Data privacy declaration

1. Data protection at a glance

General information

The following tips provide a simple overview of what happens to your personal information when you visit this site. Personal Information is all the data that personally identifies you. For more information on privacy, please refer to our Privacy Policy listed below.

Data collection on this site

Who is responsible for collecting data on this site?

The website operator handles the processing of data on this site. The operator’s contact information is available in the section “Controller” information in this data privacy declaration.

How do we collect your data?

First, your data is collected when you give it to us. For example, this can be data you enter into a contact form.

Other data is automatically collected or collected based on your consent by our IT systems when you visit the website. Specifically, these are technical data (e.g. Internet browser, operating system, or the time the website is visited). This data is collected automatically when you enter this website.

What do we use your data for?

Some of the data is collected to ensure that the website can function correctly. Other data can be used to analyse your user behaviour.

What are your rights regarding your data?

You have the right to receive information free of charge about the origin, recipient and purpose of your stored personal data at any time. You also have the right to request that this data be corrected or deleted. If you have granted your consent to data processing, you can revoke this consent at any time with future effect. In addition, you have the right to request that your personal information be restricted in certain circumstances. You are also entitled to appeal to the competent supervisory authority.

If you have any other questions about this or about data protection, you can contact us at any time.

Analytic tools and 3rd party tools

When you visit this site, your browsing behaviour can be statistically evaluated. This is primarily done using so-called analytic programs.

For detailed information about these analytic programs, please refer to the following privacy policy.

2. Hosting

We host the content of our website with the following provider:

Strato

The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter referred to as “Strato”). When you visit our website, Strato collects a variety of log files, including your IP addresses.

For further information, see the Strato data privacy declaration at: https://www.strato.de/datenschutz/.

We use Strato on the basis of Article 6 Para. 1. letter f GDPR. We have a legitimate interest in displaying our website in the most reliable manner possible. If consent has been requested in this context, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Sec. 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (such as device fingerprinting) in the sense of the TTDSG. Consent can be revoked at any time.

Contract processing

We have concluded a contract processing agreement with the provider indicated above. This is a contract required by data protection law that ensures the personal data of our website visitors is processed only in accordance with our instructions and in compliance with the GDPR.

3. General notices and mandatory information

Data protection

The owners of these pages take the protection of your personal information very seriously. We will treat your personal data as confidential and in accordance with our statutory privacy laws and this privacy policy.

When you use this website, various personal data is collected. Personal data is information that personally identifies you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose.

Please be aware that data transfer in the Internet (for example when communicating via email) might have vulnerabilities. You cannot completely protect your data from being accessed by third parties.

Controller information

The controller responsible for data processing on this site is:

Demig Prozessautomatisierung GmbH
Haardtstr. 40
57076 Siegen
Germany

Telephone: +49 271 77202-0
E-Mail: info@demig.de

The controller is the natural or legal entity that, alone or together with others, deals with the purposes and means of processing personal data (e.g. names, email addresses etc.).

The external company Data Protection Officer of Demig Prozessautomatisierung GmbH and Demig Anlagentechnik GmbH
can be contacted at the following contact details:

Markus Weber
dokuworks GmbH
Birlenbacher Str. 20
57078 Siegen
datenschutz@doku.works

Storage period

Unless another storage period is indicated in this data privacy declaration, we save your personal data until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted as long as we have no other legally permissible grounds to store your personal data (such as retention periods under tax or commercial law); in the later case, data will be deleted after these grounds no longer apply.

General information on the legal bases for data processing on this website

If you have consented to data processing, then we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR and Art. 9 para. 2 lit. a GDPR, if special categories of data pursuant to Art. 9 para. 1 GDPR are processed. If you have granted express consent to the transmission of personal data to third states, then data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information on your device (such as via device fingerprinting), then data processing is also carried out on the basis of Sec. 25 par. 1 TTDSG. Consent can be revoked at any time. If your data is required to fulfil a contract or carry out pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if necessary to fulfil a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. Data processing can furthermore be carried out based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. The following paragraphs of this data privacy policy provide information on the relevant legal bases in each individual case.

Information on data transmission to the USA and other third states

In some cases, we use tools from companies headquartered in the USA or other third states that are not secure from a data protection law standpoint. If these tools are active, your personal data can be transmitted to these third states and processed there. Please note that these countries do not guarantee a level of data protection that is comparable to that in the EU. For example, US companies are obligated to provide personal data to security agencies, and you as a data subject have no recourse against this in court. Therefore, it is possible that US authorities (such as secret services) can process, analyse, and permanently store your data on US servers for monitoring purposes. We have no influence over this processing.

Revoking your permission to process data

Many data processing operations are only possible with your explicit consent. You can revoke an existing consent at any time. The legality of the processing performed until the revocation is not affected by the recall.

Right to object to data collection in specific cases and to direct advertising (Art. 21 of the GDPR)

IF DATA IS PROCESSED BASED ON ART. 6 PARA. 1 LETTER E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS RESULTING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE TERMS. PLEASE REFER TO THIS PRIVACY POLICY FOR THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED. IF YOU LODGE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL INFORMATION, UNLESS WE CAN PROVIDE COMPELLING LEGITIMATE REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOM OR IF PROCESSING SERVES THE PURPOSE OF MAINTAINING, EXERCISING, OR DEFENDING LEGAL RIGHTS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).

WHEN YOUR PERSONAL DATA IS PROCESSED FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING OF YOUR PERSONAL INFORMATION AT ANY TIME; THIS ALSO APPLIES FOR PROFILING, IN SO FAR AS IT IS CONNECTED TO THIS DIRECT ADVERTISING. IF YOU DO SO, YOUR PERSONAL INFORMATION WILL NO LONGER BE USED FOR THE PURPOSE OF THE DIRECT ADVERTISING (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).

Right to submit complaints to the responsible supervisory authority

In the case of breaches of the GDPR, the interested parties are entitled to appeal to a supervisory authority, in particular in the Member State of their habitual residence, their workplace or the place of suspected infringement. The right of appeal is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to demand that the data we process automatically based on your consent or fulfilment of a contract, be provided to you or a third party in a standard machine-readable format. If you require data to be transferred directly to another responsible person, this will only be done if technically feasible.

Information, Deletion and Correction

At any time, you have the right to receive, free of charge, information about your personal information that is stored, its source and recipients, and the purpose of the data processing, and, if necessary, you have the right for this data to be corrected or deleted, in accordance with applicable law. If you have any other questions about this or about your personal data, you can contact us at any time.

Right to Restrict Processing

You have the right to request that the processing of your personal information is restricted. You can contact us at any time to do so. The right to restrict processing is relevant in the following cases:

• If you disagree with the accuracy of your personal information we have saved, we usually need time to verify this. During the verification period, you have the right to request that the processing of your personal information is restricted.
• If the processing of your personal information has been/is unlawful, you may request that the processing of your personal data be restricted instead of being deleted.
• If we no longer need your personal information, but you need it to exercise, defend or enforce legal claims, you have the right to request that the processing of your personal information is restricted instead being deleted.
• If you have lodged an appeal under Art. 21 Para. 1 of the GDPR, your interests are weighed against our interests. You have the right to request that the processing of your personal information be restricted until it is determined that your interests outweigh our interests.

If you have restricted the processing of your personal information, this data may only be processed (does not include storage) with your consent or for the purpose of enforcing, exercising or defending any right or rights of any other person or entity or for reasons of important public interest in the European Union or in a Member State.

SSL or TLS encryption

This page uses SSL or TLS encryption to protect the transmission of sensitive content, such as orders or requests that you send to us as the website operator. An encrypted connection is indicated when the browser's address line changes from “http://” to “https://” and there is a lock icon in your browser line.

If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Objection against advertising emails

Use of contact information published as part of the obligatory legal notice is hereby prohibited for the purpose of sending advertisements and information that are not expressly requested. The website operators explicitly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

4. Data collection on this site

Cookies

Our website uses so-called “cookies”. Cookies are small data packages, and do not harm your device. They are either stored temporarily for the length of a session (session cookies) or permanently (permanent cookies) stored on your device. Session cookies are deleted automatically after the end of your visit. Permanent cookies remain saved on your device until you delete them or they are deleted automatically by your web browser.

In some cases, third companies can store cookies on your device when you visit our website (third-party cookies). These allow us or you to use certain services from the third company (such as cookies to process payment services).

Cookies have different functions. Many cookies are required for technical purposes, and certain website functions will not work without them (such as the shopping basket function or displaying videos). Other cookies are used to analyse user behaviour or display advertisements.

Cookies necessary to carry out electronic communication, to provide specific functions requested by you (such as the shopping basket function) or to optimise the website (such as cookies to measure web traffic) (necessary cookies) are saved on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is indicated. The website operator has a legitimate interest in storing necessary to cookies to provide its services in a technically correct and optimised manner. If consent is requested to store cookies and comparable recognition technologies, processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and Sec. 25 para. 1 TTDSG); consent can be revoked at any time.

You can configure your browser to let you know when cookies are set, allow cookies only on a case-by-case basis, exclude cookies from being accepted in certain cases or in general, and enable automatic deletion of cookies when the browser is closed. Disabling cookies may restrict the functionality of this site.

If cookies from third companies are used or cookies are used for analytic purposes, we will inform you separately of this in this data privacy declaration and ask for your consent if necessary.

Consent with Usercentrics

This website uses consent technology from Usercentrics to obtain your consent to store certain cookies on your device or to use certain technologies, as well as to document this consent in a manner that conforms to data privacy laws. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Website: https://usercentrics.com/de/ (hereinafter referred to as “Usercentrics”).

When you visit our website, the following personal data is transmitted to Usercentrics:

• Your consent(s) or revocation of your consent(s)
• Your IP address
• Information about your browser
• Information about your device
• Time of your visit to the website

Usercentrics also stores a cookie in your browser to associate the granted consent or revocation of consent to you. The data recorded in this manner is saved until you request that it be deleted, until you delete the Usercentrics cookie yourself, or until the purpose for which data was stored no longer applies. Mandatory statutory retention periods remain unaffected.

We use Usercentrics in order to obtain consent that is required by law for the use of certain technologies. The legal basis for doing so is Art. 6 para. 1 lit. c GDPR.

Contract processing

We have concluded a contract processing agreement with the provider indicated above. This is a contract required by data protection law that ensures the personal data of our website visitors is processed only in accordance with our instructions and in compliance with the GDPR.

5. Analytics tools & advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool which we use to integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies, or complete independent analyses. It is only used to manage and implement the tools integrated through it. However, Google Tag Manager does record your IP address, which can be transmitted to the parent company of Google in the US.

We use Google Tag Manager on the basis of Article 6 para. 1. letter f GDPR. The website operator has a legitimate interest in quickly and easily integrating and managing different tools on its website. If consent has been requested in this context, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Sec. 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (such as device fingerprinting) in the sense of the TTDSG. Consent can be revoked at any time.

Google Analytics

This site uses features of the Google Analytics web analytics service. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows the website operator to analyse the behaviour of website visitors. The website operator receives a variety of usage data, such as the number of times a page was accessed, the dwell time, the user’s origin and the operating system they used. This data is combined in a user ID and associated with the website visitor’s specific device.

We can also use Google Analytics to record your mouse and scrolling movements and clicks. In addition, Google Analytics uses different modelling approaches to supplement the data sets collected, and uses machine learning technologies for data analysis as well.

Google Analytics uses technologies that make it possible to recognise users, for the purpose of analysing user behaviour (such as cookies or device fingerprinting). The information collected by Google regarding your use of this website is generally transmitted to a Google server in the USA and saved there.

We use this service based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and Sec. 25 para. 1 TTDSG. Consent can be revoked at any time.

Data is transmitted to the USA on the basis of the standard contractual clauses of the EU Commission. Further details are available here: https://privacy.google.com/businesses/controllerterms/mccs/.

Browser plug-in

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics uses user data, see Google's Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

Contract processing

We have signed a contract with Google to process orders and fully implement the strict regulations of the German data protection authorities when using Google Analytics.

6. Newsletter

Newsletter data

If you would like to receive the newsletter available via the website, we need you to provide us with an email address and information to verify that you are the owner of the email address you provide and that you agree to receive the newsletter. No additional data is collected, or such data is only collected on a voluntary basis. We use newsletter service providers to deliver the newsletter, which are described in the following section.

CleverReach

This site uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter referred to as “CleverReach”). CleverReach is a service that allows you to organise and analyse the delivery of newsletters. The data you enter in order to receive the newsletter (such as your email address) is stored on CleverReach's servers in Germany or Ireland.

Our newsletter, delivered through CleverReach, allows us to analyse the behaviour of newsletter recipients. We can analyse, for instance, how many recipients open the newsletter message and how often they click on links in the newsletter, as well as which links they click. We can also use so-called conversion tracking to analyse whether a pre-defined action (such as purchasing a product on this website) is completed after a user clicks the link in the newsletter. Further information on data analysis by CleverReach is available at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

Data processing is based on your consent (Art. 6 Par. 1 lit. a GDPR). You can unsubscribe at any time by unsubscribing from the newsletter. The legality of the data processing operations already performed is not affected by the revocation.

If you do not wish CleverReach to analyse your actions, you will have to unsubscribe. We provide a link to this in each newsletter message.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you have cancelled your subscription. This does not affect data that has been stored with us for other purposes.

Once you are removed from the newsletter distribution list, your email address may be blacklisted by us or the newsletter service provider, if this is required to prevent future mailings. The data from the blacklist is used for this purpose only and is not merged with any other data. This serves both your interests and our interests in complying with the legal requirements for sending newsletters (legitimate interest within the meaning of Article 6 Para. 1 letter f GDPR). Data is stored in the blacklist for an unlimited term. You may disagree with storage as long as your interests outweigh our legitimate interest.

For more information, see the CleverReach privacy policy at: https://www.cleverreach.com/de/datenschutz/.

Contract processing

We have concluded a contract processing agreement with the provider indicated above. This is a contract required by data protection law that ensures the personal data of our website visitors is processed only in accordance with our instructions and in compliance with the GDPR.

7. Plugins & tools

Google Fonts (local hosting)

This page uses Google fonts provided by Google for the uniform presentation of fonts. The Google fonts are installed locally. There is no connection to Google servers.

For further information on Google Fonts, see https://developers.google.com/fonts/faq and the Google data privacy policy: https://policies.google.com/privacy?hl=de.

8. Our own services

Handling applicant data

We offer you the opportunity to send us a job application (e.g. by email, postal mail, or online application form). The following information will inform you of the scope, purpose and use of your personal information collected during the application process. We guarantee that your data will be collected, processed and used in accordance with applicable data protection laws and other legal requirements, and that your data will be treated in a confidential manner.

Data collection scope and purpose

When you submit an application, we will process your personal information (e.g. contact and communication information, application documents, interview notes, etc.), as necessary to make a recruitment decision. The legal basis for this is Section 26 BDSG) in accordance with German law (initiation of an employment relationship), Art. 6 Para. 1 letter b GDPR (general initiation of a contract) and – if you have given consent – Art. 6 Para. 1 letter a GDPR. Consent can be revoked at any time. Your personal data will only be shared with people involved in processing your application within our company.

If the application is successful, the data you submitted will be stored in our data processing systems for employment purposes on the basis of Section 26 BDSG) and Art. 6 Para. 1 letter b GDPR.

Data archiving period

If we do not offer you a job, if you refuse a job offer or withdraw your application, we reserve the right to store the data submitted by you for up to 6 months from the end of the application process (rejection or withdrawal of the application) based on our legitimate interests (Art. 6 Para. 1 letter f GDPR). The data is then deleted and the physical application documents are destroyed. Archiving primarily serves verification in case of a legal dispute. If it is clear that the data will be required after the 6-month period has elapsed (e.g. due to looming or pending litigation), the data will not be deleted until the purpose for further archiving is no longer valid.

Longer archiving periods are also possible, if you have given your specific consent (Art. 6 Para. 1 letter a GDPR) or where legal archiving requirements preclude deletion.

Inclusion in the applicant pool

If we do not offer you a position, you may be included in our applicant pool. If you are included in the pool, all information and documents from the application will be adopted to the applicant pool, so that we can contact you in case of vacancies that match your profile.

Inclusion in the applicant pool is carried out solely on the basis of your explicit consent (Art. 6 para. 1 letter a GDPR). Granting your consent is voluntarily, and will not impact any ongoing application process. The data subject can revoke their consent at any time. In this case, data will be irrevocably deleted from the applicant pool, unless it is subject to a statutory retention obligation.

Data from the applicant pool will be deleted irrevocably at the latest two years after consent is granted.