Privacy Policy

Notice for data protection

I. Name and address of the responsible party
The responsible party in the general data protection regulation
and other national data protection laws of the member states,
as well as other data protection provisions is:

WERO Rohrleitungsbau, Industrieanlagen GmbH & Co. KG
Gewerbepark 9
94136 Thyrnau
GERMANY
T +49 8501 9154-0
E-Mail info@wero-thyrnau.de

II. Name and address of the data protection officer
The data protection officer of the responsible person/firm is:

WERO Rohrleitungsbau, Industrieanlagen GmbH & Co. KG
Datenschutzbeauftragter
Gewerbepark 9
94136 Thyrnau
GERMANY
T +49 8501 9154-0
E-Mail info@wero-thyrnau.de

III. General information for data processing

The range of processing of data of involved people
We generally process our users' personal data to the necessary extent to provide a functional website and our content and services. The processing of our users´ personal data only takes place when the user has consented to it. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.
Legal basis for the processing of personal data

To the extent that we obtain consent from the data subject for the processing of personal data, Article 6, paragraph 1a of the EU General Data Protection Regulation (GDPR) serves as the legal basis. For the processing of personal data, which is necessary to fulfil a contract, in which the affected person is a party in the contract, Article 6 paragraph 1b of the GDPR serves as the legal basis. To the extent that the processing of personal data is necessary to fulfill a legal obligation that our company is subject to, Article 6, paragraph 1c of the GDPR serves as the legal basis. In the case where vital interests of the data subject or another natural person require the processing of personal data, Article 6 paragraph 1d of the GDPR serves as the legal basis. If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the affected person do not outweigh the former interest, Art. 6 paragraph 1f of the GDPR serves as the legal basis for the processing.
Deleting of data and storage period
The personal data of the affected person will be deleted or blocked as soon as the purpose of storage no longer applies to it.
Storage may also take place if it has been provided for by the European or national legislator in Union regulations, laws or other provisions, to which the controller is subject. A block or deletion of the data also takes place if a storage period, prescribed by the standards mentioned before, expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

IV. E-mail contact

Description and scope of data processing
On our website,you can step into contact with us via a provided e-mail address. In that case, the users´ personal data transmitted through the e-mail will be stored.
In this context, the data will not be passed on to third parties. The data will be used exclusively for the processing of the conversation.
Legal basis for data processing
The legal basis of processing the data shared in the e-mail is article 6 paragraph 1f of the GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is article 6 paragraph 1b of the GDPR.
The purpose of data processing
The processing of personal data shared in the e-mail merely serves us with stepping into contact with you. If you do contact us via e-mail, this also constitutes the necessary legitimate interest in processing the data.
The storage period
The data will be deleted as soon as the purpose of their collection is no longer necessary. For the personal data shared with an e-mail, is that the case when the conversation with the user has ended. The conversation is concluded when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
Possibility of objection and removal
The user always has the possibility to take back his consent on his personal data getting processed. If the user gets into contact with us via e-mail, they can object to their personal data getting stored. In such a case, the conversation cannot be continued. To revoke the storage, please send an e-mail to the data protection officer listed above (WERO GmbH). In this case, all personal data stored during the contact process will be deleted.

V. The rights of the affected person

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the responsible party:

Right to information
You can demand a confirmation from the responsible party if personal data, which affects you, has been processed by us.
If a process of personal data concerning you has taken place, you can demand following information from the responsible party:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data being processed;
(3) the recipients or the categories of recipients who had access to or will have access to personal data concerning you;
(4) the planed storage period of the personal data concerning you or, if specific information is not possible, criteria for determining a storage period;
(5) the existence of a right to rectification or deletion of personal data concerning you, a right to restriction of processing by the responsible party or a right to object to such processing;
(6) the existence of the right to complain against the processing;
(7) all available information of the origin of the data, if the personal data was not collected from the affected person;
(8) the existence of an automated decision-making, including profiling, referred to article 22 paragraphs 1 and 4 of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the affected person.

You have the right to demand information about if the personal data concerning you have been passed into third countries or on international organizations. In that case, you may request to be informed of the appropriate safeguards pursuant to article 46 of the GDPR in connection with the transfer.
Right to rectification
You have the right to rectification and/ or completion by the responsible party, provided the processed personal data which concerns you is incorrect or incomplete. The responsible party must carry out the correction immediately.
Right to constriction of processing
Under the following circumstances, you can request a restriction of processing of the personal data concerning you:
(1) if you argue the accuracy of the personal data concerning you for a period of time, enabling the responsible party to verify the accuracy of the personal data;
(2) if the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;
(3) if the responsible party no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defense of legal claims, or
(4) if you have lodged an objection to the processing in accordance to article 21 paragraph 1 of the GDPR and it has not yet been established whether the legitimate grounds of the responsible party outweigh your grounds

If the processing of your personal data has been restricted, these data - apart from their storage - may only be processed with your consent or for the assertion, exercise or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of a significant public interest of the Union or a member state.

If the restrictions of processing has been limited according to the above conditions, you will be informed by the responsible party before the restriction is lifted.
Right to deletion
a) Obligation to delete
You can request for the personal data concerning you to be deleted immediately and the responsible party is obligated to delete the data without delay, as long as one of these reasons applies:
(1) if the personal data concerning you is no longer necessary for the purposes for which it was stored or processed in any other way;
(2) if you revoke your consent, on which the processing relied in accordance with article 6 paragraph 1a or article 9 paragraph 2a of the GDPR, and there is a lack of legal basis for the processing;
(3) if you object to the processing in accordance with Article 21 paragraph 1 of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing in accordance with Article 21 paragraph 2 of the GDPR.
(4) if the personal data concerning you has been unlawfully processed
(5) if the deletion of the personal data concerning you is necessary for the fulfillment of a legal obligation under Union law or the law of the Member States to which the responsible party is subject.
(6) if the personal data concerning you were collected in relation to the services offered by the information society in accordance to article 8 paragraph 1 of the GDPR

b) Information to third parties
If the responsible party has made the personal data concerning you public and is obligated to delete it acc. to article 17 paragraph 1 of the GDPR, he shall take reasonable measures, taking into account available technology and the costs of implementation, including technical measures, to inform data controllers who process data for you, that you as the data subject, have requested the deletion of all links to this personal data or of copies or replicas of this personal data

c) Exceptions
The right to deletion does not exist as long as the processing is necessary
(1) to exercise the right of free expression of opinion and information
(2) to fulfill a legal obligation that requires processing under the law of the Union or the Member States to which the responsible party is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the party;
(3) for reasons of public interest in the area of public health in accordance to article 9 paragraph 2h as well as article 9 paragraph 3 of the GDPR
(4) for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes according to article 89 paragraph 1 of the GDPR, as long as the right mentioned in section a) is likely to make the realization of the objectives of this processing impossible or seriously impairs it, or
(5) for the assertion, exercise, or defense of legal claims.
Right to information
If you asserted your right to rectification, deletion or restriction of the processing against the responsible party, they are obligated to share the rectification, the deletion of the data or the restriction of the processing with all recipients who had or have access to it, unless this proves impossible or involves an unreasonable effort.
You have the right to be informed about these recipients in relation to the person responsible.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the responsible party, in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit this data to another party without hindrance from the responsible party to whom the personal data have been provided, as long as

(6) the processing on a consent acc. to article 6 paragraph 1a of the GDPR or article 9 paragraph 2a of the GDPR or is based on a contract acc. to article 6 paragraph 1b of the GDPR and
(7) the processing is carried out using automated procedures.

In exercising this right, you also have the right to obtain for the personal data concerning you to be transferred directly from one party to another, where technically feasible.

The right to data portability does not apply to the processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the responsible party.
Right of objection
You have the right to object against the processing of the personal data concerning you, which is conducted under the article 6 paragraph 1e of the GDPR, for reasons which arise from your particular situation. This also applies to profiling based on these provisions.

The party responsible will not process the personal data concerning you anymore, unless he can provide compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defense of legal claims. If the personal data concerning you is processed with the purpose of direct advertising, you have the right to file an objection to the processing of your personal data for the purpose of such advertising; this also applies to profiling, as long as it is related to such direct advertising.
If you object to the processing for direct advertising, the personal data concerning you will not be processed for those purposes anymore. You have the option to exercise your right to object in connection with the use of services of the information society - regardless of Directive 2002/58/EC - through automated procedures that use technical specifications.
Right of withdrawal of the data protection consent declaration
You have the right to withdraw your data protection consent at any time. The legality of the processing that took place based on the consent until the withdrawal is not affected by the withdrawal of consent.
Right to file a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your workplace, or the place of the alleged infringement, if you believe that the processing of your personal data infringes the GDPR.

The supervisory authority with which the complaint was filed, informs the complainant about the status and results of the complaint, including the possibility of judicial redress under article 78 of the GDPR.

VI. Processing of applicant data

Purpose and scope of data processing
When you apply on our site, we process the personal data that you provide as part of the application process (e.g. contact data, resume, certificates, cover letter, conversation notes etc.), to decide on the justification of an employment relationship.
Legal basis of the processing
The legal basis for the processing of your application data is §26 paragraph 1 of the Federal Data Protection Act (FDPA) in conjuction with article 6 paragraph 1b of the GDPR (carrying out pre-contractural measures.)
If your application was successfull, your data could be processed with the purpose of an employment relationship.
If we are not able to consider your application, we can include your data in our applicant pool with your exclusive consent in accordance with article 6 paragraph 1a of the GDPR, in order to contact you at a later time if necessary.
Recipient of the data
Your data will only be processed by the departments responsible for the application process within our company. There will be no disclosure of the data to third parties.
Storage period
Your personal data will be stored for the duration of the apllication process. If no employment relationship is established, your data will be deleted no later then six months after the conclusion of the application process, provided that there is no statutory retention obligation or you provide us with consent for longer storage.