Data Privacy Statement
Table of Contents
- Responsible Authority
- Processing of Personal Data
- Protection of Your Personal Data
- Purpose of Processing Personal Data
- Data Collected Automatically When Visiting Our Website
- Use of Google Analytics
- Use of Google Maps
- Use of Google Webfonts
- Children and Teenagers
- Changes to Our Data Privacy Statement
- Application Process
- Online Application Form
- Press Portal
- Data Subject Rights
- Right to Object
- Questions, Suggestions, Complaints to the External Data Protection Officer
- Right to Submit a Complaint to a Supervisory Authority
1. Responsible Authority
Thank you for your interest in our company and our products and services. We want you to feel safe about your data when visiting our website. We take the protection of your data very seriously and strictly adhere to the GDPR and the German Federal Data Protection Act [Bundesdatenschutzgesetz, BDSG] in its respectively valid form.
As the operator of the website www.apk-ag.de, the APK AG, Beunaer Str. 2, 06217 Merseburg, is the controller in the sense of the EU General Data Protection Regulation (GDPR) who individually or jointly makes decisions on the purposes and means of the processing of personal data, hereafter referred to as “data.”
2. Processing of Personal Data
According to the GDPR, personal data is any information concerning an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier (such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person).
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Use of our website does not require you to provide data. However, in certain cases, we will need your name, address and additional information to perform your requested services.
The same applies to, e.g., the sending of information material and ordered goods and to responses to individual inquiries. We will notify you when required. Furthermore, we only process data you provide to us voluntarily and data that is collected automatically when our website is visited (e.g., your IP address and the names of the pages you opened, your browser and operating system, time and date of access, search engines used or names of downloaded files).
If you request our services, usually only the data required for us to perform the service will be collected. Any additional data we may request may be provided voluntarily. Data will only be processed to perform requested services and to safeguard our legitimate business interests.
3. Protection of Your Personal Data
We have implemented technical and organizational measures to ensure compliance with data protection regulations by both us and our commissioned external service providers. We require our employees and commissioned service providers to maintain confidentiality and adhere to the GDPR and the German Federal Data Protection Act in its respectively valid form.
As part of our obligation to provide information, we want this Data Privacy Statement to be as transparent as possible and will explain the purposes for processing your data and use of tracking/analysis tools, cookies and social media plugins hereafter.
4. Purpose of Processing Personal Data
We will process the data you provide in accordance with the principles of data economy and purpose limitation. The principle of purpose limitation states that data shall be collected for
specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes. Further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes is not considered to be incompatible with the initial purposes.
We only process your data to answer inquiries, handle your orders and provide access to certain information or offers to you. Maintaining customer relationships may also require us or a commissioned service provider to use this data to inform you about product offers or to conduct online surveys to fulfill the tasks and requirements set by our customers.
We will only process the data you provide online for the stated purposes. Your data will not be transferred to third parties without your express consent. Data will only be collected or transmitted to authorized state institutions and officials in accordance with applicable laws or if we are required to do so due to a court order. We respect that you may not wish to provide your data to support our customer relationship (especially not for direct marketing or market research purposes). We will not sell your data to third parties or otherwise market your data without your consent.
5. Data Collected Automatically When Visiting Our Website
When using our website, the following data may be processed for technical and organizational reasons: The names of the pages you opened, your browser and operating system, time and date of access, search engines used or names of downloaded files and your IP address.
When you visit our website, we may save information on your computer in form of a (session) cookie. Cookies are small text files transmitted by a web server to your browser and saved on your computer’s hard disk.
Except for your IP address, no personal user data will be saved. This information allows you to be automatically recognized during your next visit to our website and makes navigation easier. Cookies enable us to, e.g., adjust our website to your interests and to save your password so that you won’t have to re-enter it every time you visit our website. You may also view our website without cookies. If you do not want us to recognize your computer, you may prevent cookies from being saved on your hard disk by setting your browser to “Disable cookies.” For detailed instructions, please see your browser’s help function. However, please note that disabling cookies may prevent you from fully using every function of our offers.
7. Use of Google Analytics
Our website uses Google Analytics, a web analysis service of Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. Google Analytics uses so-called cookies, text files saved onto your computer that allow your use of the website to be analyzed.
The information on your website use generated by the cookie is generally transmitted to a Google server in the USA where it is saved. If IP-anonymization is activated on our website,
your IP address will be shortened by Google within a Member state of the European Union or in another state party to the European Economic Area Agreement (so-called IP masking).
Only in exceptions will your full IP address be transferred to a Google server in the US and shortened there. On behalf of the operators of this website, Google will use this information to assess your use of this website, to compile reports about website activity and to perform additional services related to use of the website and the Internet for the website operators.
The IP address transmitted by your browser through Google Analytics will not be merged with other Google data. You can prevent cookie storage through your browser settings at any time. However, please note that you may not be able to use every function of this website. Furthermore, you can prevent the collection of cookie-generated data (including your IP address) on your use of the website and the processing of this data by Google by downloading and installing the browser plug-in provided under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
As an alternative to the browser plugin and on browsers on mobile devices, you may also prevent data collection by Google Analytics by activating the following link which will install an opt-out cookie that will block any future collection of your data when visiting our website. Please note that this link must be activated again if you delete your cookies.
For Google’s Data Privacy Statement, please see https://policies.google.com/privacy?hl=en. For the Google Terms of Service, please see https://policies.google.com/terms?hl=en (in German).
8. Use of Google Maps
This website uses Google Maps, a product by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps provides information about locations that are of interest to you through search requests and retrieved maps.
By using this website, you agree to the automated processing of the data collected by Google Inc., its representatives and third parties. We have no influence on Google’s automated processing when you use Google Maps.
For more information, please see https://policies.google.com/privacy. For Google Maps’ Additional Terms of Service, please see: https://maps.google.com/help/terms_maps.html.
9. Use of Google Webfonts
This website uses script libraries and the font library Google Webfonts, a product of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, in order to conveniently use fonts and graphics on a large number of browsers in a user-friendly manner.
Transmitting Google Webfonts in to the browser cache prevents a repeated loading of the website. Activating script libraries or font libraries will automatically make a direct connection to Google Inc. Google may process these transmitted data. We have no influence on the transmission process or on the contents of the transmitted data. By using this website you consent to the processing of the transmitted data by Google Inc.
You can find further information on Google Webfonts on https://developers.google.com/fonts/faq.
For more details and general information please note the data privacy statement of Google Inc. on https://www.google.com/policies/privacy/
10. Children and Teenagers
Our website is aimed exclusively at potential applicants, customers and business partners.
Persons under 16 years of age should not transmit data to us without the permission of a parent or guardian. We do not request data from children or youths under the age of sixteen. We do not collect such data or provide such data to third parties.
We have implemented technical and operational protective measures in accordance with the applicable legal regulations to protect your data from, loss, destruction, manipulation and unauthorized access. Our security measures are reviewed regularly and adjusted to technological advances. All our employees and all persons participating in data processing are required to adhere to the GDPR and to the German Federal Data Processing Act in its respectively valid form and other laws relevant for data protection and must treat data confidentially.
Furthermore, we conclude according agreements with any external service providers we commission. Our security measures are regularly reviewed and adjusted in accordance with technological advances.
12. Changes to Our Data Privacy Statement
We reserve the right to make changes to our security and data protection measures if required due to technical developments. In such cases, we will also adjust our Data Privacy Statement. Therefore, please note the respectively current version of our Data Privacy Statement.
Should the processing of your data require your consent, we will obtain it from you and use your data for the stated purposes for which we requested your consent.
We have documented your consent and are obliged to keep this data available at all times.
You may revoke your consent at any time with future effect. To do so, please write us to APK AG, Beunaer Str. 2, 06217 Merseburg or email us at firstname.lastname@example.org.
14. Application Process
By transmitting your applicant data, you consent to the processing of your data for the respective application process. You may revoke your consent at any time with future effect.
15. Online Application Form
If you contact us through our online application form we will process your personal data such as your name, surname, date of birth, your contact details and details regarding your application for application purposes. These data will be transmitted to our human resources department by e-mail through end-to-end encryption.
Your data are protected against unauthorised access, publication, transfer or manipulation by suitable measures. Your data transmitted for application purposes will only be processed for purposes concerning your current application. No data will be transmitted to a third party without your explicit consent.
We ensure your data be complete and correct. In case of any changes of your personal data you are willing to promptly give notice to APK AG. You can also at any time demand the data regarding your application be deleted or its processing be restricted. You can revoke your consent hereto or have the data be corrected.
This excludes data which fall under any legal retention periods or for data which the APK AG is entitled to safeguard for a certain period.
Any other data transmitted for application purposes will be retained for up to three months after the end of the application process. After this period any data will be deleted automatically in a legally compliant manner.
By transmitting your application data and by ticking the confirmation box you give your consent to the processing of your data in the above-named manner.You may revoke your consent at any time with future effect. To do so, please write us to APK AG, Beunaer Str. 2, 06217 Merseburg or email us at email@example.com. You can also contact our human resource department by e-mail at firstname.lastname@example.org or by calling +49 3461-79457-0.
16. Press Portal
Our press portal adresses members of press as well as our business partners. It primarily serves the exchange of information and the communication between the registered members.
When registering we will process your personal data such as your full name, address, telephone number or e-mail address as well as the name of your company or organisation. After registration you also have the possibility to complete your profile with further personal data.
These data are made voluntarily and can be deleted by the member at any given time. By clicking on the registration button you give your consent to the processing of your data for the above-named purposes.
You may revoke your consent at any time with effect for the future by deleting your profile on our press portal. You can also contact us at APK AG, Beunaer Str. 2, 06217 Merseburg or send an e-mail to email@example.com.
17. Data Subject Rights
If we process your data, you are entitled the following extensive rights as a data subject:
a) Right to Information
Under art. 15 of the GDPR, you have the right to information about the data processed by us. You may especially obtain information about the purposes of the processing, the categories of personal data, the categories of possible recipients and the envisaged period for which the personal data will be stored.
Please submit information requests to APK AG, Beunaer Str. 2, 06217 Merseburg or by email to firstname.lastname@example.org.
b) Right to Rectification
Under art. 16 of the GDPR, you have the right to obtain rectification or completion of your data from usYou may exercise this right by contacting the above-stated addresses.
c) Right to Erasure
Under art. 17 of the GDPR, you have the right to obtain erasure of personal data concerning you if storage of the data is no longer required and if there is no other legal ground for its processing. You may also obtain erasure if you object to the processing and there are no overriding legitimate grounds for the processing and if your data was processed unlawfully or if the personal data must be erased for compliance with a legal obligation under EU or national law.
You may exercise this right by contacting the above-stated addresses.
d) Right to Restriction of Processing
Under art. 18 of the GDPR, you have the right to obtain the restriction of processing if you contest the accuracy of your personal data for a period enabling the controller to verify the accuracy of your personal data; if the processing is unlawful, but you oppose the erasure of your personal data; the purposes for the processing cease to apply, but the data is required for the establishment, exercise or defense of legal claims or if you objected in accordance with art. 21 of the GDPR and if whether the legitimate grounds of the controller outweigh your interests has not yet been determined.
You may exercise this right by contacting the above-stated addresses.
e) Right to Data Portability
Under art. 20 of the GDPR, you have the right receive your personal data in a structured, commonly used and machine-readable format (data portability). In addition, under certain circumstances, you may also receive your data directly from a controller if technically possible.
You may exercise this right by contacting the above-stated addresses.
18. Right to Object
You have the right to object to the use of your data for the above-stated purposes at any time (art. 21 of the GDPR). This is possible for objections to direct marketing or on grounds relating to your particular personal situation. If you object to direct marketing, we will implement your general objection right without information about your particular personal situation.
To exercise your right to object, please write us at APK AG, Beunaer Str. 2, 06217 Merseburg or email us at email@example.com.
19. Questions, Suggestions, Complaints External Data Protection Officer
Should you have any questions about our Data Privacy Statement, data protection or the processing of your personal data, please contact us:
Law Firm for Data Protection and IT Law
Attorney at Law Thomas P. Costard
Telefon: 0911 / 790 30 34
Telefax: 0911 / 790 30 35
Feel free to contact Mr. Costard regarding any enquiries, suggestions or complaints you may have.
20. Right to Submit a Complaint to a Supervisory Authority
Please also note that, irrespective of other administrative or legal remedies, you have the right to submit complaints to supervisory authorities, especially in the Member state of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of your personal data infringes on the GDPR.
A list of (non-public sector) supervisory authorities and their addresses is provided (in German) at: