Here, we’d like to inform you about how we process your personal data when you visit www.klett-gruppe.de.
I. Controller and Data Protection Officer
Ernst Klett AG, Rotebühlstraße 77, 70178 Stuttgart, Germany
E-mail: firstname.lastname@example.org, tel.: +49 (0) 711 6672-0
If you have any questions regarding the protection of your data, please feel free to contact our data protection officer:
Ernst Klett AG (Attn: Data Protection Officer), Rotebühlstraße 77, 70178 Stuttgart, Germany
E-mail: b.spickenheier (at) klett-gruppe.de, tel.: +49 (0) 711 6672 1173
II. Visiting www.klett-gruppe.de
1. Server log files
When you visit this website, we process your IP address and the date and time of your visit; information on your device's operating system and the browser you use, including your language settings; the address of the website from which you accessed www.klett-gruppe.de (also known as a “referrer URL”); the names of the files you access; and the amount of data transferred in the process. This information, which we receive from your Internet service provider, is stored in log files for no more than seven days.
For technical reasons, much of the data involved has to be processed in order to display this website on your computer or smartphone and to safeguard system security. It is also analysed in anonymised form for statistical purposes and to improve the quality of the site (see also section II, 2 below). None of this data is linked to the personal data of any specific natural person.
This data is processed based on Article 6, para. 1(f) of the EU's General Data Protection Regulation (GDPR). We have a justifiable interest in ensuring the proper presentation of this website on your screen, our ability to address the causes of hacking attempts and other disruptions in short order, and the means by which we analyse this anonymised data for statistical purposes. While the provision of said data is not stipulated by law or any contract, not processing the bulk of the data in question would make using this website impossible for related technical reasons.
Session cookies, meanwhile, enable you to avoid having to enter information on our website multiple times, even if you visit other websites in the interim. Such cookies are thus meant to make it easier for you to use our website. We also use permanent cookies to collect statistics on how our website is used and analyse them for optimisation purposes (see section II., 3).
Article 6, para. 1(f) of the GDPR serves as the legal basis for these purposes. We have an interest in optimising our website to ensure that it offers you a user-friendly experience.
Session cookies are deleted when you close your browser. Permanent cookies remain valid for up to 12 months, at which point they are also deleted.
3. Generation of statistics through Matomo
Our website uses the web analytics service Matomo. The purpose of Matomo is to log users’ clicking and surfing behaviour on this website, which enables us to generate statistics on how the site is used and make corresponding improvements. The data collected for this purpose is anonymised and not stored along with your other data. During this process, your IP address is anonymised as quickly as possible so that you remain unidentifiable to us as a user.
We are permitted to use Matomo and permanent cookies in accordance with Article 6, para. 1(f) of the GDPR, as well as in accordance with Article 6, para. 1(a) should you provide corresponding consent. We have a justifiable interest in using statistical analysis to optimise our website.
The cookies set by Matomo remain valid for up to 13 months. The corresponding data is stored for three months.
4. Google Maps
Our website incorporates Google Maps content from Google Ireland Ltd. If you visit a section of our website that includes Google Maps, data related to how you use Google Maps will be transmitted to and processed by Google. Google will be informed that you visited the webpage in question, for example, and your IP address will also be disclosed. Google uses this data to create usage profiles that serve purposes related to advertising, market research, and/or the needs-based design of Google Maps. If you are a Google customer and have logged into a Google service, the data will be linked directly to your Google account. If you wish to prevent this, you will need to log out of Google before visiting our website. For further information on Google’s data privacy policies, please visit: https://policies.google.com/privacy?hl=en&gl=de.
5. YouTube videos
We have embedded our own YouTube videos into our online presence. All of these videos have been incorporated in “enhanced data protection mode”, which means that no data pertaining to you as a user will be transmitted to YouTube as long as you do not play them. The data described in the next paragraph will only be transmitted if you play one of these videos. We have no influence on this transmission of data.
If you play a video, YouTube will be informed that you have visited our website. The data described under section II., 1 will also be transmitted. This will take place regardless of whether you have and have logged into a YouTube account. If you have logged into Google or YouTube, your data will be linked directly to your corresponding user account. If you do not wish to be associated with your YouTube account, you will need to log out before playing a video. YouTube stores your data in usage profiles that serve purposes related to advertising, market research, and/or the needs-based design of its own website. It performs related analyses in order to display tailored advertising, even when users have not logged into YouTube.
The purpose of this data processing is to display the videos we have published on YouTube on our own website, as well. The corresponding legal basis is Article 6, para. 1(f) of the GDPR, along with para. 1(a), assuming you have provided your consent.
While providing this data is required neither by law nor by any contract, the transmission of your data to YouTube is necessary if you wish to view the YouTube videos embedded into our website. We have no influence on how long YouTube will store your data.
For further information on YouTube’s data privacy policies, please visit: https://policies.google.com/privacy?hl=en&gl=de.
Our website includes Facebook's “share” and “like” buttons. These are used in connection with a plug-in that makes it possible to share content from our website on Facebook. Cookies may also be involved in this process (see section II., 2 above).
If you wish to share content from our website on Facebook, you can activate the aforementioned plug-in by clicking the “Activate Facebook” button (this is referred to as a “two-click solution”). As soon as you click this button, Facebook will process the data described under section II., 1 and be informed that you have visited our website. Facebook will also publish the information that you have shared certain content. Other data may be processed, as well. This data processing takes place even if you do not have a Facebook account or have not logged in. If you have logged into Facebook, your data will be linked to your account. If you wish to prevent your data from being processed for these purposes, do not click any Facebook buttons.
This processing is performed in order to inform other Facebook users of the content you have shared. Facebook also processes data for purposes related to personalised advertising, market research, and/or the needs-based design of its website. The corresponding legal basis is Article 6, para. 1(f) of the GDPR, along with para. 1(a), assuming you have provided your consent. We have an interest in making it easier to share content and distributing content from our blog on social media.
While providing this data is required neither by law nor by any contract, the transmission of your data to Facebook is necessary if you wish to share content on its platform. We will process the data collected by the plug-in in question until you decide not to share further content in the future. We have no influence on whether Facebook will continue to store your data at that point.
For further information, please visit http://www.facebook.com/policy.php, http://www.facebook.com/about/privacy/your-info-on-other#applications, and http://www.facebook.com/about/privacy/your-info#everyoneinfo.
III. Contact Form and Other Forms of Communication
We process the data you enter on our contact form or send to us by e-mail in order to manage and respond to your enquiries.
Based on Article 6, para. 1(a) of the GDPR, we are permitted to process the data you enter on our contact form if you provide your consent. In addition, entering sensitive information that contains special categories of data (regarding your ethnicity, political views, religious beliefs, union affiliation, health, or sexuality, for example) in the “Message” field constitutes consent to the processing of this information. If you send us data by e-mail, the legal basis set forth in Article 6, para. 1(f) (and (b), where applicable) of the GDPR applies.
This data will be deleted no later than 12 months after your enquiry is received, provided that we are neither entitled nor obligated to retain the data for a longer period in accordance with legal requirements related to Article 6, para. 1(c) of the GDPR.
The provision of this data is required neither by law nor by any contract, nor is it necessary in order to conclude a contract. The use of the contact form does, however, require you to supply an e-mail address, as we will otherwise be unable to reply to your enquiry. Any further data you provide is voluntary.
If you apply to a position at Ernst Klett AG, we will process your data in order to decide whether to hire you based on Article 6, para. 1(a) and Article 88 of the GDPR (in conjunction with § 26, para. 1, p. 1 of the Bundesdatenschutzgesetz). After using this data to complete the application process, we will retain it for no longer than six months, at which point it will be deleted. Further processing related to establishing or maintaining a corresponding employment relationship is permitted based on the aforementioned legal basis, provided that you begin working for our company once the application process is complete.
While the provision of your personal data is required neither by law nor by any contract, submitting an online application always necessitates the transmission and storage of data. If you provide us with special categories of data on a voluntary basis – that is, those that contain details regarding your ethnicity; political, religious, or philosophical beliefs; union affiliation; health; or sexuality – you thus also consent to the processing of this data. We ask that you refrain from transmitting data of this nature to us.
If you apply to a company within the Klett Group, that company alone is responsible for processing your data in the course of its application procedure. Information on the respective data protection policies of the individual companies within the Klett Group can be found on the website of the company to which you apply.
V. Data Recipients
We transmit the data described above to the following processors, which process your data based solely on our directives and not for their own purposes:
MPM Corporate Communication Solutions
Media Process Management GmbH
Untere Zahlbacher Straße 13
Global Group Dialog Solutions AG
Telco Kreisel 1
In certain cases, we may forward some of your data to other recipients if you have provided corresponding consent (pursuant to Art. 6, para. 1(a) of the GDPR), we are required by law to do so (Art. 6, para. 1(c)), or doing so is necessary in order to preserve justifiable interests (Art. 6, para. 1(f)). These recipients include:
If the commissioned data processors in question or any other recipients are based in the United States, your data will also be sent there. Google LLC and YouTube LLC have signed the EU-US Privacy Shield agreement. In a corresponding adequacy decision (http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016D1250&from=DE), the European Commission determined that this framework ensures an appropriate level of data protection.
VI. Your Rights Regarding Your Data
Pursuant to Article 15 of the GDPR, you have the right to request information about whether we process your data (and if so, which data). You can also ask that your data be corrected (and completed, if applicable) in accordance with Article 16 of the GDPR. The GDPR further grants you the right to have your data deleted (Article 17) or blocked (Article 18). In line with Article 20 of the GDPR, you are entitled to receive any of your data that has been transmitted to us based on your consent or a corresponding contract, provided that the processing in question is automated. If you prefer it and doing so is technically feasible, we will transmit this data to a third party.
If you have consented to the processing of your data for a specific purpose, you have the right to revoke your consent at any time. You will not face any negative consequences in doing so. Revoking your consent will not affect the legality of the processing performed up to that point. You can revoke your consent by sending an e-mail to info (at) klett-gruppe.de. Once you revoke your consent, the respective data will no longer be processed for the purpose covered by the consent.
Finally, you have the right to lodge complaints regarding the applicable data protection laws, in particular with the Baden-Württemberg state representative for data protection and freedom of information (Landesbeauftragter für Datenschutz und Informationsfreiheit, Königsstraße 10a, 70173 Stuttgart, Germany).
Information on your revocation rights:
In cases in which we process data to preserve our interests on the sole basis of Article 6, para. 1 (f) of the GDPR, you have the right to object to the processing of your data for reasons pertaining to your particular situation. If you raise such an objection, we will no longer process the data in question unless we can prove that there is compelling justification for the continuation of said processing and it takes precedence over your interests, rights, and freedoms; or the processing is necessary to enforce valid legal claims.
Status: August 2018