Data Protection Declaration of Messebau Wörnlein

We take data protection seriously.

The protection of your privacy when we process personal data is an important concern for us. When you visit our website, the standard procedure is for our web servers to store the IP of your internet service provider, the website from which you visit us, the web pages you visit on our website and the date and duration of the visit. This information is absolutely essential for the technical transmission of the web pages and secure server operation. We do not carry out any personalised evaluation of this data.

If you send us data via the contact form, this data will be stored on our servers during the course of the data backup process. Your data will only be used by us to process your request. Your data will be treated in the strictest of confidence. It will not be passed on to third parties.

Party responsible:

Messebau Wörnlein GmbH
Messezentrum 1
90471 Nürnberg
Telephone: +49 (0) 911 817449-0
info(at)woernlein.de

Personal Data

The term "personal data" refers to data about your person. This includes your name, address and email address. You do not have to disclose any personal data in order to be able to visit our website. In some cases we need your name and address and other information so that we can provide you with the service you requested.

The above also applies in the event that we supply you with information material in response to your request or when we reply to your inquiries. In these cases we will always draw your attention to this fact. Furthermore, we only store the data that you have transmitted to us automatically or voluntarily.

When you use one of our services, we generally only collect the data that is required for us to be able to provide you with our service. It is possible that we will ask you for additional information, but this is of a voluntary nature. Whenever we process personal data, we do so in order to be able to provide you with our service or pursue our commercial objectives.

Contact

When contacting us (e.g. via a contact form, email, telephone or via social media), the information of the individuals submitting the inquiry is processed to the extent that this is necessary to answer the contact inquiries and any requested measures. The response to contact inquiries within the context of contractual or pre-contractual relationships is provided in order to fulfil our contractual obligations or respond to (pre-)contractual inquiries – and on the basis of our legitimate interests in responding to the inquiries.

•   Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. email, telephone numbers), content data (e.g. entries in online forms).
•   Individuals concerned: communication partners.
•   Purposes of the processing: contact inquiries and communication.
•   Legal bases: contract fulfilment and pre-contractual inquiries (Art. 6 para. 1 (b.) GDPR), legitimate Interests (Art. 6 para. 1 (f.) GDPR).

Automatically Stored Data

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information is:

•    Date and time of the request
•    Name of the requested file
•    Page from which the file was requested
•    Access status (file transferred, file not found, etc.)
•    Web browser and operating system used
•    Full IP address of the requesting computer
•    Quantity of data transferred

This data is not merged with other data sources. The processing is carried out in accordance with Art. 6 para. 1(f) of the General Data Protection Regulation (GDPR) on the basis of our legitimate interest in improving the stability and functionality of our website. For reasons of technical security, in particular in order to defend against attempted attacks on our web server, this data is stored by us for a short period. It is not possible for us to draw conclusions about individuals on the basis of this data. After seven days at the latest, the data is anonymised by shortening the IP address at the domain level, so that it is no longer possible to establish a connection to the individual user. In anonymised form, the data is also processed for statistical purposes; no comparison with other data stocks or a transfer to third parties, including extracts, is carried out. Only in conjunction with our server statistics, which we publish every two years in our Activity Report, is the number of page views made public.

Cookies

When you visit our website, we may store information on your computer in the form of cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by means of which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited Internet pages and servers to distinguish between the individual browser of the person concerned and other Internet browsers that contain other cookies. A specific internet browser can be recognised and identified by means of the unique cookie ID.

Through the use of session cookies, the party responsible can provide the users of this website with a user-friendly service that would not be possible if no cookies were set. Without your consent we only use technically required cookies on the legal basis of the legitimate interest pursuant to Art. 6, para. 1 (f) GDPR.

We only use personal cookies to improve our website or for marketing/advertising purposes with your consent. On your first visit, you can submit your voluntary agreement to the tracking or analysis by clicking on the cookie banner. Your data may be passed on to partners or third-party providers. These cookies will only be stored if you explicitly agree to this; the legal basis is then your consent in accordance with Art. 6, para. 1 (a) GDPR.

You can change your settings with respect to the use of cookies here at any time:

USE OF GOOGLE-SERVICES

We use the technologies of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), as described below. The information automatically collected by Google technologies about your use of our website is transmitted as a rule to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision of the European Commission that applies to the USA. Our cooperation is based on standard data protection clauses of the European Commission.

If your IP address is collected via Google technologies, it is shortened by activating IP anonymisation before being stored on Google servers. Only in exceptional cases is the full IP address transmitted to a Google server, where it is stored in an abbreviated form. Unless otherwise stated for the individual technologies, the data processing is based on an agreement concluded for the respective technology between jointly responsible parties in accordance with Art. 26 GDPR. Further information on data processing by Google can be found in the Google privacy policy at https://policies.google.com/privacy?hl=de.

GOOGLE TAG MANAGER

This website uses Google Tag Manager. The Tag Manager does not collect any personal data. The tool ensures the triggering of other tags which in turn may also collect data. Google Tag Manager does not access this data. If deactivation has been carried out at the domain or cookie level, this will continue to apply for all tracking tags which are implemented with the Google Tag Manager. Google's privacy policy (data protection information) regarding this tool can be found here: https://www.google.com/analytics/terms/tag-manager/

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, as well as information on your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address is not merged with other data from Google as a matter of principle.

For the purposes of the optimised marketing of our website, we have activated the data sharing settings for "Google Products and Services". This enables Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. Data sharing with Google within the framework of these data sharing settings is based on an additional agreement between the parties responsible. We have no influence on the subsequent data processing by Google.

In order to create and perform tests, we also use the Google Analytics extension feature Google Optimize.

For web analysis, the Google Analytics extension feature Google Signals enables so-called "cross-device tracking". If your internet-enabled devices are linked to your Google account and you have activated the "personalised advertising" setting in your Google account, Google can create reports about your usage behaviour (in particular the cross-device user figures), even if you change your terminal device. We do not process personal data in this respect; we only receive statistics that are generated on the basis of Google Signals.

For web analysis and advertising purposes, the Google Analytics extension feature, the so-called DoubleClick cookie, enables the recognition of your browser when you visit other websites. Google will use this information to compile reports about website activity and provide other services associated with website usage.

Google Maps

This website uses Google Maps to display maps and create directions. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. By using Google Maps on this website, you declare your consent to the collection, processing and use of the automatically collected data and the data entered by you by Google, one of its representatives or third parties.
The terms of use for Google Maps can be found here.
You can view the Google Maps privacy policy here.

SOCIAL PLUGINS FROM YouTube

Social buttons from social networks are used on our website. These are only integrated into the page as HTML links, so that no connection with the servers of the respective provider is established when our website is called up. If you click on one of the buttons, the website of the respective social network opens in a new window of your browser, where you can click on the Like or Share button, for example.

ONLINE PRESENCE ON FACEBOOK, INSTAGRAM, LINKEDIN, XING

Insofar as you have given your consent to the respective social media operator in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media mentioned above, from which usage profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as a contact option and your rights and setting options in this regard to protect your privacy, please refer to the data protection notices of the providers linked below. Should you still require assistance in this regard, you can contact us.

USE OF PERSONAL DATA IN THE APPLICATION PROCESS

Purpose of Data Collection

We generally use your personal data in order to answer your inquiry, process your order or provide you with access to specific information or offers. You can also find further information on data protection on this website. However, we would also like to make your job search easier. You can therefore apply for jobs with us directly online or by email. We assure you that your details will be treated in confidence. The data provided by you will be processed and used exclusively for the purpose of selecting applicants.
 
What data is collected?

We only collect the information required for an application process with us.

When you apply for a job with us, you will be asked for certain personal data (name, address, email). In addition, position-related questions may be asked. In order to submit an application to our company, it is also essential to include your professional career.

Please note that your data will not be stored anonymously but will be accessible to the Human Resources Department and to the areas of our company which are relevant to the position.
 
Application Information

With your application you are submitting an assurance that the information you provide is true and correct. Please note that any false statement or omission may be grounds for rejection or subsequent dismissal.

We are looking for applicants irrespective of their race, ethnic origin, gender, religion, ideology, disability, age or sexual identity. We do not require any information from you that cannot be used under the General Equal Treatment Act. Furthermore, please do not forward any confidential internal information or even trade secrets of your former or current employer to us. Also, please do not provide unnecessary information about: illnesses, pregnancy, ethnic origin, political opinions, philosophical or religious convictions, trade union membership, physical or mental health, sex life, defamatory or slanderous information or information that has nothing to do with the job profile.
 
Who processes the data?

The data we collect is only processed internally or by contractually affiliated service providers. The legal basis of this processing is:

•    Art. 6, para. 1 (a) Consent
•    Art. 6, para. 1 (b) Pre-contractual measures
•    Art. 6, para. 1 (f) Our legitimate interest

Personal data is only forwarded for specific purposes within the framework of order processing in accordance with the data protection regulations to bodies which, for example, operate our servers or provide certain services. These bodies are located in Germany and in the countries of the EU and are bound by contractual obligations and data protection instructions to handle personal data in accordance with data protection regulations.
The data and files transmitted by you will be processed and used exclusively for the purpose of processing your application. The data and files you provide may, if your application is successful, be further processed and used by us for employment purposes in an employment relationship. If the application for a job offer is unsuccessful, we store the submitted data and files in an applicant database for six months in order to be able to answer subsequent questions about the application. After a period of six months has elapsed, the data and files are deleted. It is possible to withdraw the application at any time. If you withdraw your application, your data and files in the applicant database will be deleted immediately – subject to the following restrictions. Furthermore, as part of the application process you can request at any time that individual data or files that you have submitted to us be deleted. However, we reserve the right to store a limited amount of your data for a limited period of three months in order to be able to comply with legal provisions, in particular obligations to provide evidence under the General Equal Treatment Act (AGG).
 
With whom do we share your personal data?

The information you share with us is treated confidentially and only forwarded to those individuals who are involved in a specific application process. Your personal data is only passed on to other group companies with your separate, explicit consent.
Please refer to the corresponding note on this website.
 
Right to access, edit and delete your CV

You can access, edit or delete your CV at any time. You can also ask us to assist you with this.

We ask for your understanding that, for legal reasons, it is not possible to change or delete data during an ongoing application process or for a period of approximately three months after the conclusion of an ongoing application process. If you have given us your consent, we will store your personal data beyond a completed application phase. However, never for longer than one year. You can revoke your consent at any time.

Security

We have taken technical and administrative safeguards to protect your personal data against loss, destruction, manipulation or unauthorised access. All our employees and the service providers working for us are bound by the applicable data protection laws.

Whenever we collect and process personal data, it is encrypted before it is transmitted to others. This means that your data cannot be misused by third parties. Our security measures are subject to a continuous improvement process and our data protection declarations are constantly being revised. Please ensure that you have the latest version.

Rights of Data Subjects

You have a right at all times to information about, the correction, deletion or restriction of the processing of your stored data, a right to object to the processing, as well as a right to data portability and to submit a complaint in accordance with the requirements of data protection law.

Right to information:
You may request information from us about whether and to what extent we process your data.

Right of correction:
If we process your data and this data is incomplete or incorrect, you can request that we correct or complete it at any time.

Right to deletion:
You can request that we delete your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate protection interests. Please note that there may be reasons that prevent immediate deletion, e.g. in the case of legally regulated retention obligations. Irrespective of the exercising of your right to deletion, we will delete your data immediately and completely if there is no legal or statutory obligation to retain this data in this respect.

Right to the restriction of processing:
You can request us to restrict the processing of your data if

•    you dispute the accuracy of the data, i.e. for a period of time that allows us to verify the accuracy of the data.
•    the processing of the data is unlawful, but you refuse deletion and instead request restriction of the use of the data,
•    we no longer need the data for the intended purpose, but you still require this data for the assertion or defence of legal claims, or
•    you have objected to the processing of the data.

Right to data portability:
You may request that we make the data that you have prepared for us available to you in a structured, commonly used and machine-readable format and that you are allowed to transfer this data to another responsible party without any hindrance from us, provided that

•    we process this data on the basis of consent which has been issued by you – and which may be revoked – or for the fulfilment of a contract between us, and
•    this processing is carried out with the aid of automated procedures. If technically feasible, you can request us to transfer your data directly to another responsible party (data controller).

Right to object:
If we process your data in conjunction with a legitimate interest, you can object to this data processing at any time; this would also apply to any profiling that is based on these provisions. We will then no longer process your data unless we can show compelling legitimate reasons for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending against legal claims. You may object to the processing of your data for the purposes of direct marketing at any time without giving reasons.

Right of appeal:
If you are of the opinion that we are infringing German or European data protection law when processing your data, please contact us so that any questions can be clarified. Of course you also have the right to contact the supervisory authority that is responsible for you, the respective State Office for Data Protection Supervision. If you wish to assert any of the above rights against us, please contact our Data Protection Officer. In cases of doubt, we may request additional information to confirm your identity.

Changes to this Data Protection Declaration
We reserve the right to change our Data Protection Declarations if this is necessary due to new technologies. Please ensure that you have the latest version. If any fundamental changes are made to this Data Protection Declaration, we will announce those changes on our website.

All interested parties and visitors to our website can contact us about data protection issues at:
ITs HEIN GmbH, Kulmbacher Straße 27b, 95460 Bad Berneck; Phone +49 9273 / 501 39 – 0