Data Protection

1.   Applicability

This privacy policy shall apply to Wuppermann AG (hereinafter referred to as “Wuppermann”) and all affiliated companies in the Wuppermann group.

2.   Purpose of data processing

Wuppermann processes the personal data of employees, partners, customers and suppliers for the purpose of performing its business activities and fulfilling its legal and contractual requirements related to these activities.

2.1  Processing customer data

Wuppermann saves and processes the personal data obtained from interested parties and customers in order to prepare offers and to process commissioned assignments in addition to fulfilling its contractual and legal obligations related to these assignments. Furthermore, data is sent to public authorities and public agencies in order to meet legal obligations.

2.2  Job applicants

The contact information and application documents which are sent for a job application will be processed electronically by us for the purpose of selecting suitable candidates for employment.

In the event that an applicant is turned down for employment, the application documents will only be kept in our records if you give your consent.

2.3  Website & cookies

2.3.1 Collection of data

The Wuppermann Group website uses cookies to personalise content and advertisements, to provide social media functions and to analyse website traffic. We also share information about your use of our website with our social media, advertising and analysis partners. Our partners may combine this information with other information you have provided to them or that you have collected as part of your use of the services. By using our website, you give your consent to our cookies.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f DSGVO.

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a DSGVO if the user has given his consent to this.

Cookies are stored on the user's computer and are transmitted by the user to our site. Therefore, you as the user also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.

You can view the settings of the cookies used under the following link:

Renew or change your cookie consent

The personal data that you provide us with, e.g. by e-mail (such as your name and contact details) will only be processed for correspondence with you and only for the purpose for which you have provided us with the data.

2.3.3 Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before this happens. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de)

You can find more detailed information on this at www.google.com/intl/de/policies/privacy/ (general information on Google Analytics and data protection).

We would like to point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to guarantee an anonymized collection of IP addresses (so-called IP-Masking).

You can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website: Disable Google Analytics.

2.3.4 Integration of videos

The data controller has integrated YouTube components into this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television broadcasts, but also music videos, trailers or videos created by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. 

Each time the data subject accesses any of the individual pages of this website operated by the data controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the data subject's information technology system is automatically prompted by the relevant YouTube component to download a representation of the relevant YouTube component from YouTube. Further information about YouTube can be found at www.youtube.com/yt/about/de/. In the course of this technical procedure, YouTube and Google are informed which specific subpage of our website is visited by the person concerned.

If the person concerned is logged on to YouTube at the same time, YouTube recognizes which specific subpage of our website the person concerned is visiting by calling up a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.

YouTube and Google receive information via the YouTube component that the data subject has visited our website whenever the data subject is logged on to YouTube at the same time when he or she visits our website, regardless of whether or not the data subject clicks on a YouTube video. If the data subject does not wish this information to be transmitted to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before visiting our website.

2.3.5 Social Media Plug-Ins

We use the following social media plug-ins: LinkedIn, Youtube. Through the social media plug-ins you can communicate with these networks and "link" content from our site or write comments. Social media plug-ins enable direct communication between your device and the servers of social network providers. This allows them to communicate with you and collect information about your visit to our site. This processing is based on article 6 paragraph 1 sentence 1 lit. f DS-GVO. We use it to pursue our legitimate interest in enhancing your user experience and optimizing our services.

To prevent your visit to our pages from being comprehensively recorded and evaluated by providers of social media / social sharing functions, we use a script that replaces the usual share buttons. Only when you click on the button will your data be transferred and provide social networks with precise information about your surfing behavior (user tracking). We use the "Shariff script" developed by Heise.de for this purpose. You can find information about Shariff at: www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

Please note that we have no influence on the scope of the personal data collected by the respective plug-in provider, nor do we know for what purpose they are processed or how long they are stored.

For more information about the processing of your personal data by the providers, please refer to their respective privacy policies. In addition, you will receive further information about your rights and settings regarding data protection.

2.3.5.1 LinkedIn

Our website uses the "Share" button on the LinkedIn social network, which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn"). When you visit our website, the "Share" button establishes a direct connection between your browser and the LinkedIn server. LinkedIn will know that you have used your IP address to visit our website. If you click the "Share" button while you are logged into your LinkedIn account, you can share the contents of our pages on your LinkedIn profile. This allows LinkedIn to associate your visit to our site with your account.

We have no control over the amount of information LinkedIn collects about the button. Details of the data collection (purpose, scope) and any further processing and use of the data can be found in LinkedIn's privacy policy. You can find these notices at: www.linkedin.com/legal/privacy-policy

2.3.5.2 YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our sites equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged in to your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account or by using this opt-out: adssettings.google.com/authenticated

For more information on how user data is handled, please see the YouTube privacy policy at: www.google.de/intl/de/policies/privacy

2.3.5.3 Facebook

Our website uses the "Share" button of the social network Facebook, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). By clicking the "Share" button, you can share content from our website with your friends on Facebook.

When you visit a website on our website that contains such a button, your browser will establish a direct connection with Facebook's servers. The content of the "Share" button is transmitted directly from Facebook to your browser and integrated into the website by Facebook. We therefore have no influence on the extent of the data that Facebook collects with the button. Facebook claims to collect information when you visit third-party websites that use Facebook services (such as the "Share" button). This includes information about the websites you visit and your use of Facebook services on such websites. If you are logged in to Facebook at the same time you visit our website, Facebook receives, among other things, your user ID, the website you visited, the date and time of your visit, and other browser-related information.

The purpose and scope of data collection and the further processing and use of data by Facebook can be found in Facebook's notes on social plug-ins: de-de.facebook.com/help/443483272359009/

For more information on how Facebook handles personal data, please see the privacy policy: de-de.facebook.com/about/privacy/

2.3.5.4 Xing

Our website uses the "Share" button of the social network XING, which is operated by XING AG, Dammtorstraße 29 - 32, 20354 Hamburg, Germany ("XING"). By clicking the "Share" button, you can share content from our website with your contacts on XING.

If you call up a web page of our website that contains such a button, your browser does not yet establish a direct connection with the XING servers. The content of the "Share" button and other information about the visited website will only be transmitted to XING when you actively use the "Share" button. We have no influence on the amount of data that XING collects via the button.

For more information about privacy and the "Share" button on XING, please visit dev.xing.com/plugins/share_button/docs

The purpose and scope of data collection and the further processing and use of data by XING can be found in the XING privacy policy: www.xing.com/privacy

2.3.5.5 Vimeo

Our website uses the plugin Vimeo, which is operated by Vimeo, LLC (555 West 18th Street, New York, New York 10011).

As soon as you access our website, which is equipped with this plugin, a connection to the Vimeo servers is automatically established. This connection transmits which of our websites you have visited. If you are logged in to Vimeo during your visit, your usage behavior, such as visiting the corresponding pages or starting a video, is also assigned to your personal user account.

If you do not wish to have such an assignment, you should log out of your user account before visiting our website and delete the corresponding cookies from Vimeo.

For more information on data processing and information on data protection by Vimeo, please visit vimeo.com/privacy.

The legal basis is derived from the consent you have given us in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO.

2.3.6 Links to other websites

Our websites may contain links to websites of other providers. We have no influence on and do not check that other providers comply with the applicable data protection regulations.

3.   Principles for the processing of personal data

The processing of personal data is based on strict principles which consider the protection and security of data and the rights of the individuals to be of the highest priority.

Legality & transparency
Data processing is conducted in a fair and lawful manner. The person concerned will be informed of data collection, the processing envisaged and the handling of the data. At a minimum, the person concerned will be informed of the following points:

  • Person responsible for data processing
  • Purpose of data processing
  • Legal basis for the processing

Purpose limitation
The data is collected and processed for predetermined, clear and legitimate purposes. The processing of the data will not occur in a manner which is not in line with these purposes.

Data minimisation
Only data which is absolutely essential is collected and processed. If it is possible to use for achieving the objective at hand and the effort involved is reasonable, only anonymized data will be processed

Storage limits and deletion
Personal data is deleted as soon as the objective for which it was originally collected ends and as long as legal retention periods do not prevent its deletion.

If, in individual cases, legitimate interests in this data exist, it will continue to be retained until legal matters relating to the legitimate interest have been clarified.

Data security
Data secrecy applies to all personal data. The data is handled confidentially and is protected by taking appropriate organisational and technical measures against unauthorised access, unlawful manipulation or transfer, and loss and destruction.

Factual accuracy
Personal data must be retained correctly and be complete and up-to-date. Appropriate measures are taken to correct old, incorrect or incomplete data.

4. Obligation to observe data secrecy

All of Wuppermann’s employees as well as the employees of affiliated companies are contractually required to maintain confidentiality. They are advised and trained on a regular basis in how to safely handle personal data or other critical data. 

5. Data security

The protection of confidentiality, availability and integrity of data is one of Wuppermann’s main tasks. This applies to confidential business information, customer data, personal data and other critical information.

For this purpose, technical and organisational security measures are taken using state-of-the-art technology and internationally recognised best practices and security standards, and these measures are improved on an ongoing basis.

6.   Data protection officer

Please contact us by post or email at the addresses listed below for enquiries regarding the collection, processing or use of your personal data or for obtaining information, making corrections, or blocking or deleting data. At the addresses below, you can enquire about the data we have saved, have it changed, blocked or deleted at any time.

The responsible bodies as defined in the EU General Data Protection Regulation (EU-GDPR) is:

Leverkusen, Deutschland
Ottostraße 5
D-51381 Leverkusen
Telefon +49 2171 50 00 800
datenschutz(at)wuppermann.com

Moerdijk, Niederlande
Vlasweg 15
Havenno. 175
NL-4782 PW Moerdijk
Telefon +31 168 357 100
gegevensbescherming_wsn(at)wuppermann.com

Altmünster, Österreich
Großalmstraße 7
A-4813 Altmünster
Telefon +43 50 910 500
datenschutz_wmt(at)wuppermann.com

Judenburg, Österreich
Gußstahlwerkstraße 23
A-8750 Judenburg
Telefon +43 50 910 400
datenschutz_wa(at)wuppermann.com

Małomice, Polen
Ul. Fabryczna 3
PL-67-320 Malomice
Telefon +48 68 3780 - 101
rodo_wpl(at)wuppermann.com

Györ, Ungarn
H-9071 Gönyű, 098/2 Hrsz
Telefon + 36 30 515 3685
adatvedelem_wh(at)wuppermann.com

Bukarest, Rumänien
Str. Frumoasa Nr. 41, Pod, Birou 2 Sector 1
RO-010986 Bucureşti
Romania
Telefon +40 (0) 31 620 08 66
protectiadatelor_ro(at)wuppermann.com

7.   Rights of the person concerned

Every individual whose personal data is processed by Wuppermann has the opportunity to assert his or her own rights at any time and to exercise these rights with Wuppermann’s data protection officer.

To exercise your rights as the person concerned, you can contact Wuppermann at any time by email by sending your requests to datenschutz@wuppermann.com or by post at the contact address of the respective body responsible.

Information
The persons concerned can request information at any time into which personal information about them is being processed and what purposes the processing will serve.

Rectification
The persons concerned have the right to demand that any incorrect personal data pertaining to them be corrected without delay.

Limitation
The persons concerned have the right to limit processing if the accuracy of the data concerned is in dispute, the processing is unlawful, the data for the processing is no longer required, or if the individuals concerned have objected to its processing.

Objection
The persons concerned have the right to object to the processing of personal data that relates to them at any time.

Transferability
The persons concerned have the right to receive the personal data pertaining to them which they have made available to Wuppermann in a structured, conventional and machine-readable format. They also have the right to request that this data be transferred to another responsible party provided it is technically feasible.

The transferability shall only apply to personal data which is processed with the help of automated processing methods.

Deletion – the right to be forgotten
The person concerned has the right to demand the immediate deletion of the personal data pertaining to him/her if there is no legal basis for processing the data or it ceases to exist, the data processing objected to, the data processing is unlawful and no legally required retention periods prevent its deletion.

Data security has also been given high priority with respect to the rights of the persons concerned, which is why the assertion of rights of the person concerned is only possible after the person concerned has been identified beyond any doubt.

Furthermore, you have the right to file a complaint at the Data Protection Authority at any time.

8.   Data transmission

Transmission of personal data to a recipient outside of the corporate group or to recipients in EU third countries will only be carried out in a lawful manner in accordance with applicable laws while respecting the highest level of confidentiality and data security.

As part of executing processing on a group-wide basis, personal data is exchanged between companies within the Wuppermann Group.

Wuppermann employs the services of several different processors for data processing. All processors have a contractual obligation to comply with applicable legal regulations for data protection.

9.   Continuous monitoring and improvements

Wuppermann places great importance on making continual improvements to quality and processes.  

Compliance with data protection regulations, applicable laws and the efficacy of measures taken for data protection and data security are monitored and improved on an ongoing basis, so that we can guarantee optimal implementation of data protection measures.