Data Protection

Here, we’d like to inform you about how we process your personal data when you visit www.klett-gruppe.de.

I. Controller and Data Protection Officer

Ernst Klett AG, Rotebühlstraße 77, 70178 Stuttgart, Germany
E-mail: info@klett-gruppe.de, tel.: +49 (0) 711 6672-0

If you have any questions regarding the protection of your data, please feel free to contact our data protection officer:

Ernst Klett AG (Attn: Data Protection Officer), Rotebühlstraße 77, 70178 Stuttgart, Germany
E-mail: b.spickenheier (at) klett-gruppe.de, tel.: +49 (0) 711 6672 1173

II. Visiting www.klett-gruppe.de

1. Server log files

When you visit this website, we process your IP address and the date and time of your visit; information on your device's operating system and the browser you use, including your language settings; the address of the website from which you accessed www.klett-gruppe.de (also known as a “referrer URL”); the names of the files you access; and the amount of data transferred in the process. This information, which we receive from your Internet service provider, is stored in log files for no more than seven days.

For technical reasons, much of the data involved has to be processed in order to display this website on your computer or smartphone and to safeguard system security. It is also analysed in anonymised form for statistical purposes and to improve the quality of the site (see also section II, 2 below). None of this data is linked to the personal data of any specific natural person.

This data is processed based on Article 6, para. 1(f) of the EU's General Data Protection Regulation (GDPR). We have a justifiable interest in ensuring the proper presentation of this website on your screen, our ability to address the causes of hacking attempts and other disruptions in short order, and the means by which we analyse this anonymised data for statistical purposes. While the provision of said data is not stipulated by law or any contract, not processing the bulk of the data in question would make using this website impossible for related technical reasons.

 

2. Cookies

Our website makes use of cookies, which are small files that contain an identification number. Cookies are stored on your computer or mobile device when you visit our website. If you access our website again, the identification number assigned makes it possible to recognise your computer or mobile device.

Session cookies, meanwhile, enable you to avoid having to enter information on our website multiple times, even if you visit other websites in the interim. Such cookies are thus meant to make it easier for you to use our website. We also use permanent cookies to collect statistics on how our website is used and analyse them for optimisation purposes (see section II., 3).

Article 6, para. 1(f) of the GDPR serves as the legal basis for these purposes. We have an interest in optimising our website to ensure that it offers you a user-friendly experience.

Session cookies are deleted when you close your browser. Permanent cookies remain valid for up to 12 months, at which point they are also deleted.

You can visit our website without allowing the use of cookies, and there is no obligation to use them. While most browsers accept cookies automatically, you can configure yours to deny them. These settings must be configured separately for every browser and device you use.

 

3. Generation of statistics through Matomo

Our website uses the web analytics service Matomo. The purpose of Matomo is to log users’ clicking and surfing behaviour on this website, which enables us to generate statistics on how the site is used and make corresponding improvements. The data collected for this purpose is anonymised and not stored along with your other data. During this process, your IP address is anonymised as quickly as possible so that you remain unidentifiable to us as a user.

We are permitted to use Matomo and permanent cookies in accordance with Article 6, para. 1(f) of the GDPR, as well as in accordance with Article 6, para. 1(a) should you provide corresponding consent. We have a justifiable interest in using statistical analysis to optimise our website.

The cookies set by Matomo remain valid for up to 13 months. The corresponding data is stored for three months.

There is no obligation to allow the use of Matomo or permanent cookies, and you can visit our website without them. You can also configure your browser to deny the use of cookies (see section II., 2), but doing so may prevent you from using all the functions this website offers. Alternatively, you can deny the use of Matomo by opting out below. Doing so will set an opt-out cookie that will prevent Matomo from performing its analysis should you visit this website again from the device and browser you are currently using. If you delete your browser’s cookies, this will include the opt-out cookie.

 4. Google Maps

Our website incorporates Google Maps content from Google LLC. If you visit a section of our website that includes Google Maps, data related to how you use Google Maps will be transmitted to and processed by Google. Google will be informed that you visited the webpage in question, for example, and your IP address will also be disclosed. Google uses this data to create usage profiles that serve purposes related to advertising, market research, and/or the needs-based design of Google Maps. If you are a Google customer and have logged into a Google service, the data will be linked directly to your Google account. If you wish to prevent this, you will need to log out of Google before visiting our website. For further information on Google’s data privacy policies, please visit: https://policies.google.com/privacy?hl=en&gl=de.

This data is processed based on your corresponding consent (pursuant to Art. 6, para. 1(a) of the GDPR). The provision of this data is required neither by law nor by any contract, nor is it necessary in order to conclude a contract with our organisation. If you do not want your data to be transmitted to Google, you should not activate Google Maps. Alternatively, you can deactivate JavaScript in your browser. In both cases, you will not be able to use Google Maps on our website.

 

5. YouTube videos

We have embedded our own YouTube videos into our online presence. All of these videos have been incorporated in “enhanced data protection mode”, which means that no data pertaining to you as a user will be transmitted to YouTube as long as you do not play them. The data described in the next paragraph will only be transmitted if you play one of these videos. We have no influence on this transmission of data.

If you play a video, YouTube will be informed that you have visited our website. The data described under section II., 1 will also be transmitted. This will take place regardless of whether you have and have logged into a YouTube account. If you have logged into Google or YouTube, your data will be linked directly to your corresponding user account. If you do not wish to be associated with your YouTube account, you will need to log out before playing a video. YouTube stores your data in usage profiles that serve purposes related to advertising, market research, and/or the needs-based design of its own website. It performs related analyses in order to display tailored advertising, even when users have not logged into YouTube.

The purpose of this data processing is to display the videos we have published on YouTube on our own website, as well. The corresponding legal basis is Article 6, para. 1(f) of the GDPR, along with para. 1(a), assuming you have provided your consent. 

While providing this data is required neither by law nor by any contract, the transmission of your data to YouTube is necessary if you wish to view the YouTube videos embedded into our website. We have no influence on how long YouTube will store your data.

For further information on YouTube’s data privacy policies, please visit: https://policies.google.com/privacy?hl=en&gl=de.

 

6. Facebook

Our website includes Facebook's “share” and “like” buttons. These are used in connection with a plug-in that makes it possible to share content from our website on Facebook. Cookies may also be involved in this process (see section II., 2 above).

If you wish to share content from our website on Facebook, you can activate the aforementioned plug-in by clicking the “Activate Facebook” button (this is referred to as a “two-click solution”). As soon as you click this button, Facebook will process the data described under section II., 1 and be informed that you have visited our website. Facebook will also publish the information that you have shared certain content. Other data may be processed, as well. This data processing takes place even if you do not have a Facebook account or have not logged in. If you have logged into Facebook, your data will be linked to your account. If you wish to prevent your data from being processed for these purposes, do not click any Facebook buttons.

This processing is performed in order to inform other Facebook users of the content you have shared. Facebook also processes data for purposes related to personalised advertising, market research, and/or the needs-based design of its website. The corresponding legal basis is Article 6, para. 1(f) of the GDPR, along with para. 1(a), assuming you have provided your consent. We have an interest in making it easier to share content and distributing content from our blog on social media.

While providing this data is required neither by law nor by any contract, the transmission of your data to Facebook is necessary if you wish to share content on its platform. We will process the data collected by the plug-in in question until you decide not to share further content in the future.  We have no influence on whether Facebook will continue to store your data at that point.

For further information, please visit http://www.facebook.com/policy.php, http://www.facebook.com/about/privacy/your-info-on-other#applications, and http://www.facebook.com/about/privacy/your-info#everyoneinfo.

 

III. Contact Form and Other Forms of Communication

We process the data you enter on our contact form or send to us by e-mail in order to manage and respond to your enquiries.

Based on Article 6, para. 1(a) of the GDPR, we are permitted to process the data you enter on our contact form if you provide your consent. In addition, entering sensitive information that contains special categories of data (regarding your ethnicity, political views, religious beliefs, union affiliation, health, or sexuality, for example) in the “Message” field constitutes consent to the processing of this information. If you send us data by e-mail, the legal basis set forth in Article 6, para. 1(f) (and (b), where applicable) of the GDPR applies.

This data will be deleted no later than 12 months after your enquiry is received, provided that we are neither entitled nor obligated to retain the data for a longer period in accordance with legal requirements related to Article 6, para. 1(c) of the GDPR.

The provision of this data is required neither by law nor by any contract, nor is it necessary in order to conclude a contract. The use of the contact form does, however, require you to supply an e-mail address, as we will otherwise be unable to reply to your enquiry. Any further data you provide is voluntary.

 

IV. Applications

If you apply to a position at Ernst Klett AG, we will process your data in order to decide whether to hire you based on Article 6, para. 1(a) and Article 88 of the GDPR (in conjunction with § 26, para. 1, p. 1 of the Bundesdatenschutzgesetz). After using this data to complete the application process, we will retain it for no longer than six months, at which point it will be deleted. Further processing related to establishing or maintaining a corresponding employment relationship is permitted based on the aforementioned legal basis, provided that you begin working for our company once the application process is complete.

While the provision of your personal data is required neither by law nor by any contract, submitting an online application always necessitates the transmission and storage of data. If you provide us with special categories of data on a voluntary basis – that is, those that contain details regarding your ethnicity; political, religious, or philosophical beliefs; union affiliation; health; or sexuality – you thus also consent to the processing of this data. We ask that you refrain from transmitting data of this nature to us.

If you apply to a company within the Klett Group, that company alone is responsible for processing your data in the course of its application procedure. Information on the respective data protection policies of the individual companies within the Klett Group can be found on the website of the company to which you apply.

 

V. Data Recipients

We transmit the data described above to the following processors, which process your data based solely on our directives and not for their own purposes:

  • Support and maintenance of www.klett-gruppe.de

MPM Corporate Communication Solutions
Media Process Management GmbH
Untere Zahlbacher Straße 13
55131 Mainz
Germany

  • Hosting

Global Group Dialog Solutions AG
Telco Kreisel 1
65510 Idstein
Germany 

In certain cases, we may forward some of your data to other recipients if you have provided corresponding consent (pursuant to Art. 6, para. 1(a) of the GDPR), we are required by law to do so (Art. 6, para. 1(c)), or doing so is necessary in order to preserve justifiable interests (Art. 6, para. 1(f)). These recipients include:

  • YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (provided that you click on YouTube videos)
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (provided that you have activated Google Maps)
  • Facebook Inc., 1601 S. California Ave., Palo Alto, California 94304, USA
  • Postal and telecommunications companies involved in communicating with you
  • Law enforcement authorities and courts involved in asserting or defending legal claims
  • Financial auditors, attorneys, and tax advisors
  • Insurance companies involved in settling liability cases

If the commissioned data processors in question or any other recipients are based in the United States, your data will also be sent there. Google LLC and its subsidiary YouTube LLC have signed the EU-US Privacy Shield agreement. In a corresponding adequacy decision (http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016D1250&from=DE), the European Commission determined that this framework ensures an appropriate level of data protection.

 

VI. Your Rights Regarding Your Data

Pursuant to Article 15 of the GDPR, you have the right to request information about whether we process your data (and if so, which data). You can also ask that your data be corrected (and completed, if applicable) in accordance with Article 16 of the GDPR. The GDPR further grants you the right to have your data deleted (Article 17) or blocked (Article 18). In line with Article 20 of the GDPR, you are entitled to receive any of your data that has been transmitted to us based on your consent or a corresponding contract, provided that the processing in question is automated. If you prefer it and doing so is technically feasible, we will transmit this data to a third party.

If you have consented to the processing of your data, you have the right to revoke your consent at any time. You will not face any negative consequences in doing so. Revoking your consent will not affect the legality of the processing performed up to that point. You can revoke your consent by sending an e-mail to info@klett-gruppe.de. Once you revoke your consent, the respective data will no longer be processed unless we are legally entitled or obligated to do so.

Finally, you have the right to lodge complaints regarding the applicable data protection laws, in particular with the Baden-Württemberg state representative for data protection and freedom of information (Landesbeauftragter für Datenschutz und Informationsfreiheit, Königsstraße 10a, 70173 Stuttgart, Germany).

Information on your revocation rights:

In cases in which we process data to preserve our interests on the sole basis of Article 6, para. 1 (f) of the GDPR, you have the right to object to the processing of your data for reasons pertaining to your particular situation. If you raise such an objection, we will no longer process the data in question unless we can prove that there is compelling justification for the continuation of said processing and it takes precedence over your interests, rights, and freedoms; or the processing is necessary to enforce valid legal claims.

 

Status: August 2018