Privacy Policy
I. General Information
The website www.normatec.de (“Website”) is a service provided by Normatec Werkzeugtechnik GmbH (hereinafter also “Normatec” or “we”/”us”).
In the following we inform you about the handling of your personal data. If you use our Website and the Normatec service, personal data will be processed.
Because the protection of your privacy is important to us, we would like to inform you to what extend your personal data gets processed by us and in what way.
You can access this Privacy Policy at any time under the section “Privacy Policy” at our Website.
Preliminary note: We comply with the legal provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) as well as other data protection regulations.
II. Name and Address of the Controller
As the operator of the Website, Normatec Werkzeugtechnik GmbH is the controller for your personal data that are processed in connection with the use of this Website.
Normatec Werkzeugtechnik GmbH
represented by its Managing Director Manuel Sanchez Perez
Karlschmitter Weg 45
33530 Wetzlar
Phone: +49 6441 87077 0
Fax: +49 6441 87077 29
E-mail: info@normatec-automotive.com
III. Contact Details of the Data Protection Responsible
If you have any questions or wish to exercise your rights as a data subject, please contact our data protection officer at:
Karlschmitter Weg 45
33530 Wetzlar
Phone: +49 6441 87077 0
Fax: +49 6441 87077 29
E-mail: info@normatec-automotive.com
IV. Processing of Personal Data
1. Provision of the Website and Creation of Log Files
a) Description and Scope of Data Processing
For technical reasons, the following data transmitted by your browser is automatically stored whenever you visit our Website:
- The website from which you are visiting us (referrer URL)
- The web page or file you requested
- Information on your browser type and version
- The operating system you are using
- The type of device you are using
- Time of your visit
- Your IP address
Our system stores your personal data in log files. This data is not stored with other personal data about you.
b) Legal basis of the data processing
The legal basis for the temporary processing of the data and the log files is Art. 6 para. 1 sentence1 lit. f GDPR.
c) Purpose of the Data Processing
The temporary processing of your IP address by our system is necessary to enable theWebsite to be deliveredto your end device. Furthermore, we use your personal data to optimize our Website and to ensure the security of our IT systems. In this context, your data will not be processed for marketing purposes.
Our legitimate interest in processing your personal data lies in these purposes.
d) Storage Period
The aforementioned personal data will be erased as soon as they are no longer needed to achieve the purpose for which they are processed. Where the data are processed for the provision of the Website, they will be erased as soon as you end the respective session.
IP addresses in log files are deleted after eight weeks.
e) Possibilities of Objection and Removal pursuant to Art. 21 GDPR
There is no possibility to object to the processing of the data, as this data processing is absolutelynecessary for the provision of the Website.
2. Cookies
a) Description and Scope of Data Processing
We use so-called cookies on our Website that allow us to distinguish you from other users and help to make the use of our Website easier for you. Cookies are small text files that your internet browser installs on your device. Often these are so-called “session cookies”, which are erased after the end of your session.
Other cookies remain installed on your device until you remove them. These installed cookies enable us to identify your web browser on your next visit.
Please be aware that you can set your browser to automatically notify you when a new cookie is being set. By changing the settings of your web browser, you can choose whether you want cookies to be allowed on a case-by-case basis, to be placed in specific cases only, to be refused at all times, or to be automatically erased after closing your browser. However, if you choose to deactivate cookies, you may not be able to use all the features of our Website.
We use cookies on our Website to make it more user-friendly for you. Some elements of our Website require quire the accessing browser to be identified even after going to a different page.
The following data are stored in and transmitted by the cookies:
- Information entered in form
b) Legal Basis for Data Processing
The legal basis for the processing of your personal data using cookies is Art. 6 para. 1 sentence 1 lit.f GDPR.
c) Purpose of the Data Processing
We use technically necessary cookies to optimize the use of our Website for you. Without the use of cookies, some of the functions of our Website may not be available as they need to recognize your browser even after switching pages.
The following application requires the use of cookies:
- Memorizing information entered in form
Our legitimate interest in processing your personal data lies in these purposes. We do not use the personal data collected by technically necessary cookies to create user profiles.
d) Storage Period, Possibility of Objection and Removal pursuant to Art. 21 GDPR
Cookies are stored on the user’s computer and transmitted by it to our Website. As a user, you therefore have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings of your web browser. Cookies previously stored can be erased at any time. This can even be done automatically. If you deactivate cookies for our Website, you may not be able to fully use all the features of our Website.
3. Contacting via Contact Form and E-Mail
a) Description and Scope of Data Processing
On our Website, we give you the opportunity to contact us via a corresponding contact form. The data you provide when contacting us will be transmitted to and used by us for the purpose of processing your query. At the time of your query, the following data will be collected:
- Your name
- Your e-mail address
- If applicable, a subject,
- If applicable, further personal data that you provide in the contact form
When sending your request, the following data are also processed:
- Your IP address
- Date and time of sending your request
If you contact us via the provided e-mail address, your personal data transmitted with the e-mail will be processed. We do not disclose these data to any third party.
b) Legal Basis for Data Processing
The legal basis for the processing of the data transmitted in connection with your queryviacontact form or e-mail is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
The legal basis for the processing of your data transmitted when sending your request is Art. 6 para. 1 sentence 1 lit.f GDPR.
c) Purpose of the Data Processing
We process your personal data only for the purpose of processing your request and contacting you.
Other personal data will be processed during the sending process for security reasons in case the contact options granted are misused or our IT systems are compromised by the contact. We do not collect any other data.
Our legitimate interest in processing your personal data lies in these purposes pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.
d) Storage Period
We erase your personal data when they are no longer necessary to achieve the purpose for which they are processed.
Any personal data that you have transmitted in the context of contacting us via our contact form or e-mail will be erased as soon as the respective conversation with you has ended. The conversation has ended when it is clear from the circumstances that the matter in question has been resolved.
The personal data additionally processed during the sending process will be erased after a period of 1 year.
e) Withdrawal of Consent pursuant to Art. 7 GDPR
You have the right towithdraw your consent to the processing of your data at any time pursuant to Art.7 GDPR. You can withdraw your consent by sending an informal message with the relevant content to info@normatec.de. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. In case of a withdrawal, we will stop processing your personal and erase or block it. Please note, however, that we will then no longer be able to process and respond to your query.
4. Registration for our Callback Service
a) Description and Scope of Data Processing
In addition, on our Website, we give you the opportunity register for our callback service using a form provided for this purpose.The data you provide will be transmitted to us and used for processing your callback request.
At the time of your callback request, the following data will be collected:
- Your name
- If applicable, Your company
- Your e-mail address
- Your phone number
- If applicable, specify when you would like to be called back (two to three time slots)
- If applicable, further personal data that you provide in the registration form
When sending your request, the following data are also processed:
- Your IP address
- Date and time of sending your request
b) Legal Basis for Data Processing
The legal basis for the processing of your data transmitted when sending your callback request is Art. 6 para. 1 sentence 1 lit. f GDPR.
c) Purpose of the Data Processing
We will use your personal data only for the purpose of processing your callback request and contacting you.
Other personal data will be processed during the sending process for security reasons in case the contact options granted are misused or our IT systems are compromised by the contact. We do not collect any other data.
Our legitimate interest in processing your personal data lies in these purposes.
d) Storage Period
We erase your personal data when they are no longer necessary to achieve the purpose for which they are processed.
Any personal data you have transmitted in the context of your callback request via the registration form, will be erased as soon as the respective conversation with you has ended. The conversation has ended when it is clear from the circumstances that the matter in question has been resolved.
The personal data additionally processed during the sending process will be erased after a period of 1 year.
e) Possibility of Objection andRemovalpursuant to Art. 21 GDPR
You have the right to object to the processing of your personal data at any time. You can object by sending an informal message with the relevant content to info@normatec.de. In case of an objection, we will stop processing your personal and erase or block it.Please note, however, that a callback is then no longer possible,or the conversation cannot be continued.
5. Application by E-Mail toPublished Job Advertisement
a) Description and Scope of Data Processing
On our website we publish job advertisements to which you can apply by e-mail.At the time of your application, we collect and process all personal data contained in your application documents. This may include the following data in particular:
- Your name
- Your address
- Your date of birth
- Your e-mail address
- Your work experience
- Your school education
- Your language skills
- Other data that you submit to us in your cover letter, your CV or your references
If we conclude an employment contract after you have gone through the application procedure, your personal data will be further processed for the purpose of performing the employment contract.
b) Legal Basis for Data Processing
The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1lit.b and Art. 88 GDPR in conjunction withSec. 26 para. 1 BDSG. Your data are necessary to take steps prior to entering into a contract, in this case the decision on whether to establish an employment relationship.
c) Purpose of the Data Processing
We use your personal data exclusively for the purpose of handling the application procedure.
d) Storage Period
We erase your personal data when they are no longer necessary to achieve the purpose for which they are processed.
If no employment relationship is established, your data will be erased withinthree months of receipt of the rejection. Unless there are legitimate interests that prevent erasure, e.g. in the event of a legal dispute.
e) Consequences of Non-Provision of Personal Data
You are not obliged to provide your personal data to us. If you do not provide the data, we will end the application procedure with the result that no employment relationship can be established at this time.
6. Contact via Online Calendar
a) Description and Scope of Data Processing
We have integrated a calendar on our Websitewhere you can make an appointment to contact a Normatec staff member.
When filling out the calendar form, the following personal data is collected:
- Desired date and time when to contact you
- First and last name
- E-mail address
The entry of the data above is mandatory if an appointment is to be made via the calendar. Optionally, the phone number can also be entered.
When sending your request, the following data are also processed:
- Your IP address
- Date and time of sending your request
b) Legal Basis for Data Processing
The legal basis for the processing of your personal data is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
The legal basis for the collection and storage of your IP address and the date and time of your registration is Art. 6 para. 1 sentence 1 lit. f GDPR.
c) Purpose of the Data Processing
We use your personal data to provide a customer-friendly way of contacting that is that is compatible with individual appointment scheduling.
We process your IP address and the date and time of your appointment request for our security in case a third party misuses your personal data on our Website without your knowledge. Our legitimate interest in processing your IP address lies in this purpose. The data are not passed on to third parties or compared with data collected by other Website services.
d) Storage Period
We erase your personal data when they are no longer necessary to achieve the purpose for which they are processed.
Any personal data you have transmitted via the calender form, will be erased as soon as your appointment request has been answered and the respective conversation with you has ended. The conversation has ended when it is clear from the circumstances that the matter in question has been resolved.
The IP address, date and time of your appointment request are usually erased after seven days.
e) Possibility of Withdrawalpursuant to Art. 7 GDPR and objection as well as Removalpursuant to Art. 21 GDPR
You have the right to withdraw your consent to the processing of your data at any time pursuant to Art. 7 GDPR. You can withdraw your consent by sending an informal message with the relevant content to info@normatec.de. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. In case of a withdrawal, we will stop processing your personal and erase it.
There is no possibility to object to the processing of your IP address, as the processing of the data is mandatory for abuse prevention and tracking.
V. Your rights as a data subject
This section informs you about your rights as a data subject and how you can exercise them.
1. Right of access
You have the right to demand access to your personal data that are processed by us at any time. This also includes information on the origin, recipients or categories of recipients, to whom we transmit your data and the purposes for which we process your personal data.
2. Right to rectification
You have the right to demand prompt rectification and/or completion of your personal data if the personal data are inaccurate or incomplete.
3. Right to erasure and/or restriction of processing
You have the right to demand prompt erasure of your personal data. If you ask us to, we have the obligation to erase the data without undue delay. The foregoing does not apply, however, if any contractual and/or legal provisions require us to continue processing your personal data. This may be the case, for example, when retention periods under tax law prohibit us from erasing the data. In such case, we will restrict the processing and erase the personal data immediately after expiry of the retention period.
4. Right to data portability
You have the right to receive your personal data provided to us in a structured, commonly-used and machine-readable format wherever this is technically possible. In addition, you have the right to transmit these data to another controller without hindrance, if you wish to do so.
5. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling– which produces legal effects concerning you or significantly affects you in a similar way.
6. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data relating to you infringes the general data protection regulation. The supervisory authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Postfach 3163
65021 Wiesbaden
Tel.: +49 (0) 611 14080
Fax: +49 (0) 611-1408 611
E-Mail: poststelle@datenschutz.hessen.de