Data Protection Policy

Data Protection Policy, Ortlinghaus-Werke GmbH, Germany

Privacy Policy for the use of our LinkedIn and Instagram channels

Information on Data Processing by Ortlinghaus-Werke GmbH, Wermelskirchen, Germany

Protecting your personal data during the processing of personal data when you visit our website is important to us. Your data is protected in accordance with statutory provisions. In the following, we would like to inform you about the nature and scope of the processing of personal data through this website in accordance with Article 13 of the General Data Protection Regulation (GDPR).

Information on the responsible controller

Ortlinghaus-Werke GmbH
Kenkhauser Straße 125
42929 Wermelskirchen

Gesetzlich vertreten durch Peter Ortlinghaus und Dr. Bastian Franzkoch

Tel.:      +49 (0) 2196 85-0

E-Mail: info@ortlinghaus.com

Information on the data protection officer

Our external data protection officer is happy to answer any questions about data protection:

Mr Arndt Halbach, GINDAT GmbH
Wetterauer Str. 6
42897 Remscheid, Germany

Email: datenschutz@ortlinghaus.com

Tel.: +49-2191 / 909 430

1. Data processing through the website

Your visit to our website is recorded. We generally collect the following data that your browser sends to us:

• IP address currently used by your computer or your router
• Date and time
• Browser type and version
• Operating system of your computer
• Webpages you visit
• Name and size of requested file(s)
• URL of referral website, if applicable 

This data is only collected for the purposes of data security, improving our website offer and analysing errors based on Art. 6 (1) f) GDPR. The IP address of your PC is only analysed in anonymised form (shortened by the last three digits). In all other respects, you are able to visit our website without providing information on your identity.
We would like to point out that data transmission on the Internet (such as email communication) is subject to security vulnerabilities. It is not possible to completely protect data from access by third parties. Confidential data should therefore be sent to us by other means, such as by post.

Applications

The data processor processes the personal data of applicants for the purpose of conducting the application process. Legal basis is § 26 Abs. 1 S. 1 BDSG. Processing may also take place electronically. This is particularly the case if an applicant transmits to the data processor corresponding application documents electronically, such as by email or using an online form on the website. Should the data processor conclude an employment contract with an applicant, the transmitted data shall be stored for the purpose of executing the employment relationship in accordance with statutory provisions. If the data processor does not conclude an employment contract with the applicant, the application documents shall be deleted following the staffing of the vacancy in accordance with statutory provisions provided such deletion is not opposed by any other legitimate interests of the data processor. Other legitimate interests in this sense includes, for example, evidence in a proceeding according to the General Equal Treatment Act (AGG). Therefor the personal data will be stored during a period of 6 month after finishing the application process.

If you have consented to be included in our talent pool, we will also store your data in order to consider your application data in further open job advertisements in our company. To do this, we store your data for 12 months and then delete it. The legal basis is your consent, Art. 6 Abs. 1 lit. a GDPR.

We can only process applications if they are submitted via our application portal. Should you use a different email address belonging to our company, your application will unfortunately not be recognised by our systems and will not therefore be taken into consideration. Please consider that email is not a secure means of communication. Should your application reach our server via the above-mentioned methods, we will protect your application with suitable technical and organisational measures. We have no influence on data protection while your application is transmitted to our company via the public Internet and we are not therefore able to guarantee the level of protection for your application. Should your dispatching email server support STARTTLS, our email server will also support STARTTLS and thus offer transport encryption.

Contact form

Personal data (such as your name, address data or contact details) which you voluntarily disclose to us, for example in connection with a request or otherwise, will be stored by us and only processed for correspondence with you and only for the purpose for which you have provided us with this data. This data is processed on the basis of Art. 6 Abs. 1 lit. a) and Art. 6 Abs. 1 lit. f GDPR.

Registration on this website

You can register on our website in order to access additional functions offered here. The input data will only be used for the purpose of using the respective site or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject your registration. To inform you about important changes such as those within the scope of our site or technical changes, we will use the email address specified during registration. We will process the data provided during registration only based on your consent per Art. 6 (1)(a) DSGVO. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed. We will continue to store the data collected during registration for as long as you remain registered on our website. Statutory retention periods remain unaffected.

For registration requests for the protected area of our website, we temporarily store your IP address. The storage period is one week from the last registration attempt. This storage is based on our legitimate interest in defending ourselves against illegitimate attempts to register in our system and the resulting spam defence and the prevention of bot attacks. This legitimate interest follows from Art. 6 para. 1 lit. f DSGVO.

Secure data transmission

In order to protect the security of your data during transmission, we use encryption techniques (SSL) via HTTPS, which accord with state-of-the-art technology.

2. Recipients of personal data

We may utilise service providers in connection with data processing in order to perform and execute processes.

Specifically, we have involved service providers for the purposes of hosting our website.

Contractual relationships are established with our service providers, which meet the requirements of Art. 28 GDPR; the contractual provisions contain the statutorily required points on data protection and data security.

3. Notice on the use of Matomo (formerly Piwik)

This website uses the website analysis service Matomo in order to analyse user visits to this website. For this analysis, cookies are stored on your computer.
If you prevent the storage of cookies, we would like to point out that you may not be able to use the full functionality of this website.
This website uses Matomo with the extension ‘AnonymizeIP’. This shortens IP addresses before transmitting them. It is therefore not possible to link an IP address directly to a specific person. The IP address transmitted from your browser in connection with Matomo is not combined with other data collected by us.
The Matomo program is an open-source project. You can find more information on data protection regarding the third-party service provider at matomo.org/privacy-policy/.
Objection information:

4. Social media

LinkedIn

Our website links to pages of the LinkedIn network. You can recognize the link by the white lettering „in“ on a blue background. The service is provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. If you are logged into your LinkedIn account, it is possible for LinkedIn to associate your visit to our website to your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it will be used by LinkedIn. More information can be found in the LinkedIn privacy policy at

https://www.linkedin.com/legal/privacy-policy

Dropbox

Our website links to pages of Dropbox. You can recognize the link by the white opened package against a blue background. The service is provided by Dropbox International Unlimited Company, One Park Place, Floor 5, Upper Hatch Street, Dublin 2, Irland. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it will be used by Dropbox. More information can be found in the Dropbox privacy policy at

https://www.dropbox.com/privacy

5. Use of cookies

Cookies are used in our website offer. Cookies are small text files that are saved by your browser and stored on your computer. The use of cookies allows the website offer to be designed in a more user-friendly manner. For instance, it is possible to recognise the user for the duration of the session, without the user being required to constantly re-enter their user name and password. Cookies do not cause any damage to your computer and are deleted after your session is ended. The basis for data processing is Art. 6 (1) f) GDPR.

Some of the cookies we use are deleted directly after you close your browser (‘session cookies’).

Other cookies remain on your terminal device and enable your browser to be recognised when you next visit the website (‘persistent cookies’).

Data processing in connection with cookies, which only serve to facilitate the functionality of our website offer, occurs on the basis of our legitimate interest pursuant to Art. 6 (1) f) GDPR.

If you do not wish to use cookies, you can configure your browser to prevent the storage of cookies. However, please note that, in this case, you may not be able to use the full functionality of our websites.

6. Your rights

According to Articles 15–21 GDPR, you may exercise the following rights with respect to personal data we store provided the relevant requirements of the GDPR are met.

Right of access

You have the right to access information about your personal data that we process.

Right to rectification

You are able to request the correction of incomplete or incorrectly processed personal data.

Right to erasure

You have the right to the deletion of your personal data, in particular on the basis of one of the following reasons:

• Your personal data is no longer required for the purposes for which it was collected or processed.
• You withdraw your consent on which the processing of your data was based.
• You have asserted a right of objection to processing.
• Your data was unlawfully processed.

The right of erasure does not apply, however, if such deletion is opposed by the legitimate interest of the controller. For instance, this may include:

• Personal data that is required for the assertion, exercising or defence of legal claims.
• Deletion is not possible due to retention obligations.

Insofar as data cannot be deleted, you may exercise a right to the restriction of processing (as follows).

Right to the restriction of processing

You have the right to request us to restrict the processing of your personal data, if:

• You dispute the correctness of the data and we must therefore review the correctness.
• The processing is unlawful and you decline data erasure and instead request restriction of use.
• We no longer require the data, but you still need the data in order to assert, exercise or defend legal claims.
• You have submitted an objection to the processing of your data and it has not yet been determined whether our legitimate interests prevail over your interests.

Right to data portability

You have the right to receive your personal data, which you have provided to us, in a structured, commonly available and machine-readable format. Moreover, you have the right to have us transmit this data to another controller without hindrance by us, provided that the processing is based on a contract or consent, and our processing takes place with the aid of automated processes.

Right to object

You have the right at any time to submit an objection to the processing of your personal data, which takes place based on Art. 6 1) e) or f), for reasons arising from your particular situation; this also applies to profiling based on one of these conditions. Insofar as the processing of your personal data is based on a consent, you have the right to withdraw this consent at any time.

Right to withdraw

If the processing of your personal data is based on a consent, you have the right to withdraw this consent at any time.

7. Statutory deadlines for the erasure of data

Insofar as no statutory retention obligation applies, the data shall be deleted or destroyed once it is no longer required for fulfilling the purpose of data processing. Various deadlines apply to the retention of personal data. For instance, data of tax relevance is generally stored for ten years, while other data is typically retained for six years in accordance with provisions under the Commercial Code (HGB). Furthermore, the storage period may also be determined by statutory limitation periods, which may generally amount to three years in the case of Articles 195 et seqq. of the Civil Code (BGB), for example, or in certain cases up to even thirty years.

8. Right to lodge a complaint with a supervisory authority

In accordance with Art. 77 GDPR, each data subject has the right to lodge a complaint with a supervisory authority, if they believe that the processing of their personal data is in violation of the GDPR. The competent supervisory authority in data protection matters is the state data protection officer of the federal state in which our company has its registered office.

The state commissioner for data protection North Rhine-Westphalia

Bettina Gayk

Kavalleriestraße 2-4,

40213 Düsseldorf

Fon: +49-211 38424 - 0

Fax: +49-211 38424 - 10

E-Mail: poststelle@ldi.nrw.de

9. Disclaimer

Liability for content

As service provider, we are responsible for our own content on these webpages in accordance with general laws (pursuant to Art. 7 (1) Telemedia Act, ‘TMG’). However, as service provider, we are not obliged to monitor transmitted or stored external information or to investigate circumstances that indicate unlawful activity (Articles 8–10 TMG). This shall be without prejudice to obligations to remove or block the use of information according to general laws. Liability in this connection is only possible from the time we receive knowledge of an actual violation of the law. We will immediately remove the relevant content as soon as we become aware of corresponding violations of the law.

Liability for links

Our offer contains links to the external websites of third parties, over whose content we have no influence. For this reason, we are unable to accept any liability for this external content. The respective provider or operator of the website is always responsible for the content of the linked webpages. The linked webpages will be reviewed for possible violations of the law at the time of linking. Unlawful content could not be found at the time of linking. However, it is not feasible to review the content of the linked webpages on an ongoing basis, without specific indications of a violation of the law. We will immediately remove corresponding links as soon as we become aware of violations of the law.