Privacy policy

We, the Stadler-Edelstahl GmbH & Co. KG, are pleased that you have visited our website. This data protection declaration informs you about the processing of personal data that you send to us when contacting us or when sending us application documents by e-mail.

On the subject of data protection, we can be reached at

Stadler Edelstahl GmbH & Co. KG
Mr. Dirk Obenhaus, management
Zeppelinstraße 8
32051 Herford
phone: +49 5221 1747-900

You can exercise your data protection rights by contacting us at the following e-mail address:
datenschutz@stadler-edelstahl.com
info@stadler-edelstahl.com 

This data protection declaration contains the information obligations:

• for visitors to the website
• for applicants (m/f/d) at Stadler Edelstahl
• for business partners, service providers, other interested parties

Scope and purpose of the processing of personal data

Calling up the website

When our website www.stadler-edelstahl.com is called up, data is automatically sent to the server of this website by the Internet browser used by the visitor and stored in a log file for a limited period of time. Until automatic deletion, the following data is stored without further input by the visitor:

• IP address of the visitor’s terminal device
• date and time of access by the visitor
• name and URL of the page accessed by the visitor
• website from which the visitor accessed the website (so-called referrer URL)
• browser and operating system of the visitor’s terminal device as well as the name of the access provider used by the visitor.

The processing of these personal data is justified according to Art. 6 para. 1 sentence 1 letter f) DSGVO. The company Stadler-Edelstahl GmbH & Co. KG has a legitimate interest in processing data for the purpose of,

• establishing the connection to the website quickly
• enabling a user-friendly application of the website
• recognizing and guaranteeing the security and stability of the systems
• facilitating and improving the administration of the website.

The processing is expressly not carried out for the purpose of gaining knowledge about the person of the visitor to the website.

Newsletter

Nature and purpose of processing:
For the delivery of our newsletter, we collect personal data that is transmitted to us via an input link. For an effective registration, we require a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the “double opt-in” procedure. For this purpose, we log the registration for the newsletter, the sending of a confirmation e-mail and the receipt of the response requested herewith. No further data is collected.

Legal basis:
On the basis of your expressly given consent (Art. 6 para. 1 lit. a DS-GVO), we send you
our newsletter or comparable information by e-mail to your specified e-mail address.

Data:
The following data is stored in accordance with the provisions of the Data Protection
Ordinance stored: e-mail address, IP address, opt-in date, first name, last name recipient.
Recipients of the data are order processors, i.E. providers of mailing systems.
Third country transfer: the collected data is not transferred to third countries.

Storage period:
In this context, the data will only be processed as long as the corresponding consent has
been given. After that, they will be deleted.

Provision mandatory or required:
The provision of your personal data is voluntary, based solely on your consent. Without
existing consent, we can unfortunately not send you our newsletter.

Revocation of consent:
You can revoke your consent to the storage of your personal data and its use for the
newsletter dispatch at any time with effect for the future. Unsubscription can be requested via the link contained in every e-mail datenschutz@stadler-edelstahl.com..

Information requirements for applicants (m/f/d) at Stadler Edelstahl

We are pleased that you are applying or have applied for a job in our company. In
accordance with Article 13 of the EU General Data Protection Regulation (EU GDPR), we inform you below about the purposes for which we process the application documents (data) received from you on a voluntary basis and what rights you have in this regard.

1. name and contact details of the person responsible

Stadler Edelstahl GmbH & Co. KG
Zeppelinstraße 8, 32051 Herford
phone: +49 5221 1747-900
datenschutz@stadler-edelstahl.com

2. purposes for which the personal data are processed and the legal basis for the
processing

We process the data you have sent us in connection with your application in order to
assess your suitability for the position (or other open positions in our companies, if
applicable) and to carry out the application process. The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible.

Furthermore, we may process personal data about you insofar as this is necessary to
defend asserted legal claims against us arising from the application process. The legal
basis for this is Art. 6 (1) lit. f DS-GVO; the legitimate interest is, for example, a duty to
provide evidence in proceedings under the General Equal Treatment Act (AGG). If there is a need for longer-term storage (e.g., for further vacant positions or positions that become vacant positions), this will be done on the basis of your consent in writing (pursuant to Art. 6 Para. 1 lit. a DS-GVO).

Insofar as special categories of personal data within the meaning of Art. 9 (1) DS-GVO are voluntarily disclosed within the scope of the application procedure, their processing is additionally carried out in accordance with Art. 9 (2) lit. b DS-GVO (e.g. health data such as severely disabled status). Insofar as special categories of personal data within the meaning of Art. 9 (1) DS-GVO are requested from applicants (m/f/d) as part of the application process, their processing is additionally carried out in accordance with Art. 9 (2) lit. a DS-GVO (e.g. health data, if these are necessary for the exercise of the profession).

3. sources and categories of personal data processed

We process personal data that we receive from you or recruiters as part of the application process, such as, in particular, personal master data (name, address and other contact details, date and place of birth, nationality), bank details (for the purpose of travel expense reimbursement), qualification documents (e.g. certificates, assessments and other proof of training) and photographs.

4. recipients or categories of recipients of personal data

Applicants (m/f/d) can send us their documents by e-mail. However, please note that emails are generally not encrypted and applicants (m/f/d) must ensure encryption
themselves. We cannot therefore accept any responsibility for the transmission route of
the application between the sender and receipt on our server and therefore recommend that you use postal dispatch.
Your data will be sifted by the personnel department after receipt of your application.
Suitable applications are then made available internally to the persons responsible for the respective open position. In principle, only those persons in the company who require your data for the proper conduct of the application process have access to it.
Otherwise, personal data is processed on our behalf on the basis of contracts in
accordance with Art. 28 DS-GVO (order processing), this applies in particular to IT or
telecommunications service providers.

5. transfer to a third country (outside the EU / EEA) or to an international organization

A transfer to a third country does not take place and is not intended.

6. duration for which the personal data is stored and the criteria for determining this
duration

If no employment relationship is established following your application, we store applicant data for a maximum of six months from receipt of the rejection so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the General Equal Treatment Act (AGG). This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly consented to longer storage. In the event that you have given your consent to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after one year.
If you are accepted for a position during the application process, the data from the
applicant pool will be transferred to our personnel data system.

Is there an obligation to provide data?
As part of the application process, you only have to provide the personal data that is
required for the application process. There is no obligation to provide this data. Without this data, we will generally not be able to carry out the application procedure and make a decision on the establishment of the employment relationship.

Information requirements for business partners

In the following, we inform you pursuant to Art. 13, 14 of the EU Data Protection
Basic Regulation (EU DS-GVO) about the processing of your personal data by us and
about your rights under data protection law.

1. name and contact details of the responsible person

Stadler Edelstahl GmbH & Co. KG
Zeppelinstraße 8, 32051 Herford
phone: +49 5221 1747-900
datenschutz@stadler-edelstahl.com

2. purposes for which the personal data are processed and the legal basis for the
processing

We process data for the purpose of conducting business relations in order to fulfill a
contract or to carry out pre-contractual measures (Art. 6 para. 1 lit. b DS-GVO, e.g. in
connection with the execution and management of orders), to fulfill a legal obligation (Art. 6 para. 1 lit. c DS-GVO, e.g. commercial and tax retention obligations according to § 257 HGB and § 147 AO), to protect the legitimate interests of the responsible party or a third party (Art. 6 (1) lit. f DSGVO, e.g. storage of data for a reasonable period of time for acquisition efforts or for the assertion of legal claims and defense in legal disputes) and on the basis of consent of the data subjects (Art. 6 (1) lit. a DSGVO, e.g. disclosure of data to third parties).

3. sources and categories of personal data processed

We process personal data that we receive in the course of our business relationship from you or from public sources such as directories, registers as well as credit or credit
reporting agencies, i.e. personal data, contact data (e.g. telephone number, e-mail
address), field of activity or position, contract data, payment data, bank and credit rating data as well as sales data.

4. recipients or categories of recipients of personal data

Within the company, those departments receive access to the data that need it to fulfill
contractual and legal obligations (e.g. Sales). Processors used by us in accordance with
Art. 28 DS-GVO may also process data for these purposes, such as IT or
telecommunications service providers as well as cloud providers. All service providers are contractually obligated to treat your data confidentially.
Data is only passed on to recipients outside our company in compliance with the
applicable data protection regulations. Recipients of personal data can be, for example,
companies in the field of logistics, service providers, suppliers, tax advisors, auditors,
credit and financial service providers, credit agencies, collection agencies, lawyers and
authorities.

5. transmission to a third country (outside EU / EEA) or to an international organization

The transfer to a third country does not take place and is not intended.

6. duration for which the personal data are stored and the criteria for determining this duration

The required personal data will be stored for the duration of the existence of warranty and guarantee claims. In addition, the personal data will be stored in accordance with the periods prescribed by law. Corresponding proof and storage obligations result from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified there are six and ten years respectively.
If the data is no longer required for the fulfillment of contractual or legal obligations, it is regularly deleted.

If the data is required for the fulfillment of contractual or legal obligations, is there an obligation to provide data?
Within the framework of the contractual relationship or the initiation of the contract, you must provide those personal data that are required for the initiation, implementation and termination as well as for the fulfillment of the associated contractual obligations or which we are legally obligated to collect. Without this data, we will generally not be able to enter into or perform the contract with you.

In addition to the above information, an overview of your other data protection rights follows below:

• right of access to the personal data concerned (Art. 15 DS-GVO).
• right to rectification (Art. 16 DS-GVO), erasure (Art. 17 DS-GVO) as well as to restriction of processing (Art. 18 DS-GVO)
• right to object to processing (Art. 21 DS-GVO)
• right to data portability (Art. 20 DS-GVO)
• right to revoke consent at any time without affecting the lawfulness of the processing carried out on the basis of consent until revocation (Art. 7(3) DS-GVO)
• right to lodge a complaint with a supervisory authority (Art. 77 DS-GVO)

Separate information about your right to object according to Article 21 DS-GVO
According to Article 21 (1) of the DS-GVO, you have the right to object at any time, on
grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 (1) (f) of the DS-GVO (data processing on the basis of a balance of interests).

If you object, we will no longer process your personal data unless we can demonstrate
compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims..

If you wish to exercise your right to object, a notification in text form is sufficient. You can write to us or contact us by e-mail. You will find our contact details in the introduction to the privacy policy.