DATA PRIVACY


1. Name and address of the person responsible


Your contact person as the person responsible within the meaning of the European General Data Protection Regulation ("EU GDPR") and other national data protection laws of the member states as well as other data protection regulations is:

SCHULZE-BRAKEL GmbH

Warburger Strasse 33-35

33034 Brakel

Germany

(hereinafter referred to as "we", "us" or "our")


2. Name and address of the data protection officer

The protection of your personal data is very important to SCHULZE-BRAKEL GmbH. In order to express this importance, we have commissioned a consulting company specializing in data protection and data security to take on these central issues. Our data protection officer also comes from this very experienced group of experts. We are advised by:

ProIT Service GmbH

Urbanstrasse 1

81371 Munich

Germany


If you have any questions about data protection and data security, please contact our data protection officer at ProIT Service GmbH directly:

Email: datenschutz_schulze-brakel@proit-services.net

Telephone: +49 (89) 41 41 41 31-0 


3. General information on data processing

a. Scope of processing personal data

We offer our sales exclusively in the B2B area. This means that data from the B2C area are not taken into account.

In principle, we only process your personal data insofar as this is necessary to carry out our services. The processing of your personal data takes place regularly only on the basis of your consent. An exception applies in those cases in which prior consent cannot be obtained for practical reasons or the processing of your personal data is permitted by legal permission.

b. Legal basis for the processing of personal data

Insofar as we obtain your consent for the processing of personal data, we use art. 6 para. 1 lit. a of the EU GDPR as the legal basis.

When processing personal data that is required to fulfill a contract between you and us, we use art. 6 para. 1 lit. b of the EU GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which we are subject, art. 6 para. 1 lit. c of the EU-GDPR serves as the legal basis.

In the event that vital interests of you or another natural person require the processing of personal data, art. 6 para. 1 lit. d of the EU GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of us or a third party and your interests, fundamental rights and freedoms do not outweigh the first-mentioned interest, art. 6 para. 1 lit. f of the EU GDPR serves as the legal basis for processing.

c. Data deletion and storage duration

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which we are subject. 

The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.


4. Provision of the website and creation of log files 

a. Legal basis for data processing
The legal basis for the processing of your personal data in connection with the provision of the website and the creation of log files is art. 6 para. 1 lit. f of the EU GDPR.

b. Purpose of data processing
The temporary storage of your personal data by us is necessary to enable the website to be delivered to your computer. To do this, your personal data must be stored for the duration of the session.
Your personal data is stored in log files to ensure the functionality of the website. The log files contain the following data:

- Referrer (previously visited website)
- Requested web page or file
- Browser type and browser version
- Operating system used
- Device type used
- Time of access
- IP address in anonymized form (is only used to determine the location of access)

In addition, we use your personal data to optimize the website and to ensure the security of our information technology systems. An evaluation of your personal data for marketing purposes does not take place in this context.
Our legitimate interest in data processing in accordance with art. 6 para. 1 lit. f of the EU GDPR also lies in these purposes.

c. Duration of storage
Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. If your personal data is collected for the provision of the website, this is the case as soon as the respective session has ended.
If your personal data are stored in log files, they will be deleted after seven days at the latest. Any further storage is possible. In this case, your personal data will be deleted or alienated so that it can no longer be assigned to the calling client.

d. Opposition and removal option
The collection of your personal data for the provision of the website and the storage of your personal data in log files is essential for the operation of the website. There is consequently no option for you to object.


5. Use of cookies


a. Legal basis for data processing

The legal basis for processing your personal data in the context of the use of technically necessary cookies is art. 6 para. 1 lit. f of the EU GDPR.

b. Purpose of data processing

The use of technically necessary cookies serves to simplify the use of our website for you. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that your internet browser is recognized even after changing pages. The user data collected by technically necessary cookies are not used to create user profiles.

This is the reason why we have a legitimate interest in processing your personal data in accordance with art. 6 para. 1 lit. f of the EU GDPR.

c. Duration of storage

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected; this is especially the case when the cookies are deactivated.

d. Opposition and removal option

Cookies are stored on your computer and transmitted from there to our website. You therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. You can delete cookies that have already been saved at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.

The transmission of Flash-Cookies cannot be prevented via the settings of your Internet browser. This requires changes to the setting of the Adobe Flash Player.


6. Contact form and contact via email


a. Legal basis for data processing

The legal basis for the processing of your personal data, which is transmitted when you contact us via the contact form or by email, is art. 6 para. 1 lit. f of the EU GDPR. If the purpose of making contact via the contact form or by email is to conclude a contract, art. 6 para. 1 lit. b of the EU GDPR is an additional legal basis for processing.

b. Purpose of data processing

The processing of your personal data when you contact us via the contact form or by e-mail only serves to process the contact.

c. Duration of storage

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

d. Opposition and removal option

You have the option at any time to object to the processing of your personal data when you contact us via the contact form or by email at any time for the future. In such a case, the conversation between you and us cannot continue. In this case, all personal data stored in the course of contacting us will be deleted.


7. Vimeo


On this website we use a video to represent our company. Videos are a great way to convey content better and to make it easier to understand. Since local hosting of the video is not efficient enough, we use the option of an external video provider. As a video provider, we only use Vimeo.

Due to the integration of the video - for technical reasons - the server of the provider Vimeo is called up. For the associated use of data from your browser or terminal device, we refer to the respective data protection information of the provider, as the provider is responsible for the corresponding data processing. Vimeo's data protection information can be found here: https://vimeo.com/privacy

According to its own information, Vimeo guarantees an adequate level of data protection by complying with the requirements of the Privacy Shield (Privacy Shield entry).


8. Direct Marketing

a. Legal basis for data processing

The legal basis for processing your personal data in the context of direct marketing by mail is art. 6 para. 1 lit. f of the EU GDPR.


b. Purpose of data processing

The purpose of processing your personal data in the context of direct marketing by mail is to promote sales of goods or services. For this purpose, we have a legitimate interest in data processing in accordance with art. 6 para. 1 lit. f of the EU GDPR.


c. Duration of storage

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected; this is especially the case when the objection is received.


d. Opposition and removal option

You can object to the processing of your personal data in the context of direct marketing by mail at any time for the future.


9. Legal Defense and Law Enforcement

a. Legal basis for data processing

The legal basis for the processing of your personal data in the context of legal defense and legal enforcement is art. 6 para. 1 lit. f of the EU GDPR.


b. Purpose of data processing

The purpose of processing your personal data in the context of legal defense and legal enforcement is the defense against unauthorized claims and the legal enforcement of claims and rights. For this purpose, we have a legitimate interest in data processing in accordance with art. 6 para. 1 lit. f of the EU GDPR.


c. Duration of storage

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.


d. Opposition and removal option

The processing of your personal data in the context of legal defense and legal enforcement is essential for legal defense and legal enforcement. There is consequently no option for you to object.


10. Categories of recipients


Within our company, those positions and departments receive personal data that need them to fulfill the aforementioned purposes. In addition, we sometimes use different service providers and transmit your personal data to other trustworthy recipients. These can be, for example:

 - Banks

 - Scan service

 - Printing houses

 - Lettershops

 - IT service provider

 - Lawyers and Courts

Valid and current order processing agreements are in place with all service providers and trustworthy recipients.


11. Applications

Only a separate email address (bewerbung@schulze-brakel.de) is available for applications. This email adress is not subject to automatic archiving. The application will be stored for a maximum of 6 months after the application process has been completed and then deleted.


12. Transfer of data to third parties, no data transfer to non-EU countries

In principle, we only use your personal data within our company. A data transfer to places or persons outside the EU does not take place and is not planned.

If and to the extent that we involve third parties in the performance of contracts (such as logistics service providers), they will only receive personal data to the extent that the transmission is necessary for the corresponding service.

In the event that we outsource certain parts of the data processing ("order processing"), we contractually oblige order processors to only use personal data in accordance with the requirements of data protection laws and to guarantee the protection of the rights of the data subject.




13. Rights of the data subject


If your personal data is processed by us, you are the data subject within the meaning of the EU GDPR and you have the following rights towards us:


a. right of providing information

You can request confirmation from us as to whether personal data relating to you will be processed by us.

If this is the case, you can request information from us about the following information:


(1) the purposes for which the personal data are processed;

(2) the categories of personal data that are processed;

(3) the recipients or the categories of recipients to whom the personal data relating to you have been disclosed or are still being        disclosed;

(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;

(5) the existence of a right to correct or delete your personal data, a right to restrict processing by us or a right to object to this processing;

(6) the right to lodge a complaint with a supervisory authority;

(7) all available information about the origin of the data if the personal data is not collected from you;

(8) The existence of automated decision-making including profiling in accordance with art. 22 para. 1 and 4 of the EU GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for you.


You have the right to request information about whether your personal data is being transmitted to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees in accordance with art. 46 of the EU GDPR in connection with the transmission.


b. Right to rectification

You have a right to correction and / or completion against us if the processed personal data concerning you is incorrect or incomplete. We have to make the correction immediately.


c. Right to restriction of processing

You can request that the processing of your personal data be restricted under the following conditions:


(1) if you dispute the correctness of the personal data concerning you for a period that enables us to check the correctness of the personal data;

(2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;

(3) We no longer need the personal data for processing purposes, but you need them to assert, exercise or defend legal claims, or

(4) if you have objected to the processing in accordance with Art. 21 Paragraph 1 EU GDPR and it has not yet been determined whether our legitimate reasons outweigh your reasons.


If the processing of your personal data has been restricted, this data - apart from its storage - may only be permitted with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest processed by the Union or a Member State.

If the processing restriction has been restricted according to the above conditions, you will be informed by us before the restriction is lifted.


d. Right to deletion


I. Duty to delete

You can request that we delete the personal data relating to you immediately, and we are obliged to delete this personal data immediately if one of the following reasons applies:


(1) The personal data relating to you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent on which the processing was based in accordance with art. 6 para. 1 lit. a or art. 9 para. 2 lit. a of the EU GDPR, and there is no other legal basis for the processing.

(3) You object to the processing in accordance with art. 21 para. 1 of the EU GDPR and there are no overriding legitimate reasons for the processing, or you object processing in accordance with art. 21 para. 2 of the EU GDPR.

(4) The personal data concerning you have been processed unlawfully.

(5) The deletion of your personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which we are subject.

(6) The personal data relating to you was collected in relation to information society services offered in accordance with art. 8 para. 1 of the EU GDPR.


II. Information to third parties

If we have made the personal data concerning you public and we are obliged to delete it in accordance with art. 17 para. 1 of the EU GDPR, we will take appropriate measures, including technical measures, to process the data, taking into account the available technology and the implementation costs to inform those responsible who process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.


III. Exceptions

The right to deletion does not exist if processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) to fulfill a legal obligation that requires processing under the law of the Union or of the member states to which we are subject, or to perform a task that is in the public interest or in the exercise of official authority that has been assigned to us;

(3) for reasons of public interest in the area of ​​public health in accordance with art. 9 para. 2 lit. h and lit. i and art. 9 para. 3 of the EU GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with art. 89 para. 1 of the EU GDPR, insofar as the right mentioned under section a) is likely to make the realization of the objectives of this processing impossible or seriously impaired , or

(5) for the establishment, exercise or defense of legal claims.


e. Right to be informed

If you have asserted the right to correction, deletion or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this is the case proves to be impossible or involves a disproportionate effort.

You have the right towards us to be informed about these recipients.


f. Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. In addition, you have the right to transfer this personal data, which has been provided to us, to another person responsible without hindrance from us, provided that


(1) the processing is based on consent in accordance with art. 6 para. 1 lit. a of the EU GDPR or art. 9 para. 2 lit. a of the EU GDPR or on a contract in accordance with art. 6 para. 1 lit. b of the EU GDPR is based and


(2) the processing is carried out using automated procedures.


In exercising this right, you also have the right to have the personal data relating to you transmitted directly from us to another person responsible, insofar as this is technically feasible. This must not impair the freedoms and rights of other people.


The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or is carried out in the exercise of official authority that has been assigned to us.


g. Right to object

You have the right, for reasons that arise from your particular situation, to object at any time to the processing of personal data relating to you, which is based on art. 6 para. 1 lit. e or lit. f of the EU GDPR; this also applies to profiling based on these provisions.

We will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data relating to you are processed in order to operate direct mail, you have the right to object at any time to the processing of the personal data relating to you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If you object to processing for direct marketing purposes, the personal data relating to you will no longer be processed for these purposes.

In connection with the use of information society services - regardless of Directive 2002/58 / EC - you have the option of exercising your right of objection by means of automated procedures that use technical specifications.


h. Right to revoke the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of withdrawal.


i. Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effects on you or which significantly affects you in a similar manner. This does not apply if the decision


(1) is necessary for the conclusion or performance of a contract between you and us,

(2) is permissible on the basis of legal provisions of the Union or of the member states to which we are subject and these legal provisions contain appropriate measures to safeguard your rights and freedoms as well as your legitimate interests or

(3) takes place with your express consent.


However, these decisions may not be based on special categories of personal data according to art. 9 Para. 1 of the EU GDPR, unless art. 9 para. 2 lit. a or g of the EU GDPR applies and appropriate measures to protect the rights and freedoms as well as your legitimate interests were met.

With regard to the cases mentioned in (1) and (3), we take appropriate measures to protect your rights and freedoms as well as your legitimate interests, including at least the right to obtain human intervention on our part, to express your own point of view and to Appeal of the decision heard.


j. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of your personal data is against violates the EU GDPR.


The competent supervisory authority for us is:


State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

Kavalleriestrasse 2-44

40213 Düsseldorf

Germany


Phone: 02 11. 384 24 - 0

Fax: 02 11. 384 24-10

Email: poststelle@ldi.nrw.de

The supervisory authority to which you have lodged a complaint will inform you of the status and the results of the complaint, including the possibility of a judicial remedy in accordance with art. 78 of the EU GDPR.


Our data protection officer will be happy to answer any questions you may have at any time.


14. Google Analytics

For information purposes, we use Google Analytics on this website. In this context, the data protection conditions of Google apply, which you can find under the following links: 

https://policies.google.com/privacy?hl=de 
https://support.google.com/analytics/answer/6004245?hl=de&utm_id=ad