I. Name and address of the person responsible
The responsible body for data processing is:
IVA Schmetz GmbH
Holzener Str. 39
Phone: +49 2373 686-0
The responsible authority is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
II. Contact details of the data protection officer
A statutory data protection officer has been appointed for our company and can be contacted at the address given in the imprint of the responsible persons with the addition DATA PROTECTION by postal mail or by e-mail at the following address: email@example.com
III. data protection at a glance/ general information
1. To what extent do we process your personal data?
We collect and use your personal data only to the extent necessary to provide a functional website and our content and services. The collection and use of your personal data is regularly only carried out with your consent. An exception applies in those cases in which the processing of the data is permitted by statutory regulations or in which it is based on a contractual relationship.
2. What is the legal basis for the processing of my personal data?
Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a DSGVO serves as the legal basis for the processing of this data. Art. 6 para. 1 lit. b DSGVO serves as the legal basis for the processing of personal data required for the fulfilment of a contract to which you are a party. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis. In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO serves as the legal basis. If the processing is necessary to safeguard a legitimate interest on our part or that of a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the first interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing.
3. Data deletion and storage period
Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, your personal data may be stored if the European or national legislator has provided for this in EU ordinances, laws or other regulations to which we are subject. If you enter into a contractual relationship with us or a contract initiation becomes apparent, the storage period is based on the statutory storage periods.
IV. Your rights
1. What rights can you assert?
You have the right to information under Article 15 DSGVO, the right to rectification under Article 16 DSGVO, the right to cancellation under Article 17 DSGVO, the right to limitation of processing under Article 18 DSGVO, the right to opposition under Article 21 DSGVO and the right to data transfer under Article 20 DSGVO. The restrictions under §§ 34 and 35 BDSG apply to the right to information and the right to cancellation. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 DSGVO in conjunction with § 19 BDSG).
You can revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the DSGVO came into force, i.e. before 25 May 2018. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.
Please feel free to contact our data protection officer in this regard.
2. Do I have to provide my personal data?
As part of our business relationship, you must provide us with the personal data that is necessary for establishing and conducting a business relationship and fulfilling the associated contractual obligations or which we are legally obliged to collect. Without this data we will normally have to refuse the conclusion of the contract or the execution of the order or will no longer be able to execute an existing contract and may have to terminate it.
3. Is there an automated decision-making process?
No. We do not currently use fully automated decision making in accordance with Art. 22 DSGVO to establish and conduct business relationships. Profiling" does not take place.
4. Information on your right of objection pursuant to Article 21 DSGVO
Right of objection in individual cases
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data pursuant to Article 6(1)(f) DSGVO (processing of data on the basis of a balancing of interests).
If you file an objection, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Right to object to the processing of data for direct marketing purposes
In individual cases we process your personal data in order to operate direct advertising if we have your permission to do so. You have the right at any time to object to the processing of your personal data for the purpose of such advertising. If you object to the processing for purposes of direct marketing, we will no longer process your personal data for these purposes.
Recipient of the objection
The objection can be made without form with the subject "Objection" under indication of your name, your address and your date of birth and should be addressed to: firstname.lastname@example.org
5. Further information
If you would like information that this data protection declaration cannot give you, or if you would like further information on a specific point, please contact our data protection officer. He will be happy to help you.
V. "By the way"
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Objection to advertising mails
We hereby object to the use of contact data published within the scope of the imprint obligation to send unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action against unsolicited mailing or e-mailing of spam and other similar advertising materials.
Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognize your browser during your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Cookies, which are absolutely necessary for the proper functioning of our website, are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a justified interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are dealt with separately in this data protection declaration.
VII. provision of the website and creation of log files
Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:
(1) Information about the browser type and the version used
(2) the operating system of the user
(3) the internet service provider of the user
(4) the IP address of the user
(5) Date and time of access
(6) Websites from which the User's system accesses our Website
(7) Websites accessed from the User's system via our Website
The data is also stored in the log files of our system. This does not apply to the user's IP address or other data that enable the data to be assigned to a user. These data are not stored together with other personal data of the user.
Legal basis for the temporary storage of data pursuant to Art. 6 para. 1 lit. f DSGVO.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session. These purposes represent our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f DSGVO.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object.
VIII. Contact form
On our website there are contact forms which can be used for electronic contact. If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. These data are:
a) First name
c) e-mail address
d) street and house number
e) Postal code
Your consent will be obtained for the processing of your data as part of the sender process and reference will be made to this data protection declaration.
Alternatively, you can contact us via the e-mail address provided. In this case, the personal data transmitted with your e-mail will be stored. The data will not be passed on to third parties in this context. The data will be used exclusively for the processing of the conversation.
If you have given your consent, the legal basis for processing the data is Art. 6 para. 1 lit. a DSGVO. The legal basis for the processing of data transmitted in the course of an e-mail is Art. 6 para. 1 lit. f DSGVO. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
The processing of personal data on the input mask serves us solely to process the establishment of contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data is deleted if it is no longer required for the purpose of its collection. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you as the user has ended. This is the case if it can be inferred from the circumstances that the relevant facts have been conclusively clarified.
You have the right to revoke your consent to the processing of your personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case the conversation cannot be continued. Please send us an email to email@example.com. In this case, all personal data stored in the course of contacting us will be deleted unless there are legal retention periods.
You would like to apply for a job with us? We would be pleased if you send us your application by e-mail.
As part of our applicant management, we process the personal data you provide us with to initiate an employment relationship on the basis of Art. 88 DSGVO in conjunction with § 26 Para. 1 BDSG. Alternatively, collective agreements (group, general and works agreements as well as collective bargaining agreements) can be concluded in accordance with Art. 88 DSGVO in conjunction with § 26 para. 4 BDSG as well as consents (e.g. for photographs) pursuant to Art. 88 DSGVO in conjunction with Art. 26 para. 2 BDSG can be invoked.
In individual cases, we process your data in order to protect legitimate interests, e.g. in the case of intra-group data exchange for administrative purposes (Art. 6 para. 1 f DSGVO in conjunction with Recital 48).
If special categories of personal data (e.g. severe disability) are processed, this is done on the basis of Art. 88 DSGVO in conjunction with § Article 26 paragraph 3 BDSG. In addition, the processing of health data for the assessment of your ability to work in accordance with Art. 9 para. 2 h) in conjunction with § Art. 22 para. 1 b) BDSG may be necessary.
We process and store your personal data for as long as it is necessary to fulfil the purposes of the data processing or legal, contractual or statutory obligations. Afterwards the data will be deleted or its processing restricted. In the event that no employment relationship is established after completion of the application procedure, we will delete your data no later than 3 years after completion of the application procedure. After expiry of the regular 3-year period of limitation according to § 195 BGB (German Civil Code), this is the point in time at which any claims under the General Equal Treatment Act (AGG) become time-barred. Should we wish to store your application in a so-called "applicant pool" for a period of more than 3 years, we would ask you for your consent after the 3-year period has expired.
Of course you are also free to withdraw your application at any time. In this case, your data would also be deleted if they are no longer required for the purpose for which they were collected. Sending an e-mail to us with the relevant content is sufficient for this purpose. The revocation of any consents granted is also possible at any time.
IX. Google Analytics
This website uses functions of the web analysis service Google Analytics. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website if you have given the permission to do so. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.
This is a web analysis service of Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site.
Google Analytics is used exclusively with activated IP anonymisation (so-called IP masking). This means that the IP address of users of Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area is shortened. Only in exceptional cases, e.g. if there are technical failures in Europe, will the full IP address be transferred to a Google server in the USA and shortened there.
With the IP anonymisation method used by Google, the full IP address is never written to a hard disk at any time, as the entire anonymisation process takes place almost immediately after receipt of the request in the working memory.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide further services associated with website and internet use, in particular functions for display advertising and Google Analytics reports on performance according to demographic characteristics and interests to the website operator. The data is stored on servers in the USA in unencrypted form and both Google and state authorities have access to this data. Data can also be linked to other user data - such as search history, personal accounts, user data from other devices and all other devices that Google has for this user.
Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. In Google Analytics reports on performance by demographic characteristics and interests, data obtained through interest-based advertising by Google and visitor data from third parties (such as age groups or interest groups) are used.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
Download and install Google Browser Plugin
You can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent future collection of your information when you visit this site:
Disable Google Analytics
or under www.google.de/intl/de/policies/.
Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
Google LLC complies with European data protection law and is certified under the Privacy Shield Agreement:https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Here you will find further information on the use of data by Google Inc.:
policies.google.com/privacy/partners collected by Google partners)
adssettings.google.de/authenticated (Settings about advertising that is displayed to you)
policies.google.com/technologies/ads of cookies in ads
We have activated the IP anonymization function on this website. This will cause Google to shorten your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An Opt-Out-Cookie is set, which prevents the collection of your data on future visits to this website: deactivate Google Analytics.
Order data processing
We have concluded a contract with Google for order data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic characteristics of Google Analytics
This website uses the function "demographic features" of Google Analytics. This allows reports to be generated that contain information about the age, gender and interests of site visitors. This data comes from interest-related advertising by Google and visitor data from third parties. This information cannot be associated with any specific individual. You can deactivate this function at any time via the ad settings in your Google Account or generally prohibit Google Analytics from collecting your data as described under "Objection to data collection".
Our website uses plugins from the YouTube page operated by Google. The site is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
When you visit one of our pages equipped with a YouTube plug-in, a connection is established to YouTube's servers in the United States. This will tell the YouTube server which of our pages you have visited.
If you are logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website you are visiting by opening a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to your respective YouTube account. YouTube is used in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO.
Further information on the handling of user data can be found in YouTube's data protection declaration at: www.youtube.com/yt/about/de/.
YouTube is used in the interest of an appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
YouTube and Google receive information through the YouTube component that you have visited our website whenever you are logged in to YouTube at the same time as accessing our website, regardless of whether you are watching a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google in this way, you can prevent it from being transmitted by logging out of your YouTube account before you visit our website.
XI. Google Web Fonts
This page uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers in the United States. This enables Google to know that your IP address has been used to access our website. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
If your browser does not support web fonts, a standard font will be used by your computer.
For more information, please visit: www.google.com/webfonts/
XII. Web Fonts from Fast.Fonts.Net or Fonts.com
This page uses so-called web fonts provided by Monotype GmbH (fonts.com or fast.fonts.net) for the uniform display of fonts. When calling up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to the fonts.com servers in the United States. By doing so, fonts.com becomes aware that your IP address has been used to access our website. The use of Fonts.com Web Fonts is made in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
If your browser does not support web fonts, a standard font will be used by your computer.
Further information on these web fonts can be found at www.fonts.com/info/legal
XIII. Google Maps
This page uses the Google Maps map service via an API. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The data processed may include, in particular, your IP address and location data, which may not be collected without your consent (usually as part of your mobile device settings). The legal basis for the processing of personal data using Google Maps is Art. 6 para. 1 lit. a DSGVO if you have given your consent.
The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy retrievability of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
You can find more information on the handling of user data in Google's data protection declaration: www.google.de/intl/de/policies/privacy/.
XIV. Newsletter and broad communication
We send newsletters, e-mails and other electronic notifications (hereinafter "Newsletter") only with the consent of the recipients or a legal permission. If the contents of the newsletter are specifically described in the context of a registration for the newsletter, they are decisive for the consent of the users. In addition, our newsletters contain information about our services and us.
To subscribe to our newsletters, it is basically sufficient to enter your e-mail address. However, we may ask you to provide a name for the purpose of personal contact in the newsletter, or other information if this is necessary for the purposes of the newsletter.
Deletion and limitation of processing: We may store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. This period corresponds to the statutory period of limitation for claims against us. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time. In the case of obligations to permanently observe objections, we reserve the right to store the e-mail address in a blacklist (so-called "Blacklist") for this purpose alone.
The logging of the registration procedure is based on our legitimate interests for the purpose of proving that it has been carried out properly. Insofar as we commission a service provider to send e-mails, this is done on the basis of our legitimate interests in an efficient and secure sending system.
Notes on legal bases: The sending of newsletters is based on the consent of the recipients or, if consent is not required, on our legitimate interests in direct marketing, if and to the extent that this is permitted by law, e.g. in the case of advertising to existing customers. If we commission a service provider to send e-mails, this is done on the basis of our legitimate interests. The registration process will be recorded on the basis of our legitimate interests in order to prove that it has been carried out in accordance with the law.
Contents: information about us, our services, actions and offers as well as invitations to events.
Analysis and performance measurement: The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened, or, if we use a mailing service provider, from their server. Within the scope of this retrieval, technical information, such as information on the browser and your system, as well as your IP address and the time of the retrieval, is initially collected.
This information is used for the technical improvement of our newsletter based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined by means of the IP address) or the access times. This analysis also includes determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the mailing service provider to observe individual users. Rather, the evaluations serve us to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
The evaluation of the newsletter and the measurement of success are carried out, subject to the express consent of the users, on the basis of our legitimate interests for the purpose of using a user-friendly and secure newsletter system that serves our business interests and meets the expectations of the users.
A separate revocation of the performance measurement is unfortunately not possible, in this case the entire newsletter subscription must be cancelled or must be contradicted.
a) Processed data types: Inventory data (e.g. names), contact data (e.g. e-mail), meta/communication data (e.g. IP addresses), usage data (e.g. interest in content, access times).
b) Persons concerned: communication partner.
c) Purposes of processing: direct marketing (e.g. by e-mail or by post).
d) Legal bases: Consent (Article 6(1) page 1 DSGVO), legitimate interests (Article 6(1) page 1 DSGVO).
e) Opt-Out: You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can use one of the above mentioned contact options, preferably e-mail.
Services and service providers:
XV. Cloud Services
We use software services accessible via the Internet and running on the servers of their providers (so-called "cloud services", also referred to as "software as a service") for the following purposes: exchanging documents, content and information with specific recipients or for the authenticated and 2-factor secured login of users as well as chats and participation in audio and video conferences.
If we use cloud services to provide other users or publicly accessible websites with forms or other documents and content, the providers may store cookies on the users' devices for web analysis purposes or to remember user settings (e.g. in the case of media control).
Notes on legal bases: If we ask for consent to use the cloud services, the legal basis for processing is consent. Furthermore, their use can be a component of our (pre)contractual services, provided that the use of the cloud services has been agreed in this context. Otherwise, user data is processed on the basis of our legitimate interests (i.e., interest in efficient and secure administration and collaboration processes).
Processed data types:Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Persons concerned:Customers, employees (e.g. employees, applicants, former employees), interested parties, communication partners.
Purpose of the processing:Office and organisational procedures.
Legal basis:Consent (Art. 6 para. 1 sentence 1 lit. a DSGVO), Performance of the contract and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b. DSGVO), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. DSGVO).
Used services and service providers:
1) Microsoft Cloud services: