Data Protection Statement
1. Name and Contact Details of Data Controller and Internal Data Protection Officer
This Data Protection Statement applies to data processing by:
Data controller: BRANOpac GmbH, Gottlieb-Daimler-Straße 18-20, D-35423 Lich, Phone: +49 64 04 91 42-0, Fax: +49 64 04 91 42-700, E-Mail: [email protected]
The internal Data Protection Officer of BRANOpac GmbH may be contacted at the above address, c/o Data Protection Officer, or under [email protected].
You also have the right to file a complaint with the relevant supervisory authority, the Hesse State Data Protection Officer, PO Box 31 63, 65021 Wiesbaden, Tel. 0611 / 1408-0 Fax 0611 / 1408-900 or -901, [email protected].
2. Collection and Storage of Personal Data, Nature and Purpose of Their Use
a. When Visiting Our Website
When you visit the website of branopac.com, the browser on your device automatically sends certain data to our server. We store this information temporarily in a so-called log file. This is done automatically. The following information is collected and stored until it is automatically deleted:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of accessing PC
- Time of server access
We process the aforementioned data for the following purposes:
- to ensure the smooth connection to the website,
- to facilitate the use of our website,
- to evaluate system security and stability; as well as
- for further administrative purposes.
The legal basis for our data processing is Art. 6 Subsec. 1 Clause 1 lit. f GDPR. Our legitimate interest in the data processing is based on the above-quoted data collection purposes. Collected data are not used to draw any conclusions about you.
In addition, we use cookies when our website is visited. Further details may be found under Item 4 of this Data Protection Statement.
b. When Using the Contact Form
For questions of any kind, we may contact us via the form provided on the website. To allow us to answer, you need to quote your name, a valid e-mail address, telephone number, and company or organizational details to let us know who issued the request. Further information may be provided voluntarily, including salutation, title, street, zip code, city and country.
The data processing for contact purposes is covered by Art. 6 Subsec. 1 Clause 1 lit. a GDPR and based on your voluntarily given consent.
The personal data collected by us from the contact form will be automatically deleted after completion of your request except when further data processing is required to exercise the right to free expression and information, to meet a legal obligation, when it is in the public interest or to assert, exercise or defend a legal claim.
c. Direct Marketing
We use the telephone numbers and e-mail addresses submitted to us for direct marketing purposes in pursuit of our legitimate interests under Art. 6 Subsec. 1, Clause 1 lit. a GDPR.
You may at any time object to the processing of your personal data for the purpose of such advertising; this also applies to profiling when associated with direct mail. If you object to the processing for direct marketing, we will no longer process your personal data for this purpose. Your objection may be filed with the Data Controller free of charge.
d. With Job Applications
Applications for vacancies with us may also be submitted by E-mail. When sending in your application, the data submitted by you will be processed in our application management system. Your data will be kept strictly confidential at all times. The following information is collected and stored until deleted:
- all application documents submitted by you in digital form or on paper
The mentioned data are processed for the following purposes:
- Processing your application
- For internal statistical purposes in anonymized form
Data processing for the purpose of processing a job application is carried out as per Art. 6 Subsec. 1 Clause 1 lit. a GDPR on the basis of your voluntarily given consent.
On termination of the selection process, but no later than 6 months after the collection of the data, we will automatically delete all stored personal data obtained from you unless further storage is required for the purpose of meeting a legal obligation, when it is in public interest or to assert, exercise or defend a claim.
If necessary, we will continue to use anonymized applicant data for internal statistical purposes. When doing so, we make sure that any personal references in the data are removed in their entirety.
3. Data Disclosure
There is no transmission of your personal data to third parties for purposes other than those listed below.
We will only share your personal information with third parties if:
- You have given your express consent as per Art. 6 Subsec. 1 Clause 1 lit. a GDPR
- A disclosure pursuant to Art. 6 Subsec. 1 Clause 1 lit. f GDPR is required to assert, exercise or defend a legal claim and there is no reason to believe that you have an overriding interest in not disclosing your data,
- When we are legally obliged to the disclosure under Art. 6 Subsec. 1 Clause 1 lit. c GDPR
- It is legally permissible and when under Art. 6 Subsec. 1 Clause 1 lit. b GDPR this is required for the performance of a contract with you.
4. Cookies
We use cookies on our site. Cookies are small (text) files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.). Cookies do not damage your device, do not contain viruses, Trojans or other malicious software.
A cookie stores information that relates to the device you use when you visit our website. We do not necessarily obtain any immediate knowledge about you.
We use cookies to make your visit to our website more enjoyable. E.g., we use so-called session cookies to determine which pages of our website you have already visited. Session cookies are automatically deleted when leaving the site.
We also use temporary cookies to improve the usability of our website. Temporary cookies are stored on your device for a specified period of time. When you visit our website again, it will automatically be recognized that you have visited us previously. In addition, we already know what inputs and settings you have used and may provide them automatically so you need not enter the information once again.
On the other hand, we use cookies to statistically record and evaluate website use. This enables us to continuously optimize our offer. When revisiting our website, these cookies also allow us to automatically recognize that you have already visited our website previously. These cookies, too, are automatically deleted after a predefined time.
Pursuant to Art. 6 Subsec. 1 Clause 1 lit. f GDPR, the use of cookies in data processing by us is based on our legitimate interest and that of third parties as the use of cookies is necessary to safeguard these interests. Most browsers accept cookies automatically. However, you may configure your browser so that no cookies are stored on your computer or have a message appear every time a new cookie is created. However, disabling cookies completely may mean that not all features of our website can be used.
5. Analysis and Third-Party Tools
Tracking Tools
The measures and tools listed below and implemented by us are based on Art. 6 Subsec. 1 Clause 1 lit. f GDPR. The measures ensure the customized design and continuous optimization of our website. Furthermore, we use the following measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you.
The respective processing purposes and data categories may be found in the respective following tools:
Google Analytics
For a customized design and the continuous optimization of our web pages, we use Google Analytics, a web analytics service provided by Google, www.google.com/intl/en/about/ (1600 Amphitheater Parkway, Mountain View, CA 94043, USA, hereafter "Google"). In this context, pseudonymized usage profiles are created and cookies (see Item 4) are used. The information generated by the cookies about your use of our website is transferred to a Google server in the USA and stored there are, e.g. •
- browser type and version,
- operating system used,
- the referrer URL (the webpage previously visited),
- host name of accessing computer (IP address),
- time of server access
This information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage for the purpose of market research and website customization. This information may also be transferred to third parties if required by law or when these third parties are data processors. Under no circumstances will your IP address be merged with other data provided by Google. IP addresses are anonymized so that they cannot be allocated (IP masking).
You may prevent the installation of cookies by setting your browser software accordingly; however, note that in this case not all features of our website may be fully usable.
You may also prevent the collection of cookie data related to your use of our website (including your IP address) and the processing of these data by Google by downloading and installing the browser add-on https: / /tools.google.com/dlpage/gaoptout?hl=de.
As an alternative to the browser add-on, especially for browsers on mobile devices, you may prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set which prevents the future collection of your data when you visit the website. However, the opt-out cookie stored on your device is valid only for the browser used and only for our website, and is deposited on your device. If you delete these cookies in your browser, you must set the opt-out cookie once again.
For more information about privacy related to Google Analytics, see the Google Analytics Help Center support.google.com/analytics/answer/6004245;
Cloudflare
We use the content delivery network (CDN) of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany (Cloudflare) to increase the security and delivery speed of our website. This corresponds to our legitimate interest according to Art. 6(1)(f) GDPR. A CDN is a network of [worldwide] distributed servers that is capable of delivering optimised content to the website user. For this purpose, personal data can be processed in Cloudflare’s server log files. Please see the explanations under “Hosting”.
Cloudflare is the recipient of your personal data and works for us as a processor in accordance with Art. 28 GDPR. This corresponds to our legitimate interest according to Art. 6(1)(f) GDPR not to operate a content delivery network ourselves.
You have the right to object to the processing. The decision as to whether your objection will be complied with is based on a balance of interests.
The processing of the data indicated in this section is neither a statutory nor a contractual requirement. The functionality of the website cannot be ensured without processing.
Your personal data will be stored by Cloudflare for as long as required for the purposes described.
For more information on options for objection and for the removal of Cloudflare, please visit: https://www.cloudflare.com/privacypolicy/
Cloudflare has implemented compliance measures for international data transfers. These apply to all global activities for which Cloudflare processes personal data from natural persons in the EU. These measures are based on the EU standard contractual clauses (SCCs). For more information, please see: https://www.cloudflare.com/cloudflare-customer-scc/.
Google Fonts
Our websites uses external fonts, namely Google Fonts. Google Fonts is a service of Google Inc. ("Google"). These web fonts are integrated by a server call , as a rule to a Google server in the USA. This will inform the server which of our webpages you have visited. The IP address of a visitor to this website is also stored by Google. For more information, please refer to the Google Fonts Privacy Notice which may be viewed at www.google.com/fonts#AboutPlace:about.
YouTube
For the integration of videos etc, we use YouTube. YouTube is powered by YouTube LLC, with headoffice at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc., located at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Some of our webpages use YouTube plug-ins. When visiting pages of our website equipped with such a plug-in , e.g. our library, a connection is made to the YouTube servers and the plug-in is displayed. This will inform the YouTube server which of our webpages you have visited. If you are logged in as a member of YouTube, YouTube assigns this information to your personal user account. Using the plug-in, such as by clicking on the start button of a video, also assigns this information to your user account. You may prevent this association by logging out of your YouTube user account and other YouTube LLC and Google Inc. accounts before using our website and delete the corresponding cookies of these providers.
For more information about data processing and privacy by YouTube (Google), please visit www.google.com/intl/en/policies/privacy/.
Google Tag Manager
Our website uses the Google Tag Manager. Tags are small items of code on our site that are used, among other things, to measure traffic and visitor behavior, track the effect of online advertising and social channels, use remarketing and audience targeting, and to test and optimize our site. The integration of the Google Tag Manager is done by a server call, usually to a Google server in the USA, which will advise the server which of our websites you have visited. The IP address of the browser used for access is also stored by Google. Incidentally, the Google Analytics note applies correspondingly to the transmission of data to the Google Tag Manager. Google's additional terms of use and Privacy Statement may be viewed at policies.google.com. You may at all times disable Google's service and prevent the transfer of data to Google by disabling the JavaScript in your browser. We point out, however, that in this case you may not be able to use all functions of our website.
6. Social Media Plug-ins
As per Art. 6 Subsec. 1 Clause 1 lit. f GDPR, our website makes use of links to the social networks Facebook, YouTube, Instagram, Xing and LinkedIn to make our name better known. The underlying commercial purpose is to be regarded as legitimate interest within the meaning of the GDPR. The responsibility for data protection-compliant operation is with the respective provider.
Our website includes plug-ins from Facebook and Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. You may recognize the Facebook plug-ins by the Facebook logo on our site. Use the functions offered (e.g. comment, share, rate) at your own risk.
When visiting our Facebook page, Facebook collects various items of information automatically. The information collected by Facebook may be viewed at www.facebook.com/about/privacy/update "What types of information do we collect?"
Parts of this information are used to provide us as the operator of the Facebook page with statistical information on the use of the page. For more information, please contact Facebook at the following link: de-de.facebook.com/help/pages/insights.
The above data are processed by Facebook for the purposes listed in www.facebook.com/about/privacy/update ("How do we use this information?") and, when necessary, transmitted to countries outside the EU.
When accessing a Facebook page, the IP address assigned to your device will be transmitted to Facebook. According to information provided by Facebook, this IP address is anonymised (with "German" IP addresses) and deleted after 90 days. Facebook also stores information about user terminals (e.g., as part of the logon notification feature). If necessary or possible, Facebook assigns the IP addresses to individual users. If you are currently logged in to Facebook as a user, you will find a cookie with your Facebook ID on your device. This allows Facebook to determine that you visited this page previously and how you used it. This also applies to all other Facebook pages. Via the Facebook buttons embedded in web pages, Facebook is able to record your visits to these pages and assign them to your Facebook profile. Based on this data content, contents or advertising may be customized for you. For more details, see www.facebook.com/policies/cookies/.
To avoid this, you should log out of Facebook, disable the function "Stay Signed In", delete the cookies on your device, terminate and then restart your browser. This will delete Facebook information by which you may be directly identified. This allows you to use our Facebook page without revealing your Facebook ID. When you access the site's interactive features (like, comment, share, news, etc.), a Facebook login screen appears. After logging in, you will be again recognized by Facebook as a specific user.
The legal basis for data processing is provided by Facebook at www.facebook.com/about/privacy/update "What is our legal basis for the processing of data?".
You have the right to information, correction, portability or deletion of your data. You may view the exact rights at www.facebook.com/about/privacy/update "How do you exercise your rights under the GDPR?".
Our website uses plug-ins of the social network Xing or Xing SE of Dammtorstraße 30, 20354 Hamburg, Germany. Xing plug-ins may be recognized by the Xing logo on our site. Please note that when activated the plug-in creates a connection between your respective Internet browser and the Xing server. This informs Xing through your IP address that you have visited our website. If you click on the Xing logo while logged into your Xing account, Xing is able to associate your visit to our website with your account. We point out that as the website provider we are not aware of the contents of transmitted data nor their use by Xing.
If you do not want Xing to associate your visit with our website, please log out of your Xing user account.
Further information may be found in the Xing Data Protection Statement (https://privacy.xing.com/de/datenschutzerklaerung)
Our website also integrates plug-ins from the LinkedIn social network or LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereafter "LinkedIn"). LinkedIn plug-ins may be recognized by their logo or the "Recommend" button. Please note that when activated, the plug-in establishes a connection between your respective Internet browser and the LinkedIn server. LinkedIn can see from your IP address that you have previously visited our website. If you click the "Recommend button" of LinkedIn while being logged into your LinkedIn account, you have the option to link the content of our website to your profile page on the LinkedIn profile. Doing so allows LinkedIn to associate your visit to our website with you or your account. Note that we have no knowledge of the contents of submitted data or their use by LinkedIn.
For more details on how to collect the data and on your available rights and setting options, please visit LinkedIn at www.linkedin.com/static.
Instagram functions are integrated on our webpages. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.
When you are logged into your Instagram account, you may link the contents of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit of our website with your user account. We point out that as the website operator we do not have any knowledge of the contents of the transmitted data and their use by Instagram.
For more information, see the Instagram Data Protection Statement at instagram.com/about/legal/privacy/.
7. Links
Note that this Data Protection Statement does not apply to any external links offered on our website. When we provide links, we make every effort to ensure that they also comply with our privacy and security standards. However, we have no influence on the compliance with data protection and security regulations by other providers. Please familiarize yourself with the data protection statements on the websites of other providers.
8. Rights of Data Subjects
You have the right
- under Art. 15 GDPR, to request information about your personal data processed by us. In particular, you may demand information on the processing purpose, the data category, the categories of recipients to whom your data has been or will be disclosed, the scheduled archiving period, the rights to correction, deletion, processing restriction or objection, the existence of a right of appeal, the origin of your data when not collected directly by us, and the existence of automated decisionmaking, including profiling and, where appropriate, meaningful information on the details;
- under Art. 16 GDPR, to demand the prompt correction of incorrect or incomplete personal data stored with us;
- under Art. 17 GDPR, to demand the deletion of your personal data stored by us, except when their processing is required to exercise the right to freedom of expression and information, to meet a legal obligation, is in the public interest or to assert, exercise or defend a legal claim;
- under Art. 18 GDPR, to demand a processing restriction of your personal data if or when
- you deny the accuracy of your personal data and we were able to verify the accuracy of your claim,
- the processing is unlawful and you reject the deletion of your personal data and instead demand a restriction of their use, or
- we no longer require the data for processing purposes or need the data to assert, exercise or defend a legal claim; or
- you have filed an objection against the processing when it is not yet certain whether legitimate reasons on your or on our part prevail.
- under Art. 20 GDPR, to demand the surrender of your personal data previously provided to us in a structured, standard and machine-readable format or to request their transfer to another data controller;
- under Art. 7 Subsec. 3 GDPR, to revoke your consent given to us at any time as a result of which we are no longer permitted to continue the data processing based on this consent in the future, and
- under Art. 77 GDPR, to lodge a complaint to a supervisory authority. As a rule, you can contact the supervisory authority competent for usual place of residence or work or our company headoffice.
9. Right to Object
When we process your personal data on the basis of our legitimate interest under Art. 6 Subsec. 1 Clause 1 lit. f GDPR, you have the right under Art. 21 GDPR to object to the specific processing of your data. When your objection is against direct mail, you have a general right of objection which is implemented by us even in the absence of particular circumstances. In all other matters, in order to successfully assert an objection, it is necessary to quote the reasons underlying your particular situation.
If you would like to exercise your right of revocation or objection, please e-mail us at [email protected].
10. Data Security
We encrypt the transmission of data from and to our website using the Secure Socket Layer (SSL) method, in conjunction with the highest encryption level supported by your browser. This is usually a 256-bit encryption. If your browser does not support this, 128-bit v3 technology will be used instead. The encryption of individual pages of our offer may be recognized by the closed key or padlock symbol in the lower status bar or address bar of your browser.
To protect your data from accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties, we also use appropriate technical and organizational security measures (TOMs). We continuously revise and improve our security measures in line with technical developments.
11. Updating and Amendment of Data Protection Statement
This Data Protection Statement is dated August 2019 and is currently valid.
Changes in legal or regulatory requirements, developments in case law and the upkeep of our website may necessitate changes to our Data Protection Statement.
The current version of our Data Protection Statement may be viewed and printed out at any time on the website www.branopac.com/en/data-protection-statement/.