Data privacy statement

In this data privacy statement, we wish to inform you about how we process your personal data on our website, including the other pages that it links to.

1. Controller

The controller with responsibility for data processing is:
Managing Director:
Dr. Michael Schnick

Kjellberg-Holding GmbH
Oscar-Kjellberg-Straße 20
03238 Finsterwalde
Germany

Phone: +49 (0) 3531 500-146
Fax: +49 (0) 3531 500-299
E-mail: holding@kjellberg.de
Website: www.kjellberg.de


Data protection officer

You can reach our data protection officer at:
Wolfram Müller

Hauptstraße 16
03238 Fischwasser
Germany

Phone: +49 (0) 3531 500-231
Fax: +49 (0) 3531 500-299
E-mail: datenschutz@kjellberg.de

 

2. Processing of personal data on our website

2.1 Provision of the website

a) Description and scope of data processing
When you visit our website at https://www.kjellberg.de, the browser used on your device automatically sends information to our website server. This information is stored temporarily in a log file. The following information is collected without any action on your part:

  • Your computer’s IP address
  • Date and time of access
  • Name and URL of the file retrieved
  • Website from which access is made (referrer URL)
  • The browser used and where applicable your computer’s operating system, and
    The name of your access provider

b) Purpose and legal basis of data processing
We process the IP address and log files for the following purposes:

  • To ensure a smooth connection to the website
  • To ensure convenient use of our website
  • To ensure system security and stability

The legal basis for data processing is point (f) of Article 6(1) GDPR (legitimate interests pursued by us as controller and website operator). The data is not analysed for marketing purposes in this context.

c) Storage period
The data set out above will be deleted as soon as it is no longer required for the purpose for which it was collected. Where the data is collected to ensure a smooth connection, this is the case when the current session has ended.

The log files are deleted after seven days. Storage beyond this period is possible, in which case the user’s IP address is deleted or anonymised by us so that any assignment of the accessing client is no longer possible.

2.2 Contact

a) Description and scope of data processing
We offer you the ability to contact us with any questions you may have. You can choose to contact us by phone, e-mail or using the contact form. In this case, the following data is processed:

  • Telephone number where applicable
  • First and last name
  • E-mail address where applicable, and
  • Your message
    The information you provide to us in the course of further contact is entirely at your discretion.

b) Purpose and legal basis of data processing
Data processing for the purpose of contacting you and responding to your request is carried out in accordance with point (b) of Article 6(1) GDPR on the basis of the prospective contract with you.

c) Storage period
The personal data set out above will be deleted once your request has been dealt with. A request is deemed to be completed when it is clear from the circumstances that the matter in question has been concluded.

2.3 Vacancies

a) Description and scope of data processing
We offer you the ability to apply for our vacancies on our website at https://jobs.kjellberg.de/de/stellenangebote.html. You can send us your application documents using the online form (“Apply now”), by e-mail to: bewerbung@kjellberg.de or by post to:

Kjellberg Finsterwalde Dienstleistungsgesellschaft mbH
Human Resources
Geschwister-Scholl-Straße 1
03238 Finsterwalde
Germany

As part of the application process, we process the following personal data:

  • Title
  • First and last name
  • Photo
  • Address, postcode, city
  • Phone number
  • E-mail
  • Date of birth
  • Cover letter
  • Curriculum vitae
  • School certificates
  • Employer’s references

b) Purpose and legal basis of data processing
Data processing is required for the implementation of the application process and the initiation of an employment relationship with you and is carried out in accordance with point (b) of Article 6(1), Article 88 GDPR in conjunction with Section 26(1) BDSG (German Federal Data Protection Act).

c) Storage period
In the event of rejection, your application documents will be kept for a period of up to six months. The date of receipt of the rejection is authoritative. This is necessary to ensure that we can defend ourselves and in the event of legal claims. After the retention period has elapsed, we will immediately delete your documents from the applicant database. If your application is accepted by us, your application documents will be stored in your personnel file.

d) Data transfer
Within our company, only individuals who are responsible for the implementation and provision of the application process will obtain access to your application documents.

2.4 Supportnet

a) Description and scope of data processing
On our website at https://support.kjellberg.de/index.php,
we offer manuals and service documents for download. Registration is required for these downloads. For initial registration, we process the following personal data:

  • Title
  • First and last name
  • Company
  • Phone number
  • E-mail
  • Language
  • Information about the machine or machines in operation
  • Information about the seller


b) Purpose and legal basis of data processing
Data processing for the purpose of user administration and the provision of manuals and service documents is carried out in accordance with point (f) of Article 6(1) GDPR. Our legitimate interest is based on the fact that we can continuously provide you with the latest manuals and service documents for our products.

c) Storage period
The personal data set out above will be processed for the duration of use of your service account. You can ask us to delete your service account at any time. To do so, please use the familiar communication channels at https://www.kjellberg.de/en/contact.html.

 

3. Tools for website analytics (Piwik PRO)

a) Description and scope of data processing
We integrate the Piwik PRO analytics suite service provided by Piwik PRO GmbH, Kurfürstendamm 21, 10719 Berlin, Germany, in the “anonymous tracking” setting on our website. Piwik PRO allows us to analyse and evaluate our website. This analysis can provide us with information about geographical origin, duration of stay or interactions with the website. Piwik PRO collects the following information about website visitors for analysis:

  • Your computer’s IP address
  • Date and time of access
  • Website from which access is made (referrer URL)
  • The browser used and where applicable your computer’s operating system
  • First-party cookies or session cookies

b) Purpose and legal basis of data processing
We integrate Piwik PRO for analysis and demand-based presentation of our website. Data processing is carried out on the basis of your consent (point (a) of Article 6(1) GDPR), which is obtained using the so-called “cookie banner” when you visit the website for the first time. If the cookie banner is not displayed, please delete all cookies in your browser settings and reload our website.

Right of withdrawal:
You can withdraw your consent without stating reasons and with effect for the future. To do this, you can either delete your cookies and use the cookie banner to select your preferences again or change them by means of a subsequent opt-out (see below: privacy settings).

 

 

 

c) Storage period
The data set out above will be deleted as soon as it is no longer required for the purpose for which it was collected. If you have consented to processing, a so-called first-party cookie with a lifespan of 13 months will be stored on your device. If you have not consented to processing, a so-called session cookie will be stored on your device, which will be deleted after 30 minutes at the latest or when you close your browser.

d) Data transfer
Data transfer to a third country does not take place and is not planned. Piwik’s server locations are in Ireland.

 

4. Other tools

4.1 OpenStreetMap

a) Description and scope of data processing
We integrate the maps provided by the “OpenStreetMap” service operated by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. To make the map material available, data required for technical purposes is processed. To enable this, the browser must establish a connection to the OpenStreetMap servers. The following personal data is then processed automatically:

  • Your computer’s IP address
  • Date and time of access
  • Website from which access is made (referrer URL)
  • The browser used and where applicable your computer’s operating system

b) Purpose and legal basis of data processing
We integrate the map service OpenStreetMap for demand-based presentation of our website. Data processing is carried out on the basis of our legitimate interest (point (f) of Article 6(1) GDPR).

c) Further information about data processing
The OpenStreetMap Foundation is responsible for further data processing. You can find further information about data processing at: https://wiki.osmfoundation.org/wiki/Privacy_Policy. You can contact the OpenStreetMap Foundation’s data protection officer by e-mail at: privacy@osmfoundation.org.

4.2 YouTube

a) Description and scope of data processing
We have embedded YouTube videos from the “YouTube” service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland on our website. The videos are stored at https://www.YouTube.com and can be played directly from our website. The videos are all embedded in “enhanced privacy mode”, which means that no data about you as a user is transferred to YouTube if you do not play the videos. When you play the videos, the information set out below is transferred. We have no influence over this data transfer.

When you watch an embedded video, YouTube is informed that you have visited the page in question on our website. In addition, the data set out in section 2.1 of this data privacy statement is sent to YouTube. This happens regardless of whether you have a YouTube user account. If you are logged in to Google, your data is assigned directly to your account. If you do not want the data to be assigned to your profile on YouTube, you will need to log out before playing the video.

YouTube stores your data as usage profiles and uses it for the purposes of advertising, market research and/or demand-based presentation of its website. Analysis of this kind is used in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, but you must contact YouTube if you want to exercise that right.

Google Ireland Limited is responsible for further data processing. You can find further information about data processing at: https://policies.google.com/privacy?hl=gb&gl=en

b) Purpose and legal basis of data processing
We integrate YouTube videos for demand-based presentation of our website. Data processing is carried out on the basis of our legitimate interest (point (f) of Article 6(1) GDPR).

c) Data transfer to a third country
Although Google Ireland is named as the controller, the possibility that Google Ireland may also transfer the personal data collected to the United States for further processing cannot be ruled out.

4.3 Polyfill

a) Description and scope of data processing
We integrate the “Polyfill” tool from The Financial Times Limited on our website. Polyfill is a Javascript that allows us to present our website consistently in a wide range of browsers. When you load a web page that uses Polyfill, your browser downloads all the snippets of code required to display the page in your browser. In order to provide the required snippets, Polyfill obtains the following information from your browser:

  • Browser used
  • Your computer’s IP address
  • Website from which access is made (referrer URL)

b) Purpose and legal basis of data processing
We integrate Polyfill for demand-based presentation of our website. Data processing is carried out on the basis of our legitimate interest (point (f) of Article 6(1) GDPR).

c) Further information about data processing
The Financial Times Limited is responsible for further data processing. You can find further information about data processing at: https://polyfill.io/v3/privacy-policy/#what-information-do-we-collect-from-the-service. You can contact the data protection officer by e-mail at: privacy.officer@ft.com.

 

5. Our social media channels

a) Description and scope of data processing
We maintain a presence on various social networks with a view to offering you information about us, showcasing our company and communicating with active users.

We do not process any personal data via the social network image logos embedded on our homepage. An active click on the logos is required to enable the background link for direct forwarding to our online presence on each of the social networks. Each of the networks process personal data when you visit them. You will find links for your information below to the privacy policies of each of the networks we use.

We would like to point out here that the data of users of social networks are usually processed by the networks for market research and advertising purposes. User profiles can be created on the basis of user behaviour. These can be used for example to serve ads, including outside the network in question.

Please also note that when you use social networks, data may be processed outside the European Union. This can entail risks for you, such as making it more difficult to assert your legal rights.

You will find a detailed description of the forms of processing and how to object (opt-out) in each case in the data privacy statements and other information provided by the operators of the networks. The most effective way to request information and assert your rights as a data subject is also with the operators themselves.

b) Types of data processed
The data that may be processed when you visit us on social networks includes contact data (e.g. e-mail, phone numbers), stored data (e.g. names, addresses, age), content data (e.g. text entries, photos, videos), usage data (e.g. websites visited, interest in content, access times) and communication data (e.g. device information, IP addresses).

When social networks provide us with statistical information about visitors to our company website, they do so in aggregated form (summarised, anonymised), and it is not possible for us to use it to identify individual users or access individual user profiles.

c) Purpose and legal basis of data processing
The presence of our company on the following social media channels allows us to share our public image more comprehensively. It also allows us to provide information about our work and contact you directly.

The legal basis for use of social media channels is our legitimate interest (point (f) of Article 6(1) GDPR).

d) Services used

XING: Social network; provider: New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany; website: https://www.xing.com/; data privacy statement: https://privacy.xing.com/en/privacy-policy; how to object: https://privacy.xing.com/en/privacy-policy/what-rights-can-you-assert/right-to-object; how to object to cookies (opt-out): https://nats.xing.com/optout.html?popup=1&locale=en_EN


Facebook: Social network; provider: Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; website https://www.facebook.com; data privacy statement: https://www.facebook.com/about/privacy/; how to object (opt-out): https://www.facebook.com/settings?tab=ads and https://www.youronlinechoices.com/

Shared responsibility with Facebook
We use the statistical information about the use of fan pages that Facebook makes available in anonymous form via the Facebook “Insights” service (visits to our website, volume of interactions, visits and average duration of video playbacks, information about the countries and cities our visitors come from, and statistics about the gender ratios of our visitors). It is not possible for us to use this information to identify individual users or access individual user profiles.

You can find more information about Facebook Insights at: https://www.facebook.com/legal/terms/information_about_page_insights_data


Instagram: Social network (a service provided by Facebook); provider Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; website https://www.instagram.com;
data privacy statement: https://help.instagram.com/519522125107875


LinkedIn: Social network; provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; website: https://www.linkedin.com/; data privacy statement: https://www.linkedin.com/legal/privacy-policy?_l=en_EN; Privacy Shield (guarantee of compliance with the European level of data protection when data is processed in the United States): https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active; how to object (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Shared responsibility with LinkedIn
We use the statistical information in connection with the use of our LinkedIn company page that LinkedIn makes available in anonymous form via the LinkedIn “Analytics” service (visits to our website, volume of interactions, information about the countries and cities our visitors come from, and statistics about the fields in which our visitors work). It is not possible for us to use this information to identify individual users or access individual user profiles.

For this reason, we and LinkedIn are considered “joint controllers” pursuant to Article 26 GDPR and we have therefore concluded an agreement governing our responsibilities as joint controllers. You can find this joint responsibility agreement at: https://legal.linkedin.com/pages-joint-controller-addendum.

Here you will find all information relevant to you as a data subject, in particular with regard to exercising your rights as a data subject.
Beyond the processing of personal data as set out in this data privacy statement, we have no influence on the processing of personal data in connection with your use of our LinkedIn company page.

For the processing of personal data via the “Page Insights” service offered by LinkedIn, LinkedIn has assumed primary responsibility. This concerns the processing of “Page Insights” data and assertion of the rights of data subjects. Please contact LinkedIn directly with regard to all obligations in connection with the processing of “Page Insights” data. Although you can exercise your rights vis-à-vis us, we will pass any requests we receive from you on to LinkedIn.


YouTube: Video portal; provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; website: https://www.youtube.com/;
data privacy statement: https://policies.google.com/privacy?hl=gb&gl=en; Personalisation of ad settings: https://adssettings.google.com/anonymous?hl=gb&sig=ACi0TCg3GYxM4vupgk5Az1hvkI6K0hsesa4e4aOpZsuZAQTgr3Lsseb6avR-dFsjt1h6cv-qeaHaXJNBnykcvG-ksj5A1ZXvtZdNggmhDn7ojdQDtceuArs&od=1;
Personalisation of privacy settings: https://myaccount.google.com/intro/privacycheckup?utm_source=pp&hl=gb


Twitter: Social network; provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; website: https://twitter.com/; data privacy statement: https://twitter.com/en/privacy; privacy settings: https://twitter.com/personalization; disabling the display of interest-based advertising: https://optout.aboutads.info/?c=2&lang=EN#%2F; use of cookies: https://help.twitter.com/en/rules-and-policies/twitter-cookies


Pinterest: Social network; provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; website: https://www.pinterest.co.uk/; data privacy statement: https://policy.pinterest.com/en/privacy-policy; use of cookies: https://policy.pinterest.com/en/cookies; privacy settings for user account: https://help.pinterest.com/en/article/edit-account-privacy; contact information for the Pinterest data protection officer: https://help.pinterest.com/en/data-protection-officer-contact-form

TikTok: Social network; provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland; website: https://www.tiktok.com/;
data privacy statement: https://www.tiktok.com/legal/privacy-policy?lang=en#section-1; contact information for the TikTok data protection officer: https://www.tiktok.com/legal/report/privacy

 

6. Your rights

You have the right to:

  • Withdraw your consent pursuant to Article 7 GDPR.
  • Obtain information about the processing of personal data concerning you pursuant to Article 15 GDPR.
  • Obtain the rectification or completion of inaccurate personal data concerning you pursuant to Article 16 GDPR.
  • Obtain the erasure of personal data concerning you pursuant to Article 17 GDPR.
  • Obtain the restriction of processing of personal data concerning you pursuant to Article 18 GDPR.
  • Receive the personal data concerning you which you have provided in a structured, commonly used and machine-readable format and transmit it to another controller pursuant to Article 20 GDPR.
  • Lodge an informal objection pursuant to Article 21 GDPR.
  • Lodge a complaint with a supervisory authority pursuant to Article 77 GDPR. To do this, please contact the competent supervisory authority.

With regard to the right to information and the right to erasure, the restrictions set out in Sections 34, 35 BDSG and the GDPR, among others, apply.

To exercise your rights, you should ideally contact our data protection officer.

 

7. Right of withdrawal

We use tools on our website for which we need your consent before any processing can take place. You can specify the details of your consent according to your preferences using our cookie banner, which appears in the lower half of the screen when you visit our site for the first time. If the cookie banner is not displayed, please delete your cookie settings in your browser settings and reload our website.

 


Last changed: October 2020.