The responsible handling of your data is very important to us.

Privacy Policy

We take the protection of your data very seriously and want you to feel secure when using our online service. This privacy statement explains which personal data (hereinafter referred to as 'data') we collect and how we use it. The term 'user' comprises all customers and visitors of our online service. The terms used, such as 'user' are to be understood as gender neutral.

Contents

1. 1. Provider, contact and data protection officer
2. 2. Basic information regarding data processing, security measures and legal basis
3. 3. Purpose of data processing
4. 4. Contact process and customer communication (CRM)
5. 5. Registration and termination
6. 6. Newsletter
7. 7. Collection of access data
8. 8. Cookies & range measurement
9. 9. Econda
10. 10. Google
11. 11. Facebook social plugins
12. 12. Facebook remarketing, Facebook Pixel and custom audiences
13. 13. Social media buttons and links
14. 14. Integration of other services and third-party content
15. 15. Users’ rights, opt-outs, withdrawal and disagreement
16. 16. Right to object
17. 17. Deletion of data
18. 18. Changes to the privacy policy
19. 19. Privacy policy (obligation to provide information) for customers, suppliers, interested parties and other business partners etc.
20. 20. Privacy policy (obligation to provide information) for applicants

1. Provider, contact and data protection officer

The provider of the online service and the party responsible for the data protection is Meusburger GmbH & Co KG, Kesselstrasse 42 6960 Wolfurt (hereinafter referred to as 'we' or 'us'). Contact for data protection issues: privacy@meusburger.com. Further information and contact options can be found in our Iegal notice.

2. Basic information regarding data processing, security measures and legal basis

2.1
We process your data on the basis of legal specifications. We implement organisational, contractual and technical security measures in accordance with the latest technology to ensure that data protection legislation is complied with and the data processed by us is protected from accidental or intentional manipulation, loss, destruction or against access by unauthorised persons. The security measures include in particular the encrypted transmission of data between your device and our server.
2.2
With regard to the processing of personal data on the basis of the EU General Data Protection Regulation (GDPR), effective as of 25 May 2018, we refer to Article 6(1)(a) and Article 7 GDPR as the legal basis for your consents, Article 6(1)(b) GDPR as the legal basis for the processing necessary for the fulfilment of our services and the implementation of contractual measures, Article 6(1)(c) GDPR, as the legal basis for the processing for fulfilment of our legal obligations, and Article 6(1)(f) GDPR as the legal basis for the processing for the protection of our legitimate interests.

3. Purpose of data processing

3.1
We process your data for the purposes of delivering the functions of our online service requested by you and to fulfil our contractual, business and other legal obligations (including the provision and performance of our services and user services and to ensure efficient customer service and technical support, among other things). The processing includes the transmission or the disclosure of data to third parties if this serves the fulfilment of our contractual or legal obligations or when it is necessary for dispatch purposes (e.g. transmission of data to a freight service provider).
3.2
Furthermore, we process your data according to legal specifications on the basis of our legitimate interests. These processing purposes include statistical analyses, which serve on the one hand to optimise our online service and on the other our own business purposes. In this context, we can create our so-called user profiles (hereinafter referred to as profiles) based on the stored data (e.g. the addresses, profile descriptions, profile access, submitted orders, offers and enquiries). To protect your interests, we process your data for the above-mentioned purposes using pseudonyms whenever possible. This means the profiles are stored without identification features such as names or email addresses. Only if it is required that a profile is assigned to a user, e.g. in order to show the user certain information based on his behaviour, do we establish a link between the profile and the specific user. If it is not necessary for us to assign a profile to a user (e.g. if we are only interested in statistical information), we process the user data anonymously, i.e. the profiles and the analysis results cannot be assigned to individual users in an identifying manner.
3.3
Additionally, we may process data on the basis of your consent, which we will explicitly ask you to grant.
3.4
If content, tools or other resources are used by other providers (hereinafter referred to as 'third-party providers') within the framework of this privacy policy and their headquarters is abroad, it is assumed that the data is transferred to the third-party providers' countries of business. Data is transferred to third-party countries either on the basis of legal permission, the user's consent, special guarantees such as, for example, the Privacy Shield or special contractual clauses that guarantee the legally required security of the data.
3.5
You will be informed about the individual purposes, types and scope of data processing and the authorisations obtained within the framework of consent granted in relation to this data processing.
3.6
Transmission of application documents
In the course of your application (by email), we collect and process various personal application data.
This includes in particular your

• contact information (name, address, telephone number and email, date of birth and nationality)
  
• application documents (letter of application, CV, certificates or other training certificates and qualifications).
  

4. Contact process and customer communication (CRM)

4.1
When contacting us (via contact form or email) the user's details are stored for the purpose of processing the enquiry and in the event that follow-up questions arise.
 4.2
For customer communication and support (what we call ‘customer relationship management’, CRM) we use Microsoft Dynamics 365 communication services based on our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online service) which is operated both as cloud and server based software (on site in Wolfurt in our own data centre).
 4.3
Privacy statement, including further information on Microsoft certifications:
https://privacy.microsoft.com/en-us/privacy

5. Registration and termination

5.1
Users generally decide for themselves which personal data they disclose and who has access to it. For example, if users enter their names in user profiles, comment fields, etc.
5.2
As a part of user registration, the following data is required:
title, first name, surname, job, language, company, street and number, postcode, town, country, telephone number, email address (is not disclosed to other users);
password (is stored in encrypted form);
5.3
In addition to the above-mentioned data, the users themselves decide which other personal details are disclosed. Furthermore, users may be required to provide further information if this is necessary for the provision of our online service and to comply with legal requirements.
5.4
Upon successful termination, we are entitled to delete the users' profiles. It is the responsibility of the user to secure their profile information.

6. Newsletter

6.1
The following sections explain the contents of our newsletter, the registration, dispatch, and statistical analysis process and your rights of objection. By subscribing to our newsletter, you agree to the receipt of the newsletter and the described processes.
 6.2
We send newsletters, emails and other electronic notifications containing advertising information (hereinafter referred to as 'newsletters') only with the recipient's consent or legal permission. If the contents of a newsletter are specifically described at the registration stage, this content is decisive for the consent of the user. Our newsletters otherwise contain information on new products, updates and other important information about Meusburger.
 6.3
Registration for our newsletter occurs with a so-called double opt-in process. This means you receive an email after registration requesting you to confirm your registration. This confirmation is necessary to prevent people from registering with another person's email address. The registration for the newsletter is recorded to be able to prove the registration process in accordance to legal requirements. This includes saving registration and confirmation times. Changes to your stored data with mailing service providers are also recorded.
 6.4
The newsletter is sent using the ‘Mailingwork’ platform and Microsoft Dynamics 365 (hereinafter referred to as the ‘mailing service provider’). You can view the privacy policy of Mailingwork (mailing GmbH, Birkenweg 7, 09569 Oederan, Germany) here: https://mailingwork.de/datenschutz/. Privacy statement, including further information on Microsoft certifications: https://privacy.microsoft.com/en-us/privacy
 6.5
The email addresses of our newsletter recipients and their details as outlined here are saved on the mailing service provider's server. The mailing service provider uses this information in order to send and analyse the newsletter on our behalf. The mailing service provider may additionally use this data to optimise or improve their own services, for example for the technical optimisation of the mailing process and presentation of the newsletter or for commercial purposes to determine which countries the recipients are based in. However the mailing service provider will not use the data of our newsletter recipients to communicate with them directly or share the data with third parties.
 6.6
To subscribe to the newsletter, simply enter your email address.
 6.7
The newsletters contain a so-called 'web beacon' i.e. a pixel-sized file which is accessed by the mailing service provider's server when the newsletter is opened. When it is accessed, technical information is collected regarding for example your browser and system, your IP address and the time at which it is accessed. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour, the places from which it is accessed (determined with the help of the IP addresses) or the times at which it is accessed. The statistics recorded also include information on whether the newsletters are opened, when they are opened and which links are clicked on. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is not our intention nor that of the mailing service provider to observe individual users. Rather the analyses allow us to recognise the users' reading habits and to adapt our content accordingly or to send different content based on the users' interests.
 6.8
The use of the mailing service provider, the implementation of statistics and analyses, and the recording of the registration process are carried out on the basis of our legitimate interests according to Article 6(1)(f) GDPR. We aim to provide a user-friendly and secure newsletter system that serves both our business interests and the expectations of the users.
 6.9
You can cancel your subscription to our newsletter at any time, i.e. revoke your consent. You will find a link to cancel your subscription to the newsletter at the end of each newsletter.

7. Collection of access data

7.1
The server provider that makes our online service available collects data based on our and its legitimate interest, each time the server is accessed (so-called server log files). Access data includes the name of the website visited, file, date, and time of the visit, the data volume transferred, notification of successful retrieval, the browser type and version, the user's operating system, the referrer URL (i.e. the page previously visited), the IP address and the enquiring provider.
7.2
We use the server log files without assignment to a user or any other form of profiling according to the statutory requirements for statistical analyses only for the purpose of business operations, security and optimisation of our online service. We do however, reserve the right to subsequently check the log data if, based on concrete indications, there is a justified suspicion of illegal use.

8.Cookies & Reach measurement

8.1
Cookie policy
What are cookies?
Cookies are small text files created by a website during your visit. They store information that could be useful for further navigation on the website. This way, your information remains even if you switch to another page and your use of the website can be analysed.
When you use our website, you consent to the use and storage of cookies on your device. However, you can also view our website without cookies.
We recommend that you leave the cookies enabled, otherwise you may miss out on a lot of information. Most browsers automatically accept cookies.

Manage cookies
You have the option of controlling the acceptance of cookies yourself and, if necessary, preventing them by configuring your browser.
Please note that the setting changes always only affect the respective browser. If you use different browsers or change the device, the settings must be changed again. In addition, you can delete the cookies from your storage device at any time. Please refer to the help function of your web browser for information on cookie settings, how to change them and how to delete cookies.

Below, you will find links to the setting options of the most common browsers:

Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Chrome: https://support.google.com/chrome/answer/95647?hl=en
Safari: https://support.apple.com/kb/PH5042?locale=en_US
Opera: https://help.opera.com/en/latest/web-preferences/

Nachfolgend sind die gebräuchlichsten Arten von Cookies zu Ihrem Verständnis erklärt:

1. Session cookies
While you are active on a website, a session cookie is temporarily stored to your computer’s memory to store a session identifier, for example, to prevent you from having to log in again each time you change the page. Session cookies are deleted when you log out or lose their validity as soon as your session has automatically expired.

2. Permanent or protocol cookies
A permanent or protocol cookie stores a file on your computer for the period of time specified in the expiration date. These cookies enable websites to remember your information and settings on your next visit. This results in faster and more convenient access, as you, for example, do not have to change your language settings for our portal again. When the expiration date lapses, the cookie is automatically deleted when you visit the website that generated it.

3. Third-party cookies
Third party cookies come from providers other than the website operator. They can be used, for example, to collect information for advertising, custom content, and web statistics.

4. Flash cookies
Flash cookies are stored as data elements of websites on your computer when they are operated with Adobe Flash. Flash cookies have no time limit.

Change privacy settings

8.2
The online ad cookies of many companies can be managed via:
the US website http://www.aboutads.info/choices/
the EU website http://www.youronlinechoices.com/uk/your-ad-choices/
the Canadian website http://youradchoices.ca/choices
or the Australian website http://youronlinechoices.com.au/ .

9. Evaluation of accesses and user behaviour (econda)

For the needs-based design and for the optimisation of our online shop, solutions and technologies from econda GmbH (http://www.econda.de) are used to record and save anonymised data, and to generate usage profiles from this data using pseudonyms. For this purpose, cookies (for a definition, see 3.4) may be used that enable the identification of a revisiting web browser. Usage profiles are, however, not combined with the pseudonym carrier's data wit-hout the express consent of the visitor. In particular, IP addresses are made illegible immediately after receipt, so that assignment of usage profiles to IP addresses is not possible. Our justified interest in the data processing within the meaning of EU GDPR also lies in the aforementioned purpo-ses. The legal basis for the use of econda is § 15 (3) German Telemedia Act (TMG) re-spectively Art. 6 (1) f) EU GDPR.

10. Google

10.1 Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that helps us integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies, or perform any independent analyses. It merely serves to manage and deploy the tools integrated through it. However, Google Tag Manager does record your IP address, which may also be transmitted to Google's parent company in the United States.
The use of Google Tag Manager is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in a quick and uncomplicated integration and management of various tools on its website. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States that is intended to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF is committed to complying with these data protection standards. You can find more information from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

10.2 Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads allows us to display ads on the Google search engine or on third-party websites when users enter specific search terms on Google (keyword targeting). In addition, targeted ads can be displayed based on user data available to Google (e.g., location data and interests) (audience targeting). As the website operator, we can quantitatively evaluate this data by, for example, analyzing which search terms have led to the display of our ads and how many ads have led to corresponding clicks.
The use of this service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.
The data transfer to the US is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States that is intended to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF is committed to complying with these data protection standards. You can find more information from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

10.3 Google Ads Remarketing
This website uses the functions of Google Ads Remarketing. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With Google Ads Remarketing, we can assign people who interact with our online offer to specific target groups in order to subsequently show them interest-based advertising in the Google advertising network (remarketing or retargeting).
Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google's cross-device functions. In this way, interest-based, personalized advertising messages that have been tailored to you based on your previous usage and surfing behavior on one device (e.g., mobile phone) can also be displayed on another of your devices (e.g., tablet or PC).
If you have a Google account, you can opt out of personalized advertising at the following link: [https://adssettings.google.com/anonymous].
The use of this service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.
For more information and the privacy policy, please visit Google's privacy policy at: [https://policies.google.com/technologies/ads].
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States that is intended to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF is committed to complying with these data protection standards. You can find more information from the provider at the following link: [https://www.dataprivacyframework.gov/participant/5780].

10.4 Customer Match for Audience Targeting
We use Google Ads Remarketing's Customer Match to create custom audiences. We share specific customer data (e.g., email addresses) from our customer lists with Google. If these customers are Google users and are logged into their Google account, they will be shown relevant ads within the Google network (e.g., on YouTube, Gmail, or in the search engine).

10.5 Google Conversion Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With the help of Google Conversion Tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate how often certain buttons on our website have been clicked and which products have been viewed or purchased most frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information that allows us to personally identify the user. Google itself uses cookies or similar recognition technologies for identification.
The use of this service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.
For more information about Google Conversion Tracking, please see Google's privacy policy at: https://policies.google.com/privacy.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States that is intended to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF is committed to complying with these data protection standards. You can find more information from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

10.6 YouTube
This website embeds videos from the YouTube website. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our websites on which YouTube is embedded, a connection is established to the YouTube servers. The YouTube server is informed which of our pages you have visited.
Furthermore, YouTube can store various cookies on your device or use comparable technologies for recognition (e.g., device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness, and prevent fraud. In addition, the collected data is processed in the Google advertising network.
If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.
The use of YouTube is in the interest of presenting our online offers in an appealing manner. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Insofar as corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
For more information on the handling of user data, please refer to YouTube's privacy policy at: https://policies.google.com/privacy.
The company has a certification according to the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States that aims to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

11. Facebook social plugins

11.1
Our online service uses social plugins ('plugins') from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ('Facebook') on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online service). The plugins can be recognised by one of the Facebook logos (white 'f' on blue tile, the term 'like', or a 'thumbs up' sign) or marked with the phrase 'Facebook Social Plugin'. The list and the appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/?locale=en_US.
 11.2
If a user accesses a function of this online service that contains such a plugin, their device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly to the user's device by Facebook and is integrated into the online service by the device. The processed data can be used to create usage profiles of the user. We have no control over the amount of data Facebook collects with the help of this plugin and therefore inform users based on our level of knowledge.
 11.3
Through the integration of plugins, Facebook receives the information that the user has accessed the corresponding site of our online service. If the user is logged into Facebook, Facebook can assign the visit to their Facebook account. If the user interacts with the plugins, for example by clicking on the 'like' button or leaving a comment, the corresponding information will be sent directly from their device to Facebook and stored there. If the user is not a member of Facebook, it is still possible for Facebook to obtain and store their IP address. According to Facebook, only an anonymised IP address is stored in Germany.
 11.4
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and setting options for the protection of the privacy of users, can be found in the Facebook data policy: https://www.facebook.com/about/privacy/.
 11.5
Facebook is certified under the Privacy Shield Agreement thereby guaranteeing compliance with the European data protection law.
 11.6
If a user is a Facebook member and does not want Facebook to collect information on them via this online service and link it to their membership data stored on Facebook, they must log out of Facebook before using our online service and delete their cookies. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the U.S. American website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. The settings are platform independent, which means they are applied to all devices such as desktop computers or mobile devices.

12. Facebook remarketing, Facebook Pixel and custom audiences

12.1
Based on our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online services), our online service uses 'Facebook Pixel' from the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ('Facebook'). With the help of the Facebook Pixel, Facebook is able to determine the visitors of our online service as the target group for the presentation of advertisements, so-called 'Facebook ads'. Accordingly, we use the Facebook Pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online service (so-called 'custom audiences'). This means that with the help of the Facebook Pixel, we want to make sure that our Facebook ads correspond to the potential interest of the users rather than coming across as annoying. Additionally, the Facebook Pixel allows us to track the effectiveness of Facebook ads for statistical and market research purposes by showing whether users were redirected to our website after clicking on a Facebook ad.
 12.2
The Facebook Pixel is integrated directly by Facebook when you visit one of our websites and can store a so-called cookie, i.e. a small file, on your device. If you subsequently log into Facebook or visit Facebook when logged in, the visit to our site will be recorded in your profile. The data collected about you is anonymous to us so it does not provide us with any information about the identity of the user. However, Facebook stores and processes the data so that a connection to the respective user profile is possible. Facebook processes the data in accordance with Facebook's Data Policy. Accordingly, you can find further information about how the remarketing Pixel works and how Facebook ads are displayed in general in the Facebook Data Policy: https://www.facebook.com/policy.php.
 12.3
Facebook is certified under the Privacy Shield Agreement thereby guaranteeing compliance with the European data protection law.
 12.4
You can object to Facebook Pixel collecting data and using it to display Facebook ads. To do this, you can visit the website set up by Facebook and follow the instructions on usage-based advertising settings here: https://www.facebook.com/settings?tab=ads or revoke your consent via the U.S. American website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. The settings are platform independent, which means they are applied to all devices such as desktop computers or mobile devices.

13. Social media buttons and links

The links/buttons to social networks and platforms (hereinafter referred to as 'social media') used within our online service only establish contact between the social networks and the users when the users click on the links/buttons and access the respective networks or their websites. This function corresponds to the operation of a regular online link.

13.1 LinkedIn
 13.1.1 LinkedIn Share Buttons
On our website, you can find plugins from the social network LinkedIn, respectively the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ('LinkedIn'). You can recognise the plugins from LinkedIn by the corresponding logo. Please note that the plugin establishes a connection between the user's internet browser and LinkedIn's server when visiting the website. LinkedIn is thus informed that our website has been visited with the user's IP address. If the 'Recommend Button' from LinkedIn is clicked and the user is logged into their account at LinkedIn, the user is able to link content from our website to their LinkedIn profile page. In doing so, the user enables LinkedIn to assign their visit to our website to their user account. We acquire no knowledge of the content of the transmitted data and its use by LinkedIn.
Further details on data collection, legal options and setting options on LinkedIn: https://www.linkedin.com/legal/privacy-policy

 13.1.2 User data at LinkedIn
Meusburger & Co KG is entitled to see which user has liked, shared or commented on our posts at LinkedIn.
 
 13.2 Xing
 13.2.1 Using a XING Button
We use the 'Share Button' from XING. Therefore a connection to the servers of XING AG, Gänsemarkt 43, 20354 Hamburg, Germany is established when this website is accessed via the user's browser. This provides the share functions (e.g. display of the counter value). The user's personal data is not stored when the website is accessed. In particular, XING does not store any IP addresses. The usage behaviour is also not evaluated. The current information on data protection regarding the 'Share Button' as well as other relevant information is listed here: https://www.xing.com/app/share?op=data_protection
 
 13.3 YouTube
 13.3.1 Using a YouTube plugin
This website contains at least one YouTube plugin, belonging to Google Inc. located in San Bruno, California, USA. As soon as the user visits a page on our website equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which particular web page of our website was visited by the user. If the user is also logged into their YouTube account, it would make it possible for YouTube to assign the surfing behaviour directly to the user's personal profile. The user can avoid this if they log out of the account beforehand. Further information about YouTube's collection and use of data: https://policies.google.com/privacy
 
 13.4 Google+
 13.4.1 Use of Google plugins ('Google Plus Button')
Our website contains the Google +1 button. Google +1 is a social network. It is provided by Google Inc.,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. With Google +1, the user has the option of publishing personalised content on the internet. However, Google will store information about the content that the user has clicked on with +1. Google will also store information about the visit to the website that the user has viewed. The +1 clicks can be and are usually used in the +1 profile of the user and in the other Google services, e.g. in the search results of the Google search, or otherwise used on Internet pages or Internet ads. Google stores information about the user's activities in Google +1. In order to use the +1 button, the user must create a public profile and a profile name on Google. Google +1 and all Google services will use this profile name. The identity behind the profile may be disclosed to all users who have knowledge of the email address or other information that can identify the user. Google uses, according to its own statements and in compliance with its privacy policy, the information transmitted by the user. Google also creates statistics of activities on Google +1. These may be published and passed on to third parties.
 
 13.5 Twitter
 13.5.1 Using Twitter functions ('Tweet Button')
Our website contains functions of Twitter Inc., 795 Folsom Street, Suite 600, San Francisco, CA 94107, USA. If the user uses Twitter and in particular the 'Retweet' function, Twitter links the Twitter account with the websites visited by the user. This will be shown to other users on Twitter, especially their own followers. This function also includes the transfer of data to Twitter. As the provider of our website, we are not informed by Twitter about the content of the transmitted data or their data usage. You can find further user information at: http://twitter.com/privacy.
The user has the option to change their privacy settings on Twitter in their account settings at http://twitter.com/account/settings.

14. Integration of other services and third-party content

14.1
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online services), it may occur that content or services of third-party providers, such as videos from YouTube, maps from Google Maps or fonts from other websites, are integrated within our online service. The integration of third-party content always requires that third-party providers use the IP address of the users, since without the IP address they could not send the content to the user's browser. The IP address is therefore required for the display of this content. Furthermore, the providers of the third-party content can set their own cookies and process the user's data for their own purposes. The processed data can be used to create usage profiles of the user. We will use this content collecting as little data as possible and will select reliable third-party providers with regard to data security.
14.2
The following presentation provides an overview of third-party providers and their contents, together with links to their privacy statements, which contain further information on the processing of data and in some cases already mentioned here, possibilities to revoke consent (so-called opt-out):
14.2.1
See: https://mailingwork.de/datenschutz/.
14.2.2
Maps provided by 'Google Maps' third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Privacy statement: https://policies.google.com/privacy?hl=en, Opt-out: https://www.google.com/settings/ads/.
14.2.5
Videos from the 'YouTube' platform of third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy statement: https://policies.google.com/privacy?hl=en, Opt-out: https://www.google.com/settings/ads/.
14.2.6
Contents of the 'Instagram' platform of third-party provider Instagram LCC, represented by Kevin Systrom and Mike Krieger, 1601 Willow Rd, Menlo Park CA 94025, USA. Privacy Policy: https://help.instagram.com/155833707900388
14.3
Further information on data protection guarantees: Google is certified under the Privacy Shield Agreement, thereby guaranteeing compliance with the European data protection law.

15. Users' rights, opt-outs, withdrawal and disagreement

15.1
In accordance with legal requirements, users have the right to request information free of charge about the personal data that we have stored about them.
15.2
In addition, users have the right to correct inaccurate data, to limit the processing and deletion of their personal data, if applicable, to assert their rights to data portability and in the event of the assumption of unlawful data processing, to file a complaint with the competent supervisory authority.
15.3
Furthermore, users can object to the processing of their data and revoke their consent with effect for the future (so-called opt-out).

16. Right to object

Users can object to the future processing of their personal data in accordance with legal requirements at any time. The objection may in particular be made against processing for direct marketing purposes.

17. Deletion of data

17.1
Data will be deleted as soon as it is no longer necessary for the purposes stated within the Meusburger framework and the deletion does not conflict with any legal storage obligations. This applies, for example, to user data that must be retained for commercial or tax reasons.

17.2
If the user's data is not deleted because it is necessary for other and legally permissible purposes, its processing is restricted. This means the data is blocked and not processed for other purposes.

18. Changes to the privacy policy

18.1
We reserve the right to change the privacy policy in order to adapt them to changed legal situations or in the event of changes to the service or data processing. However, this only applies with regard to declarations on data processing. If user consents are required or parts of the privacy statement contain provisions of the contractual relationship with the users, the changes will only be made with the user's consent.
18.2
Users are asked to inform themselves regularly about the content of the privacy statement.
18.3
Within the group your data will be passed on for marketing purposes, taking into account the local data protection regulations. In the respective user profiles data can be checked and managed, and the user can also define how and about which business areas of the Meusburger Group they would like to be informed.

19. Privacy policy (obligation to provide information) for customers, suppliers, interested parties, and other business partners etc.

Party responsible for data processing

Meusburger Georg GmbH & Co.KG
Kesselstr. 42
6960 Wolfurt
Including the affiliated Meusburger companies

Privacy policy contact

Meusburger Georg GmbH & Co.KG
Mr Thomas Jennerwein
Kesselstr. 42
6960 Wolfurt

Email address: privacy@meusburger.com

Purposes and legal basis of data processing

Personal data is processed for the purpose of fulfilling contracts or pre-contractual measures. This includes the customer data base with contacts as well as contact history, offers, orders, invoices, project data and other legal obligations of the data subject.

The legal bases are derived from Article 6 of the GDPR. Other important legal bases result from the German Commercial Code, tax legislation and other legal regulations applicable to Meusburger Georg GmbH & Co KG and the associated Meusburger companies. This also includes contractual regulations.
The processing of newsletters is based on the consent of the parties concerned.

Processing is necessary in order to safeguard the legitimate interests of the controller or of a third party in accordance with Article 13 (1) lit. d) of the GDPR.

If necessary, we process your data beyond the actual fulfilment of the contract in order to protect the legitimate interests of us or third parties. This includes:

• Sales management and sales reporting
• Assertion of legal claims and defence in legal disputes
• Ensuring IT security and IT operation
• Measures for building and facility security (e.g. access controls) and for safeguarding property rights
• Business management and further development measures
• Internal administrative purposes within the Meusburger companies
• Joint customer service and supplier administration within the Meusburger companies

Categories of recipients of the personal data (data transfer)

Within Austria, the European Union and the European Economic Area:

Auditors, bailiffs, and other creditors as well as other governmental bodies to fulfil legal obligations and for requested certificates, logistics companies, customers as well as suppliers and other agencies and business partners.
In addition, your data will be passed on/transmitted within the Meusburger companies for internal administrative purposes and for joint customer service and supplier administration within the scope of what is necessary.

Third country incl. decision on appropriateness

In the context of international business relationships, the transmission according to Article 6 (1) lit.b is made for the performance of contracts or for the implementation of pre-contractual measures. No decision on appropriateness is required for this.

Storage period
The respective purposes result from legal requirements as well as from relevant industry-specific regulations. The personal data will be deleted after its purpose has been served.

Rights of data subjects
You can exercise your rights at any time using the contact details above. Under the GDPR, when your personal data is processed you are considered a data subject and are granted the following rights from the controller:

Information on the rights of data subjects
The data subject has the right to obtain confirmation from the controller as to whether personal data relating to him/her is being processed; if this is the case, the data subject has the right to be informed about such personal data and to receive the information specified in Article 15 in the GDPR.
The data subject has the right to request that the controller adjusts incorrect or incomplete personal data about him/her where appropriate (Article 16 of the GDPR).
The data subject has the right to request that the controller immediately deletes the personal data relating to him/her if one of the reasons listed in Article 17 of the GDPR applies, e.g. if the data is no longer required for the intended purposes (right to erasure).
The data subject has the right to request that the controller restricts the processing if one of the conditions listed in Article 18 of the GDPR is met, e.g. if the data subject has filed an objection to the processing, until the consent agreement is settled.
The data subject has the right to object at any time, on grounds relating to his/her particular situation, to the processing of personal data concerning him/her. The controller then no longer processes the personal data unless he/she can demonstrate compelling reasons for processing which are worthy of protection and which outweigh the interests, rights and freedoms of the data subject, or unless the processing serves to assert, exercise or defend legal claims (Article 21 of the GDPR).

Rights of data subjects
If you have given us your consent to process personal data for specific purposes (e.g. processing of pictures of the data subject), the legality of this processing is based on your consent.
Given consent can be revoked at any time. This also applies to the revocation of declarations of consent that were issued before the GDPR came into effect, i.e. before 25 May 2018.
Please note that the revocation is only effective for the future. Processing operations that took place before the revocation are not affected.

Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data concerning him or her is in breach of the GDPR (Article 77 of the GDPR). The data subject may invoke this right before a supervisory authority in the member state in which he/she is resident, at his/her place of work or at the place where the suspected infringement is committed.

The supervisory authority responsible for Meusburger Georg GmbH & Co is:

The Austrian Data Protection Authority
Barichgasse 40-42
Tel.: +43 152/152-0
E-mail address: dsb@dsb.gv.at

Provision of personal data according to Article 13. (2) lit. e of the GDPR.

Within the framework of our business relationship, you only need to provide us with personal data that is necessary for the establishment, execution and termination of the employment relationship or that we are legally obliged to collect. Without this data, we will not be able to carry out the employment relationship.

Amendments to the privacy policy

Change of purpose

We reserve the right to change this privacy statement in compliance with the data privacy regulations. If we intend to process your data for other purposes, i.e. for purposes other than those for which it was collected, we will inform you of this in advance in compliance with the statutory provisions.

20. Privacy policy (obligation to provide information) for applicants

Controller for data processing

Meusburger Georg GmbH & Co KG
Kesselstraße 42
6960 Wolfurt
including the affiliated Meusburger companies

Privacy policy contact

Meusburger Georg GmbH & Co KG
Mr Thomas Jennerwein
Kesselstraße 42
6960 Wolfurt
Email: privacy@meusburger.com

Type of data processed
As part of the application process, we process the data that you send us in connection with your application. This usually includes master data, curricula vitae, photos, references and certificates as well as other information you share with us or submit to us during the application procedure.

Purposes and legal basis of data processing
The personal applicant data is processed for the purpose of establishing the employment relationship. This also includes legally prescribed processing and compliance with other legal obligations of the controller.
The legal bases are derived from Article 6 GDPR, especially from Article 6(1), point (b) GDPR (general contract initiation) and – in case you consented to inclusion in the applicant pool (consent can be revoked at any time) – from Article 6(1), point (a) GDPR, as well as from $ 26 BDSG according to German law. This also includes relevant contractual regulations and internal company guidelines/regulations of Meusburger Georg GmbH & Co KG.

Sources of the personal data
Generally, your personal data is provided or submitted to us by yourself via online application, email or post. Moreover, we may also receive your personal data including your application documents from temporary employment agencies, online job portals, job placement services and head hunters.

Processing for the protection of the legitimate interests of the controller or of a third party
If necessary, we process your data beyond the actual fulfilment of the contract in order to protect the legitimate interests of us or third parties. This includes:

• Applicant management
• Assertion of legal claims and defence in legal disputes
• Measures for building and facility security (e.g. access controls) and for safeguarding of property rights

Categories of recipients of the personal data (data transfer)
Within Austria, the European Union and the European Economic Area: affiliated companies; governmental bodies in order to fulfil legal obligations and for requested certificates as well as processors

Third country incl. adequacy decision
Data will only be transferred to affiliated companies in a third country in the case of applications that are directly addressed to our affiliated companies in this third country.

Storage period
If we are unable to offer you a job, you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Article 6(1), point (f) GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data is then deleted and the physical application documents are destroyed. Storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will only be deleted when further storage is no longer necessary. Longer storage may also take place if you have given your consent (Article 6(1), point (a) GDPR) or if statutory retention obligations prevent deletion.

Inclusion in the applicant pool
If we do not offer you a job, you may have the opportunity to join our applicant pool. If you are included in the applicant pool, all documents and details from your application will be transferred to the pool so that you can be contacted in the event of suitable vacancies.
Inclusion in the applicant pool is based exclusively on your express consent (Article 6(1), point (a) GDPR). The submission of consent is voluntary and is not related to the current application process. The data subject may withdraw their consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, provided there are no legal grounds for retention.
The data from the applicant pool will be irrevocably deleted no later than two years after consent was given.

Rights of data subjects
You can exercise your rights at any time using the contact details above. Under the GDPR, when your personal data is processed you are considered a data subject and are granted the following rights with regard to the controller:

• Right to information about the personal data we have stored about you
• Right to rectification of your personal data if it is incorrect, not legally compliant or outdated
• Right to erasure of your personal data if one of the reasons listed in Article 17 GDPR applies
• Right to restrict the processing of your personal data if one of the conditions set out in Article 18 GDPR is met
• Right to object
• Right to file a complaint with the relevant supervisory authority
• The supervisory authority responsible for the Meusburger Georg GmbH & Co KG is:
  • Austrian Data Protection Authority
    Barichgasse 40–42
    1030 Wien
    Phone: +43 152/152-0
    Email: dsb@dsb.gv.at

If you have given us your consent to process personal data for specific purposes (e.g. processing of pictures of the data subject), the legality of this processing is based on your consent. Given consent can be revoked at any time. Please note that the revocation is only effective for the future. Processing operations that took place before the revocation are not affected.

Provision of personal data
As part of the application process, you only need to provide the personal data that is required to establish the employment relationship or that we are legally obliged to collect. Without this data, we will generally not be able to carry out the application process.

Amendments to the privacy policy
We reserve the right to change this privacy statement in compliance with the data privacy regulations. If we intend to process your data for other purposes than those for which it was collected, we will inform you of this in advance in compliance with the statutory provisions.
Last update: 11.2023