PRIVACY POLICY

 

The responsible data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

 

Name and address of the responsible data controller:

Schlegel GmbH/Germany
Porschestraße 2
74321 Bietigheim-Bissingen
Phone: +49 (0)7142 / 98 99 80
Fax: +49 (0)7142 / 98 99 830
info@schlegel-concepts.com
www.schlegel-concepts.com

 

Name and address of the external data protection officer:

Wolfgang Matzke
KLW GmbH
Parkweg 4
74360 Ilsfeld
Deutschland
Tel. +49 (0)706291591-0
datenschutz@klw.de
www.klw.de 


General information about data processing

Scope of processing of personal data
We only process personal data of our users to the extent that this is necessary for the provision of a functional website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent cannot be obtained for actual reasons and the processing of the data is permitted by law.
 

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 (1) (a) EU General Data Protection Regulation (GDPR) serves as a legal basis.
In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as a legal basis. This also applies to processing operations required to carry out pre-contractual actions.
Insofar as processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as a legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as a legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 (1) (f) GDPR serves as a legal basis for processing.
 

Data deletion and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires unless there is a need for further storage of the data for conclusion of a contract or fulfilment of the contract.

Provision of the website and creation of log files

Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected here:

  • Information about the browser type and version used
  • The operating system of the user
  • The internet service provider of the user
  • The IP adress of the user
  • Websites from which the system of the user comes to our website
  • Websites that are accessed by the user´s system through our website

 

The data is also stored in the log files of our system. Storage of this data together with other personal data of the user does not take place.

 

Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.


Purpose of data processing

The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user’s IP address must be kept for the duration of the session. Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimise the website and to ensure the security of our information technology systems. Evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in the processing of data pursuant to Art. 6 (1) (f) GDPR lies in these purposes.

 

Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the event of collection of the data for the provision of the website, it will be deleted when the respective session has ended but at the latest after 14 days.

 

Possibility of objection and correction
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility to object to such collection on the part of the user.

 

Use of cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site.

Cookies do not harm your device, do not contain viruses, Trojans or other malicious software. Information is stored in the cookie, which results in each case in connection with the specific terminal used. However, this does not mean that we are immediately aware of your identity. On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognise that you have already visited individual pages on our website. These are automatically deleted after leaving our website. In addition, to improve usability, we also use temporary cookies that are stored on your device for a specified period of time.
If you visit our site again to take advantage of our services, it will automatically recognise that you have already been with us and what inputs and settings you have made so you do not have to re-enter them. On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer. These cookies allow us to automatically recognise, when you visit our site again, that you have already been with us. These cookies are automatically deleted after a defined time.
The data processed by cookies are necessary for the purposes mentioned in order to safeguard our legitimate interests as well as the interests of third parties according to Art. 6 (1) (f) sent. 1 GDPR. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, disabling cookies completely may mean that you cannot use all features of our website.
The data of the users collected in this way is pseudonymised via technical precautions. Therefore, an assignment of the data to the retrieving user is no longer possible. The data will not be stored together with other personal data of users.
When accessing our website, users are informed by an information banner about the use of cookies for analysis purposes and referred to this privacy policy. In this context, there is also an indication of how the storage of cookies can be prevented in the browser settings. The transmission of Flash cookies cannot be prevented by the browser settings but by changing the settings of the Flash player.

 

Contact form and e-mail contact

Description and scope of data processing

There is a contact form and an e-mail address on our website, which can be used for electronic contact. If a user makes use of this option, the data entered in the input mask will be transmitted to us and saved. This data is the following:
 

Personal data:

  • Company
  • First name
  • Last name
  • E-Mail
  • Message, optional field

 

At the time of sending the message, the following data is also stored:

  • The IP address of the user
  • Date and time of registration


For the processing of the data in the context of the sending process your consent is obtained and reference is made to this privacy policy.
Alternatively, contact via the provided e-mail address is possible. In this event, the user’s personal data that is transmitted by e-mail will be stored.
In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.

 

Legal basis for data processing

The legal basis for the processing of the data with the consent of the user is Art. 6 (1) (a) GDPR.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6 (1) (f) GDPR. If the e-mail contact aims to conclude a contract, then the additional legal basis for the processing is Art. 6 (1) (b) GDPR.

 

Purpose of data processing

The processing of personal data from the input mask serves us only to process the contact. In the event of contact via e-mail, the required legitimate interest in the processing of the data also lies herein. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

 

Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. Personal data from the input form of the contact form and data sent by e-mail is deleted when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the relevant facts have been finally clarified. The additional personal data collected during the sending process will be deleted at the latest after a period of 14 days

 

Possibility of objection and correction

The user has the possibility at any time to revoke their consent to the processing of the personal data. If the user contacts us by e-mail, they may object to the storage of their personal data at any time. In such an event, the conversation cannot continue. All personal data stored in the course of contact will be deleted in this case.

 

Disclosure of data

We do not transmit your personal data to third parties for purposes other than those listed below.
We only share your personal data with third parties if:
• You have given your explicit consent for this according to Art. 6 (1) (a) sent. 1 GDPR,
• In the event that there is a legal obligation to disclosure pursuant to Art. 6 (1) (c) sent. 1 GDPR, and

• This is legally permissible and, according to Art. 6 (1) (b) sent. 1 GDPR, it is required for the settlement of contractual relationships with you.

 

 

HANDLING OF APPLICANT DATA

Categories of data

You send us personal data with your application.

This personal data includes, for example, name, date of birth, gender, address, contact details and qualifications. In addition, personal data may still arise from the documentation of a job interview or from evaluation documents prepared by us. If you have an account in a work-oriented social network like XING or LinkedIn, we can also collect the data from your publicly viewable profile page.

Purpose and legal basis of processing:

If you apply by e-mail, we need some information about you for the application process. We process your data for the possibility of establishing an employment relationship, i.e. for the implementation of the application process, Art. 88 (1) GDPR in conjunction with § 26 (1) BDSG-new. We assure you that your personal information will be treated confidentially.

The processing of your personal data may also be required to safeguard our legitimate interests as a company, unless your interests or fundamental rights and freedoms prevail, Art. 6 (1) (f) GDPR. Another purpose is the granting of consent to the processing of your personal data for the consideration of your application for future job advertisements.

Transfer of data

Your data will only be passed on to the personnel responsible for the application procedure in the HR department as well as the employees of the respective specialist departments insofar as this is necessary for the decision on the establishment of the employment relationship. Data is not passed on to third parties.

Deletion of the data

Under the GDPR, personal data must be deleted once the purpose of the processing has been fulfilled. Your data will be deleted as soon as the specified position has been filled or the application has been withdrawn.

Upon notification of a decision not to hire, your data will be stored for as long as necessary for the clarification of inquiries or disputes. If there is a legal retention period for longer storage, your data will be stored for this purpose. Your data may also be stored longer if you wish to grant your consent until further notice for the consideration of your application in future job postings. After discontinuation of the storage purpose or expiration of a legal storage period, your personal data will be deleted.

Revocation

You can revoke your application at any time without giving reasons by contacting us at: jobs@schlegel-concepts.com.

 

Right of appeal

Furthermore, you have a right of appeal to the supervisory authority.

 

Consent

By submitting your application, you confirm that you have read and understood the information contained in this privacy policy regarding the processing and use of your personal data.

Consent for minors

If you are not yet of legal age, you must have previously obtained the authorisation of a legal guardian to apply with us. You also warrant that your information is correct.

If you are under the age of 18, please enclose a written consent from your legal guardian with your application. Please note that Schlegel GmbH may not consider your application otherwise, and we will delete your data due to legal requirements.
 
I consent that Schlegel GmbH may collect and processes the data of the applicant _________________________ (last name, first name) submitted with the application.


 _______________________________________
Signature of legal guardian


Use of Google Analytics

This website uses Google Analytics, a web analytics service provided from Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. The use includes the operating mode “Universal Analytics”. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID, thus analysing the activities of a user across devices.
Google Analytics uses cookies, which allow an analysis of the use of our website by the visitors (for more information on cookies, see the previous section “Use of Cookies”). The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event of IP anonymisation being activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to the transfer. In exceptional cases, Google can also transfer the full IP address to a server in the USA and shorten it there. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. On our behalf (as the operator of this website), Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. This also justifies our legitimate interest in data processing. The legal basis for the use of Google Analytics is § 15 (3) TMG or Art. 6 (1) (f) GDPR.

Retention periods for data / Automated data deletion
The data sent by us and linked with cookies, user IDs (e.g. user IDs) or advertising IDs is automatically deleted after 14 months. The deletion of data whose retention period has been reached is done automatically once a month.
For more information about Terms of Use and Privacy, please visit: https://www.google.com/analytics/terms/de.html or alternatively: https://policies.google.com/?hl=de

 
Disable Google Analytics

Option 1: You can prevent the storage of cookies by a corresponding setting of your browser software. We point out, however, that in this case you may not be able to use all the functions of this website in full.

Option 2: You can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser add-on available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Option 3: Opt-out cookies prevent future collection of your data when you visit this website. To prevent Universal Analytics from collecting across devices, you must opt-out on all systems you use. If you click here, the opt-out cookie will be set: Click here to be excluded from the Google Analytics measurement.

 

 

Wiredminds

For the purposes of marketing and optimisation, products and services of wiredminds GmbH (www.wiredminds.de) are used on this website. Data is collected, processed and stored, from which usage profiles are created under a pseudonym. Where possible and useful, the usage profiles are completely anonymous. Cookies may be used for this purpose. Cookies are small text files that are stored in the visitor’s internet browser and serve for recognition of the internet browser. The collected data, which may also contain personal data, is transmitted to wiredminds or collected directly from wiredminds. wiredminds may use information that is left by visits to the websites to create anonymised usage profiles. The data obtained without the separately granted consent of the data subject will not be used to personally identify the visitor to this website and will not be merged with personal data about the bearer of the pseudonym. As far as IP addresses are collected, they will be anonymised immediately after collection by deleting the last number block. Data collection, processing and storage may be objected to at any time with future effect.
OptOut-Link Wiredminds: Exclude from tracking.

 

 

Rights of data subjects

The following list includes all rights of data subjects under the GDPR. Rights that have no relevance for your own website need not be mentioned. In that regard, the listing can be shortened.

If personal data about you is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-a-vis the data controller:


Right to disclosure

You may ask the controller to confirm if personal data concerning you is processed by us.

If such processing takes place, you can request information from the controller about the following:
(1) The purposes for which the personal data is processed;
(2) The categories of personal data being processed;
(3) The recipients or categories of recipients to whom the personal data relating to you has been disclosed or is still being disclosed;
(4) The planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
(5) The existence of a right to correction or deletion of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
(6) The existence of a right of appeal to a supervisory authority;
(7) All available information on the source of the data if the personal data is not collected from the data subject;
(8) The existence of automated decision-making including profiling pursuant to Art. 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.


You have the right to request information about whether your personal data is transferred to a third country or an international organisation. In this connection, you can request the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.

Right to correction

You have a right to correction and/or completion vis-a-vis the controller if the personal data processed about you is incorrect or incomplete. The controller must make the correction without delay.

Right to restriction of processing

You may request the restriction of the processing of your personal data under the following conditions:


(1) If you contest the accuracy of your personal data for a period of time that enables the controller to verify the accuracy of your personal data;

 

(2) The processing is unlawful and you decline the deletion of the personal data and instead demand the restriction of the use of the personal data;

 

(3) The controller no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims; or

 

(4) You have objected to processing in accordance with Art. 21 (1) GDPR, and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest to the Union or a Member State.
If the restriction of processing has been exercised in accordance with the above conditions, the controller will inform you before the restriction is lifted.

Right to deletion / Obligation to delete

You may require the controller to delete your personal data without delay, and the controller will be required to delete that data immediately if one of the following applies:

(1) Personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.

(2) You revoke your consent upon which the processing is based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR and there is no other legal basis for processing.

(3) Pursuant to Art. 21 (1) GDPR, you object to the processing and there are no prior justifiable reasons for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.

(4) Your personal data has been processed unlawfully.

(5) The deletion of personal data concerning you is required to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.

(6) The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

Information to third parties

If the controller has made the personal data concerning you public and is obligated to delete it pursuant to Art. 17 (1) GDPR, the controller shall take appropriate measures, including technical means, taking into account available technology and implementation costs, to inform data controllers who process the personal data that you as the data subject request deletion of all links to such personal data or of copies or replications of such personal data.

Exceptions

The right to deletion does not exist insofar as the processing is necessary:

 

(1) To exercise the right to freedom of expression and information;

 

(2) To fulfil a legal obligation that requires processing under Union or Member State law to which the controller is subject or for the performance of a task of public interest or in the exercise of official authority that has been conferred on the controller;

 

(3) For reasons of public interest in the field of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;

 

(4) For archival purposes of public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, to the extent that the right referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing; or

 

(5) To assert, exercise or defend legal claims.

Right to information

If you have the right to correction, deletion or restriction of processing vis-a-vis the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.

You have a right vis-a-vis the controller to be informed about these recipients.

Right to data portability

You have the right to receive personally identifiable data you provide to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another controller without hindrance by the first controller to whom you provided the personal data, provided that:


(1) The processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, or is based on a contract pursuant to Art. 6 (1) (b) GDPR and

 

(2) the processing is carried out using automated procedures.
In exercising this right, you also have the right to obtain that your personal data relating to you be transmitted directly from one controller to another insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

Right to objection

You have the right at any time, for reasons that arise from your particular situation, to object to the processing of your personal data, which occurs pursuant to Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, exercising or defending legal claims.
If the personal data relating to you is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58/EC, you have the option, in the context of the use of information society services, of exercising your right to objection using automated procedures that use technical specifications.

Right to revoke the data protection consent declaration

You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

 

The revocation must be sent to:
Schlegel GmbH, Porschestraße 2, 74321 Bietigheim-Bissingen /
info@schlegel-concepts.com

 

Automated decision making on a case-by-case basis, including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which will have legal effect or affect you in a similar manner. This does not apply if the decision:


(1) Is required for the conclusion or performance of a contract between you and the controller;

 

(2) Is permitted by Union or Member State legislation to which the controller is subject and such legislation provides for reasonable safeguards of your rights and freedoms and your legitimate interests; or

 

(3) It is carried out with your express consent.


However, these decisions must not be based on special categories of personal data under Art. 9 (1) GDPR unless Art. 9 (2) (a) or (g) GDPR applies and reasonable measures have been taken to protect your rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in (1) and (3), the controller shall take appropriate measures to uphold your rights and freedoms and your legitimate interests including at least the right to obtain the intervention of a person at the controller, the right to express your own position, and the right to be heard in the challenge of the decision.

Right to appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to appeal to a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you violates the GDPR.

The supervisory authority to which the appeal has been submitted will inform the complainant of the status and results of the appeal including the possibility of a judicial remedy pursuant to Art. 78 GDPR.


Google Web Fonts

This page uses so-called web fonts to represent the font. These are provided by Google (http://www.google.com/webfonts/). When you visit our page, your browser loads the required web font into your browser cache in order to do this. This is necessary so that your browser can display a visually improved presentation of our texts. If your browser does not support this feature, a default font will be used by your computer for viewing.
For more information about Google Webfonts, visit https://developers.google.com/fonts/faq?hl=de-DE&csw=1
For general information about privacy at Google, visit: http://www.google.com/intl/de-DE/policies/privacy/

The browser you use must connect to Google’s servers for this purpose. Google learns as a result that our website has been accessed via your IP address. Google Web Fonts is used in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. 

Google Maps
This site uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
It is necessary to store your IP address to use the features of Google Maps. This information is usually transmitted to and stored on a Google server in the United States. The provider of this site has no influence on this data transfer.
Google Maps is used in the interest of an attractive presentation of our online offers and the easy findability of the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.
For more information on how user data is handled, please refer to the Google Privacy Policy: www.google.de/intl/de/policies/privacy/

 

Data Security
When you visit our website, we employ the widely used SSL (Secure Socket Layer) method in connection with the highest encryption level supported by your browser. In general, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a particular page of our website is encrypted is shown by the closed representation of the key or lock icon in the lower status bar of your browser. We also take appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction and against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Up-to-dateness and change of this privacy policy

This privacy policy is currently valid and is presented in the version of May 2018. As a result of the further development of our website and offers or due to changed legal or official requirements, it may be necessary to change this privacy policy. The current privacy policy can be viewed and printed on our website under Data Privacy at any time.

 

 

SOLUTIONS FOR COMPLEX CONSTRUCTION PROJECTS AND DESIGN CONCEPTS

For over 22 years, SCHLEGEL has been making complex construction projects and design concepts a reality, both nationally and internationally. Our customers benefit from solutions both for individual construction projects and for scalable projects that are ready to roll out. According to your needs, we can take on all the coordination and execution tasks or take responsibility for just a few areas. As an owner-managed company, we place great importance on offering honest and comprehensive advice: You will have a contact partner over the course of the entire project, who will be available to discuss any aspect of the project at any time.