Privacy Policy

Notice of data processing for this website in accordance with Art. 13 EU General Data Protection Regulation (GDPR) when collecting personal data from the data subject.

Data protection notice (version: GDPR 2.0 dated 07.03.2022).

EDELRID GmbH & Co. KG is the responsible controller for this website and, as the provider of a tele-service, must inform you at the beginning of your visit about the nature, scope and purposes of the collection and use of personal data in a precise, transparent, comprehensible, and easily accessible form in clear and simple language. This content must be available to you at all times. 

We attach great importance to the security of your data and compliance with data protection regula-tions. The processing of personal data is subject to the provisions of the currently applicable European and national laws.

In the following data protection notice, we would like to show you how we handle your personal data and how you can contact us:

EDELRID GmbH & Co. KG
Achener Weg 66
88316 Isny
Germany

Commercial register no.: HRA 620421
Managing Director: Albrecht von Dewitz, Vitus Wuhrer
Phone: +49 (0) 7562 981 0
Email: mail(at)edelrid.de 

Our data protection officer

Pascal Grommisch
EDELRID GmbH & Co. KG
Achener Weg 66
88316 Isny
Germany

If you have any questions about data protection or other data protection-related concerns, please feel free to send an email to the following email address: datenschutz(at)edelrid.de

A. General

For better comprehensibility, we make no gender-specific differentiation. The terms used apply, in the context of equal treatment, to all genders. The meaning of the terminology used, for example ‘per-sonal data’ or its ‘processing’ can be found in Article 4 GDPR

Personal data processed within the scope of this website include the following

• Inventory data (e.g., name and addresses of customers), 
• Contract data (e.g., services used, payment information), 
• Usage data (e.g., pages visited on our website) and 
• Content data (e.g., entries in online forms).  

B. Specific

Data protection notice

We guarantee that we only use your data in connection with processing your inquiries and for internal purposes, as well as for providing the services you have requested or to make content available. 

Legal basis for the data processing

We only process your personal data in compliance with the relevant privacy policy. The legal grounds are:

• Performance of our contractual obligations
• Processing is legally prescribed
• You have provided consent electronically (e.g., by subscribing to the newsletter)
• Enforcing our legitimate interests

We would be happy to show you where the above-named legal bases are regulated:

• Processing for the fulfillment of our services and implementation of contractual measures: Art. 6 para. 1 lit. b) GDPR
• Processing for the fulfillment of our legal obligations: Art. 6 para. 1 lit. c) GDPR
• Consent: Art. 6 para. 1 lit. a) and Art. 7 GDPR
• Processing for the protection of our legitimate interests: Art. 6 para. 1 lit. f) GDPR

Transfer of personal data to third parties

We advise you that a transfer of data to third parties takes place.

Your data is only passed on to third parties in accordance with the framework of the legal provisions. We only pass on your data when this is, for example, necessary for contractual purposes or on the basis of legitimate interests in the economic and the effective operation of our business.

If we use subcontractors to provide our services, we take appropriate legal safeguards, as well as appropriate technical and organizational measures, to ensure the protection of personal data in accordance with the relevant legal provisions.

Transfers of personal data to a third country or an international organization

‘Third countries’ mean countries in which the GDPR is not a directly applicable law. Basically, this in-cludes all countries outside the EU, respectively, the European Economic Area.

A transfer of personal data to a third country or an international organization occurs 

Contacting us

If you contact us over the website, you consent to electronic communication. Personal data will be processed in the context of using electronic communication to contact us. The information that you provide will be stored exclusively for the purposes of processing your inquiry and for possible follow-up questions. 

We would like to advise you of the legal grounds:

Processing to deliver our services and carry out contractual measures: Art. 6 Para. 1 lit. b) GDPR

We advise you that emails can be read or changed, unnoticed and without authorization, during transmission. Furthermore, we would also like to bring to your attention that we use software to filter unwanted emails (spam filter). Emails can be rejected by the spam filter if they are wrongly identified as spam due to the presence of certain characteristics. 
 

What are your rights?

a) Right of access

You have the right to obtain information about your stored data free of charge. Upon request, we will tell you in writing, what personal data about you we have stored. This also includes the origin and recipient of your data, as well as the purpose of the data processing

b) Right to rectification

If your data that we have stored is incorrect, you have the right to have it rectified. You can demand the restriction of the processing of your personal data if, for example, the accuracy of your personal data is contested.

c) Right to block data 

Furthermore, you can have your data blocked. So that a blocking of your data can be taken into con-sideration at all times, the data must be held in a lock file for control purposes.

d) Right to data portability

You are entitled to demand that the personal data transferred to us is made available in a format which enables it to be transmitted to another location. 

e) Right to complain to a supervisory authority

You have the option of approaching one of the data protection supervisory authorities with a com-plaint.

The supervisory authority responsible for is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

Postal address: Postfach 10 29 32, 70025 Stuttgart, Germany
Street address: Königstraße 10a, 70173 Stuttgart, Germany
Telephone: +49 711 615541-0
Fax: +49 711 615541-15
Email: [email protected]
Web: https://www.baden-wuerttemberg.datenschutz.de

The complaint form can be accessed under the following link: https://www.baden-wuerttemberg.datenschutz.de/beschwerde/
Note: It is also possible to make a complaint to any data protection supervisory authority within the EU.

f) Right to object

You always have the option to object to the processing of your data in accordance with Art. 6 Para. 1 letters e) and f) at any time, for reasons arising from your particular situation; this also applies to profiling based on these provisions.

EDELRID GmbH & Co. KG. will then stop processing your personal data unless it can be shown that there are compelling legitimate grounds for processing which outweigh your interests, rights and free-doms, or the processing is for the purpose of establishing, exercising, or defending legal claims. 

If personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data relating to you for the purposes of this type of advertising; this also applies to profiling to the extent that it is related to such direct marketing. In the event of such an objection, we will no longer process your personal data for the purpose of direct marketing. It is suffi-cient to send us an appropriate email.

h) Right to withdraw consent

You have the option to withdraw your consent to the processing of your data at any time, with future effect, without giving any reason. You will not be disadvantaged in any way by withdrawing your con-sent. It is sufficient to send us an appropriate email. 

However, such an objection does not affect the legality of processing procedures which have already been carried out on the legal basis of Art. 6 Para. 1 letter. a) GDPR. 

To exercise your rights as a data subject, send an email to us at the following address: datenschutz(at)edelrid.de 
 

Protection of your personal data 

We take state of the art contractual, technical and organizational security precautions to ensure com-pliance with the provisions of the data protection laws and thus protect the processed data against accidental or deliberate manipulation, loss, destruction or against access by unauthorized persons.

In particular, our security measures include the encrypted transfer of data between your browser and our server. 256-bit-SSL (AES 256) encryption technology is used for this.

Therefore, your personal data is protected in the following points (extract):

a) Ensuring the confidentiality of your personal data 

To ensure the confidentiality of the personal data which we store, we have taken various measures to control access, entry and admission. 

b) Ensuring the integrity of your personal data

To ensure the integrity of the personal data which we store, we have taken various measures to con-trol transmission and input.

c) Ensure availability of your personal data

To ensure the availability of the personal data which we store, we have taken various measures to control orders and availability.

The security measures employed are continually being improved in accordance with technical devel-opment. Despite these precautions, we are unable to guarantee the security of your data transfers to our website because of the insecure nature of the internet. For this reason, any data transfer you make is at your own risk. 

Protection of minors

Persons who are under 16 can only provide us with their personal information with the express con-sent of the persons having parental responsibility. These data will be processed in accordance with our privacy notice.

Server Log Files

The website provider automatically collects and stores information in so-called server log files which are automatically transmitted to us by your browser. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request

These data are not combined with other data sources.

The legal basis for this data processing is Art. 6 para, 1 lit. f). GDPR, our legitimate interest.

Online applications

We offer applicants the opportunity to apply online on our website. To be accepted in the application process, applicants must provide us with all the personal data required for a well-founded and in-formed assessment and selection, via the form.

The information required includes general personal information (name, address, telephone or elec-tronic contact details) and performance-specific evidence of the qualifications required for a position. It is possible that health-related information may also be required, if it must be given special consid-eration under labor and social law in the interest of the applicant's social protection. 

We use the Onlyfy service, which belongs to New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, for application management. Jobbase.io is the central platform for our applicant management. When you use our online form, your personal data is recorded directly in jobbase.io. In the case of a postal or email application, your data may also be transferred to the e-recruiting system.

In the context of these tasks, Onlyfy processes personal data only on behalf of and for the pur-poses of EDELRID GmbH & Co. KG and is therefore a so-called processing-to-order processor within the meaning of Art. 4 No. 8 GDPR. We have concluded an order processing contract with New Work SE, which obliges New Work SE to protect our customers’ data and not to pass them on to third par-ties.

More information about data processing according to Art. 13 GDPR can be found on the application platform.

When you submit the form, your data is transmitted to us in encrypted form in accordance with the state of the art and processed exclusively for the purpose of processing your application.

The legal basis for the processing is Art. 6 Para. 1 lit. b) GDPR in conjunction with Section 26 Para. 1 FDPA, in the sense of which going through the application process is considered to be the initiation of an employment contract. Insofar as applicants are requested to provide special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g., health data such as information about severely dis-abled status) as part of the application process, the processing is carried out in accordance with Art. 9 (2) (b) GDPR so that we can exercise the rights and fulfill our obligations arising from labor law and social security and social protection law.

Building on this or alternatively, the processing of the special categories of data may also be based on Art. 9 (1) (h) GDPR if it is carried out for the purposes of preventative health care or occupational medicine, for assessing the applicant's ability to work, for medical diagnostics, care or treatment in the health or social sector or for the management of systems and services in the health or social sec-tor. 

If, in the course of the evaluation described above, the applicant is not selected, or if an applicant withdraws their application prematurely, the data they provided will be deleted after four months at the latest, following appropriate notification. This period is based on our legitimate interest in being able to answer any follow-up questions about the application and, if necessary, to meet our obliga-tions to provide evidence under the regulations on equal treatment of applicants. 

You may also consent to us retaining your application documents in an applicant pool for longer than the defined retention period of four months after completion of the application process, against the possibility that you may be considered for another position in our company. 

In the event of a successful application, the data provided will be further processed for the purposes of conducting the employment relationship on the basis of Art. 6 Para. 1 lit. b) GDPR in conjunction with Section 26 Para. 1 FDPA.

Cookies 

Cookies are small text files which are stored locally in your internet browser’s cache. Cookies enable, for example, internet browser recognition. The files are used to help the browser navigate through the website and use all the functions to their full extent.

Cookiefirst

This website uses the ”CookieFirst“cookie consent tool to obtain user consent for cookies requiring consent and for cookie-based applications. ”CookieFirst“ belongs to Digital Data Solutions B.V. Plantage Middenlaan 42a, 1018DH, Amsterdam, The Netherlands (”CookieFirst“).

The tool sets technically necessary cookies in order to store your cookie preferences. This data pro-cessing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate inter-est in providing a cookie consent management service for website visitors.