Thank you very much for visiting our website. The protection of your personal data is very important to us.

In principle, you can use our website without providing any personal data. However, if a data subject wishes to make use of our company’s services via our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we will always obtain the data subject’s consent.

The processing of personal data (e.g. a data subject’s name, address, email address or telephone number) is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to us.

As the data controller, we have implemented numerous technical and organisational measures to ensure the most comprehensive possible protection of the personal data processed via our website.

However, data transmissions over the internet may, in principle, contain security vulnerabilities, meaning that 100 per cent protection cannot be guaranteed.

To ensure that you are fully aware of the collection and use of personal data on our websites, please take note of the following information.

This website is not aimed at minors, and we do not knowingly collect data relating to minors.

1. Definitions

This privacy policy is based on the definitions used by the European legislators when enacting the GDPR (Article 4 of the GDPR). This privacy policy is intended to be both easy to read and easy to understand for everyone. To ensure this, we would first like to explain the terms used. Among others, the following definitions are used in this privacy policy:

a) ‘personal data’:
any information relating to an identified or identifiable natural person (hereinafter referred to as the ‘data subject’); a natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

(b) ‘data subject’:
any identified or identifiable natural person whose personal data are processed by the controller.

(c) ‘processing’:
any operation or set of operations which is carried out on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or any other form of making available, alignment or combination, restriction, erasure or destruction;

(d) ‘restriction of processing’:
the marking of stored personal data with the aim of limiting their future processing;

(e) ‘profiling’:
any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements of that natural person;

(f) ‘controller’:
the natural or legal person, public authority, agency or other

body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law;

(g) ‘recipient’:
a natural or legal person, public authority, agency or other body to whom personal data are disclosed, irrespective of whether they are a third party or not. However, public authorities which may receive personal data in the course of a specific investigation mandate under Union law or the law of the Member States shall not be regarded as recipients; the processing of such data by those authorities shall be carried out in accordance with the applicable data protection rules and in line with the purposes of the processing;

(h) ‘third party’:
a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor;

i) ‘consent’:
any freely given, specific, informed and unambiguous indication of the data subject’s wishes, by a statement or by a clear affirmative action, by which the data subject signifies their agreement to the processing of personal data relating to them.

2. Contact details of the data controller

The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is:

Rollex Förderelemente GmbH & Co. KG
Represented by the managing directors Mr Hans Rolf Lambeck, Mr Patrick Lambeck and Mr Olliver Mierau
Gewerbehof 22
59368 Werne
Telephone: +49 (0) 2389 / 98970
Fax: +49 (0) 2389 - 6866
Email: info@rollex-group.com

Data Protection Officer:
Frank Berns
Konzept 17 GmbH
Westring 3
24850 Schleswig/Schuby
mail@konzept17.de

3. Collection and storage of personal data, and the nature and purpose of its use

a) When visiting the website:
You can generally use our website for information purposes without providing any personal data.

We collect data on a limited basis regarding visitors to our website and use this information to improve your browsing experience on our website and to manage our services. The following information is collected automatically without any action on your part and is stored until it is automatically deleted:

Technical data, including your Internet Protocol (IP) address, access details, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, as well as other technology on the devices you use to access this website.

The legal basis for data processing is Article 6(1)(f) of the GDPR. Our legitimate interest arises from the purposes of data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your identity.

In addition, we use cookies and analytics services when you visit the website. Further details on this can be found in this privacy policy.

b) When using the contact form:
Personal data is collected when you contact us by email. This data is stored and used solely for the purpose of establishing contact.

The legal basis for the processing of the data is our legitimate interest in responding to your enquiry in accordance with Article 6(1), first sentence, point (f) of the GDPR. If the purpose of contacting us is to conclude a contract, or if the contact involves pre-contractual measures, the additional legal basis for processing is Article 6(1), first sentence, point (b) of the GDPR.

Your data will be deleted once your enquiry has been fully processed. This is the case when it is clear from the circumstances that the matter has been fully resolved and provided that there are no statutory retention obligations to the contrary.

c) Submission of application documents:
Personal data is collected when application documents are submitted via the contact form provided or by email.

Specifically, the following personal data may be collected from the application documents:

• Your identity (your full name, any previous names, evidence of name changes); gender, date of birth and marital status;
• Proof of your right to work, which may include a photograph, as well as nationality, place of birth, driving licence, etc. (in accordance with statutory provisions);
• Your contact details, including your email address, home address and telephone numbers;
• Your criteria, preferences and expectations regarding your job search;
• Your qualifications, skills, experience and education;
• Your current remuneration (salary and fringe benefits);
• Your education;
• Your career history;
• Details of referees (previous employers or referees from your educational background);
• Reference letters;
• Any other information contained in your CV or information you wish to provide to us;

This data is stored and used exclusively for the purpose of recruitment.

The legal basis for this processing of data is, in accordance with Article 6(1)(a) of the GDPR, the consent you have given to the processing of your personal data for one or more specific purposes.

Your personal application data will generally be deleted automatically three months after the application process has been completed. This does not apply if statutory provisions preclude deletion, if further storage is necessary for the purposes of providing evidence, or if you have expressly consented to longer-term storage.

Should we be unable to offer you a position currently available, but believe, based on your profile, that your application might be of interest for future vacancies, we will store your personal application data for twelve months, provided you expressly consent to such storage and use.

Furthermore, your data will be deleted before the end of the specified period if you notify us of this by post or email.

4. Use of cookies

To ensure an engaging experience on our website and to enable the use of certain functions, we use so-called cookies on various pages. Cookies are small amounts of data stored on your computer by the website operator. Data is stored in cookies to enable certain functions of our website (e.g. navigation). Temporary cookies are automatically deleted when you close your browser. They contain only an identification number (session ID), which allows the server to associate successive requests from the browser with the same user. Temporary cookies are used by many servers and do not pose a security risk.

Where personal data is also processed via individual cookies implemented by us, such processing is carried out in accordance with Article 6(1)(b) of the GDPR, either for the performance of a contract, or in accordance with Article 6(1)( f of the GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective experience for visitors.

You can choose whether or not to accept cookies. Changes to this can be made in your browser settings. By changing your browser settings, you can choose to accept all cookies, to be notified when a cookie is set, or to reject all cookies.

Each browser manages its cookie settings differently. This is described in each browser’s help menu, which explains how you can change your cookie settings. You can find these for the respective browsers via the following links:

Internet Explorer:
http://windows.microsoft.com/de

Firefox:
https://support.mozilla.org/de

Chrome:
http://support.google.com/chrome

Safari:
https://support.apple.com/de

Opera:
http://help.opera.com/de

If you decide not to accept our cookies, the functionality of our website may be reduced and you may not be able to use certain services. We ask for your understanding in this matter

5. Disclosure of personal data to third parties

In order to process your enquiry or order as efficiently as possible, we may, where necessary, disclose your personal data to the following recipients for various purposes and in various ways, in accordance with local laws and regulations:

• External service providers who perform services on our behalf (including external consultants, business partners and professional advisers such as solicitors and accountants, technical support functions and IT consultants)
• Tax, audit or other authorities, where we believe in good faith that we are obliged by law or under any other regulation to disclose this data (for example, in response to a request from a tax authority or in connection with an anticipated legal dispute)
• Credit reference agencies in connection with credit checks
• Providers of printed materials and advertising partners
• Marketing technology platforms and suppliers
• Logistics companies
• Host Europe GmbH, Cologne (for the hosting of the website, your IP address and the time of your visit to our homepage are transmitted)

However, where your personal data is disclosed to third parties, the scope of the data transmitted is limited to the minimum necessary.

We will only pass on your personal data to third parties if:

• you have given your explicit consent in accordance with Article 6(1)(a) of the GDPR,
• the disclosure is necessary, in accordance with Article 6(1), first sentence, point (f) of the GDPR, for the establishment, exercise or defence of legal claims, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
• where there is a legal obligation to disclose the data in accordance with Article 6(1), first sentence, point (c) of the GDPR, and where this is permitted by law and necessary under Article 6(1), first sentence, point (b) of the GDPR for the performance of contractual relationships with you.

6. Data protection

When transferring data, for example when entering applicant details or similar, we use the SSL (Secure Socket Layer) security protocol in conjunction with 256-bit encryption. You can recognise that data is being transmitted securely by the closed padlock icon in the browser address bar on the left.

7. Google Maps

Our website uses the Google Maps mapping service via an API (Application Programming Interface), provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. We have no influence over this data transfer. As soon as you access a page containing Google Maps, your browser connects directly to the Google servers.

The use of Google Maps is in the interests of presenting our online services in an appealing manner and making it easy to locate our sales outlets. This constitutes our legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

Further information on the handling of user data can be found in Google’s Privacy Policy: https://www.google.de/policies/privacy/.

8. Embedding of video content

On our website, we provide you with videos from YouTube, offered by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a webpage containing an embedded video, your browser connects directly to the YouTube servers. The video content is transmitted directly from YouTube to your browser and is merely embedded on our website. We have no influence over the nature or use of the data by YouTube. Further information on YouTube’s handling of user data can be found in YouTube’s privacy policy: https://support.google.com/youtube

We have embedded our videos using the enhanced privacy mode. This ensures that the amount of data collected is kept to a minimum.

By using YouTube’s services, we aim to ensure that our website and offerings are presented in an attractive manner. We also have an interest in keeping our customers informed about the latest developments.

The interests mentioned constitute our legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

9. Rights of the data subject

a) Right of access under Article 15 of the GDPR:
In particular, you have the right to obtain information regarding your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the intended storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, to lodge a complaint with a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved, the implications for you and the intended effects of such processing, as well as your right to be informed of the safeguards in place pursuant to Article 46 of the GDPR when your data is transferred to third countries.

b) Right to rectification under Article 16 of the GDPR:
You have the right to have inaccurate personal data concerning you rectified without undue delay and/or to have incomplete personal data stored by us completed.

c) Right to erasure under Article 17 of the GDPR:
You have the right to request the erasure of your personal data where the conditions set out in Article 17(1) of the GDPR are met. However, this right does not apply, in particular, where processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

d) Right to restriction of processing under Article 18 of the GDPR:
You have the right to request the restriction of the processing of your personal data whilst the accuracy of your data, which you have contested, is being verified; if you object to the erasure of your data on the grounds of unlawful processing and instead request the restriction of the processing of your data; if you require your data to establish, exercise or defend legal claims after we no longer require such data following the fulfilment of the purpose, or if you have objected on grounds relating to your particular situation, whilst it remains to be determined whether our legitimate grounds override yours.

e) Right to be informed pursuant to Article 19 of the GDPR:
If you have exercised your right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.

f) Right to data portability pursuant to Article 20 of the GDPR:
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller, insofar as this is technically feasible.

g) Right to withdraw consent pursuant to Article 7(3) of the GDPR:
You have the right to withdraw your consent to the processing of data at any time, with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, provided that further processing cannot be based on a legal basis for processing without consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.

h) Right to lodge a complaint under Article 77 of the GDPR:
If you consider that the processing of your personal data infringes the GDPR, you have – without prejudice to any other administrative or judicial remedy – - the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place where the alleged infringement occurred. For the federal state of North Rhine-Westphalia, the supervisory authority is the ‘State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia’. For further information, you may visit the State Commissioner’s website (https://www.ldi.nrw.de/index.php).

10. Links to third-party websites

The links published on our website are researched and compiled by us with the utmost care. However, we have no influence over the current or future design and content of the linked pages. We are not responsible for the content of the linked pages and expressly do not endorse the content of these pages. Liability for illegal, incorrect or incomplete content, as well as for any damage arising from the use or non-use of the information, lies solely with the provider of the website to which the link refers. Liability on the part of anyone who merely refers to the publication via a link is excluded. We are only liable for third-party content if we have actual knowledge of it – including any unlawful or criminal content – and it is technically possible and reasonable for us to prevent its use.

11. Objection

You may object to the use of your data at any time by sending written notice by email (info@rollex-group.com) or by post, with effect for the future.

If you exercise your right to object, we will cease processing the data in question.

12. Retention period for personal data

The period for which personal data is stored is determined by the relevant statutory retention period. Once this period has expired, the relevant data will be routinely deleted, provided it is no longer required for the performance of a contract or for entering into a contract, or provided we no longer have any interest in continuing to store it.

13. Validity and amendments to this privacy policy

This Privacy Policy is currently valid and is dated June 2018.

Due to the ongoing development of our website and the services offered through it, or as a result of changes to legal or regulatory requirements, it may become necessary to amend this privacy policy.