Personal data (hereinafter generally referred to as "data") is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered on it.
Pursuant to Article 4(1) of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter "GDPR"), "processing" means any operation or set of operations performed on personal data, whether or not by automated means. This includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
With this Privacy Policy, we inform you in particular about the nature, scope, purpose, duration, and legal basis of our processing of personal data where we determine, either alone or jointly with others, the purposes and means of such processing. We also provide information about third-party components that we use to optimize our website and improve the quality of its use, where such third parties process data under their own responsibility.
Our Privacy Policy is structured as follows:
I. Information about us as the data controller
II. Rights of users and data subjects
III. Information about data processing
I. Information about us as the Data Controller
The controller responsible for this website for the purposes of data protection law is:
Heinrich Krug GmbH & Co. KG
Bornstraße 291–293
44145 Dortmund
Germany
Telephone: +49 231 838 07 0
Fax: +49 231 838 07 77
Email: info@heinrich-krug.de
Data Protection Officer:
Seidel Consulting + Technology
Uwe Seidel
Reinickendorfer Str. 1
45699 Herten
Germany
Telephone: +49 2366 93 93 48
Fax: +49 2366 93 93 49
Email: datenschutz@heinrich-krug.de
II. Rights of Users and Data Subjects
With regard to the data processing described below, users and data subjects have the right:
- to obtain confirmation as to whether personal data concerning them is being processed, to access the personal data processed, to receive further information about the processing, and to obtain copies of the data (see also Article 15 GDPR);
- to request the rectification of inaccurate personal data or the completion of incomplete personal data (see also Article 16 GDPR);
- to request the immediate erasure of personal data concerning them (see also Article 17 GDPR) or, where further processing is required under Article 17(3) GDPR, to request the restriction of processing in accordance with Article 18 GDPR;
- to receive the personal data concerning them that they have provided and to have that data transmitted to another controller (see also Article 20 GDPR);
- to lodge a complaint with a supervisory authority if they believe that their personal data is being processed in violation of applicable data protection laws (see also Article 77 GDPR).
Furthermore, the controller is obliged to inform all recipients to whom personal data has been disclosed of any rectification, erasure, or restriction of processing carried out pursuant to Articles 16, 17(1), and 18 GDPR, unless this proves impossible or involves disproportionate effort. Notwithstanding this, users have the right to obtain information about those recipients.
In addition, pursuant to Article 21 GDPR, users and data subjects have the right to object to the future processing of their personal data where such processing is based on Article 6(1)(f) GDPR. In particular, they have the right to object to the processing of their data for direct marketing purposes.
III. Information About Data Processing
The data processed when you use our website will be deleted or blocked as soon as the purpose for which it was stored no longer applies, provided there are no statutory retention obligations preventing its deletion and no provisions to the contrary are specified below for individual processing activities.
Cookies
a) Session Cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are stored on your device by the internet browser you use. These cookies process certain information about you to an individual extent, such as your browser data, location data, or IP address.
This processing makes our website more user-friendly, effective, and secure, for example by enabling the display of our website in different languages or by providing a shopping cart function.
The legal basis for this processing is Article 6(1)(b) GDPR, provided that these cookies process data for the initiation or performance of a contract.
Where the processing is not carried out for the initiation or performance of a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is Article 6(1)(f) GDPR.
These session cookies are deleted when you close your internet browser.
b) Third-Party Cookies
Where applicable, our website also uses cookies from partner companies with whom we cooperate for advertising, analytics, or website functionality purposes.
Details, in particular regarding the purposes and legal bases for the processing of such third-party cookies, can be found in the information provided below.
c) Disabling Cookies
You can prevent or restrict the installation of cookies through your internet browser settings. You may also delete cookies that have already been stored at any time. The required steps depend on the browser you use. If you have any questions, please consult your browser's help function or documentation, or contact the manufacturer or support service.
For Flash cookies, however, processing cannot be prevented through browser settings. Instead, you must change the settings of your Flash Player. The necessary steps also depend on the Flash Player you use. If you have any questions, please consult your Flash Player's help function or documentation, or contact the manufacturer or user support.
Please note that preventing or restricting the use of cookies may result in some functions of our website not being fully available.
Contact Requests
If you contact us via our contact form or by email, the data you provide will be used to process your inquiry. Providing this information is necessary in order for us to process and respond to your request. Without it, we may be unable to answer your inquiry or only be able to do so to a limited extent.
The legal basis for this processing is Article 6(1)(b) GDPR.
Your data will be deleted once your inquiry has been fully resolved, provided there are no statutory retention obligations preventing deletion, such as those arising from a subsequent contractual relationship.
Online Job Applications / Publication of Job Vacancies
We offer you the opportunity to apply for positions via our website. For these electronic applications, your applicant and application data are collected and processed electronically for the purpose of conducting the recruitment process.
The legal basis for this processing is Section 26(1), sentence 1 of the German Federal Data Protection Act (BDSG) in conjunction with Article 88(1) GDPR.
If an employment contract is concluded following the application process, we will store the data you submitted with your application in your personnel file for the purposes of normal organizational and administrative procedures, naturally in compliance with all applicable legal obligations.
The legal basis for this processing is likewise Section 26(1), sentence 1 BDSG in conjunction with Article 88(1) GDPR.
If your application is rejected, we will automatically delete the data you submitted two months after you are notified of the rejection. However, the data will not be deleted if statutory provisions require a longer retention period—for example, due to evidentiary obligations under the German General Equal Treatment Act (AGG)—for up to four months or until the conclusion of any legal proceedings.
In this case, the legal basis is Article 6(1)(f) GDPR together with Section 24(1), No. 2 BDSG. Our legitimate interest is the establishment, exercise, or defense of legal claims.
If you expressly consent to a longer storage period, for example for inclusion in an applicant or candidate database, your data will continue to be processed on the basis of your consent. The legal basis is Article 6(1)(a) GDPR.
You may, of course, withdraw your consent at any time with future effect in accordance with Article 7(3) GDPR by notifying us accordingly.
Server Data
For technical reasons, in particular to ensure the secure and stable operation of our website, data is transmitted by your internet browser to us or to our web hosting provider. These so-called server log files collect, among other things, the type and version of your internet browser, your operating system, the website from which you accessed our website (referrer URL), the pages of our website that you visit, the date and time of each access, and the IP address of the internet connection from which our website is accessed.
The data collected in this way is stored temporarily but is not combined with any other data relating to you.
This storage is based on Article 6(1)(f) GDPR. Our legitimate interest lies in improving the stability, functionality, security, and overall performance of our website.
The data is deleted no later than seven days after collection unless further retention is required for evidentiary purposes. In such cases, all or part of the data is excluded from deletion until the relevant incident has been conclusively resolved.