Data Protection
1. Applicability
This privacy policy shall apply to Wuppermann AG (hereinafter referred to as “Wuppermann”) and all affiliated companies in the Wuppermann group.
2. Purpose of data processing
Wuppermann processes the personal data of employees, partners, customers and suppliers for the purpose of performing its business activities and fulfilling its legal and contractual requirements related to these activities.
2.1 Processing customer data
Wuppermann saves and processes the personal data obtained from interested parties and customers in order to prepare offers and to process commissioned assignments in addition to fulfilling its contractual and legal obligations related to these assignments. Furthermore, data is sent to public authorities and public agencies in order to meet legal obligations.
2.2 Job applicants
The contact information and application documents which are sent for a job application will be processed electronically by us for the purpose of selecting suitable candidates for employment.
In the event that an applicant is turned down for employment, the application documents will only be kept in our records if you give your consent.
2.3 Website & cookies
2.3.1 Collection of data
The Wuppermann Group website uses cookies to personalise content and advertisements, to provide social media functions and to analyse website traffic. We also share information about your use of our website with our social media, advertising and analysis partners. Our partners may combine this information with other information you have provided to them or that you have collected as part of your use of the services. By using our website, you give your consent to our cookies.
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f DSGVO.
The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a DSGVO if the user has given his consent to this.
Cookies are stored on the user's computer and are transmitted by the user to our site. Therefore, you as the user also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.
You can view the settings of the cookies used under the following link: Renew or change your cookie consent
The personal data that you provide us with, e.g. by e-mail (such as your name and contact details) will only be processed for correspondence with you and only for the purpose for which you have provided us with the data.
2.3.3 Web analysis through Matomo
We use the open source software tool Matomo (formerly PIWIK) on our website to analyse the surfing behaviour of our users. This is an open source tool for web analysis. Matomo does not transmit data to servers that are outside the control of Wuppermann. Matomo does not collect session data without your consent.
Matomo uses cookies. These text files are stored on your computer and enable Wuppermann to analyse the use of its website. For this purpose, the information on usage obtained by the cookie is transmitted to Wuppermann's server and stored so that usage behaviour can be evaluated. Your IP address is an anonymous identifier for us; we have no technical means of identifying you as a registered user. You remain anonymous as a user.
Wuppermann sees this analysis as part of its Internet service. It wants to use it to further improve the website and adapt it even more to the needs of the users.
If you agree to web analysis using Matomo, the following data is collected when you call up individual pages of our website:
(1) 2 bytes of the IP address of the user's calling system.
(2) The web page called up
(3) The website from which the user accessed the accessed website (referrer)
(4) The sub-pages called up from the called-up website
(5) The time spent on the website
(6) The frequency with which the website is accessed
The software runs exclusively on the servers of our website. Personal data of the users is only stored there. The data is not passed on to third parties.
You can view the settings of the cookies used at the following link: Renew or change your cookie consent
2.3.4 Integration of videos
The data controller has integrated YouTube components into this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television broadcasts, but also music videos, trailers or videos created by users themselves can be accessed via the Internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time the data subject accesses any of the individual pages of this website operated by the data controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the data subject's information technology system is automatically prompted by the relevant YouTube component to download a representation of the relevant YouTube component from YouTube. Further information about YouTube can be found at www.youtube.com/yt/about/de/. In the course of this technical procedure, YouTube and Google are informed which specific subpage of our website is visited by the person concerned.
If the person concerned is logged on to YouTube at the same time, YouTube recognizes which specific subpage of our website the person concerned is visiting by calling up a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.
YouTube and Google receive information via the YouTube component that the data subject has visited our website whenever the data subject is logged on to YouTube at the same time when he or she visits our website, regardless of whether or not the data subject clicks on a YouTube video. If the data subject does not wish this information to be transmitted to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before visiting our website.
Wuppermann does not collect or process any personal data via YouTube. The transfer of personal data by Google, in particular to third countries, is outside Wuppermann's area of responsibility. Wuppermann cannot be held liable in this respect.
2.3.5 Social Media Plug-Ins
We use the following social media plug-ins: LinkedIn, Youtube. Through the social media plug-ins you can communicate with these networks and "link" content from our site or write comments. Social media plug-ins enable direct communication between your device and the servers of social network providers. This allows them to communicate with you and collect information about your visit to our site. This processing is based on article 6 paragraph 1 sentence 1 lit. f DS-GVO. We use it to pursue our legitimate interest in enhancing your user experience and optimizing our services.
To prevent your visit to our pages from being comprehensively recorded and evaluated by providers of social media / social sharing functions, we use a script that replaces the usual share buttons. Only when you click on the button will your data be transferred and provide social networks with precise information about your surfing behavior (user tracking). We use the "Shariff script" developed by Heise.de for this purpose. You can find information about Shariff at: www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html
Please note that we have no influence on the scope of the personal data collected by the respective plug-in provider, nor do we know for what purpose they are processed or how long they are stored.
For more information about the processing of your personal data by the providers, please refer to their respective privacy policies. In addition, you will receive further information about your rights and settings regarding data protection.
2.3.5.1 LinkedIn
Our website uses the "Share" button on the LinkedIn social network, which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn"). When you visit our website, the "Share" button establishes a direct connection between your browser and the LinkedIn server. LinkedIn will know that you have used your IP address to visit our website. If you click the "Share" button while you are logged into your LinkedIn account, you can share the contents of our pages on your LinkedIn profile. This allows LinkedIn to associate your visit to our site with your account.
We have no influence on the scope of the data that LinkedIn collects via the button. In what way LinkedIn uses the data from visits to LinkedIn pages for its own purposes, to what extent activities on the LinkedIn page are assigned to individual users, how long LinkedIn stores this data and whether data from a visit to the LinkedIn page is passed on to third parties, is not conclusively and clearly stated by LinkedIn and is not known to us. Details on data collection (purpose, scope) as well as further processing and use of the data can be found in LinkedIn's data protection information. You can find this information at: www.linkedin.com/legal/privacy-policy
We, as the provider of a LinkedIn company page, do not collect and process any further data from your use of our service.
2.3.5.2 YouTube
Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our sites equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.
If you are logged in to your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account or by using this opt-out: adssettings.google.com/authenticated
For more information on how user data is handled, please see the YouTube privacy policy at: www.google.de/intl/de/policies/privacy
2.3.5.3 Facebook
Our website uses the "Share" button of the social network Facebook, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). By clicking the "Share" button, you can share content from our website with your friends on Facebook.
When you visit a website on our website that contains such a button, your browser will establish a direct connection with Facebook's servers. The content of the "Share" button is transmitted directly from Facebook to your browser and integrated into the website by Facebook. We therefore have no influence on the extent of the data that Facebook collects with the button. Facebook claims to collect information when you visit third-party websites that use Facebook services (such as the "Share" button). This includes information about the websites you visit and your use of Facebook services on such websites. If you are logged in to Facebook at the same time you visit our website, Facebook receives, among other things, your user ID, the website you visited, the date and time of your visit, and other browser-related information.
The purpose and scope of data collection and the further processing and use of data by Facebook can be found in Facebook's notes on social plug-ins: de-de.facebook.com/help/443483272359009/
For more information on how Facebook handles personal data, please see the privacy policy: de-de.facebook.com/about/privacy/
2.3.5.4 Xing
Our website uses the "Share" button of the social network XING, which is operated by XING AG, Dammtorstraße 29 - 32, 20354 Hamburg, Germany ("XING"). By clicking the "Share" button, you can share content from our website with your contacts on XING.
If you call up a web page of our website that contains such a button, your browser does not yet establish a direct connection with the XING servers. The content of the "Share" button and other information about the visited website will only be transmitted to XING when you actively use the "Share" button. We have no influence on the amount of data that XING collects via the button.
For more information about privacy and the "Share" button on XING, please visit dev.xing.com/plugins/share_button/docs
The purpose and scope of data collection and the further processing and use of data by XING can be found in the XING privacy policy: www.xing.com/privacy
2.3.5.5 Vimeo
Our website uses the plugin Vimeo, which is operated by Vimeo, LLC (555 West 18th Street, New York, New York 10011).
As soon as you access our website, which is equipped with this plugin, a connection to the Vimeo servers is automatically established. This connection transmits which of our websites you have visited. If you are logged in to Vimeo during your visit, your usage behavior, such as visiting the corresponding pages or starting a video, is also assigned to your personal user account.
If you do not wish to have such an assignment, you should log out of your user account before visiting our website and delete the corresponding cookies from Vimeo.
For more information on data processing and information on data protection by Vimeo, please visit vimeo.com/privacy.
The legal basis is derived from the consent you have given us in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO.
2.3.6 Links to other websites
Our websites may contain links to websites of other providers. We have no influence on and do not check that other providers comply with the applicable data protection regulations.
3. Principles for the processing of personal data
The processing of personal data is based on strict principles which consider the protection and security of data and the rights of the individuals to be of the highest priority.
Legality & transparency
Data processing is conducted in a fair and lawful manner. The person concerned will be informed of data collection, the processing envisaged and the handling of the data. At a minimum, the person concerned will be informed of the following points:
- Person responsible for data processing
- Purpose of data processing
- Legal basis for the processing
Purpose limitation
The data is collected and processed for predetermined, clear and legitimate purposes. The processing of the data will not occur in a manner which is not in line with these purposes.
Data minimisation
Only data which is absolutely essential is collected and processed. If it is possible to use for achieving the objective at hand and the effort involved is reasonable, only anonymized data will be processed
Storage limits and deletion
Personal data is deleted as soon as the objective for which it was originally collected ends and as long as legal retention periods do not prevent its deletion.
If, in individual cases, legitimate interests in this data exist, it will continue to be retained until legal matters relating to the legitimate interest have been clarified.
Data security
Data secrecy applies to all personal data. The data is handled confidentially and is protected by taking appropriate organisational and technical measures against unauthorised access, unlawful manipulation or transfer, and loss and destruction.
Factual accuracy
Personal data must be retained correctly and be complete and up-to-date. Appropriate measures are taken to correct old, incorrect or incomplete data.
4. Obligation to observe data secrecy
All of Wuppermann’s employees as well as the employees of affiliated companies are contractually required to maintain confidentiality. They are advised and trained on a regular basis in how to safely handle personal data or other critical data.
5. Data security
The protection of confidentiality, availability and integrity of data is one of Wuppermann’s main tasks. This applies to confidential business information, customer data, personal data and other critical information.
For this purpose, technical and organisational security measures are taken using state-of-the-art technology and internationally recognised best practices and security standards, and these measures are improved on an ongoing basis.
6. Data protection officer
Please contact us by post or email at the addresses listed below for enquiries regarding the collection, processing or use of your personal data or for obtaining information, making corrections, or blocking or deleting data. At the addresses below, you can enquire about the data we have saved, have it changed, blocked or deleted at any time.
The responsible bodies as defined in the EU General Data Protection Regulation (EU-GDPR) is:
Leverkusen, Deutschland
Ottostraße 5
D-51381 Leverkusen
Telefon +49 2171 50 00 800
datenschutz(at)wuppermann.com
Moerdijk, Niederlande
Vlasweg 15
Havenno. 175
NL-4782 PW Moerdijk
Telefon +31 168 357 100
gegevensbescherming_wsn(at)wuppermann.com
Altmünster, Österreich
Großalmstraße 7
A-4813 Altmünster
Telefon +43 50 910 500
datenschutz_wmt(at)wuppermann.com
Judenburg, Österreich
Gußstahlwerkstraße 23
A-8750 Judenburg
Telefon +43 50 910 400
datenschutz_wa(at)wuppermann.com
Małomice, Polen
Ul. Fabryczna 3
PL-67-320 Malomice
Telefon +48 68 3780 - 101
rodo_wpl(at)wuppermann.com
Györ, Ungarn
H-9071 Gönyű, 098/2 Hrsz
Telefon + 36 30 515 3685
adatvedelem_wh(at)wuppermann.com
Bukarest, Rumänien
Str. Frumoasa Nr. 41, Pod, Birou 2 Sector 1
RO-010986 Bucureşti
Romania
Telefon +40 (0) 31 620 08 66
protectiadatelor_ro(at)wuppermann.com
7. Rights of the person concerned
Every individual whose personal data is processed by Wuppermann has the opportunity to assert his or her own rights at any time and to exercise these rights with Wuppermann’s data protection officer.
To exercise your rights as the person concerned, you can contact Wuppermann at any time by email by sending your requests to or by post at the contact address of the respective body responsible.
Information
The persons concerned can request information at any time into which personal information about them is being processed and what purposes the processing will serve.
Rectification
The persons concerned have the right to demand that any incorrect personal data pertaining to them be corrected without delay.
Limitation
The persons concerned have the right to limit processing if the accuracy of the data concerned is in dispute, the processing is unlawful, the data for the processing is no longer required, or if the individuals concerned have objected to its processing.
Objection
The persons concerned have the right to object to the processing of personal data that relates to them at any time.
Transferability
The persons concerned have the right to receive the personal data pertaining to them which they have made available to Wuppermann in a structured, conventional and machine-readable format. They also have the right to request that this data be transferred to another responsible party provided it is technically feasible.
The transferability shall only apply to personal data which is processed with the help of automated processing methods.
Deletion – the right to be forgotten
The person concerned has the right to demand the immediate deletion of the personal data pertaining to him/her if there is no legal basis for processing the data or it ceases to exist, the data processing objected to, the data processing is unlawful and no legally required retention periods prevent its deletion.
Data security has also been given high priority with respect to the rights of the persons concerned, which is why the assertion of rights of the person concerned is only possible after the person concerned has been identified beyond any doubt.
Furthermore, you have the right to file a complaint at the Data Protection Authority at any time.
8. Data transmission
Transmission of personal data to a recipient outside of the corporate group or to recipients in EU third countries will only be carried out in a lawful manner in accordance with applicable laws while respecting the highest level of confidentiality and data security.
As part of executing processing on a group-wide basis, personal data is exchanged between companies within the Wuppermann Group.
Wuppermann employs the services of several different processors for data processing. All processors have a contractual obligation to comply with applicable legal regulations for data protection.
9. Continuous monitoring and improvements
Wuppermann places great importance on making continual improvements to quality and processes.
Compliance with data protection regulations, applicable laws and the efficacy of measures taken for data protection and data security are monitored and improved on an ongoing basis, so that we can guarantee optimal implementation of data protection measures.