Data protection

1) Information about the collection of personal data and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Harz Holding GmbH, Prausestr. 48, 12203 Berlin, Germany, Tel .: +49 (0) 30/85 75 05 57, E-Mail: Info@harz-holding.com. The person responsible for processing personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or. TLS encryption. You can recognize an encrypted connection by the character string “https: //” and the lock symbol in your browser line.

2) Data collection when you visit our website

If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source / reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymous form)

The processing takes place in accordance with Art. 6 Para. 1 lit.f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3) Contact

When you contact us (e.g. using the contact form or email), personal data is collected. Which data is collected when a contact form is used can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit.f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Paragraph 1 lit. b GDPR. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no statutory retention requirements.

4) Tools and miscellaneous

4.1 – Google Web Fonts
Diese Seite nutzt zur einheitlichen Darstellung von Schriftarten so genannte Web Fonts die von der Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland („Google“) bereitgestellt werden. Beim Aufruf einer Seite lädt Ihr Browser die benötigten Web Fonts in ihren Browser-Cache, um Texte und Schriftarten korrekt anzuzeigen.
Zu diesem Zweck muss der von Ihnen verwendete Browser Verbindung zu den Servern von Google aufnehmen. Hierbei kann es auch zu einer Übermittlung von personenbezogenen Daten an die Server der Google LLC. in den USA kommen. Auf diese Weise erlangt Google Kenntnis darüber, dass über Ihre IP-Adresse unsere Website aufgerufen wurde. Die Nutzung von Google Web Fonts erfolgt im Interesse einer einheitlichen und ansprechenden Darstellung unserer Online-Angebote. Dies stellt ein berechtigtes Interesse im Sinne von Art. 6 Abs. 1 lit. f DSGVO dar. Wenn Ihr Browser Web Fonts nicht unterstützt, wird eine Standardschrift von Ihrem Computer genutzt. Weitere Informationen zu Google Web Fonts finden Sie unter https://developers.google.com/fonts/faq und in der Datenschutzerklärung von Google: https://www.google.com/policies/privacy/

4.2 Applications for job postings by email

On our website, we advertise currently vacant positions in a separate section, for which interested parties can apply by e-mail to the contact address provided.

In order to be included in the application process, applicants must provide us with all the personal data required for a well-founded and informed assessment and selection by email together with the application.
The required Information includes general information about the person (name, address, a telephone or electronic contact option) as well as performance-specific evidence of the qualifications required for a position. In addition, health-related information may be required which, in the interests of social protection, must be given special consideration under labor and social law of the applicant’s person.

Which components an application must contain in individual cases for their eligibility for consideration and in which form these components are to be sent by email can be found in the respective job advertisement.

After reception of the application sent using the specified email contact address, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. For any queries that arise in the course of processing, we use either the email address provided by the applicant with his/her application or a telephone number provided.

The legal basis for this processing, including contacting us for queries, is Article 6 (1) (b) GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9 Para. 1 GDPR (e.g. health data such as information about severely disabled status) are requested from applicants during the application process, the processing takes place in accordance with Art. 9 Para. 2 lit. b. GDPR, so that we can exercise the rights arising from labor law and social security and social protection law and meet our obligations in this regard.

Cumulatively or alternatively, the processing of special data categories can also be based on Art. 9 Paragraph 1 lit. Treatment in the health or social field or for the management of systems and services in the health or social field.

If, in the course of the evaluation described above, the applicant is not selected or if an applicant withdraws their application prematurely, their data transmitted by e-mail and all electronic correspondence including the original application e-mail will be deleted after 6 months at the latest after notification. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, being able to meet our obligations to provide evidence from the provisions on the equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6 Paragraph 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 Paragraph 1 BDSG) for the purpose of carrying out the employment relationship.

4.3 Online applications using a form

On our website, we offer those interested in a job the opportunity to apply online using a corresponding form. In order to be included in the application process, applicants must use the form to provide us with all of the personal data required for a well-founded and informed assessment and selection.

The information required includes general information about the person (name, address, a telephone or electronic contact option) as well as performance-specific evidence of the qualifications required for a position. In addition, health-related information may be required which, in the interests of social protection, must be given special consideration under labor and social law in the applicant’s person.

In the course of submitting the form, the applicant data is encrypted and transmitted to us in accordance with the state of the art, stored by us and evaluated exclusively for the purpose of processing the application.
The legal basis for this processing is, in principle, Article 6 (1) (b) GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9 Para. 1 GDPR (e.g. health data such as information about severely disabled status) are requested from applicants during the application process, the processing takes place in accordance with Art. 9 Para. 2 lit. b. GDPR, so that we can exercise the rights arising from labor law and social security and social protection law and meet our obligations in this regard.

Cumulatively or alternatively, the processing of special data categories can also be based on Art. 9 Paragraph 1 lit. Treatment in the health or social field or for the management of systems and services in the health or social field.

If the applicant is not selected in the course of the evaluation described above or if an applicant withdraws his application prematurely, the data transmitted in the form will be deleted after a corresponding notification after 6 months at the latest. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, being able to meet our obligations to provide evidence from the provisions on the equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6 Paragraph 1 lit. b GDPR (for processing in Germany in conjunction with Section 26 Paragraph 1 BDSG) for the purpose of carrying out the employment relationship.

5) rights of the data subject

5.1 The applicable data protection law grants you the following rights of data subjects (rights of information and intervention) vis-à-vis the person responsible with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:

  • Right to information in accordance with Art. 15 GDPR;
  • Right to rectification in accordance with Art. 16 GDPR;
  • Right to deletion in accordance with Art. 17 GDPR;
  • Right to restriction of processing in accordance with Art. 18 GDPR;
  • Right to information in accordance with Art. 19 GDPR;
  • Right to data portability in accordance with Art. 20 GDPR;
  • Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;
  • Right to complain in accordance with Art. 77 GDPR.

5.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR MAIN LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO PROCESS YOUR PERSONAL DATA ON THE BASIS OF REASONS WHICH ARE WARRANTED BY YOUR SPECIFIC SITUATION.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED. FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPULSORY REASONS FOR PROCESSING THAT ARE OUTSIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING OR EXPRESSION OF THE EXPRESSION APPLIES.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY OBJECTIVE AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

6) Duration of storage of personal data

The duration of the storage of personal data is based on the respective legal basis, the processing purpose and – if relevant – additionally based on the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of express consent in accordance with Article 6 (1) (a) GDPR, this data is stored until the person concerned revokes his or her consent.

If there are statutory retention periods for data that are processed in the context of legal or similar obligations on the basis of Art. 6 Paragraph 1 lit. and / or we have no legitimate interest in further storage.

When processing personal data on the basis of Art. 6 Paragraph 1 lit. prove for the processing that the interests, rights and freedoms of the data subject outweigh, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 Paragraph 1 lit. f GDPR, this data is stored until the person concerned exercises his/her right of objection according to Art. 21 Para. 2 GDPR.

Unless otherwise stated in the declaration about specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

© IT-Recht Kanzlei

DOCID: ##ITK-4d4402987a3ae4c4d81cbdee152dbf8e##

Version: 202201040012