DATA PROTECTION DECLARATION

1. DATA PROTECTION AT A GLANCE

General information

The following information provides a simple overview of what happens to your data when you visit our website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in our data protection declaration below this text.

Data collection on our website

Who is responsible for data collection on this website?

The website operator carries out data processing on this website. The operator’s contact details are in the legal notice on this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. For example, this may be data you enter in a contact form.

Our IT systems automatically collect other data when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some data is collected to ensure the website can be used without any restrictions. Other data may be used to analyze your user behaviour.

What rights do you have concerning your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request that this data be corrected, blocked or deleted. You can contact us at any time at the address given in the legal notice if you have further questions on data protection. You also have the right to complain to the competent supervisory authority.

2. Hosting

We host the content of our website with the following providers:

IONOS

The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter referred to as IONOS). When you visit our website, IONOS collects various log files, including your IP addresses. Details can be found in the IONOS privacy policy.

IONOS is used based on Art. 6(1) lit. f of the General Data Protection Regulation (GDPR). We have a legitimate interest in displaying our website as reliably as possible. If the necessary consent has been requested, data is processed exclusively based on Art. 6(1) lit. a GDPR and section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Order processing

We have concluded a data processing agreement (DPA) for using the service as mentioned above. This contract is prescribed by data protection law, which guarantees that it processes the personal data of our website visitors only per our instructions and in compliance with the GDPR.

3. GENERAL NOTES AND MANDATORY INFORMATION

Data protection

The operators of this website take the protection of your data very seriously. We treat your data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Various personal data is collected when you use this website. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Data transmission over the internet (e.g. email communication) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the responsible body.

The controller responsible for data processing on this website is

Walter Lutz

FORMTECHNIK Dr. Hasel GmbH

Industriestr. 12

74934 Reichartshausen

Germany

Phone: +49 (0)6262-919-0

E-mail: zentrale@FT-Hasel.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, e-mail addresses).

Note on data transfer to the USA and other third countries

Among other things, we use tools from companies based in the USA or other third countries that do not have the same strict data protection laws as in Europe. If these tools are active, your data may be transferred to these third countries and processed there. Data protection comparable to EU data cannot be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security authorities without you, the data subject, being able to take legal action against this. Therefore, US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for surveillance. We have no influence over these processing activities.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw your consent at any time by sending us an e-mail. Revoking consent does not affect the legality of the data processing carried out prior to the revocation.

Right to object to data collection in exceptional cases and to direct advertising (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6(1) LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR UNLESS THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21(1) GDPR).

IF YOUR DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION ACCORDING TO ART. 21(2) GDPR).

Right to lodge complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to complain to a supervisory authority, particularly in the Member State where they live or work or the place of the alleged violation. The right to complain is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to request that any data we process automatically based on your consent or fulfilling a contract be handed over to you or a third party in a standard, machine-readable format. If you request the direct transfer of the data to another controller, this will only occur if it is technically feasible.

Right to restriction of processing

You have the right to request that the processing of your data be restricted. You can contact us at any time to do this. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your data stored by us, we generally need time to verify this. For the duration of the review, you have the right to request that the processing of your data be restricted.

If your data was/is processed unlawfully, you can request that data processing be restricted instead of the data being erased.

If we no longer need your data for processing but need it for exercising, defending against or asserting legal claims, you have the right to request that data processing be restricted instead of your data being erased.

If you have objected in accordance with Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request that the processing of your personal data be restricted.

If you have restricted the processing of your data, this data – apart from being stored – may only be processed with your consent or for establishing, exercising or defending against legal claims for the protection of the rights of another natural or legal person or for reasons of significant public interest of the European Union or a Member State.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognise an encrypted connection by the browser’s address line changing from http:// to https:// and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, third parties cannot read the data you transmit to us.

Information, deletion and correction

Within the framework of the applicable legal provisions, you have the right to any information about your stored personal data, its origin and recipients, and the purpose of the data processing and, if necessary, a right to have this data corrected, blocked or deleted at any time. You can contact us at any time at the address in the legal notice if you have further questions about personal data.

Objection to advertising e-mails

We now object to using contact data published as part of our obligation to provide legal notice to send unsolicited advertising and information material. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Storage duration

Unless a more specific storage period has been defined in this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.

General information on the legal basis for data processing on this website

If you have consented to data processing, we process your data based on Art. 6(1) lit. a GDPR or Art. 9(2) lit. a GDPR, insofar as special categories of data are processed by Art. 9(1) GDPR. In the event of express consent to transferring personal data to third countries, data processing is also based on Art. 49(1) lit. a GDPR. If you have consented to cookies being stored or access being made available to information on your end device (e.g. via device fingerprinting), the data processing is also carried out based on Section 25(1) TTDSG. Consent can be revoked at any time. If your data is required to fulfil the contract or to carry out pre-contractual measures, we process your data based on Art. 6(1) lit. b GDPR. Furthermore, we process your data if this is necessary to fulfil a legal obligation on the basis of Art. 6(1) lit. c GDPR. Data processing may also be carried out based on our legitimate interest in accordance with Art. 6(1) lit. f GDPR. Information on the relevant legal bases in each case is provided in the following paragraphs of this privacy policy.

DATA PROTECTION OFFICER

Data protection office required by law

We have appointed a data protection officer for our company.

Dinesh Kailanathan

FORMTECHNIK Dr. Hasel GmbH

Industriestr. 12

74934 Reichartshausen

Germany

Phone: +49 (0)6262/919174

E-mail: d.kailanathan@ft-hasel.de

4. DATA COLLECTION ON OUR WEBSITE

Cookies

Our internet pages use “cookies”, i.e. small data packets that are stored on your device temporarily for a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or your web browser automatically deletes them. Neither type causes any damage to your end device.

Cookies may originate from us (first-party cookies) or from third-party companies (“third-party cookies”). Third-party cookies enable specific services from third-party companies to be integrated within websites (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the video display). Other cookies can be used to evaluate user behaviour or for advertising purposes.

Cookies that are required for carrying out the electronic communication process, for providing certain functions that you have requested (e.g. shopping cart function), or for optimizing the website (e.g. cookies for measuring the web audience) – i.e. necessary cookies – are stored in accordance with Art. 6(1) lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in keeping necessary cookies for optimizing its services and keeping them free of technical errors. If consent to storing cookies and comparable recognition technologies has been requested, the processing is carried out exclusively based on this consent (Art. 6(1) lit. a GDPR and section 25(1) TTDSG); the consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, refuse cookies in certain cases (or in general) and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

You can find out which cookies and services are used on this website in this privacy policy.

Consent with Usercentrics

This website uses the consent technology of Usercentrics to obtain your consent to storing certain cookies on your end device or to use specific technologies and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany, website: https://usercentrics.com/de/ (hereinafter referred to as “Usercentrics”).

When you visit our website, the following personal data is transmitted to Usercentrics:

Your consent(s) or the withdrawal of your consent(s)

Your IP address

Information about your browser

Information about your end device

Time of your visit to the website

Usercentrics also stores a cookie in your browser to allow it to assign the consents or revocation to you. The data collected in this way is kept until you ask us to delete it, until you delete the Usercentrics cookie yourself, or until the purpose for storing the data no longer applies. This does not affect mandatory statutory retention obligations.

Usercentrics are used to obtain the legally required consent to use certain technologies. The legal basis for this is Art. 6(1) lit. c GDPR.

Order processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This contract is required by data protection law, which ensures that it processes the personal data of our website visitors only per our instructions and in compliance with the GDPR.

Server log files

The provider of the pages automatically collects and stores information in “server log files”, which your browser automatically transmits to us. These contain the following information:

- Browser type and browser version

- Operating system used

- Referrer URL

- Host name of the accessing computer

- Time of the server request

- IP address

This data is not merged with other data sources.

The basis for data processing is Art. 6(1) lit. f GDPR, which permits the processing of data for fulfilling a contract or pre-contractual measures.

This data is collected based on Art. 6(1) lit. f GDPR. The website operator has a legitimate interest in optimizing its website and keeping it free of technical errors – the server log files must be recorded for this purpose.

5. PLUGINS AND TOOLS

YouTube with extended data protection

This website embeds videos from the YouTube website. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the extended data protection mode does not necessarily exclude the transfer of data to YouTube partners. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.

A connection to the YouTube servers is established as soon as you start a YouTube video on this website. This tells the YouTube server which of our pages you have visited. If logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your profile. You can prevent this by logging out of your YouTube account. Furthermore, YouTube may store cookies on your end device or use comparable recognition technologies (e.g. device fingerprinting) after starting a video. In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent fraud attempts.

If necessary, further data processing operations may be triggered after the start of a YouTube video; we have no influence over these.

We use YouTube to present the products and services we offer in an appealing way. This constitutes a legitimate interest within the meaning of Art. 6(1) lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively based on Art. 6(1) lit. a GDPR and section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Further information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.

OpenStreetMap

We use the OpenStreetMap (OSM) map service.

We integrate the map material from OpenStreetMap on the server of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The United Kingdom is considered a safe third country under data protection law. This means that Great Britain has a level of data protection that corresponds to the European Union’s data protection level. When using the OpenStreetMap maps, a connection is established to the servers of the OpenStreetMap Foundation. Your IP address and other information about your behaviour on this website may be forwarded to the OSMF. For this purpose, OpenStreetMap may store cookies in your browser or use comparable recognition technologies.

We use OpenStreetMap to present the products and services we offer in an appealing way and to allow the places indicated on the website to be found easily. This constitutes a legitimate interest within the meaning of Art. 6(1) lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively based on Art. 6(1) lit. a GDPR and section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

6. OUR OWN SERVICES

Handling of applicant data

We invite prospective employees to send their applications to us (e.g. by e-mail, post or online application form). The following information outlines the scope, purpose and use of your data collected during the application process. We assure you that your data will be collected, processed and used according to applicable data protection law and all other statutory provisions and will be treated in strict confidence.

Scope and purpose of data collection

If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) insofar as this is necessary to establish an employment relationship. The legal basis for this is section 26 BDSG under German law (initiation of an employment relationship), Art. 6(1) lit. b GDPR (general contract initiation) and – if you consent to this – Art. 6(1) lit. a GDPR. Consent can be revoked at any time. Your data will only be passed on within our company to persons involved in processing your application.

If the application is successful, the data you submit will be stored in our data processing systems on the basis of Section 26 BDSG and Art. 6(1) lit. b GDPR to implement the employment relationship.

Retention period for the data

In the event that we are unable to make you a job offer or that you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted based on our legitimate interests (Art. 6(1) lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted, and the physical application documents will be destroyed. The retention serves, in particular, as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute). In that case, the data will only be deleted when the purpose for further storage no longer applies.

More extended storage may also occur if you have consented (Art. 6(1) lit. a GDPR) or if statutory retention obligations prevent deletion.

Inclusion in the applicant pool

If we do not offer you a job, you may have the opportunity to join our applicant pool. If you are accepted, all documents and information from your application will be transferred to the applicant pool to contact you in the event of suitable vacancies.

Inclusion in the applicant pool is exclusively based on your express consent (Art. 6(1) lit. a GDPR). Giving consent is voluntary and is not related to the current application process. The data subject can withdraw their consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, provided there are no legal grounds for retention.

The data from the applicant pool will be irrevocably deleted for two years after consent has been given.