Data Protection Declaration
1. Data protection at a glance
The following information provides a general overview of what happens to your personal data when you visit this website. Personal data is all data through which you can be personally identified. You can find detailed information about data protection in our Data Protection Declaration at the bottom of this text.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is done by the website operator. You can find their contact data in the imprint of this website.
How do we collect your data?
Firstly, your data is collected through you sharing it with us. This can, for instance, be data that you enter into a contact form.
Other data is automatically collected by our IT-systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time at which the page was visited). The collection of this data occurs automatically as soon as you enter the website.
What do we use your data for?
A part of the data is collected in order to guarantee error-free provision of the website. Other data can be used to analyze your user behavior.
What rights do you have with regard to your data?
You have the right to receive free information about the origin, recipient and purpose of your stored personal data. You also have the right to demand correction or deleting of this data. You can contact the address listed in the imprint at any time regarding further questions on the topic of data protection. Furthermore, you have the right of appeal at the applicable regulatory authority.
In addition, under certain circumstances you also have the right to a processing limitation of your personal data. Details about this can be found in the Data Protection Declaration under “Right to limit processing”.
Analysis tools and third party provider tools
When visiting our website your surfing behavior is statistically evaluated. This occurs primarily with Cookies and analysis programs. As a rule, the analysis of your surfing behavior is anonymous; the surfing behavior cannot be traced back to you.
You can object to this analysis or prevent it by not using certain tools. Detailed information about these tools and your objection options can be found in the Data Protection Declaration below.
2. Hosting and Content Delivery Networks (CDN)
This website is hosted by an external service provider (host). The personal data that is collected on this website is saved on the host’s servers. This data is primarily IP-addresses, contact inquiries, meta and communication data, contract data, contact data, name, website access and other data that is generated via a website.
The implementation of the host is done for the purpose of satisfying the contract towards our potential and existing customers (Art. 6 Para. 1 lit. b DSGVO) and in the interest of a more secure, faster and more efficient provision of our online presentation by a professional provider (Art. 6 Para. 1 lit. f DSGVO).
Our host and their data must be processed insofar as is necessary for the satisfaction of their service obligations, following our instructions with regard to this data.
Concluding an order processing contract
In order to guarantee processing that conforms with data protection, we have concluded an order processing contract with our host.
3. General information and required information
The operator of this website takes the protection of your personal data very seriously. We treat your personal data in a confidential manner and comply with statutory data protection regulations as well as this Data Protection Declaration.
When you use this website, various personal data is collected. Personal data is data through which you can be personally identified. The Data Protection Declaration at hand explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transfer online (e.g. when communicating per e-mail) can exhibit security gaps. Absolute protection of data from third party access is not possible.
Information about the responsible authority
The responsible authority for data processing on this website is:
Paul Serafini GmbH & Co. KG
Telephone: +49 (0)2371 – 7710
The responsible authority is the natural or judicial person who, alone or together with others, makes decisions about the purpose and method of processing personal data (e.g. name, e-mail addresses and the like).
Legally required Data Protection Supervisor
We have appointed a Data Protection Supervisor for our company.
Paul Serafini GmbH & Co. KG
Telephone: +49 (0)2371 – 771 110
Withdrawing your data processing consent
Many data processing procedures are only possible with your explicit consent. You can withdraw consent that you have given at any time. An informal message to us via e-mail is sufficient. The legality of data processing that took place before withdrawal remains unaffected.
Right of objection against data collection in special cases as well as against direct advertising (Art. 21 DSGVO)
IF DATA PROCESSING IS DONE BASED ON ART. 6 PARA. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT AT ALL TIMES TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS THAT RESULT FROM YOUR SPECIFIC SITUATION; THIS ALSO APPLIES TO PROFILING SUPPORTED BY THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING RESTS CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU MAKE AN OBJECTION, YOUR AFFECTED PERSONAL DATA WILL NO LONGER BE PROCESSED, UNLESS WE CAN PROVIDE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES TO ENFORCE, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 DSGVO).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA AT ANY TIME; THIS ALSO APPLIES FOR PROFILING INSOFAR AS IT IS DIRECTLY AFFILIATED WITH DIRECT ADVERTISING. IF YOU MAKE AN OBJECTION YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION ACCORDING TO ART. 21 PARA. 2 DSGVO).
Right of appeal at the competent regulatory authority
In the event of violations against the DSGVO, the affected person has the right to appeal at a regulatory authority, especially in the member state of their usual place of residence, their workplace or the location of the presumed infringement. The right to complain exists irrespective of other administration legislation or court decisions.
Right to data transferability
You have the right to have data that we have automatically processed based on your consent or by fulfilling the contract to be presented to you or a third party in a standard, machine-readable format. If you request direct transfer of data to another responsible person, this is only done if it is technically possible.
SSL- and/or TLS-encryption
This site uses SSL and/or TLS-encryption for security reasons and to protect against the transfer of confidential content, such as orders or inquiries that you send to us as a user of the site. You can recognize an encrypted connection when the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
When SSL- and/or TLS-encryption is activated. the data that you have shared with us cannot be read by third parties.
Disclosure, deleting and correction
As part of applicable statutory provisions, you have the right of disclosure of your saved personal data, its origin and recipient and the purpose of data processing and, if applicable, the right to correction or deletion of this data, free of charge. You can contact the address listed in the imprint at any time regarding further questions on the topic of personal data.
Right to processing limitation
In addition, you also have the right to a processing limitation of your personal data. You can contact the address listed in the imprint at any time regarding further questions. The right to limitation of processing exists in the following cases:
- If you dispute the correctness of the personal data we have saved, we generally need time to check it. For the duration of the assessment you also have the right to demand processing limitation of your personal data.
- If the processing of your personal data took place unlawfully, instead of deleting you can demand limitation of data processing.
- If we no longer need your personal data, however you require it to practice, defend or enforce legal claims, you have the right to demand limitation of the processing of personal data instead of deletion.
- If you have made an objection in accordance with Art. 21 Para. 1 DSGVO consideration between your interests and ours should be made. As long as it has not been determined whose interests prevail, you have the right to demand processing limitation of your personal data.
If you have limited the processing of your personal data, this data – apart from the storage thereof – can only be processed with your consent or to enforce, exercise or defend legal claims or to protect the rights of another natural or judicial person or for reasons of major public interest of the European Union or a member state.
Objection to promotional e-mails
The usage of published contact data for sending of advertising that has not expressly been requested and information material are hereby rejected as part of imprint obligations. The operator of this website reserves the right to taking express legal steps in the event of unrequested sending of advertising information, such as spam e-mails.
4. Data collection on this website
In part, Cookies from third party companies can be saved on your terminal device when you enter our site (third party Cookies). This enables the usage of certain third party services (e.g Cookies to process payment services) for us or you.
Cookies have different functions. Many Cookies are required technically, since certain website functions would not function without them (e.g. the shopping cart function or video display). Other Cookies assess user behavior or display advertising.
Cookies that are required to perform electronic communication procedures or to provide certain functions desired by you (e.g. shopping cart function), are saved on the basis of Art. 6 Para. 1 lit. f DSGVO. The website operator has an entitled interest in saving Cookies for the technically error-free and optimized provision of their services. Insofar as corresponding consent is requested (e.g. the consent to save Cookies) the processing is done exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO; the consent can be revoked at any time.
You can set you browser in such a way that you are informed when Cookies are being placed, and to only allow Cookies in individual cases, exclude acceptance of Cookies in certain cases, or exclude it as a rule or automatically delete Cookies when closing the browser. Deactivating Cookies can limit the functionality of this website.
Insofar as Cookies from third party companies or such for analysis purposes are utilized, we will inform you of this separately in this Data Protection Declaration and request consent if applicable.
Cookie consent with Consent Manager Provider
Our website uses Cookie Consent Technology from Consent Manager Provider, to get your consent to save certain Cookies on your terminal device and to document it in a way that conforms with data protection. The provider of this technology is Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: https://www.consentmanager.de (hereinafter “Consent Manager Provider”).
When you enter our website, a connection to the Consent Manager Provider servers is created in order to get your consent and other explanations of Cookie usage. Subsequently, the Consent Manager Provider saves a Cookie in your browser in order to place the given consent and/or withdrawal thereof. The data collected in this way is saved until you request it be deleted, deleting the Consent Manager Provider Cookie yourself or if the purpose for data storage lapses. Mandatory statutory storage obligations remain unaffected.
The usage of the Consent Manager Provider is done in order to get legally prescribed consent for the usage of Cookies. The legal basis for this is Art. 6 Para. 1 pg. 1 lit. c DSGVO.
Server log files
The provider of this website automatically collects and saves information in server log files that your browser automatically sends to us. These are:
- Browser and browser version
- Operating system in use
- Referrer URL
- Host-name of accessing computer
- Time of server inquiry
This data is not combined with other data sources.
The collection of this data is done on the basis of Art. 6 Para. 1 lit. f DSGVO. The website operator has a legitimate interest in technically error-free presentation and optimization of their website – the server log files must be recorded for this purpose.
When you send inquiries to us via the contact form, your information from the inquiry form will be saved by us for the purpose of processing your inquiry and in the case of subsequent questions. We do not pass this information on without your consent.
The processing of this data is done on the basis of Art. 6 Para. 1 lit. b DSGVO, insofar as your inquiry is tied to the satisfaction of a contract or required for the performance of pre-contractual measures. In all other cases, processing is based on our legitimate interest in effective processing of the inquiries sent to us (Art. 6 Para. 1 lit. f DSGVO) or your consent (Art. 6 Para. 1 lit. a DSGVO) insofar as this was queried.
The data entered by you in the contact form stays with us until you request it is deleted, withdraw your consent to its saving, or the purpose for data processing lapses (e.g. after processing of the inquiry has been completed). Mandatory legal provisions – especially retention periods – remain unaffected.
Inquiry by e-mail, telephone or fax
When you contact us by e-mail, telephone or fax, your inquiry, including all resulting personal data (name, inquiry), for the purpose of processing your matter is saved and processed. We do not pass this information on without our consent.
The processing of this data is done on the basis of Art. 6 Para. 1 lit. b DSGVO, insofar as your inquiry is tied to the satisfaction of a contract or required for the performance of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 Para. 1 lit. a DSGVO) and/or on our legitimate interests (Art. 6 Para. 1 lit. f DSGVO), as we have a legitimate interest in the effective processing of the inquiry sent to us.
The data sent by you to us in the contact inquiries stays with us until you request it is deleted, withdraw your consent to its saving, or the purpose for data processing lapses (e.g. after your matter has been completely processed). Mandatory legal provisions – especially legal retention periods – remain unaffected.
5. Analysis tools and advertising
This website uses Google Analytics web analysis service functions. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The saving of Google Analytics Cookies and the usage of this analysis tool is done on the basis of Art. 6 Para. 1 lit. f DSGVO. The website operator has a legitimate interest in the analysis of its user behavior in order to optimize online offers and its advertising. Insofar as corresponding consent is inquired (e.g. the consent to save Cookies) the processing is done exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO; the consent can be revoked at any time.
We have activated the IP-anonymisation function on this website. Google hereby shortens your IP-address within member states of the European Union and in other contract states in the convention of the European economic region or transference in the USA. The full IP-address is only transfered to Google services in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information in order to evaluate your usage of the website, compile reports about website activities and render other services for the website operator in connection with website usage and internet usage. The IP-address conveyed by your browser within Google Analytics will not be combined with other data from Google.
You can prevent Cookies from being saved with the corresponding setting in your browser software; however we would like to point out that in this case you may not be able to use all functions of this website to their fullest extent. Furthermore, you can prevent the collection of data generated by the Cookie and data related to your usage of the website (incl. your IP-address) by Google as well as the processing of this data by Google, by downloading and installing the browser plugin available in the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent the collection of you data by Google Analytics by clicking on the following link. An Opt-Out Cookie will be placed that prevents the collection of your data during future visits to this website: Deactivate Google Analytics.
You can find more information about how Google Analytics handles your user data in Google's Data Protection Declaration: https://support.google.com/analytics/answer/6004245?hl=de.
We have concluded an order processing contract with Google and fully implement the strict procedures of the German data protection authorities when using Google Analytics.
Demographical features of Google Analytics
This website uses Google Analytics’s “Demographical features”. This allows reports to be compiled that contain statements pertaining to age, gender and interests of the visitor to the site. This data stems from interest-related advertising from Google as well as visitor data from third party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time with the display settings in your Google account or generally prohibit the collection of your data by Google Analytics as presented in the point “Opposition to data collection”.
Duration of storage
Data saved by Google on the user and event level that is linked with Cookies, user identification (e.g. User ID) or advertising IDs (e.g. double-click Cookies, Android advertising ID) are anonymised and/or deleted after 14 months. For more information follow the link below: https://support.google.com/analytics/answer/7667196?hl=de
6. Plugins and tools
This website integrates videos from the YouTube website. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our website where YouTube is integrated, a connection is established to the YouTube servers. This communicates to the YouTube server, which of our pages you visited.
Furthermore, YouTube can save various Cookies on your terminal device. With the help of these Cookies YouTube can obtain information about visitors to this website. Among other things, this information is used to collect video statistics, improve usability and prevent fraud attempts. The Cookies remain on your terminal device until you delete them.
When you are logged into your YouTube account you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
The usage of YouTube is done in the interest of an attractive presentation of our online offers. This represents a legitimate interest as per Art. 6 Para. 1 lit. f DSGVO. Insofar as corresponding consent is inquired (e.g. the consent to save Cookies) the processing is done exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO; the consent can be revoked at any time.
You can find more information about how user data is handled in YouTube’s Data Protection Declaration at: https://policies.google.com/privacy?hl=de.
Google Web Fonts
This page uses web fonts for standardized depiction that are provided by Google. Google fonts are locally installed. A connection to Google servers does not take place hereby.
Find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s Data Protection Declaration: https://policies.google.com/privacy?hl=de.
7. In-house services
Handling application data
We offer you the option of applying to us (e.g. via e-mail, via post or online application form). Below we inform you of the scope, purpose and usage of your collected personal data as part of the application process. We ensure that the collection, processing and usage of our data is done in compliance with applicable data protection rights and all other legal provisions and that your data is treated in a strictly confidential manner.
Scope and purpose of data collection
When you send us an application we process the associated personal data (e.g. contact and communication data, application documents, notes as part of application interviews etc.) insofar as is necessary to make a decision about justifying an employment relationship. The legal basis for this is § 26 BDSG-new in accordance with German law (initiation of an employment relationship) Art. 6 Para. 1 lit. b DSGVO (general contract initiation) and – insofar as you have provided consent – Art. 6 Para. 1 lit. a DSGVO. Consent can be withdrawn at any time. Your personal data can only be transfered to persons within our company that are involved in processing your application.
Insofar as the application is successful, the data you have submitted will be saved on the basis of § 26 BDSG-new and Art. 6 Para. 1 lit. b DSGVO for the purpose of implementing the employment relationship in our data processing systems.
Storage duration of your data
Insofar as we cannot make a job offer, you decline a job offer or withdraw your application, we reserve the right to store the data provided by you on the basis of our legitimate interests (Art. 6 Para. 1 lit. f DSGVO) up to 6 months after the end of the application procedure (decline or withdrawal of the application). Afterwards the data shall be deleted and the physical application documents destroyed. In particular, storage serves purposes of verification in the event of a legal dispute. Insofar as it becomes evident that the data is required after expiry of the 6-month deadline, (e.g. due to an impending or dependent legal dispute), it will only be deleted once the purpose for continued storage lapses.
Longer storage can also take place if you have provided corresponding consent (Art. 6 Para. 1 lit. a DSGVO) or if legal storage obligations prevent it.