Data protection declaration

as of 23.10.2018

1. Data protection at a glance

General information

The protection of your personal data is of the utmost importance to our company. The processing of this data by us takes place strictly in accordance with the data protection laws. These are the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other legal regulations. In accordance with the GDPR, we are obliged to provide you with the following information concerning the processing of your data.

Data recording on our website

Who is responsible for the data recording on this website?
The data processing on this website is carried out by the website operator.
You can find the contact details of the website operator in the legal notice of this website.

How do we record your data?

On the one hand, your data is gathered when you notify us of this, for example by email or in the course of the performance of your orders.

Other data is automatically recorded by our IT systems when you visit the website. This is primarily technical data (for example Internet browser, operating system or time the site was accessed). The recording of this data takes place automatically when you visit our website.

What do we use your data for?

When you send comments to us:
You can send comments to us at any time. You can do this by telephone, letter, email, fax or personally. When you send us data during this process, the following applies:
Personal data: Information which you provide to us voluntarily.
Purpose of the processing: Dealing with your comment
Legal basis: Article 6 Paragraph 1 Letter a) GDPR
Data recipients:
– Company management and internal departments
– Bodies to which we forward your data on your request
Retention period:
Once the processing is complete, the data is archived. The data in the archive is deleted after 10 years.

Business partners (customers, suppliers, service providers):
Most of our service partners nominate one of their employees to Saalemühle Alsleben GmbH and Dresdener Mühle as a point of contact. The contact data of these points of contact is processed by us as follows:
Personal data:
– Name
– Company name and address
– Function, role
– Telephone number, fax number
– Email address
Purpose of the processing: Agreements in relation to engaged services / deliveries
Legal basis: Article 6 Paragraph 1 Letter f) GDPR
Origin of the data:
– Notification by the point of contact himself / herself
– Notification by another contact person of the service provider / supplier
Data recipients:
– Company management and internal departments

Retention period:
Once the order has been completed, the data is archived. The data in the archive is deleted after 10 years. There is no obligation to transmit this data. The processing is not absolutely necessary for the service / delivery. However, without designated points of contact, the time and expense of concluding agreements would be disproportionately high. In addition, there would be a serious risk of misunderstandings. Therefore, there is a legitimate interest in this processing.

Job applicants:
You are welcome to send us your application by email.
When you apply to us, we process the following data belonging to you:
Personal data: Data which you send together with the application
Purpose of the processing: Deciding the outcome of the application
Legal basis:
– Article 88 GDPR and §26 BDSG
– Article 6 Paragraph 1 Letter a) GDPR (consent to longer retention of the documents)
Data recipients:
– Company management and internal departments
Retention period:
– In case of appointment: 10 years following the end of your employment with us
– In case of rejection: 6 months following the rejection (unless you agree to longer retention period)
The processing of the data is necessary in order to assess the application. It is not possible to enter into an employment contract without this data being provided.

During this process, we observe the principles of data economy and data minimisation. Only the data which is necessary in order to perform our business relationship is processed. The data is not used for other purposes and is not made accessible to others for different types of use.

We wish to point out that we will continue to save data of the type described above in the future, as this is absolutely necessary in order to carry out our business processes.

Data which we no longer require and where no statutory requirements or obligations under commercial law to continue to retain this exist will be destroyed by us in accordance with data protection laws.

What right do you have in relation to your data?

You have the following rights in relation to this processing of your personal data:
– Information concerning the data relating to your person which is being saved (Article 15 GDPR)
– Rectification of incorrect data (Article 16 GDPR)
– Erasure, should this be legally permitted (Article 17 GDPR)
– Restriction of the processing (Article 18 GDPR)
– Receipt of your data in a current, up-to-date and machine readable format (Article 20 GDPR)
– Objection to the processing (Article 21 GDPR)
– Complaint to a supervisory authority (Article 77 GDPR)
Any processing is based on your consent (for example for the processing of a request, the retention of job applications for longer than 3 months).
In these cases, you have the right to revoke your consent at any time with effect for the future.

Analysis tools and tools of third party providers

When visiting our website, your surfing behaviour may be statistically analysed. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous. You can prevent the statistical analysis by making settings in your browser. You will find detailed information on this in the following data protection declaration.
You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.

2. General notice and mandatory information

Data protection concept

We take the protection of your personal data extremely seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations, as well as this data protection declaration.

Your personal data is only saved and used by us in order to communicate with you and carry out the business transaction with you. During this process, we observe the principles of data economy and data minimisation. The data is not used for other purposes and is not made accessible to others for different types of use.

Your data is protected by us against external and unauthorised access in the course of our technical and organisational measures. We use suitable technical and organisational security measures in order to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised third party access. Our security measures are constantly improved in accordance with technical developments.

We wish to point out that data transfer via the Internet (for example email communication) can represent security risks. It is not possible to fully protect the data against third party access.

Information concerning the controller

The controller for the data processing on this website is:
Saalemühle Alsleben GmbH, Bernburger Straße 35b, D-06425 Alsleben
Tel. +49 (0) 34692 263 0, Fax +49 (0) 34692 263 50, E-Mail: info@saalemuehle.de
Michael Gutting (board of directors)

Data protection officer
Anja Twietmeyer
E-Mail: bds@saalemuehle.de

Revocation of your consent to data processing

Certain data processing procedures are only possible with your express consent. You can revoke consent which has already been issued at any time. The sending of an informal email to us suffices for this purpose. The lawfulness of the data processing which took place prior to the revocation remains unaffected by this.

SSL and TLS encryption

For security reasons and in order to safeguard the transfer of confidential content, for example orders or queries which you send to us as the site operator, this website uses SSL and/or TLS encryption. You can recognise an encrypted connection by the address line of the browser changing from “http://” to “https://” and from the lock symbol in your browser line.

Should SSL and/or TLS encryption be activated, the data which you send to us cannot be read by third parties.

Information, blocking, erasure

Within the framework of the applicable statutory provisions, you have the right at any time to free-of-charge information concerning the personal data saved in relation to you, its origin and recipients and the purpose of the data processing and, if applicable, a right of rectification, blocking or erasure of the said data within a reasonable period of time. In this respect and should you have any other queries concerning data protection, you can get in touch with us via the address provided in the legal notice.

Objecting to advertising emails

The use of contact data published in the mandatory legal notice for the sending of advertising and information materials which have not been expressly requested is hereby being expressly objected to. The operators of the website expressly reserve the right to take legal action in case of the unsolicited sending of advertising information, for example by means of spam emails.

3. Data protection officer

Data protection officer mandated by law
We have appointed a data protection officer for our company.
Anja Twietmeyer
bds@saalemuehle.de

4. Data recording on our website

Cookies

The Internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for the analysis of your surfing behavior) are stored, these are treated separately in this privacy policy.

Server logfiles

The provider of the sites automatically gathers and saves information in so-called server logfiles which your browser transfers to us automatically. This information includes:

browser type and version
operating system used
referrer URL
host name of the accessing computer
time of the server request
IP address
This data is not combined with other data sources.

The basis for the data processing is Article 6 Paragraph 1 Letter b) GDPR, which permits the processing of data in order to fulfil a contract or pre-contractual measures.

Contact form

Should you send us queries via the contact form, the information which you provide in the contact form, including your contact data which you provide, will be saved by us for the purpose of processing the matter as well as in case of any follow up queries. We do not pass this information on without your consent.

You can revoke consent at any time. The sending of an informal email to us suffices for this purpose. The lawfulness of the data processing procedures which took place prior to the revocation remains unaffected by this.

5. Plugins and tools

Leadinfo

We use the lead generation service provided by Leadinfo B.V., Rotterdam, The Netherlands, which recognizes visits of companies to our website based on IP-addresses and shows us related publicly available information, such as company names or addresses. In addition, Leadinfo places two first-party cookies for providing transparency on how our visitors use our website and the tool processes domains from provided form inputs (e.g. “leadinfo.com”) to correlate IP addresses with companies and to enhance its services. For additional information, please visit www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In the event of an opt-out, your data will no longer be used by Leadinfo.

Google Maps

This site uses the map function Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

In order to use the functions of Google Maps, it is necessary to save your IP address. This information is generally sent to a Google server in the USA and saved there. The provider of this site has no control over this data transfer.

The use of Google Maps takes place in the interest of an attractive display of our website and in order to find the locations stated on the website more easily. This represents a legitimate interest in accordance with Article 6 Paragraph 1 Letter f) GDPR.

Google Analytics

This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.

IP anonymization
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

Browser plugin
You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objecting to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.
For more information about how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic data collection by Google Analytics
This website uses Google Analytics’ demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section “Refusal of data collection”.

6. Social Media

Instagram Feed:

We use an Instagram feed plugin from the company Smash Balloon (LLC, P.O. Box 126 Long Lake, MN 55356, USA) to display social media content on our website. As a result, our website makes requests to Instagram’s servers to obtain the data to populate the feeds and display images and videos. These requests make your IP address visible to Instagram, which may use it in accordance with its privacy policy: https://help.instagram.com/519522125107875

7. Visits to our premises

Our operating premises and particularly sensitive locations in relation to product security are subject to video monitoring. Other work locations are not monitored. Persons from outside the company are only permitted to visit the monitored areas. Saalemühle Alsleben GmbH and Dresdener Mühle have a legitimate interest (GDPR Article 6 Paragraph 1 Letter f) in following the company rules and regulations and defending against negative effects on product security. The video monitoring is a required tool for observing sensitive areas.