Privacy statement and information about data processing

We are delighted that you are taking an interest in our company. Joh. Sprinz GmbH & Co KG. takes the protection of personal data very seriously. Sprinz GmbH & Co KG.

Personal data are any data that allow you to be identified as a person.

If we receive an enquiry or you want to use the services of our company via our website or if you have any other contractually based business relationship with us or you are seeking to establish such a relationship, we may need to process your personal data.

If processing personal data is necessary and there is no statutory basis for such processing, we normally obtain consent from you as the data subject.

You can always use the Joh. Sprinz GmbH & Co KG website without sharing any of your personal data. When you visit our website, your surfing pattern may be statistically evaluated. However, this is done anonymously and does not provide information allowing the personal identification of yourself as a visitor. You may object to this analysis. Further details on this point can be found in the following privacy policy.

This data protection information applies to data processing by:

Controller:
Joh. Sprinz GmbH & Co KG (hereinafter referred to as Sprinz), Lagerstr. 13, 88287 Ravensburg, Germany
E-mail: info@sprinz.eu
Telephone: 0049 (0)751 379 950
Fax: 0049 (0)751 379 9562
Website: www.sprinz.eu

If you require information or have any suggestions, you may contact the data protection officer at Sprinz at any time at the above address; please address the letter for the attention of Dr. Thomas Härle, or online at datenschutzbeauftragter@sprinz.eu.

• Use of our website
• Subscription to our newsletter
• Using the contact and enquiry form on our website
• Enquiries by email, phone or fax
• Job applications and application procedure
• Business relations with commercial customers and suppliers

1. Use of our website, collection of general data and information

The use of our website www.sprinz.eu is always possible without any provision of personal data.

a.
When you access our website www.sprinz.eu, the browser you use on your computer will automatically send information to our website's server. This information is temporarily stored in a log file (server log files). The following information is recorded without the need for any action on your part and stored until automatic erasure:

IP address of the accessing computer
Time and date of access
Name and URL of the requested file
Website from which access is initiated (Referrer URL)
The browser used and, if applicable, the operating system of your computer and the name of your access provider

This data is not merged with other data sources.

b.Cookies
Our website www.sprinz.eu uses cookies. These are text files which make it possible to store user-specific information on the user's device when the user visits the website. Cookies also allow us in particular to assess the frequency of use and the number of users of our website, to analyse the use of pages and also to arrange information on our website to make it more convenient for customers. Cookies are stored after the end of a browser session and can be called up again when you next visit our website.

You can adjust the settings in the browser so that you are informed before cookies are set, meaning that you can allow cookies only in an individual case, exclude acceptance of cookies in particular cases or all the time, and activate the option for automatic deletion of cookies when you close the browser. If you deactivate the setting of cookies in the internet browser used, not all functions of our website may be fully available under certain circumstances. You can always delete cookies that have already been set via your internet browser or other software programs.

c.The integrated analysis tool "Google Analytics"
To allow the statistical evaluation of visitors accessing our website, www.sprinz.eu, we use the functions of the web analysis service Google Analytics.

IP anonymisation
We have enabled the IP anonymised function for this website. This means that Google carries out anonymisation within Member States of the European Union and European Economic Area, whereby your IP address is truncated before being sent to the United States. The full IP address will only be sent to a Google server in the USA and truncated there in exceptional cases. On behalf of the operator of this website, Google will use this information in order to analyse your use of the website, to compile reports about website activities and to render further services associated with website use and internet use for the website operator. The IP address transferred from your browser under Google Analytics will not be merged with other Google data.

Browser plug-in
You can prevent the storage of cookies through suitable settings in your browser software (see also II.1.b §Cookies); however, we draw your attention to the fact that in this case you may not be able to make full use of all the functions of the website. Furthermore, if you wish to prevent the collection of data generated by cookies about your site use (incl. your IP address) and if you wish to opt out of such data being processed by Google, you can download and install a browser plug-in from the following link:

https://tools.google.com/dlpage/gaoptout?hl=en

Objecting to the collection of data
To prevent data collection by Google Analytics, click on the link below. This sets an opt-out cookie which prevents the collection of your data when you visit our website in the future.

Disable Google Analytics.

Further details on the way Google Analytics treats user data can be found in the Google privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en

Contract processing
We have concluded a contract processing agreement with Google, and we fully apply the strict specifications of the German data protection authorities in the use of Google Analytics.

Demographics under Google Analytics
This website uses the demographics function of Google Analytics, which makes it possible to generate reports showing details of site visitors’ ages, genders and interests. These data relate to interest-related Google advertising as well as visitor data of third-party suppliers. They do not permit the tracking of individual persons. However, you can disable this function via the display settings in your Google account at any time, or you can stop the recording of your data by Google Analytics, as detailed under “Objecting to the collection of data”.

Duration of storage
Any user data and event-specific data saved by Google and associated with cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising IDs) are anonymised or erased after 50 months. Details are available via the following link:

https://support.google.com/analytics/answer/7667196?hl=de

d. Purpose of data processing
We process the data mentioned under a.–c. for the following purposes:

• To guarantee a smooth connection to the website.
• To guarantee convenient use of our website.
• To analyse system security and stability.
• General administrative purposes, in particular optimisation of the information and contents of our website as well as our online product presentations

The legal basis for the data processing is Art. 6 (1) s. 1 f GDPR. Our legitimate interest arises from the above-listed purposes of data collection. Under no circumstances will we use the collected data to identify you personally.

2. Newsletter subscription

If you subscribe to our newsletter, we will use your e-mail address to send you our newsletters on a regular basis insofar as you have given your consent in accordance with Art. 6 (1) a GDPR. Provision of an e-mail address is sufficient to receive our newsletter. You may unsubscribe at any time, e.g. via a link at the end of each newsletter. Alternatively, you can send your unsubscribe request by e-mail to datenschutzbeauftragter@sprinz.eu at any time.

3. Using the contact and enquiry form on our website

If you use the contact and enquiry form on our website to contact us for any purpose, we can only reply if you provide us with a valid e-mail address. Otherwise we do not know who the enquiry comes from and cannot reply.

The provision of further information such as your name and residential address is not compulsory although it is recommended so that we may process your enquiry as efficiently as possible.

Processing data for the purpose of contacting us takes place in accordance with Art. 6 (1) s. 1 a GDPR provided you have granted consent voluntarily. Personal data collected by us associated with use of the contact form will be stored for the time of processing and erased automatically when your enquiry has been dealt with.

4. Enquiries by e-mail, phone or fax

If you contact us by email, phone or fax, your request and all the personal data specified therein (name, request) will be stored and processed by us for the purpose of dealing with your request. This data will not be disclosed to third parties without your consent. They will be processed on the basis of Art. 6 (1) b GDPR if your request relates to the performance of a contract or if they are required by us to conduct pre-contractual measures. In all other cases processing is based on your consent (Art. 6 (1) a GDPR) and/or on our legitimate interest (Art. 6 (1) f GDPR), as we have a legitimate interest in the effective processing of enquiries presented to us.

Any data you send us via contact requests is stored by us until you ask us to erase it or until you revoke your consent to storage or until data storage ceases to serve its purpose (e.g. after concluding the processing of your request). This does not affect mandatory statutory provisions, especially statutory retention periods.

5. Job applications and application procedure

a. Submission of an application
We give you the option of applying to us for jobs (e.g. by email, by post or via an online application form). Below, you will find information about the extent, scope and use of your personal data collected in the application process. Please be assured that your data will be collected, processed and used in compliance with applicable data protection laws and all other legal provisions and that it will be treated with strict confidentiality.

b. Scope and purpose of data collection
When you send us an application, we will process your personal data (e.g. contact and communication data, application documents, interview notes, etc.) to the extent that it is required for a decision which might eventually give rise to employment. The legal basis is section 26 of the German Data Protection Act (BDSG) (preparation of an employment relationship), Art. 6 (1) b GDPR (general preparation of contract) and – if you have given your consent – Art. 6 (1) a GDPR. This consent can be revoked at any time. Your personal data will be shared exclusively with persons within our company who process your application. If your application is successful, your submitted data will be stored by us in our data-processing systems, based on section 26 of the German Data Protection Act, new version (BDSG-neu) and Art. 6 (1) b GDPR, for the purpose of implementing the employment relationship.

c. Retention period for data
If we are unable to offer you a job, if you refuse a job, if you withdraw your application, if you revoke your consent to data processing or if you request that we erase your data, all the data you gave us – including any remaining physical application documents – will be stored or kept for a maximum period of six months (retention period) after the conclusion of the application process, so that the details of the application process can be traced in the event of disputes (Art. 6 (1) f GDPR).

YOU MAY OBJECT TO THIS STORAGE IF THERE ARE LEGITIMATE INTERESTS ON YOUR PART, OVERRIDING OUR OWN INTERESTS.

The data is erased after the expiry of the retention period, unless there is a statutory retention duty or some other legal reason for continued storage. If it is obvious that the retention of your data is required after the expiry of the retention period (e.g. because a legal dispute is either likely or pending), erasure will be postponed until they lose their relevance for this purpose. Other statutory retention obligations remain unaffected.

6. Business relations with commercial customers and suppliers

As part of our business relationships with business and commercial customers and suppliers, we process not only company details and company-specific data but also personal data that are required in order to establish, implement and terminate the business relationship and which we have legitimately received from yourself or from sources in the public domain (e.g. commercial register or credit agencies) and which we are permitted to process.

The personal data we process include names (sometimes also contacts within the company), the department, position within the company, address, phone number, fax number, email address, banking details, contract details, tax codes and credit status.

Data are processed for the contractual handling of our orders from suppliers and of sales orders from customers, based on GDPR Article 6 (1) point b. Where necessary, we process your data beyond the actual fulfilment of the contractual relationship in order to safeguard our own or third-party legitimate interests (GDPR Article 6 (1) point f), such as asserting legal claims, defending ourselves in legal disputes, preventing or investigating criminal offences, business management, product and service development, testing and optimising procedures for a needs analysis and making direct contact with suppliers. We are also subject to various statutory requirements (tax and commercial code, anti-money-laundering regulations, etc.), where fulfilment may require the processing of personal data. Where this is the case, personal data will be processed on the basis of GDPR Article 6 (1) point c.

We will only disclose your personal data insofar as this is necessary for the fulfilment of a contract concluded by you with us or within the limits permitted by law. Our data processors have provided corresponding declarations of commitment for protection of your data.

Personal data collected by Sprinz will be erased after expiry of the statutory retention, documentation and expiry periods or when the purpose of data collection ceases to apply, whichever period is longer.

You have the right:

• In accordance with Art. 7 (3) GDPR, to revoke the consent you previously granted at any time. This means that we can no longer continue in the future with the data processing that was based on this consent
• In accordance with Art. 15 GDPR, to request information about your personal data that is processed by us. In particular, you may request information about the purposes of processing, the category of personal data, categories of recipients to whom data is or has been disclosed, the planned period of storage, the existence of a right to rectification, erasure or restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data insofar as it is not collected by us as well as the existence of automatic decision-making including profiling and, if applicable, conclusive detailed information
• In accordance with Art. 16 GDPR, to demand immediate rectification of incorrect personal data or completion of your personal data stored by us
• In accordance with Art. 17 GDPR, to request erasure of personal data stored by us insofar as processing is not required to exercise the right to freedom of expression and information, fulfilment of a legal obligation, for reasons of public interest or assertion, exercise or defence of legal claims
• In accordance with Art. 18 GDPR, to request restriction of the processing of your personal data insofar as you dispute the correctness of the data, the processing is unlawful but you refuse to allow erasure of it and we no longer require the data but you require them for assertion, exercise or defence of legal claims or you have lodged an objection against the processing in accordance with Art. 21 GDPR
• In accordance with Art. 20 GDPR, to demand to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or have it transferred to another controller
• To lodge a complaint with a regulatory authority in accordance with Art. 77 GDPR if you believe that the processing of your personal data is illegal. To do so, you can normally contact the regulatory authority that has jurisdiction for your residence, your place of work or our headquarters

Insofar as your personal data is processed on the basis of justified interests in accordance with Art. 6 (1) s. 1 f GDPR, you have the right in accordance with Art. 21 GDPR to lodge an objection to the processing of your personal data if there are grounds arising from your particular situation.

If you wish to make use of your right of revocation, you can just send an e-mail to datenschutzbeauftragter@sprinz.eu.

This privacy statement is up-to-date and is valid as of February 2019.