Privacy policy

Company: Wehrspohn GmbH & Co. KGAddress: Otterstadter Straße 50, D-68219 MannheimPhone: +49 621 14626754Email: info@wehrspohn.de

We consider it our primary task to maintain the confidentiality of the personal data you provide and to protect it from unauthorised access. We therefore apply the utmost care and state-of-the-art security standards to ensure maximum protection of your personal data.

We operate this website in accordance with the GDPR and other applicable data protection legislation.

Our website is operated on the Microsoft Azure cloud platform of Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). The servers are located in a data centre in Germany. Data processing pursuant to Art. 28 GDPR is governed by Microsoft's data protection addendum (Microsoft Products and Services Data Protection Addendum), which forms part of the contractual terms for this service.

When you access our website, information is automatically sent to our website's server. This data is temporarily stored in so-called log files until it is deleted automatically. This data comprises:

• IP address of the requesting computer,
• date and time of access,
• name and URL of the retrieved file,
• website from which access was made (referrer URL),
• browser used and, where applicable, operating system.

The data is used for the following purposes:

• ensuring a smooth connection,
• ensuring convenient use of the website,
• evaluating system security and stability.

The legal basis is Art. 6 (1) sentence 1 (f) GDPR. The logged data is deleted promptly.

The fonts used on the website are delivered from our own server. No connection to third-party servers, such as Google's, is made for this when you visit our pages.

To understand how our website is used and to improve it, we use the open-source analytics tool Umami. We run Umami ourselves on Microsoft Azure in a data centre in Germany; the data is not transferred to the provider of Umami or to any other third party.

Umami does not set cookies and does not store any information on your device. It records the pages visited, the referrer URL, browser, operating system, device type, screen size and language, as well as the country derived from the IP address. If you successfully submit one of our forms, it also records which form it was, but not its content. Your IP address is not stored. To distinguish visits, Umami creates an anonymous identifier from technical characteristics that changes regularly; it cannot be used to identify you or to build a cross-site usage profile.

The legal basis is our legitimate interest in a data-minimising evaluation and improvement of our website under Art. 6 (1) sentence 1 (f) GDPR. You can object to this at any time; in many browsers, blocking scripts for this website is sufficient.

We only collect personal data, namely name, company, phone number or email address, if you provide it to us voluntarily, for example via our contact forms or by email. When you use our contact forms, we process the information you enter in the form (depending on the form: name, company, email address, phone number, your message and, for orders, your delivery address) solely to handle and answer your enquiry.

The form data is sent server-side via our email system Microsoft 365 (Exchange Online) of Microsoft Ireland Operations Limited; your enquiry arrives as an email in our mailbox and is stored there like business correspondence. Data processing pursuant to Art. 28 GDPR is governed by Microsoft's data protection addendum (Microsoft Products and Services Data Protection Addendum), which forms part of the contractual terms for this service. To fend off automated spam submissions, our forms check technical characteristics of the input (such as an additional field invisible to humans and the time taken to fill in the form); no additional personal data is collected in the process.

The legal basis for processing is Art. 6 (1) sentence 1 (b) GDPR where your enquiry aims at concluding or performing a contract, and otherwise our legitimate interest in answering your enquiry under Art. 6 (1) sentence 1 (f) GDPR.

We use the data provided only for the purpose for which it was provided, i.e. to answer your enquiry, to provide information material, to give you further information and to process orders. The data you provide as part of an enquiry is deleted once the enquiry has been dealt with and statutory retention periods have expired. The data is not passed on to third parties unless you have consented to this or we are legally permitted to do so. Third parties may, for example, be our service providers.

These third parties may be located in countries outside the European Union or the European Economic Area (third countries) in which the same level of data protection is not established by law. In such cases, we will take measures to ensure an equivalent level of protection.

If you apply to us, for example by email to karriere@wehrspohn.de, we process the data you send us in doing so. This includes in particular your name, your contact details, your CV, references and other application documents.

We process this data solely to review your application and to decide on your employment. The legal basis is Art. 6 (1) sentence 1 (b) GDPR (steps prior to entering into a contract). If you voluntarily provide special categories of personal data, such as information about your health, we only process them to the extent permitted under Art. 9 (2) (b) GDPR.

Only the people in our company who are involved in the application process have access to your application. Your data is not passed on to third parties, except to service providers who support us in running our IT and with whom corresponding contractual agreements have been concluded.

If you are hired, your data will be processed further for the purposes of the employment relationship. If you are not hired, we delete your documents no later than six months after the application process has ended. This retention serves to defend against possible claims, for example under the German General Equal Treatment Act; the legal basis in this respect is Art. 6 (1) sentence 1 (f) GDPR. We only keep your data for longer, for example for future positions, with your consent under Art. 6 (1) sentence 1 (a) GDPR, which you can withdraw at any time.

Providing your data is voluntary. Without it, however, we cannot consider your application.

This website does not use cookies. No advertising services are integrated and no cross-site usage profiles are created.

If you switch between the light and dark design using the toggle in the page header, your browser stores this choice in the so-called local storage on your device. This storage is strictly necessary for the function you requested (Section 25 (2) no. 2 TDDDG) and takes place exclusively locally: the stored value is not transmitted to us or to third parties. You can delete the entry at any time in your browser settings.

On some pages we embed videos from YouTube, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). They are embedded as a so-called two-click solution in privacy-enhanced mode (youtube-nocookie.com): merely visiting a page with a video does not establish a connection to YouTube and no data is transmitted to Google. We deliver the preview images from our own server. The YouTube player is only loaded when you start a video by clicking on the play area.

When you start a video, Google receives the information that you have visited the page concerned, as well as the technical data required for delivery, in particular your IP address. Data may also be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent, given by clicking, under Art. 6 (1) sentence 1 (a) GDPR in conjunction with Section 25 (1) TDDDG. Further information can be found in Google's privacy policy (https://policies.google.com/privacy).

In some places, our website refers to external services, in particular our YouTube channel, LinkedIn and our own applications such as Noesis Risk and the Calculation Manager, which have their own privacy notices. These are simple links, not embedded plug-ins: no data is transmitted to these services when you visit our pages. Only when you follow such a link do the privacy terms of the respective service apply.

To ensure data security, the content of our website is transmitted in encrypted form in line with the state of the art (TLS). To protect the data, we and the service providers we have commissioned, with whom corresponding contractual agreements have been concluded, take appropriate state-of-the-art measures, in particular to restrict access to the data.

You have the right: Under Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details.

• Under Art. 16 GDPR, to request without undue delay the rectification of inaccurate personal data or the completion of personal data stored by us;
• Under Art. 17 GDPR, to request the erasure of personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• Under Art. 18 GDPR, to request the restriction of processing of your personal data where you contest the accuracy of the data, the processing is unlawful but you oppose erasure, we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
• Under Art. 20 GDPR, to receive the personal data you have provided in a structured, commonly used and machine-readable format or to request its transmission to another controller;
• Under Art. 21 GDPR, to object to the processing of your personal data where it is based on Art. 6 (1) sentence 1 (f) GDPR and there are grounds relating to your particular situation;
• Under Art. 7 (3) GDPR, to withdraw consent once given at any time. As a result, we may no longer continue the data processing based on this consent in the future;
• Under Art. 77 GDPR, to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

This privacy policy may be adapted at any time to reflect current legal and technical developments.