Data protection
§ 1 Information about the collection of personal data
(1) Below we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour.
(2) The controller pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is SITEC GmbH, Johann-Georg-Herzog-Str. 19, Personally liable partner: Olaf Clausen GmbH & Co. KG, Management: Lukas Clausen, 96369 Weissenbrunn, Email: info(at)sitec.de.
Our data protection officer is:
Maisel Consult
Oliver Maisel
Kämmereigasse 2
95444 Bayreuth,
Email: datenschutz@sitec.de
“Please note that when using this email address, the contents will not be viewed exclusively by our data protection officer. If you wish to exchange confidential information, please first use this email address to request direct contact from the data protection officer.”
(3) When you contact us by email or via a contact form, the data you provide (your email address, possibly your name and telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict the processing if there are statutory retention obligations.
(4) If we use commissioned service providers for individual functions of our offer or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also specify the established criteria for the storage period.
(5) In order to ensure the security of your data during transmission, we use state-of-the-art encryption procedures (SSL encryption) via HTTPS.
§ 2 Your Rights
(1) You have the following rights with regard to your personal data processed by us:
a) Right of access, Art. 15 GDPR
Pursuant to Article 15 GDPR, you have the right to obtain information about your processed personal data. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of rights to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, and the origin of your data, where these have not been collected by SITEC GmbH.
b) Right to rectification, Art. 16 GDPR
In accordance with Article 16 GDPR, you have the right to demand the immediate rectification of inaccurate or completion of incomplete personal data stored about you.
c) Right to erasure, Art. 17 GDPR
You may, pursuant to Article 17 GDPR, request the erasure of your stored personal data, unless processing is required for the exercise of the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.
d) Right to restriction of processing, Art. 18 GDPR
You may, in accordance with Article 18 GDPR, request the restriction of processing of your stored personal data if the accuracy of the data is contested by you, the processing is unlawful but you oppose their erasure and we no longer need the data, but you require them for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to Article 21 GDPR.
e) Right to data portability, Art. 20 GDPR
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format.
(2) You also have the right to lodge a complaint with a supervisory authority. For the list of supervisory authorities for the non-public sector.
§ 3 Collection of personal data when visiting our website
(1) When simply using the website for informational purposes, that is, if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server via so-called server log files. If you wish to view our website, we collect the following data, which is technically necessary for us to display the website to you and to ensure stability and security (the legal basis is Art. 6 para. 1 s. 1 lit. f GDPR):
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– Amount of data transferred in each case
– Website from which the request comes
– Browser
– Operating system and its interface
– Language and version of browser software.
(2) In addition to the data mentioned above, cookies will be stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using, and by means of which certain information flows to the party that sets the cookie (in this case, us). Cookies cannot run programs or transmit viruses to your computer. Their purpose is to make the online offering more user-friendly and effective overall.
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
– Transient cookies (see b)
– Persistent cookies (see c).
b) Transient cookies are deleted automatically when you close the browser. These include session cookies in particular. These store what is known as a session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are deleted automatically after a specified period, which may differ depending on the cookie. You can delete the cookies at any time in your browser’s security settings.
d) Use of Google Analytics
On this website we particularly use the services of Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This is a web analytics service provided by Google Inc., which uses such cookies. The information generated by the cookies about your visit and use of our website is usually transmitted to a Google server in the USA and stored there. Due to the activation of IP anonymisation on these websites, your IP address will, however, be shortened by Google beforehand within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website use and internet usage to the website operator. The IP address transmitted by your browser within the context of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address), and from processing this data, by downloading and installing the browser plugin available under the following link: tools.google.com/dlpage/gaoptout Additionally, or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our website by installing an opt-out cookie Disabling Tracking. This will prevent data collection by Google Analytics for this website and this browser in the future, as long as the cookie remains installed in your browser.
e) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or any cookies at all. Please note that you may not be able to make full use of all the functions of this website.
f) Use of Google Webfonts
We use the service of the script/font library Google Webfonts on this website to display our content correctly across browsers. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Webfonts are transferred to your browser’s cache to avoid repeated loading, so that a connection to the provider Google is automatically established when the page is accessed. Consequently, it is at least theoretically possible that the provider could collect data, although it is unclear whether, and if so, for what purposes such data would be collected. This is governed by Google’s privacy policy, which you can find at the following link: http://www.google.com/policies/privacy/.
g) We use cookies to be able to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.
§ 4 Additional Functions and Services of Our Website
(1) In addition to the purely informational use of our website, we offer various services which you can use if you are interested. In general, you will need to provide additional personal data, which we use to provide the respective service and for which the aforementioned principles of data processing apply.
(2) In some cases, we use external service providers to process your data. These providers have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.
(3) Furthermore, we may pass on your personal data to third parties if participation in promotions, competitions, contract conclusions, or similar services are offered by us together with partners. You will receive more detailed information about this when providing your personal data or below in the description of the offer.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.
§ 5 Objection or Withdrawal of Consent to the Processing of Your Data
(1) If you have given your consent for the processing of your data, you may withdraw it at any time. Such withdrawal will affect the lawfulness of the processing of your personal data after you have notified us of your decision.
(2) Where we base the processing of your personal data on a balancing of interests, you may object to the processing. This is the case in particular if the processing is not required for the fulfilment of a contract with you, as indicated in the description of the respective functions below. If you object, please provide reasons why you do not wish us to process your personal data as conducted. In the event of a justified objection, we will examine the situation and either stop or adapt the data processing, or explain to you the compelling legitimate grounds on which we continue the processing.
(3) Of course, you may object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details: SITEC GmbH, Johann-Georg-Herzog-Str. 19, 96369 Weißenbrunn, Email: info@sitec.de, Tel: 09261 6075 0
§ 6 Special Types of Use of Our Website
1. Registration on our Website
a) When you register on our website to use our personalised services, we collect personal data such as your name, address, telephone number, and email address. By registering, you are able to access services/content that we offer only to registered users.
b) As part of your registration, you also have the option to amend or delete the data provided in connection with your registration if necessary. Of course, you may request information from us at any time regarding the personal data we have stored about you. You may also ask for your data to be rectified or deleted, provided there are no legal retention obligations preventing this. You can contact us at the following details: SITEC GmbH, Johann-Georg-Herzog-Str. 19, 96369 Weißenbrunn, Email: info@sitec.de, Tel: 09261 6075 0
2. Social Media
a) Use of Social Media Plug-Ins
aa) We currently use the following social media plug-ins: Facebook and Instagram. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by the marking on the box above its initial letter or the logo. We offer you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it does the plug-in provider receive the information that you have accessed the corresponding website of our online offering. In addition, the data referred to in § 3 of this statement will be transmitted.
Facebook: Our website uses so-called social plugins (“plugins”) of the social network Facebook, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are marked with a Facebook logo or the label “Facebook Social Plugin”. An overview can be found here: https://developers.facebook.com/search/?q=pluginsdevelopers.facebook.com/plugins
When you open a page of our website that contains such a plugin, your browser establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. By integrating the plugin, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged into Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the USA and stored there. If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plugins, for example by pressing the “Like” button or leaving a comment, this information will also be transmitted directly to a Facebook server and stored there. The information will also be published on your Facebook profile and shown to your Facebook friends.
Further information on the purpose and scope of data collection, its further processing and use by Facebook, as well as your related rights and privacy settings, can be found in Facebook’s privacy policy: www.facebook.com/policy.php.
If you do not want Facebook to directly associate the data collected via our website with your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of Facebook plugins by using add-ons for your browser, e.g. the “Facebook Blocker” or the script blocker “NoScript” (http://noscript.net/).
Instagram: Our website incorporates functions of the Instagram service. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link content from our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our website with your user account. Please note that, as the provider of the sites, we do not have any knowledge of the content of the data transmitted or its use by Instagram.
Further information can be found in Instagram’s privacy policy.
bb) We have no influence on the data collected and data processing operations, nor are we fully aware of the extent of data collection, the purposes of processing, or the retention periods. We also have no information regarding the deletion of data collected by the plug-in provider.
cc) The plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research, and/or the tailored design of its website. Such analysis is performed in particular (also for users not logged in) for the display of personalised advertising and to inform other social network users about your activities on our website. You have the right to object to the creation of these user profiles, for which you must contact the respective plug-in provider to exercise. Through the plug-ins, we offer you the opportunity to interact with social networks and other users, allowing us to improve our offering and make it more interesting for you as a user. The legal basis for the use of plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR.
dd) Data is transferred regardless of whether you have an account with the plug-in provider and are logged in. If you are logged in with the plug-in provider, your data collected by us is directly associated with your account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and may share it publicly with your contacts. We recommend logging out regularly after using a social network, especially before activating the button, as this will help avoid associating your profile with the plug-in provider.
ee) Further information on the purpose and scope of data collection and their processing by the plug-in provider can be found in the providers’ privacy policies listed below. There you will also find further information about your respective rights and privacy settings to protect your privacy.
ff) Addresses of the respective plug-in providers and URLs with their privacy policies:
– Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA;
www.facebook.com/policy.php; further information regarding data collection: www.facebook.com/help/186325668085084,
www.facebook.com/about/privacy/your-info-on-other and
www.facebook.com/about/privacy/your-info;
Facebook is subject to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework
– Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA
Instagram Data Protection and Security Centre
b) Embedding of YouTube Videos
aa) We have embedded YouTube videos within our online offering, which are stored at www.YouTube.com and can be played directly from our website. [All those videos are embedded in “extended data protection mode,” meaning that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos is the data mentioned in paragraph 2 transferred. We have no influence over this data transfer.]
bb) When you visit the website, YouTube is notified that you have accessed the corresponding subpage of our website. In addition, the data referred to in § 3 of this statement is transmitted. This occurs regardless of whether YouTube provides a user account which you are logged into, or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not want this association with your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses them for advertising, market research, and/or demand-oriented design of its website. Such evaluation is carried out in particular (even for users not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of such user profiles, but you must contact YouTube to exercise this right.
cc) Further information on the purpose and scope of data collection and its processing by YouTube can be found in YouTube’s privacy policy. There you will also find further information about your rights and privacy settings to protect your privacy: www.google.de/intl/de/policies/privacy. Provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
c) Embedding of Google Maps
aa) On this website, we use the services of Google Maps. Provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This allows us to display interactive maps directly on the website and enables you to conveniently use the maps feature.
bb) By visiting the website, Google is notified that you have accessed the corresponding subpage of our website. In addition, the data referred to in § 3 of this statement is transmitted. This happens regardless of whether Google provides a user account which you are logged into, or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not want this association with your profile at Google, you must log out before activating the button. Google stores your data as user profiles and uses them for purposes of advertising, market research, and/or the tailored design of its website. Such evaluation is carried out in particular (even for users not logged in) in order to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, for which you must contact Google to exercise this right.
cc) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy policies of the provider. There you will also find further information about your rights and privacy settings to protect your privacy: www.google.de/intl/de/policies/privacy.
Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
d) Links to websites of other providers and social networks, services and platforms
Our website may contain links to websites of other providers, social services, networks and other platforms. This privacy policy applies exclusively to the website of SITEC GmbH. SITEC GmbH has no influence over whether other providers comply with the applicable data protection regulations and does not monitor such compliance.
§ 7 Data Protection for Applicants
We are pleased that you are interested in us and that you are applying or have applied for a position in our company. Below, we would like to provide you with information regarding the processing of your personal data in connection with your application.
1. Controller within the meaning of data protection law is
SITEC GmbH
Johann-Georg-Herzog-Straße 19
96369 Weißenbrunn
Further information about our company, details of authorised representatives, and additional contact options can be found on our website: https://www.sitec.de
2. Which of your data do we process? And for what purposes?
We process the data you have provided to us in connection with your application in order to assess your suitability for the position (or possibly other open positions in our company) and to carry out the application process.
3. Legal basis for processing
The legal basis for the processing of your personal data in this application procedure is primarily section 26 of the German Federal Data Protection Act (BDSG), as amended from 25 May 2018. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted. Should the data be required after completion of the application process for legal prosecution, data processing may occur on the basis of the requirements of Article 6 of the General Data Protection Regulation (GDPR), in particular for the purpose of legitimate interests according to Article 6(1)(f) GDPR. Our interest then lies in the assertion or defence of claims.
4. How long are the data stored?
Data of applicants will be deleted six months after a rejection. If you have consented to further storage of your personal data, we will transfer your data to our applicant pool. This data will be deleted after two years at the latest. If you are offered a position in the course of the application process, your data will be transferred from the applicant data system to our personnel database.
5. To whom are the data transmitted?
Your application data will be reviewed by the Human Resources department upon receipt of your application. Suitable applications will then be forwarded internally to the department managers responsible for the respective vacant position. The subsequent process will then be coordinated. In our company, only those individuals who require access to your data for the proper conduct of our application process have access to your data.
6. Where are the data processed?
The data are processed exclusively in data centres within the European Union.
7. Your rights as the “data subject”
You have the right to obtain information about the personal data we process about you. In the case of a non-written request for information, we ask for your understanding that we may require you to provide evidence that proves you are the person you claim to be. Furthermore, you have the right to rectification or erasure, or to restriction of processing, as far as you are legally entitled to such rights. You also have the right to object to processing within the framework of legal requirements. The same applies to the right to data portability.
8. Our Data Protection Officer
We have appointed a Data Protection Officer in our company. You can contact him using the following details:
Maisel Consult
Oliver Maisel
Kämmereigasse 2
95444 Bayreuth
Germany
9. Right to lodge a complaint
You have the right to lodge a complaint regarding the processing of your personal data by us with a data protection supervisory authority.
§ 8 Data Protection Information for Contacting Us
Principles of Data Processing at SITEC GmbH
You have reached this page via a link because you wish to inform yourself about how we handle (your) personal data.
In order to fulfil our information obligations according to Articles 13 and 14 of the General Data Protection Regulation (GDPR), we would like to provide you below with our privacy information:
1) Data Controller within the meaning of the General Data Protection Regulation (GDPR)
The controller within the meaning of the General Data Protection Regulation is
SITEC GmbH, Johann-Georg-Herzog-Straße 19, 96369 Weißenbrunn, info@sitec.de, datenschutz@sitec.de
2) Data Protection Officer within the meaning of the General Data Protection Regulation (GDPR)
We have appointed a data protection officer in our company.
Maisel Consult
Oliver Maisel
Kämmereigasse 2
95444 Bayreuth
If you have any questions regarding data protection, please contact:
E-mail: datenschutz@sitec.de
We would like to expressly point out that, when using this e-mail address, the content is not seen exclusively by our data protection officer. If you wish to exchange confidential information, we kindly request that you first use this e-mail address to request direct contact with the data protection officer.
3) Which of your data do we process? And for what purposes?
When you contact us, we store and process any personal data arising from the contact in order to handle your request. Personal data arising from this process may include: first name, surname, e-mail address, IP address.
If we have received data from you, we will generally process it only for the purposes for which we received or collected it.
Processing data for other purposes will only be considered if the relevant legal requirements according to Art. 6 para. 4 GDPR are met. Any information obligations as per Art. 13 para. 3 GDPR and Art. 14 para. 4 GDPR will, of course, be observed in such cases.
4) Legal basis for the processing of personal data
The legal basis for processing personal data is generally – unless specific legal provisions exist – Art. 6 GDPR. In particular, the following options may apply:
The processing of your personal data is based on Art. 6 para. 1 lit. b) GDPR where your enquiry is related to the fulfilment of contracts or is necessary for carrying out pre-contractual measures.
In other cases, the processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. We have an interest in efficiently processing any enquiries you send us.
If we have obtained your consent for the processing of your personal data as per Art. 6 para. 1 lit. a) GDPR, we will store your data as long as the purpose for which it was collected applies or until you withdraw your consent. You may withdraw any consent granted at any time with effect for the future. The lawfulness of processing up to the point of withdrawal remains unaffected.
5) Recipients of personal data
When you contact us, your personal data is forwarded within our company only to the employees responsible and to the persons in charge of the respective department, solely for the purpose of handling your enquiry.
Your personal data is only passed on to third parties if this is necessary to fulfil a contract with you, if disclosure is permissible based on a weighing of interests in accordance with Art. 6 para. 1 lit. f) GDPR, if we are legally obliged to do so, or if you have given your consent.
6) Transfer of personal data to a third country
Your personal data will only be processed in data centres in Germany/the European Union.
7) Duration of personal data storage
We process the data for as long as is necessary for the respective purpose.
If statutory retention obligations exist – e.g. according to commercial or tax law – the relevant personal data will be stored for the duration of the retention obligation. After this retention period has expired, we check whether further processing is necessary. If processing is no longer required, the data will be deleted.
As a rule, we check data at the end of each calendar year to assess whether further processing is required. Due to the volume of data, this check is carried out with regard to specific types of data or processing purposes.
Of course, you can, at any time (see below), request information about the data stored about you and, if processing is no longer required, request its deletion or restriction.
8) Your rights as a data subject
With regard to your personal data, you have the following rights vis-à-vis our company:
- In accordance with Art. 15 GDPR, the right to access the data we process about you,
- In accordance with Art. 16 GDPR, the right to rectification of your incorrect data,
- In accordance with Art. 17 GDPR, the right to erasure of your data,
- In accordance with Art. 18 GDPR, the right to restriction of the processing of your data, and
- In accordance with Art. 20 GDPR, the right to data portability.
Should there be reasons arising from your particular situation against the processing of your personal data, which is carried out by our company on the basis of Art. 6 para. 1 lit. f) GDPR for the purpose of safeguarding legitimate interests, you may exercise your right to object pursuant to Art. 21 GDPR at any time and object to the processing of your data.
In addition, you have the right according to Art. 7 para. 3 GDPR to revoke any consents granted to our company. You can exercise your right of revocation at any time with effect for the future. This means that processing carried out by our company up to the revocation remains lawful.
Furthermore, you have the right according to Art. 77 GDPR to lodge a complaint with a supervisory authority in the member state of your place of residence, place of work or the place of the alleged infringement, if you consider that the processing of your personal data breaches the provisions of the General Data Protection Regulation (GDPR).
9) Provision of data
When handling your requests, the provision of personal data is neither legally nor contractually required. However, certain personal data is necessary for the implementation of pre-contractual measures as well as for the potential execution of a resulting contract. Without the provision of certain personal data, it may not be possible to conclude a contractual relationship.
10) Automated decision-making
Decisions made for the purpose of contract initiation are not based on automated processing, meaning that no automated individual decision within the meaning of Art. 22 GDPR takes place in our company.
§ 9 Changes to Our Data Protection Policy
To ensure that this privacy policy always complies with current legal requirements, we reserve the right to amend it from time to time, especially if we introduce new services or our offerings change. The version of the privacy policy that is valid at the time will apply to you.
Privacy Policy as of March 2024