Data Protection
I. General information and contact persons
Welcome to our internet pages! Data protection is not only a legal necessity for us, but a matter of course. Hereinafter, we would like to inform you, as required by law, about what happens with your personal data on the occasion of your visit to our website. Personal data is defined as all data that can be assigned to you as an identified or identifiable person. Responsible for the processing of personal data in connection with your visit to these Internet pages is:
FREY + LAU GmbH
Immenhacken 12
D-24558 Henstedt-Ulzburg
Phone: +49 4194 9953
Fax: +49 4194 995580
E-mail: info@freylau.com
We have appointed a data protection officer for our company, as prescribed by law. The contact details are:
FREY + LAU GmbH
- THE DATA PROTECTION OFFICER -
Immenhacken 12
D-24558 Henstedt-Ulzburg
E-mail: datenschutzbeauftragter@freylau.com
This data protection declaration applies to those websites on which it can be retrieved. Regarding our other websites and services, data protection information provided there applies in each case.
Our website contains links to third-party websites. Respective data protection declarations and data protection notices of the respective operators of the websites linked apply. We are not responsible for the data processing practices on third-party platforms outside our own sphere of influence.
II. Processing of your data
When you use our website, various personal data are processed:
1. Provision of the website and creation of log files
Whenever our website is called up, our system automatically collects data and information from the calling computer:
information about browser type and version used
operating system of the user
HTTP response code
number of bytes transmitted
IP address of the user
date and time of access
websites from which the user's system accesses our website
websites that are accessed by the user's system via our website
Temporary storage of the IP address is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
Storage in log files serves the functionality of the website. In addition, we use data to optimise these internet offers and to ensure the security of our information technology. An evaluation of data for marketing purposes does not take place in this context.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Regarding the collection of data for the provision of the website, this is the case at the end of the usage process. Regarding storage of data in log files, this is the case after fourteen days at the latest. Storage beyond this period is possible. In that case, the IP addresses of the users are deleted or masked so that identifying the calling client is no longer possible.
Legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f GDPR, according to which our legitimate interest is the proper provision of the functions of this website, the evaluation of access information with the aim of eliminating and avoiding technical faults, and the prevention and tracking of security incidents.
In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
Cookies
This website uses cookies and similar technology. Cookies are small text files that are stored by an internet browser on the user's terminal device. A cookie usually contains a characteristic string of characters that enables a browser to be uniquely identified when a website is called up again. Cookies are used to make a website more user-friendly, to optimise functions and services of a website and to provide you with content tailored to you.
The purpose of using technically necessary cookies is to enable and simplify the usage of a website. Some functions of this website cannot be offered without cookies.
User data collected through technically necessary cookies is not used to create user profiles. In addition, with your separate consent, cookies may be used to provide external media, such as films and maps, and to analyse usage of the website.
User data collected in this way is pseudonymised by technical precautions. Therefore, it is no longer possible to assign data to the calling user. Data is not merged with other personal data of the user.
By changing the settings in your internet browser, you can deactivate or restrict the use of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for a website, it may no longer be possible to fully use all the functions of a website.
Legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f GDPR, whereby the legitimate interest of the controller is the secure, stable, efficient provision of the website functions and the information that can be accessed via them. If the controller fulfils a contractual obligation towards you with the respective function, for example participation in a digital event booked by you, the legal basis is Art. 6 (1) lit. b GDPR. If we use cookies to provide functions or for other purposes that are not technically necessary, legal basis for the processing of personal data in connection with these cookies is Art. 6 (1) lit. a GDPR in conjunction with your consent.
3. Plug-ins and tools
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"). Google Analytics uses cookies, text files placed on your computer to help the website analyse how users use the site. Information generated by cookies about your use of the website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout.
This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in abbreviated form, which means that personal references can be ruled out. If data collected about you relates to a person, this is immediately excluded and personal data is deleted immediately.
We use Google Analytics to analyse and regularly improve usage of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. Legal basis for using of Google Analytics is Art. 6 (1) subpara. 1 lit. a GDPR in combination with your consent.
Information about the third party provider: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: www.google.de/intl/de/policies/privacy.
For cases in which personal data is transferred to the USA, Google complies with data protection requirements for data transfer to third countries pursuant to Art. 44 et seq. GDPR. For this purpose, EU standard contractual clauses have been concluded. You can view these here:.
4. Orders/Additional functions
Enquiries/Orders/Transactions
In addition to a purely informative use of our offers, you can send us questions and orders or provide them. For this purpose, you will usually have to provide further personal data which we process in order to process your request, to answer your enquiries, to fulfil contracts with you, to assert and realise our claims and, if necessary, to respond to your evaluation, and to which the aforementioned data processing principles apply. In addition, we use personal data insofar as we have to in order to fulfil our legal obligations, for example to comply with our documentation and storage obligations under tax or commercial law.
Data will only be passed on to third parties if and to the extent that this is necessary to fulfil our contractual obligations towards you (Art. 6 (1) subpara. 1 lit. b GDPR).
If consent has been given, legal basis for processing your data is Art. 6 (1) lit. a GDPR. If processing serves the fulfilment of a contract to which the data subject is a party or the implementation of pre-contractual measures, legal basis for the processing of the data is Art. 6 (1) lit. b GDPR. If we process personal data in order to process non-contract-related requests or enquiries, we do so for the purpose of optimal and efficient communication with you as well as to improve our customer service, to optimise and design our offers in line with requirements, to maintain the customer relationship, and furthermore to clarify and rectify technical problems. The aforementioned purposes constitute our legitimate interests within Art. 6 (1) lit. f GDPR. If we fulfil a legal obligation incumbent upon us by processing your personal data, legal basis is Art. 6 (1) lit. c GDPR.
In addition, we reserve the right in individual cases to process personal data if this is necessary, for example, for the purpose of prosecuting abusive or fraudulent acts, for tracking and remedying functional or security problems. Above purposes then constitute our legitimate interest within Art. 6 (1) lit. f GDPR.
Registration
On our website, we offer users an opportunity to register by providing personal data. Data is entered in an input mask, transmitted to us and stored. That data is only passed on to third parties if and to the extent that this is necessary to fulfil our contractual obligations to you (Art. 6(1) subpara. 1 lit. b GDPR). As part of the registration process, information resulting from the registration form is requested and stored by us. If the user has given his or her consent, legal basis for the processing of the data is Art. 6 (1) lit. a GDPR. If registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, legal basis for the processing of the data is Art. 6 (1) lit. b GDPR.
When concluding a contractual relationship on our website, we ask for the following personal data:
data that personally identifies you, such as name and e-mail address;
other personal data that we are required or authorised by law to collect and process and that we require for your authentication, identification, or to verify the data we collect.
Aforementioned data is processed for the purpose of handling the contractual relationship. The processing of the data is based on Art. 6 (1) lit. b GDPR. The storage period is limited to the purpose of the contract and, if applicable, legal and contractual retention obligations.
5. Storage period
Unless otherwise stated in the respective individual information, we process personal data in accordance with the statutory provisions only for the purposes outlined here in each case and only for as long as personal identification of the data subject is required for the respective purpose. Subsequently, the data will be deleted or neutralised/anonymised in accordance with data protection regulations.
6. SSL or TLS encryption
In the case of unencrypted data transmissions on the Internet (e.g. in the case of unencrypted communication by e-mail), the confidentiality of the transmitted data cannot be fully guaranteed. For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL or TLS encryption.
You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
7. Newsletter and e-mail messages
With your consent, you can subscribe to our newsletter (if offered), with which we inform you about our current interesting offers. The services and benefits advertised are listed in the declaration of consent.
We use the so-called double-opt-in procedure to register for our newsletter. This means that after your registration, we will send an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. Additionally, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
The only data required for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. Legal basis is Art. 6 (1) subpara. 1 lit. a GDPR.
You can revoke your consent to receive the newsletter and unsubscribe at any time. You can declare the revocation by clicking on the link provided in every newsletter e-mail or by sending a message to the contact details provided in the imprint.
III. Your right
You have the right at any time to
revoke your consent given to us to process your personal data, or object to the processing of your data;
to receive information about your data stored with us;
demand that we correct incorrect data about you;
demand that we delete data about you that is no longer required;
demand that under certain conditions the processing of your data is restricted; this may be the case, for example, if deletion is not possible but you have the right to demand that this data may not be processed further.
demand that your data is transferable; this right applies in particular if you have given your consent to the processing of your data or if the processing of the data is necessary to fulfil a contract. The right to data portability does not apply if your data is not processed automatically.
To exercise your rights, please contact us using the contact details set out in the introduction to this privacy policy.
If you are of the opinion that the processing of your data violates legal requirements, you can also complain about this to the relevant supervisory authority.
We would like to point out that in certain cases we may request additional information from you in order to establish your identity. This is the only way we can ensure, for example, that when providing information, said information is not released to unauthorised persons.
IV. Data protection during applications and the application process
We process personal data of applicants for the purpose of handling the application procedure. Processing may also take place electronically. This is particularly the case if an applicant sends us relevant application documents electronically, for example by e-mail or via a web form on the website. If we enter into an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with statutory provisions. If we do not enter into an employment contract with the applicant, the application documents will be automatically deleted four months after notification of the rejection, provided that no other legitimate interests of the data controller conflict with such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG). Legal basis for the processing of personal data of applicants is Section 26 of the Federal Data Protection Act (BDSG) in conjunction with Art. 6 (1) lit. b, 88 GDPR, furthermore, insofar as the processing is carried out to fulfil legal requirements, Art. 6 (1) lit. c GDPR and, insofar as consent of the data subject is the basis of the processing, Art. 6 (1) lit. a GDPR in conjunction with Section 26 BDSG. Furthermore, we may process personal data insofar as this is necessary for the defence of asserted legal claims against us arising from the application process. Legal basis for this is Art. 6 (1) lit. f GDPR; legitimate interest is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).