Privacy Policy

Integration of external web services and processing of data outside the EU

On our website we use active content from external providers, so-called web services. When you access our website, these external providers may receive personal information about your visit to our website. In this context it is possible that data may be processed outside the EU. You can prevent this by installing an appropriate browser plugin or deactivating the execution of scripts in your browser. This may result in functional restrictions on the web pages you visit.

We use the following external web services:

• cookiebot.com

  We use on our site the service cookiebot.com of the company Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. The transmission and processing of personal data takes place exclusively on servers in the European Union. The legal basis for the transmission and processing is Art. 6 para. 1 lit. c DSGVO. The use of the service supports us in meeting our legal obligations. By integrating Cookiebot, we fulfill our legal obligation with regard to the consent management required for cookies. You can find out what rights you have with regard to processing at the end of this privacy policy.

  For more information on the handling of transferred data, please refer to the provider's privacy policy at: https://www.cookiebot.com/en/privacy-policy/

• rexxSystems

  We use on our site the service rexxSystems of the company rexx systems GmbH, Süderstrasse 75-79, 20097 Hamburg, Germany. The transmission and processing of personal data takes place exclusively on servers in the European Union. The legal basis for the transmission of personal data is your consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO, which you have given on our website. The service is a plugin that we need to be able to show you all the content of our website. The service may also be used for tracking and/or advertising integration. You can revoke your consent at any time. You can find more information about revoking your consent either with the consent itself or at the end of this privacy policy. For more information on the handling of transmitted data, please refer to the provider's privacy policy at: https://www.rexx-systems.com/data-protection.php

• Microsoft Office 365

  We use the services of Microsoft Office 365 of the company Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA or the European branch Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The transfer and processing of personal data also takes place on servers outside the European Union. The legal basis for the transfer of personal data is your consent pursuant to Art. 6 (1) a DSGVO or Art. 9 (2) a DSGVO. You can revoke your consent at any time. You will find more information on revoking your consent either with the consent itself or at the end of this privacy policy. For more information on the handling of transferred data, please refer to the provider's privacy policy at: https://privacy.microsoft.com/de-de/privacystatement

Information on the use of cookies
 

• Extent of processing of personal data

  We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. The so-called 'cookies' are small text files that your browser can save on your access device. These text files contain a characteristic string that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also known as "setting a cookie". Cookies can be set both by the website itself and by external web services.

• Legal basis for the processing of personal data

  Art. 6 para. 1 lit. f GDPR (legitimate interest) or Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR (consent). Which legal basis is relevant is shown in the cookie table found further below. As a general rule, with cookies that are collected on the basis of a legitimate interest, our legitimate interest is to ensure the functionality of our website and the services integrated on it (technically necessary cookies). In addition, cookies may increase their user-friendliness and allow users to be addressed more individually. Here we have weighed up your interests and our interests. With the help of cookie technology, we can only identify, analyze and track individual website visitors if the website visitor has consented to the use of cookies in accordance with Art. 6 para. 1 lit. a GDPR.

• Purpose of data processing

  The cookies are set by our website or external web services in order to maintain the full functionality of our website, to improve the user-friendliness or to pursue the purpose stated with your consent. Cookie technology also enables us to recognize individual visitors by means of pseudonyms, e.g. an individual or random ID, so that we can offer more individual services. Details can be found in the table below.

• Duration of storage

  The cookies listed below are stored in your browser until they are deleted or, in the case of a session cookie, until the session has expired. Details can be found in the following table:

  Cookie name	Server	Provider	Purpose	Legal basis	Storage duration	Type
  tancookie_cookie-closed	www.fischer-group.com, fischer-group.com	Website operator	This cookie saves whether the cookie banner or the cookie notice was displayed correctly and how you decided to use cookies on our website.	Technically necessary	approx. 7 days	Cookie banner

• Right of objection, revocation of consent and erasure

  You can set your browser the way you want it to prevent any cookies from being set. You can then decide whether to accept cookies on a case-by-case basis or to always accept cookies. Cookies can be used for different purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to save recently viewed pages (session cookies). If you have given us express permission to process your personal data, you may withdraw this consent at any time. Please note that this does not affect the lawfulness of processing based on consent before its withdrawal.
   

Data security and data protection, communication by email and Microsoft Office 365

Your personal data are protected by technical and organizational measures during collection, storage and processing in such a way that they are not accessible to third parties. In the case of unencrypted communication by email, we cannot guarantee complete data security on the transmission path to our IT systems, so that we recommend encrypted communication or the postal service for information with a high level of confidentiality.
 

Automatic email archiving
 

• Extent of processing of personal data

  We expressly point out that our email system has an automated archiving process. All incoming and outgoing emails are digitally archived in a tamper-proof manner.

• Legal basis for the processing of personal data

  Art. 6(1)(c) GDPR (legal obligation). The legal obligation is to comply with tax and commercial law requirements (e.g. sections 146, 147 of the German Tax Code AO, sections 238, 257 of the German Commercial Code HGB).

• Purpose of data processing

  The purpose of archiving is to comply with tax law (e.g. sections 146, 147 AO – obligation to store emails of tax law relevance) and commercial law requirements (e.g. sections 238, 257 HGB – obligation to archive business correspondence).

• Duration of storage

  Our email communication is stored until tax and commercial retention obligations expire. The retention period can be up to 10 years.

• Right to object and right to erasure

  You can object to the processing of the data at any time pursuant to Art. 21 GDPR and request erasure of data pursuant to Art. 17 GDPR. You can find out what rights you have and how you can exercise them in the bottom section of this privacy policy.

• Handling of application documents

  If you have any questions regarding our email archiving system, please contact our data protection officer. In addition, we point out that we only consider application documents in PDF file form. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and not delivered. We do not consider applications in Word file format and other file formats and delete them unread. Please note that application documents sent by email in unencrypted form may be opened by third parties before they arrive in our IT systems. We assume that we can also answer unencrypted application emails unencrypted. If you do not want this, please mention it in your application email.
   

Right to information and requests for rectification – Erasure & restriction of data – Withdrawal of consent – Right to object
 

Right to information

You have the right to request confirmation as to whether we process your personal data. If this is the case, you have a right to information about the information specified in Art. 15(1) GDPR, as long as the rights and freedoms of other people are not impaired (see Art. 15(4) GDPR). We would also be happy to provide you with a copy of the data.
 

Right to rectification

Pursuant to Art. 16 GDPR you have the right to have any personal data incorrectly stored by us (such as address, name, etc.) corrected at any time. You can also request the data stored by us to be completed at any time. A corresponding adjustment will take place immediately.
 

Right to erasure

Pursuant to Art. 17(1) GDPR you have the right to have the personal data collected by us about you erased if either

• the data is no longer needed;
• due to the withdrawal of your consent, the legal basis for processing has ceased to apply;
• you have objected to the processing of your data and there are no other legitimate grounds for the processing;
• your data have been unlawfully processed;
• a legal obligation requires this or collection pursuant to Art. 8(1) GDPR has taken place.
   

Pursuant to Art. 17(3) GDPR the right does not apply if

• processing is necessary for exercising the right of freedom of expression and information;
• your data has been collected for compliance with a legal obligation;
• processing is necessary for reasons of public interest;
• the data are required for the establishment, exercise or defense of legal claims.

Right to restriction of processing

Pursuant to Art. 18(1) GDPR you have the right in individual cases to request that the processing of your personal data be restricted.

This is the case if

• the accuracy of the personal data is contested by you;
• the processing is unlawful and you oppose the erasure of the personal data;
• the controller no longer needs the personal data for the purposes of the processing, but the data collected are required for the establishment, exercise or defense of legal claims;
• an objection to processing pursuant to Art. 21(1) GDPR has been filed and it is still unclear whether the legitimate grounds of the controller override yours.

Right to withdraw consent

If you have given us express consent to the processing of your personal data (Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR), you can withdraw this at any time. Please note that this does not affect the lawfulness of processing based on consent before its withdrawal.
 

Right to object

Pursuant to Art. 21 GDPR you have the right to object at any time to the processing of personal data concerning you which has been collected on the basis of Art. 6(1)(f) (in the context of a legitimate interest). You only have this right if there are special circumstances which preclude the storage and processing.
 

How do I exercise my rights?

You can exercise your rights at any time by using the contact details below:

F. E. R. fischer Edelstahlrohre GmbH
Im Gewerbegebiet 7
77855 Achern-Fautenbach
Germany
Email: sales@fischer-group.com
Phone: +49 7841 6803-0
Fax: +49 7841 22530

Right to data portability

Pursuant to Art. 20 GDPR you have the right to transmission of your personal data. We provide the data in a structured, commonly used and machine-readable format. The data can either be sent to you yourself or to a controller designated by you.

Pursuant to Art. 20(1) GDPR we will provide you with the following data:

• data collected based on express consent, pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR;
• data we have received from you under existing contracts, pursuant to Art. 6(1)(b) GDPR;
• data processed in an automated process.
   

Where technically feasible we will transmit the personal data directly to a controller of your choice. Please note that pursuant to Art. 20(4) GDPR we may not transmit data that adversely affects the rights and freedoms of others.
 

Right to lodge a complaint with a supervisory authority pursuant to Art. 77(1) GDPR

If you suspect that your data is being unlawfully processed by us, you can of course seek clarification of the problem before the courts at any time. In addition, all other legal avenues are open to you. Regardless of this, pursuant to Art. 77(1) GDPR you have the option of contacting a supervisory authority. Pursuant to Art. 77 GDPR you have the right to lodge a complaint in the EU Member State of your habitual residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority you are contacting from the above locations. The supervisory authority with which the complaint has been lodged will then inform you on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

Created by:
© IT-Recht IT law firm DURY – www.dury.de
© Website-Check GmbH – www.website-check.de