully clarified.

Is the provision of personal data mandatory?

The provision of the aforementioned personal data is neither legally nor contractually mandatory. However, without the IP address and the cookie identifier, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

Right to object

Please read the information on your right to object under Art. 21 GDPR below.

1.2 Contact

Nature, purpose and legal basis of the processing

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and retained.

The following data is also retained at the time the message is sent:

Date and time of the request
URL from which the request was made
IP address from which the request was made
Web browser and operating system used

Alternatively, contact can be made via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be retained. This includes the date and time the email was sent, email address, IP address and information on the servers involved in the email communication. Regardless of the type of communication selected, we collect the content of your inquiry. Your data is retained for the purpose of individual communication with you. The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f) GDPR).

Our legitimate interest in processing your data is to make it easy for you to contact us. If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b) GDPR).

Recipients

Our website is maintained by service providers who act as our processors. If you send us a request, the service providers we use may receive data for these purposes if they require the data to perform their respective services (e.g. IT services). All service providers are contractually obliged to treat your data confidentially.

Third country transfer

There is no transfer to third countries. The data is processed exclusively in the EU/EEA.

Retention period:

Your data will be deleted no later than 6 months after the request has been processed. If there is a contractual relationship, we are subject to the statutory retention periods and delete your data after six or ten years.

Is the provision of personal data mandatory?

The provision of your personal data is voluntary. However, we can only process your request if you provide us with the necessary data and the reason for the request.

Right to object

Please read the information on your right to object under Art. 21 GDPR below.

1.3 Application

Nature, purpose and legal basis of the processing

You can apply to us online via our website. We will only process the data you provide to apply for the position advertised and to contact you.

As part of the application process, we process the following applicant data provided by you:

Name, address, place of residence, age, e-mail, telephone number
Application photo
Professional background & qualifications (cover letter, CV, certificates)

The following data is also retained at the time the message is sent:

Date and time of the request
URL from which the request was made,
IP address

Alternatively, you can contact us via the e-mail address provided and by post. In this case, your personal data transmitted by e-mail or post will be retained. This includes the date and time of sending the e-mail, e-mail address, IP address and information on the servers involved in the e-mail communication.

You can also contact us via the telephone number provided. We collect log data that includes your telephone number and the duration of the call. We do not record telephone calls. The processing is carried out to establish an employment relationship in accordance with Section 26 (1) BDSG.

Insofar as we have given you the opportunity to give your consent during the application process (e.g. in connection with applicant pools), we process the personal data covered by the consent exclusively for the purposes stated in the consent. This is done on the basis of Article 6(1)(a) GDPR. If the consent relates to the processing of special types of personal data (e.g. health data), the processing is carried out on the basis of Art. 9 para. 2 a) GDPR.

Recipients:

Within the company, access to your data is granted to those departments that require it to fulfill contractual, legal and regulatory obligations. Data may be passed on to external parties under the following circumstances: Commissioning of support services where access to your personal data is necessary or cannot be ruled out. This includes, for example, IT services, billing services, cloud storage (MS365) or the use of tax consulting services. All service providers are contractually obliged to treat your data confidentially.

Third country transfer

There is no transfer to third countries. The data is processed exclusively in the EU/EEA.

Retention period:

If your application is rejected, your data will be deleted six months after notification of the decision. If an employment relationship is established, the application documents will be retained by us for at least the period of employment. If you have given us your consent to include you in our applicant pool, your data will be processed for as long as you have given us your consent, but for no longer than six months.

Is the provision of personal data mandatory?

The provision of your personal data is neither legally nor contractually mandatory. However, it is unfortunately not possible to process your application without providing the data.

Right to object

Please read the information on your right to object under Art. 21 GDPR below.

1.4 Use of the etracker tracking tool

Nature, purpose, legal basis

We use the services of the German company etracker GmbH, Erste Brunnenstraße 1 in 20459 Hamburg. We use etracker to improve the quality of our website. We do not use cookies for web analysis by default. If you have given your consent, cookies are used to enable a statistical reach analysis of this website. The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Recipients

We use technical service providers who act as processors for the operation and maintenance of our website and for the analysis of cookies. Other recipients of the data are etracker GmbH.

Third country transfer

There is no transfer to third countries. The data is processed exclusively in the EU/EEA.

Retention period

The data is deleted as soon as it is no longer required for our recording purposes. In our case, this happens after 24 months.

Withdrawal of consent

You can object to the data processing described above at any time. The objection has no negative consequences.

2. Cookies

A cookie is a small data record that is created when a website is visited and is temporarily retained on the website visitor’s system. If the server is called up again by the website user, the website user’s browser sends the previously received cookie back to the server. The server can evaluate the information received through this process. In particular, cookies can make it easier to navigate a website.

You can access detailed information about cookies and which cookies are used on this website and for what purpose at any time in the cookie settings.

Deleting cookies

You can delete individual cookies or the entire cookie inventory. You will also receive information and instructions on how to delete these cookies or block their retention in advance. Depending on your browser provider, you will find the necessary information under the following links:

You can also prevent scripts from loading by default. NoScript only allows JavaScript, Java and other plugins to be executed on trusted domains of your choice. Information and instructions on how to edit these functions can be obtained from the provider of your browser (e.g. for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/noscript/).

2.1 Technically necessary cookies

Nature and purpose of processing

We use cookies to make our website more user-friendly. Some elements of our website require that the browser called up can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.

We require cookies for the following applications: You can find an overview of the cookies used in our cookie consent tool.

Legal basis and legitimate interest

In this respect, data processing is carried out solely on the basis of our legitimate interest in a user-friendly design of our website and in the documentation of consent in accordance with Art. 6 para. 1 lit. f) GDPR in conjunction with a balancing of interests in accordance with § 25 para. 2 TDDDG.

Recipients

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Retention period

The respective retention period of the cookies can be found in the cookie consent tool.

Is the provision of personal data mandatory?

The provision of your data is voluntary, solely on the basis of your consent. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Withdrawal of consent

You can withdraw your consent for the future in the cookie consent tool.

2.2 Technically unnecessary cookies

Purpose and legal basis

We also use cookies on the website that enable an analysis of the user’s surfing behavior. These cookies are used to make the use of the website more efficient and attractive.

We use web analysis technologies from the following providers:

etracker without cookies

The legal basis for this processing is your consent pursuant to Art. 6 para. 1 lit. a) GDPR.

Recipients

We use technical service providers for the operation and maintenance of our website, who act as our processors. All service providers are contractually obliged to treat your data confidentially.

Retention period

Details on the retention period of cookies and the technologies used in the context of these tracking tools can be found in our cookie consent tool.

Is the provision of personal data mandatory?

The provision of your data is voluntary, based on your consent.

Withdrawal of consent

You can withdraw your consent at any time within the cookie consent banner.

Profiling

Web analysis tools can be used to evaluate the behavior of visitors to the website and analyze their interests. We create a pseudonymous user profile for this purpose. Profiling via etracker is exclusively anonymous.

3. Social media

Company profile LinkedIn

Controller

We are jointly responsible within the meaning of the GDPR for data processing when operating our company profile on LinkedIn:

LinkedIn Ireland Unlimited Company

70 Sir John Rogerson’s Quay, Dublin 2

Dublin D02r296, Ireland

Please note that despite the joint responsibility with LinekdIn, we have no influence on LinkedIn’s data processing operations, which are carried out by LinkedIn for its own purposes. The “Page Insights” joint controllership agreement is available at: https://legal.linkedin.com/pages-joint-controller-addendum

Purpose and legal basis:

We maintain the company profile to inform you, to present ourselves and our services and to communicate with you. If you follow or interact with our company profile, you will become recognizable and identifiable to us and others. As the operator of the company profile, we use the analytics provided to us by LinkedIn to analyze the use of our pages. These analyses help us to better understand the interests of our visitors and to reach our target group in a more targeted manner. Based on the findings, we decide what information we publish and make available. The analyses we receive from LinkedIn are aggregated data on visitors, updates, followers, etc., which we cannot assign to any specific visitor to our company profile.

LinkedIn also uses the data collected for its own purposes, namely for market research and advertising purposes, i.e. in particular to analyze your behavior, to create user profiles and to provide personalized advertising (also on behalf of third parties). We have no influence over this processing.

For the aforementioned purposes, LinkedIn retaines cookies on your end devices with which you access the company profile or content published there. These cookies are small text files that contain a unique user code. Both persistent and session cookies are used. As far as we know, LinkedIn uses the data collected by cookies to provide you with advertising and to enable LinkedIn’s advertising partners to do the same. Further information on the use of cookies by LinkedIn can be found at: https://de.linkedin.com/legal/cookie-policy?

Further information on data processing by LinkedIn can be found in LinkedIn’s privacy policy: https://de.linkedin.com/legal/privacy-policy

There you will also find information on setting options and how to contact LinkedIn.

The processing of your personal data, with the exception of tracking by LinkedIn, is based on our legitimate interests in effective communication and interaction with you as a user and an optimized presentation of our services in accordance with Art. 6 (1) sentence 1 lit. f) GDPR. We would like to point out that your consent is required for tracking by LinkedIn in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. To avoid tracking, the cookie settings on the browser can only be limited to the necessary cookies.

Recipients

Recipients are technical service providers and those who keep our company accounts up to date. All service providers are contractually obliged to treat your data confidentially.

Third country transfer

Processing also takes place outside the EU, namely in the USA. There are guarantees in the form of concluded standard contractual clauses. The standard contractual clauses can be viewed here: https://www.linkedin.com/legal/l/dpa

Retention period

The data collected directly by us via the company profile is deleted from our systems as soon as the purpose for storing it no longer applies. We have no influence on the retention of your data that is retained by LinkedIn for its own purposes. For details, please contact LinkedIn directly.

Is the provision of personal data mandatory?

The provision of your personal data is voluntary.

Right to object

Please read the information on your right to object under Art. 21 GDPR below.

Company profiles Facebook/Instagram

Controller

We operate a company page on Facebook and Instagram. The provider of the platforms is Meta Platforms, Ireland Limited, “Meta” (4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland). Here we are jointly responsible with the respective platform within the meaning of Art. 26 GDPR. We have concluded an agreement with LinkedIn and Facebook on joint responsibility in accordance with Art. 26 GDPR. You can view this agreement under the following links:

LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum
Facebook: https://www.facebook.com/legal/terms/page_controller_addendum

If you have a Facebook profile and are logged in, Facebook can, for example, analyze your usage behavior and create a user profile corresponding to your usage behavior. This user data is regularly processed for market research and (personalized) advertising purposes.

The processing of your personal data when managing our company pages on Instagram and Facebook is based on our legitimate interest in conducting effective marketing via frequently used platforms.

We process personal data in this context in order to increase awareness of our company and to protect our legitimate interests in providing up-to-date information and opportunities for interaction with users.

Youtube channel

We are also represented on YouTube to provide videos. YouTube is a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Our legitimate interest pursuant to Art. 6 para. 1 f) GDPR in operating our company pages on YouTube is to conduct effective marketing.

When you use YouTube, your personal data is collected, transmitted, stored, shared and used by Google. Google analyzes your user behavior and creates a corresponding usage profile, regardless of whether you have a Google account. This information can be used to tailor content or advertising to you.

YouTube collects data about actions that visitors perform on our channel. This is used to compile statistics about the use of our videos, which we receive in aggregated, i.e. anonymized, form. If you do not actively interact with our channel, e.g. by leaving a comment under a video, it is not possible for us to draw conclusions about individual channel visitors at any time.

Further information on the processing of your data by Google, in particular on the retention period and your rights, can be found in Google’s privacy policy at https://policies.google.com/privacy?hl=en-US, which also applies to YouTube.

You can find information on how to change your data protection settings at https://policies.google.com/privacy.

If you wish to make a request for information or assert your user rights, it is possible to assert these rights against us or Google.

Transfer to third countries: The recipient of the data is Google Ireland Limited. The parent company Google LLC is based in the USA, so that a transfer to the USA cannot be ruled out. Google is certified in accordance with the EU-US data protection framework and bases the transfer to the USA on the adequacy decision.

4. Your rights as a data subject

Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to object under Art. 21 GDPR and the right to data portability under Art. 20 GDPR.

The restrictions under Sections 34 and 35 BDSG apply to the right to information and the right to erasure.

You can withdraw your consent to the processing of personal data at any time. This also applies to the withdrawal of declarations of consent given to us before the General Data Protection Regulation came into force, i.e. before May 25, 2018. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal is not affected.

In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Information about your right to object in accordance with Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Recipient of an objection:

The objection can be made informally with the subject “Objection”, stating your name, address or other identifying features, to:

KRAIBURG STRAIL GmbH & Co. KG

Göllstrasse 8

84529 Tittmoning

Phone: +49 (0) 8683 701-0

E-mail: info@strail.de

Changes to our privacy policy

We reserve the right to adapt this Privacy policy so that it always complies with current legal requirements or to implement changes to our services in the Privacy policy, e.g. when introducing new services. The new Privacy policy will then apply to your next visit.

Questions about data protection

If you have any questions about data protection, please send an e-mail to the controller named above

Applicant information according to Art.13

Customer information according to Art.13

Supplier information according to Art.13

Partner information according to Art.13