Data protection declaration
1. General information
The following information provides a simple overview of what happens with your personal data when you visit our website. Personal data is any data which could be used to personally identify you. Detailed information on the subject of data protection can be found in our data protection declaration below.
Data collection on our website
Who is responsible for data collection on this website?
Data is processed on this website by the website operator. The operator’s contact details are listed in the website’s legal notice.
How do we collect your data?
Firstly, your data is collected when you communicate it to us. This can include the data you enter in a contact form, for instance. Other data is collected automatically by our IT systems when you visit the website. This data is primarily technical data (such as your browser and operating system or the time when you accessed the page). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected to ensure the proper functioning of the website, while other data can be used to analyse how visitors use the site.
What rights do you have regarding your data?
You always have the right to information about the origin, recipients and purpose of your stored data at no cost to you. You also have the right to request that this data is corrected, blocked or deleted. You can contact us at any time using the address provided in the legal notice if you have any further questions regarding data protection. Moreover, you also have the right to file a complaint with the appropriate regulatory authorities. In addition, you have the right to request that the processing of your personal data is restricted. Details on this can be found in this data protection declaration in the “Right to restrict processing” section.
2. General notices and mandatory information
The operators of this website take the protection of your personal information very seriously. We treat your personal information confidentially and in accordance with the statutory data protection regulations and this data protection declaration. If you use this website, various pieces of personal data are collected. Personal data is any data which you could be used to personally identify you. This data protection declaration explains what information we collect and what we use it for. It also explains how and for what purpose this takes place. Please note that data transmitted via the Internet (e.g. via e-mail) may be vulnerable to security breaches. Seamlessly protecting data against third-party access is impossible.
Notice concerning the party responsible for this website
M. Schall GmbH & Co. KG
Am Roßpfad 1-3
Tel.: +49 (0) 2421 97 55 - 0
The party responsible is a physical or legal person who decides on the purposes and methods of processing personal data alone or together with others (e.g. names, e-mail addresses, etc.).
Revoking your consent to the processing of your data
Many data processing processes are only possible with your express consent. You may revoke your consent at any time. An informal message sent to us by e-mail is sufficient for this. The legality of the data processing performed prior to consent being revoked remains unaffected by revocation.
Right to object to the collection of data in special cases and to direct marketing (art. 21 GDPR)
If data is processed on the basis of art. 6 para 1 (e) or (f) of the GDPR, you have the right at any time to object to the processing of your personal data for reasons relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you lodge an objection, we will no longer process your relevant personal information unless we can prove compelling legitimate reasons for processing which outweigh your interests, rights and freedoms, or processing serves the purpose of asserting, exercising or defending legal claims (objection based on art. 21 para. 1 GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object to the processing of personal data concerning you at any time for the purposes of such advertising, including profiling to the extent it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection based on art. 21 para. 2 GDPR).
Right to file complaints with the responsible regulatory authorities
In the event of infringements against the GDPR, the persons concerned shall have the right to appeal to a supervisory authority, particularly in the member state of their habitual residence, workplace or place of presumed infringement. A right of complaint exists without prejudice to other administrative or judicial remedies.
The right to data portability
You have the right to have the data which we process based on your consent or in fulfilment of a contract automatically delivered to you or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this is only possible to the extent that it is technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as orders or enquiries you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://”, and by virtue of the lock symbol in your browser bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Disclosure, blocking, deletion and correction of data
As permitted by law, you have the right to be provided with information free of charge at any time regarding any of your personal data that is stored as well as its origin, recipients and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address provided in the legal notice if you have any further questions regarding personal information.
Right to restrict processing
You have the right to request that the processing of your personal data be restricted. To this end, you can contact us at any time at the address listed in our legal notice. The right to restrict processing is granted in the following cases:
- If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the period of verification, you have the right to demand that the processing of your personal data be restricted.
- If the processing of your personal data has taken / is taking place unlawfully, you can demand the restriction of data processing instead of data being deleted.
- If we no longer require your personal data but you do for exercising, defending or asserting legal claims, you have the right to demand that the processing of your personal data be restricted instead of data being deleted.
- If you have lodged an objection pursuant to art. 21 para 1 GDPR, your and our interests must be weighed. As long as it is unclear whose interests prevail, you have the right to demand that the processing of your personal data be restricted.
If the processing of your personal data has been restricted, such data – apart from being stored – may be processed only given your consent, or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person, or on the grounds of an important public interest of the European Union or a Member State.
Objection to promotional e-mails
The use of contact data published in the context of website legal notice requirements for sending promotional and informational materials not expressly requested is hereby expressly prohibited. The website operator expressly reserves the right to take legal action in the event that unsolicited marketing material is received, e.g. spam e-mails.
Data collection obligation
The collection of your personal data is indispensable for the conclusion of a contract as well as for the fulfilment of contractual obligations and services. As a result, if you do not provide us with the requested information, it is neither possible to successful conclude the contract nor provide further contractual services.
No automated decision-making takes place.
Data collection on our website
Some of our webpages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our services more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognise your browser when you next visit the site.
You can configure your browser in such a way that you are informed whenever a cookie is set, and you can choose on a case-by-case basis whether or not to allow this. You can also set up your browser to prohibit the setting of cookies in general, and/or to delete cookies automatically when you close the browser. Disabling cookies can limit the functionality of this website.
Cookies which are necessary for carrying out electronic communication processes or for providing certain functions desired by you (e.g. the shopping basket function), are saved based on art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in saving cookies for the correct technical and optimised delivery of its services. If other cookies (e.g. those used to analyse your surfing behaviour) are also saved, these are treated separately in this data protection declaration.
Server log files
When you visit our webpages, information is automatically collected and saved in so-called server log files which your browser sends to us automatically. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data will not be combined with data from other sources. The basis for this data processing is art. 6 para. 1 (f) GDPR. Legitimate interest results from the following purposes:
- Improving and ensuring the establishment of a connection to the website
- Improving the possible uses of the website
- Evaluating system security and stability
- Administrative purposes
The server logs collected are anonymised after 7 days and deleted after 9 weeks. Data which must be retained as potential evidence is not deleted until the relevant incident has been conclusively clarified.
This website uses functions of the web analytics service Google Analytics. This is operated by Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland.
Google Analytics uses so-called “cookies”. These are text files placed on your computer to enable the website to analyse how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
Google Analytics cookies are stored based on art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
We have activated the IP anonymization function on this website. This will result in your IP address being truncated by Google within European Union member states or other states party to the agreement in the European Economic Area, prior to transmission to the United States. Only in exceptional cases will the whole IP address be first transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them with other services relating to website activity and Internet usage. The IP address that your browser conveys within the scope of Google Analytics will not be associated with any other data held by Google.
Objecting to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. This will set an opt-out cookie which prevents the recording of your data on subsequent visits to this site: Deactivate Google Analytics.
Contracting out data processing
We have entered into a contract with Google to outsource our data processing and have fully implemented the strict requirements of the German data protection authorities when using Google Analytics.
Demographic features of Google Analytics
This website uses Google Analytics’ “demographic features” function. This allows reports to be generated containing statements about the age, gender and interests of site visitors. This data stems from interest-based advertising from Google and third-party visitor data. This data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account, or you can prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.
If you send us e-mail enquiries, requests by phone or fax, or message using the contact form, we will save your data for the purpose of processing the enquiry and in case of any follow-up questions. We do not share this data without your permission.
This data is processed on the basis of art. 6 par. 1 (b) GDPR, provided your request is related to the fulfilment of a contract or necessary for the implementation of pre-contractual arrangements. In all other cases, the processing is based on your consent (art. 6 par. 1 (a) GDPR) and / or on our legitimate interests (art. 6 para 1 (f) GDPR), as we have a legitimate interest in effectively processing the requests addressed to us.
We will retain the data you provide on the contact form until its deletion is requested, your consent for storage is revoked, or the purpose for its storage is no longer applicable (e.g. after handling your inquiry has been completed). Any mandatory statutory provisions – especially those regarding mandatory data retention periods – remain unaffected by this.
We offer you the opportunity to apply for jobs with us (e.g. by e-mail, post or via the online applications form). In the following, we inform you about the scope, purpose and use of the personal information we collect about you as part of the application process. We assure that the collection, processing and use of your data takes place in compliance with the applicable data protection laws and all other legal provisions, and that your data will be handled with strict confidentiality.
Scope and purpose of the data collection
If you send us an application, we process the personal data connected to it (e.g. contact and communication data, application documents, notes made during interviews etc.), to the extent that this data is required to make a decision on establishing an employment relationship. The legal basis for this is Section 26 of the Federal Data Protection Act (BEDS) in line with German law (Data processing for employment-related purposes), art. 6 para. 1 (b) GDPR (processing necessary for the performance of a contract) and – to the extent that you have provided consent – art. 6 para. 1 (a) GDPR. You can withdraw your consent at any time. Your personal data will only be forwarded to personnel within our company who are involved in processing your application.
If your application is successful, the data submitted by you will be saved on our data processing systems pursuant to section 26 BEDS and art. 6 para. 1 (b) GDPR for the purpose of establishing the employment relationship.
Period of data storage
If we are unable to make you a job offer, you turn down a job offer, withdraw your application, revoke your consent to data processing or request that we delete the data, the data sent by you including any remaining physical application documents will be stored for a maximum of 6 months after the application process (retention period) is completed in order to be able to trace the detailed steps within the application process in the case of discrepancies (art. 6 para. 1 (f) GDPR).
You can object to this data storage should you have legitimate interests that outweigh our interests.
After the retention period expires, the data will be deleted unless there is a statutory retention obligation or other legal reasons for further storage exist. Should it be evident that the storage of your data is necessary after the expiry of the retention period (e.g. due to an impending or pending legal dispute), the data is only deleted when it becomes irrelevant. Other statutory retention periods remain unaffected by this.