Data Protection

Content

1. Privacy Policy

At Graf von Westerburg we are committed to protecting personal data and ensuring that we do not process any of your data unless we have a legal basis for doing so or you have expressly consented to such processing.

2. Person responsible for data processing

The person responsible according to Art. 4 Para. 7 GDPR is the website operator. You can find their contact details in the legal notice.

3. Data processing activities

3.1 Purpose and legal basis for processing

Subject to the following points, personal data will only be collected if you provide it to us yourself, such as: B. when filling out the contact form. We only use this data for the purpose for which you entered your data. It will only be used for other purposes after express notice or after obtaining your consent, Art. 6 Para. 1 lit. a) GDPR. In certain cases, personal data is collected based on a legitimate interest in accordance with Article 6 Paragraph 1 Letter f) GDPR. This is the case, for example, when you access our website and, due to technical circumstances, personal data is required to be collected in order to enable the website to function.

3.2 Visiting our website

When you access our website, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a log file. The following data is collected and stored without your intervention until it is automatically deleted: IP address of the device accessing the website; date, time and type of visit; URL of the browser used for the file accessed, browser type and browser version, IP address; and in some cases, your computer's operating system and the name of your access provider. We do not use the data collected via log files to draw conclusions about you personally.

When you use the website for informational purposes only, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security.

The legitimate interest lies in the flawless presentation of your internet presence and in ensuring the stability and security of our website.

3.3 Applications

You can apply to our company via our application portal. Please note that emails sent unencrypted are not transmitted with access protection.

Your information will be used to process your application and decide whether to establish an employment relationship. Legal basis: Art. 6 Paragraph 1 Letter f) GDPR. Furthermore, your personal data may be processed to the extent that this is necessary to defend against legal claims asserted against us from the application process. The legal basis for this is Article 6 Paragraph 1 Letter f) GDPR. The legitimate interest in the processing also lies in the stated purposes.

If there is an employment relationship between you and us, we can, in accordance with Article 6 Paragraph 1 Letter f) GDPR, further process the personal data we have already received from you for the purposes of the employment relationship if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of employee representation arising from a law or a collective agreement, a company or service agreement (collective agreement).

Your application data will not be processed beyond the described use.

Your personal data will be deleted after completion of the application process at the latest after 6 months, provided that deletion does not conflict with any other legitimate interests on our part or you have not given us your consent for longer storage. Other legitimate interests in this sense include, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

3.4 Communicate with us

If you have any questions of any kind, we offer you the opportunity to contact us by email. If you provide us with personal data via these communication channels, we will only store and use this data on the basis of the following provisions: (i) Article 6 (1) (a) of the GDPR to process your requests; or (ii) Article 6 Paragraph 1 Letter b of the GDPR if the subject of your request concerns (pre-)contractual information. You can revoke your consent to the processing of the data provided at any time by sending an email to privacy@graf-von-westerburg.de. In this case, we will delete your data unless we have a legal obligation to retain it.

3.5 Data Sharing

Your personal data will not be passed on to third parties except for the purposes set out below. We will only pass on your personal data to third parties if:

  • You have expressly given your consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR; or
  • the disclosure of which is:
    • which is necessary for the establishment, exercise or defense of legal claims in accordance with Article 6 Paragraph 1 Letter f of the GDPR and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data; or
    • necessary to fulfill a legal obligation in accordance with Article 6 (1) (c) of the General Data Protection Regulation; or
    • legally permissible and for the fulfillment of a contract with you in accordance with Article 6 Paragraph 1 Letter b of the GDPR.

Data will only be transferred to third countries if processing and transfer is permitted by law in the respective country in which the data is received, and only after you have been informed in advance.

3.6 Your Rights

You have the right to:

  • to obtain information about the personal data relating to you, which we collect in accordance with Article 15 of the GDPR;
  • the immediate correction of inaccurate personal data that we hold about you and the right to have the personal data completed in accordance with Article 16 of the GDPR;
  • the deletion of the personal data relating to you that we have stored in accordance with Article 17 of the GDPR;
  • a restriction on the processing of your personal data in accordance with Article 18 of the GDPR;
  • to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to transmit these data to another responsible person (data portability), in accordance with Article 20 of the GDPR;
  • revoke the consent given to us at any time in accordance with Article 7 Paragraph 3 of the GDPR; this means that we are no longer allowed to process the data for which this consent was previously given; and
  • a complaint to a supervisory authority in accordance with Article 77 of the General Data Protection Regulation. In most cases, you can contact a supervisory authority at your usual place of residence, your place of work or our company headquarters.


Right to object
In cases where your personal data is based on legitimate interests in accordance with Article 6 Paragraph 1 Letter f of the GDPR, you have the right, in accordance with Article 21 GDPR, to object to the processing of your personal data for reasons arising from your particular situation: (i) your particular situation or (ii) direct marketing purposes. For (ii) you have a general right to object, which we will implement without specifying a special situation. If you want to exercise your right of withdrawal or objection, you can send an email to privacy@graf-von-westerburg.de.

3.7 Duration of storage

Personal data that we collect will be deleted if the purpose of processing no longer applies or within the statutory retention periods.

3.8 Contacting us via email or contact form

When you contact us by email or via a contact form, we will store the data you provide (your email address and name) in order to answer your questions. If we request input via our contact form that is not required to contact you, we have always marked this as optional. This information helps us to concretize your request and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Art. 6 Para. 1 lit. a) GDPR. If this involves information about communication channels (e.g. email address, telephone number), you also agree that we may also contact you via this communication channel in order to answer your request. You can of course revoke this consent at any time in the future.

We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention requirements.

3.9 Data security

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological advances.

3.10 Data transfer and intended data transfer to a third country or an international organization

In principle, your data will not be passed on to third parties unless we are legally obliged to do so, or the transfer of data is necessary to carry out the contractual relationship, or you have previously expressly consented to the transfer of your data.

We believe it is important to process your data within the EU/EEA. However, it may happen that we use service providers who process data outside the EU/EEA. In these cases, we ensure that an adequate level of data protection comparable to standards within the EU is established at the recipient before the transfer of your personal data. This can be achieved, for example, via EU standard contracts or binding corporate rules or special agreements to whose regulations the company can submit.

3.11 Matomo

Our website uses the open source web analytics service Matomo, a service provided by „InnoCraft Ltd“, a company based at 7 Waterloo Quay, PO625 Wellington, New Zealand. Since InnoCraft is based outside the EU, InnoCraft has appointed a representative in the EU: ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg (privacy@innocraft.com).

This web analysis software does not identify returning users, but rather only statistically evaluates the use of our website. We have therefore taken the following measures:

  • The IP address is anonymized.
  • There is no profiling.
  • No cookies are used.
  • No data will be passed on to third parties.
  • There is no fingerprinting.
  • For statistical evaluation, we only use the data that we already have for technical reasons.

You can object to the processing of your anonymized data at any time.

The legal basis for the use of Matomo is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. The legitimate interest lies in the analysis, optimization and economic operation of the online offering.

3.12 OpenStreetMap

To make it easier for you to get to our location, we include maps from the OpenStreetMap service on our website (provider: OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom).

When you access the map, your IP address is transmitted to OpenStreetMap, otherwise the content cannot be displayed in your browser. Additional information such as browser type, operating system and usage behavior can also be processed. The integration is based on Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the user-friendly design of our website and the easy findability of our company.

Further information on data processing and data protection at OpenStreetMap can be found at:
https://wiki.osmfoundation.org/wiki/Privacy_Policy

4. Contact option for the data protection officer

You can reach our data protection officer at privacy@graf-von-westerburg.de.