Complete Data Privacy Declaration

1. Name and address of the data controller


The data controller under the law is:
G. Ernstmeier GmbH & Co. KG
Bülowstraße 20
32049 Herford
Tel.: +49 5221 984-0
E-Mail: info(at)ernstmeier.de

1.1 Contact information for the Data Protection Officer

The Data Protection Officer for the data controller can be reached via:
E-mail: datenschutz(at)ernstmeier.de

2. General information on data processing

This website records a variety of general data and information each time a data subject or an automated system accesses the website. This general data and information is saved in web server log files. The following may be recorded: the browser type and version used, the operating system used by the accessing system, the website from which an accessing system accesses our website (called a referrer), the sub-pages accessed on our website by an accessing system, the date and time at which the website was accessed, an internet protocol address (IP address), the internet service provider of the accessing system, and other similar data and information that serves to protect against hazards in case of attacks against our IT systems.

We do not use this general information and data in such a way that allows it to be associated with any data subject. This information is instead used to correctly supply the content of our website, to optimize the content of our website and advertisements on the site,to ensure the long-term functionality of our IT systems and website technology, and to provide criminal prosecutors the information they need for criminal proceedings in case of a cyber-attack. This data and information is recorded anonymously for statistical purposes, and is analyzed with the goal of improving data privacy and data security in the company, in order to ultimately ensure an optimal level of protection for the personal data we process. Anonymous server log file data is stored separate from all personal information provided by data subjects.

2.1 Scope of processing of personal data

In general, we collect and use the personal data of our users only if necessary to provide a functional website and to provide our content and services. We typically only collect and use our users’ personal information after we have received consent to do so from the user. In some exceptional cases, we may not be able to obtain prior consent due to the circumstances of the situation, but may process your data if permitted by law.

2.2 Legal basis for processing personal data

If we obtain consent from a data subject to process personal data, Art. 6 para. 1 lit. a. of the EU General Data Protection Regulation (GDPR) serves as the legal basis for processing such personal data.

When processing personal data necessary to fulfill an agreement to which the data subject is a contractual party, Art. 6 para. 1 lit. b GDPR serves as the legal basis for processing. This also applies to processing procedures necessary to carry out pre-contractual measures.

If personal information must be processed to fulfill a legal obligation of our company, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

If data processing is required to safeguard a justifiable interest of our company or a third party, and if the interests, basic rights, and basic freedoms of the data subject do not outweigh the above interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.

2.3 Data deletion and duration of storage

Personal data of data subjects is deleted or blocked once the purpose for which it was saved no longer applies. In addition, data may only be saved if specified under European or national legislation in EU ordinances, laws, or other regulations to which the data controller is subject. Data will be blocked or deleted when the storage term specified by law expires unless it is necessary to continue saving the data to conclude an agreement or fulfill a contract.

3. Provision of our website and creation of log files

3.1 Description and scope of data processing

Each time you access our website, our system automatically records data and information from the requesting computer.
The following data is collected:

  • Information on your browser type and version
  • The user’s operating system
  • The user’s internet service provider
  • The user’s IP address
  • The date and time of access
  • The website from which the user’s system accessed our website
  • Websites accessed by the user’s system through our website

Data is also saved in our system's log files. This does not include the user’s IP address or other data which could be used to associate the data with a specific user. This data is never saved alongside other personal information belonging to the user.

3.2 Legal basis for data processing

Art. 6 para. 1 lit. f) GDPR forms the legal basis for temporary data storage.

3.3 Purpose of data processing

The system must temporarily store the user’s IP address to allow it to deliver the website to the user’s computer. It must save the user’s IP address for the duration of the session.

3.4 Duration of storage

Data is deleted once it is no longer necessary to achieve the purpose for which it was collected. If data is collected to provide the website, it will no longer be necessary once the specific session is ended.

3.5 Rights of revocation and objection

Data must be collected and saved in log files to provide and operate the website. Therefore, the user has no right to object.

4. Use of cookies

This website uses cookies. Cookies are text files stored and saved on your computer system by your web browser.
Many different websites and servers use cookies. Many cookies contain a cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a character string that can be used to associate websites and servers to the specific web browser where the cookie was saved. This allows the websites and servers visited to differentiate the data subject's individual browser from other web browsers that contain other cookies. A specific web browser can be recognized and identified via the unique cookie ID.
Using cookies allows us to provide users of this website user-friendly services that would not be possible without saving cookies.
Cookies allow us to optimize the information and services on our website to meet user needs. Cookies allow us, as we have already noted, to recognize users of our websites. The purpose of this recognition is to make it easier for users to utilize our website. Users of a website that stores cookies, for example, do not need to input their access details each time they visit the site, since the website and the cookie saved on the user's computer system handles this function. Another example is the cookie saved by a shopping cart in an online shop. The online shop notes the items the customer has placed in their virtual shopping cart using a cookie.
Data subjects can prevent their web browser from saving cookies from our website at any time by changing their cookie settings. They can also permanently prevent the browser from saving any cookies. In addition, cookies saved in the past can be deleted using a web browser or other software program at any time. All current web browsers are capable of deleting such cookies. If the data subject deletes cookies saved in their web browser, all functions of our website may not be available in full.

4.1 Description and scope of data processing

Our website uses cookies. Cookies are text files saved in the user’s internet browser on their computer. When a user accesses a website, a cookie may be saved on their operating system. This cookie includes a characteristic character string which allows it to clearly identify the browser the next time the user accesses the website.

We use cookies to make our website more user-friendly. Some elements of our website require us to be able to identify the accessing browser even after it moves to a new page.
Cookies save and transmit the following data:

  • Language settings
  • Login information

We also use cookies on our website which allow us to analyze user surfing behavior.
The following data may be transmitted by such cookies:

  • Search terms entered
  • Frequency of page visits
  • Use of website functions

The user data collected in this way is pseudonymized through technical precautions. This makes it impossible for us to associate data with the accessing user. Data is not saved alongside other personal data of the user.
When they access our website, users see an informational banner indicating that we use cookies for analytic purposes. This banner also refers them to this Data Privacy Declaration and informs them that they can prevent their browser from saving cookies by changing their browser settings.
 

4.2 Legal basis for data processing

Art. 6 para. 1 lit. f GDPR forms the legal basis for processing personal information.

4.3 Purpose of data processing

We use technically required cookies to make it simpler for users to use this website. We would not be able to offer some functions of this website without using cookies. In order to offer these functions, we must be able to recognize the browser even after you switch to a new page.
We require cookies for the following applications:
•    Adopting language settings
•    Remembering search terms

User data collected through technically required cookies is not used to create user profiles.
We use analytics cookies to improve the quality of our website and its contents. Analytic cookies tell us how this website is used, allowing us to continuously optimize our services.
These purposes also form the basis of our legitimate interest in processing personal data in accordance with Art. 6 para. 1 lit. f GDPR.

4.4 Duration of storage, right to object and right to data deletion

Cookies are saved on the user’s computer, which transmits them to our website. Therefore, as a user you have full control over how cookies are used. You can change the settings in your web browser to deactivate or restrict the transmission of cookies. Cookies saved in the past can be deleted at any time. This can also be done using an automatic process. If cookies are deactivated for our website, it is possible that you may not be able to use all of the functions of our website in full.

5. Contact form and e-mail contact

5.1 Description and scope of data processing

Our website includes a contact form that can be used to get in touch with us electronically. If a user uses this contact form, the data they enter on the input screen is transmitted to us and saved. This data includes:

  • Name
  • E-mail address
  • Telephone number
  • Concern

When the message is sent, the following data is also saved:

  • The user’s IP address
  • Date and time of registration

During the process of sending this form, we obtain your consent to process your data in conjunction with your concern and refer you to this Data Privacy Declaration.
Alternatively, users can contact us via the e-mail address provided. If they do so, any personal information transmitted in the e-mail will be saved.
Such data is never transmitted to third parties. Data is only used to handle the conversation.

5.2 Legal basis for data processing

The legal basis for processing user data if the user has provided their consent is Art. 6 para. 1 lit. a GDPR.
The legal basis for processing data transmitted to send an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is sent for the purpose of concluding an agreement, Art. 6 para. 1 lit. b GDPR also serves as the legal basis for processing.

5.3 Purpose of data processing

We only process personal information from the input screen to process the user's contact. If the user contacts us via e-mail, we also have a legitimate interest in processing their data.
The other personal data processed during the transmission process is used to prevent misuse of the contact form and to ensure the security of our IT systems.

5.4 Duration of storage

Data is deleted once it is no longer necessary to achieve the purpose for which it was collected. This is the case for the personal information from the contact form input screen and personal information transmitted via e-mail once our conversation with the user is over. The conversation is over when circumstances indicate that the matter in question has been fully clarified.
Additional personal data collected during the transmission process is deleted at the latest after seven days.

5.5 Rights of revocation and objection

Users can revoke their consent to process personal data at any time. If a user contact us via e-mail, they can revoke consent to save their personal data at any time by sending us an e-mail. If they do so, we will not be able to continue our conversation.
All personal data saved in the course of the contact will be deleted in this case.

6. Rights of data subjects

If we process your personal information, you are a “data subject” in the sense of the GDPR, and you have the following rights towards us as the data controller. You can take advantage of your rights by contacting our Data Protection Officer or employees in the service center and describing your concern.

6.1 Right to information

Any data subject whose personal data is processed has the right to receive information free of charge on their saved personal data at any time from the data controller responsible for processing. In addition, they have the right to receive a copy of this data.
You can request a confirmation from the data controller as to whether we process your personal information.

6.2 Right to rectification

Any data subject whose personal data is processed has the right to request prompt rectification of any personal data that is incorrect. Furthermore, data subjects have the right to request that incomplete personal data be supplemented in consideration of the purposes of processing, including  through a supplementary declaration.

6.3 Right to restrict processing

Any data subject whose personal data is processed has the right to restrict the controller restrict processing if one of the requirements of Art. 18 para. 1 GDPR is fulfilled.

6.4 Right to deletion

Any data subject whose personal data is processed has the right to request the data controller delete their personal data promptly if one of the grounds indicated in Art. 17 para. 1 GDPR applies.

6.5 Right to data portability

Any data subject whose personal data is processed has the right to receive personal data provided by the data subject to a data controller in a structured, accessible, and machine-readable format. They also have the right to transmit this data to another data controller without being prevented from doing so by the data controller to whom the personal data was provided, if processing is based on their consent in accordance with Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a GDPR or on a contract in accordance with Art. 6 para. 1 letter b GDPR and if data is processed using automated processes.

6.6 Right to object

Any data subject whose personal data is processed has the right to object to the processing of their personal data on the basis of Art. 6 para. 1 letter e or f GDPR for reasons related to their personal situation. This also applies to profiling based on these provisions.
If the data subject objects to processing, the company will no longer process their personal data unless we have protected justifications for the processing that outweigh the interests, rights, and freedoms of the data, or the processing is used to assert, exercise, or defend against legal claims.
If the company processes personal data for the purpose of direct advertising, the data subject has the right to object to the processing of their personal data for the purpose of such advertisement. This also applies to profiling, if it is associated with such direct advertisement. If the data subject objects to processing for the purpose of direct advertising, your personal information will no longer be processed for this purpose.

6.7 Right to revoke a declaration of consent under data privacy law

Any data subject whose personal data is processed has the right to revoke their consent to process their personal data at any time.

You have the right to revoke your declaration of consent under data privacy law at any time. Your revocation of consent does not affect the legality of processing completed up to that point based on your consent.

6.8 Right to submit complaints to a supervising authority

Apart from any other legal remedies under administrative or other law, you have the right to submit a complaint with a supervising authority, in particular in the member state in which you live, work, or where the alleged violation took place, if you believe that processing of your personal information violates the GDPR.

 7. Web analytics service Matomo

7.1 Scope of processing of personal data

Our website uses Matomo (formerly Piwik), an open source software used for statistical analysis of user access. Matomo uses cookies saved on your computer which facilitate anonymized analysis of your use of our website. It is not possible to associate this data with a specific person, since your IP address is anonymized immediately after processing and before data is saved.

7.2 Legal basis for processing personal data

Art. 6 para. 1 lit. f GDPR forms the legal basis for processing personal information.

7.3 Purpose of data processing

This website uses Matomo in order to improve the quality and content of our website. This tells us how the website is being used, helping us continuously optimize our services.

7.4 Duration of storage, right to object and right to data deletion

Cookies used by Matomo are saved on the user’s computer, which transmits them to our website. Therefore, as a user you have full control over how cookies are
used. Cookies saved in the past can be deleted at any time. This may be done through an automated process.
You can object to the saving and analysis of your data by Matomo at any time: 

8. Data privacy provisions on the use of YouTube

The data controller for this website has integrated components from YouTube. YouTube is a web portal that allows video publishers to place video clips online free of charge, allowing other users to view, rate, and comment on these clips free of charge as well. YouTube allows users to publish alll kinds of videos, so both complete movies and TV episodes as well as music videos, trailers, or videos made by users themselves are available over the portal.
YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary company of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time a user accesses a page on this website operated by the data controller where a YouTube component (YouTube video) is integrated, the web browser on the data subject's IT system is automatically directed by the YouTube component to download YouTube components from YouTube in order to display them. Further information on YouTube is available at https://www.youtube.com/yt/about/de/. Through this technical process, YouTube and Google receive information on which specific sub-pages of our website are visited by the data subject.
If the data subject is also logged into YouTube at the same time, when they access a sub-page containing a YouTube video YouTube learns which specific sub-page of our website the data subject has visited. This information is collected by YouTube and Google and associated with the data subject's YouTube account.
through the YouTube component, YouTube and Google always receive information that the data subject has accessed our website, if the data subject is logged into YouTube at the same time as they visit our website. They receive this information whether the data subject clicks on a YouTube video or not. If the data subject does not want this information transmitted to YouTube and Google, they can prevent transmission by logging out of their YouTube account before accessing our website. The YouTube data privacy provisions, available at https://www.google.de/intl/de/policies/privacy/, provide information on how YouTube and Google collect, process, and use personal data.

9. Data privacy provisions on the use of Google Maps

This page uses the map service Google Maps via an API. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We must save your IP address in order to use Google Maps functions. Typically, this information is transmitted to a Google server in the USA and saved there. The provider of this website has no influence over this data transmission.
Google Maps are used in order to provide an attractive online service and to make it easier for users to find locations we indicate on the website. We have a justifiable interest in doing so according to Art. 6 para. 1 lit. f GDPR.

For more information on how user data are handled, please see the Google Data Privacy Declaration: https://www.google.de/intl/de/policies/privacy/.

10. Data Privacy Declaration for online applications

10.1 Application information

We collect a variety of data during the application process. This data includes, in particular, your personal contact information and information on your education, work experience, and skills. Furthermore, you can send us electronically saved documents such as your CV, references, or a cover letter.
We do not require any information from you that is prohibited under the General Equal Treatment Act (race, ethnic origin, gender, religion or worldview, disability, age, or sexual identity). We request that you do not provide information on illnesses, pregnancy, ethnic origin, political views, philosophical or religious convictions, membership in a trade association, physical or mental health, or sexuality. The same applies to content that could violate third party rights (such as copyright law, press law, or general third party rights).

10.2 Collection, processing, use, and transmission of your data

During the application process, we only collect, save, process, and use personal data in conjunction with your application with us and to process your application.
If your application is successful, the provided data may be used for administrative processes related to your hiring.
Your online application will only be processed and viewed by required contact persons. All employees involved in data processing are obligated to maintain the confidentiality of your data. Third parties never receive access to your data. Your data is only processed in Germany.

10.3 Duration of storage

If we are not able to offer you a position, data you have provided will be saved for up to six months in order to answer questions related to your application and rejection.
If your application documents are of interest to us although we do not currently have an available position, you hereby grant us your consent to save your data for up to 24 months in order to consider you for future positions and to contact you.


The general management