Data protection

I. Preamble

Thank you for visiting our company’s website. Information protection and in particular data protection is a high priority for the management. In principle, you can use this website without providing any personal data. Should you disclose data to us in connection with the processing described below, we will treat your personal data confidentially and in accordance with the statutory data protection regulations of the European Union and the Federal Republic of Germany, as well as this data protection declaration.

As the controller, the Göpfert Maschinen GmbH has implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, you as the data subject are free to transmit personal data to us by alternative means, for example by telephone or post.

II. Definition of terms

The data protection declaration of the Göpfert Maschinen GmbH is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). The detailed definitions can be found in Art. 4 GDPR. Essentially, these are the following terms, described here in simplified form

A. Personal data:

This is all information that is available to us as the controller to identify you as a natural person. (e.g. name, address, email address, telephone number, IP address)

B. Data subject:

This is you as a natural person, provided we have identified you.

C. Processing:

Processing is any collection, storage, further processing, forwarding, archiving and deletion of data. It is irrelevant whether the process is automated using IT systems or whether it is carried out manually (e.g. by letter).

D. Restriction of processing:

Restriction of processing is the marking of stored personal data with the aim of restricting or preventing its future processing.

E. Profiling:

Profiling is any type of automated processing of your data that consists of using this data to evaluate certain personal aspects relating to you. In particular, to analyse or predict aspects relating to your work performance, economic situation, health, personal preferences, interests, behaviour, location or change of location.

F. Pseudonymisation:

This is a process to provide your personal data with an identifier. Subsequently, only this identifier will be used and without the original key or a ‘reference database’ this pseudonym can no longer be resolved. (e.g. assignment of a customer number)

G. Controller:

The controller or party responsible for the processing is Göpfert Maschinen GmbH, with whom you have a contractual relationship. The decisive factor here is that Göpfert Maschinen GmbH can decide independently on the processing methods and means.

H. Processor:

A processor is a company that has been commissioned by Göpfert Maschinen GmbH to support it in the collection, processing, storage, forwarding or deletion of your data. In most cases, these are IT service providers and software suppliers, but also waste disposal companies that are commissioned, for example, with the destruction of files.

I. Consent:

Consent is any declaration of intent given by you for a specific individual case. You will be fully informed about what you are consenting to.

III. Responsible

The responsible within the meaning of the General Data Protection Regulation and other provisions of a data protection nature for this website is the:

Göpfert Maschinen GmbH

Am Zollwasen 6

D-97353 Wiesentheid

Management:
Karl F. Göpfert,

Siglinde Göpfert,

André Göpfert

Esther Göpfert

Ralf Schiffmann

Telephone: +49 (0) 9383 / 205-0
E-Mail: info@goepfert.de

IV. Data protection officer

A data protection officer has been appointed for Göpfert Maschinen GmbH. This officer is available at any time to answer your questions in connection with data processing.

Personal/confidential
Data protection officer
pco GmbH & Co. KG
Am Alten Bahnhof 8
D-97332 Volkach

E-Mail: datenschutz@goepfert.de
Telephone: +49 (0) 541 605 1500

V. Rights of data subjects

In accordance with Chapter 3 of the GDPR, you as the data subject have the rights listed below. In order to fulfil our obligations in connection with your rights in accordance with the law, please send corresponding enquiries and requests to our data protection officer.

A. Art. 15 Right to information

You have an unrestricted right to request information about the personal data processed about you. This information must be provided to you free of charge. You may request the following information, a copy of which must be provided to you

• the purpose of processing your data,
• the categories of data,
• the internal and external recipients of your data
• the duration of data storage,
• your rights under Chapter 3 in connection with data processing,
• the origin of the data if it was not collected from you,
• whether a profile has been created,
• whether your data has been transferred to a third country (non-EU and non-EEA),
• which data protection authority is responsible for our respective company,

B. Art. 16 Right to rectification

If we process incorrect data about you, you can have this corrected at any time by contacting your contact person.

C. Art. 17 Right to erasure

You have the right to request the erasure of your personal data at any time. We may be legally obliged to retain your data for a certain retention period (e.g. 6 years for business mail or 10 years for documents relating to tax law), in which case we will block your data record until the retention period has expired and then delete the data record accordingly. Please address requests for deletion to the data protection officer, who will exercise your rights in our company on your behalf.

D. Art. 18 Right to restriction of processing

If you dispute the accuracy of your personal data or if you refuse the erasure of your data and instead request the restriction of processing (e.g. in the case of advertising mailings), you can request the restriction of processing from us. We will then set your data to ‘Blocked’.

E. Art. 19 Notification obligations in connection with the rectification, erasure or

Restriction

We are obliged to inform all recipients of your data of any correction, deletion or restriction requested by you, insofar as this is possible and can be realised with a reasonable amount of effort. We will inform you about the recipients of your data if you request this.

F. Art. 20 Right to data portability

You have the right to request our company to transfer your data to another controller at any time. This applies to all master data that we hold about you. If this is technically possible, we will provide the data record in a common machine-readable format (e.g. .csv/xml).

G. Art. 21 Right to object

If data processing is based on Art. 6 para. I lit. a (consent) or Art. 6 para. I lit. f (so-called legitimate interest), you can object to the processing in this context.

H. Art. 77 Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the data protection supervisory authority responsible for our company at any time if you believe that we are violating the provisions of the GDPR in any way. The following authority is responsible for Göpfert Maschinen GmbH

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 27

91522 Ansbach

You can access the website of the data protection supervisory authority via the following link https://www.lda.bayern.de/de/index.html

VI. Processing

In this section, we will describe the data processing that is related to our website or that applies to a general business relationship between you and Göpfert Maschinen GmbH.

The following legal bases serve us for the processing of your data.

Art. 6 I lit. a GDPR serves our company as the legal basis for processing operations for which we obtain your consent for a specific processing purpose.

If the processing of your data is necessary for the fulfilment of a contract to which you are a party, as is the case, for example, with an offer – order – order, or which is necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example in cases of enquiries about our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, such as the fulfilment of tax reporting and verification obligations, the processing is based on Art. 6 I lit. c GDPR.

In rare cases, it may be necessary to process personal data in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were injured and their name, age, health insurance details or other vital information would have to be passed on to a doctor, hospital or other third party. The processing would then be based on Art. 6 I lit. d GDPR.

Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of you do not prevail. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In most cases, processing in the context of company presentations (Internet, press, etc.) is based on Art. 6 I lit. f.

A. Website

We operate this website and collect various data in this context.

1. cookies

Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called ‘session cookies’. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies that are required to carry out the electronic presentation or to provide certain functions you have requested (e.g. image displays) are stored on the basis of Art. 6 para. 1 lit. f GDPR. As the website operator, we have a legitimate interest in the storage of cookies for the technically error-free and optimised provision of our services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this privacy policy.

2. Server log data

Göpfert Maschinen GmbH or our website provider collects data about access to our website and stores it as “server log files”. The following data is logged:

• Visited website
• Time at the time of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Browser used
• Operating system used
• IP address used (anonymized)

The data collected is only used for statistical analysis and to improve the website. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

3. Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

B. Contact / inquiries / Newsletter

Below we describe the options for contacting the employees of our company.

1. E-mail / telephone

If you send us inquiries by e-mail / telephone, your details from the e-mail or conversation, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.
The processing of the data entered in the reply e-mail is therefore based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. In further correspondence, there may be a change in legality (e.g. if it is a business correspondence), then your data will be processed in accordance with Art. 6 para. 1 lit b GDPR (as a pre-contractual measure).
We will retain the data you provide in the email until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions – in particular retention periods – remain unaffected by this.

2. Newsletter

Göpfert Maschinen GmbH gives its customers the opportunity to subscribe to our company newsletter. The following personal data is processed for this purpose: title, surname, first name and email address.
The Göpfert Maschinen GmbH informs its customers and business partners regularly by means of a newsletter about enterprise offers. You can only receive our company’s newsletter if (1) you have a valid e-mail address and (2) you have registered to receive the newsletter or have agreed to receive it. For legal reasons, a confirmation e-mail will be sent to the e-mail address you have entered for the first time for the newsletter mailing using the double opt-in procedure. This confirmation email is used to check whether the owner of the email address as the data subject has authorized receipt of the newsletter.

When you register for the newsletter, we also store the IP address assigned by the Internet service provider (ISP) of the computer system used by you at the time of registration as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject’s e-mail address at a later point in time and therefore serves the legal protection of our company.
The personal data collected when registering for the newsletter is used exclusively to send our newsletter. The personal data collected as part of the newsletter service will not be passed on to third parties. You can cancel your subscription to our newsletter at any time. The consent to the storage of your personal data that you have given us for the newsletter dispatch can be revoked at any time. There is a corresponding link in every newsletter for the purpose of revoking consent.

C. Data processing for the fulfillment of contracts

If you have entered into a business relationship with our company, e.g. if you have placed an order with us, the data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. All data that is necessary to initiate, fulfill or conclude this order, such as contact data, property data, service providers involved, photo documentation, plans, orders for goods, etc., may be collected and processed by us without separate consent.
Should it be necessary to involve a subcontractor (e.g. a forwarding agent for the delivery of materials or special trades) in order to fulfill the contract with you, we may also pass on your data to this subcontractor. We guarantee that we have committed our subcontractors to the same strict data protection requirements that you can expect from us.
In individual cases, we may request information about Creditrefom in order to initiate an order. If the data obtained in this way has consequences for the order, we will clarify this with you separately.

The data associated with orders is subject to different retention periods. For example, tax documents must be kept for 10 years. Göpfert design and construction data may also be subject to a 30-year retention period, as the average service life of a Göpfert is 30 years and we are happy to offer you the service of not starting from scratch when placing a new order. We will only pass on your data within our company to the extent necessary if this is justified by the subject of the order.

D. Data processing in connection with maintenance and remote access to your Göpfert

As part of existing maintenance and support contracts (in accordance with Art. 6 para. 1 lit. b GDPR) for your Göpfert, our technicians may have remote maintenance access to your machine, which must usually be authorized by one of your employees. Depending on your usage behavior of the Göpfert, our technicians may become aware of personal data of your employees and customers. We do not process this data in any way or pass it on to internal or external third parties. For remote maintenance access, we only use so-called remote access tools, which establish an encrypted transmission channel (e.g. VPN) between your Göpfert and our servers. In this way, your data is protected from unauthorized access. Without exception, our employees are obliged to maintain confidentiality in accordance with the GDPR and the Trade Secrets Act. If a data transfer or download of error logs is necessary, this will only be carried out after express approval (at least in text form) by your employee.

E. Dealing with application documents

The legal basis for the processing of your personal data for the purposes of the application is §26 of the Data Protection Adaptation and Implementation Act (DSAnpUG-EU) or BDSG-neu.
Data will only be collected and processed for this purpose if this is required by law. Insofar as further data may not be directly required for the establishment of the employment relationship, the processing is based on a legitimate interest of the company pursuant to Art. 6 para. 1 lit. f GDPR.
A legitimate interest may arise, for example, from internal organizational and administrative purposes, to protect the company’s facilities, equipment and assets as well as data processing systems and data. Processing of your data is permitted here if the protection of your interests, fundamental rights and freedoms does not prevail.
In individual cases, we may also obtain your consent to the processing or transfer of your data. In these cases, your consent is voluntary and can be revoked by you at any time in the future, unless otherwise agreed.

The application documents are transmitted within the company. This involves the respective specialist department in the application process. The specialist departments are instructed to treat application documents as strictly confidential. The documents will not be forwarded to a third country.
The competent and responsible body for the collection, processing and use of your personal data is Göpfert Maschinen GmbH in the Federal Republic of Germany.
Your personal data will only be stored for as long as knowledge of the data is required for the above-mentioned purposes or as long as statutory or contractual retention requirements exist. The application documents are usually deleted 6 months after completion of the application process.
It is possible to store your data for longer if you send us your consent with the following wording:

I agree that my application documents will be included in the applicant pool for 12 months on the basis of the points under the heading “Handling of application documents in accordance with Art. 13 GDPR” of the privacy policy of your website. During this period, Göpfert Maschinen GmbH may contact me about new job offers.

F. Competition entries

In the context of job fairs (here: the BIT KT) in which our company participates, we sometimes organize competitions. The data collected here is used exclusively by Göpfert Maschinen GmbH.
The disclosure of your data in the context of this competition is absolutely voluntary and therefore the processing is based on Art. 6 para. I lit. a GDPR.
We use your data (surname, first name, e-mail address) exclusively for the following purposes 1. notification of the winners and delivery of the prize. 2. we use the data of all competition participants to invite them to an open day at our premises. We will write to you separately for this purpose. This data will be deleted by us after the selection of trainees for the current selection year has been completed. Due to the special features of this year’s job fair caused by the CORONA pandemic, the job fair will be held digitally. This is done with the help of software from EXPO-IP GmbH, which, together with the Kitzingen Vocational Information Days (BIT KT) working group of the city of Kitzingen, is responsible for data collection as part of participation in the fair.
For the competition, we use the Typeform software, which is provided by the marketing agency Zudem GmbH from Kitzingen.

VII. Data protection

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

VIII. Validity and amendment of this privacy policy

This privacy policy is currently valid and was last updated in January 2021.
Due to the further development of our website and offers on it or due to changes in legal or official requirements, it may become necessary to amend this privacy policy. You can access and print out the current privacy policy at any time on our website.