Data protection

Contents

1. Data protection declaration

At Graf von Westerburg, we are committed to the protection of personal data and ensure that we do not process any of your data unless we have a legal basis for doing so or you have expressly stated your consent to such processing.

2. Data controller

Responsible for m. Art. 4 para 7 GDPR is the website operator. You can find his contact details in the imprint.

3. Data processing activities

3.1 Purpose and legal basis for processing

Subject to the following points, personal data will only be collected if you provide it to us on your own initiative, such as: when filling out the contact form. We use this data exclusively for the purpose for which you have entered your data. For other purposes, use is only made after express notice or after obtaining your consent, Art. 6 para 1 lit. a GDPR. In certain cases, personal data are collected on the basis of a legitimate interest according to Art. 6 para 1 lit. f GDPR. This is the case, for example, if you visit our website and personal data are necessarily collected due to the technical conditions in order to enable the function of the website.

3.2 Visit to our website

When accessing our website, information is automatically sent to the server of our website by the browser used on your device. This information is temporarily stored in a log file. The following data is collected and stored without your intervention until it is automatically deleted: IP address of the device accessing the website; date, time and type of visit; URL of the browser used of the retrieved file, browser type and browser version, IP address; and in some cases the operating system of your computer as well as the name of your access provider. We do not use the data collected via logfiles in any way to draw conclusions about you.

In the case of merely informational use of the website, we therefore only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data that is technically necessary for us to show you our website and to ensure stability and security.

The legitimate interest lies in the flawless presentation of its Internet presence as well as the guarantee of stability and security of our website.

3.3 Applications

You can apply to our company via our application portal. Please note that unencrypted transmitted e-mails are not transmitted in an access-protected manner.

Your information will be used for processing your application and deciding on the establishment of an employment relationship. Legal basis Art. 6 para 1 lit. f) DSSGVO. Furthermore, your personal data may be processed insofar as this should be necessary to defend against asserted legal claims from the application process against us. The legal basis for this is Art. 6 para 1 lit. f GDPR. The stated purposes also include the legitimate interest in the processing.

Insofar as an employment relationship between you and us arises, we may further process the personal data already received from you for purposes of the employment relationship in accordance with Art. 6 para 1 lit. f GDPR, if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of employee representation arising from a law or a collective agreement, a company or service agreement (collective agreement).

Any processing of your application data beyond the described use does not take place.

Your personal data will be deleted after completion of the application process at the latest after 6 months, if no other legitimate interests on our part oppose a deletion or if you have not given us consent for a longer storage period. Other legitimate interest in this sense is, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG).

3.4 Communicating with us

If you have any questions, you can contact us by email. If you provide personal data through these communication channels, we will store and use it only on the following legal bases: (i) Article 6(1)(a) GDPR to process your enquiry; or (ii) Article 6(1)(b) GDPR if your enquiry concerns pre-contractual or contractual information. You may withdraw your consent to the processing of the data provided at any time by emailing privacy@graf-von-westerburg.de. We will then delete your data unless we are subject to a statutory retention obligation.

3.5 Sharing of data

Your personal data will not be shared with third parties, except for the purposes listed below. We will only disclose your personal data to third parties if:

  • You have expressly given your consent in accordance with Art. 6 para 1 lit. a of the GDPR; or
  • the disclosure of which is:
    • which is necessary for establishing, exercising or defending legal claims pursuant to Art. 6 para 1 lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data; or
    • necessary for the fulfilment of a legal obligation pursuant to Art. 6 para 1 lit. c of the General Data Protection Regulation; or
    • legally permissible and for the performance of a contract with you in accordance with Art. 6 para 1 lit. b of the GDPR.

A transfer of data to third countries will only take place if the processing and transfer is legally permitted in the respective country where the data are received, and only after prior information has been provided to you.

3.6 Your rights

You have the right to:

  • to obtain information about the personal data concerning you, which we provide in accordance with Art. 15 of the GDPR;
  • the immediate correction of inaccurate personal data that we have stored about you, as well as the right to complete personal data in accordance with Art. 16 of the GDPR;
  • the deletion of the personal data concerning you that we have stored, in accordance with Art. 17 of the GDPR;
  • a restriction of the processing of your personal data in accordance with Art. 18 of the GDPR;
  • to obtain the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to transmit this data to another controller (data portability), in accordance with Art. 20 of the GDPR;
  • revoke the consent given to us at any time, in accordance with Art. 7 para 3 of the GDPR; this means that we may no longer process the data for which this consent was previously granted; and
  • a complaint to a supervisory authority in accordance with Article 77 of the General Data Protection Regulation. In most cases, you can contact a supervisory authority at the place of your habitual residence, workplace or company headquarters.


Right of appeal
Where your personal data is processed on the basis of legitimate interests under Article 6(1)(f) GDPR, you have the right under Article 21 GDPR to object to the processing for reasons relating to your particular situation or for direct marketing purposes. For direct marketing, you have a general right to object, which we will honour without requiring reasons relating to a particular situation. To withdraw your consent or exercise your right to object, please email privacy@graf-von-westerburg.de.

3.7 Duration of storage

Personal data that we collect will be deleted if the purpose of processing ceases or within the statutory retention periods.

3.8 Contact by email or contact form

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address and your name) will be stored by us in order to answer your questions. Insofar as we request input via our contact form that is not necessary for contact, we have always marked it as optional. This information serves us to concretize your request and to improve the handling of your request. This information is expressly communicated on a voluntary basis and with your consent, Art. 6 para 1 lit. a GDPR. If this is information about communication channels (e.g. e-mail address, telephone number), you also agree that we may also contact you via this communication channel in order to answer your request. You can of course revoke this consent at any time for the future.

We delete the data arising in this context after storage is no longer necessary or restrict the processing if statutory storage obligations exist.

3.9 Data security

We have put in place extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

3.10 Data transfer and intended data transfer to a third country or an international organisation

A transfer of your data to third parties does not take place in principle, unless we are legally obliged to do so, or the data transfer is necessary for the execution of the contractual relationship or you have previously expressly consented to the transfer of your data.

We attach importance to processing your data within the EU / EEA. However, it may happen that we use service providers who process data outside the EU / EEA. In these cases, we ensure that before transferring your personal data, an adequate level of data protection comparable to standards within the EU is established at the recipient. This can be achieved, for example, through EU standard contracts or binding corporate rules or special agreements, the regulations of which the company can submit.

3.11 Matomo

Our website uses the open-source web analytics service Matomo, a service provided by “InnoCraft Ltd”, a company based at 7 Waterloo Quay, PO625 Wellington, New Zealand. As InnoCraft is based outside the EU, it has appointed an EU representative: ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg, Germany (privacy@innocraft.com).

With the help of this web analysis software, there is no recognition of recurring users, but only the statistical evaluation of the use of our website. That is why we have taken the following measures:

  • The IP address is anonymized.
  • No profile formation takes place.
  • No cookies are used.
  • No data is passed on to third parties.
  • There is no fingerprinting.
  • For the statistical evaluation, we only use the data that is already available to us for technically necessary reasons.

You can object to the processing of your anonymized data at any time.

The legal basis for the use of Matomo is Art. 6 para 1 sentence 1 lit. f GDPR. The legitimate interest lies in the analysis, optimization and economic operation of the online offer.

3.12 OpenStreetMap

To make it easier for you to get to our location, we integrate maps of the OpenStreetMap service on our website (provider: OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom).

When the card is called up, your IP address is transmitted to OpenStreetMap, otherwise the content cannot be displayed in your browser. In addition, further information such as browser type, operating system and usage behavior can be processed. The integration is based on Art. 6 para 1 lit. f GDPR. Our legitimate interest lies in the user-friendly design of our website and the easy findability of our company.

Further information on data processing and data protection at OpenStreetMap can be found at:
https://wiki.osmfoundation.org/wiki/Privacy_Policy

4. Contact possibility of the Data Protection Officer

You can contact our Data Protection Officer at privacy@graf-von-westerburg.de.