Data Protection Notice for www.schwarz-digits.de
Version 1.2
We take the protection of your personal data very seriously and strive to provide you with comprehensive information about the processing of your personal data. The following privacy policy explains how and for what purposes we process your personal data when you visit our website or contact us.
As a rule, the personal data of yours that we collect is obtained directly from you. The statutory basis is, in particular, the EU General Data Protection Regulation (GDPR).
Unless otherwise stated in the following, the controller within the meaning of Article 4(7) GDPR responsible for the processing of data described below is:
Schwarz Digits KG
Stiftsbergstr. 1
74172 Neckarsulm
Germany
Telephone: +49 7132 30-5000
Email: info@schwarz-digits.de
We treat all personal data that we receive from you by e-mail, telephone, mail or contact form confidentially. We use your data solely for the limited purpose of processing your inquiry.
The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest arises from the interest in responding to your inquiries so that the satisfaction of our customers, business partners and/or website users alike is ensured and promoted.
As a rule, we do not transfer the data to third parties outside Schwarz Digits KG. In exceptional cases, we will have a processor process the data on our behalf. Such processors are carefully selected and bound by contract in accordance with Article 28 GDPR.
You are under no statutory or contractual obligation to provide personal data to us. However, if you do not provide us with the data required to process your request, we will not be able to process or respond to it.
We delete or securely anonymize all information we receive from you when you make inquiries no later than 90 days after the final response is sent to you. The information is retained for 90 days in case you contact us again after a receiving a response from us on the same matter and we need to refer to our previous correspondence. Based on experience, we generally do not receive any questions concerning our responses after 90 days. If you assert your rights as a data subject, your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met.
When you visit our website, log files are generated containing the following information:
The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest arises from our interest in protecting our systems and preventing improper and/or fraudulent activity each time that a user accesses this website.
In exceptional cases, your personal data may be accessible to Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany, for support and maintenance purposes, as our website is hosted on servers provided and operated by Schwarz IT KG.
You are under no statutory or contractual obligation to provide personal data to us. However, such data will be processed for technical reasons as soon as you access our site. The only way to prevent your data from being processed is to stop using our website.
We store the aforementioned data for a period of seven days.
We, Schwarz Digits KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany, are the controller with respect to data processing in connection with the use of “cookies” and other similar technologies to process usage data on our website.
Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our websites. Cookies do not cause any harm to your end device, nor do they contain any viruses, trojans or other malware. The cookie stores certain information that results in connection with the specific end device deployed. This does not, however, mean that we will immediately become aware of your identity.
You may also configure your browser to ensure that a warning appears every time a new cookie is placed. This makes the use of cookies more transparent for you. You may also configure your browser to refuse acceptance of all or some cookies from certain sources. Please be advised, however, that disabling cookies may limit the functionality of this website.
Cookies and the other technologies used to process usage data are deployed for the following purposes, depending on the categories of cookie/other technologies:
Depending on the purpose, the use of cookies and similar technologies to process usage data involves processing the following types of personal data in particular:
Technically necessary:
Preferences:
Statistics:
pseudonymized usage profiles containing information on the use of our website. These contain in particular:
Marketing:
Pseudonymized usage profiles containing information on the use of our website. These contain in particular:
The legal basis for using preferences, statistics and marketing cookies and similar technologies is your consent given pursuant to Article 6(1)(a) GDPR and section 25(1) sentence 1 of the German Telecommunications and Digital Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutzgesetz – TDDDG). The legal basis for using technically necessary cookies and similar technologies is your consent given pursuant to Article 6(1)(f) GDPR and section 25(2) no. 2 TDDDG. We have a legitimate interest in ensuring the technical stability and security of website operation.
You may withdraw/modify your consent at any time with effect for the future without this affecting the lawfulness of the processing based on consent before its withdrawal. Please click here and make your selection.
For an overview of the cookies and other technologies we use, including the respective purposes of processing, storage periods and any third-party providers involved, please refer to our Cookie Policy.
When using cookies and similar technologies to process usage data, we may on occasion retain specialized service providers, particularly from the field of online marketing, to process data. These service providers process data on our behalf.
If you have consented to processing for marketing purposes, we may potentially share your User ID and the associated user profiles with third parties via the providers of advertising networks.
For information about other recipients in connection with using cookies to process data, see our cookie policy under the heading “Providers”.
Our website uses the “Google Analytics” service offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. Cookies and similar technologies, in particular JavaScript, are used to store and analyze data on your end device.
In the European Union and in the European Economic Area (EEA), the “Google Analytics” service is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which assists us a processor in accordance with Article 28 GDPR.
“Google Analytics” creates user profiles on the basis of pseudonyms (recognition attributes from cookies and device ID and further data on the end device used or the “browser fingerprint”) and usage data (e.g., name and address of the website content requested by your browser, referral links, description of the web browser and operating system used, and the IP address of the requesting end device). Demographic data, such as the age, gender and interests of the users, and interactions, such as button clicks, scroll depth and length of stay, are collected, analyzed and merged with existing anonymized data.
We have configured “Google Analytics” in a such way that your IP address is processed and truncated within the EU using the „_anonymizeIp()“ feature before it is transmitted to Google’s servers in the USA.
We transmit your data in connection with our use of “Google Analytics” to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. In principle, we have no influence on further data processing by the third-party provider. For further information on how Google handles personal data, please visit https://policies.google.com/privacy?hl=en. By virtue of the fact that we use “Google Analytics” on our web pages, data is transmitted to the aforementioned recipients and stored there for a period of 26 months.
As a rule, we do not transfer your data to recipients located outside of the European Union or the European Economic Area. To the extent that you have consented to the use of the relevant cookies, your data will only be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, if it is processed using Google Analytics and YouTube. Some of these servers are located in the USA. The EU does not have an adequacy decision in place for the USA, which means that a lower level of data protection than in the EU must be assumed. This could mean that you may not be able to adequately exercise your rights as a data subject. In addition, we have no control over the extent to which Google uses your data for its own purposes. However, we have concluded standard contractual clauses with Google, which contractually oblige Google to comply with European data protection standards.
You are under no statutory or contractual obligation to provide personal data to us. You may prevent cookies from being stored by adjusting the aforementioned settings, selecting the categories of cookies accordingly or by withdrawing or modifying any consent you may have given.
Please refer to our cookie policies for Cookie-Notes for information on the duration of storage for cookies. If “persistent” is entered in the “expiration” column, the cookie will be stored permanently until the corresponding consent is withdrawn.
You have the opportunity to share job advertisements published on our website e.g. via social networks.
For reasons of data protection, we have deliberately decided against integrating the "share" function of the various social networks directly into this page as a social plug-in. Therefore, the "Share" functions integrated on this page are only implemented as a link. The link only refers to the pages of the social networks in a new window. Simply calling up this page therefore does not transmit any data to providers of social media services. Profiling by third parties is therefore excluded. However, we do not want to deny those visitors who would like to "share" the content of our website with their social network this opportunity. Data will only be transferred to the provider of the social network you have selected if you consciously click on the relevant "Share" button.
4.1. Purposes and legal basis of data processing
The legal basis for data processing when using the "Share" function is Art. 6 para. 1 lit. f) GDPR. The legitimate interest arises from the interest in being able to offer the user of our website this function as a voluntary option.
4.2. Precipients/categories of recipients
"Sharing" the content of our website will then result in certain data being transmitted to the provider of the social media service, e.g:
The shared content can then also be viewed by other users of the same social network, depending on the data protection settings you have made for your own account. If you are already logged in to the associated social media service at the time you click the share button, its provider will also be able to determine your user name and, if applicable, your real name from the above-mentioned data. This data may also be processed by the provider in countries outside the EU. We have no influence on the scope, type and purpose of data processing by the provider. Please note that providers of social media services are able to create pseudonymized and even individualized user profiles with the above-mentioned data.
4.3. Obligation to provide your data
You are neither contractually nor legally obliged to provide us with personal data or to transmit it by using the "Share" function. You are free to use the function shown and the associated data processing or not.
4.4. Storage period/criteria for determining the storage period
The duration of the display of the content shared by you depends on the data protection settings of your account with the respective social network, as well as on their data protection provisions. We have no influence on this.
We have embedded YouTube videos on our website, which are stored at http://www.YouTube.com and can be played directly from our website. All videos are embedded with “privacy-enhanced mode” enabled, which means that no data about you as the user is transferred to YouTube if you do not play the videos. Data is only transferred if you play the videos. We do not have any control over this transfer of data.
You can find further information on the purpose and scope of data collection and how YouTube processes data in the provider’s privacy policy. You will also find further information there about your rights in this regard and settings to protect your privacy. YouTube’s Address and privacy policies: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; https://www.google.de/intl/de/policies/privacy/.
We operate the following accounts on social networks:
The party responsible for the collection and processing of data described below (the controller) is in some cases us, Schwarz Digits KG, and in some cases the operator of the relevant social media platform.
We have only limited control over the processing of data by the operators of the platforms (e.g., the management of members and the information shared). In the situations in which we are able to have influence and can set parameters for the data processing, we endeavor to ensure within the confines of the options available to us that the platform operator deals with the data in accordance with data protection law requirements. In many cases, however, we are unable to influence the way in which platform operators process data and also do not know exactly which data they process.
Platform operators operate the entire IT infrastructure of the service, have their own privacy policies and maintain their own user agreements with you (where you are a registered user of the social media service). The operator is also solely responsible for all questions relating to the data that makes up your user profile, which we as a company have no access to.
You will find further information about the data processing performed by platform operators and your rights to object in the individual operator's privacy policy.
We process data on our social media sites for the purpose of providing information to customers about services, promotions, prize draws, specific topics and latest company news, to interact with visitors to our social media sites on these topics, and to respond to relevant inquiries and positive or negative feedback.
We merely reserve the right to delete content if it becomes necessary to do so. We may share your content on our site if this is one of the functions of the platform, and communicate with you through the platform. The legal basis is Article 6(1)(f) GDPR. The processing is carried out for the purpose of our public relations work and communications.
Operators have no ability to influence our processing of your data in connection with customer communications.
As already mentioned, where platform operators give us the option, we make sure we design our sites to be as compliant as possible with data protection laws.
The data entered by you on our social media sites, such as comments, videos, images, likes, public messages, etc., is published by the social media platforms and is not used or processed by us for other purposes at any time. We merely reserve the right to delete unlawful content if it becomes necessary to do so. This would be the case, for example, for posts that infringe rights or violate the law, comments that incite hatred, offensive comments (sexually explicit content) or attachments (e.g., images or videos), which may be in violation of copyright laws, moral rights/rights of publicity or criminal law.
We may share your content on our site if this is one of the functions of the social media platform, and communicate through the social media platform. If you post an inquiry on the social media platform, we may also, depending on the required response, refer you to other more secure modes of communication that guarantee confidentiality. You always have the option of sending confidential inquiries to us at our address listed under A. above or in the "legal notice" section of our website.
You are under no statutory or contractual obligation to provide personal data to us. When you use our social media sites for purely informational purposes, we do not collect any personal data. You can still visit our sites even if you do not wish to provide us with any personal data, but you will not be able to use any enhanced features such as the news function and the function allowing you to post images or comments etc.
We delete or securely anonymize all information we receive from you when you make inquiries no later than 90 days after the final response is sent to you. The information is retained for 90 days in case you contact us again after receiving a response from us on the same matter and we need to refer to our previous correspondence. Based on experience, we generally do not receive any questions concerning our responses after 90 days. If you assert your rights as a data subject, your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met.
All public posts that you put on our social media sites remain in the timeline for an indefinite period, unless we delete them as part of updating the information on the topic, they violate the law or breach our guidelines or policies, or you delete the post yourself. We have no control over the deletion of your data by the operator itself. The privacy policy of the relevant operator therefore also applies in relation to the storage period.
We delete or securely anonymize all information we receive from you when you make inquiries no later than 90 days after the final response is sent to you. The information is retained for 90 days in case you contact us again after receiving a response from us on the same matter and we need to refer to our previous correspondence. Based on experience, we generally do not receive any questions concerning our responses after 90 days. If you assert your rights as a data subject, your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met.
All public posts that you put on our social media sites remain in the timeline for an indefinite period, unless we delete them as part of updating the information on the topic, they violate the law or breach our guidelines or policies, or you delete the post yourself. We have no control over the deletion of your data by the operator itself. The privacy policy of the relevant operator therefore also applies in relation to the storage period.
If you consent to receiving our newsletter, we will process your data:
for purposes of sending you (possibly personalized) information about products, offers, promotions, services, announcements and invitations to take part in prize draws, surveys, training opportunities, events and webinars relating to to Schwarz Digits KG, as well as information about goods and services of affiliated partner companies. At present, these include in particular:
Our newsletter is usually sent out approx. 1 - 4 times a month.
We also record your newsletter usage behavior (in particular opening, clicking on links and other activities), among other things by means of tracking mechanisms (cookies/tracking pixels), and on this basis create aggregated usage profiles without any direct personal link in order to tailor the information to your interests and optimize our services.
The legal basis for this data processing is your consent given pursuant to Article 6(1) sentence 1 (a) GDPR (for data processing) and section 25 (1) of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG) (for using cookies, etc.). You may withdraw your consent to receive the newsletter and to the recording of newsletter activities at any time with effect for the future, e.g., by unsubscribing from the newsletter on our website. The link to the unsubscribe page is provided at the bottom of every newsletter. When you unsubscribe, we consider your consent to a newsletter subscription and the recording of your usage behavior and the receipt of newsletters based thereon as withdrawn. We will delete your usage data. The lawfulness of the processing carried out until such time as we receive your notice of withdrawal shall not be affected.
To ensure that no mistakes are made when entering the e-mail address, we use the "double opt-in" procedure: once you enter your e-mail address in the registration field, we will send you a confirmation link. Your e-mail address will not be added to our distribution list until you click on this link.
We also process the following data to document your consent and to defend our rights:
The legal basis for this data processing is Article 6(1) sentence 1(f) GDPR. The purposes listed above constitute our legitimate interest.
Under certain circumstances, we may need to transfer your personal data to other recipients.
For our newsletter, we use IT service providers to process personal data on our behalf.
If the confirmation link is not confirmed within 24 hours, your data will be deleted in full.
As soon as you unsubscribe from the newsletter, we will delete your e-mail address, your name (if provided) and your usage data.
As proof of your consent, the required data will be stored for three years, starting at the end of the calendar year in which you unsubscribe from the newsletter.
If we have collected your business address, we may also process it in order to send you information about products, offers, promotions, services, announcements and invitations to take part in prize draws, surveys, training opportunities, events and webinars relating to to Schwarz Digits KG, as well as information about goods and services of affiliated partner companies by mail.
Affiliated partner companies currently include in particular
The legal basis for data processing is our legitimate interest in direct advertising in accordance with Article 6(1) sentence 1 (f) GDPR.
We process the following personal data of yours:
The data originates from our address service providers, supplier platforms and other information provided by you for this purpose.
The data will be deleted as soon as you have objected to receiving the mail.
Pursuant to Article 15(1) GDPR, you have the right to request information, free of charge, on the personal data stored about you.
If the statutory requirements are met, you also have a right to rectification (Article 16 GDPR), erasure (Article 17 GDPR) and restriction of processing (Article 18 GDPR) of your personal data.
If the basis of processing is Article 6(1)(e) or (f) GDPR, you have a right to object under Article 21 GDPR. If you object to processing, your data will no longer be processed thereafter, unless the controller demonstrates compelling legitimate grounds for the processing which override the interests of the data subject in the objection.
If you have provided the processed data yourself, you have a right to data portability under Article 20 GDPR.
If the data processing is carried out on the basis of consent granted under Article 6(1)(a) or Article 9(2)(a) GDPR, you may revoke that consent at any time with effect for the future without this affecting the lawfulness of the previous processing.
In the above-mentioned cases, or if you have questions or complaints, please write to or e-mail the data protection officer. You also have a right to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority located in the state in which you live or where the controller is domiciled has jurisdiction.
For further questions concerning the processing of your data or the exercise of your rights, please contact the competent data protection officer of the controller at:
Schwarz Digits KG
- Datenschutzbeauftragter -
Stiftsbergstraße 1
74172 Neckarsulm
Germany
Email: datenschutz@mail.schwarz