Hinweisgeberportal
Das Hinweisgeberschutzgesetz
Mit der Einführung des Hinweisgeberschutzgesetzes (HinSchG) wird natürlichen Personen, welche im Zusammenhang mit ihrer beruflichen Tätigkeit oder im Vorfeld einer beruflichen Tätigkeit Informationen über Verstöße in einem Unternehmen erlangt haben, die Möglichkeit gegeben, Hinweise zu melden bzw. Verstöße offenzulegen. Der Gesetzgeber regelt im HinSchG den Schutz der hinweisgebenden Person, sowie von Personen, welche von dem Hinweis betroffen sind.
Hinweisgeberportal der schlaeger-Gruppe
Privacy policy of the Schlaeger Group
§ 1 Information on the collection of personal data
(1) In the following, we provide information about the collection of personal data when using our services, when using our offers and our website, as well as about data processing in the employment relationship. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) exclusively for the fulfillment of contractual obligations (Art. 6 para. 1 b GDPR), on the basis of your consent (Art. 6 para. 1 a GDPR) or on the basis of legal requirements (Art. 6 para. 1 c GDPR).
(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is Schlaeger Kunststofftechnik GmbH, Ritter-von-Eitzenberger-Straße 10, 95448 Bayreuth, represented by the managing directors Anton Fuchs and Ulrich Küchler.
(3) You can contact our data protection officer, RA Christian Becker, F.E.L.S Rechtsanwaltsgesellschaft mbH, Löhestraße 11, 95444 Bayreuth, Germany, at datenschutz@fels-legal.de or at our postal address with the addition “the data protection officer”.
(4) The processing of data is initially carried out to fulfill the employer's obligations arising from the employment relationship. The exact processing depends on the objective being pursued. For example, the name, address, date of birth and religious denomination are used for payroll accounting. When you are assigned to certain departments, your name and, if applicable, your previous performance will be passed on to the person responsible for your training. If you apply for leave, the time of your absence will be recorded in addition to your name and your remaining leave entitlement. If comprehensive business travel insurance has been taken out for you, the data will also be processed for the insurance benefits and forwarded to Mannheimer Versicherungs AG.
(5) We also process data for advertising purposes, but only if you have given your separate consent for this. The data voluntarily provided by you in this respect is used to represent us as a group of companies, as the group identifies and defines itself with its employees. In this respect, the use of names and images on our homepage or in print media may be considered as advertising measures.
(6) We also require the data collected in order to provide you with information material about our range of services. When entering your address, you can object to the sending of information material on further events by not consenting to our advertising and information offer in this regard.
(7) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.
(8) As part of the joint responsibility for personal data in accordance with Art. 26 GDPR, Schlaeger Kunststofftechnik GmbH is responsible for the operation of information technology systems in which such data is stored and is responsible within the Schlaeger Group for providing information to data subjects.
§ 2 Rights of data subjects
(1) We hereby inform you about your rights as a data subject of the data processing listed below:
The existence of a right to information in accordance with the requirements of Art. 15 GDPR, rectification in accordance with Art. 16 GDPR, erasure in accordance with Art. 17 GDPR, restriction of processing in accordance with the requirements of Art. 18 GDPR or a right to object to processing in accordance with Art. 21 GDPR in the case of a legitimate interest and the right to data portability in accordance with the requirements of Art. 20 GDPR
The existence of a right to withdraw consent under data protection law within the meaning of Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a at any time without giving reasons and without observing any formal requirements, without affecting the lawfulness of processing based on consent before its withdrawal
Every data subject has the right to lodge a complaint with the competent authority in the event of breaches of data protection law by the controller or one of its data processors. This is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
Telephone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
Mail: poststelle(at)lda.bayern.de
In addition, data subjects have the option of contacting the supervisory authority at their usual place of residence.
§ 3 Security measures
We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and to protect the data processed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.
The security measures include, in particular, the encrypted transmission of data between your browser and our server.
§ 4 Deletion
If your data was collected for the performance of the employment relationship, we will delete it at the end of the year in which the last claims arising from the employment relationship expire. If we have stored your data for advertising purposes, we will delete it at the end of the year in which you leave our company. Tax-relevant documents are destroyed within the statutory periods.
§ 5 Job applications
(1) If you apply initial or in response to a job advertisement, your data will only be disclosed by the HR department and, if applicable, directly affected superiors of the position for which you are applying. Your data will be deleted by us after 6 months, or after 12 months if you have consented to this, unless an employment relationship is established between you and us. The processing of your data is based on Art. 6 sentence 1 lit. b) GDPR and § 26 BDSG.
(2) If you apply via our career portal on our homepage, your data will first be transmitted to the data center of d.vinci HR-Systems GmbH in Hamburg. d.vinci does not regularly access the data of applicants, but only accesses the systems for maintenance purposes. The transmission of the data to the data center and our access to this data is encrypted; the data is encrypted within the data center. After six months, if you have given us your consent, we will delete your data completely after twelve months, unless an employment relationship is established between you and us.
(3) If we process your documents on the basis of your consent under data protection law, Art. 6 sentence 1 lit. a) GDPR, you have the right to withdraw your consent at any time with effect for the future. In the event of your revocation, we will delete your data immediately. Please send your revocation by email to info@schlaeger.com or via post to Schlaeger Kunststofftechnik GmbH, Ritter-von-Eitzenberger-Str. 10, 95448 Bayreuth.
§ 6 Video surveillance
Our premises and parts of the production halls are under video surveillance. The cameras do not record public areas and are not installed on third-party systems, they are only located on on-premise systems and our premises which are owned by our company.
The video recordings are used to track criminal offenses, damage and to monitor and trace technical processes. The video recordings are deleted from our systems after 72 hours. Exceptions to this are only made in the case of public holidays that cover more than 3 working days or more or, together with a weekend, result in 3 or more days during which no administrative or IT employee is regularly on site. In these cases, the storage period is adjusted so that it can be viewed on the next working day.
We store video recordings that are actually relevant as evidence, depending on the recording, as part of the limitation period for claims arising from the recorded actions. In the case of vandalism and other criminal offenses, this is usually 10 years.
§ 7 Processor
GMK GmbH & Co.KG, represented by the personally liable partner Gesellschaft für Marketing-Kommunikation mbH, represented by the managing director Jörg Lichtenegger Bindlacher Straße 10, 95448 Bayreuth. You can find the privacy policy here: https://www.gmk.de/information/datenschutz/
Leo Druck und Medien GmbH & Co.KG, represented by the personally liable partner MCS-MarCom Service GmbH, Ritter-von-Eitzenberger-Str. 15 95448 Bayreuth, represented by the managing partners Randolph Klautke and Eva Klautke. You can find the privacy policy here: http://www.leo-dm.de/#
Mannheimer Versicherung AG, Augustaanlage 66 68165 Mannheim, represented by the Management Board Dr. Christoph Helmich (Chairman), Dr. Gerhard Schmitz (Deputy Chairman), Stefan Andersch, Alf N. Schlegel, Jürgen Wörner. You can find the privacy policy here: https://www.mannheimer.de/datenschutz
Our website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4 - 6, 32339 Espelkamp, represented by the general partner Robert Meyer Verwaltungs GmbH, represented by the managing directors Robert Meyer and Florian Jürgens. You can find the privacy policy here: https://www.mittwald.de/datenschutz. The use of the data by Mittwald is based on Art. 6 para. 1 lit. f. GDPR.
For applicant management, we use the services of d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg. An order processing contract has been concluded with d.vinci HR-Systems GmbH, the privacy policy of d.vinci HR System GmbH can be found here: https://www.dvinci.de/datenschutz/
§ 8 Collection of personal data when visiting our website
(1) When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):
IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
amount of data transferred in each case
Website from which the request originates
Browser
Operating system and its interface
Language and version of the browser software.
(2) When you contact us via e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations.
(3) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the location that sets the cookie (in this case us). Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.
(4) Use of cookies:
a) This website uses the following types of cookies, the scope and function of which are explained below:
- Persistent cookies (see b).
b) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
c) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.
§ 9 Facebook fan page and Instagram page
We operate a Facebook fan page and an Instagram page. These pages are also accessible if you do not have an account in the network.
These pages use the “Insights”-service, which records your usage behavior. We only receive this data from Meta in pseudonymized form, but if you interact with our site from your account, for example by clicking the “Like” button or the heart button, leaving a comment or indicating your interest in an event, we receive this information with reference to your user profile.
With regard to the “Insights” service, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2 Dublin, we have concluded an agreement with Meta Platforms Ireland Limited, from which Meta's responsibility for the obligations under Art. 12, 13, 15 to 22 and 32 to 34 GDPR arises, the text of the agreement can be found here:
https://www.facebook.com/legal/terms/page_controller_addendum.
Facebook's data policy can be found here: www.facebook.com/privacy/explanation. In particular, you will also find information there on how your data is processed.
You can find Instagram's data policy here:
If you have a profile and access our website via this profile, we consider the legal basis for processing in cooperation with Meta to be consent - implied by the visit - in accordance with Art. 6 (1) sentence 1 (a) GDPR.
In addition, we see the legal basis of overriding legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR, whereby our legitimate interest in this respect is our advertising and communication interest.
We also use our website to search for employees. The purpose of processing the personal data of people who do not have a profile and visit our fan page also lies in this communication purpose.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: www.facebook.com/legal/EU_data_transfer_addendum and de-de.facebook.com/help/566994660333381.
§ 10 Google services
1) This website uses Google Analytics, a web analysis service of Google Inc. (“Google”) and the Google Tag Manager, which stores services and your consent to their use on Google servers. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other state parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser when using Google Analytics or the Google Tech Manager will not be merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are further processed in abbreviated form, thus excluding the possibility of personal references. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately.
We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. We only use Google Analytics with your prior consent (Art. 6 para. 1 sentence 1 lit. a GDPR).
Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: www.google.com/analytics/terms/de.html, overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.
(2) With your consent, we use the Google Maps service on this website, including the Google Storefinder service. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently; the Storefinder service also allows us to show you our nearest store to your location based on your geodata. When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, data that makes you and your system recognizable is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.
You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.Google also processes your personal data in the USA; we only use the service with your consent.
§ 11 Usercentrics
We use the consent management service (Consent Management Tool) Usercentrics, of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. We use the Usercentrics service to obtain and manage the consent of website users to the data processing of optional services on our website. The use of Usercentrics is based on a legitimate interest, namely the administration of authorizations to use optional services (Art. 6 para. 1 lit. f) GDPR. The following data is processed:
Date and time of access Browser information Device information Geographical location Cookie preferences URL of the page visited
An order processing agreement has been concluded with Usercentrics.
You can find Usercentrics' privacy policy here: usercentrics.com/de/datenschutzerklaerung/
The data concerning your consent will be stored [....]