1. General Information

The protection of personal data is important to us. With this privacy policy, we inform you about which personal data we process when you visit our website and use the functions provided there, for what purposes this happens, on what legal basis the processing is based, and what rights you have as a data subject.

Personal data is any information relating to an identified or identifiable natural person, for example name, address, email address, telephone number, IP address or usage data.

This privacy policy applies to our website at www.gtf-freese.de as well as for the functions integrated there. For linked websites of other providers, their own data protection information applies.

2. Person responsible

Controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

Freese AG
Carl-Benz-Straße 29
28237 Bremen
Germany


Telephone: +49 421 39608-0
E-Mail: kontakt@gtf-freese.de
Website www.gtf-freese.de


Legally represented by the Board of Directors: Harald Stöhr.

3. Data Protection Officer

We have appointed a Data Protection Officer. You can reach the Data Protection Officer at:

Hubben & von Haacke Law Firm
Patrick van Haacke

Parkallee 117
28209 Bremen
Telephone: 0421 / 3649930
E-Mail: datenschutz@gtf-freese.de 

You can contact our Data Protection Officer at any time with any questions regarding data protection, as well as for the exercise of your rights.

4. Legal basis for processing

We only process personal data if there is a legal basis for doing so. Depending on the processing, the following legal bases are particularly relevant:

  • Article 6(1)(a) of the GDPR, if you have given us your consent;
  • Art. 6(1)(b) GDPR, where the processing is necessary for the performance of a contract or for pre-contractual measures;
  • Article 6(1)(c) GDPR, where we are subject to a legal obligation;
  • Art. 6(1)(f) GDPR, where processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.;
  • Art. 9(2) GDPR, insofar as special categories of personal data are processed in exceptional cases and a specific legal basis exists for this.

Where we use cookies or similar technologies that store or read information on your end device, this is done in addition in accordance with the provisions of Section 25 of the TDDDG. We only use cookies and comparable technologies that are not technically necessary if you have previously given your consent.

5. Storage duration and deletion

We only store personal data for as long as it is necessary for the respective purposes or if there are statutory retention periods. If the purpose of processing ceases to apply or a statutory retention period expires, the data will be deleted or blocked, provided that there is no other legal basis for further storage.

Unless a more specific storage period is specified in this privacy policy, personal data will remain with us until the purpose of processing no longer applies, you withdraw a validly given consent, or you request rightful deletion and no overriding statutory retention or documentation obligations conflict.

6. Recipients and order processing

Within our company, only those positions that require access to personal data for the fulfilment of the stated purposes will be granted access. Furthermore, we may engage service providers, particularly for hosting, maintenance, IT security, communication, website operation, form processing, or consent management.

As far as service providers process personal data on our behalf, we conclude order processing agreements with them in accordance with Art. 28 GDPR. Furthermore, data is only passed on to third parties if this is permitted by law, you have consented, or we are legally obliged to do so.

7. Data transfers to third countries

Personal data will only be processed outside the European Union or the European Economic Area if it is necessary for the provision of our services, if you have consented, or if there is another legal basis. In these cases, we will ensure that the legally stipulated safeguards are in place, in particular adequacy decisions by the EU Commission, EU standard data protection clauses, or other appropriate safeguards in accordance with Art. 44 et seq. of the GDPR.

It cannot be ruled out that authorities in the USA or other third countries may access personal data when using services from providers based there. Further details can be found in the respective sections on the services used.

8. Your Rights

In accordance with the statutory regulations, you have the following rights:

  • Right to information about the personal data processed by us (Art. 15 GDPR);
  • Right to have inaccurate data rectified or incomplete data completed (Article 16 of the GDPR);
  • Right to erasure of personal data (Art. 17 GDPR);
  • Right to restriction of processing (Article 18 GDPR);
  • Right to data portability (Article 20 GDPR);
  • Right to object to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR);
  • Right to withdraw consent previously given, with effect for the future (Art. 7(3) GDPR);
  • Right not to be subject to a decision based solely on automated processing, including profiling, where it produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).

To exercise your rights, you can contact us at the above contact details at any time.

9. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with a supervisory authority for data protection. The authority fundamentally responsible for us is:

The State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen
Georgstraße 122-124
27570 Bremerhaven

Telephone: +49 (0) 421 361 2010 or +49 (0) 471 596 2010
E-Mail: office@datenschutz.bremen.de
Website www.datenschutz.bremen.de 

10. Website provision and server log files

When you access our website, the web server we use automatically processes information that your browser transmits. This may include, in particular:

  • IP address of the requesting endpoint;
  • Date and time of access;
  • Requested page or file;
  • data transferred;
  • Successful retrieval message;
  • Browser type and browser version;
  • Operating system used;
  • Referrer URL, if provided;
  • Requesting provider.

The processing of this data is technically necessary to deliver the website, ensure operational stability and security, and detect misuse. The legal basis is Article 6(1)(f) of GDPR. Our legitimate interest lies in the secure and functional operation of the website.

Server-Logfiles werden grundsätzlich nur so lange gespeichert, wie dies zur Erreichung der genannten Zwecke erforderlich ist. Eine längere Speicherung kann erfolgen, wenn dies zur Aufklärung von Angriffen oder Störungen erforderlich ist. Die Speicherdauer für Server-Logs beträgt in der Regel 7 Tage.

11. Hosting

Our website is operated by an external hosting service provider. The hosting service provider processes the data generated when visiting the website on our behalf, in particular server log files, technical connection data, and, if applicable, content data from forms.

The legal basis for the use of the hosting service provider is Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the secure, fast and efficient provision of our website. Where data processing is carried out on our behalf, this is done on the basis of a contract in accordance with Article 28 of the GDPR.

12. SSL/TLS encryption

This website uses SSL or TLS encryption for security purposes and to protect the transmission of confidential content. You can tell if a connection is encrypted by looking for „https://“ in the browser's address bar and the padlock icon in the browser bar.

13. Cookies and similar technologies

Our website may use cookies and similar technologies. Cookies are small text files that are stored on your device. Similar technologies may include, for example, Local Storage, Session Storage, pixels, or comparable identifiers.

We distinguish between technically necessary technologies and non-essential technologies. Technically necessary technologies are required for the website to function, to be operated securely, or to provide functions that you have expressly requested. The legal basis for this is Article 6(1)(f) of the GDPR and Section 25(2) of the TDDDG.

We only set non-essential cookies and similar technologies, particularly for statistical, marketing, or convenience purposes, if you have previously given your consent. The legal basis is Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. You can withdraw or change your consent at any time with future effect.

14. Kontaktaufnahme per E-Mail, Telefon oder Kontaktformular

When you contact us by email, telephone or contact form, we process the data you provide to handle your request. This may include, in particular, your name, email address, telephone number, company, subject, message, and technical metadata of the transmission.

The legal basis is Article 6(1)(b) GDPR if your request relates to a contract or pre-contractual measures. In all other cases, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in processing and responding to your request. Where you have expressly consented, the legal basis is Article 6(1)(a) GDPR.

The data will be deleted as soon as your enquiry has been fully processed and provided there are no statutory retention or record-keeping obligations that prevent this.

15. Bewerbungen

If you apply to us via our website or by email, we will process the application data you submit to carry out the application process. This may include, in particular, contact details, curriculum vitae, certificates, proof of qualifications, cover letter, and other information you provide.

The legal basis is § 26 BDSG and Art. 6 para. 1 lit. b GDPR. If you give us your consent, for example, for extended inclusion in an applicant pool, the legal basis is Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.

Bewerbungsunterlagen werden nach Abschluss des Bewerbungsverfahrens gelöscht, soweit keine gesetzlichen Aufbewahrungsfristen, Nachweispflichten oder berechtigten Interessen entgegenstehen. Die interne Löschfrist beträgt 3 Monate.

16. Webanalyse / Google Analytics 4 

If Google Analytics 4 is used on our website, it is a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us to understand how visitors use our website so that we can improve our services.

Google Analytics may use cookies or similar technologies and process information about the use of our website, such as page views, time spent on the site, approximate location data, technical device information, browser data and interactions. In doing so, personal data may be transmitted to Google.

The use will only take place after your prior consent. The legal basis is Art. 6(1)(a) GDPR and § 25(1) TTDSG. You can revoke your consent at any time via the cookie settings with effect for the future.

In the case of Google services, the transfer of personal data to the USA or other third countries cannot be ruled out. Further details can be found in Google’s privacy policy. Important: Universal Analytics should no longer be listed as a service used in an up-to-date privacy policy. If Analytics is used, a technical check must be carried out to verify whether Google Analytics 4 is actually active.

17. Captcha-Schutz für Formulare

To protect our forms from abusive usage and automated entries, we may use a CAPTCHA service. Such a service is used to verify whether entries are made by a human or automatically.

In particular, the following data may be processed: IP address, technical device and browser information, time of access, mouse movements or other interaction data. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in protecting the website, IT systems and forms from spam, misuse and automated attacks. Where cookies or similar technologies are used, consent in accordance with Section 25(1) of the TDDDG may also be required.

18. Schriftarten und externe Inhalte

Our website may embed fonts or other content from external providers. If fonts are provided locally on our server, no data will be transmitted to the font provider.

When external fonts are loaded directly from third-party servers, the provider may become aware that our website has been accessed via your IP address. The legal basis is, where applicable, your consent according to Art. 6(1)(a) of the GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TDDDG). Alternatively, with technically necessary and privacy-friendly design, Art. 6(1)(f) of the GDPR may be considered.

19. Social-Media-Links und externe Plattformen

Our website may contain links to our social media presences or external platforms. If you click on such a link, you will leave our website. The respective provider is generally responsible for the subsequent processing of personal data by the respective platform.

To the extent that only static links or icons are integrated on our website, no personal data is regularly transferred to the operators of social networks simply by visiting our website. However, if active plugins, embedded feeds or tracking pixels are used, specific information and, if necessary, consent is required for this.

20. Externe Links

Our website may contain links to third-party websites. We have no influence over what personal data is processed on the linked websites. Please refer to the respective privacy policies there for information.

21. Keine automatisierte Entscheidungsfindung

There is no automated decision-making, including profiling, in the context of our website in accordance with Article 22 of the GDPR, unless otherwise stated in this privacy policy.

22. Aktualität und Änderung dieser Datenschutzerklärung

We reserve the right to adapt this privacy policy if the legal situation, our website or the services used change. The version published on the website at the time is authoritative.