Dear vis­i­tors of HOCH.REIN Website,

wel­come! For your secu­ri­ty and peace of mind dur­ing your vis­it, we wish to inform you of how we han­dle your data. The fol­low­ing Pri­va­cy Pol­i­cy is intend­ed to inform you of how we man­age the col­lec­tion, use and pass­ing on of per­son­al data. The par­ty respon­si­ble for this web­site is hoch.rein GmbH.

1.   Usage Data
When you vis­it our web­site, so called “usage data” is stored on our web­serv­er. The data are stored as a record for sta­tis­ti­cal pur­pos­es, to improve the qual­i­ty of our web­site. This data set con­sists of

• The page from which the data was requested,
• The name of the data,
• The date and time of the request,
• The trans­ferred data quantity,
• The access sta­tus (data trans­ferred, data not found),
• The descrip­tion of the type of the brows­er used,
• The IP-Address of the device from which the request came, minus the last three digits.

Our com­pa­ny process­es the data of con­tact per­sons of our clients, stake­hold­ers, sup­pli­ers and oth­er busi­ness part­ners for com­mu­ni­ca­tion via email, tele­phone, tele­fax and post. The legal basis for this pro­cess­ing is Art 6 Para 1 f) GDPR. The legit­i­mate inter­ests from our company’s per­spec­tive is to car­ry out or begin a busi­ness rela­tion­ship with our clients, stake­hold­ers, sup­pli­ers and oth­er busi­ness part­ners, for which we must make per­son­al con­tact with the con­tact persons.

3.2. Recip­i­ents / Cat­e­gories of Recip­i­ent:
We will not trans­fer your data from hoch.rein GmbH to any third par­ties. As an excep­tion to this, data is processed on our request by sub-proces­sors. Our ser­vice providers have been care­ful­ly select­ed by us, are audit­ed by us, and are sub­ject to the con­trac­tu­al oblig­a­tions of Art 28 GDPR

3.3. Stor­age Dura­tion / Cri­te­ria for Deter­min­ing the Stor­age Dura­tion:
Per­son­al data are stored for the pur­pose of car­ry­ing out the busi­ness rela­tion­ship for as long as there is a legit­i­mate inter­est in doing so.

4.  Data Pro­cess­ing for Mar­ket­ing Purposes

4.1.  Pur­pose for the Data Pro­cess­ing / Legal Basis:
We use per­son­al data for mar­ket­ing pur­pos­es, par­tic­u­lar­ly for adver­tis­ing via email, tele­phone and post. The pur­pose of data pro­cess­ing in the con­text of mar­ket­ing mea­sures is to inform data sub­jects of our prod­ucts and ser­vices. The legal basis for send­ing adver­tise­ments by post is Art 6 Para 1 f) GDPR. We have a legit­i­mate inter­est in send­ing clients and stake­hold­ers infor­ma­tion regard­ing our prod­ucts and ser­vices. The legal basis for mar­ket­ing mea­sures by email or tele­phone is gen­er­al­ly a dec­la­ra­tion of con­sent that you have giv­en us. Mar­ket­ing mea­sures for exist­ing clients are sub­ject to fur­ther spe­cial requirements. 

We will not trans­fer your data from hoch.rein GmbH to any third par­ties. As an excep­tion to this, data are processed on our request by sub-proces­sors. Our ser­vice providers have been care­ful­ly select­ed by us, are audit­ed by us, and are sub­ject to the con­trac­tu­al oblig­a­tions of Art 28 GDPR.

4.3.  Stor­age Dura­tion / Cri­te­ria for Deter­min­ing the Stor­age Dura­tion:
If you opt out of mar­ket­ing ini­tia­tives, your data will be imme­di­ate­ly locked and sub­se­quent­ly delet­ed, pro­vid­ed they are not also used for oth­er purposes.

5.  Cook­ies
Cook­ies are small pieces of data that are stored on a user’s com­put­er. They make it pos­si­ble for infor­ma­tion to be assessed over a defined time peri­od and allow the user’s device to be iden­ti­fied. For an improved user expe­ri­ence and opti­mized per­for­mance, we use per­ma­nent cook­ies. Fur­ther­more, we also use so called “ses­sion cook­ies” that are auto­mat­i­cal­ly delet­ed when you close your brows­er. You can set up your brows­er in such a way that you are informed when cook­ies are being placed. This will make the use of cook­ies more trans­par­ent for you.

6.  Google Analytics

6.1. Pur­pose for the Data Pro­cess­ing / Legal Basis:
For the needs-based lay­out of our web­site, we cre­ate pseu­do­nymised user pro­files with the help of Google Ana­lyt­ics. Google Ana­lyt­ics use so called “cook­ies”, or text data, that are stored on your com­put­er and that enable an analy­sis of the use of our web­site. The data that is gen­er­at­ed by the cook­ie regard­ing your use of our web­site is, gen­er­al­ly, trans­ferred to a Google serv­er in the USA and is stored there. As we have acti­vat­ed IP-anonymi­sa­tion on this web­site, your IP address­es are abbre­vi­at­ed by Google with­in mem­ber states of the Euro­pean Union or in oth­er states par­ty to Euro­pean Eco­nom­ic Area agree­ment. In excep­tion­al cir­cum­stances, the full IP-address could be trans­ferred to the Google servers in the USA and to be abbre­vi­at­ed there. Google will use this

infor­ma­tion to assess your use of our web­site, to assem­ble reports on web­site activ­i­ty, and to pro­vide us with oth­er ser­vices con­nect­ed to the use of our web­site and the use of con­nect­ed inter­net ser­vices. The legal basis for the data pro­cess­ing is Art 6 Para 1 f) GDPR. We have a
legit­i­mate inter­est in gath­er­ing infor­ma­tion on the use of our website.

6.2.  Stor­age Dura­tion / Cri­te­ria for Deter­min­ing the Stor­age Dura­tion:
We do not store any per­son­al­ly iden­ti­fi­able user profiles.

7. Google Web­fonts
To opti­cal­ly improve the dis­play of infor­ma­tion on this site, Google Web­fonts (http://www.google.com/webfonts/) are used. The web­fonts are trans­ferred when the page is called up into the cache of the brows­er in order to be able to use it for the pre­sen­ta­tion. If the brows­er does not sup­port Google Web fonts or pro­hibits access, the text will be dis­played in a stan­dard font. When the page is accessed, no cook­ies are set for the web­site vis­i­tor. The data sub­mit­ted in con­nec­tion with the page view is sent to resourcespecific domains such as fonts.googleapis.com or fonts.gstatic.com. You will not be asso­ci­at­ed with any infor­ma­tion col­lect­ed or used in con­nec­tion with the par­al­lel use of authen­ti­cat­ed Google ser­vices such as Gmail. The legal basis for the data trans­mis­sion to Google is Art. 6 para. 1 lit. f) GDPR. The oper­a­tor of the home­page has a legit­i­mate inter­est in the use of Google Web­fonts for visu­al­ly enhanced presentation.

You can set your brows­er so that the fonts are not loaded by the Google servers (for exam­ple, by installing add-ons such as NoScript or Ghostery for Fire­fox). For infor­ma­tion about the pri­va­cy pol­i­cy of Google Web­fonts, please vis­it: https://developers.google.com/fonts/faq#Privacy For gen­er­al pri­va­cy infor­ma­tion, vis­it the Google Pri­va­cy Cen­ter at: http://www.google.com/intl/ en-us / privacy/

8.  Encryp­tion
In order to pro­tect your data against unau­tho­rized access, we imple­ment an encryp­tion process on most sites. The details trans­mit­ted from your device to our ser­vice, and vice ver­sa, are secured using a 256 Bit SSLencryption (Secure Sock­et Lay­er). This is demon­strat­ed by the sym­bol of the lock on the sta­tus strip of your brows­er, and as the address line begins with https://. We only do not encrypt infor­ma­tion that is pub­licly avail­able.

9.  Appli­ca­tion

The HOCH.REIN Group is con­stant­ly look­ing for qual­i­fied and moti­vat­ed employ­ees and would like to inform you about the way we col­lect and process your per­son­al data when you apply for one of our open posi­tions. Please note that appli­ca­tions sent to us by e‑mail are trans­mit­ted to us unen­crypt­ed. There­fore, please use the fields pro­vid­ed by us below the respec­tive job offer. The data trans­mis­sion will then be encrypt­ed accord­ing to the cur­rent state of the art.

9.1 Pur­pose of data pro­cess­ing, legal basis/ mode of operation:

We col­lect and process per­son­al data which we require for the appli­ca­tion process and appli­cant selec­tion. In par­tic­u­lar, this includes your con­tact details, such as your name and address, as well as all data relat­ed to the appli­ca­tion, such as your CV, ref­er­ences and qual­i­fi­ca­tions. If you sub­mit an appli­ca­tion for reim­burse­ment of trav­el expens­es, we may also need your bank details. The legal basis for the pro­cess­ing of your data is Art. 88 GDPR in con­junc­tion with § 26 (1) (1) Fed­er­al Data Pro­tec­tion Act (here­inafter BDSG) respec­tive­ly Art. 6 (1) (1) b GDPR.

In the fur­ther process, your CV will be dig­i­tized and the data will be stored in an appli­cant data­base. Your orig­i­nal doc­u­ments will be con­vert­ed to PDF doc­u­ments and also saved to your record. Your orig­i­nal files will be delet­ed. All doc­u­ments sent with your appli­ca­tion (cov­er let­ter, CV, ref­er­ences and oth­er sup­port­ing doc­u­ments) and the infor­ma­tion con­tained there­in will be saved. If you still send us your appli­ca­tion doc­u­ments in per­son or by mail, we first dig­i­tize them and then also record them in our appli­cant man­age­ment sys­tem. We will return the orig­i­nal doc­u­ments to you immediately.

If you vol­un­tar­i­ly pro­vide us with addi­tion­al per­son­al data (e.g. in a field marked as vol­un­tary or option­al below the job offer), we process this on the basis of your revo­ca­ble con­sent in accor­dance with Art. 6 (1) (1) a, Art. 7 GDPR in con­junc­tion with § 26 (2) BDSG.

Tal­ent pool

If you are not hired, but your appli­ca­tion is still of inter­est to us, we will ask you whether we may con­tin­ue to keep your appli­ca­tion for future vacan­cies with­in the HOCH.REIN Group. This longer reten­tion is based on your revo­ca­ble con­sent in accor­dance with Art. 6 (1) (1) a, Art. 7 GDPR in con­junc­tion with § 26 (2) BDSG. Par­tic­i­pa­tion in our tal­ent pool is vol­un­tary. If you choose not to con­sent, this will not impact any ongo­ing appli­ca­tion process­es. We will then obtain your con­sent separately.

9.2 Recipients/categories of recipients: 

Need­less to say, we treat all your data con­fi­den­tial­ly. With­out sep­a­rate con­sent, your data can only be viewed by the recruiter respon­si­ble for the posi­tion to be filled and respon­si­ble super­vi­sors with­in the HOCH.REIN Group or the HOCH.REIN com­pa­ny which you are apply­ing for. In addi­tion, we do not trans­fer your appli­ca­tion data to third par­ties out­side the HOCH.REIN Group.

If nec­es­sary, we appoint data proces­sors who are strict­ly bound by doc­u­ment­ed instruc­tions and who sup­port us e.g. in the areas of IT or the archiv­ing and destruc­tion of doc­u­ments, and with whom sep­a­rate data pro­tec­tion agree­ments have been signed. 

As a mat­ter of prin­ci­ple, your data will not be trans­ferred to coun­tries out­side the EU.

9.3 Data erasure: 

If you are hired, your trans­mit­ted data may be stored by us in your per­son­nel file for the pur­pose of the usu­al orga­ni­za­tion­al and admin­is­tra­tive process in com­pli­ance with the rel­e­vant legal provisions.

If you are not hired, the data you sub­mit­ted will usu­al­ly be delet­ed after 90 days (or after 6 months at the lat­est) after com­ple­tion of the appli­ca­tion process or after receiv­ing a rejec­tion of your appli­ca­tion. We also erase your data if you with­draw your con­sent.

10. No Oblig­a­tion to Pro­vide Per­son­al Data
Pro­vid­ed that the pre­vi­ous sec­tions have not stat­ed oth­er­wise, the pro­vi­sion of per­son­al data is nei­ther legal­ly nor con­trac­tu­al­ly required, nor is it nec­es­sary to con­clude a con­tract. You are under no oblig­a­tion to pro­vide per­son­al data, pro­vid­ed there is no require­ment to the con­trary. If you do not make your per­son­al data avail­able to us, the result will be that we can­not answer your con­tact request, or that you can­not take part in an appli­ca­tion process or anoth­er event.

11.   Your Rights as a Data Sub­ject
In accor­dance with Art 15 GDPR, you have the right to request a copy of the per­son­al infor­ma­tion that we hold about you, free of charge. Fur­ther­more, when the legal require­ments have been met, you have a right to the cor­rec­tion (Art 16 GDPR), dele­tion (Art 17 GDPR) and restric­tion of the pro­cess­ing (Art 18 GDPR) of your per­son­al data. If the data pro­cess­ing occurs on the basis of Art 6 Para 1 e) or f) GDPR, you have the right to object to the pro­cess­ing of your data under Art 21 GDPR. 

12.   Con­tact Details of our Data Pro­tec­tion Offi­cer
Our com­pa­ny data pro­tec­tion offi­cer is avail­able for you for fur­ther infor­ma­tion on the top­ic of data protection:

Dr. iur. Chris­t­ian Borchers
daten­schutz süd GmbH
Wörth­strasse 15
97082 Würzburg
datenschutz@hoch-rein.com

Con­troller as defined by Art. 4 No. 7 DSGVO

hoch.rein GmbH
Gräsleins­gasse 1
97509 Kolitzheim, Deutsch­land
+49 (0) 9381 71087–0
info@hoch-rein.com