Table of Contents:
- Responsible body for data processing
- Processing of your data
- Processing of personal data when using the services offered by us or for the implementation of necessary pre-contractual measures, which are carried out at your request.
- Processing of data for the assertion of legal claims, the prevention of danger and for the fulfillment of storage obligations
- Visits to our website (server log files)
- Inquiries via contact forms on our website, e-mail/messenger/telephone/fax inquiries
- Processing of supplier data and data of other service providers
- Direct advertising
- Applicant data
- Transfer of your data to third parties
- Storage and deletion periods for personal data
- Rights as a data subject
- Right of objection
- Right to revoke consent
- Complaint about data protection violations to the supervisory authorities
- Duty to notify in connection with the correction or deletion of personal data or restriction of processing
- Legal or contractual requirements to provide your personal data as well as information about the necessity for the conclusion of the contract as well as your obligation to provide the personal data and possible consequences of not providing it
- Automated decisions in individual cases including profiling
- Data security
- Questions / comments
- Use of third-party tools on our website
We take the protection of your personal data very seriously. Data is "processed" by us in accordance with the applicable statutory data protection provisions, in particular in accordance with the European General Data Protection Regulation (hereinafter referred to as: DSGVO) as well as the country-specific data protection provisions.
"Personal data" means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
In the following, we will inform you about the processing of your data, in particular about the type, scope and purposes of the collection and use of personal data as well as the corresponding legal basis of the individual processing operations. In addition, we explain to you within the framework of our data protection declaration which rights you are entitled to with regard to data processing.
2. Office responsible for data processing
You can reach the office responsible for data processing at the contact details given below:
Goatec GmbH i.Gr.
Tel.: +49 (0) 160901754
3. Type, scope, purposes and legal basis of the processing of your data
Personal data will only be processed by us if this is permitted by law, in particular for the processing of inquiries, for the performance of contracts, if there is a legitimate interest or if you consent to the processing of your personal data.
In the following, we inform you about the type, scope, purposes and legal basis of the processing of your personal data:
a) Processing of personal data for the fulfillment of the contract or for the implementation of necessary pre-contractual measures, which are carried out at your request.
Insofar as you wish to make use of the services and benefits offered by us, it may be necessary for you to provide us with personal data for this purpose.
We process your personal data for the above purposes on the legal basis of Article 6(1)(b) DSGVO in order to fulfill a contract with you or to carry out necessary pre-contractual measures, which take place at your request. Accordingly, the purpose of processing your personal data is, for example, to process inquiries or to provide the requested service. Without the provision of the personal data, we cannot process your request and/or conclude the contract with you and provide the offered services and performance.
b) Processing of data for the assertion of legal claims, the prevention of danger and for the fulfillment of retention obligations.
In addition, we process your data in order to be able to exercise, assert or defend legal claims arising from a contractual relationship or from pre-contractual measures, if applicable, and to enable law enforcement authorities to prosecute in the event of misuse of our services. This data processing is carried out on the legal basis of our legitimate interests within the meaning of Art. 6(1)(f) DSGVO. Accordingly, our legitimate interest for this data processing is to be able to exercise, assert or defend legal claims arising from the contractual relationship, if applicable, and to enable law enforcement authorities to prosecute criminal proceedings, if applicable.
Reference is made to the right of objection in accordance with section 7 of this data protection information.
In addition, we process your personal data for the purpose of complying with our statutory retention obligations. The legal basis for the fulfillment of our legal retention obligations is standardized in Article 6(1)(c) DSGVO.
c) Visiting our Internet pages (server log files)
When you visit our website, the server stores in so-called server log files data that your internet browser automatically transmits to the server, in particular:
- Visited website
- Time at the time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used
The data collected is only used for statistical analysis and to improve the website. However, the website operator reserves the right to check the server log files retrospectively if there are concrete indications of illegal use.
The processing of this data takes place in order to enable the use of the Internet pages you have accessed in the first place, for statistical purposes, to improve our Internet offering and for security against unlawful cyber attacks, as well as to exercise, assert or defend legal claims. Your IP address will only be stored for as long as is necessary to defend against possible cyber-attacks and to provide law enforcement authorities with the information they need to prosecute.
The aforementioned data will be processed separately from all personal data that you provide to us when visiting our website and/or using a service and will not be merged under any circumstances.
This data processing described above has its legal basis in Article 6(1)(b) DSGVO for the implementation of necessary pre-contractual measures, which are carried out at your request to enable you to use the Internet pages you have accessed. Insofar as the above data is processed for security against unlawful cyber attacks, or in order to exercise, assert or defend legal claims, this is done on the legal basis of Article 6(1)(f) of the DSGVO. Our legitimate interest for this data processing lies in the evaluation of the data to improve our Internet offering, to exercise, assert or defend legal claims, if necessary, and to protect our systems against unlawful cyber attacks.
Reference is made to the right to object in accordance with section 7 of this data protection information.
d) Inquiries via contact forms on our website and e-mail/messenger, telephone or fax inquiries.
If you send us inquiries via the contact form on our website and/or inquiries via e-mail/messenger/telephone or fax, your information including the contact data you provide there will be stored by us for the purpose of processing the inquiry and in the event of follow-up inquiries until the purpose no longer applies. We do not pass on this data without your consent or legal permission.
This data processing described above has its legal basis in Article 6(1)(b) DSGVO for the implementation of necessary pre-contractual measures, which take place upon your request.
e) Processing of supplier data and data of other service providers
Insofar as we process the data of suppliers and other contractual partners (hereinafter uniformly referred to as "contractual partners"), the following applies:
The data processed in each case, the type, scope, purpose and necessity of their processing are determined by the underlying contractual relationship or the pre-contractual relationship. The following categories of data are processed by us or may be processed by us:
- Master data (e.g., names and addresses),
- Contact data (e.g., e-mail addresses and telephone numbers),
- Contractual data (e.g., services used, contents of the contract, contractual communication, names of contact persons)
- Payment data (e.g., bank details, payment history).
The processing of data from suppliers and other service providers is carried out on the basis of Art. 6 para. 1 lit. b DSGVO in order to fulfill contractual or pre-contractual obligations towards our contractual partners and to provide the services owed, if applicable. Insofar as we process the data for the purposes of administration, the organization of our operations, financial accounting and compliance with legal obligations (e.g. archiving), the processing bases are Art. 6 para. 1 lit. c and lit. f DSGVO. After weighing the interests, data processing may also be carried out beyond the actual fulfillment of the contract to protect the legitimate interests of us or third parties (Art. 6 para. 1 lit. f DSGVO).
f) Direct advertising
Your name and address may also be processed for an unlimited period of time for our own postal advertising purposes on the legal basis of Article 6 (1) (f) DSGVO, whereby our legitimate interest lies in postal direct advertising for our own services.
Reference is made to the right to object in accordance with Section 7 of this data protection information.
g) Applicant data
We only process applicant data for the purpose of and within the scope of the application process in accordance with the legal requirements. Applicant data is processed in order to fulfill our (pre)contractual obligations within the scope of the application procedure in accordance with Art. 6 Para. 1 lit. b. DSGVO Art. 6 para. 1 lit. f. DSGVO insofar as the data processing becomes necessary for us, e.g. within the scope of legal procedures (in Germany, § 26 BDSG also applies).
The application procedure requires applicants to provide us with applicant data. The necessary applicant data results from the job descriptions. In principle, this includes personal details, postal and contact addresses and the documents belonging to the application, such as cover letter, CV and certificates. In addition, applicants may voluntarily provide us with additional information.
Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO are voluntarily disclosed within the scope of the application process, their processing is additionally carried out in accordance with Art. 9 (2) lit. b DSGVO (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO are requested from applicants as part of the application process, their processing is additionally carried out in accordance with Art. 9 (2) a DSGVO (e.g. health data, if this is necessary for the exercise of the profession).
If applicants send us their applications by e-mail, please note that e-mails are generally not encrypted and applicants must ensure encryption themselves. Therefore, we cannot assume any responsibility for the transmission path of the application between the sender and the receipt on our server. Instead of applying by e-mail, applicants have the more secure option of sending us their application by mail.
The data provided by applicants may, in the event of a successful application, be processed by us for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the applicants' data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.
Subject to a justified withdrawal by the applicants, the deletion will take place after the expiry of a period of six months so that we can answer any follow-up questions about the application and satisfy our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses will be archived in accordance with tax law requirements.
h) Passing on your data to third parties
Your data may be passed on to service providers supporting us for the purpose of fulfilling the contract or carrying out necessary pre-contractual measures, which are carried out at your request, and which we have of course carefully selected. These may be technical service providers or service providers assisting us with payment processing or accounting.
We also reserve the right to integrate external content from third-party providers (e.g. You-Tube videos, external map services, external graphics, etc.) on our websites. If we use tools from third-party providers, we will inform you about the use, the mode of operation, the legal basis and further details of the respective tools under point 15. of this data protection declaration.
Your personal data will otherwise only be passed on to other third parties if we are legally obliged to do so on the legal basis of Article 6(1)(c) DSGVO and, where applicable, on the basis of our legitimate interests on the legal basis of Article 6(1)(f) DSGVO. If your personal data is disclosed on the legal basis of Article 6(1)(f) DSGVO, we will inform you in detail about this disclosure to third parties and about our respective legitimate interests in this privacy statement. Your right to object in accordance with section 7 of this data protection declaration is pointed out.
In addition to the previously mentioned data, cookies are stored on your computer when you use our website. Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user's computer.
Whether cookies can be set and retrieved, you can also determine yourself through the settings in your browser. For example, you can deactivate the storage of cookies altogether in your browser, restrict it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks for your permission to do so. In addition, you can set your browser to automatically delete cookies when you close the browser. Finally, you may be able to enable a do-not-track ("DNT") feature in your browser so that you are automatically not tracked by any web analytics tool that may be used. Information on how to configure your browser settings can be found in the help function of your respective Internet browser.
5. Storage and deletion periods for personal data
If the processing purpose for your respective required personal data ceases to apply, your personal data processed by us will be routinely deleted or blocked, unless you have consented to a permanent storage of your personal data.
If individual data must be retained after the processing purposes have ceased to apply due to statutory retention periods (e.g. retention requirements under tax and commercial law), the deletion will be replaced by the blocking of the data. The data to be retained may then be processed exclusively for the aforementioned purposes on the legal basis of Article 6(1)(c) DSGVO.
6. Rights as data subject of the data processing
You have the rights described below at any time:
- Right to confirmation and to information about the personal data processed by us in accordance with Article 15 DSGVO.
- Right to rectification of your personal data in accordance with Article 16 DSGVO
- Right to erasure of your personal data ("right to be forgotten") pursuant to Article 17 DSGVO
- Right to restrict the processing of your personal data pursuant to Article 18 DSGVO
- Right to data portability of your personal data pursuant to Article 20 DSGVO
- You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you, in accordance with Article 22 of the GDPR.
7. Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO.
In this case, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
If personal data are processed for the purpose of direct marketing, you have the right to object at any time to processing of personal data concerning you for the purpose of such marketing. In this case, we will no longer use your personal data for direct advertising purposes.
8. Right of revocation for consents
You may revoke any consent expressly given to us under data protection law at any time with effect for the future. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.
9. Complaint about data protection violations to the supervisory authorities
If you believe that your data protection rights are being violated, you can contact the supervisory authority of your federal state or the federal state of our registered office. If a complaint concerns a company that has its registered office in another federal state, the supervisory authority will forward the complaint to the supervisory authority responsible there.
The supervisory authority of our registered office is as follows:
State Commissioner for Data Protection and Freedom of Information
P.O. Box 20 04 44
10. Notification obligation in connection with the rectification or erasure of personal data or the restriction of processing
We will notify all recipients to whom personal data has been disclosed of any rectification or erasure of personal data or restriction of processing pursuant to Article 16, Article 17(1) and Article 18 of the GDPR, unless this proves impossible or involves a disproportionate effort. We will also inform you about these recipients if you so request.
11. legal or contractual requirements to provide your personal data as well as information about the necessity for the conclusion of the contract as well as about your obligation to provide the personal data and possible consequences of not providing it:
As previously described, we collect and process your personal data in particular for the performance of a contract with you or for the implementation of pre-contractual measures that take place at your request. In some cases, the provision of personal data for the conclusion of contracts (e.g. for invoices) is required by law due to tax and/or commercial regulations, otherwise it is a contractual or pre-contractual obligation. If you do not provide us with personal data, this will mean that we will not be able to conclude a contract with you and/or respond to your inquiries.
Insofar as we process your personal data on the basis of a legitimate interest pursuant to Art. 6(1)(f) of the DSGVO, the provision of your data for these purposes is neither contractually nor legally required. The details of data processing on the basis of a legitimate interest can be found in the above information in the respective places. If you do not provide us with personal data for these purposes, this may result in you not being able to use our website and services, or not being able to use them to their full extent.
Please refer to the right to object in accordance with section 7 of this data protection information.
12. Automated decisions in individual cases including profiling
We do not use automated decision-making - including profiling pursuant to Article 22(1) and (4) of the GDPR.
13. Data security
We use technical and organizational security measures to protect the processing of personal data, in particular against accidental or intentional manipulation, loss, destruction or against attack by unauthorized persons. Our security measures are continuously improved in line with technological developments.
14. Questions / comments
15 Use of third-party tools on our website
We currently do not use any third-party tools on our website.
Status of the data protection declaration: 27.02.2020