Data Protection Declaration
We take the protection of your personal data very seriously and comply with the regulations of the data protection legislation. For example, personal data on this website is collected only to the technically-necessary extent and in order to optimise the online offer. In no case is the collected data sold or passed on to third parties for other reasons.
The following declaration gives you an overview of how we guarantee this protection, what kind of data is collected and for what purpose. In this context, we endeavour always to take account of the principles of data avoidance and data minimisation.
1. Name and address of the party responsible
Der Verantwortliche im Sinne der Datenschutz-Grundverordnung (DSGVO) und anderer nationaler Datenschutzgesetze der Mitgliedsstaaten sowie sonstiger datenschutzrechtlicher Bestimmungen ist:
UFT Produktion GmbH
Reichenbacher Str. 140 | 08468 Heinsdorfergrund
Fon: +49 3765 798-0 | E-Mail: firstname.lastname@example.org
Geschäftsführer: Josef Nöbauer
We have designed our Data Protection Declaration in accordance with the principles of clarity and transparency. If lack of clarity arises with regard to the use of various terms nevertheless, the corresponding definitions can be viewed at https://dsgvo-gesetz.de/art-4-dsgvo/.
3. Legal basis for the processing of personal data
We only process your personal data, such as your first and last names, email address, IP address, etc., if there is a statutory basis for this. Here three rules pursuant to the General Data Protection Regulation come into consideration in particular:
a) You have granted us your consent to the processing of your personal data for one or more purposes, Art. 6 paragraph 1, sentence 1 a of the GDPR. You are extensively informed in this context by us about the purpose(s) of the processing and your express consent is documented.
b) Processing your personal data is necessary for the performance of a contract or to implement pre-contractual measures with you, Art. 6 paragraph 1, sentence 1 b of the GDPR.
c) Processing the personal data is necessary for the safeguarding of our justified interests, insofar as these are not outweighed by your interests or fundamental rights and fundamental freedoms, Art. 6 paragraph 1, sentence 1 f of the GDPR.
However, we still inform you again at the respective place about the legal basis on which the processing of your personal data is taking place.
4. Passing on personal data
Your personal data is not transmitted to third parties for purposes other than those set out below. We only pass your personal data on to third parties if:
a) you have given express consent thereto pursuant to Art. 6, paragraph 1, sentence 1 a of the GDPR,
b) it is necessary to pass that data on pursuant to Art. 6, paragraph 1, sentence 1 f of the GDPR to assert, exercise or defend legal claims, and there is no reason for assuming that you have an overwhelming protection-worthy interest in the data not being passed on,
c) in the event that there is a statutory obligation to pass the data on pursuant to Art. 6, paragraph 1, sentence 1 c of the GPDR, as well as
d) this is legally permissible and necessary pursuant to Art. 6 paragraph 1, sentence 1 b of the GDPR for the execution of contract relationships with you.
5. Storage duration and deletion
We save all of the personal data which you transmit to us only as long as it is needed to fulfil the purposes for which that data was transmitted, or for as long as is prescribed by law. Upon purpose fulfilment and/or the expiry of the statutory storage periods, the data is deleted or blocked by us.
6. SSL encryption
The website of the UFT Produktion GmbH uses SSL encryption for security reasons and for the protection of the transfer of confidential contents, such as the queries which you send us as the operator of the website. You can recognise an encrypted connection by virtue of the fact that the address line of the browser changes from “http://” to “https://” and a lock symbol appears in your browser bar. If SSL encryption is activated, the data which you send to us cannot be read en route by third parties.
7. Collection and saving of personal data, as well as the type and purpose of its utilisation
a) When visiting the website
When accessing our website, information is automatically sent to our website’s server by the browser being used on your end device. This information is temporarily saved in a so-called log file. The following information is collected in that context without you doing anything, and is saved until automated deletion: IP address of the computer making the query, date and time of the access, name and URL of the file accessed, website from which the access is taking place (referrer URL), browser used, and if applicable the operating system of your computer, as well as the name of your access provider.
The data named is processed by us for the following purposes: evaluation of the system security and stability, as well as data which permits inference about your person, such as the IP address, is deleted after 7 days at the latest. Should we store the data beyond that period, that data is pseudonymized so that it is no longer possible to allocate it to you.
The legal basis for the data processing is Art. 6 paragraph 1, sentence 1 f of the GDPR. Our justified interests arise from the above-listed purposes regarding data collection. In no case do we use the data collected for the purpose of drawing conclusions about you or your identity.
b) Contact form/email contact
We make a form available to you on our website so that you are able to contact us at any time. It is necessary when using the contact form to insert a name for a personal salutation and a valid email address on which to contact you, in order that we know from whom the query has come and that we can deal with the query.
If you send us queries via the contact form, your details from that form, including the contact information supplied by you therein, as well as your IP address, will be processed pursuant to Art. 6 paragraph 1 b and f of the GDPR for the implementation of pre-contractual measures which follow in response to your query and/or for the safeguarding of our justified interests, viz. the exercise of our business activity.
You are also welcome to send us an email using the email address given on our website. In such case, we store and process your email address as well as the information supplied by you in the framework of the email pursuant to Art. 6 paragraph 1 b and f of the GDPR in order to deal with your message. The queries as well as the accompanying data are deleted 3 months after receipt at the latest, insofar as they are not required for a further/another contract relationship.
8. Forwarding (links) to websites of business partners
If the party affected makes use of the possibility via the links on our website to arrive at the website of business partners, then only the data protection declaration by the respective operator of the website is authoritative for the usage of that website. The company UFT Produktion GmbH accepts no liability for the data protection and any storage of personal data regarding the respective websites of business partners. In order to prevent misuse, the user’s IP address as well as the date and time of registration are saved. This serves to prevent misuse of the services. The data is not passed on to third parties. An exception exists if there is a statutory obligation to pass the data on.
9. Data collection on our website
b) Necessary cookies
Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
Name: 1frontend | Provider: uft.de | Purpose: Unique ID identifying the user's session. | Expiry: Session | Type: HTTP Cookie
Name: CookieConsent | Provider: uft.de | Purpose: Stores the user's consent status for cookies on the current domain. | Expiry: 1 year | Type: HTTP Cookie
10. Analysis and tracking tools
We do not use analysis and tracking tools on our website.
11. Rights of the parties affected
Pursuant to Art. 15 of the GPDR, you have the right to request information about your personal data processed by us. This information right encompasses information about the processing purposes, the categories of personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage duration or at least the criteria for determining the storage duration, the existence of a right to correction, deletion, restriction of the processing, or objection, the existence of a right to complain to a supervisory authority, the origin of your personal data if it was not collected by us, as well as about the existence of automatized decision-making, including profiling and - where applicable - meaningful information about its/their details.
You are entitled pursuant to Art. 16 of the GDPR to a right to prompt correction of incorrect or incomplete data saved by us.
You have the right to request prompt deletion of your personal data by us insofar as further processing is not necessary due to one of the following reasons: to exercise the right to free expression of opinion and information; to fulfil a legal obligation which requires processing pursuant to the law of the Union or the member states to which the party responsible is subject, or to perform a task which is in the public interest or in exercise of public authority which has been transferred to the party responsible; for reasons of public interest in the area of public health pursuant to Art. 9 paragraph 2 h and I as well as Art. 9 paragraph 3 of the GDPR; for archive purposes in the public interest, scientific or historic research purposes, or for statistical purposes pursuant to Art. 89 paragraph 1 of the GDPR, insofar as the right named in a) probably makes realisation of the aims of this processing impossible or seriously detrimentally impacts thereon, or for the assertion, exercise or defence of legal claims.
d) Processing restriction
Pursuant to Art. 18 of the GDPR you can request restriction of the processing of your personal data for one of the following reasons: You dispute the correctness of your personal data. The processing is unlawful and you refuse the deletion of the personal data. We no longer require the personal data for the purposes of the processing but you require it for the assertion, exercise or defence of legal claims. You file an objection to the processing pursuant to Art. 21 paragraph 1 of the GDPR.
When you have requested the correction or deletion of your personal data or a restriction of processing pursuant to Art. 16, Art. 17 paragraph 1 and Art. 18, we communication this to all recipients to whom your personal data has been disclosed, unless this proves to be impossible or is associated with disproportionate time, work and/or expense. You can ask us to tell you who these recipients are.
You have the right to receive in a structured, common and machine-readable format your personal data which you have provided to us. You also have the right to request transmission of this data to a third party insofar as the processing was done with the assistance of automated processes and is based on a consent pursuant to Art. 6 paragraph 1 a or Art. 9 paragraph 2 a or on a contract pursuant to Art. 6 paragraph 1 b.
You have the right pursuant to Art. 7 paragraph 3 of the GDPR to declare revocation of your consent to us at any time. The revocation does not affect the lawfulness of the processing which took place on the basis of the consent until the revocation. In future we may no longer continue the data processing which was based on your revoked consent.
Pursuant to Art. 77 of the GDPR, you have the right to complain to a supervisory authority when you are of the view that the processing of your personal data breaches the GDPR.
Insofar as your personal data is being or will be processed on the basis of justified interests pursuant to Art. 6 paragraph 1 sentence 1 f of the GDPR, you have the right pursuant to Art. 21 of the GDPR to file an objection to the processing of your personal data insofar as there are reasons for this which arise from your special situation or the objection is directed against direct advertising. In the latter case, you have a general objection right, which will be implemented by us without citing a special situation. If you would like to make use of your revocation or objection right, an email to email@example.com is sufficient.
j) Automated decision in the individual case, including profiling
You have the right not to be subject to decisions exclusively based on automated processing - including profiling - which have legal effect against you or which substantially detrimentally impact on you in another way. This does not apply if the decision is necessary for entry into or performance of a contract between you and us, is permissible due to legal provisions of the Union or the member states to which we are subject, and these legal provisions contain reasonable measures to safeguard your rights and freedoms as well as your justified interests or take place with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 paragraph 1 of the GDPR, insofar as Art. 9 paragraph 2 a or g does not apply and reasonable measures have not been taken to protect the rights and freedoms as well as your justified interests. With regard to the cases named in a) and c) above, we take reasonable measures in order to safeguard the rights and freedoms as well as your justified interests, which includes at least the right to obtain intervention by a person on our side, to present the party's own point of view and to contest the decision.
12. online job applications | publication of job advertisements
We offer you the opportunity to apply for a job via our website. In the case of these digital applications, your applicant and application data will be collected and processed electronically by us for the purpose of handling the application process. The legal basis for this processing is § 26 para. 1 p. 1 BDSG in conjunction with. Art. 88 para. 1 DSGVO. If an employment contract is concluded after the application process, we will store the data you submitted during the application in your personnel file for the purpose of the usual organisational and administrative process - of course in compliance with the more extensive legal obligations.
The legal basis for this processing is also § 26 para. 1 p. 1 BDSG in conjunction with. Art. 88 para. 1 DSGVO. If an application is rejected, we automatically delete the data provided to us two months after notification of the rejection. However, the deletion does not take place if the data requires longer storage of up to four months or until the conclusion of legal proceedings due to legal provisions, e.g. due to the obligation to provide evidence according to the AGG. In this case, the legal basis is Art. 6 para. 1 lit. f) DSGVO and § 24 para. 1 no. 2 BDSG. Our legitimate interest lies in the legal defence or enforcement.
If you expressly consent to your data being stored for a longer period of time, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed on the basis of your consent. The legal basis is then Art. 6 para. 1 lit. a) DSGVO. However, you can of course revoke your consent at any time in accordance with Art. 7 Para. 3 DSGVO by making a declaration to us with effect for the future.
13. Amending the Data Protection Declaratio
If we amend the Data Protection Declaration, then this will be announced on the homepage.
As of: 24. July 2020