Data collection on this website
Who is responsible for the data collection on this website?
The data processing on this website is handled by the website operator, whose contact information you can find in the legal notice of this website.
How do we collect your data?
Your data are collected in part when you communicate them to us. This can be, for example, data which you enter in a contact form.
Other data are automatically collected by our IT network when you visit the website. These are primarily technical data (e.g. Internet browser, operating system or the time at which the page was visited). These data are collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data are collected to ensure that the website is provided without errors. Other data can be used for analysing your user behaviour.
What rights do you have with regard to your data?
You have the right to obtain information at any time and at no cost about the origin, recipients and purpose of your stored personal data. Furthermore, you have a right to demand rectification or erasure of these data. You can contact us about this and other questions concerning data protection at any time at the address specified in the legal notice. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority.
Analytics tools and third-party tools
When you visit this website, your browsing behaviour can be statistically evaluated. This primarily happens with cookies and analysis programs. Analysis of your browsing behaviour usually occurs anonymously; the browsing behaviour cannot be traced back to you.
This website is hosted by an external service provider (host). Personal data collected on this website are stored on the servers of the host. These data are primarily IP addresses, contact requests, metadata and communication data, contract data, contact information, names, website hits and other data generated by a website.
The host is used for the purpose of fulfilment of contract with respect to our potential and existing customers (Art. 6 Par.1 subparagraph b GDPR) and in the interest of a secure, fast and efficient provision of our online services by a professional provider (Art. 6 Par.1 subparagraph f GDPR).
Our host will process your data only insofar as doing so is required for fulfilling its service obligations and will follow our instructions with respect to these data.
Conclusion of a contract on order processing
To ensure that data are processed in compliance with data protection laws, we have concluded a contract on order processing with our host.
3. General information and mandatory information
Be aware that there may be security vulnerabilities during Internet data transmission (such as communication via email). Seamless protection of data from third-party access is impossible.
Note about the responsible authority
The responsible authority for the data processing on this website is:
Alois Müller GmbH
87700 Memmingen, Germany
Phone: +49 (8331) 9448-0
The responsible authority is the natural or legal entity which makes decisions either alone or jointly with others about the purposes and means for processing personal data (such as names, email addresses or the like).
Legally prescribed data protection officer
We have appointed a data protection officer for our company.
Alois Müller Holding GmbH &
87700 Memmingen, Germany
Phone: +49 (8331) 9448-32
Withdrawal of your consent to data processing
Many data processing operations are possible only with your express consent. After granting consent, you can withdraw it at any time. This can be done by sending us an informal message via email. The withdrawal does not affect the legality of processing done prior to the withdrawal.
Right to object to data collection in particular cases and to direct marketing (Art. 21 GDPR)
Where your personal data are being processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing, your personal data shall then no longer be processed for direct marketing purposes (Right to object according to Art. 21 Par.2 GDPR).
Right to lodge a complaint with the responsible supervisory authority
In the event of infringements of the GDPR, the data subject has the right to lodge a complaint with the authorities, particularly in the member state of his or her habitual residence, of his or her workplace or of the location of the alleged infringement. The right to lodge a complaint shall not be affected by any other administrative or judicial redress.
Right to data portability
In the case of data which we process automatically on the basis of your consent or to fulfil a contract, you have the right to have that data turned over to you or a third party in a common, machine-readable format. If you request that the data be transmitted directly to another controller, this shall be done only insofar as it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, like the orders or requests you send us as the page operator, this site uses SSL or TLS encryption. You can identify an encrypted connection by the fact that the browser’s address bar switches from “http://” to “https://” and by the lock icon in your address bar. If SSL or TLS encryption is enabled, the data you transmit to us cannot be intercepted by third parties.
Access, erasure and rectification
Within the scope of the valid statutory provisions, at any time and at no cost you have the right to receive information about your stored personal data, their origin and recipients and the purpose of the data processing and, where appropriate, you have a right to rectification or erasure of these data. You can contact us at any time about this and other questions concerning personal data at the address specified in the legal notice.
Right to restriction of processing
You have the right to demand that processing of your personal data be restricted. You can contact us about this at any time at the address specified in the legal notice. The right to restriction of processing exists in the following cases:
- If you contest the accuracy of your personal data which we have stored, we generally need time to verify this.
For the duration of the verification, you have the right to demand that processing of your personal data be restricted.
- If your personal data were/are being processed unlawfully, you can demand the restriction of data processing instead of erasure.
- If we no longer need your personal data, but you need them for exercising, defending or enforcing legal claims, you have the right demand restriction of the processing of your personal data instead of erasure.
- If you have objected in accordance with Art. 21 Par.1 GDPR, your interests and ours must be weighed. Provided that it still has not been determined whose interests outweigh the other’s, you have the right to demand that processing of your personal data be restricted.
If you have restricted the processing of your personal data, these data—apart from their storage—may be processed only with your consent or for asserting, enforcing or defending legal claims or for the protection of the rights of another natural or legal entity or for causes of an important public interest of the European Union or one of its member states.
4. Data collection on this website
The Internet sites sometimes use files called ‘cookies’. Cookies do no harm your computer and do not contain any viruses. Cookies are designed to make our website more user-friendly, more effective and more secure. Cookies are small text files which are stored on your computer and which your browser stores.
Most of the cookies we use are called session cookies. They are deleted automatically after your visit has ended. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser when you visit again.
Cookies required for carrying out the electronic communication process or for providing certain functions which you desire (such as the shopping cart function) are stored on the basis of Art. 6 Par.1 subparagraph f GDPR. The website operator has legitimate interests in storing cookies for technically flawless and optimised provision of its services. If corresponding consent has been requested (for example, consent to the storage of cookies), the processing will be done exclusively on the basis of Art. 6 Par.1 subparagraph a GDPR; this consent can be withdrawn at any time.
If you use the contact form to send us enquiries, your information from the enquiry form, including the contact information you have indicated there, is stored by us for the purpose of processing the enquiry and for the case of follow-up questions. We do not pass these data on to third parties without your consent.
These data are processed on the basis of Art. 6 Par.1 subparagraph b GDPR, to the extent that your enquiry is associated with the fulfilment of a contract or is required for carrying out pre-contractual measures. In all other cases, the processing is based on our legitimate interests in effectively processing the enquiries sent to us (Art. 6 Par.1 subparagraph f GDPR) or on your consent (Art. 6 Par.1 subparagraph a GDPR), provided that this was requested.
The data you entered in the contact form remain with us until you prompt us to erase them, until you withdraw your consent to their storage or until the purpose for storage of that data no longer exists (e.g. after your enquiry has been fully processed). Mandatory statutory provisions—particularly retention periods—shall not be affected.
Server log files
The provider of the pages automatically collects and stores information in server log files, which your browser automatically transmits to us.
• Browser type and browser version
• Operating system being used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address
These data are not aggregated with other data sources.
These data are collected on the basis of Art. 6 Par.1 subparagraph f GDPR.The website operator has legitimate interests in the technically flawless presentation and optimisation of its website. Server log files must be collected for this purpose.
Enquiry via email, phone or fax
If you contact us via email, phone or fax, your enquiry, including all personal data provided in it (name, enquiry), will be stored and processed by us for the purpose of handling your concern. We do not pass these data on to third parties without your consent.
These data are processed on the basis of Art. 6 Par.1 subparagraph b GDPR, to the extent that your enquiry is associated with the fulfilment of a contract or is required for carrying out pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 Par.1 subparagraph a GDPR) and/or on our legitimate interests (Art. 6 Par.1 subparagraph f GDPR) because we have legitimate interests in effectively processing the enquiries sent to us.
The data you send to us in the contact requests remain with us until you prompt us to erase them, until you withdraw your consent to their storage or until the purpose for storage of that data no longer exists (e.g. after your concern has been fully processed). Mandatory statutory provisions, particularly statutory retention periods, shall not be affected.
Processing data (customer and contract data)
We collect, process and use personal data only insofar as they are required for establishing, determining the content of or modifying the legal relationship (inventory data). This occurs on the basis of Art. 6 Par.1 subparagraph b GDPR, which permits data processing to fulfil a contract or carry out pre-contractual measures.
We collect, process and use personal data regarding the use of this website (usage data) only insofar as this is required to enable the user to use the service or to bill the user.
After the order is completed or the business relationship is terminated, the collected customer data are erased. Statutory retention periods shall not be affected.
5. Analysis tools and marketing
This website uses functions of Google Analytics, a Web analytics service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics cookies are stored and this analysis tool is used on the basis of Art. 6 Par.1 subparagraph f GDPR.The website operator has legitimate interests in the analysis of user behaviour to optimise both its website and its marketing. If corresponding consent has been requested (for example, consent to the storage of cookies), the processing will be done exclusively on the basis of Art. 6 Par.1 subparagraph a GDPR; This consent can be withdrawn at any time.
We have enabled the IP anonymisation function on this website. When this is done, your IP address will be truncated by Google in member states of the European Union or in other states which have signed the agreement governing the European Economic Area prior to transmission of the IP address to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and then truncated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, compile reports about the website activity for the website operators and render other services associated with website use and Internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Furthermore, you can prevent Google’s collection and use of data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB.
We have concluded an order processing contract with Google and are fully implementing the strict specifications of the German data protection authorities for use of Google Analytics.
User-level and event-level data stored at Google which are linked with cookies, forms of user identification (such as User ID) or advertising IDs (such as DoubleClick cookies, Android Advertising ID) are anonymised or erased after 26 months. For details on this, refer to the following link: https://support.google.com/analytics/answer/7667196?hl=en
6. Plug-ins and tools
YouTube with extended data protection
This website incorporates YouTube videos. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the extended data protection mode. According to YouTube, when YouTube is in this mode it does not store any information about visitors to this website before they view a video. On the other hand, extended data protection mode does not absolutely rule out sharing of data with YouTube partners. For example, regardless of whether you watch a video, YouTube establishes a connection to the Google DoubleClick network.
As soon as you start a YouTube video on this website, a connection is established with the YouTube servers. In the process, the YouTube server is informed about which of our pages you have visited.
If you are logged in to your YouTube account, you enable YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, after a video is started, YouTube can store various cookies on your end device. YouTube can use these cookies to obtain information about visitors to this website. This information is used, for example, to collect video statistics for improving user-friendliness and preventing fraud attempts. The cookies remain on your end device until you delete them.
After a YouTube video is started, other data processing operations may be triggered over which we have no influence.
YouTube is used in the interest of having an appealing presentation of our online services. This constitutes a legitimate interest in terms of Art. 6 Par.1 subparagraph f GDPR. If corresponding consent has been requested (for example, consent to the storage of cookies), the processing will be done exclusively on the basis of Art. 6 Par.1 subparagraph a GDPR; This consent can be withdrawn at any time.
7. In-house services
Our applicant portal is operated by Fravis GmbH, Sonnenhalde 10, 73489 Jagstzell, Germany. The product is called “EasyHR”.
Handling of applicant data
We give you the option of applying to us (for example, via email, post or our applicant portal). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process.
We ensure that your data are collected, processed and used in compliance with valid data protection law and all other statutory provisions and that your data are treated with strict confidentiality.
Scope and purpose of the data collection
If you send us an application, we process your associated personal data (such as contact and communication data, application materials, notes taken during job interviews, etc.) insofar as this is required to make a decision about establishing an employment relationship.
The legal basis for this is Section 26 of the new German Federal Data Protection Act (BDSG-neu) in accordance with German law (Negotiation of an employment relationship), Art. 6 Par.1 subparagraph b GDPR (general contract negotiation) and, provided that you have given consent, Art. 6 Par.1 subparagraph a GDPR.
This consent can be withdrawn at any time. Within our company, your personal data are shared only with people who are involved in processing your application.
If the application is successful, the data you have submitted will be stored in our data processing systems in accordance with Section 26 of the new German Federal Data Protection Act (BDSG-neu) and Art. 6 Par.1 subparagraph b GDPR for the purpose of implementing the employment relationship.
Retention period of the data
If we are unable to make you a job offer, if you decline a job offer or if you withdraw your application, we reserve the right to retain the data provided by you on the basis of our legitimate interests (Art. 6 Par.1 subparagraph f GDPR) for up to 6 months starting from the end of the application process (decline of offer or withdrawal of application). After this time period, the data will be erased and the physical application materials will be destroyed.
Retention is necessary particularly for verification purposes in the event of a legal dispute. To the extent it is apparent that the data will be required after expiry of the 6-month period (for example, due to an impending or pending legal dispute), erasure will not occur until the purpose for further retention no longer exists.
Prolonged retention can also occur if you have given corresponding consent (Art. 6 Par.1 subparagraph a GDPR) or if erasure is barred by statutory retention obligations.