1
1
First off, your data is in good hands with us. We will only do what you want us to do with your data.
The details are set out below in the long version of our promise. We have written our Privacy Policy in the most comprehensible way possible. For example, we have omitted references to laws and simplified many specialist terms. The relevant legally valid text can be found under “+ Details” in each case. (If there is no “+ Details” part in a particular section, the text provided in that section is legally valid.) Incidentally, by GDPR we mean the General Data Protection Regulation of the European Union.
Wiethe Content GmbH
Hermann-Müller-Straße 12
49124 Georgsmarienhütte
Germany
Phone: +49 5401 3651-100
Fax: +49 5401 3651-10
Email: content@wiethe.com
Email: datenschutz@wiethe.com
In some cases, we transfer data to companies in the USA for processing. The following applies to all of these cases: Unfortunately, data protection in the USA cannot be guaranteed to be as good as in the EU. In many cases, however, it is legally guaranteed that the data is just as secure there as it is in the EU. This depends on the company that receives your data.
For those companies where data protection cannot be guaranteed to be as good as in the EU, we hereby expressly draw your attention to the risks that exist for you as a result of these data transfers: The risk is that, due to legislation in the USA, American authorities (in particular, the secret services) may access your data. Opportunities for judicial remedy or information on the handling of your data from the US authorities are only possible to a very limited extent or not at all. For this reason, processing is carried out on the basis of your explicit consent. You have the right to withdraw your consent at any time. Processing in these cases is therefore based on your express consent. You have the right to withdraw your consent at any time. The consequences of revocation depend on the respective service of the company and are described in the corresponding section.
We use services that transfer personal data to the USA and process it there. Which services are currently used can be found below in the relevant sections. An adequacy decision by the EU Commission applies to most services through the EU-US Data Privacy Framework (DPF). This provides legal certainty that the level of data protection for personal data is at least equivalent to that in the EU.
The following applies equally to other services: No adequacy decision of the European Commission applies to data transfers to the USA: There is a risk that US authorities may gain access to the personal data on the basis of the PRISM and UPSTREAM surveillance programmes based on Section 702 of the Foreign Intelligence Surveillance Act (FISA), as well as on the basis of the Executive Order 12333 or Presidential Policy Directive 28. EU citizens have no effective means of legal protection against such access in the USA or the EU. For this reason, processing is carried out on the basis of your explicit consent in accordance with Article 49(1)(a) of the EU General Data Protection Regulation (GDPR). You have the right to withdraw your consent at any time in accordance with Article (7)(3) GDPR. The consequences of the withdrawal of your consent depend on the service in question and are described in the relevant section. The relevant sections below also indicate which data is transferred.
Every time a user accesses a page from our website or calls up a file stored on our website, access data relating to this process is stored in a log file. Each dataset consists of:
(1) the page from which the file was requested,
(2) the name of the file,
(3) the date and time of the request,
(4) the amount of data transmitted,
(5) the access status (file transmitted, file not found, etc.),
(6) a description of the type of operating system and web browser used,
(7) the client IP address.
We use this data in order to operate our website, in particular to determine the utilisation of the website and website malfunctions, and to make adjustments or improvements. The client IP address is used for the purpose of transmitting the data requested; when no longer technically required, the client IP address will be rendered anonymous by deleting the last block of numbers (IPv4) or the last octet (IPv6).
The legal basis for the temporary storage of the aforementioned data is Article 6(1)(f) of the EU General Data Protection Regulation (hereinafter referred to as “GDPR”). The legitimate interest is to make available our website. In accordance with Section 25(2)(2) of the Telecommunications Digital Services Data Protection Act (TDDDG), your consent to these processing operations is not necessary because we would not be able to make this “digital service” (= the Wiethe website) available to you without these processing operations.
Cookies and other processing operations are used for the following purpose, without which this website would not work:
Statistics:
Advertising (Marketing):
The storage of the aforementioned data is based in part on your consent (in accordance with Section 25(1) TDDDG and Article 6(1)(a) GDPR), namely in the case of cookies that are set in order to be able to optimise the quality of our website through analysis. Cookies are also set to enable users to visit our website; in particular, a number of functionalities on our website cannot be used without cookies, since, in the absence of cookies, the user would not be recognised when changing to a different page, and language settings would be lost, for instance. The legal basis for setting these cookies is our legitimate interest in making our website available to you for your use (Article 6(1)(f) GDPR). Without these cookies, we would not be able to offer you this website (Section 25(2)(2) TDDDG).
We provide a contact form on our website. The data subject may use this contact form to contact us electronically, and we are able to process the query. The following data is collected and stored: name, address, IP address, email address, phone number, date and time of the query, and a description of the concern and, where applicable, contract data if the query is made in the context of preparing or executing a contract.
Users may contact us by email, fax or phone. The data transmitted to us in this way and specified by the data subject will be saved by us so that we can process the query. Such data includes the name, address, email address, phone and/or fax number, the date and time of the query, a description of the concern and, where applicable, contract data if the query is made in the context of preparing or executing a contract.
The data will not be divulged to third parties. It serves the purpose of processing the data subject’s contact enquiry.
The processing of this data is based on Article 6(1)(b) GDPR, insofar as your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) if this has been requested (or also in accordance with Section 25(2)(2) TDDDG when using the contact form); consent can be withdrawn at any time.
We only process the data provided to us in the context of applications for the purpose of the application and an application procedure.
We provide an application form on our website. The data subject may use this application form to contact us electronically and submit their application documents. The following data is collected and stored: name, IP address, email address, curriculum vitae (with the contents determined freely by the data subject), possibly other documents such as cover letters, certificates/references, work samples, etc., and the date and time of the enquiry.
The data is transferred directly to our application management, and is not stored in the portal.
Once the data is no longer needed to achieve the purpose, it will be deleted, which is the case when the anonymisation, which takes place within the European Union, has been completed. This takes less than one second.
The data sent by us and that is linked to cookies, user identifications (e.g. user IDs) or advertising IDs will be deleted automatically after 14 months. Data that has reached its storage period is deleted automatically once a month.
For more information, visit https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de.
In order to use Google services, you must give your consent in accordance with Section 25(1) TDDDG, Article 6(1)(a) GDPR. You give this consent via the cookie banner that appears when you visit the website.
We use Google’s Google Tag Manager. “Google” is a group of companies consisting of Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC.
Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies, or perform any independent analytics. It is only used for the administration and display of the tools embedded in it. However, Google Tag Manager collects your IP address, which may also be transferred to Google’s parent company in the United States. Further data collection by Google (such as device fingerprinting) cannot be ruled out.
For more information about Google Tag Manager, see the Google Privacy Policy.
In order to use Google Tag Manager, we request your consent in accordance with Section 25(1) TDDDG, Article 6(1)(a) GDPR. You give this consent via the cookie banner that appears when you visit the website. Consent is voluntary and can be withdrawn at any time.
The legal basis for storing the aforementioned data is Section 25(1) TDDDG and Article 6(1)(a) GDPR. This means that we only collect the data with your consent.
You can prevent tracking of your visit by clicking the link below.
Exclude from tracking.
We embed videos provided by the Vimeo service into our website. Vimeo is a company based in the USA. The Google Analytics service is integrated with these videos. Tracking is done by Vimeo. We have no influence on this. Vimeo also uses tracking pixels (web beacons) for embedded videos. The Vimeo Privacy Policy contains information about how you can influence Vimeo tracking yourself: Vimeo Privacy Policy
The purpose of embedding videos is to safeguard our legitimate prevailing interests in the optimal marketing of our offerings in accordance with the first sentence of Article 6(1)(f) GDPR, to which we are entitled in the context of balancing interests. Nevertheless, we may not process this data without your consent in accordance with Section 25(1) TDDDG and Article 6(1)(a) GDPR. You give this consent via the cookie banner that appears when you visit the website.
You can prevent cookies from being set in your browser/device. But it could be that some convenient functionalities will then no longer work. You can also make a setting on the Vimeo page concerning cookies, which prevents Vimeo from setting cookies.
This website uses the LinkedIn Insight Tag. This service is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, which belongs to the US company LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Using the LinkedIn Insight Tag enables us to obtain information about you when you visit our website. If you are registered on LinkedIn, we can analyse your key professional data (e.g. career level, company size, country, location, sector and job title), among other things, enabling us to better tailor our website to the relevant target groups. The LinkedIn Insight Tag also makes it possible to track the effectiveness of LinkedIn advertising (conversation tracking). Conversion measurement can also be performed across devices (e.g. from PC to tablet). The LinkedIn Insight Tag also offers a retargeting feature that allows us to show you targeted advertising outside of the website, whereby, according to LinkedIn, you are not identified in the process.
LinkedIn also collects data about your visits to our website (URL, referrer URL, IP address, device and browser properties and time of access). IP addresses are shortened or (if used to reach LinkedIn members across devices) hashed (pseudonymised).
The data collected by LinkedIn cannot be assigned to specific individuals by us, the website operator. LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it for its own promotional activities. For details, please see LinkedIn’s Privacy Policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.
Please note that you are solely responsible for the use of our LinkedIn page offered here (https://www.linkedin.com/company/wiethe-group-gmbh) and its features. This applies in particular to the use of interactive features (e.g. commenting, sharing, rating).
The information and publications provided on our LinkedIn page is a voluntary additional offer.
The legal basis for the transfer of personal data to LinkedIn is Article 6(1)(a) GDPR. We therefore ask you to consent to the processing for the purpose of analysing visits to the website. Your consent is also required in accordance with Section 25(1) TDDDG. Consent is voluntary and can be withdrawn at any time.
You can prevent cookies from being set on your browser/device. But it could be that some convenient functionalities will then no longer work. Moreover, data will then continue to be shared with LinkedIn via other methods (JavaScript, tracking pixels).
Data sharing with LinkedIn can be completely disabled at any time in our privacy settings (if you have previously consented to data sharing).
You can also object to the analysis of user behaviour and targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
In addition, LinkedIn members can manage the use of their personal data for advertising purposes in their account settings. To avoid LinkedIn linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.
You have the right to the following information:
a) the reason for processing
b) the type of data processed
c) in the event of the disclosure of your data: the recipients
d) the storage period
e) information about your rights to rectification and erasure, and the restriction of and objection to data processing
f) the right to lodge a complaint with a data protection authority
g) if we have data relating to you that you did not transmit to us yourself: the origin of the data
h) about the application of automated decision-making and details about it
i) if data is disclosed outside the validity of the General Data Protection Regulation: about guarantees that afford appropriate protection.
If you wish to have more than one copy of the information, we may invoice you for this.
The data subject has the right to the following information:
a) the purposes of the processing;
b) the categories of personal data concerned;
c) the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations;
d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data relating to the data subject or to object to such processing;
f) the right to lodge a complaint with a supervisory authority;
g) where the personal data is not collected from the data subject, any available information as to its source;
h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
i) where personal data is transferred to a third country or to an international organisation, the data subject will have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
We will provide the data subject with a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs.
The data subject has the right to obtain from the controller the erasure of personal data relating to them without undue delay and the controller has the obligation to erase personal data without undue delay where one of the following grounds applies:
a) the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
b) the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) or point (a) of Article 9(2) GDPR, and where there is no other legal basis for the processing;
c) the data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR;
d) the personal data has been unlawfully processed;
e) the personal data has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
f) the personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
The data subject has the right to obtain from the controller restriction of processing where one of the following applies:
a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead;
c) the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defence of legal claims, or
d) the data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
The data subject has the right to receive the personal data relating to them, which they have provided to a controller, in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller without hindrance from us, where
a) the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1) GDPR; and
b) the processing is carried out by automated means.
The rights and freedoms of others may not be adversely affected as a result. In exercising the right to data portability pursuant to paragraph 1, the data subject has the right to have the personal data transmitted directly from us to another controller, where technically feasible. The exercise of the right to data portability is without prejudice to the right to erasure under Article 17 GDPR. The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
The data subject has the right to object, on grounds relating to their particular situation, at any time to processing of personal data relating to them which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
We will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data relating to them for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.
Any consent granted by the data subject may be withdrawn by them at any time. Any collection and processing undertaken until such time remains, however, lawful.
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them. This will not apply if the decision
a) is necessary for entering into, or performance of, a contract between the data subject and us,
b) is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests; or
c) is based on the data subject’s explicit consent.
Such decisions may not be based on special categories of personal data referred to in Article 9(1) GDPR, unless point (a) or (g) of Article 9(2) GDPR applies and suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests are in place.
In the cases referred to under points a) and c), we will implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on our part, to express their point of view and to contest the decision.