Data Protection

1. Data Protection at a Glance

General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy set out below this text.

Data collection on this website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the ‘Information on the Data Controller’ section of this privacy policy.

How do we collect your data?
Your data is collected, on the one hand, when you provide it to us. This may include, for example, data that you enter into a contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This consists primarily of technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you access this website.

What do we use your data for?
Some of the data is collected to ensure the website functions correctly. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?
You have the right at any time to obtain, free of charge, information about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given your consent to data processing, you may withdraw this consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.

You are welcome to contact us at any time regarding this matter or any other questions you may have about data protection.

Analytics tools and third-party
tools When you visit this website, your browsing behaviour may be analysed statistically. This is primarily carried out using so-called analytics programmes.
Detailed information on these analytics programmes can be found in the following privacy policy.

2. Hosting and Content Delivery Networks (CDN)

External hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may primarily include IP addresses, contact enquiries, metadata and communication data, contractual data, contact details, names, website visits and other data generated via a website.

The use of the hosting provider is for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Article 6(1)(b) of the GDPR) and in the interest of ensuring the secure, fast and efficient provision of our online services by a professional provider (Article 6(1)(f) of the GDPR).

Our hosting provider will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data.

We use the following hosting provider:

Mittwald CM Service GmbH & Co. KG
Koenigsberger Strasse 4-6
32339 Espelkamp

Conclusion of a data processing
agreement To ensure that data is processed in accordance with data protection regulations, we have concluded a data processing agreement with our hosting provider.

3. General information and mandatory notices

Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various categories of personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. It is not possible to guarantee complete protection of data against access by third parties.

Information on the data controller
The data controller responsible for data processing on this website is:

Schuchmann GmbH & Co. KG
Rudolf-Runge-Straße 3
49143 Bissendorf

Telephone: +49 (0) 54 02 / 4071 – 0
Email: info@schuchmann.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Retention period
Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for which the data is processed no longer applies. If you submit a valid request for erasure or withdraw your consent to data processing, your data will be erased, provided we have no other legally permissible grounds for retaining your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these grounds no longer apply.

Statutory Data Protection Officer
We have appointed a Data Protection Officer for our company.

Dipl.-Kfm. Björn Voitel
DSO Datenschutz Osnabrück GmbH
Mercatorstr. 11
49080 Osnabrück

Telephone: +49(0)541/60081631
Email: bv@dso-datenschutz.de

Note on data transfers to the USA and other third countries
Our website incorporates, amongst other things, tools from companies based in the USA or other third countries that do not offer a level of data protection comparable to that of the EU. When these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in these countries. For example, US companies are obliged to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g. intelligence services) may process, analyse and permanently store your data held on US servers for surveillance purposes. We have no influence over these processing activities.

Withdrawal of your consent to data processing
Many data processing operations are only possible with your explicit consent. You may withdraw any consent you have already given at any time. The lawfulness of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.

Right to object to data collection in specific cases and to direct marketing (Article 21 of the GDPR)
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ARTICLE 6(1)( E OR F OF THE GDPR, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21(1) OF THE GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSES OF DIRECT MARKETING (OBJECTION PURSUANT TO ARTICLE 21(2) OF THE GDPR).

Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place where the alleged infringement occurred. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another data controller, this will only take place to the extent that it is technically feasible.

SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator. You can recognise an encrypted connection by the fact that the address bar of your browser changes from ‘http://’ to ‘https://’ and by the padlock icon in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Access, erasure and rectification
In accordance with the applicable legal provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, the right to have this data rectified or erased. You may contact us at any time regarding this or any other queries relating to personal data.

Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time regarding this. The right to restriction of processing applies in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of this verification, you have the right to request that the processing of your personal data be restricted.
If the processing of your personal data has been or is being carried out unlawfully, you may request the restriction of data processing instead of erasure.
If we no longer require your personal data, but you require it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
If you have lodged an objection under Article 21(1) of the GDPR, a balancing of interests between yours and ours must be carried out. Until it has been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data – apart from its storage – may only be processed with your consent or for the purposes of asserting, exercise or defence of legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a Member State.

4. Data collection on this website

Cookies
Our website uses so-called ‘cookies’. Cookies are small text files and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.

In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These enable us or you to use certain services provided by the third-party company (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to analyse user behaviour or to display advertising.

Cookies that are required to carry out the electronic communication process (necessary cookies), to provide specific functions you have requested (functional cookies, e.g. for the shopping basket function) or to optimise the website (e.g. cookies for measuring website traffic) are stored on the basis of Article 6(1)(f) of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to ensure the technically fault-free and optimised provision of its services. Where consent to the storage of cookies has been requested, the relevant cookies are stored exclusively on the basis of this consent (Article 6(1)(a) of the GDPR); consent may be withdrawn at any time.

You can configure your browser so that you are notified when cookies are set and can choose to allow cookies only on a case-by-case basis, block the acceptance of cookies in specific cases or generally, and enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be restricted.

Where cookies are used by third parties or for analytical purposes, we will inform you of this separately within this privacy policy and, where necessary, seek your consent.

Cookie consent with Borlabs Cookie
Our website uses the cookie consent technology provided by Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser and to document this in accordance with data protection regulations. The provider of this technology is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (hereinafter ‘Borlabs’).

When you visit our website, a Borlabs cookie is stored in your browser, which records the consents you have given or any withdrawal of these consents. This data is not passed on to the provider of Borlabs Cookie.

The data collected is stored until you request its deletion, delete the Borlabs cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by the Borlabs cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Borlabs Cookie Consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6(1)(c) of the GDPR.

Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not combined with other data sources.

This data is collected on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in ensuring the technically error-free display and optimisation of its website – to this end, the server log files must be recorded.

Contact form
If you send us enquiries via the contact form, the details you provide in the enquiry form – including the contact details you have entered there – will be stored by us for the purpose of processing your enquiry and in the event of any follow-up questions. We will not pass on this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that this has been requested.

The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Enquiries by email, telephone or fax
If you contact us by email, telephone or fax, your enquiry, including all personal data contained therein (name, enquiry), will be stored and processed by us for the purpose of dealing with your request. We will not disclose this data without your consent.

The data you send to us via contact enquiries will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

5. Analytics tools and advertising

Google Analytics
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the site, operating systems used and the user’s origin. Where applicable, Google may compile this data into a profile assigned to the respective user or their device.

Google Analytics uses technologies that enable the user to be recognised for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google regarding the use of this website is generally transmitted to a Google server in the USA and stored there.

The use of this analytics tool is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. Where consent has been sought (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be withdrawn at any time.

Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymisation
We have enabled the IP anonymisation feature on this website. This means that your IP address is truncated by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other data held by Google.

Browser plug-in
You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Further information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data Processing
We have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.

Demographic features in Google Analytics
This website uses the ‘demographic features’ function of Google Analytics to display relevant adverts to website visitors within the Google advertising network. This enables reports to be generated that contain information on the age, gender and interests of site visitors. This data is derived from Google’s interest-based advertising and from visitor data provided by third parties. This data cannot be linked to any specific individual. You can disable this feature at any time via the ad settings in your Google Account, or generally prevent Google Analytics from collecting your data as described in the section ‘Objecting to data collection’.

Retention
period Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android Advertising ID), are anonymised or deleted after 14 months. Further details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de

Google Ads
The website operator uses Google Ads. Google Ads is an online advertising programme provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display adverts in the Google search engine or on third-party websites when users enter specific search terms into Google (keyword targeting). Furthermore, targeted adverts can be displayed based on user data held by Google (e.g. location data and interests) (audience targeting). As the website operator, we can evaluate this data quantitatively, for example by analysing which search terms led to our adverts being displayed and how many adverts resulted in corresponding clicks.

The use of Google Ads is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in marketing its services and products as effectively as possible.

Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

Google Conversion Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, Google and we can determine whether the user has carried out specific actions. For example, we can analyse which buttons on our website are clicked and how often, and which products have been viewed or purchased particularly frequently. This information is used to compile conversion statistics. We are informed of the total number of users who have clicked on our adverts and the actions they have taken. We do not receive any information that would allow us to personally identify the user. Google itself uses cookies or similar recognition technologies for identification purposes.

The use of Google Conversion Tracking is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. Where consent has been sought (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be withdrawn at any time.

Further information on Google Conversion Tracking can be found in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.

6. Newsletter

Newsletter data
If you wish to subscribe to the newsletter offered on the website, we require your email address and information that enables us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No further data is collected, or is collected only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter subscription form is carried out solely on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw your consent to the storage of your data and email address, and to their use for sending the newsletter, at any time, for example via the ‘Unsubscribe’ link in the newsletter. The lawfulness of any data processing operations that have already taken place remains unaffected by this withdrawal.

The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter, and will be deleted from the newsletter distribution list once you have unsubscribed or once the purpose for which it was collected no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion, in accordance with our legitimate interest under Article 6(1)(f) of the GDPR.

After you unsubscribe from the newsletter distribution list, your email address may be stored on a blacklist by us or the newsletter service provider to prevent future mailings. The data from the blacklist is used solely for this purpose and is not combined with any other data. This serves both your interests and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Article 6(1)(f) of the GDPR). There is no time limit on storage on the blacklist. You may object to this storage provided that your interests override our legitimate interest.

Sendinblue
This website uses Sendinblue to send newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Sendinblue is a service that can be used, amongst other things, to organise and analyse the sending of newsletters. The data you provide for the purpose of subscribing to the newsletter is stored on Sendinblue’s servers in Germany.

Data analysis by Sendinblue
Sendinblue enables us to analyse our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links, if any, have been clicked. This allows us, amongst other things, to identify which links have been clicked particularly frequently.

We can also see whether certain predefined actions were carried out after the newsletter was opened or a link was clicked (conversion rate). For example, we can see whether you made a purchase after clicking a link in the newsletter.

Sendinblue also enables us to categorise newsletter recipients into different groups (‘cluster’ them). Newsletter recipients can, for example, be categorised by age, gender or place of residence. This allows us to tailor the newsletters more effectively to the respective target groups.

If you do not wish to be included in Sendinblue’s analysis, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message.

For detailed information on Sendinblue’s features, please refer to the following link: https://de.sendinblue.com/newsletter-software/.

Legal
basis Data processing is carried out on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw this consent at any time. The lawfulness of any data processing operations that have already taken place remains unaffected by the withdrawal.

Retention
period The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter, and will be deleted from the newsletter distribution list once you have unsubscribed. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, your email address may be stored on our systems or those of the newsletter service provider in a blacklist, if necessary, to prevent future mailings. The data from the blacklist is used solely for this purpose and is not combined with any other data. This serves both your interests and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Article 6(1)(f) of the GDPR). There is no time limit on storage on the blacklist. You may object to this storage provided that your interests override our legitimate interest.

For further details, please refer to Sendinblue’s privacy policy at: https://de.sendinblue.com/datenschutz-uebersicht/.

Conclusion of a data processing
agreement We have entered into a contract with Sendinblue in which we oblige Sendinblue to protect our customers’ data and not to disclose it to third parties.

7. Plugins and tools

Google Maps
This website uses the Google Maps mapping service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this website has no influence over this data transfer. When Google Maps is activated, Google may use Google Web Fonts for the purpose of ensuring consistent font display. When you access Google Maps, your browser loads the required web fonts into its cache to display text and fonts correctly.

The use of Google Maps is in the interests of presenting our online services in an appealing manner and ensuring that the locations specified on our website can be easily found. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Where consent has been sought, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be withdrawn at any time.

Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

Further information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google reCAPTCHA
We use ‘Google reCAPTCHA’ (hereinafter ‘reCAPTCHA’) on this website. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is designed to verify whether data entry on this website (e.g. in a contact form) is carried out by a human or by an automated programme. To this end, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor accesses the website. For the purposes of the analysis, reCAPTCHA evaluates various pieces of information (e.g. IP address, the length of time the website visitor spends on the website, or the mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.

The storage and analysis of the data are carried out on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in protecting its web services from abusive automated surveillance and from spam. Where consent has been sought, processing takes place exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be withdrawn at any time.

For further information on Google reCAPTCHA, please refer to Google’s Privacy Policy and Terms of Service via the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

Borlabs Cookie
This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents.

The Borlabs cookie does not process any personal data.

The ‘borlabs-cookie’ stores the consents you gave when you first accessed the website. If you wish to withdraw these consents, simply delete the cookie from your browser. When you access or reload the website, you will be asked to give your cookie consent again.

Wordfence Security Plugin
This website is secured using the ‘Wordfence Security’ service, which is operated by Defiant Inc., 800 5th Ave., Suite 4100, Seattle, WA 98104, USA. This service is used on the basis of legitimate interest within the meaning of the GDPR.

The website uses Wordfence Security to protect against viruses and malware and to defend against attacks by criminals. The plugin sets cookies to detect whether the website is actually being visited by a person or by a bot. For the purpose of protection against so-called brute-force attacks (numerous automated login attempts using the same credentials) or against hacker-generated comment spam, IP addresses are stored on the Wordfence servers. IP addresses classified as harmless are placed on a whitelist. Wordfence Security secures this website and thereby also protects visitors to the website from viruses and malware. This constitutes a legitimate interest within the meaning of the GDPR. The plugin’s ‘Live Traffic View’ option is limited to security-related listings.

Further information on the collection and use of data by Wordfence Security can be found in the provider’s privacy policy: https://www.wordfence.com/privacy-policy/.

Font Awesome (locally hosted)
This site uses Font Awesome to ensure consistent font display. Font Awesome is installed locally. No connection is made to servers operated by Fonticons, Inc.
Further information on Font Awesome can be found in the Font Awesome privacy policy at: https://fontawesome.com/privacy

8. Our own services

Handling of applicant data
We offer you the opportunity to apply for a job with us (e.g. by email, post or via the online application form). Below, we provide information on the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing and use of your data are carried out in accordance with applicable data protection law and all other statutory provisions, and that your data will be treated as strictly confidential.

Scope and purpose of data collection
When you submit an application to us, we process your associated personal data (e.g. contact and communication details, application documents, notes taken during interviews, etc.), to the extent necessary to decide whether to enter into an employment relationship. The legal basis for this is Section 26 of the BDSG-neu under German law (initiation of an employment relationship), Article 6(1)(b) of the GDPR (general pre-contractual processing) and – provided you have given your consent – Article 6(1)(a) of the GDPR. You may withdraw your consent at any time. Your personal data will be disclosed within our company exclusively to those persons involved in processing your application.

If your application is successful, the data you have submitted will be stored in our data processing systems on the basis of Section 26 of the BDSG-neu and Article 6(1)(b) of the GDPR for the purpose of carrying out the employment relationship.

Data retention period
If we are unable to make you a job offer, if you decline a job offer or if you withdraw your application, we reserve the right to retain the data you have provided on the basis of our legitimate interests (Article 6(1)(f) of the GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. The data is retained in particular for evidential purposes in the event of a legal dispute. If it is apparent that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), the data will not be deleted until the purpose for its continued retention no longer applies.

Data may also be retained for a longer period if you have given your consent (Art. 6(1)(a) GDPR) or if statutory retention obligations prevent deletion.

9. Our social media presence

Data processing by social networks
We maintain publicly accessible profiles on social networks. The specific social networks we use are listed below.
Social networks such as Facebook, Twitter, etc. can generally analyse your user behaviour in detail when you visit their website or a website featuring integrated social media content (e.g. ‘Like’ buttons or advertising banners). Visiting our social media pages triggers numerous data-processing operations relevant to data protection. Specifically:
if you are logged into your social media account and visit our social media page, the operator of the social media portal can link this visit to your user account. However, your personal data may also be collected even if you are not logged in or do not have an account with the relevant social media platform. In this case, data collection takes place, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media platforms can create user profiles that record your preferences and interests. In this way, interest-based advertising may be displayed to you both on and off the respective social media platform. If you have an account with the relevant social network, interest-based advertising may be displayed on all devices on which you are logged in or have previously been logged in.
Please also note that we are not able to track all data processing activities on the social media platforms. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media platforms. For details, please refer to the terms of use and privacy policies of the respective social media platforms.

Legal basis
Our social media presence is intended to ensure the most comprehensive online presence possible. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. The analysis processes initiated by the social networks may be based on different legal grounds, which must be specified by the operators of the social networks (e.g. consent within the meaning of Article 6(1)(a) of the GDPR).

Data controller and exercising your rights
When you visit one of our social media platforms (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by that visit. In principle, you may exercise your rights (right of access, rectification, erasure, restriction of processing, data portability and the right to lodge a complaint) both against us and against the operator of the relevant social media platform (e.g. against Facebook).
Please note that, despite our joint responsibility with the social media platform operators, we do not have full control over the data processing operations carried out by the social media platforms. Our options depend largely on the corporate policy of the respective provider.

Retention
period Data collected directly by us via our social media presence is deleted from our systems as soon as you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.
We have no influence over the retention period of your data stored by the operators of social networks for their own purposes. For further details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social networks in detail

Facebook
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter ‘Meta’). According to Meta, the data collected is also transferred to the USA and other third countries.
We have entered into a joint processing agreement (Controller Addendum) with Meta. This agreement sets out which data processing operations we and Meta are responsible for when you visit our Facebook page. You can view this agreement via the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in: www.facebook.com/settings.
Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
Please refer to Facebook’s privacy policy for further details: https://www.facebook.com/about/privacy/.

Instagram
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
For details on how Instagram handles your personal data, please refer to Instagram’s privacy policy: https://help.instagram.com/519522125107875.

XING
We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. For details on how they handle your personal data, please refer to XING’s privacy policy: privacy.xing.com/de/datenschutzerklaerung.

LinkedIn
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you wish to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Further details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
For details on how LinkedIn handles your personal data, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on how they handle your personal data, please refer to YouTube’s privacy policy: https://policies.google.com/privacy?hl=de.

10. Privacy Notice – Microsoft Office 365 Teams

We use the Microsoft Office 365 Teams video conferencing system for communication over the internet. Below, we provide information on the processing of your personal data when using Teams.

10.1. Data controller and data protection officer
The data controller within the meaning of Article 4(7) of the GDPR is:

Schuchmann GmbH & Co. KG
Rudolf-Runge-Straße 3
49143 Bissendorf
Telephone: +49 (0) 54 02 / 4071 – 0
Email: info@schuchmann.de

You can contact our Data Protection Officer as follows:
bv@dso-datenschutz.de

10.2. Processing of personal data

In the context of our online meetings using Microsoft Teams, we process the following personal data:

Communication data (e.g. your email address, if you provide this personally)
Personal master data (if you provide it)
Log files, log data
Metadata (e.g. IP address, time of participation, etc.)
Profile data (e.g. your username, if you provide it voluntarily)

Chat content is logged when using Microsoft Teams. Files that users share in chats are stored in the OneDrive for Business account of the user who shared the file. Files that team members share in a channel are stored on the team’s SharePoint site.

10.3. The Microsoft Teams
service Microsoft Teams is a product in the Microsoft Office 365 suite, and Microsoft Office 365 is software provided by Microsoft Ireland Operations Limited:

Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park Leopardstown
Dublin 18
D18 P521 Ireland

The video conferencing feature of Microsoft Teams enables us to offer you the option to participate in our meetings and online events via video and audio. We do not record Microsoft Teams online events and meetings unless we have obtained your consent in advance.

Who can see your audio and video feeds depends on the Teams mode we are using:

Live events:
For live events, we do not permit participants to share audio or video in order to preserve anonymity.

Teams meetings:
In Teams meetings, all participants can configure their own audio and video settings. We cannot definitively rule out or prevent unauthorised processing by other participants, for example through a recording of the meeting.

Transcription:
We use AI applications that analyse the content of the meeting or webinar using artificial intelligence and generate an automatic transcript and summary. This process also involves the processing of your name, your attendance and any comments made during the meeting. In doing so, the data is also transmitted to Microsoft.
If we record a webinar or video conference, this is done with your prior consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw this consent at any time with future effect.

Speech suppression / Voice recognition
Voice registration is a feature in Microsoft Teams that allows users to create a voice profile. Voice recognition is used to improve the audio quality and user experience of Teams meetings and calls. This feature helps to reduce background noise and secondary speakers. The voice profile is used to suppress background noise in Teams meetings by isolating voices. This functionality is disabled by default for all users. If a user wishes to use this functionality, they must take active steps to enable it themselves. The user is asked to read out a standardised text; the voice profile is configured on the basis of this text. The user can delete their voice profile at any time.

The legal basis for the processing is your prior consent in accordance with Article 6(1)(a) of the GDPR. The use of facial recognition is not envisaged and is not permitted.

Data processing with Office 365 is carried out on our behalf on servers in data centres within the European Union, in Ireland and the Netherlands.

Transfers to third countries
For the purpose of remote maintenance, Microsoft may request remote access. We will assess and authorise such access on a case-by-case basis, provided it is necessary for Microsoft to carry out support services (e.g. for troubleshooting). In such cases, this access may also be granted by Microsoft’s affiliated companies from outside the European Union. We have entered into standard contractual clauses with Microsoft exclusively for this specific scenario of access from outside the European Union, as authorised by us on a case-by-case basis. A copy of Microsoft’s Standard Contractual Clauses can be found in the Microsoft Terms of Use for Online Services (“MicrosoftOnlineServicesTerms”), the latest version of which is available in your language via the following link:
https://www.microsoftvolumelicensing.com/DocumentSearch.aspx?Mode=3&DocumentTypeId=31.

Data processing by Microsoft
for its own purposes In accordance with its Privacy Statement, Microsoft reserves the right to process customer data for its own legitimate business purposes. We have no influence over such data processing by Microsoft. To the extent that Microsoft Teams processes personal data in connection with its legitimate business purposes, Microsoft is the independent data controller for these data processing activities and, as such, is responsible for compliance with all applicable data protection regulations. If you require information about Microsoft’s processing activities, please refer to Microsoft’s relevant statement:
https://privacy.microsoft.com/de-de/privacystatement.

10.4. Purpose and legal basis

a) Team Meetings:
In the case of Team Meetings, we carry out the data processing activities set out in sections 2 and 3 on the basis of a legitimate interest pursuant to Article 6(1)(f) of the GDPR. The purpose and legitimate interest of this data processing is: to provide means of communication with our employees, customers, business partners and prospective clients via the internet, as well as for internal coordination.

b) Live events:
We carry out the data processing described in sections 2 and 3 in connection with the organisation of a live event on the basis of a legitimate interest pursuant to Article 6(1)(f) of the GDPR. The purpose and legitimate interest of this data processing is: the organisation of live events by us, e.g. webinars on our products and services, specialist information or training courses.

10.5. Duration of data
storage Data is deleted as part of the regular archiving process. However, this does not apply where we deploy Teams as part of active projects. In such cases, data is not deleted before the expiry of the statutory limitation period.

10.6. Your rights under the GDPR

a) Right of access
Upon request, you may at any time obtain, free of charge, information about all personal data we hold about you.

b) Rectification, erasure, restriction of processing (blocking), Objection
: Should you no longer consent to the storage of your personal data, or should such data have become inaccurate, we will, upon your instruction, arrange for the erasure or blocking of your data or make the necessary corrections (insofar as this is possible under applicable law). The same applies if we are to process your data only on a restricted basis in future. You have a right to object, in particular, in cases where your data is required for the performance of a task carried out in the public interest or on the basis of our legitimate interests, as well as in relation to profiling based on such grounds. You also have such a right to object in the event of data processing for the purposes of direct marketing.

c) Data portability
Where data processing is carried out on the basis of a contract, pre-contractual negotiations, consent or by means of automated processes, you have the right to data portability. Upon request, we will provide you with your data in a commonly used, structured and machine-readable format, so that you can, if you wish, transfer the data to another data controller.

d) Right to withdraw consent with future
effect You may withdraw any consent you have given at any time with future effect. Withdrawing your consent does not affect the lawfulness of the processing carried out up to the point of withdrawal.

e) Right to lodge a complaint
You also have the option to lodge a complaint with the supervisory authority responsible for us regarding your data subject rights.

f) Restrictions
Data for which we are unable to identify the data subject – for example, where it has been anonymised for analytical purposes – is not covered by the above rights. Access, erasure, restriction, rectification or transfer to another organisation may be possible in relation to such data if you provide us with additional information that enables us to identify you.

If you have any queries, please feel free to contact datenschutz@schuchmann.de at any time.