Informationen on data privacy
This data privacy statement explains how your personal data is processed by Christoph Schöttler Maschinenfabrik GmbH. Hereinafter, our company is referred to as “Schoema” to make this data privacy statement easier to read.
Processing controller and contact for any questions
Christoph Schöttler Maschinenfabrik GmbH
49356 Diepholz, Germany
Phone: +49 5441 997-0
Contact information of the data privacy officer:
Categories of personal data processed:
Depending on our business relationship with you, Schoema will process the following categories of your personal data:
- Contact information (e.g. name, address, e-mail address, phone number)
- Contract information in the context of the business relationship (customer number, sales figures, machine data)
- Payment and invoicing information (e.g. bank account data)
Purpose and legal basis of processing
Your personal data will be processed for the following purposes and on the following legal basis:
- Performance of a customer contract (Art. 6, section 1b GDPR)
- Data processing based on legitimate interests (Art. 6, section 1f GDPR)
- Data processing based on your consent (Art. 6, section 1a GDPR)
Processing based on legitimate interests covers using and analysing your personal data for:
- product information and services
- measures for improving and developing services and products to offer you customised information with suitable offers and products
- market and opinion research
- ensuring transparency and quality of our products, services and communication
We also process data based on point (c) of Art. 6 (1) GDPR to fulfil legal obligations (e.g. trade law and tax law requirements).
Origin of your personal data
We collect personal data directly from you, e.g. through our contact form or when you send direct inquiries to us.
Disclosure of personal data to third parties (recipients)
Your personal data will be disclosed or transferred to third parties in the context of the above-mentioned purposes. Recipients of your personal data may include:
- IT service providers
- Marketing agencies
- Service and cooperation partners
- Debt collection agencies
- Printing and shipping service providers
- Data destruction service providers
- Sales partners
If your data is disclosed, this is usually connected to contractual processing of data. Our service providers are contractually obligated to ensure secure, confidential and correct processing of your data.
Personal data is primarily processed within the European Union (EU), provided we are active in the respective countries. Data will only be transferred to countries outside the EU (third countries) or international organisations, if the requirements of Art. 44 ff. GDPR are met.
Personal data stored for the above-mentioned purposes will be stored for the duration required for the respective purpose, unless other legally mandated retention periods (commercial code, tax code) or legal reasons for storage apply. This means that we will delete your data at the end of the legally mandated retention periods, generally 10 years after termination of the contract.
Your rights related to processing of your personal data
In the relationship with our company, you have the following rights with respect to your personal data:
- Right of access to any of your personal data we have stored (Art. 15 GDPR),
- Right to rectification, if any of your personal data that we have stored is faulty, outdated or incorrect (Art. 16 GDPR),
- Right to erasure, if storage is unlawful, the purpose of processing no longer applies and storage is therefore no longer required or you have revoked previously given consent to processing of specific personal data (Art. 17 GDPR),
- Right to restriction of processing, if one of the prerequisites listed in point (a) to (d) of Art. 18 (1) GDPR applies (Art. 18 GDPR),
- Right to data portability of the personal data provided by you (Art. 20 GDPR),
- Right to withdraw previously given consent; the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal (Art. 7 (3) GDPR) and
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
The authority responsible for cases related to our company is:
Die Landesbeauftragte für den Datenschutz Niedersachsen (state commissioner for data protection of Lower Saxony)
Prinzenstraße 5, D-30159 Hanover, Phone +49 511 120 45 00, Fax: +49 511 120 45 99
Right to object
You have the right to object to processing of your personal data for direct marketing and/or market research at any time without specifying a reason.
After receiving your objection, we will no longer process your personal data for direct marketing and/or market research and will delete the data, provided its processing is not required for different purposes (for instance for performing a contract).
You also have the right to object to processing based on legitimate interests as defined by point (f) of Art. 6 (1) GDPR for reasons based on your particular situation, provided you indicate these reasons. In the event of a justified objection, we will no longer process your personal data for the respective purposes and will delete the data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the data is required for the establishment, exercise or defence of legal claims.
Please address your objection to our address specified at the start of this statement
Data privacy information for further use
The information provided here also applies to the following special uses, unless otherwise indicated.
- Server log files and provision of websites
Any time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
- Information about the browser type and version used
- The user's operating system
- The user’s internet service provider
- The user’s IP address
- Date and time of access
- Websites from which the user's system has accessed our website
- Websites which the user’s system accesses through our website
This data is also saved in the log files of our system. This data is not saved together with other personal data of the user.
The legal basis for temporary storage of the data and system log files is point (f) of Art. 6 (1) GDPR.
The data is stored in system log files to ensure the function of our website. In addition, we use this data to optimise our website and safeguard the security of our information technology systems. The data is not evaluated for marketing purposes in this context.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. If data is saved in system log files, it is deleted after no more than seven days. Further storage is possible. In this case, the IP addresses of the user are deleted or made unidentifiable, so that it is no longer possible to associate them with the accessing client.
- Application processes
You can use this website or e-mail us to apply for jobs at our company. During the application process, we will process both your contact information and any data related to your CV and qualification as well as photos that you submit. The data will only be used for the application process and will be deleted after six months. Only basic data for comparison with earlier applications will be deleted after 24 months. The legal basis for processing application data when the user has given consent is point (a) of Art. 6 (1) GDPR. The legal basis for processing the basic data is our own legitimate interest as defined by point (f) of Art. 6 (1) GDPR. We collect and process applicants’ personal data for the purpose of processing applications, which we may do electronically. In particular, this is the case if applicants submit their application documents in an electronic manner, for instance by e-mail or through an online form on our website. If we enter into an employment contract with a job applicant, the transmitted data will be stored according to the relevant regulations for the purpose of permitting the employment relationship. If the controller does not enter into an employment contract with the applicant, the application documents will automatically be deleted three months after the rejection decision has been sent to the applicant, provided this does not conflict with other legitimate interests of the controller. Other legitimate interests in this sense may, for instance, be an obligation to provide proof in proceedings related to the General Equal Treatment Act (AGG).
- Google Analytics
This website uses Google Analytics, a web analytics service of Google LLC (“Google”). Google Analytics uses "cookies" which are text files saved on your computer permitting analysis of your use of the website. The information generated by the cookies about your use of this website will generally be transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will first abbreviate your IP address within member states of the European Union or in other member states of the European Economic Area Agreement. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website traffic, and to provide other services for the website operator relating to the use of the website and the internet. Our legitimate interest in data processing is based on these purposes. The legal basis for the use of Google Analytics is § 15 (3) TMG (German Telemedia Act) or point (f) Art. 6 (1) GDPR. The users’ personal data is deleted or anonymised after 14 months. Data whose retention period has expired is automatically deleted once a month. The IP address transmitted by your browser in connection with Google Analytics will not be associated with any other data held by Google. You may refuse the storage of cookies by selecting the appropriate settings of your browser. Please note, however, that in this case you may not be able to use the full range of functions on this website. You can also prevent Google's collection and processing of the data (including your IP address) generated by the cookie related to your use of this website by downloading and installing the browser plug-in available from the following link (http://tools.google.com/dlpage/gaoptout?hl=de). Opt-out Cookies prevent your data from being logged during future visits to this website. To prevent your data from being collected by Google Analytics across multiple devices you must opt out on all systems in use. Click here to activate the opt-out cookie: Deactivating Google Analytics. For further information on conditions of use and data privacy, visit www.google.com/analytics/terms/de.html or www.google.com/intl/de/analytics/privacyoverview.html. On this website, we have added the function "anonymizeIp()" to the code of Google Analytics. It anonymises all collected IP addresses.
- Google Maps
- Contact Form
Our website contains a contact form to contact us electronically. The data entered in the form as well as the date and time of registration and your IP address will be saved. We will request your consent for processing this data. As an alternative, it is possible to use the provided e-mail address to get in contact. In this case, any personal data transmitted by e-mail will be saved. The personal data collected through the form or e-mail is exclusively intended to allow us to contact you and maintain a conversation with you. This constitutes our legitimate interest in processing this data. Any other personal data we process is used to prevent misuse of the contact form and safeguard our information technology systems.
- Social Media
On our website, we embed videos of the platform “YouTube” provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Should you have any questions about data privacy, please address them to the above-mentioned contacts.
Data privacy information Schoema acc. to Art.13 GDPR, dated 9 May 2019