2. Purpose of data processing
Wuppermann processes the personal data of employees, partners, customers and suppliers for the purpose of performing its business activities and fulfilling its legal and contractual requirements related to these activities.
2.1 Processing customer data
Wuppermann saves and processes the personal data obtained from interested parties and customers in order to prepare offers and to process commissioned assignments in addition to fulfilling its contractual and legal obligations related to these assignments. Furthermore, data is sent to public authorities and public agencies in order to meet legal obligations.
2.2 Job applicants
The contact information and application documents which are sent for a job application will be processed electronically by us for the purpose of selecting suitable candidates for employment.
In the event that an applicant is turned down for employment, the application documents will only be kept in our records if you give your consent.
2.3 Website & cookies
2.3.1. Data collection
The IP address currently being used by your PC, the date and time, the type of browser being used, your PC’s operating system and the pages you view are recorded when you visit our website. However, these records do not enable us to infer anything about your personal data, nor is it our intention to do so.
The personal data which you send us, for example by email (e.g. your name and your contact information), will only be processed for corresponding with you and only for the purpose that you have made it available to us.
We assure you that your personal data will not be disclosed to third parties unless we are obliged to do so by law or you have given your express consent. If and when we use the services of third-party providers to implement and complete the processing steps, the provisions in the German Federal Data Protection Act [Bundesdatenschutzgesetzes – BDSG] will be complied with.
2.3.2. Duration of data retention
Personal data which is sent to us via our website will only be saved for the length of time that is necessary to fulfil the objective for which you sent it to us.
2.3.3. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how you use the site. The information generated by the cookie about your use of the website is normally transmitted to and stored by Google on servers in the United States. If IP anonymisation is activated on this website, Google will, however, truncate your IP address within the Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases is the entire IP address transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling website activity reports, and providing the website operator with other services relating to website activity and internet use. The IP address transmitted from your browser as part of the Google Analytics process will not be associated by Google with other data. You may prevent the cookies from being saved by means of the appropriate settings in your browser software; please note, however, that this may deprive you of the ability to make full use of all the functions this website offers. Furthermore, you can prevent the data generated by the cookie and relating to your use of the website (including your IP address) from being collected by Google, and prevent Google from processing these data, by downloading and installing the browser plugin available through the following link: https://tools.google.com/dlpage/gaoptout?hl=en
For more information, go to http://www.google.com/intl/en/policies/privacy/ (general information on Google Analytics and data privacy).
Please note that on this website Google Analytics uses the additional code “gat._anonymizeIp();” to ensure that IP addresses are collected anonymously (through “IP masking”).
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set on the computer which prevents the future collection of your data when visiting this website:
Disable Google Analytics.
2.3.4. Integration of videos
YouTube components have been integrated into this website by the data controller. YouTube is an online video portal that enables video publishers to upload video-clips that other users can watch, rate and comment on, free of charge. YouTube permits the publication of all types of videos, which means that complete films and television programmes, as well as music videos, trailers and videos produced by users themselves, are all available via the online portal.
YouTube’s operating company is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Whenever one of the individual pages of this website operated by the data controller and containing a YouTube component (YouTube video) is accessed, the relevant YouTube component causes the automatic display of the corresponding YouTube component by the internet browser of the data subject’s IT system. Further information about YouTube can be viewed at https://www.youtube.com/yt/about/de/. In the course of this technical procedure, YouTube and Google are informed which specific pages of our website are visited by the data subject.
If the data subject concerned is logged into YouTube when one of our webpages containing a YouTube video is accessed, YouTube can tell which specific webpage has been visited by the data subject concerned. This information is collected by YouTube and Google and attributed to the relevant data subject’s YouTube account.
If the data subject is logged into YouTube at the same time as he/she visits our website, YouTube and Google will always receive information (via the YouTube component) that the relevant data subject has visited our website; this is the case regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not wish such information to be transmitted to YouTube and Google, the data subject can prevent this by logging out of his/her YouTube account before visiting our website.
The data protection provisions published by YouTube can be viewed at https://www.google.de/intl/de/policies/privacy/. They provide information about the collection, processing and use of personal data by YouTube and Google.
3. Principles for the processing of personal data
The processing of personal data is based on strict principles which consider the protection and security of data and the rights of the individuals to be of the highest priority.
Legality & transparency
Data processing is conducted in a fair and lawful manner. The person concerned will be informed of data collection, the processing envisaged and the handling of the data. At a minimum, the person concerned will be informed of the following points:
- Person responsible for data processing
- Purpose of data processing
- Legal basis for the processing
The data is collected and processed for predetermined, clear and legitimate purposes. The processing of the data will not occur in a manner which is not in line with these purposes.
Only data which is absolutely essential is collected and processed. If it is possible to use for achieving the objective at hand and the effort involved is reasonable, only anonymized data will be processed
Storage limits and deletion
Personal data is deleted as soon as the objective for which it was originally collected ends and as long as legal retention periods do not prevent its deletion.
If, in individual cases, legitimate interests in this data exist, it will continue to be retained until legal matters relating to the legitimate interest have been clarified.
Data secrecy applies to all personal data. The data is handled confidentially and is protected by taking appropriate organisational and technical measures against unauthorised access, unlawful manipulation or transfer, and loss and destruction.
Personal data must be retained correctly and be complete and up-to-date. Appropriate measures are taken to correct old, incorrect or incomplete data.
4. Obligation to observe data secrecy
All of Wuppermann’s employees as well as the employees of affiliated companies are contractually required to maintain confidentiality. They are advised and trained on a regular basis in how to safely handle personal data or other critical data.
5. Data security
The protection of confidentiality, availability and integrity of data is one of Wuppermann’s main tasks. This applies to confidential business information, customer data, personal data and other critical information.
For this purpose, technical and organisational security measures are taken using state-of-the-art technology and internationally recognised best practices and security standards, and these measures are improved on an ongoing basis.
6. Data protection officer
Please contact us by post or email at the addresses listed below for enquiries regarding the collection, processing or use of your personal data or for obtaining information, making corrections, or blocking or deleting data. At the addresses below, you can enquire about the data we have saved, have it changed, blocked or deleted at any time.
The responsible bodies as defined in the EU General Data Protection Regulation (EU-GDPR) is:
Telefon +49 2171 50 00 800
NL-4782 PW Moerdijk
Telefon +31 168 357 100
Telefon +43 50 910 500
Telefon +43 50 910 400
Ul. Fabryczna 3
Telefon +48 68 3780 - 101
H-9071 Gönyű, 098/2 Hrsz
Telefon + 36 30 515 3685
Str. Frumoasa Nr. 41, Pod, Birou 2 Sector 1
Telefon +40 (0) 31 620 08 66
7. Rights of the person concerned
Every individual whose personal data is processed by Wuppermann has the opportunity to assert his or her own rights at any time and to exercise these rights with Wuppermann’s data protection officer.
To exercise your rights as the person concerned, you can contact Wuppermann at any time by email by sending your requests to firstname.lastname@example.org or by post at the contact address of the respective body responsible.
The persons concerned can request information at any time into which personal information about them is being processed and what purposes the processing will serve.
The persons concerned have the right to demand that any incorrect personal data pertaining to them be corrected without delay.
The persons concerned have the right to limit processing if the accuracy of the data concerned is in dispute, the processing is unlawful, the data for the processing is no longer required, or if the individuals concerned have objected to its processing.
The persons concerned have the right to object to the processing of personal data that relates to them at any time.
The persons concerned have the right to receive the personal data pertaining to them which they have made available to Wuppermann in a structured, conventional and machine-readable format. They also have the right to request that this data be transferred to another responsible party provided it is technically feasible.
The transferability shall only apply to personal data which is processed with the help of automated processing methods.
Deletion – the right to be forgotten
The person concerned has the right to demand the immediate deletion of the personal data pertaining to him/her if there is no legal basis for processing the data or it ceases to exist, the data processing objected to, the data processing is unlawful and no legally required retention periods prevent its deletion.
Data security has also been given high priority with respect to the rights of the persons concerned, which is why the assertion of rights of the person concerned is only possible after the person concerned has been identified beyond any doubt.
Furthermore, you have the right to file a complaint at the Data Protection Authority at any time.
8. Data transmission
Transmission of personal data to a recipient outside of the corporate group or to recipients in EU third countries will only be carried out in a lawful manner in accordance with applicable laws while respecting the highest level of confidentiality and data security.
As part of executing processing on a group-wide basis, personal data is exchanged between companies within the Wuppermann Group. Sharing this information is regulated by a set of rules known as Binding Corporate Rules, which outlines uniform standards for protecting and processing data in a legally compliant manner.
Wuppermann employs the services of several different processors for data processing. All processors have a contractual obligation to comply with applicable legal regulations for data protection.
9. Continuous monitoring and improvements
Wuppermann places great importance on making continual improvements to quality and processes.
Compliance with data protection regulations, applicable laws and the efficacy of measures taken for data protection and data security are monitored and improved on an ongoing basis, so that we can guarantee optimal implementation of data protection measures.