Privacy policy

Privacy Policy
Privacy Policy in accordance with the EU General Data Protection Regulation (GDPR)

In this privacy policy, we would like to inform you about how we process your personal data on our website, including the related subpages.

1. Controller

The entity responsible for data processing is:
Managing Director:
Dr. Michael Schnick

Kjellberg-Holding GmbH
Oscar-Kjellberg-Straße 20
03238 Finsterwalde
Germany

Phone: +49 (0) 3531 500-146
Fax: +49 (0) 3531 500-299
Email: holding@kjellberg.de
Website: www.kjellberg.de

Data Protection Officer

You can reach our Data Protection Officer at:
Datenschutz-Sheerans
Dominik Scheerans

Billy-Wilder-Promenade 40
14167 Berlin
Germany

Web: www.datenschutz-scheerans.de
Email: ds@datenschutz-scheerans.de
Phone: +49 (0) 30 805 88 500

Or through our Data Protection Coordinator:
Stefanie Bader

Phone: +49 (0) 3531 500-146
Email: datenschutz@kjellberg.de

2. Processing of Personal Data on Our Website

2.1 Provision of the Website

a) Description and Scope of Data Processing
OSCAR-PLT uses the external hosting provider IONOS (IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany) to provide a secure and fast online service. When you access our website, https://www.oscar-plt.de, information is automatically transmitted by the browser on your device to our website’s server. This information is temporarily stored in a log file.

The following information is collected without any action on your part:

b) Purpose and Legal Basis of Data Processing
We process the IP address and log files for the following purposes:

The legal basis for data processing is Article 6(1) sentence 1 lit. f GDPR (legitimate interests of us as the responsible website operator). The data will not be analyzed for marketing purposes.

c) Storage Duration
The aforementioned data will be deleted as soon as it is no longer necessary for the purposes for which it was collected. For data collected to ensure a smooth connection to the website, this is the case when the respective session ends.

The log files will be deleted after seven days. Longer storage is possible, but in this case, the IP address will be anonymized so that identification of the user is no longer possible.

2.2 Contacting Us

a) Description and Scope of Data Processing
If you have any questions, you can contact us by phone, email, or through a contact form. In this case, the following data will be processed:

What information you provide in further communication is entirely up to you.

b) Purpose and Legal Basis of Data Processing
The data is processed for the purpose of contacting you and responding to your inquiry in accordance with Article 6(1) sentence 1 lit. b GDPR, based on the initiation of a contract.

c) Storage Duration
The above-mentioned personal data will be deleted after your inquiry has been resolved. An inquiry is considered resolved if the circumstances indicate that the matter has been conclusively addressed.

2.3 Job Applications

a) Description and Scope of Data Processing
We offer you the opportunity to apply for job postings on our website (https://oscar-plt.de/jobs). During the application process, we collect the following personal data:

b) Purpose and Legal Basis of Data Processing
The data is processed for the purpose of conducting the application process and initiating an employment relationship in accordance with Article 6(1) lit. b, Article 88 GDPR in conjunction with Section 26(1) BDSG (German Federal Data Protection Act).

c) Storage Duration
In case of rejection, your application documents will be kept for up to six months after receiving the rejection, in order to defend against legal claims. After the retention period, your documents will be deleted from our applicant database. If you receive a job offer, your application documents will be stored in your personnel file.

d) Data Transmission
Within our company, only persons responsible for conducting and providing the application process will have access to your application documents.

3. Website analysis tool: E-Tracker

On our website, we use the analysis service of etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany, to evaluate usage data and optimise our online offering. This involves the use of cookies that enable an anonymous analysis of user behaviour and do not store any personal information. The data is processed exclusively in Germany and is subject to strict European data protection regulations. The IP address is anonymised at an early stage and the data is not merged with other sources or passed on to third parties. The legal basis for data processing is our legitimate interest pursuant to Art. 6 para. 1 lit. a GDPR.

Further information can be found at https://www.etracker.com/datenschutz/.

We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract prescribed by data protection law, which guarantees that the provider will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

4.4 Other tools

4.1 OpenStreetMap

a) Description and scope of data processing
We integrate the map of the ‘OpenStreetMap’ service of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. In order to make the map material available, technically necessary data is processed. For this purpose, the browser must establish a connection to the OpenStreetMap servers.

The following personal data is processed automatically:

b) Purpose and legal basis of data processing
We integrate the OpenStreetMap map service to customise the design of our website. The data processing is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR).

c) Further information on data processing
The OpenStreetMap Foundation is responsible for further data processing. Further information on data processing can be found at: https://wiki.osmfoundation.org/wiki/Privacy_Policy. You can contact the data protection officer of the OpenStreetMap Foundation by e-mail at: privacy@osmfoundation.org.

4.2 YouTube

a) Description and scope of data processing
We have integrated YouTube videos from the ‘YouTube’ service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland on our website. The videos are stored on https://www.YouTube.com and can be played directly from our website. The videos are all integrated in ‘extended data protection mode’, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the following information be transmitted. We have no influence on this data transfer.

By watching the embedded video, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under No. 2.1 of this privacy policy will be transmitted to YouTube. This occurs regardless of whether you have a YouTube user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before playing the video.

YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Google Ireland Limited is responsible for further data processing. Further information on data processing can be found at: https://policies.google.com/privacy?hl=de&gl=de

b) Purpose and legal basis of data processing
We integrate YouTube videos to customise the design of our website. The data processing is carried out on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR).

c) Data transfer to a third country
Although Google Ireland is specified as the controller, it cannot be ruled out that Google Ireland may also transfer the personal data collected to the USA and process it there.

4.3 Polyfill

a) Description and scope of data processing
We integrate the ‘Polyfill’ tool from The Financial Times Limited on our website. Polyfill is a JavaScript that allows us to display our website consistently on various browsers. When you load a website that uses Polyfill, your browser downloads all the necessary code snippets to display the website in your browser.

In order to provide the required code snippets, Polyfill receives the following information from your browser:

b) Purpose and legal basis of data processing
We integrate Polyfill to customise the design of our website. The data processing is carried out on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR).

c) Further information on data processing
The Financial Times Limited is responsible for further data processing. Further information on data processing can be found at: https://polyfill.io/v3/privacy-policy/#what-information-do-we-collect-from-the-service. You can contact the data protection officer by email at: privacy.officer@ft.com

4.4 Google Ads

On our website, we use Google Ads, an online advertising programme of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to place adverts in the Google search engine or on third-party websites when users enter certain search terms. In addition, targeted adverts can be displayed based on the user data stored with Google. As a website operator, we can evaluate the effectiveness of these ads by analysing which search terms led to the display of our ads and how many clicks were generated. The processing takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. You can withdraw your consent at any time.

If personal data is transferred from Google Ireland Limited to Google LLC in the USA, this is done on the basis of the standard contractual clauses of the EU Commission. Further information can be found at https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/

Google is certified according to the ‘EU-US Data Privacy Framework’ (DPF). This agreement between the EU and the USA guarantees compliance with European data protection standards when processing data in the USA. Further information on the DPF can be found at https://www.dataprivacyframework.gov/participant/5780.

4.5 Google reCAPTCHA

On our website, we use ‘Google reCAPTCHA’, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With reCAPTCHA, we check whether the input in forms is made by a natural person or an automated programme in order to protect our website from misuse and spam. For this purpose, reCAPTCHA analyses user behaviour based on various characteristics such as IP address, time spent on the site or mouse movements. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in protecting our online offers.

If personal data is transmitted by Google Ireland Limited to Google LLC in the USA, this is done on the basis of the standard contractual clauses of the EU Commission. Further information can be found at https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/

Google is certified according to the ‘EU-US Data Privacy Framework’ (DPF). This agreement between the EU and the USA guarantees compliance with European data protection standards when processing data in the USA. Further information on the DPF can be found at https://www.dataprivacyframework.gov/participant/5780.

4.6 Brevo

On our website, we use Brevo, a service provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, to send and analyse newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on the servers of Sendinblue GmbH in Germany. With the help of Brevo, we can analyse whether a newsletter has been opened, which links have been clicked on and whether certain subsequent actions (e.g. a purchase) have been carried out. Brevo also enables us to segment newsletter recipients based on various criteria such as age, gender or place of residence in order to customise content. Data processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you can revoke at any time. After cancellation of the newsletter, your data will be deleted from the distribution list or stored in a blacklist to prevent future mailings. Storage in the blacklist is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) and can be revoked by you if your interests prevail.

Further information can be found in Brevo’s privacy policy at https://www.brevo.com/de/datenschutz-uebersicht/ and https://www.brevo.com/de/legal/privacypolicy/

We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract prescribed by data protection law, which guarantees that the provider will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

5. Our social media channels

    a) Description and scope of data processing
    We are represented on various social networks in order to provide you with information about us, present our company and communicate with active users.

    We do not process any personal data via the social network image logos integrated on our homepage. Only active clicking on the image logos activates the direct forwarding to our online presence in the corresponding social network, which is linked in the background. Personal data is processed by the respective network during your visit. For your information, we have linked the respective data protection notices of the networks we use below.

    We would like to point out that the data of social network users is generally processed by these networks for market research and advertising purposes. User profiles can be created based on user behaviour. These can be used, for example, to place adverts outside the network.

    We would also like to point out that data may be processed outside the European Union when using social networks. This may result in risks for you, such as more difficult legal enforcement.

    A detailed description of the respective forms of processing and the opt-out options can be found in the data protection declarations and other information provided by the operators of the respective networks. The most effective way to request information and assert data subject rights is to contact the operators themselves.

    b) Types of data processed
    Contact data (e.g. e-mail, telephone numbers), inventory data (e.g. names, addresses, age), content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interest in content, access times) and communication data (e.g. device information, IP addresses) may be processed when you visit us on the social networks.

    If social networks provide us with statistical information about visitors to our company website, this is done in aggregated (summarised, anonymised) form; it is not possible for us to draw conclusions about individual users or access individual user profiles.

    c) Purpose and legal basis of data processing
    The presentation of our company on the following social media channels enables us to present ourselves more extensively to the outside world. We can also provide information about our work and contact you directly.

    The legal basis for the use of social media channels is our legitimate interest (Art. 6 para. 1 lit. f GDPR).

    d) Services used

    LinkedIn: Social network; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.linkedin.com/; Privacy Policy: https://www.linkedin.com/legal/privacy-policy?_l=de_DE; Privacy Shield (guarantee of compliance with the European level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active; Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

    Joint responsibility with LinkedIn
    We use statistical information (visits to our website, the scope of interactions, information about which countries and cities our visitors come from, and statistics about our visitors’ field of work) in connection with the use of our LinkedIn company page, which LinkedIn makes available in anonymised form via the LinkedIn “Ana-lytics” service. It is not possible for us to draw conclusions about individual users or to access individual user profiles.

    For this reason, we are considered a ‘joint controller’ with LinkedIn in accordance with Art. 26 GDPR and have therefore concluded a so-called joint controllership agreement. This joint controllership agreement can be found at: https://legal.linkedin.com/pages-joint-controller-addendum.

    Here you will find all the information that is relevant for you as a data subject, in particular with regard to exercising your rights as a data subject.
    Beyond the processing of personal data mentioned in this privacy policy, we have no influence on the processing of personal data in connection with your use of our LinkedIn company page.

    LinkedIn has assumed primary responsibility for the processing of personal data via the ‘Page Insights’ service offered by LinkedIn. This concerns the processing of ‘Page Insights’ data and the enforcement of data subjects’ rights. Please contact LinkedIn directly with regard to all obligations in connection with the processing of ‘Page Insights’ data. Although you may exercise your rights against us, we will forward your requests received by us to LinkedIn.

    YouTube: Video portal; provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Website: https://www.youtube.com/;
    Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de; Personalisation of settings for advertising: https://adssettings.google.com/anonymous?hl=de&sig=ACi0TCg3GYxM4vupgk5Az1hvkI6K0hsesa4e4aOpZsuZAQTgr3Lsseb6avR-dFsjt1h6cv-qeaHaXJNBnykcvG-ksj5A1ZXvtZdNggmhDn7ojdQDtceuArs&od=1;
    Personalisation of data protection settings: https://myaccount.google.com/intro/privacycheckup?utm_source=pp&hl=de

    6. Your rights

      You have the right

      With regard to the right to information and cancellation, the restrictions apply, among others, according to §§ 34, 35 BDSG and the GDPR.

      To exercise your rights, you should ideally contact our data protection officer.

      7. Right of cancellation

        We use tools on our website for which we require your consent before processing can take place. You can set this consent according to your preferences via our cookie banner, which appears at the bottom of the screen when you first visit our site. If no cookie banner appears, please delete your cookie settings via your browser settings and reload our website.