Preface
Optibelt GmbH (hereinafter referred to as: "we"), as the operator of the website, is responsible for processing the personal data of users who visit the website. Our contact details can be found in the legal notice of the website, and contact persons for questions regarding the processing of personal data are named directly in this data privacy statement.
We take the protection of your privacy and your private data very seriously. We collect, store and use your personal data only in accordance with the content of this data privacy statement and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and national data protection regulations.
With this data privacy statement, we would like to inform you to what extent and for what purpose personal data is processed in connection with the use of the website.
Personal data
Personal data is information about an identified or identifiable natural person. This includes all information about your identity, such as your name, email address or postal address. However, information that cannot be associated with your identity (for example, statistical information, such as the number of online users) is not considered personal information.
You can use our website without disclosing your identity and without providing personal data. We will then only collect general information about your visit to our website. For some of the services offered, however, personal data is collected from you. This data will then only be processed by us for purposes of using this website, in particular for providing the desired information. When entering personal data, only mandatory data must be provided. Further information may also be provided on a voluntary basis. In each case, we point out whether it concerns mandatory fields or voluntary data. We will inform you about the specific details in the relevant section of this data privacy statement.
An automated decision-making process based on your personal data does not take place in connection with the use of our website.
Processing of personal information
We store your data on specially protected servers within the European Union. These are protected by technical and organisational measures against loss, destruction, access, modification or dissemination of your data by unauthorised persons. Access to your data is only permitted for a limited number of authorised persons. They are responsible for the technical, commercial or editorial support of the servers. Despite regular checks, however, complete protection against all risks is not possible.
Your personal data is transmitted over the internet in encrypted form. We use SSL encryption (Secure Socket Layer) for data transmission.
Disclosure of personal data to third parties
In principle, we only use your personal information to provide the services you have requested. Insofar as external service providers are used by us within the scope of the provision of services, their access to the data also takes place exclusively for purposes related to the provision of services. Through technical and organisational measures, we ensure compliance with data protection regulations and also oblige our external service providers to comply with these.
Furthermore, we will not pass on your data to third parties without your explicit consent, with a particular focus on the avoidance of advertising and promotional activities. Your personal data will only be disclosed if you have actively consented to the transfer of your data or if we are entitled or obliged to do so by law and/or official court orders. In particular, this may involve providing information for law enforcement, security purposes or the enforcement of intellectual property rights.
Legal basis for data processing
Insofar as we obtain consent for the processing of your personal data, Article 6(1)(a) of the GDPR serves as the legal basis for data processing.
Insofar as your personal data is processed for the purpose of fulfilling a contract or in the context of a contract-like relationship with you, Article 6(1)(b) of the GDPR serves as the legal basis for data processing.
Insofar as we process your personal data in order to fulfil a legal obligation, Article 6 (1)(c) of the GDPR serves as the legal basis for data processing.
Insofar as we process your personal data within the scope of an employment relationship, Article 88 (1) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG) serves as the legal basis for the data processing.
Article 6(1)(f) of the GDPR may also be used as a legal basis for data processing if the processing of your personal data is necessary to safeguard a legitimate interest of our company or that of a third party, and, in so doing, your interests, fundamental rights and freedoms do not require the protection of personal data.
Within the scope of this data privacy statement, we always indicate the legal basis on which the processing of your personal data is based.
Application data
Your personal information and data, which you voluntarily provide to us as part of your application via our careers site, will be collected, stored and only used for the intended purpose with the utmost care and integrity. The provisions of the European Data Protection Regulation and the Federal Data Protection Act are observed. We only collect the data that is required in the course of your application to companies of the Arntz Optibelt Group in order to enable the selection and recruitment of suitable applicants. The personal data required for the selection of suitable applicants is marked as mandatory in the application portal. The processing of further personal data, the provision of which is expressly not mandatory in this context, is based on the voluntary consent of the data subject in accordance with Art. 6 (1) sentence 1 lit. a) GDPR.
The legal basis for the processing of the following categories of personal data is Art. 6 (1) lit b) GDPR as the legal basis for the implementation of pre-contractual measures at the request of the data subject (applicant).
The categories of personal data processed include name, title, address, contact details, date of birth, nationality, CV, certificates, qualifications, photo (optional), where applicable a (short) assessment of the applicant by employees of companies of the Arntz Optibelt Group and log data when video interviews are used. With regard to the application, the data source of this personal data is the data subject. With regard to (short) assessments, recruiters, heads of department, other employees with professional and disciplinary management responsibility, trainers and professionals in the relevant field are to be considered as the data source.
You can object to the processing of your personal data at any time. In particular, you have the option to withdraw your application at any time. As part of the application process, you should only provide us with the personal data that is required for participation in the application process and its implementation. The processing of the personal data mentioned here is necessary for the handling of the application procedure. Without this data, we cannot consider you in the application process.
If you have given your consent as part of the application process, your application documents may be forwarded to other companies in the Arntz Optibelt Group. We do not transfer your data to third countries unless you have expressly applied for a job in a third country or given your consent.
There will be no automated decision making or profiling based on your collected data.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the event that an employment relationship, training relationship, internship or other employment relationship is established following the application procedure, the data will initially continue to be stored and transferred to the personnel file. Otherwise, the application procedure ends with the receipt of a rejection. In this case, the data will be deleted after six months. Deletion does not take place if further processing and storage of your personal data is necessary in individual cases for the assertion, exercise or defence of legal claims. In this case, we have a legitimate interest in the further processing and storage of your personal data. The legal basis is Art. 6 para. 1 p. 1 lit. f) GDPR. Deletion will also not take place if we are obliged to continue storing your personal data due to legal regulations. In this case, the legal basis is Art. 6 para. 1 p. 1 lit. c) of the GDPR.
If the applicant agrees to longer-term storage, for example within the framework of a so-called talent pool, the data can be stored for up to 12 months. The storage of your application in the talent pool requires your consent. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. a) GDPR. You can revoke the consent you have given us at any time.
Data deletion and storage time
We always delete or block your personal data when the reason for storing the data is no longer applicable. However, data may also be stored if this is provided for by legal requirements to which we are subject, for example with regard to statutory storage and documentation obligations. In such cases, we will delete or block your personal data at the end of the corresponding provisions.
Use of our website
Information about your computer
Each time you access our website, we collect the following information about your computer, regardless of your registration: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred are recorded within the scope of this request. We also collect product and version information about the browser and operating system of the computer used. We also identify the website from which the website was accessed. The IP address of your computer is only stored for the duration of the use of the website and is subsequently deleted or made anonymous by truncation. The remaining data is stored for a limited period of time.
We use this data for the operation of the website, in particular to detect and eliminate errors, to determine the utilisation of the website and to make adjustments or improvements. For these purposes, we have a legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.
Use of cookies
As on many websites, cookies are used for our website. Cookies are small text files which are stored on your computer and contain certain settings and data for exchange with our website via your browser. A cookie usually contains the name of the domain from which the cookie file was sent, information about the age of the cookie and an alphanumeric identifier.
Cookies enable us to recognise your computer and to make any pre-settings immediately available. Cookies help us to improve the website and provide you with a better and more personalised service. This is also our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.
The cookies we use are so-called session cookies, which are automatically deleted after the end of the browser session. Occasionally, cookies with a longer storage period can also be used, so that your pre-settings and preferences can be applied the next time you visit our website.
Most browsers are configured to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser to notify you as soon as cookies are sent. It is also possible to manually delete cookies that have already been saved by using the browser settings. Please note that our website may only be of limited- or no use if you decline the storage of cookies or delete necessary cookies.
Google Analytics
We use Google Analytics for statistical analysis. Google Analytics is a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94034, USA ("Google"). Google Analytics uses so-called “cookies,” or textual data that is saved on your computer, making analysis of your website use possible. The information generated by the cookies about your use of this website is transmitted to a Google server in the USA and is stored there. In case IP anonymisation is activated on this website, your IP address will be shortened by Google in the member states of the European Union or other signatory states of the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address first be transmitted to a Google server in the USA before being shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website and generate reports on website activity as well as further services provided to the website operator with regard to website and internet use. The IP address transmitted by Google Analytics is not joined with other Google data. You can prevent storage of cookies by changing your browser software settings, but please note that some functions of the website may not be usable to their full extent if you do so. Furthermore, you can also prevent collection of cookie-generated website usage data (including your IP address) by Google as well as the processing of this data by downloading and installing the browser plug-in available under the following link http://tools.google.com/dlpage/gaoptout?hl=de.
Further information is available under http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (General information on Google Analytics and data protection). We would like to point out that on our website, Google Analytics has been extended by the code " anonymizeIp();" in order to make the IP addresses anonymous, whereby the last octet is deleted.
Due to protective measures taken (anonymisation and possibility of objection), we consider data processing for the optimisation of our website to be a legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.
Registration
You can register to use our website. To do so, you must provide the data requested during registration, for example, name, address and email address. We also record the date and time of registration and the IP address. As part of the registration process, we obtain your consent for the use of the data. The advantage of this is that you do not have to enter this data again each time you use or place an order.
The legal basis for the processing of data for registration is Article 6 (1) (a) of the GDPR. Insofar as you register for the fulfilment or initiation of a contract with us, the legal basis for the processing of the data is additionally Article 6 (1) (b) of the GDPR.
The information requested as a mandatory field during registration is required for the fulfilment or initiation of a contract with us for certain services.
When you register, a customer account will be created for you. Data in the customer account is stored with us only as long as an active customer relationship exists. If no activity is detected for a period of three years, the status of the customer relationship is set to inactive. You can request the deletion of your customer account at any time.
Order processing
We only use your personal information for orders within our company and affiliated companies, and with the company commissioned to process orders.
Storage and data transfer for orders
To process orders, we work together with various companies that are responsible for payment processing and logistics. We ensure that our partners comply with data protection regulations. We will pass on your address data (name and address) to the respective transport company that delivers the products ordered to you. The legal basis for this is Article 6 (1) (b) of the GDPR. The processing of your personal data is required to fulfil the contract with you.
The data will be stored by us for as long as it is necessary to fulfil the contract. Furthermore, we store this data for the legally prescribed period for the fulfilment of post-contractual obligations and due to commercial and tax retention periods. In general, this retention period is 10 years from the end of the respective calendar year.
Payment processing for orders, PayPal, Sofortüberweisung (Sofort)
Depending on the chosen payment method, payment processing for orders may be effected through the involvement of a service provider.
When paying by credit card, all necessary data such as name, address and purchase data will be forwarded to the respective credit card company.
If you pay via PayPal, you will be redirected to the PayPal website via a link. In the course of this form of payment, your personal data will be processed. This data includes your name, your address, your email address, any telephone number and account or credit card information. Please refer to the general terms and conditions, terms of use and data privacy statement of PayPal (Europe) S.à r.l. et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg on the website www.paypal.com.
If you pay by Sofortüberweisung (Sofort), you will be redirected to the internet site of Sofortüberweisung, a service of Sofort GmbH, which belongs to Klarna Bank AB (publ), Sveavägen 46111 34 Stockholm, Sweden. In the course of this form of payment, your personal data will be processed. This data includes your name, your address, your email address, any telephone number and account or credit card information. Please refer to the general terms and conditions, terms of use and data privacy statement of Klarna, which are listed under https://www.klarna.com.
The legal basis for payment processing is Article 6 (1) (b) of the GDPR. The processing of your personal data is necessary for the fulfilment of the contract with you, whereby you are free to choose the method of payment.
The data will be stored by us for as long as it is necessary to fulfil the contract. Furthermore, we store this data for the legally prescribed period for the fulfilment of post-contractual obligations and due to commercial and tax retention periods. In general, this retention period is 10 years from the end of the respective calendar year.
Creditworthiness check
Depending on the chosen payment method, it may be necessary to check your creditworthiness. In this case, we will use external service providers to whom we send your data (name, address, date of birth, order value) if you have given your consent for a creditworthiness check. The data is transmitted to the Verband der Vereine Creditreform e.V., Hellersbergstraße 12, D-41460 Neuss.
The legal basis for the creditworthiness check is Article 6 (1) (a) of the GDPR. If you do not wish to consent to the creditworthiness check, you may have to select another means of payment.
When assessing creditworthiness, an estimate is obtained of the probability of default with regard to our receivables from the purchase order. We only receive a probability value (score value) from our service provider, but no further details. On the basis of this value, we then evaluate whether the desired payment method can be offered. After completion of the check, the score value is deleted from our system and not saved as part of the order data. It is therefore not possible for us to subsequently assess why, for example, a certain payment method was not possible.
Communication with us
You can contact us in various ways, for example via the email addresses provided on our website. You are also welcome to receive our informative newsletter by email on a regular basis.
Newsletter
When you subscribe to our newsletter, your email address will be used for our own advertising purposes until you unsubscribe. You will also receive regular information on current topics and emails for special reasons, for example special promotions. The emails can be personalised and individualised based on our existing information about you.
If you have not given us your written consent to subscribe to our newsletter, we will use the so-called double opt-in procedure, i.e. we will not send you a newsletter by email until you have expressly confirmed to us beforehand that we should activate the newsletter subscription. We will then send you a notification email and ask you to confirm that you would like to receive our newsletter by clicking on a link contained in the email.
The legal basis for processing your data is your consent pursuant to Article 6(1)(a) of the GDPR if you have expressly registered for the newsletter. Within the scope of legal provisions, it may also be possible that you receive our newsletter without express consent, because you have ordered goods or services from us, we have received your email address in this connection and you have not objected to receiving information by email. In this case, the legal basis shall be our legitimate interest in the transmission of direct mail pursuant to Article 6(1)(f) of the GDPR.
If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future or object to further receipt of the newsletter without incurring any costs other than the transmission costs according to basic tariffs. Simply use the unsubscribe link included in each newsletter or send a message to us or our data protection officer.
Social media
In our website, you will find links to the social networks Facebook, LinkedIn and YouTube. The links are indicated by the respective logo of the provider.
Clicking on the links opens the corresponding social media pages for which this data privacy statement does not apply. Please refer to the data privacy statements of the individual providers for details of the provisions applicable there; you will find these under:
Facebook: http://www.facebook.com/policy.php
LinkedIn: https://de.linkedin.com/legal/privacy-policy?
YouTube: https://policies.google.com/privacy?hl=de&gl=de
No personal information is transmitted to the respective providers before the corresponding links are opened. Your visit to the linked page is also the basis for data processing by the respective providers.
Use of YouTube
Our website includes videos for which we use a plugin of the Google-operated service YouTube ("YouTube"). The operator of this service is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a website of our website that includes a video, you will be connected to YouTube's servers. At the same time, the server of YouTube will be informed which internet pages of our website you have visited.
If you are logged into your YouTube account, you allow YouTube to associate your surfing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. For more information on how user data is handled, please refer to the Google Privacy Policy https://www.google.com/intl/en/policies/privacy/, which also applies to YouTube.
We use YouTube so that we can show you videos and thus tell you more about us and our services; This is also the legitimate interest pursuant to Article 6 (1) (f) of the GDPR.
Your rights and contact
We attach great importance to explaining the processing of your personal data as transparently as possible and also to inform you about the rights to which you are entitled. If you require further information or wish to exercise the rights to which you are entitled, you can contact us at any time, so that we can take care of your request.
Rights of persons concerned
You have extensive rights regarding the processing of your personal data. First of all, you have a comprehensive right to information and can, if necessary, request the correction and/or deletion or blocking of your personal data. You may also request a limitation of processing and have a right of objection. You also have a right to data transferability with regard to the personal data you have provided us with.
If you wish to assert any of your rights and/or request further information, please contact our customer service. Alternatively, you can contact our data protection officer.
Revocation of consent and objection
Once consent has been given, it can be freely revoked at any time with effect for the future. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until such time as it is revoked. Contact persons for this purpose are also our customer service and data protection officer.
If the processing of your personal data is not based on consent, but on another legal basis, you can object to this data processing. Your objection will lead to a review, and, if necessary, termination of data processing. You will be informed of the results of the review and - if data processing is nevertheless to be continued - we will provide you with more detailed information as to why the data processing is permissible.
Data protection officer and contact
For questions related to our handling of personal data or further information on data privacy issues, please contact our Data Protection Officer:
Maximilian Koch
Phone:+49 5271 / 62 468
Email: datenschutz(at)optibelt.com
Complaints
If you believe that we are not processing your personal data in accordance with this data privacy statement or the applicable data protection regulations, you have a right of appeal to a regulatory authority. You can also lodge a complaint with our data protection officer. The data protection officer will then examine the matter and inform you of the result of the examination.
Further information and amendments
Links to other websites
Our website may contain links to other websites. As a rule, these links are marked as such. We have no influence on the extent to which the applicable data protection regulations are complied with on the linked websites. We therefore recommend that you also inform yourself about the respective data privacy statements of other websites.
Amendments to this data privacy statement
The current date of this data privacy statement is indicated by the date (below). We reserve the right to amend this data privacy statement at any time with future effect. Amendments are made, in particular, in the event of technical adjustments to the website or changes to data protection regulations. The current version of the data privacy statement can always be accessed directly via the website. We recommend that you regularly inform yourself about amendments to this data privacy statement.
Date of this data privacy statement: May 2023