PRIVACY POLICY

PRIVACY POLICY WWW.ROLAND-SCHMITT.DE

Provider Identification
The service provider according to § 13 Telemediengesetz (TMG) and the responsible body according to § 3 Abs. 7 Bundesdatenschutzgesetz (BDSG) is

Ronald Schmitt Design GmbH
Gretengrund 3
69412 Eberbach / Neckar

For more details, please refer to our imprint.

Information about the collection of personal data
Below we inform you about the collection and processing of personal data when using this website. Personal data is data that allows you to draw conclusions about yourself or relate directly to you, eg. Name, address, e-mail addresses, usage behaviour of this website.

The extent of processing of personal data
In principle, we process the personal data of our users only insofar as this is necessary to provide a functioning website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent cannot be obtained for reasons of fact, and the processing of the data is permitted by law.

Data protection declaration
We guarantee that we shall only collect, process, store and use your data in connection with the processing of your inquiries and for internal purposes, as well as to provide the requested services or content.

Bases for data processing
We process the personal data of users solely in compliance with the relevant data protection regulations. Users’ data is only processed in the following cases of legal permission:
To provide our contractual services (e.g. processing of orders) as well as online services; the processing is required by law, if you have given your consent, or on the basis of our legitimate interests (i.e. interest in the analysis, optimization and cost-effective operation and security of our online offer within the meaning of Art. 6 Para. 1(f) GDPR, in particular for range measurement, the creation of profiles for advertising and marketing purposes as well as the collection of access data and use of third-party services)
We want to point out where the aforementioned legal bases are regulated in the GDPR:
Consent: Art. 6 Para. 1(a) and Art. 7 GDPR
Processing to fulfil our services and carry out contractual measures: Art. 6 Para. 1(b) GDPR
Processing to fulfil our legal obligations: Art. 6 Para. 1(c) GDPR
Processing to safeguard our legitimate interests: Art. 6 Para. 1(f) GDPR

Storage period of your data
We shall observe the principles of data economy and data avoidance. This means that we store the data that you provide to us only for as long as necessary to fulfil the purposes above or as long as the various storage periods prescribed by the legislator. If the particular purpose expires or after the expiry of the corresponding periods, your data shall be routinely blocked and deleted by the statutory guidelines.

Information about the collection of personal data and provider identification.
Below we inform you about the collection and processing of personal data when using this website. Personal data is data that allows you to draw conclusions about yourself or relate directly to you, eg. Name, address, e-mail addresses, usage behaviour of this website.

Collection of personal data for informational use
In the case of purely informational usage of this website, i.e. if you do not register, sign in or otherwise provide us with information about the use of the website, we will not collect any personal data from you, except personal data provided by your web browser, depending on your settings and transmitted to us to enable you to visit our website. These personal data are:

• IP address,
• Date and time of your request,
• Timezone difference to Greenwich Mean Time (GMT),
• The content of your requirement,
• Access status / HTTP status code,
• Each transferred amount of data,
• The website from which your request comes
• Browser,
• Operating system and its interface,
• Language and version of the browser software.

The listed data are stored in the log files of the provider. Storage of this data together with other personal data of the user does not take place.
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. F DSGVO.
Storage in log files is done to ensure the functionality of the website. Also, the data is used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Data transmission to third parties
We want to point out that data is transferred when using our online offer due to the use of Google Analytics.

Data transmission to a third country or an international organisation
A third country is deemed to be one in which the GDPR is not a directly applicable law. In principle, this includes all countries outside the EU or the European Economic Area.
Data will be transmitted by a third-party country or an international organisation. In the process, care will be taken to ensure that suitable/appropriate guarantees exist there and that enforceable rights and effective remedies are available to you.
You can obtain a copy of the necessary guarantees at the following links:

• Privacy Shield: https://www.privacyshield.gov/list
• Standard contractual clauses: http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:DE:PDF

Protection of minors
Persons under the age of 16 may not transmit any personal data to us without the consent of their legal guardian(s). Personal information may only be made available to us by persons under the age of 16 if they have the express consent of their guardian(s), or by persons who are 16 years of age or older. Said data shall be processed by this data protection declaration.

Cookies and Social Media
We use cookies.
These are small text files stored on your computer that are stored on your hard drive assigned to the browser you are using and which gives us anonymous information. Our cookies are unable to execute programs or transmit viruses on your computer. We use cookies to make our website more user-friendly and efficient for you as well as for the anonymous statistical evaluation of the user behaviour of our visitors.

Control of cookies by the user
Browser cookies: You can set all browsers only to accept cookies on request. Furthermore, just cookies whose pages are currently being visited can be allowed. All browsers offer functions which enable the selective deletion of cookies. The acceptance of cookies can also be generally turned off; however, all restrictions on the user-friendliness of this online offer have to be accepted.

Using first-party cookies (Google Analytics cookies)
Log Google Analytics cookies:
Unique users – Google Analytics cookies collect and group your data. All activities during a visit are summarised. A distinction is made between users and individual users by setting Google Analytics cookies.
User activities – Google Analytics cookies also store data about the start and end time of a visit to the online offer and how many pages you have viewed. When the browser is closed, or the user is inactive for a more extended period (default 30 minutes), the user session is ended, and the cookie records the visit as finished. The date and the time of the first visit are also recorded. The total number of visits per unique user is even logged. External link: http://www.google.com/analytics/terms/de.html
You can prevent Google from collecting the data generated by the cookie and relating to the use of the online offer (incl. your IP address) and from processing this data by downloading and installing the following link in the browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=de.
Further information is available under the point “Web analysis service Google Analytics/Universal Analytics”.

A lifetime of the cookies used
Cookies are managed by the web server of our online offer. This online offer applies:
Persistent cookies (permanent browser identification)
Lifetime: 2 years

Disable or remove cookies (opt-out)
Every web browser offers the option to restrict and delete cookies. Further information is available on the following websites:
Internet Explorer: http://windows.microsoft.com/en-GB/windows7/How-to-manage-cookies-in-Internet-Explorer-9
Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies
Google Chrome: https://support.google.com/chrome/answer/95647?hl=en
Safari: https://support.apple.com/de-de/HT201265

Facebook button
On our website, we use a social plugin for the social media network facebook.com. Facebook is a company of Facebook Inc., 1601 S. California Ave, Palo Alto, CA, 94304, USA. The plugins are recognisable by one of the Facebook logos. The logo is a white “f” on a blue tile or a “thumbs up” sign. The addition “Facebook Social Plugin” is a corresponding label. The list and appearance of Facebook Social Plugins can be viewed at the following web address: https://developers.facebook.com/docs/plugins/
Whenever you visit a site on our website that has such a plugin, the plugin causes the browser you are using to load and display the optical representation of the plugin from the Facebook server. So your browser builds a direct connection with the servers of Facebook. The content of the plugin is transmitted by Facebook directly to your browser and incorporated by this into the website. We, therefore, do not influence the amount of data that Facebook collects with the help of this plugin. We, accordingly, inform you about the information available to us.
The Facebook server will be notified which particular website on our website you are currently visiting. If you are a member of Facebook and logged into Facebook while visiting our site, Facebook recognises through the information sent by the plugin which particular webpage of our website you are currently visiting. There is a similar assignment to your user account. If you use the plugin offered by Facebook, for example, or leave a comment by clicking on the “Like” button, this will also be assigned to your user account and saved there. Even if you are not a member of Facebook, there is a possibility that Facebook will identify your IP address.
Facebook has posted privacy notices at https://www.facebook.com/policy.php. There you will find the purpose and scope of the data collection as well as information on the further processing and use of the data by Facebook. Your rights and options to protect your privacy will also be published there.
You can prevent the transmission and storage of personal information and your browsing behaviour when you log out of Facebook. This logout must be done before you visit our website. Also, a browser add-on named “Facebook Blocker” is offered at the following link. This “Facebook Blocker” prevents data collection and data transfer of your visitor data for the future. You can find the Facebook Blocker at https://webgraph.com/resources/facebookblocker/

Embed Vimeo videos
The website of Ronald Schmitt Design GmbH incorporates videos through Vimeo.com, a service of Vimeo, LLC (“Vimeo”).
When you use Vimeo to watch videos, it connects to Vimeo servers in the United States. Through the connection, specific information is sent to Vimeo. It may also be that Vimeo stores cookies on your device. Furthermore, Vimeo allows the use of specific other features, such as the rating or sharing of videos. To do so, you may need to log in to Vimeo or certain third-party providers (such as Facebook or Twitter) with your user account, so that they can assign the information you have provided to your respective user account. These features are provided by Vimeo and its third party vendors only, so you should carefully review their privacy policy before using the features. Roland Schmitt Design GmbH is not aware of the content of data collected by Vimeo or third parties and does not influence their use.
For more information about how Vimeo collects and uses your data and your rights, see the Vimeo privacy policy at https://vimeo.com/privacy.

Web analysis Google Analytics/Universal Analytics
We use Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to enable analysis of the use of the online offer. The information generated by the cookie about the use of this online offer is usually transmitted to a Google server in the USA and stored there. Thus, data is transferred to a third country. In the process, care will be taken to ensure that suitable/appropriate guarantees exist there and that enforceable rights and effective remedies are available to you.
You can obtain a copy of the necessary guarantees at the following links:

Privacy Shield: https://www.privacyshield.gov/list
Standard contractual clauses: http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:DE:PDF

If IP anonymisation is activated in our online offer, your IP address will be truncated by Google within the area of the Member States of the European Union or in other countries which are party to the Agreement on the European Economic Area.
However, your full IP address will be transmitted to a Google server in the USA and truncated there only in exceptional cases. Google uses this information on our behalf to evaluate the use of our online offer, to compile reports on the activities of the online provider and to provide further services to us associated with the use of the online offer and the Internet. The IP address that your browser conveys within the scope of Google Analytics will not be associated with any other data held by Google. You may prevent the storage of cookies by selecting the appropriate settings in your browser software. However, please note that you may not be able to use all the functions of this online offer as a result.
We want to inform you that this online offer uses Google Analytics with the extension “_anonymizeIp()”, which only allows IP addresses to be processed in a truncated form to prevent them from being linked directly to persons.
Furthermore, we use Google Analytics reports collecting demographic features and interests.
The usernames sent by us and with cookies (e.g. user ID) or data linked with advertising IDs shall be automatically deleted after 14 months. Data whose retention period has been reached shall be removed automatically once a month. Further information on usage conditions and data protection is available at  https://www.google.com/analytics/terms/de.html or  https://policies.google.com/?hl=de
Furthermore, you can prevent Google from collecting the data generated by the cookie and relating to the use of the online offer (incl. your IP address) and from processing this data by downloading and installing the following link in the browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=de.

Use of the website to contact
In addition to the purely informational use of our webpage, we offer you as a service provider the opportunity to reach us. All personal data such as first name, surname, fax and telephone number as well as your e-mail address as well as other information that you voluntarily give us will be stored by us exclusively to answer your questions. Subject to legal filing requirements, personal data will be deleted within two weeks of answering your question.

§ 5 Rights to information and revocation
(1) You have the right to demand information from us at any time free of charge about your data stored by us, including their origin, purpose of storage, recipients or categories of recipients to whom this data may be disclosed.
(2) Consent to the use of personal data that you have given or will give us may be revoked free of charge at any time with future effect.
(3) Please direct your rights above to information and revocation by e-mail to info@ronald-schmitt.de or our address is given in the imprint.

Applicant data protection
Protecting your data is very important to us. Therefore, in the following, we would like to inform you about our data protection principles. The respective Ronald Schmitt Design company to which you are applying is committed to upholding these principles, allowing you to implement within a trustworthy process.

Application relevant data
Following the completion of the application process, the answers and information you have given during your online application process will be stored along with your name. After this time, your results will be stored anonymously, without your name, for further statistical evaluation purposes. This statistical data record does not allow any inference to the actual person and serves solely as a basis for statistical evaluations. Additional recruitment procedures will follow in subsequent application steps. A negative test result will also be relevant for applications to similar jobs within the LH Group.

Applications to a job offer
If you have applied for a job offer your data will be made available to the specialised department which posted the position as well as to the relevant personnel department.

Recognition of declined applicants
If your application does not lead to an employment contract, a recognition data record will be stored. We need this data record to recognise you if you apply to the same position anew. All of your specific qualifications will be deleted from this data record. The recognition data record only includes the following information:

• Last name
• First name
• Date of birth
• Date of the rejection letter

A recognition data record is permanently deleted after 365 days. The recognition data record of applicants for vocational training positions is permanently removed after 180 days.

Security when dealing with person-related data
Your data is automatically encrypted during its transfer into our application management system. The precautions are taken to protect data always correspond to the current status of technology.

How long is your data stored?
Your data will be deleted after one year at the latest according to the legal deadlines in so far as Article 17, para. 3, DSGVO applies to keep them longer possible.

Which data protection rights do you have?
It is an essential issue for Ronald Schmitt Design to make our processing procedures fair and transparent. Therefore it is important to us that aside from the right of objection, the concerned person may make use of the following reasons when the individual legal requirements below are met:

• Right to obtain information, Art. 15 DSGVO
• The right of correction, Art. 16 DSGVO
• The right of deletion (“Right to be forgotten”), Art. 17 DSGVO
• The right of processing limitation, Art. 18 DSGVO
• The right to data transmission, Art. 20 DSGVO
• The right of objection, Art. 21 DSGVO

To exercise these rights, you can contact datenauskunft@dlh.de per email. For identification purposes, please include the following information:

• Name
• Address
• Email address – and optionally: application number

If you should send us a copy of your ID, then we ask you to kindly “blackout” all other data except for your first and last name and address.
Please note that in the case of an objection to your application process cannot be continued.
To process your request as well as for identification purposes, we would like to point out that we will process your data by Art. 6 paras. 1 lit. c DSGVO.

What are your rights?

a) Right to information
You have the right to obtain free-of-charge information about your stored data. Upon request, we shall inform you in writing about the nature of the personal data that we have stored about you by applicable law. This shall also include the origin and the recipients of your data as well as the purpose of the data processing.

b) Right to correction
You have the right to have your data stored with us corrected if it is incorrect. You can request a restriction of the processing, e.g. if you dispute the accuracy of your data.

c) Right to block
You can also have your data blocked. To ensure that your data can be prevented at any time, this data must be maintained in a lock file for control purposes.

d) Right to deletion
You may also request the removal of your data as long as no statutory storage obligations exist. If such a duty exists, we shall block your data upon request. If the relevant legal requirements exist, we shall delete your data even if you do not request it.

e) Right to data transferability
You are entitled to claim that we provide the personal data transmitted to us in a form which allows it to be transferred to another location.

f) The right of appeal to a supervisory authority
You have the opportunity to contact one of the data protection supervisory authorities with a complaint.

State representative for data protection and freedom of information Baden-Württemberg.
Postal address: P.O.Box 10 29 32, 70025 Stuttgart, Germany
Home address: Königstraße 10a, 70173 Stuttgart, Germany
Telephone +49 711 615541–0
Telefax: +49 711 615541–15
E-mail: poststelle@lfdi.bwl.de
Web: https://www.baden-wuerttemberg.datenschutz.de

You can open the complaint form via the following link: https://www.baden-wuerttemberg.datenschutz.de/online-beschwerde

g) Right to object
You may revoke the use of your data for internal purposes with effect for the future at any time. Sending an e-mail to dsb@ronald-schmitt.de in this regard is sufficient. However, such revocation shall not affect the legality of the processing procedures that we have carried out up to that point. This shall not affect data processing of all other legal bases, such as the initiation of contracts (see above).

Protection of your data
We shall take contractual, organisational and technical security measures by state of the art to ensure that the regulations of the data protection laws are observed, and also to protect the data processed by us against any accidental or intentional manipulation, loss, destruction or against access by unauthorised persons.

The security measures include in particular the encrypted transmission of data between your browser and our server. 256-bit-SSL (AES 256) encryption technology is used for this purpose.

Your data is protected in the following ways (excerpt):

1. Safeguarding the confidentiality of your information
   We have taken different measures for entry, admission and access control to protect the privacy of your data stored with us.
2. Safeguarding the integrity of your data
   We have taken different measures for transfer and input control to maintain the integrity of your data stored with us.
3. Maintaining the availability of your data
   We have taken different measures for order and availability control to preserve the availability of your data stored us.
   The security measures used are improved on an ongoing basis in line with technological developments. Despite these precautions, we cannot guarantee the security of your data transmission to our online offer due to the insecure nature of the Internet. Therefore, any data that you transmit to our online offer is at your own risk.

Address:
Data Protection Officer
Ronald Schmitt Design GmbH
Gretengrund 3
69412 Eberbach
E-Mail: dsb@ronald-schmitt.de