Data protection notice in accordance with Art. 13 GDPR

Overview of data protection

This data protection declaration serves to comply with the information obligations within the meaning of Art. 13 DSGVO. The following explanations are intended to provide an overview of the various types of processing of personal data on this website. Personal data means any information relating to an identified or identifiable person.

The data protection terms used in this declaration are based on the definitions of the GDPR (General Data Protection Regulation - Regulation (EU) 2016/679).

The person responsible for data processing on this website can be found in the imprint of the website.

Steinwasen Park Betriebsgesellschaft mbH

Isabel Brown
Gottlieb-Daimler-Str. 6th
79331 Teningen

Email: info@steinwasen-park.de
Telephone number: 0049 (0)7602 94468-0

We have appointed an external data protection officer:

suasio GmbH
Frank Turner
Dr.-Rudolf-Eberle-Str. 2a
76534 Baden-Baden

Tel: 07223 95666-0
datenschutz@suasio.de
www.suasio.de

As the operator of this website, the protection of the personal data of website users is very important to us. We therefore process your personal data in accordance with this data protection declaration and the statutory provisions, in particular the GDPR. In this data protection notice we explain which personal data we process and why we do it.

According to the GDPR, the processing of personal data must always be based on a purpose (principle of purpose limitation). On this website we comply with this principle by processing personal data exclusively for a specific purpose. An example of such a purpose would be that we want to make our website available to the users of our website in the most user-friendly way possible. The respective purposes are explained further with the respective recipients.

According to the principle of lawfulness, any processing of personal data requires a legal basis. We comply with this principle by basing every processing of personal data on at least one legal basis within the meaning of Article 6 (1) GDPR. In particular, the following reasons for legality come into question for our website:

The data subject has consented to the processing of personal data (Art 6 Para 1 lit a GDPR)
The processing of personal data is necessary to fulfill a contract to which the data subject is a party or to carry out pre-contractual measures (Article 6 (1) (b) GDPR)
The processing of personal data is necessary to protect the legitimate interests of the person responsible or a third party (Art 6 Para 1 lit f GDPR)

The relevant legal basis(s) are listed again below for the respective processing.

The GDPR also prescribes the principle of storage limitation. This states that personal data may only be processed until the purpose for which it was collected has been achieved. In the event that no specific storage period has been specified, this depends on the fulfillment of the purpose.

Personal data is collected from users on our website. This is done by the relevant user sending us the data themselves, or by the data being collected by us automatically or after prior consent has been obtained.

Affected rights

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. You also have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time if you have any further questions on the subject of data protection. The contact options can be found in the imprint.

As a data subject within the meaning of the GDPR, you have the opportunity to assert various rights. The data subject rights arising from the GDPR are the right to information (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21) , the right to lodge a complaint with a supervisory authority and the right to data portability (Article 20).

Withdrawal:

Some data processing can only take place with your express consent. You have the option to revoke your consent at any time. However, the lawfulness of the data processing up to the point of revocation is not affected by this.

Right to:

If the processing is based on Article 6 paragraph 1 lit e or f GDPR, you as the data subject can object to the processing of your personal data at any time for reasons arising from your particular situation. You also have this right in the case of profiling based on these provisions. Unless we can demonstrate any compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms or processing serves to assert, exercise or defend legal claims, we will no longer process the relevant data after an objection.

If the processing of personal data serves to operate direct advertising, you also have the right to raise an objection at any time. The same applies to profiling related to direct advertising. Here, too, we will no longer process personal data as soon as you raise an objection.

Right of appeal:

If there is a violation of data protection law, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular with the member state of your habitual residence, your place of work or the place of the alleged violation.

Right to data portability:

Insofar as your data is processed automatically on the basis of consent or the fulfillment of a contract, you have the right to receive this data in a structured, common and machine-readable format. You also have the right to request the transfer and provision of the data to another person responsible, insofar as this is technically feasible.

Right to information, correction and deletion:

You have the right to receive information about your processed personal data with regard to the purpose of the data processing, the categories, the recipients and the duration of the storage. Furthermore, you have the right to know whether there is a right to correction, deletion or restriction of the personal data concerning you. If you have any questions on this topic or on other topics relating to personal data, you can of course contact us using the contact options given in the imprint.

Right to restriction of processing:

You can assert the restriction of the processing of your personal data at any time. To do this, you must meet one of the following requirements:

You contest the accuracy of the personal data. For the duration of the verification of the correctness, you have the right to demand a restriction of the processing.
If processing is unlawful, you can request the restriction of the use of the data as an alternative to deletion.
If we no longer need your personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims, you can request the restriction of processing as an alternative to deletion.
If you object to the processing in accordance with Art. 21 Para. 1 GDPR, your interests and ours will be weighed up. Until this consideration has been made, you have the right to request the restriction of processing.

A restriction of processing means that the personal data, apart from storage, is only used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest Union or a Member State may be processed.

Provision of the website web host

Our website is provided by an external hoster. Naturally, this involves the transmission and storage of personal data on the hoster's servers. In particular, the IP addresses, meta and communication data of the users and data on website access are processed.

The data processed by the web host are:

IP address of the website visitor's device
Device used
Visitor's operating system
browser type
Name of retrieved file
Temporal information of the retrieval (date and time)
amount of data
Information whether the retrieval of the data was successful

In order for our website to be displayed, it must be hosted by a web host. When a website visitor accesses the site, a connection to the web host's servers is established. Inevitably, the IP address and other information of the website visitor must be processed.

The processing of personal data by our web host is based on the justification of legitimate interest (Art 6 Para 1 lit f GDPR). We have a legitimate interest in ensuring that our website can be displayed and visited by individual users of the site.

Use of cookies

We use cookies on our websites. These are text files that are stored on your end device via the browser either for the duration of the visit to the website (session cookies) or permanently. Persistent cookies remain stored until they are deleted by the browser or the user himself.

Without the use of certain cookies, it is not possible for the website to function correctly. The basis for the storage of these technically necessary and functional cookies is Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in storing these technically necessary and functional cookies in order to be able to ensure the necessary technical functions of our website.

Insofar as processing by cookies takes place in the course of contract initiation or contract execution, Art. 6 Paragraph 1 lit. b GDPR is the basis for processing.

For all other cookies, consent is obtained before they are stored. The storage of these cookies and the resulting processing of personal data is therefore based on Article 6 (1) (a) GDPR. You can revoke your consent at any time. This does not affect the lawfulness of the processing that took place up to the point of revocation. These cookies are stored for various purposes, such as analyzing user behavior or displaying advertising.

The settings in your browser enable you to prevent or restrict the setting of cookies. The processing of so-called flash cookies has to be done via the settings of the flash player and cannot be prevented via the browser. You can also delete cookies that have already been set in your browser. If the appropriate settings have been made in the browser, it may not be possible to use all the functions of our website.

Use of External Services

External services are used on our website. External services are services provided by third parties that are used on our website. This can be done for a variety of reasons, such as embedding videos or for website security. When using these services, personal data is also passed on to the respective provider. If we do not have a legitimate interest in using these services, we will obtain consent prior to use.

Analytics

The processing of the personal data of our website visitors enables us to analyze the surfing behavior of our website visitors. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. The analysis tools used could be used, for example, to create user profiles for the display of targeted or interest-related advertising messages, to recognize our website visitors the next time they visit our website, to measure their click/scroll behavior and downloads, to create heat maps, to recognize page views, but to measure the duration of the visit or the bounce rates As a further example, the origin of the website visitors (city, country, from which site the visitor comes) can also be recognized. With the help of the analysis tools, our market research and marketing activities can be improved.

The processing of the data is based on the legal basis of consent (Article 6 (1) (a) GDPR). The data subject has allowed the processing of their personal data with their free, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other justification within the meaning of Art. 6 Para.1 DSGVO on which we base the processing. We proceed in the same way if data subjects revoke their consent. This does not affect the lawfulness of the processing that took place up to the point of revocation.

Google Analytics

We use the Google Analytics service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

Consent Management

In order to be able to comply with data protection requirements, we use a consent management tool on our website. With this tool we obtain the necessary consent for the setting of cookies or the use of external services. The consents are stored accordingly.

We base this processing on a legitimate interest (Article 6 (1) (f) GDPR).

Our legitimate interest in using a consent management tool is to be able to obtain and save the necessary consent for the setting of cookies and the use of external services.

Compliance GDPR/CCPA Cookie Consent

We use the GDPR/CCPA Cookie Consent compliance service on our website. The service provider is Complianz BV. This has its office at Kalmarweg 14-5,9723, XNUMX JG Groningen, the Netherlands.

Further information can be found in the manufacturer's data protection information at the following URL: https://complianz.io/legal/privacy-statement/?cmplz_region_redirect=true&cmplz-region=eu

Content Delivery Network (CDN)

We use a Content Delivery Network (CDN) to optimize the performance and availability of our website. For this purpose, your IP address and the information on when you visited our website will be processed by this service provider who makes this network available. All further information on data processing by this service provider can be found in their data protection information.

We base this processing on a legitimate interest (Article 6 (1) (f) GDPR).

Our legitimate interest in using a content delivery network is to be able to display our website as quickly, securely and reliably as possible.

Google Statics

We use the Google Static service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

map service

We use a map service on this website for an attractive presentation of our online offer and the places we have specified. In order for the map to be used and displayed on the website, the map must be loaded from the provider's server. In doing so, your IP address is transmitted to the provider's server. Depending on the provider, cookies and other technologies, including fonts, are loaded. You can find more information on this in the data protection declaration of the provider.

Google Maps

We use the Google Maps service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

interface software

Business processes run more cheaply, faster and with fewer errors if they are automated using software via interfaces. In this way, they can be efficiently integrated into company processes via their own website or via social networks. We use interface software on our website to link different applications with one another and to transfer personal data securely from one application to another.

Google APIs

We use the Google APIs service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

Search Engine

In order to increase reading comfort, we have installed a search engine with several functions for your search on our website. This makes it easier or easier for you to find content again.

Google

We use the Google service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

web font

This site uses so-called web fonts for the uniform display of fonts, which are provided by an external provider and loaded by the browser when the website is accessed. The provider of the web font is informed that our website was accessed from your IP address because your browser establishes a direct connection to the provider of the web font.

Google Fonts

We use the Google Fonts service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

web security

We use tools on our website that protect us from unauthorized access, spam and other attacks. This serves on the one hand for our security, but also on the other hand for the security of our website visitors.

We base this processing on a legitimate interest (Article 6 (1) (f) GDPR).

Our legitimate interest is to be able to guarantee the security of our website and to protect ourselves from unauthorized access, spam and other attacks.

Recaptcha

We use the Google Recaptcha service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

Advertising

Tools are used on our website that enable advertising to be placed and the success of placed ads to be evaluated. Advertising represents a source of income via our website. Personal data that is processed in this way is, for example, the IP address, access times and device information.

Google double click

We use the Google Double Click service on our website. The service provider is Google Ireland Limited. This has its office at Gordon House, Barrow Street Dublin 4, Ireland.

Using the service may result in data being transferred to a third country (USA).

Further information can be found in the manufacturer's data protection information at the following URL: https://policies.google.com/privacy

Contact form

On our website there is the possibility to notify us via a contact form. In order to contact you via this form, we ask for certain information. In particular, the request must be described and a contact option must be provided. At least this information is mandatory and must be provided to use the contact form. Before you can contact us via the contact form, you will be asked to consent to the processing of the data provided via a checkbox.

Contact via the contact form serves pre-contractual or contractual purposes and the processing of personal data in this context is based on the legal basis of Article 6 Paragraph 1 lit. b GDPR.

E-mail correspondence and contact via telephone

In accordance with legal requirements, we have provided a telephone number and e-mail address on our website. The data transmitted by telephone or e-mail is automatically stored by us in order to be able to process corresponding inquiries or to be able to contact the person concerned. Data that we obtain in this way will not be passed on to third parties without your consent.

E-mail correspondence and telephone contact serve pre-contractual or contractual purposes and the processing of personal data in this context is based on the legal basis of Article 6 (1) (b) GDPR.

Handling applicant data

It is possible to send us an application (e.g. by post, online application form or by e-mail). The personal data obtained in this way will be stored and processed by us to decide whether an employment relationship should be entered into.

The basis for processing is Art. 6 Para. 1 lit. b GDPR and Art. 6 Para. 1 lit. a GDPR, provided consent has been given. As far as German law is applicable, § 26 BDSG is also the legal basis for the processing (initiation of an employment relationship). You can revoke your consent at any time. This does not affect the lawfulness of the processing that took place up to the point of revocation.

If an employment relationship results from the application, the data collected for the processing of the employment relationship will be stored on the basis of Article 6 (1) (b) GDPR. If there is no employment relationship, the data will be stored for up to 6 months after the end of the application process on the basis of Article 1 Paragraph 6 Letter f GDPR. We have a legitimate interest in the storage in order to be able to defend ourselves against any lawsuits or allegations. If consent has been given, the data will be stored longer on the basis of Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time. This does not affect the lawfulness of the processing that took place up to the point of revocation.

applicant pool

If there is no employment relationship, the applicant can be included in our applicant pool. All the details of the application are saved in order to be able to contact the relevant person in the event of suitable job advertisements.

The data is only stored in the applicant pool after consent has been given on the basis of Article 6(1)(a) GDPR. This consent can be revoked at any time, after which the corresponding data will be deleted, provided there are no legal reasons for retention. Deletion takes place no later than two years after consent has been given. This does not affect the lawfulness of the processing that took place up to the point of revocation.

Note

This privacy notice was created by the Service www.easy-dsgvo.de created.