Privacy Policy

Privacy

1. Data controller
2. Contact details of the data protection officer
3. General information on data processing when visiting our website
4. Cookies
5. Online services and technologies used
6. Data processing when contacting us
7. Online meetings / web presentations
8. Processing of your customer and supplier data in the context of business communication
9. Data protection information for applicants
10. Use and application of various social networks
11. Processors used for the operation of the website
12. Your rights as a data subject
13. Further information

 

1. Data controller

Eisenbau Krämer GmbH
Karl-Krämer-Straße 12
57223 Kreuztal-Kredenbach, Germany

Represented by

Managing Director
Dr. Scott McCann
Herr Fangwei Wang

Kontakt:
Phone: +49 (0) 27 32 - 588-0
Email: info@ebkpipe.com

 

2. Contact details of the data protection officer

Michael Herzig pco GmbH & Co. KG, Albert-Einstein-Straße 8, 49076 Osnabrück, Germany
Email: datenschutz@ebkpipe.com

 

3. General information on data processing when visiting our website

Type and purpose of processing: When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, information about the browser type and version used, the domain name of your Internet service provider, the host name of the accessing computer, your IP address, the website from which the website was accessed, websites accessed via our website, the date and time of access, notification of whether the request was successful, and the amount of data transferred.

The data is processed for the following purposes in particular:

• Ensuring a smooth connection to the website
• Ensuring smooth use of our website
• Evaluating system security and stability, and
• for other administrative purposes

These purposes also constitute our legitimate interest in data processing. We do not use your data to draw conclusions about your person. Information of this kind may be statistically evaluated by us in order to optimize our website and the technology behind it.

Legal basis: Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipients: The recipients of the data are qualified service providers who act as processors for the operation and maintenance of our website. These may be, for example, hosting service providers, web designers, IT service providers, or providers of consent management platforms.

Storage period: The data will be deleted as soon as it is no longer required for the purpose for which it was collected and there are no legal retention periods preventing deletion. Your IP address and the name of your internet service provider are stored by our external service provider, which hosts our website, for seven days and then deleted. Storage beyond this period is possible. We can only view your IP address in the log files in anonymized form from the outset.

Provision mandatory or required: The provision of the aforementioned personal data is neither required by law nor contractually required. However, it is possible that certain functions of our website depend on the provision of personal data. If you do not provide personal data in these cases, this may result in individual services and functions being unavailable or only available to a limited extent.

 

4. Cookies

Type and purpose of processing: We also use cookies on our website. Cookies are small files that are created by your browser when you visit a website to store data about your browser during and after your visit. Unique strings are regularly stored in the cookie, which enable a server to recognize your browser. Cookies may also contain personal data.

We use cookies, among other things, to ensure the technical functionality of the website (technically necessary cookies) and to integrate additional online services from third-party providers on our website (technically unnecessary cookies). Cookies can be stored by the website you visit (first-party) or by online services of a third-party provider (third-party), provided that you have enabled a third-party service.

We use a consent banner on our website so that we can use cookies and third-party services in accordance with data protection regulations and so that you have control over the use of cookies. The consent banner is used to query and document the user's decision and transfer it to other systems. The consent banner is displayed when you first visit our website and allows you to configure your cookie settings, i.e., to declare your consent to the respective use of cookies.

Whether and which cookies are used when you visit our websites depends on which areas and functions of our websites you use and whether you consent to the use of cookies that are not technically necessary in our consent management system.

Legal basis:

Technically necessary cookies: The legal basis for the use of technically necessary cookies is our predominantly legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR in conjunction with § 25 (2) No. 2 TDDDG.

Cookies that are not technically necessary: The legal basis for the use of cookies that are not technically necessary is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 (1) TDDDG.

Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website. For further recipients, please refer to the information below on the display, tracking, remarketing, and web analysis technologies used.

Storage period: The storage period for individual cookies can be found in our consent banner.

Provision mandatory or required: You can, of course, view our website without cookies. Web browsers are usually set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

5. Online services and technologies used

5a) Google Maps

Type and purpose of processing: We use Google Maps on our website. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"). This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. For more information about data processing by Google, please refer to Google's privacy policy. There you can also change your personal privacy settings in the privacy center.

Legal basis: The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

Third country transfer: When using Google Maps, your data may be transferred to the USA. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. Further information can be found here: Data Privacy Framework

Furthermore, Google uses so-called standard contractual clauses (SCC). With the help of these standard contractual clauses and the EU-US Data Privacy Framework, Google undertakes to comply with the European level of data protection, even if your personal data is stored and processed in the USA.

Recipient: When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account that you are logged into or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not want this association to be made in your Google profile, you must log out of Google before activating the button. Google stores your data as usage profiles and uses it for advertising, market research, and/or the needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Storage period: Eisenbau Krämer does not collect any personal data through the integration of Google Maps. According to Google, the data will be deleted as soon as it is no longer required for processing purposes.

Provision mandatory or required: The provision of your personal data is voluntary and based solely on your consent.

Revocation of consent: You can revoke your consent at any time via our cookie settings in the footer. In addition, you can prevent the storage of cookies by adjusting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

 

6. Data processing when contacting us

Type and purpose of processing: By providing our email address, telephone number, and contact form, we offer you the opportunity to establish initial contact with us. To use the contact form at , you must provide your email address and name. Depending on your request, further data may be required. In addition, your IP address and the time of your request will be logged.

When you contact us, the personal data you provide will be stored. The personal data will be processed exclusively for the purpose of handling your request.

Legal basis: The legal basis for the processing of data transmitted in the course of sending an email or via the contact form is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. If the email contact is aimed at concluding a contract (e.g., request for offer), the legal basis for processing is additionally Art. 6 para. 1 sentence 1 lit. b GDPR. The same applies analogously to postal mailings

Recipients or categories of recipients: Depending on the nature of your request, we may forward your data to our trading partners in order to fulfill your request. In some cases, we use external service providers to support our IT in accordance with Art. 28 GDPR in order to process your data. Some of our service providers may process data in third countries outside the EU. In this case, we ensure that the necessary safeguards are in place to protect your data (EU adequacy decision, EU standard contractual clauses, or other measures). You can obtain access to the relevant documents from our data protection officer. Your data will not be disclosed to third parties.

Storage period: Your personal data will generally be deleted or blocked as soon as the purpose of processing no longer applies. The purpose is determined by the content of the communication and the respective business transaction. The storage periods to be observed in this regard cannot be determined on a general basis, but must be determined for each individual business transaction on a case-by-case basis. If storage is necessary to comply with commercial or tax law retention periods, the storage period is generally six or ten years, unless longer storage is necessary to defend legal claims.

Provision mandatory or necessary: The provision of personal data is not required by law or contract, but may be necessary for the reasons stated above in order to conclude a contract. If you do not wish to provide the data, we will not be able to contact you.

 

7. Online meetings/web presentations

Type and purpose of processing: Under certain circumstances, we may arrange online meetings with you to hold location-independent meetings and web presentations. We use "Teams" from Microsoft (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland) to conduct our online meetings and web presentations. Teams is based on the Microsoft365 cloud and is a solution for conducting video conferences, for example. To conduct our online meetings and web presentations, we process the following data from you, among other things: first and last name, email address, company name, appointment details, time/date, device used (e.g., tablet, smartphone), use of webcam, connection data, session data, recording (only with consent).

In principle, it is possible to upload or share files during video conferences and/or to record the video conferences. Recordings will only be made with your prior consent and the recording process will be displayed to you and all participants in the Microsoft Teams app. You will receive information on how to participate in and conduct our online meetings/web presentations via Teams (e.g., participation link) by email. The use of MS Teams is generally subject to Microsoft's terms of use and privacy policy. To use MS Teams, you must accept Microsoft's terms of use and privacy policy, otherwise you will not be able to use MS Teams. You can view Microsoft's privacy policy at the following link: https://privacy.microsoft.com/de-de/privacystatement

Legal basis: The online meetings/web presentations may be held for the purpose of fulfilling a contract or in connection with the conclusion of a contract (including responding to your pre-contractual inquiries), Art. 6 para. 1 lit. b GDPR. If this is not the case, we provide these services to you within the scope of our legitimate interest, Art. 6 para. 1 sentence 1 lit. f GDPR. Online meetings/web presentations will only be recorded with your prior consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

Recipients of the data: Microsoft Corporation, as the provider of MS Teams, will be aware of the above data to the extent that this is provided for in our data processing agreement with MS Teams. Through the data processing agreement concluded with MS Teams, we oblige Microsoft to comply with the legal requirements of the applicable data protection law.

Data transfers to third countries: We have restricted our storage location to data centers in the European Union, therefore data processing does not take place outside the European Union (EU). However, we cannot completely rule out routing or storage on servers outside the European Union by the processor Microsoft. Microsoft is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the US. Further information can be found here: Data Privacy Framework

Furthermore, Microsoft uses so-called Standard Contractual Clauses (SCC). With the help of these Standard Contractual Clauses and the EU-US Data Privacy Framework, Microsoft undertakes to comply with the European level of data protection, even if your personal data is stored and processed in the USA.

Storage period: Your personal data will generally be deleted or blocked as soon as the purpose for which it was stored no longer applies. The purpose is determined by the content of the communication and the respective business transaction. The storage periods to be observed in this regard cannot be determined on a general basis, but must be determined for each individual business transaction on a case-by-case basis. As a rule, data is stored to comply with commercial and tax law retention periods (usually six or ten years), unless longer storage is necessary to defend legal claims.

Provision mandatory or necessary: The provision of personal data is not required by law or contract, but may be necessary for the performance of a contract for the reasons stated above. If you do not wish to provide the data, we will not be able to contact you via MS Teams.

Right to object: If you subsequently object to the processing of your data transmitted to us or revoke your consent, please contact us using the contact details provided.

 

8. Processing of your data in the context of business communication and for the processing of business transactions

Type and purposes of data processing: We collect and process your data in order to communicate with you for business purposes. This may be for the purpose of initiating business, fulfilling contractual and legal obligations, offering products and services, and strengthening customer relationships, which is also our legitimate interest in data processing. Without your personal data, we are often unable to achieve the aforementioned purposes.

Legal basis: Depending on the stage of contact with you, the following legal bases may be relevant for the processing of your data:

• For the performance of pre-contractual measures or for the fulfillment of a contract, this is Art. 6 para. 1 lit. b GDPR
• For the fulfillment of legal obligations to which we are subject, this is Art. 6 para. 1 lit. c GDPR
• To protect our legitimate interests, this is Art. 6 para. 1 lit. f GDPR
• If you have given us your consent to process your data, this is Art. 6 para. 1 lit. a GDPR

Recipients or categories of recipients of the data: Within our company, we ensure that only those persons who need your data to fulfill contractual and legal obligations receive it. Depending on the nature of our business relationship with you, your data may be passed on to partners and manufacturing companies for the purpose of fulfilling a contract. In some cases, we use other service providers to process business transactions. These may include parcel services, banks, internet service providers, IT service providers, and tax advisors.

Some of our service providers may process data in third countries outside the EU. In this case, we ensure that the necessary safeguards are in place to protect your data (EU adequacy decision, EU standard contractual clauses, or other measures). You can obtain access to the relevant documents from our data protection officer. Your data will not be passed on to third parties.

Storage period: Your personal data will generally be deleted or blocked as soon as the purpose for which it was stored no longer applies. The purpose is determined by the content of the communication and the respective business transaction. The storage periods to be observed in this regard cannot be determined in general terms, but must be determined for each individual business transaction on a case-by-case basis. As a rule, data is stored to comply with commercial and tax law retention periods (usually six or ten years), unless longer storage is necessary to defend legal claims.

Provision mandatory or necessary: An obligation to provide your personal data may sometimes arise from the respective contractual relationship.

 

9. Data protection information for applicants

Type and purpose of processing: We process your personal data for the purpose of deciding whether to establish an employment relationship with Eisenbau Krämer. .

Legal basis: The legal basis for data processing is Art. 88 GDPR in conjunction with § 26 BDSG and Art. 6 para. 1 lit. b GDPR for the initiation or execution of contractual relationships. Furthermore, we may process your personal data if this is necessary to fulfill legal obligations (Art. 6 para. 1 lit. c GDPR) or to defend against legal claims asserted against us. The legal basis for this is Art. 6 para. 1 lit. f GDPR. If you give us your express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. Consent that has been given can be revoked at any time with effect for the future.

Recipients: Internal recipients of the personal data contained in the application documents are the respective responsible personnel managers in our company. In some cases, we use additional service providers. These service providers have been carefully selected by us, commissioned in writing, and are bound by our instructions. uses the "talentstorm" tool from ontavio GmbH, Hundemstraße 2, 57368 Lennestadt, Germany, for applicant management. Ontavio GmbH acts as a processor on our behalf, and data processing takes place in Germany.

Some of our IT service providers may process data in third countries outside the EU. In such cases, we ensure data protection compliance by taking appropriate measures in accordance with the requirements of Art. 44 ff. GDPR.

Storage period: Your personal data will be deleted or destroyed no later than six months after receipt of the decision on your application (acceptance or rejection), unless longer storage is necessary to defend legal claims. In the event of acceptance and possible employment, your documents will be transferred to your personnel file. If we are currently unable to offer you a position that matches your profile, but would like to consider your application for future vacancies, we ask for your consent to include your application in our applicant pool. The application data will be stored for a longer period of time. This consent is voluntary. You have the right to revoke this consent at any time.

Provision mandatory or required: The provision of personal data in the context of application processes is neither legally nor contractually required. You are therefore not obliged to provide any personal information. However, please note that this information is necessary for us to decide on your application or conclude a contract regarding employment with us. If you do not provide us with personal data, we will not be able to make a decision regarding the establishment of an employment relationship. We recommend that you only provide personal data that is necessary for the application process.

Right to object: Insofar as the processing of your personal data is carried out in accordance with Art. 6 (1) lit. f GDPR to safeguard legitimate interests, you have the right, in accordance with Art. 21 GDPR, to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights, and freedoms, or the processing must serve to assert, exercise, or defend legal claims. To exercise your rights, please contact us.

 

10. Use and application of various social networks

General information on the processing of your data: Eisenbau Krämer maintains numerous company profiles on various social networks and comparable platforms. This includes Facebook, LinkedIn, and Instagram. These profiles serve to promote the company and create contact channels for interested parties and customers. We regularly post links to these profiles on our website.

If you use our profiles on social networks to contact us (e.g., by creating your own posts, responding to one of our posts, or sending us private messages), the data you provide will be processed by us exclusively for the purpose of contacting you to process your request.

However, we would like to point out that when you visit our profiles on the above-mentioned networks, your personal data will also be collected, used, and stored by the operators of the respective social network. This also happens if you do not have a profile on the respective social network. The individual data processing operations and their scope vary depending on the operator of the respective social network and are not necessarily traceable by us. It is therefore also possible that your data may be processed by the provider of the respective platform for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and the resulting interests of the users. Such usage profiles can in turn be used, for example, to place advertisements within and outside the respective platforms that are likely to correspond to the interests of the users. Furthermore, data from the devices used by users, as well as location data and other so-called meta data, may also be stored in the usage profiles. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. In addition, most platforms use so-called tracking pixels.

For a detailed description of the respective processing operations and the options for objection (opt-out), we refer to the information provided by the respective providers linked below:

Facebook fan page

As the operator of a Facebook fan page, we can only view the information stored in your public Facebook profile, and only if you have such a profile and are logged in to it while visiting our fan page. In addition, Facebook provides us with anonymous usage statistics, which we use to improve the user experience when visiting our fan page. However, we do not have access to the individual usage data of visitors that Facebook collects to compile these statistics. We also do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR, including the legal basis, the identity of the controller, and the storage period of cookies on user devices. Facebook has committed to us that it will assume primary responsibility under the GDPR for the processing of this data, fulfill all obligations under the GDPR with regard to this data, and provide data subjects with the essential information regarding this obligation (see https://www.facebook.com/legal/terms/page_controller_addendum). Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) Privacy policy: https://www.facebook.com/about/privacy/

Information on Insight data:

https://www.facebook.com/legal/terms/information_about_page_insights_data

Instagram

Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)

Privacy policy: http://instagram.com/about/legal/privacy/

LinkedIn

LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland)

Privacy policy: https://www.linkedin.com/legal/privacy-policy

Legal

Communication data: Depending on the phase of contact, the following legal bases may apply to the processing of your data for communication with you:

• For the performance of pre-contractual measures or for the performance of a contract, this is Art. 6 para. 1 lit. b GDPR
• To fulfill legal obligations to which we are subject, this is Art. 6 1 lit. c GDPR
• To protect our legitimate interests, this is Art. 6 para. 1 lit. f GDPR
• If you have given us your consent to process your data, this is Art. 6 para. 1 lit. a GDPR

Other processing: The further data processing carried out within the framework of social networks serves our legitimate interest and that of the respective provider in improving the user experience when visiting our company profiles in a manner tailored to the target group. The legal basis for data processing is therefore Art. 6 para. 1 lit. f GDPR. If users are asked by the respective platform providers for consent to the aforementioned data processing, the legal basis for processing is Art. 6 para. 1 lit. a GDPR.

Duration of storage: We delete stored data as soon as it is no longer necessary for storage or you request us to delete it. In the event of statutory retention obligations (usually six or ten years), we restrict the processing of the stored data accordingly, unless longer storage is necessary to defend legal claims.

Recipients: We do not pass on the data we collect to third parties. However, we cannot exclude and have no influence on the extent to which the operators of the respective networks pass on your data to third parties (e.g., business partners, advertising companies, etc.).

Third country transfer: We would like to point out that visitor data on social networks may also be processed outside the European Union. This may result in risks for users, as it could, for example, make it more difficult to enforce user rights.

Your rights as a data subject: In addition to the section "Your rights as a data subject," we would like to point out that you can most effectively assert your rights, in particular requests for information, with the providers. Only the providers have access to the user data and can take appropriate measures and provide information directly. However, if you require assistance, please contact us.

 

11. Processors used for the operation of the website

Our website is technically maintained by processors. This means that all personal data may also be transferred to them. The processors are a host provider and the provider of the CMS (content management system). The website is operated with the involvement of the external service.

 

12. Your rights as a data subject

You can exercise the following rights at any time with regard to all data processing described above by contacting our data protection officer using the contact details provided:

• Information about your data stored by us and its processing (Art. 15 GDPR)
• Correction of inaccurate personal data (Art. 16 GDPR)
• Deletion of your data stored by us (Art. 17 GDPR)
• Restriction of data processing if we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR)
• Objection to the processing of your data by us (Art. 21 GDPR) and
• Data portability, provided that you have consented to data processing or have concluded a contract with us (Art. 20 GDPR)

If you have given us your consent, you can revoke it at any time with effect for the future. You can lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority of the federal state in which you reside or with the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

 

13. Further information

Objection to advertising emails

We hereby object to the use of contact data published within the scope of the imprint obligation for the purpose of sending unsolicited advertising and information material. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example through spam emails.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

No automated decision-making based on your personal data takes place in connection with the use of our online offering. Parts of the privacy policy were created with the help of the generator from activeMind AG.