I. General information and contact persons
Welcome to our internet pages! Data protection is not only a legal necessity for us, but a matter of course. Hereinafter, we would like to inform you, as required by law, about what happens with your personal data on the occasion of your visit to our website. Personal data is defined as all data that can be assigned to you as an identified or identifiable person. Responsible for the processing of personal data in connection with your visit to these Internet pages is:
FREY + LAU GmbH
Phone: +49 4194 9953
Fax: +49 4194 995580
We have appointed a data protection officer for our company, as prescribed by law. The contact details are:
FREY + LAU GmbH
- THE DATA PROTECTION OFFICER -
This data protection declaration applies to those websites on which it can be retrieved. Regarding our other websites and services, data protection information provided there applies in each case.
Our website contains links to third-party websites. Respective data protection declarations and data protection notices of the respective operators of the websites linked apply. We are not responsible for the data processing practices on third-party platforms outside our own sphere of influence.
II. Processing of your data
When you use our website, various personal data are processed:
1. Provision of the website and creation of log files
Whenever our website is called up, our system automatically collects data and information from the calling computer:
Temporary storage of the IP address is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
Storage in log files serves the functionality of the website. In addition, we use data to optimise these internet offers and to ensure the security of our information technology. An evaluation of data for marketing purposes does not take place in this context.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Regarding the collection of data for the provision of the website, this is the case at the end of the usage process. Regarding storage of data in log files, this is the case after fourteen days at the latest. Storage beyond this period is possible. In that case, the IP addresses of the users are deleted or masked so that identifying the calling client is no longer possible.
Legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f GDPR, according to which our legitimate interest is the proper provision of the functions of this website, the evaluation of access information with the aim of eliminating and avoiding technical faults, and the prevention and tracking of security incidents.
In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
The purpose of using technically necessary cookies is to enable and simplify the usage of a website. Some functions of this website cannot be offered without cookies.
User data collected through technically necessary cookies is not used to create user profiles. In addition, with your separate consent, cookies may be used to provide external media, such as films and maps, and to analyse usage of the website.
User data collected in this way is pseudonymised by technical precautions. Therefore, it is no longer possible to assign data to the calling user. Data is not merged with other personal data of the user.
3. Plug-ins and tools
Use of Google Analytics
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in abbreviated form, which means that personal references can be ruled out. If data collected about you relates to a person, this is immediately excluded and personal data is deleted immediately.
We use Google Analytics to analyse and regularly improve usage of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. Legal basis for using of Google Analytics is Art. 6 (1) subpara. 1 lit. a GDPR in combination with your consent.
Information about the third party provider: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy.
For cases in which personal data is transferred to the USA, Google complies with data protection requirements for data transfer to third countries pursuant to Art. 44 et seq. GDPR. For this purpose, EU standard contractual clauses have been concluded. You can view these here:.
4. Orders/Additional functions
In addition to a purely informative use of our offers, you can send us questions and orders or provide them. For this purpose, you will usually have to provide further personal data which we process in order to process your request, to answer your enquiries, to fulfil contracts with you, to assert and realise our claims and, if necessary, to respond to your evaluation, and to which the aforementioned data processing principles apply. In addition, we use personal data insofar as we have to in order to fulfil our legal obligations, for example to comply with our documentation and storage obligations under tax or commercial law.
Data will only be passed on to third parties if and to the extent that this is necessary to fulfil our contractual obligations towards you (Art. 6 (1) subpara. 1 lit. b GDPR).
If consent has been given, legal basis for processing your data is Art. 6 (1) lit. a GDPR. If processing serves the fulfilment of a contract to which the data subject is a party or the implementation of pre-contractual measures, legal basis for the processing of the data is Art. 6 (1) lit. b GDPR. If we process personal data in order to process non-contract-related requests or enquiries, we do so for the purpose of optimal and efficient communication with you as well as to improve our customer service, to optimise and design our offers in line with requirements, to maintain the customer relationship, and furthermore to clarify and rectify technical problems. The aforementioned purposes constitute our legitimate interests within Art. 6 (1) lit. f GDPR. If we fulfil a legal obligation incumbent upon us by processing your personal data, legal basis is Art. 6 (1) lit. c GDPR.
In addition, we reserve the right in individual cases to process personal data if this is necessary, for example, for the purpose of prosecuting abusive or fraudulent acts, for tracking and remedying functional or security problems. Above purposes then constitute our legitimate interest within Art. 6 (1) lit. f GDPR.
On our website, we offer users an opportunity to register by providing personal data. Data is entered in an input mask, transmitted to us and stored. That data is only passed on to third parties if and to the extent that this is necessary to fulfil our contractual obligations to you (Art. 6(1) subpara. 1 lit. b GDPR). As part of the registration process, information resulting from the registration form is requested and stored by us. If the user has given his or her consent, legal basis for the processing of the data is Art. 6 (1) lit. a GDPR. If registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, legal basis for the processing of the data is Art. 6 (1) lit. b GDPR.
When concluding a contractual relationship on our website, we ask for the following personal data:
Aforementioned data is processed for the purpose of handling the contractual relationship. The processing of the data is based on Art. 6 (1) lit. b GDPR. The storage period is limited to the purpose of the contract and, if applicable, legal and contractual retention obligations.
5. Storage period
Unless otherwise stated in the respective individual information, we process personal data in accordance with the statutory provisions only for the purposes outlined here in each case and only for as long as personal identification of the data subject is required for the respective purpose. Subsequently, the data will be deleted or neutralised/anonymised in accordance with data protection regulations.
6. SSL or TLS encryption
In the case of unencrypted data transmissions on the Internet (e.g. in the case of unencrypted communication by e-mail), the confidentiality of the transmitted data cannot be fully guaranteed. For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL or TLS encryption.
You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
7. Newsletter and e-mail messages
With your consent, you can subscribe to our newsletter (if offered), with which we inform you about our current interesting offers. The services and benefits advertised are listed in the declaration of consent.
We use the so-called double-opt-in procedure to register for our newsletter. This means that after your registration, we will send an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. Additionally, we store your IP address and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
The only data required for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. Legal basis is Art. 6 (1) subpara. 1 lit. a GDPR.
You can revoke your consent to receive the newsletter and unsubscribe at any time. You can declare the revocation by clicking on the link provided in every newsletter e-mail or by sending a message to the contact details provided in the imprint.
III. Your right
You have the right at any time to
If you are of the opinion that the processing of your data violates legal requirements, you can also complain about this to the relevant supervisory authority.
We would like to point out that in certain cases we may request additional information from you in order to establish your identity. This is the only way we can ensure, for example, that when providing information, said information is not released to unauthorised persons.
IV. Data protection during applications and the application process
We process personal data of applicants for the purpose of handling the application procedure. Processing may also take place electronically. This is particularly the case if an applicant sends us relevant application documents electronically, for example by e-mail or via a web form on the website. If we enter into an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with statutory provisions. If we do not enter into an employment contract with the applicant, the application documents will be automatically deleted four months after notification of the rejection, provided that no other legitimate interests of the data controller conflict with such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG). Legal basis for the processing of personal data of applicants is Section 26 of the Federal Data Protection Act (BDSG) in conjunction with Art. 6 (1) lit. b, 88 GDPR, furthermore, insofar as the processing is carried out to fulfil legal requirements, Art. 6 (1) lit. c GDPR and, insofar as consent of the data subject is the basis of the processing, Art. 6 (1) lit. a GDPR in conjunction with Section 26 BDSG. Furthermore, we may process personal data insofar as this is necessary for the defence of asserted legal claims against us arising from the application process. Legal basis for this is Art. 6 (1) lit. f GDPR; legitimate interest is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).