Data Protection Declaration
Thank you for your interest in our online presence. For Voegtle Service GmbH ("Voegtle“, "we" or "us"), the protection of your personal data is a vital concern. With this data protection declaration, we would like to inform you about the processing of your personal data within the scope of use of the website available under https://www.voegtle.de/en or other media for which we are responsible (jointly called "websites" hereinafter) according to the requirements of the EU General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016 – called "GDPR" hereinafter):
1. Name and contact data of the party responsible
Voegtle Service GmbH
Phone: +49 71 61 99 73 - 0
Fax: +49 71 61 99 73 - 13
Voegtle Service GmbH is represented by Managing Director Dipl.-Ing. Thomas Weber.
2. Contact data of the data protection officer
The data protection officer of Voegtle:
Lawyer Dr. Thorsten B. Behling
WTS Legal Rechtsanwaltsgesellschaft mbH
3. Categories of personal data that we process
During the use of our website, we process the following categories of personal data depending on the services that you use.
a. The use of our website as a whole (so-called surfing):
- Information on the browser type and version used
- The operating system of the user
- The Internet service provider of the user
- The IP address of the user
- Date and time of the access
- Websites from which the user's system accessed our website
- Websites that the user's system accesses from our website
- Cookie data (e.g., pseudonym cookie ID, length of stay on our websites, pages called, movement of the user through links, IP address) insofar as you do no prohibit the collection of this information as explained under Section 8
b. Use of the general contact form:
- Personal master data (form of address, first name, last name)
- Company name
- Contact data (telephone number, e-mail address)
- Address data (postal code, city, country)
- Content of the message
c. Use of the contact form for machines:
- Personal master data (first name, last name)
- Contact data (telephone number, fax number, e-mail address)
- Company data (company, industry)
- Address data (street, postal code, city, country)
- Content of the message
d. Use of our contact e-mail address:
- Sender e-mail address
- Content of the message
e. Use of a job application function on our websites:
- Personal master data (form of address, any titles, first name, last name, date of birth if pertinent)
- Contact data (telephone number and e-mail address)
- Address data (street, house number, postal code, city, country)
- Job application data (letter of application, CV, certificates, letters of reference, work permit for the Schengen area)
4. Origin of personal data and transmission of the personal data of third parties
We fundamentally collect your personal data only from you directly. If this situation should change, we will inform you directly. Within the scope of the processing of the data collected through our contact forms, we obtain the data of the person who provided this data in the contact form.
If you send us the personal data of third parties through our abovementioned services, you must observe all data protection requirements, especially Art. 5 through 9 and 12 ff. GDPR. Otherwise, we have no intention to collect this data and reserve the right to take legal steps against you.
5. Duration of storage
The personal data we have collected is stored only as long as required for the fulfillment of the purpose connected with the storage. If this purpose no longer applies, we fundamentally delete or anonymize the data again insofar as no legitimate grounds and obligations to obtain the data (e.g., according to tax-law regulations) exist. In the latter case, the data is processed only with limitations, i.e., to fulfill the grounds or obligation to retain the data and in all other cases only with consent for the assertion, exercise or defense of legal claims, for the protection of the rights of other natural or legal person or for reasons of an important public interest of the European Union(EU) or an EU member state. In case an obligation to retain data exists, we delete or anonymize the data after the certain expiration of the legitimate grounds and/or obligation to retain the data.
6. Purposes for which the personal data is processed
We observe the basic principle of the specific use of personal data and process your personal data fundamentally only for the purposes explained in this data protection declaration (see Section 7 b)). We process your data for other purposes only insofar as legally permitted (cf. also Art. 6 Sect. 4 GDPR), whereby we naturally inform you in such cases within the scope of the legal regulations.
Your personal data is fundamentally not passed on to third parties without your express consent unless otherwise stipulated in this data protection declaration. Data is sent to state institutions and authorities entitled to receive such information only within the scope of the legal duty of disclosure or if we are obligated to provide information on the basis of a court decision. Any of our employees assigned with data processing or service provided that we have commissioned are obliged to us to maintain confidentiality and observe data protection provisions.
When you visit our website, it is not legally or contractually required for you to actively provide information about your person. We still collect certain data in an anonymized manner or using pseudonyms in order to evaluate your usage behavior. For this purpose, so-called cookies and other tools are used on our websites (more information can be found under Section 8).
We process the personal data you have provided for the following purposes:
To process your inquiry/-ies (e.g., through the contact form)
To fulfill the contract and perform precontractual measures
Decision on the establishment for an employment relationship and, in case of an establishment of an employment relationship, the establishment, conducting and termination of the same.
Direct advertising (e.g., sending of newsletters or invitations to Events)
Customer care and management
Individual company and/or company group controlling (e.g., for budget plans and reporting)
Observance of legal requirements (e.g., for the fulfillment of tax and commercial law responsibilities and the implementation of a compliance management system, including compliance inspections)
Data protection and security management and inspections
The data you provided that we absolutely have to process for the respective purposes can be found in the description under Section 7 b).
7. Legal basis for processing
The basis for the processing of personal data is the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz (BDSG)) and other European and German ordinances and laws.
a. Overview of the legal bases
a. Overview of the legal bases
The following list provides you with a brief overview of the existing and/or applied legal bases according to DGPR and BDSG to which we refer when processing your data:
|Legal basis||Description / Establishment|
|Consent according to Art. 6 Sect. 1 Clause 1 a) GDPR:||This legal basis steps in when you have consented to our processing of your data for one or more purposes (e.g., consent to receiving a newsletter).|
|Contract fulfillment of execution of precontractual measures Art. 6 Sect. 1 Clause 1 b) GDPR:||If we have concluded a control with your person (e.g., for the purchase of a machine) or if you have requested that we execute a precontractual measure (e.g., creation of a quotation for a machine), this legal basis allows us to process all of your data that is required for the fulfillment of the contract or the execution of precontractual measures.|
|Fulfillment of a legal obligation according to Art. 6 Sect. 1 Clause 1 c) GDPR:||This legal basis permits us to process your data This legal basis allows us to process your data if it is required for the fulfillment of a legal obligation (e.g., for the fulfillment of obligations according to commercial or tax law).|
|Our own legitimate interests or the legitimate interests of third parties according to Art. 6 Sect. 1 Clause 1 f) GDPR:||To some extent, we base our processing of personal data on our legitimate interests or on the legitimate interests of third parties. All legal, economical and non-material interests not prohibited by the legal system are considered to be legitimate interests. Examples of our legitimate interests include the following:|
|- Data processing for communication with our customers and contacts (if not already included under Art. 6 Sect. 1 Clause 1 b) GDPR).erfasst).|
|- Direct advertising (if not already included under Art. 6 Sect. 1 Clause 1 a) GDPR), e.g., if we want to draw the attention of you or your company to products or events. You can object to direct advertising with future effect at any time as described under Section 11 g). Decision on the establishment of an employment relationship according to Art. 88 GDPR in conjunction with § 26 Section. 1 Clause 1 BDSG: If you submit a job application to our website, we also use your data to decide on the establishment of an employment relationship with you.|
b. Details regarding the purposes and legal bases of the data processing
In addition, we especially process cookie data to understand how visitors traverse our websites. We explain the details on this topic under Section 8, whereby you can also obtain information on how you can prevent this processing.
bb. Establishment of contact
We process the following data in case you have established contact:
(1) In case contact is established through the general contact formThe general contact form can be reached through the header of our website after clicking the "Contact" item. If you would like to use this contact possibility, we process the data types specified in Section 3 b) as mandatory entries, such as your last name, e-mail address and message. In addition, you can specify a company name, address (street, city, country) and a telephone number if you want us to answer your inquiries by telephone and/or post.
(2) In case contact is established through contact forms for inquiries regarding our machines
(2) In case contact is established through contact forms for inquiries regarding our machinesIf you click the "Products" item on the header of our website, you will obtain an overview of the products (machines) you can order from us. If you click individual machines, you have the opportunity to send us an inquiry regarding the respective machine through the contact form in addition to receiving details on the quotation. The company for which you are making the inquiry should be specified in the corresponding contact form in addition to your personal master data, address data, telephone number and e-mail address. The specification of the other data types described in Section 3 c) is voluntary here. These explanations apply accordingly if you should use other contact forms that we provide to direct inquiries specifically for machines to us.
(3) In case contact is established in other manners (by e-mail or telephone)
(3) In case contact is established in other manners (by e-mail or telephone)If you contact us by e-mail (e.g., for service or purchasing inquiries), we process the specified sender address and the content of your e-mail. In case of inquiries by telephone, we process your telephone number insofar as one has been provided by caller ID or personally within the course of our conversation, as well as information regarding the content of your matter.
cc. Subscribing to the Newsletter
If you subscribe to our newsletter or otherwise register for the receipt of information by e-mail on the products and events of Voegtle or other companies of the Schuler Group (e.g., consent provided in paper form), we process the data for the use of our newsletter services as described under Section 3 f). The legal basis in this case is Art. 6 Sect. 1 Clause 1 a) GDPR accordingly. You have the possibility to revoke your consent with future effect at any time. To do so, please proceed as described under Section 11 i). You can also object to the process of your data for the sending of the newsletter by proceeding as described under Section 11 g). With the exception of possible transmission fees, objection and revocation are possible free of cost.
dd. Other purposes
- Customer care and management, as well as direct advertising (without a newsletter, e.g., sending of event invitations or product information in paper form), whereby the legal basis is Art. 6 Sect. 1 Clause 1 f) GDPR in this case. Our legitimate interest consists of remaining in contact with you, increasing our sales and processing all of your matters in a Group-uniform, appropriate, timely and efficient manner. Especially data according to Section 3 that we have received from you in connection with the fulfillment of the contract and/or performance of precontractual measures is affected here.
- Individual company and/or company group controlling (e.g., for budget plans and reporting), which also includes group reporting and uniform group management (e.g., purchasing controlling and customer care). Here, the legal basis is Art. 6 Sect. 1 Clause 1 f) GDPR and our legitimate interest is individual company and company group controlling, as well as uniform group management, which lies in the economic interest of us and/or our parent company (Schuler AG) and its parent company (Andritz AG) and therefore qualifies as a legitimate interest within the scope of this regulation. Especially data according to Section 3 that we have received from you in connection with the fulfillment of the contract and/or performance of precontractual measures is affected here.
- Observance of legal requirements (e.g., for the fulfillment of tax and commercial law responsibilities and the implementation of a compliance management system, including compliance inspections), whereby the legal basis is Art. 6 Sect. 1 Clause 1 c) GDPR.
- Data protection and security management including corresponding inspections by our data protection officer and the responsible information security officer at our company. In regard to inspections performed by our data protection officer, the legal basis is Art. 6 Sect. 1 Clause 1 c) GDPR, especially in conjunction with Art. 24 Sect. 1 S. 2 and Art. 38 Sect. 2 and Art. 39 Sect. 1 b) and c) GDPR, as well as Art. 6 Sect. 1 Clause 1 f) GDPR. Here, our legitimate interest lies in a secure and data-protection-compliant processing of personal data.
a. Prevention of session Cookies
You can assert your right to reject cookies at any time. Irrespective of the other possibilities for preventing cookies described in the following, you can set your browser so that it does not accept cookies or so that you receive a prompt to consent before the setting of a cookie. The details can be found in the help function of your browser.
If you do not accept cookies, you will possibly not be able to utilize the full range of website functions.
b. Prevention of persistent Cookies for range Analysis
For us, it is important to understand how our websites are used to improve them and design them more attractively for users. For this reason, we analyze how you use our websites whereby we process cookie data using external service provider as described in the following. These descriptions also contain information on how to prevent such processing.
(1) Google Analytics Cookies
This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called cookies, text files that are stored on your computer and that allow an analysis of your use of the website.
The data generated by the cookie regarding your use of this website is usually sent to a Google server in the United States and stored there. In case of an activation of IP anonymisation on this website, your IP address is previously shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is sent to a Google server in the United States and stored there only in exceptional cases. On behalf of the website operator, Google uses this information to evaluate your use of the website, compile reports on the website activities and render other services for the website operator connected with the use of the website and the Internet itself. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other data by Google. You can prevent the storage of cookies by a corresponding setting in your browser software; please note, however, that you might not be able to use the full scope of functions of this website in this case. In addition, you can prevent the sending of the data generated by the cookie and related to your use of the website (including your IP address) to Google and prevent the processing of this data by Google by downloading and installing the browser plugin available under the following external link (https://tools.google.com/dlpage/gaoptout?hl=en): Please note that you will leave the voegtle.de website in this case. Voegtle does not process the affected data.
More detailed information on the conditions for use and data protection can be found under the following external links (http://www.google.com/analytics/terms/us.html and/or https://policies.google.com/?hl=en&gl=us). Please note that Google Analytics has been expanded by the code “anonymizeIp” on this website to guarantee an anonymised collection of IP addresses (so-called IP masking).
c. Important information on the saving of your cookie Settings
Please note that you must repeat the abovementioned cookie settings if you or your browser deletes cookies. The same applies if your visit our websites with another browser or terminal device.
9. Recipient or categories of recipients of personal data
The personal data is passed on to the following recipients:
- Public bodies to which the data must be sent based on legal regulations (e.g., tax authorities, supervisory bodies, social security agencies, law enforcement agencies, if pertinent)
- Internal Voegtle departments involved in the performance of the connected tasks (essentially: Sales, Human Resources, IT)
- Contractors (e.B., service providers, such as IT service providers and forwarding agents that may or may not belong to the Schuler and/or Andritz Group)
- Our external data protection officer
- Other group companies and departments (e.g., Auditing or Information Security department or the General Management of the Schuler and/or Andritz Group)
10. Sending of personal data to third-party countries
We fundamentally do not send personal data collected on these websites to countries outside of the European Union or European Economic Area (third-party countries).
It is possible, however, that data collected on these website will be sent to third-party countries if required for the fulfillment of the control, for internal communication, customer care and/or customer management or due to the use of a service provider or the involvement of a group company in a third-party country as an intermediary. We involve our data protection officer in such cases. The data is sent only if the receiving body has an appropriate data protection level based on a decision on adequacy or using suitable guarantees (Art. 45 ff. GDPR) or if neither a decision on adequacy nor suitable guarantees are required in exceptional cases (Art. 49 Sect. 1 Clause 2 GDPR). In general, we apply the EU Standard Contractual Clauses to guarantee an appropriate degree of data protection on the part of the pertinent recipient. The guarantees we use can be obtained from our data protection officer. If you would like to obtain more information on the guarantees in individual cases, please contact our data protection officer under the contact data listed under Section 2.
11. Rights in regard to data processing
In regard to our use of your data, you have the following rights arising from Art. 15 through 21 GDPR, as well as the right of the revocation of your consent at any time and the right to complain to a supervisory body as described in the following. You can assert your rights to us informally, either directly using the contact data specified under Section 1 or by involving our data protection officer as an intermediary; the contact information of the data protection officer can be found under Section 2. With the exception of any transmission or connection fees, the assertion of these rights does not entail any costs.
a. Right to information (Art. 15 GDPR)
You have the right to request a confirmation from us as to whether and which personal data on your person are process and to obtain information regarding this data, especially in regard to the purposes and legal bases of the processing (refer to Sections 6, 7 and 8), the categories of the data we process (Section 3), the categories of recipients (Section 9) and our intention to transfer to data to recipients in a third-party country (Section 10). This also comprises information on the origin of the data insofar as it was not collected from you personally. You also have the right to obtain a cope of the personal data being processed insofar as the rights and freedoms of other people are not infringed in regard to their own personal data.
b. Right to correction (Art. 16 GDPR)
You also have a right to demand the correction of any incorrect personal data we have on you immediately. You also have the right to demand the completion of incomplete personal data, even by means of a supplementary declaration, under consideration of the purpose for processing.
c. Right to deletion (Art. 17 GDPR)
You have to right to request the immediate deletion of your personal data if one of the following reasons applies and none of the exceptions explained in the following comes into play:
- The data you processed are no longer required for the purposes described in this data protection declaration.
- You have revoked your granted consent (for more information, refer to Section 11. i)) and we have no other legal basis for the processing of your data.
- The data was unlawfully processed.
- The deletion is required for the fulfillment of a legal obligation according to the law of the European Union or the member states to which we are subject.
- You have objected to our processing of your data (for more information, refer to Section 11. g)) and we have no overriding grounds for the processing of your data.
We must not and/or may not implement your wish for deletion if one of the following reasons applies:
- The processing is required for the exercising of the right to freedom of expression and information.
- The processing is required to fulfill a legal requirement to which we are obliged according to the law of the European Union or a member state (e.g., legal storage obligations).
- The processing is required for the assertion, exercise or defense of legal claims.
- The processing is required for reasons of public interest within the scope of public Health.
d. Right to the limitation of processing (Art. 18 GDPR)
You also have a right to demand the limitation of the processing of your personal data. You particularly have this right if one of the following reasons applies:
- You dispute the correctness of your data.
- The processing of the data is unlawful and you reject the deletion of the data.
- We no longer require your data, but you require it for the assertion, exercise or defense of legal claims.
- You have objected to the process (for more information, see Section 11 g)) and we are still checking whether our legitimate grounds for processing have priority over your legitimate grounds for objection.
e. Right of notification (Art. 19 GDPR)
If you have asserted your right to correction, deletion or limitation of processing to Voegtle, we are obliged to inform all recipients to which your personal data has been disclosed of the correction or deletion of your data or the limitation of its processing unless such an undertaking proves impossible or is associated with undue effort. You have the right to be notified of such measures by the recipient.
f. Right to data transferability (Art. 20 GDPR)
You have the right to obtain the pertinent personal data in a structured, common, machine-readable format and send it or have us send it to another responsible party insofar as you have provided this data to use on the basis of consent or a contract and the data is processed in an automated manner. You have the right to have us send the data directly to the new responsible part if technically feasible and the rights and freedoms of other people are not violated.
g. Right to objection (Art. 21 GDPR)
For reasons arising from your particular situation, you have the right to object to the processing of your personal data at any time insofar as the processing of this data is required for the safeguarding of the legitimate interests of Voegtle or a third party or for the performance of a task that lies in the public interest.
You can object to the processing of your data for advertising purposes with future effect at any time. We will always comply with such a request. Please note, however, that we cannot exclude that we may not be able to recall an advertising material in individual cases if we receive your objection after the publication of the advertising material has already been unstoppably initiated. In such cases, we will naturally remove you before the publication of any future advertising materials.
h. Right to complain to a supervisory Body
In addition, you can submit a complaint to the responsible data protection supervisory authority, for example, at your place of residence or at the place of the suspected violation at any time.
The following data protection supervisory authority is responsible for Voegtle:
State Data Protection and Freedom-of-Information Officer
Königstrasse 10 a
i. Right to the revocation of granted consent
Insofar as you have provided us with a declaration of consent for the processing of your data, you have the right to revoke this consent with future effect at any time. Through such a revocation, the legality of any processing based on the provided consent up to the point in time of the revocation, the revocation affects only the legality of future processing.
12. No necessity for the provision of data by you
No legal or contractual obligation exists that would require you to provide us with your data as described in Section 3. It is possible, however, that we will not be able to fulfill contractual obligations (such as the delivery of a product) or perform precontractual measures (such as the provision of a quotation) with your employer or principle if you do not provide us with the required data.
If you technically prevent us from collecting data that is required for the use of our website, it is possible that you will not be able to use the services listed under Section 3 or you will be able to use them only in a restricted manner.
The provision of personal data (according to Section 3 e)) within the scope of a job application at Voegtle is required for the decision on the establishment of an employment relationship with you. A non-provision of this data can lead to us not making a (positive) decision on your hiring.
The provision of your data within the scope of our contact form is also voluntary. Without the specification of a contact possibility, however, we will not be able to answer your query.
13. Automated decisions, including profiling, within the scope of Article 22 GDPR
Your personal data will not be used for automated decision-making, including profiling, according to Article 22 Sect. 1 and Sect. 4 GDPR.
14. Data security
We take technical and organizational security measures to protect your personal data against unintentional or unlawful deletion, editing or loss, as well as any unauthorized passing on to third parties or unauthorized access.
15. Status and modifications of this data protection Information
This data protection declaration corresponds with the status named below. We reserve the right to modify this data protection declaration. We therefore request that you regularly check the data protection declaration in order to remained informed of any changes.
Status: May 2018