Privacy policy according to GDPR

The following data protection declaration applies to the use of our website.

We attach great importance to data protection. The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (DSGVO). We collect and process your personal data in order to be able to offer you the above-mentioned portal. This statement describes how and for what purpose your data is collected and used and what choices you have in connection with personal data.

By using this website, you consent to the collection, use and transfer of your data in accordance with this privacy policy.

1 Responsible party

The responsible party for the collection, processing and use of your personal data within the meaning of the DSGVO is

Mr. Jan Richter
G.E.O.S. Engineering Company Ltd.
Black pines 2
09633 Halsbrücke

Phone: +49 (0)3731 369-0
E-mail: info@geosfreiberg.de

If you wish to object to the collection, processing or use of your data by us in accordance with these data protection provisions, either in whole or in respect of individual measures, you may address your objection to the above-mentioned responsible office.

You can save and print out this data protection declaration at any time.

2 Data protection officer

We have appointed an internal data protection officer in our company. You can reach him under the following contact details:

Mr. Martin Pohl
G.E.O.S. Engineering Company Ltd.
Schwarze Kiefern 2
09633 Halsbrücke

Tel.: +49 (0)3731 369-149
E-Mail: datenschutz@geosfreiberg.de

3 General use of the website

3.1 Access data

We collect information about you when you use this website. We automatically collect information about your usage behaviour and your interaction with us and register data about your computer or mobile device. We collect, store and use data about each access to our online offer (so-called server log files). The access data includes

        Name and URL of the file accessed
        date and time of access
        amount of data transferred
        message about successful retrieval (HTTP response code)
        browser type and version, operating system
        Referrer URL (i.e. the previously visited page)
        IP address and the requesting provider.

We use this protocol data without assigning it to you personally or otherwise profiling it for statistical evaluations for the purpose of the operation, security and optimisation of our online offer, but also for the anonymous recording of the number of visitors to our website (traffic) as well as the scope and type of use of our website and services. Based on this information, we can analyse the data traffic, search for and correct errors and improve our services. We reserve the right to check the log data retrospectively if there is a justified suspicion of unlawful use on the basis of concrete indications. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for the provision of services or the billing of a service, e.g. if you use one of our offers. We also store IP addresses if we have a concrete suspicion of a criminal offence in connection with the use of our website.

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO.

3.2 Matomo

For statistical analysis, we use the open source application Matomo (formerly PIWIK) on this website for web analysis. Matomo is deactivated when you visit our website. Only if you actively agree, your usage behaviour will be recorded anonymously.

Matomo uses so-called cookies. These are text files that are stored on your computer and enable an analysis of your use of the website. For this purpose, the information obtained through the cookie is transferred to our server and stored so that the usage behaviour can be evaluated.

Your IP address is immediately anonymised so that you remain anonymous as a user. The information generated by the cookie about your use of this website is not passed on to third parties.

We understand this procedure as part of our service. The data obtained in this way helps us to improve the website and to adapt it to the needs of users in the future.

If you agree to the web analysis with Matomo, the following data will be collected when you call up individual pages of our website:

3.3 Google Maps

This website uses Google Maps to display interactive maps and to create directions. Google Maps is a mapping service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, will be transmitted to Google in the USA.

When you call up a web page on our website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser, which then integrates it into the website. We therefore have no influence on the scope of the data collected by Google in this way. According to our knowledge, this is at least the following data:

        Date and time of the visit to the website in question,
        Internet address or URL of the website accessed,
        IP address, (start) address entered as part of route planning.

We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for this. If you do not wish Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display.

The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this respect and setting options for protecting your privacy, can be found in Google's data protection information (https://policies.google.com/privacy?hl=de).

By using our website, you consent to the processing of data about you by Google Maps in the manner and for the purposes set out above.

3.4 YouTube

Some of the articles on our website contain YouTube videos. In principle, these are integrated in the extended data protection mode, so that initially no cookies are transferred to your browser by YouTube and therefore no information is stored by YouTube. However, this only applies as long as the videos are not viewed.

If you are logged in to YouTube with an existing user account at the same time as visiting our website, YouTube may also be able to associate your visit to our website with your user behaviour.

If you are logged into YouTube at the same time, the operator of YouTube will learn more about your internet behaviour. If you do not wish this, please log out of YouTube beforehand.

We would like to point out that we, as the provider of our websites, have no knowledge of the content of the transmitted data or its use by YouTube, nor do we have any possibility of further restricting the transmission of data to YouTube and its partners.

We would like to point out that we use YouTube API services to offer the best possible user experience in connection with YouTube on our website. The terms of use of the YouTube API services form the basis of this offer. You can view them here https://www.youtube.com/t/terms.

The operator is YouTube LLC (a subsidiary of Google LLC) with headquarters at 901 Cherry Ave, San Bruno, CA 94066, USA.

The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy, can be found in Google's privacy policy (https://policies.google.com/privacy?hl=de).

3.5 Applications / application form

What data is processed and for what purpose?
We process the data you have sent us in connection with your application for the purpose of contacting you, checking your suitability for the position (or, if applicable, another vacant position in our companies) and carrying out the application process. This may include:
Contact details (e.g. name, company, address, telephone number).
Curriculum vitae data (e.g. school-leaving qualifications)
Data on school / training qualifications
Personal evidence / attendance certificates / certificates

On what legal basis is the procedure based?
The data processing is based on Art. 88 DSGVO in conjunction with. § 26 BDSG for the purposes stated. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible.

Alternatively, data processing is carried out on the basis of Art. 6 para. 1 lit. a DSGVO with your consent. In addition, processing may be carried out to protect legitimate interests in accordance with Art. 6 (1) (f) DSGVO.

To which recipients is your data passed on?
Within the company, only those departments and persons have access to your data who need it to process your application. In addition to the managing director, these include the HR department, the works council and, if applicable, a senior employee (head of department) associated with the vacant position.

Where is your data processed?
Your data will be processed exclusively in computer centres in the Federal Republic of Germany. Applications in paper form are not recorded and processed electronically.

How long will your data be stored?
The personal data collected by us for the application process will be deleted or destroyed after 6 months in the event of a rejection, unless you have consented to data processing in accordance with Art. 6 Para. 1 lit. a DSGVO.

3.6 E-mail contact

If you contact us (e.g. by contact form or e-mail), we will store your details for the purpose of processing the enquiry and in case follow-up questions arise. We only store and use further personal data if you consent to this or if this is legally permissible without special consent.

The legal basis for the processing of data is Art. 6 (1) lit. a DSGVO if the user has given his or her consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

4 Your rights as a data subject affected by data processing

Under the applicable laws, you have various rights regarding your personal data. If you wish to assert these rights, please send your request by e-mail or by post, clearly identifying yourself, to the address given in section 1.

Below you will find an overview of your rights.

4.1 Right to confirmation and information

You have the right to obtain confirmation by us at any time as to whether personal data relating to you is being processed. If this is the case, you have the right to obtain from us, free of charge, information about the personal data stored about you, together with a copy of this data. Furthermore, you have the right to the following information:

1. the purposes of processing,

2. the categories of personal data processed,

3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations,

4. if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration

5. the existence of a right to rectification or erasure of the personal data concerning you or to restriction of processing by the controller or a right to object to such processing,

6. the existence of a right of appeal to a supervisory authority

7. if the personal data are not collected from you, any available information on the origin of the data

8. the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for you.

If personal data are transferred to a third country or to an international organisation, you have the right to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.

4.2 Right to rectification

You have the right to request that we correct any inaccurate personal data relating to you without undue delay. Taking into account the purposes of data collection you have the right to request the completion of incomplete personal data - also by means of a supplementary statement.

4.3 Right to erasure ("right to be forgotten")

You have the right to request that we delete personal data relating to you without undue delay and we are obliged to delete personal data without undue delay if one of the following reasons applies:

1. the personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

2. you revoke your consent on which the processing was based pursuant to Art. 6 (1) a or Art. 9 (2) a DSGVO and there is no other legal basis for the processing.

3. you object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.

4. the personal data have been processed unlawfully.

5. the erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.

6. the personal data has been collected in relation to information society services offered in accordance with Article 8(1) of the GDPR.

If we have disclosed the personal data to the public and we are obliged to erase it pursuant to Article 17 of the GDPR, we shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers that process the personal data that you have requested them to erase all links to, or copies or replications of, that personal data.

4.4 Right to request restriction of processing

You have the right to request us to restrict processing if one of the following conditions is met:

1. the accuracy of the personal data is disputed by you for a period of time that enables us to verify the accuracy of the personal data

2. the processing is unlawful and you have objected to the erasure of the personal data and instead requested the restriction of the use of the personal data

3. we no longer need the personal data for the purposes of processing, but you still need the data to assert, exercise or defend legal claims; or

4. you have lodged an objection to the processing pursuant to Art. 21 (1) DSGVO, as long as it has not yet been determined whether the legitimate reasons of our company outweigh yours.

4.5 Right to data portability

You have the right to receive your personal data that has been provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that

1. the processing is based on consent according to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract according to Art. 6 para. 1 lit. b DSGVO and

2. the processing is being carried out by automated means.

When exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transferred directly from us to another controller, insofar as this is technically feasible.

4.6 Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions. We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If personal data are processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) DSGVO, unless the processing is necessary for the performance of a task carried out in the public interest.

To do so, please contact our data protection officer informally by e-mail at datenschutz@geosfreiberg.de.

4.7 Automated decisions including profiling

You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you.

4.8 Right to withdraw consent under data protection law

You have the right to withdraw consent to the processing of personal data at any time.

4.9 Right to complain to a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, place of work or place of the alleged infringement, if you consider that a processing of personal data concerning you is carried out unlawfully.

 

5 Data privacy and security

We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical possibilities.

Your personal data is transmitted to us in encrypted form. This applies in particular to your customer login and form data transmitted to us. We use the SSL (Secure Socket Layer) coding system, but we would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

To protect your data, we maintain technical and organisational security measures that we adapt to the state of the art.

Furthermore, we cannot guarantee that our service will be available at certain times; disruptions, interruptions or failures cannot be fully avoided. The servers we use are carefully backed up on a regular basis.

6 Automated decision-making

Automated decision-making based on the personal data collected does not take place.

7 Cookies

We use cookies on our website. These small text files are stored on your PC from our server. They support the presentation of our website and help you to navigate our website.

Cookies collect data about your IP address, your browser, your operating system and your internet connection. We do not link this information to personal data and do not pass it on to third parties. Under no circumstances are cookies used by us to bring malware or spyware onto your computer.

You can also use our website without the usage of cookies, which may result in some displays and functions of our website only working to a limited extent. If you wish to deactivate cookies, you can do so via special settings in your browser. Please use its help function to make the appropriate changes.

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. e DSGVO in conjunction with. § 3 BDSG-neu or Art. 6 para. 1 lit. a DSGVO for consent-related cookies.

8 Duration of storage

The personal data of the affected person will be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

9 Disclosure of data to third parties, no data transfer to non-EU countries

In principle, we only use your personal data within our company.

If and to the extent that we involve third parties in the performance of contracts, they will only receive personal data to the extent that the transfer is necessary for the relevant service.

In the event that we outsource certain parts of data processing ("commissioned processing"), we contractually oblige commissioned processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the person concerned.

Data transfer to entities or persons outside the EU does not take place and is not planned.

(Status: 27.11.2020)