Many thanks for your interest in our website. Protecting your personal data is a high priority to us. That is why we wish to inform you below which data is collected when you visit our website, for what purpose, and how it is used. The provisions of the EU General Data Protection Regulation (GDPR) and the German Telemedia Act (Telemediengesetz, TMG) apply.
Who is the responsible body?
The responsible body is EnviroFALK PharmaWaterSystems GmbH with the authorized representatives Ulrich Träger, Steffen Kern and Dr. Eva Bitter, Maybachstrasse 29, 51381 Leverkusen, Germany, Tel. +49 2171 76 75 -0, Fax +49 21 71 – 76 75 -10, email@example.com, www.envirofalk-pharma.com
Collection of personal data
Access data/server log files
We automatically collect and store in our server log files information that your browser transmits to us. These are:
- Browser type/version
- Operating system used
- Referrer URL (the website previously visited)
- Host name of the accessing computer (IP address)
- Time of the server inquiry.
We cannot attribute this data to particular persons. A combination of this data with other data sources does not occur; the data is deleted after a statistical evaluation for the purpose of operation and security.
We offer website visitors the opportunity to submit job applications to us (e.g. via e-mail, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential.
Scope and purpose of the collection of data
If you submit a job application to us, we will process any affiliated personal data (e.g. contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 New GDPR according to German Law (Negotiation of an Employment Relationship), Art. 6 Sect. 1 lit. b GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6 Sect. 1 lit. a GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application.
If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 New GDPR and Art. 6 Sect. 1 lit. b GDPR for the purpose of implementing the employment relationship in our data processing system.
Data Archiving Period
If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.
Longer storage may also take place if you have given your agreement (Article 6 (1) (a) GDPR) or if statutory data retention requirements preclude the deletion.
Admission to the applicant pool
If we do not make you a job offer, you may be able to join our applicant pool. In case of admission, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.
Admission to the applicant pool is based exclusively on your express agreement (Art. 6 para. 1 lit. a GDPR). The submission agreement is voluntary and has no relation to the ongoing application procedure. The affected person can revoke his agreement at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no legal reasons for storage.
The data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted.
We collect your personal data when you provide it to us on your own initiative. The data entered by you in our contact form (first name, last name, e-mail address, phone number) for processing your request or for initiating a commercial transaction is stored as long as it is necessary for processing. Afterwards, the data is deleted. No other storage or processing takes place. The extent we use our contact form to request information that is not required to establish contact, we have always marked it as optional. These details serve us to further specify your inquiry and to improve the processing of your request. Providing this information takes place expressly on a voluntary basis and with your consent. If this involves information on communication channels (e.g. phone number), you also agree that we may contact you via this communication channel in order to respond to your request. You can of course revoke your declarations of consent at any time in the future.
If you want to sign up for the newsletter offered on our website, we will need your e-mail address as well as other personal information to allow us to make sure that it is indeed your e-mail address and that you have agreed to receiving the newsletter. We use the so-called double opt-in process to ensure that our newsletter is only sent if the recipient consents to receiving it, which involves the recipient adding themselves to a distribution list. The user is then asked to confirm their registration in a legally binding manner by way of a confirmation e-mail. We will only add the recipient’s address to the distribution list if such confirmation is received.
We use this data exclusively for the purpose of sending you the requested information and offers.
We use the newsletter software Newsletter2Go, which will send your data to Sendinblue GmbH. Sendinblue GmbH is not allowed to sell your data or to use it for any other purpose than for sending newsletters. Sendinblue GmbH is a certified German provider, selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act. For further information, visit: https://www.sendinblue.com/information-for-email-recipients/?rtype=n2go
You can revoke your consent to the storage of your data, e-mail address and our use of it to send you the newsletter at any time, for example by clicking on the “unsubscribe” link in the newsletter. The data protection measures are subject to constant technical updates, so please check our data protection declaration periodically to keep up to date with our data protection measures.
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, within Member States of the European Union or in other countries that are party to the Agreement on the European Economic Area, Google will shorten your IP address beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with other services relating to website and Internet use.
http://www.google.com/analytics/terms/de.html or at:
Our website uses the Wordfence Security service of Defiant Inc., 800 5th Ave., Suite 4100, Seattle, WA 98104, USA (“Wordfence”)
to secure our online offerings and to protect our website against unauthorized access or malicious cyber attacks. As part of this service, our website connects to Wordfence’s servers to compare the database with the accesses made to our website and to block them if necessary.
Wordfence is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the most effective protection of his website against cyber attacks. If the appropriate consent has been requested, processing will be carried out exclusively on the basis of Art. 6 para. 1 letter a GDPR; consent may be revoked at any time.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Further information on the collection and use of data by Wordfence can be found at: https://www.wordfence.com/help/general-data-protection-regulation/.
Use of Social Plugins (Facebook, Xing, Youtube, Linkedin, Twitter)
This website uses social plugins (“plugins”). These are integrated on our website as a link to the services.
If you access our website via a plugin, a direct connection to the servers of the social media services is established. By using the plugins, each provider receives the information that you have called up the corresponding page of our website. If you are logged in to the corresponding service, it can also link the visit to your user account if necessary. If you use the plugins, this information is transmitted from your browser to the provider and stored there. For the purpose and scope of data collection and the further processing and use of the data by the providers as well as your rights in this regard and setting options for the protection of your privacy, please refer to the respective data protection statements.
Using the smart glasses
In the course of providing our services, a technician may require additional assistance in order to deal with your request in a faster and more focused manner. This may require the use of smart glasses to establish a video and audio link to our head office or one of our branches. The following data may be processed and stored in the course of handling your request:
- Images and audio recordings
- Location, time and people involved
Your data will not be shared with third parties. You can revoke your consent to us storing your data at any time by contacting us using the contact details below. Our data protection measures are constantly subject to technical change, so please check our data protection declaration periodically to keep up to date with our data protection measures.
Transfer of data to third parties
With respect to the transfer of data to recipients outside EnviroFALK PharmaWaterSystems GmbH, please note that we only work with order processors who offer sufficient guarantees that appropriate technical and organizational measures have been implemented, in compliance with the legal data protection requirements and guarantee the protection of the rights of the relevant data subjects.
Forwarding of data to third countries
No data is transmitted to third countries (countries outside the European Economic Area (EEA), unless this is necessary to fulfill the contractual relationship.
Duration of data storage
We process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and processing of a contract. Furthermore, we are subject to legal retention periods.
Right of objection and withdrawal
According to Art. 21 GDPR, you have the right to object at any time to the processing of your personal data based on Art. 6 Sect. 1(a) GDPR (data processing based on your consent) and Art. 6 sect. 1(b) of GDPR (data processing for the fulfillment of contractual obligations). You can send the objection without any form requirement to firstname.lastname@example.org .
Rights of the data subjcet
You have the right to information according to Art. 15 GDPR , the right to correction according to Art. 16 GDPR, the right to cancellation according to Art. 17 GDPR, the right to limitation of processing according to Art. 18 GDPR and the right to data transferability according to Art. 20 GDPR. With regard to the right to information and the right of cancellation, the restrictions under Art. 34 and 35 of the Federal Data Protection Act (BDSG.neu) apply. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR in conjunction with Art. 19 Federal Data Protection Act (BDSG)).
Should you have any further questions, please do not hesitate to contact our Data Protection Officer:
EnviroFALK PharmaWaterSystems GmbH
Tel.: +49 21 71 76 75 -0
Fax: +49 2171 76 75 – 10