Home / data protection / Data protection

Data protection

   General Privacy Policy
the Tintschl group of companies

introduction
We, Anlagenbau Mallmann GmbH are a subsidiary of Tintschl AG and part of the Tintschl group of companies. We appreciate your interest in our company, our services and products, and we want you to feel secure when visiting our websites and communicating with us regarding the protection of your personal information.

Therefore, it is a matter of course for us to comply with the statutory data protection provisions, in particular the General Data Protection Regulation (“DSGVO”). They should be informed about when we collect which data and how we use it. The following explanations serve this purpose

The Tintschl Group has taken numerous technical and organizational measures to ensure the fullest possible protection of the personal data collected and processed through this website. But even so, an absolute protection can not always be guaranteed, since the data transmission on the Internet can always have security holes. For this reason, you are of course free to contact us in other ways, such as by phone or letter.

We are happy to answer your questions, suggestions or comments on privacy. Just write an e-mail to datenschutzbeauftragter@tintschl.de.

1. definitions
The privacy policy of the Tintschl Group is based on the terms and definitions of the GDPR and should be easy to read and understand. To ensure this, we would like to explain in advance the terms and definitions used.

a. Personal data
“Personal data” means all information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.

b. processing
“Processing” means any process performed, with or without the aid of automated procedures, or any such series of operations relating to personal data such as collection, collection, organization, ordering, storage, adaptation or modification, read-outs, queries Use, disclosure by transmission, dissemination or other form of provision, matching or linking, restriction, erasure or destruction.

c. Restriction of processing
“Restriction of processing” is the marking of personal data stored with the aim of limiting its future processing.

d. profiling
“Profiling” means any type of automated processing of personal data that involves the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular aspects of work performance, economic situation, To analyze or predict health, personal preferences, interests, reliability, behavior, whereabouts or location of this natural person.

e. pseudonymization
“Pseudonymisation” means the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without additional information being provided, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person.

f. Responsible or the controller
‘Controller’ or ‘controller’ means the natural or legal person, public authority, body or body that alone or together with others decides on the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.

g) processors
“Processor” means a natural or legal person, public authority, body or body that processes personal data on behalf of the controller.

h) Receiver
“Recipient” means a natural or legal person, public authority, agency or other entity to whom Personal Data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered as beneficiaries.

i) Third
“Third party” means a natural or legal person, public authority, body or body other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or processor to process the personal data.

j) Consent
“Consent” means any expression of will voluntarily and unequivocally made by the data subject in the form of a statement or other unambiguous confirmatory act by the data subject expressing to the person concerned that they are involved in the processing of the personal information concerning them Data agrees.

2. Name and address of the data controller
Person responsible within the meaning of the GDPR as well as other data protection laws and other regulations with data protection law valid in the member states of the European Union is in the Tintschl group of companies:

Plant engineering Mallmann GmbH
Hut Route 34B
52355 Düren
Germany
Tel .: +49 (0) 2421/9521688
E-Mail: kontakt@mallmann-gmbH.de
Website: www.mallmann-gmbh.de

3. Name and address of the data protection officer
The data protection officer of the controller is:

Laura Salleck
Tintschl AG
91058 Erlangen
Germany
Tel .: +49 (0) 9131 / 81249-0
E-Mail: datenschutzbeauftragter@tintschl.de

4. Use of our website
When visiting the website no personal data is stored. We only collect statistical information about our visitors. A relationship to a single visitor can not be established. The creation of a user profile is therefore not possible for us and is not in our interest.

5. Use of Google Analytics and information about cookies
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you.
The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
However, if IP anonymisation is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.
The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=en
In this case, setting an opt-out cookie prevents the future collection of your data when you visit this website.
To optimize our website, we collect, collect and store only usage data, such as: The date and time of the page view, the page from which you accessed our page, and the like, provided that you do not object to this data collection and storage. This is done anonymously without personally identifying the user of the page. If necessary, user profiles are created by means of a pseudonym. Again, there is no connection between the natural person behind the pseudonym with the collected usage data to collect and store the usage data, we also use cookies to make your visit to our site as comfortable as possible for you. These are small text files that your Internet browser automatically receives from our server and stores on your computer. Your personal data will not be stored for this purpose – they will remain protected. Stored statistical information such as operating system, your Internet browser (browser), the IP address, the previously accessed web page (referrer URL) and the time. We collect this data exclusively for statistical purposes, in order to further optimize our website and to make our Internet offers even more attractive. The collection and storage takes place exclusively in an anonymous or pseudonymous form and leaves no inference to you as a natural person. Thus, it is possible for us to automatically recognize you on your next visit to our website. This is more convenient for you because you do not have to reenter your information.
Our website uses Google Analytics, a web analytics service, Google Inc., 1600 Amphitheater Parkway, Montain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of their use of the website. For example, information about the operating system, the browser, your IP address, the website you have previously accessed (referrer URL) and the date and time of your visit to our website are included. The information generated by this text file about the use of our website is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of our website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. If this is required by law or if third parties process this data on behalf of Google, Google will also pass on this information to these third parties. This usage is anonym or pseudomized. For more information, go to Google directly at: Privacypolicy.
Google uses the DoubleClick DART cookie. Users may opt out of using the DART cookie by accessing the privacy policies of Google’s ad network and content network.
Of course, you can also view our websites without cookies. If you do not want us to recognize your computer, you can prevent cookies from being stored on your hard drive by selecting “Do not accept cookies” in your browser settings. How this works in detail, please refer to the instructions of your browser manufacturer. If you do not accept cookies, this may result in functional limitations of our offers.

6. Privacy Policy Marketing
As part of our marketing activities, we use various social media tools. For recommending (sharing, liking) contents of our website on Facebook, Twitter, Google+, XING or LinkedIn, so-called external social plug-ins can be integrated.

7. Use of social media buttons
In order to prevent data from being transferred to the service providers Facebook, Twitter, Google, XING or LinkedIn without your knowledge, we use the “2-click method” for social share buttons. This guarantees that personal data will not be passed on to the providers of the individual social plugins when entering the page, but only when you click on one of the social media plugins.
This offer uses social plugins (“plugins”) of the social network facebook.com, which is operated by Facebook Ireland Ltd., Hanover Reach, 5-7 Hanover Quay, Dublin 2 Ireland (“Facebook”). The plugins are recognizable by one of the Facebook logos (white “f” on a blue tile or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and the look of the Facebook social plugins can be viewed here.
When a user calls a web page of this offer that contains such a plugin, its browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and incorporated by him into the website. The provider therefore has no influence on the amount of data that Facebook collects with the help of this plugin and therefore informs users according to their level of knowledge.
By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, for example, press the Like button or leave a comment, the corresponding information is transmitted from your browser directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and save their IP address. According to Facebook, only an anonymous IP address is stored in Germany.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the related rights and setting options to protect the privacy of users, these can be found in the privacy policy of Facebook: Facebook policy.
If a user is a Facebook member and does not want Facebook to collect data about him via this offer and associate it with his member data stored on Facebook, he must log out of Facebook before visiting the website.
It is also possible to block Facebook social plugins with add-ons for your browser, for example with the “Facebook Blocker”.

8. Hubspot explanation
Our sign up service allows visitors to our site to learn more about our business, download content, and provide their contact information and other demographic information. This information is stored on servers of our software partner HubSpot. They can be used by us to connect with visitors to our website and to determine what services our company is interested in. All information we collect is subject to this Privacy Policy. We use all information collected solely to optimize our marketing.
HubSpot is a US-based software company with a presence in Ireland.
Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Telephone: +353 1 5187500. HubSpot is governed by the TRUSTe’s Privacy Seal and the U.S. – EU Safe Harbor Framework and U.S. – Swiss Safe Harbor Framework.

9. Privacy Policy for Applicants / Employees (m / w)
Insofar as it is necessary for the implementation and processing of the application process, your data will be automatically collected, processed and used in accordance with legal requirements, in particular those of the Federal Data Protection Act and the DSGVO. For the implementation and processing of the application process and any subsequent employment relationship, your data will be passed on to third parties such as social security funds, tax offices and financial institutions within the scope of the statutory provisions. Similarly, data may be made available or shared within the Tintschl group of companies due to operational necessity.
Necessarily, the transfer of your personal data to potential clients of the Tintschl Group takes place as far as this is necessary for the placement of the activities and / or the project assignments. This does not affect application procedures for the internal area in the Tintschl Group (such as sales, administration, IT, engineering).
If you need support measures via the Federal Employment Agency or other company qualification facilities, we are entitled to transfer personal data, always in the light of the fact that this is necessary for the purpose of the measures and / or is required by law.
By providing your e-mail address or submitting your documents, we assume your consent to communicate with you via this address. Six months after completing the application process, stored data will be deleted. By agreeing to our Privacy Policy, you agree that we may include your information in our pool of applicants and that they may be considered for other vacancies. In this case your data will be automatically deleted from our system after 24 months.
Applicants / employees expressly agree that their personal data, including the application photo and other information, will be included in a database and used for the purposes stated. Consent also expressly applies to the automated collection and processing of data.
This declaration can be revoked by sending an e-mail to: datenschutzbeauftragter@tintschl.de.

10. Legal bases of data collection, processing and storage
Insofar as we obtain consent for a specific processing purpose, Art. 6 para. 1 lit. a DSGVO of our group of companies as legal basis for processing operations. If the processing of personal data takes place in order to fulfill a contract of which the data subject is a party, the processing is based on Art. 6 (1) lit. b DSGVO. This is the case, for example, in the processing of data necessary for the supply of goods or the provision of any other service or consideration. The same applies if data processing is required in the context of pre-contractual measures. This concerns inquiries about our products or our services. Insofar as our group of companies is subject to legal obligations requiring the processing of personal data, the processing is based on Art. 6 para. Lit. c DSGVO; This is the case, for example, in the fulfillment of tax obligations. By way of exception, the protection of vital interests of the data subject or any other natural person may require the processing of personal data, for example if a visitor to our group is injured and, for example, name, age, health insurance or other vital information, such as third parties Emergency doctor would have to be passed on, then would serve Art. 6 para. 1 lit. d DSGVO as legal basis.
If none of the aforementioned regulations applies, the processing of data could also be based on Art. 6 para. 1 lit. f DSGVO are based. This is the case if the processing is necessary to safeguard the legitimate interests of our group of companies or of a third party, provided the interests, fundamental rights and fundamental freedoms of the person concerned do not prevail. We are therefore entitled to processing operations on this basis because they have been specifically mentioned in the GDPR. A legitimate interest could exist, for example, if a relevant and appropriate relationship exists between the data subject and the person responsible, for example if the data subject is a customer of the person responsible or in his or her service (Adv. 47 sentence 2 DSGVO).
The transfer to the state institution and authorities entitled to receive information only takes place within the framework of the statutory information obligations or, if we are obliged to provide information by a court decision.
In any case, your data will be deleted after the contract has been completed and after expiry of the tax and commercial regulations.

11. Duration of data storage
The duration of the storage of personal data is based on the respective statutory retention periods. After this period, the corresponding data will be routinely deleted, if they are no longer required to fulfill the contract or to initiate a contract.

12. Rights of the data subject
a) Confirmation and information right
As the data subject, you have the right to ask the controller for confirmation of the processing of your personal data.
Furthermore, as the data subject, you have the right to free information about the personal data stored about you and the following information:
• the processing purposes
• the categories of personal data being processed
• the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations
• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration
• the right of rectification or erasure of the personal data concerning them, or the limitation of the controller’s processing or the right to object to such processing
• the existence of a right of appeal to a supervisory authority
• if the personal data are not collected from the data subject: all available information about the origin of the data
• the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) of the BER, and – at least in these cases – meaningful information about the logic involved and the scope and intended impact of such processing on the data subject
As the data subject, you may request information about whether personal data has been transmitted to a third country or to an international organization. If that is the case, ha, moreover, you have the right to obtain information about the appropriate guarantees in connection with the transfer.
If you wish to avail yourself of this right to information, please contact our data protection officer or another member of the Tintschl Group at any time.

b) Right to rectification
As the data subject, you have the right to demand the immediate correction of incorrect personal data concerning you. You also have the right to request the completion of incomplete personal data, including by means of a supplementary statement, taking into account the purposes of processing.
If you wish to avail yourself of this right to rectification, please contact our Data Protection Officer or another member of the Tintschl Group at any time.
c) Right to cancellation (“right to be forgotten”)
As the data subject, you have the right to require the controller to delete your personal data without delay if one of the following causes is true and processing is not required:
• The personal data has been collected for such purposes or otherwise processed for which they are no longer necessary.
• You have revoked your consent on which the processing was based in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR and there is no need for any other legal basis for the processing.
• As affected person you have acc. Art. 21 para. 1 DSGVO objection to the processing, and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 para. 2 DSGVO Opposition to processing.
• The personal data were processed unlawfully.
• The deletion of personal data is required to fulfill a legal obligation under EU law or the law of the Federal Republic of Germany to which the person responsible is subject.
• The personal data was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
If any of the above reasons are correct and you wish to arrange for the deletion of personal data held by the Tintschl Group of Companies, you may contact our Privacy Officer or another member of the Tintschl Group at any time. We will comply with your request for deletion without delay.
If we have made the personal information public and are required to delete it, we will take appropriate measures, including technical means, to inform data controllers who process the personal data published, in the light of available technology and implementation costs, that: You have requested the deletion of all links to such personal data or copies or replications of such personal data.
d) Right to restriction of processing
As a person concerned with the processing of personal data, you have the right to require the controller to restrict the processing if one of the following conditions is met:
• The accuracy of the personal data is contested by the data subject for a period of time that enables the person responsible to verify the accuracy of the personal data.
• The processing is unlawful, the data subject refuses to delete the personal data and instead requests the restriction of the use of personal data.
• The data controller no longer needs the personal data for the purposes of processing, but the data subject requires them to assert, exercise or defend their rights.
• The data subject has objection to the processing acc. Art. 21 para. 1 DSGVO and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the data subject.
If one of the above-mentioned conditions exists and you, the data subject, wish to restrict the personal data stored by the Tintschl Group, you can contact our Data Protection Officer or another member of the Tintschl Group at any time. We will initiate the restriction of processing.

e) Data transferability
As a person concerned with the processing of personal data, you have the right to receive the personal data relating to you provided by the Tintschl Group of Companies in a structured, common and machine-readable format. You also have the right to transfer this data to another person without hindrance by the Tintschl Group if the processing is based on the consent under Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) of the GDPR and processing by means of automated procedures, unless the processing is necessary for the performance of a public-interest or public-authority task delegated to the controller ,
As a data subject, you also have the right, in the exercise of your right to data portability pursuant to Article 20 (1) GDPR, to have the personal data transmitted directly by the Tintschl group of companies to another party, as far as this is technically feasible and if so this does not affect the rights and freedoms of others.
To enforce the right to data portability, please contact our Privacy Officer or any other employee of Tintschl Group at any time.
f) Right to object
As the data subject, you have the right, at any time, to object to the processing of personal data relating to your personal situation as a result of your particular situation on the basis of Article 6 (1) (e) or (f) of the GDPR. This also applies to profiling based on these provisions.
In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for the purpose of enforcing, pursuing or defending legal claims ,
If the Tintschl group of companies processes personal data in order to operate direct mail, data subjects have the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to the profiling, as far as it is associated with such direct mail. In the event of the data subject’s opposition to processing for direct marketing purposes, we will no longer process the personal data for these purposes.
As the data subject, you also have the right, for reasons related to your particular situation, to the processing of your personal data by the Tintschl Group of Companies for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) DSGVO will object to opposition unless such processing is necessary to fulfill a task of public interest.
To exercise the right to object, you can contact our Privacy Officer or another employee directly. The data subject is also free, in the context of the use of information society services, notwithstanding Directive 2002/58 / EC, to exercise his right of opposition by means of automated procedures using technical specifications.

g) Automated decisions on a case-by-case basis, including profiling
As a person concerned with the processing of personal data, you have the right not to be subjected to a decision based solely on automated processing – including profiling – which has a legal effect on it or, in a similar manner, significantly affects it, unless the decision is
• not required for the conclusion or performance of a contract between the data subject and the controller, or
• permitted by Union or Member State legislation to which the controller is subject, and that legislation shall contain appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject or
• with the express consent of the data subject.
Is the decision
• required for the conclusion or performance of a contract between the data subject and the controller, or
• it takes place with the express consent of the person concerned,
Tintschl Group takes appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and to challenge the decision.
If you, as the data subject, wish to exercise your rights with regard to automated decisions, you can contact our data protection officer or another employee of the Tintschl Group at any time.
h) Right to revoke a data protection consent
As a person concerned with the processing of personal data, you have the right to withdraw consent to the processing of personal data at any time.
If you would like to assert your right to revoke your consent, you can contact our data protection officer or another employee of the Tintschl Group at any time.

13. Beneficial interests in the processing that are being pursued by the controller or a third party
If the processing of personal data is based on Article 6 para. 1 lit. f DSGVO is our legitimate interest in the conduct of our business for the benefit of our workforce and the shareholders and owners.

14. existence of automated decision-making
Since we make our own decisions and see ourselves as responsible here, we do without automatic decision-making or profiling.

As of: 15.05.2018