1. General information and principles of data processing
We are pleased that you are visiting our website. The protection of your privacy and the protection of your personal data, so-called personal data, when using our website is an important concern for us.
According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address.
Data that cannot be linked to your person, such as anonymized data, is not personal data. Processing (e.g. collection, storage, retrieval, consultation, use, transmission, erasure or destruction) in accordance with Art. 4 No. 2 GDPR always requires your consent or another legal basis. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any statutory retention obligations to be complied with.
Here you will find information on how we handle your personal data when you visit our website. In order to provide the functions and services of our website, it is necessary for us to collect personal data about you.
Below you will also find information on the type and scope of the respective data processing, the purpose and the corresponding legal basis as well as the respective storage period.
This privacy policy only applies to this website. It does not apply to third-party websites to which we merely refer via a hyperlink. We cannot assume any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence on whether they comply with the statutory data protection regulations. For information on how third parties handle your personal data, please refer directly to their websites.
2. Controller
The controller responsible for the processing of personal data on this website is (see legal notice):
Ehret+Klein AG
Gautinger Straße 1d
82319 Starnberg
Fon +49 8151/65225-100
Fax +49 8151/65225-129
E-Mail info@ehret-klein.de
3. Contact Data Protection Representative
You can also contact our data protection officer at any time if you have any questions about data protection:
Dr. Georg F. Schröder, LL.M.
legal data Schröder Rechtsanwaltsgesellschaft mbH
Prannerstr. 1
80333 München
Tel: +49-89 - 954 597 520
Fax: +49-89 - 954 597 522
E-Mail: georg.schroeder@legaldata.law
4. Provision and use of the website / server log files
a) Type and scope of data processing
If you use this website without transmitting data to us in any other way (e.g. by registering or using the contact form), we collect technically necessary data in the form of log data (so-called log files), which are automatically transmitted to our server by your terminal device, e.g:
b) Purpose and legal basis of data processing
This processing is technically necessary in order to display our website to you. We also use the data to ensure the security and stability of our website.
The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.
c) Storage period
As soon as the aforementioned personal data is no longer required to display the website, it will be deleted. This is the case no later than seven days after visiting our website. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object to this aspect. Further storage may take place in individual cases if this is required by law.
a) Type and scope of data processing
We collect personal data about you in the pre-contractual area and when a contract is concluded. This concerns, for example, first and last name, address, e-mail address, telephone number or bank details.
b) Purpose and legal basis of data processing
We collect and process this data exclusively for the purpose of executing a contract concluded with you or to fulfill pre-contractual obligations.
The legal basis for this is Art. 6 para. 1 lit. b) GDPR. If you have also given your consent, the additional legal basis is Art. 6 para. 1 lit. a) GDPR.
c) Storage period
The data will be deleted as soon as it is no longer required for the purpose of its processing. In addition, there may be statutory retention obligations of up to 10 years, for example retention obligations under commercial or tax law in accordance with the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data when these statutory retention periods expire.
a) Type and scope of data processing
You can contact us by e-mail. Our data collection is limited to the e-mail address of the e-mail account you use to contact us, the metadata (time stamp, other recipients) and any personal data you provide when contacting us.
Please note that e-mails are always sent unencrypted and therefore it cannot be ruled out that third parties may gain knowledge of them. You can also contact us by post at any time.
b) Purpose and legal basis
The purpose of data processing is to respond to your request appropriately. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in processing the above-mentioned personal data to process your request.
c) Storage period
The duration of the storage of the above-mentioned data depends on the background of your contact. Your personal data will be deleted regularly if the purpose of the communication no longer applies and storage is no longer required due to statutory retention obligations. This may result, for example, from the processing of your request.
a) Type and scope of data processing
You can apply to us by e-mail. When you apply, we collect and store the data that you send us by e-mail (see also section 10 of this privacy policy).
b) Purpose and legal basis of data processing
We only process your data for the purpose of processing your application. Your data will not be passed on to third parties. The legal basis for the processing is Art. 88 para. 1 GDPR in conjunction with § Section 26 para. 1 BDSG. If, in the event of a rejection, you give us your consent to the further storage of your data so that we can return to your application in the future if necessary, the legal basis is Art. 6 para. 1 lit. a) GDPR.
c) Storage period
If we are unable to offer you a position, we will store your data for a maximum of six months after the end of the application process, taking into account Section 61b (1) ArbGG in conjunction with § 15 AGG. The start of the period is the receipt of the rejection letter.
If you have given us your consent to include you in our applicant pool, we will store your data for a maximum of two years.
d) Data transfer
Your data will only be received by the bodies involved in the decision (responsible personnel or specialist departments, management).
In addition, we may be obliged by law, official or court order to transfer your data to public bodies (e.g. public prosecutor's office, police, supervisory authorities, tax office, social security institutions, etc.).
Other data recipients may be those bodies for which you have given us your consent to transfer data.
8. Use of cookies
We use cookies. Cookies are small files that are stored on your computer and saved by your browser. Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to perform various analyses. For example, some cookies can recognize the browser you are using when you visit our website again and transmit various information to us. We use cookies to facilitate and improve the use of our website. Among other things, cookies enable us to make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses. Various types of cookies are used on our website, the nature and function of which we would like to explain below.
Temporary cookies / session cookies
Our website uses so-called temporary cookies or session cookies, which are automatically deleted as soon as you close your browser. With the help of this type of cookie, it is possible to record your session ID. As a result, various requests from your browser can be assigned to a common session and it is possible to recognize your end device on subsequent website visits. These session cookies expire at the end of the session.
Persistent cookies
So-called persistent cookies are used on our website. Persistent cookies are cookies that are stored in your browser for a longer period of time and can transmit information. The respective storage period differs depending on the cookie. You can delete permanent cookies yourself via your browser settings.
Legal basis and storage period
Due to the purposes of use described, the legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f) GDPR. If you have given us your consent to the use of cookies on the basis of a notice (“cookie banner”) provided by us on the website, the legal basis is Art. 6 para. 1 lit. a) GDPR.
As soon as the data transmitted to us via the cookies is no longer required for the purposes described above, this information will be deleted. Further storage may take place in individual cases if this is required by law.
Configuration of the browser settings
Most web browsers are preset to accept cookies automatically. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may then no longer be able to use all the functions of our website.
You can also use your browser settings to delete cookies already stored in your browser. It is also possible to set your browser to notify you before cookies are stored. As the various browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the corresponding configuration options.
Deactivating the use of cookies may require the storage of a permanent cookie on your computer. If you delete this cookie, you will need to set it again for it to take effect again.
Further information on configuring the cookie settings in the respective browsers can be found at:
Cookie categories
We use the following categories of cookies:
a) Necessary cookies
Necessary cookies ensure functions without which our website cannot be used as intended. These strictly necessary cookies are used, for example, to ensure that logged-in users remain logged in at all times when accessing various subpages. These are so-called first-party cookies, which are only set and used by us. These cookies do not require consent. You can deactivate cookies in your browser at any time.
b) Functional cookies
With the help of functional cookies, we can also extend the functionality of our website to show you additional useful information or to optimize the presentation of our website. The data collected using such cookies may vary depending on the purpose of the cookie and is listed directly with the respective tool used.
c) Statistics cookies
Statistics cookies can be used to collect information about the use of a website in order to improve its attractiveness, content and functionality. This concerns, for example, the time spent on the page, the sub-pages accessed and the functions used (click behavior).
d) Marketing cookies
Marketing cookies can be used to display interest-based advertising to website visitors and to measure the effectiveness of advertising campaigns. With the help of these cookies, visitors can be recognized on other websites and shown personalized ads there.
9. Data transfer
We only pass on your personal data to third parties if:
we use external service providers (so-called processors) for processing in accordance with Art. 28 GDPR, who process data in accordance with our instructions and are obliged to handle your data carefully (e.g. in the areas of IT or marketing).
When transferring data to external bodies in third countries, i.e. outside the European Union (EU) or the contracting states of the Agreement on the European Economic Area (EEA), we ensure that these bodies treat your personal data with the same care as within the EU or the EEA. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can ensure the careful handling of personal data through contractual agreements or other suitable guarantees.
10. Data security and security measures
We are committed to protecting your privacy and treating your personal data confidentially. To this end, we take extensive technical and organizational security precautions, which are regularly reviewed and adapted to technological progress.
These include the use of recognized encryption methods (SSL or TLS). However, data disclosed in unencrypted form, for example by unencrypted e-mail, may be read by third parties. We have no influence over this. It is the responsibility of the user to protect the data provided by them against misuse by means of encryption or in any other way.
11. Changes to the privacy policy
We reserve the right to update this declaration at any time if necessary.
12. Your legal rights
Below you will find your legal rights in relation to your personal data. Details can be found in Articles 7, 15-22 and 77 GDPR. You can contact us as the controller or our data protection officer in this regard.
a. Right to withdraw your consent under data protection law in accordance with Art. 7 para. 3 sentence 1 GDPR
You can withdraw your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the lawfulness of the processing carried out up to the point of withdrawal.
b. Right to information in accordance with Art. 15 GDPR
You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to information about this personal data and to further information, e.g. the purposes of processing, the categories of personal data processed, the recipients and the planned duration of storage or the criteria for determining the duration.
c. Right to rectification and completion pursuant to Art. 16 GDPR
You have the right to request the rectification of inaccurate data without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.
d. Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR
You have the right to erasure if the processing is not necessary. This is the case, for example, if your data is no longer required for the original purposes, if you have revoked your declaration of consent under data protection law or if the data has been processed unlawfully.
e. Right to restriction of processing in accordance with Art. 18 GDPR
You have a right to restriction of processing, e.g. if you believe that the personal data is incorrect.
f. Right to data portability pursuant to Art. 20 GDPR
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format.
g. Right to object pursuant to Art. 21 GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you.
In the case of direct advertising, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
h. Automated decision-making in individual cases including profiling in accordance with Art. 22 GDPR
You have the right not to be subject to a decision based solely on automated processing, including profiling, except in the exceptional cases mentioned in Art. 22 GDPR.
A decision based solely on automated processing - including profiling - does not take place.
i. Complaint to a data protection supervisory authority pursuant to Art. 77 GDPR
You can also lodge a complaint with a data protection supervisory authority at any time, for example if you are of the opinion that the data processing does not comply with data protection regulations.