Data Protection Policy
1. General information and compulsory information
The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and comply with the statutory Data Protection Regulations as well as this Data Protection Policy.
A variety of personal data will be collected when you use this website. Personal data refers to data which is suitable to identify you personally. This Data Protection Policy explains which data we collect and what we use it for. It also explains how this happens and for which purpose.
We point out that the transfer of data in the Internet (e.g. in case of email communication) can contain safety gaps. Uninterrupted protection of your data from access by third parties is not possible.
Information about the Responsible Authority
The Responsible Authority for data processing on this website is:
Gebr. Ostendorf Kunststoffe GmbH
The Responsible Authority is the natural or legal entity which decides solely or jointly with others on the purposes and means of processing personal data (e.g. names, email addresses etc.).
Legally prescribed data protection controller
We have appointed a data protection controller for our company.
External data protection controller
AGAD Service GmbH
Waldring 43 – 47
Phone: +49 (0) 234 282 533-20
2. Collection of personal data when visiting our website
In the case of the mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data transmitted by your browser to our server. If you wish to look at our website, we collect the following data, which is technically required to display our website to you and to ensure stability and security (legally based on Ar-ticle 6 (1) page 1 lit. f GDPR (General Data Protection Regulations)):
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific site)
- Access status /HTTP status code
- Respective transmitted data volume
- Website from which the enquiry originates
- Operating system and its surface
- Language and version of the browser software.
In addition to the above mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which the entity that sets the cookie (in this case by us) re-ceives certain information. Cookies can not execute programs or transfer viruses to your compu-ter. They are merely designed to make the Internet overall more user friendly and effective.
Application of cookies:
This website uses a variety of cookies if they are imperative for the provision of the service. They include:
- Transient cookies (see b)
- Persistent cookies (see c).
Transient cookies are automatically erased when you close the browser. They particularly inclu-de session cookies. They store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your PC to be recognised when you revisit our website. The session cookies are erased once you log out or close the browser.
Persistent cookies are automatically erased after a specified period of time, which differs ac-cording to the cookie. You can erase the cookies in the security settings of your browser at any time. Persistent cookies are designed to save any settings made by you. Your settings, which you have declared via the cookie banner, are also stored via a permanent cookie, for example. We generally use persistent cookies to be able to save the settings you have made on this website. Such cookies are generally provided with an expiration date, at which time they are erased.
Our cookies are provided with a different storage period. As a rule, they are only preserved as long as is required for the provision of our services.
You can configure your browser in accordance with your requirements and, for example, reject the acceptance of third-party cookies or all cookies. We point out that you may not be able to use all functions of this website.
Next to cookies, which we require for the operation of the website and the provision of our services, we would like to raise further data in order to improve the offers of our site and to show you contents in accordance with your requirements. For this purpose, we require your consent, which you can revoke again at any time.
These procedures and how they function will be explained in the following paragraphs of this policy.
3. SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential information, such as orders or enquiries you send to us as the operator of the site, this website uses SSL and/or TLS encryp-tion. You can recognise an encrypted connection by the fact that the browser address bar chan-ges from "http://" to "https://" and by the lock symbol in your browser bar.
When the SSL and/or TLS encryption is activated, any data you transmit to us cannot be accessed by third parties.
4. Your Rights
You have the following rights with respect to us regarding your personal data:
- You have the right to obtain information about the origin, recipient and purpose of your stored personal data free-of-charge and at any time.
- You are entitled to demand the rectification, suspension or erasure of this data.
- Under certain circumstances, you are entitled to demand the restriction of processing of your personal data. For details, please check the Data Protection Policy under "Right to the restric-tion of data processing".
- For further information regarding data protection, please contact us under the address specified in the imprint.
5.1 Date protection information for applicants
How do we process your application information?
We process the data provided by you in the context of your application to determine your suitability for the position (or, if applicable, for other positions within the company) and to pro-cess the application procedure.
What is the legal basis for this process?
The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG (Federal Data Protection Act) in the version applicable as of 25.05.2018. Ac-cordingly, it is admissible to process data which is required in the context of the decision regar-ding the establishment of an employment relationship.
If the data is required for legal prosecution after the completion of the application process, data processing may take place on the basis of the requirements of Section 6 DSGVO, particularly to safeguard legitimate interests in accordance with Section 6 (1) lit. f) GDPR. Our interest subse-quently consists of the assertion or defence of claims.
How long will the data be stored?
Data of applicants is generally erased after 6 months in the event of a declination.
If you have agreed to the further storage of your personal data, the data will be transferred to our pool of applicants. Here, the data is erased after the expiration of two years.
If you have been granted the approval for a position in the context of the application process, the data is transferred from the application file to our personnel information system.
To which recipient will the data be transmitted?
We use a specialised software provider for the application process. This service provider acts for us and may, under certain circumstances, obtain knowledge of your personal data in the context of systems care and maintenance. We have concluded a so-called order processing agreement with this supplier, which ensures that the data is processed in the admissible manner.
Upon receipt of your application, your application data will be reviewed by the HR department. Suitable applications are then transmitted internally to the department manager of the respec-tive vacant position. Subsequently, further procedures will be coordinated. As a matter of prin-ciple, only those persons in the company have access to your data who require this for the pro-per processing of our application procedure.
Where is the data processed?
The data is processed exclusively in data processing centres of the Federal Republic of Germany.
5.2 Data processing of new customers
Purposes and legal bases upon which we process your data
We process personal data in accordance with the regulations of the General EU Data Protection Regulations (GDPR), the Federal Data Protection Act (BDSG) as well as other applicable Data Pro-tection Regulations. The respectively agreed service determines which data is individually pro-cessed and the manner in which it is used.
Purposes for the fulfilment of an agreement or preliminary contractual measures (Section 6 (1) lit. b GDPR)
Personal data is processed for the execution of our agreements with you and the execution of your orders as well as for the execution of measure and activities in the context of preliminary contractual relationships. Thus, processing primarily serves to establish billing in accordance with your orders and comprises the respectively necessary services, measure and activities.
Purposes in the context of legitimate interest by us or third parties (Section 6 (1) lit. f GDPR)
Beyond the actual fulfilment of the agreement and/or preliminary contractual measures, we process your data in order to preserve legitimate interests of us or of third parties, if necessary, particularly for purposes:
- of advertising or market and opinion polling, unless you have refuted the usage of your data;
- of obtaining information as well as the exchange of data with credit agencies, if this is covered by our legitimate interest;
- of enhancing our data, among other by the usage or the research of publicly accessible data;
- of the limited storage of the data if erasure is not possible due to the special type of storage or if it is only possible by way of disproportionately high effort
Purpose for the fulfilment of statutory provisions (Section 6 (1) lit. c GDPR) or in the public in-terest (Section 6 (1) lit. e GDPR)
We are subject to a number of statutory provisions (e.g. trade and tax law), but also regulatory and other official requirements. Purposes of processing may include the identity and age verifi-cation, fraud and money laundering prevention, the prevention, abatement and reconnaissance of terrorism financing and criminal offenses jeopardising assets, replications with European and international anti-terrorism lists, the fulfilment of fiscal law control and reporting obligations as well as the archiving of data for the purpose of data protection and data security as well as au-dits by taxation and other authorities. In addition, the disclosure of personal data may become necessary in the context of official/court-related measures for the purpose of the collection of evidence, criminal prosecution or the enforcement of civil law claims.
Data categories processed by us and their origin, unless we have received the data directly from you
In as far as necessary for the provision of services, we process personal data legally received from other companies or other third parties (e.g. credit agencies). We also process personal data which we legally extracted received or purchased from publicly accessible sources (such as tele-phone registers, trade and association registers etc.) and which we are permitted to process.
Recipients or categories of recipients of your data
Within our company, those internal offices and/or organisational units receive your data who require them for the fulfilment of our contractual and legal obligations or in the context of pro-cessing and implementing our legitimate interest. The transfer of your data to external entities occurs exclusively
- in connection with contract processing;
- in connection with the fulfilment of legal stipulations;
- based on our legitimate interest or the legitimate interest of the third party for the purposes specified under Item 2.2 (e.g. to public authorities, credit agencies, collection agencies, solici-tors, courts, professional assessors, companies associated with the Company and committees and supervisory authorities);
- if you granted your permission for the transfer to third parties.
5.3 Purposes in the context or your consent to the subscription to our newsletter (Section 6 (1) fig. a GDPR)
With your permit, you can subscribe to our newsletter, which we use to inform your of our cur-rent, interesting offers. Obligatory information for the transmission of the newsletter is solely your email address. We store your email address for the purpose of transmitting our newsletter. Legal basis is Section 6 (1) sentence 1 lit. a GDPR. You can withdraw your consent for the trans-mission of the newsletter at any time and cancel the receipt of the newsletter. You can revoke your consent by clicking on the link contained in each newsletter email or by a message to the responsible person specified in the contact data above.
5.4 Credit agencies
In the event of legitimate interest, our company checks the creditworthiness of our customers, e.g. if our company could be affected by a financial default risk, on a regular basis. For this pur-pose, we work with Creditsafe, who provides us with the necessary data. In this case, we trans-mit your personal data from this contractual relationship and the information necessary for ob-taining the credit rating to Creditsafe. Legal basis for the transmission of data is Section 6 I (1) lit. f), Section 6 I lit. b) GDPR. You can view the information according to Section 14 GDPR for the data processing at Creditsafe under https://www.creditsafe.com/de/de/rechtliches/datenschutzhinweise/datenschutzhinweise-fuer-kunden-und-lieferanten.html.
Duration of data storage
We process and store your data for the duration of our business relationship. This also includes the initiation of an agreement (pre-contractual legal relationship) and the processing of an ag-reement. We furthermore store data which has to be maintained for 10 years based on trade and fiscal law regulations. Any other data for which no tax retention periods is considered are retained until the expiration of the regular statute of limitations (Sections 195, 199 BGB (Ger-man Civil Code)); however, periods of up to 30 years may be applicable under certain circum-stances.
If the data is no longer required for the fulfilment of contractual or legal obligations and rights, it is erased on a regular basis, unless its limited processing is necessary to fulfil the purposes specified under item 2.2 based on a primarily legitimate interest.
Processing of your data in a third country or by an international organisation
Data is transferred to countries outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries) if it is necessary for the execution of an order/contract from you, if it is required by law (e.g. tax reporting obligations), if it is in the legitimate interest of us or a third party or if you have granted your consent.
For that matter, your data can be processed in a third country also in connection with the enga-gement of service providers in the context of order processing. If an EU Commission decision on an adequate level of data protection for the country in question does not exist, we ensure that your rights and freedoms are adequately protected and guaranteed in accordance with EU data protection requirements by means of appropriate contracts.
6. Objection or revocation against the processing of your data
- If you have granted your consent to process your data, you can revoke it at any time. Such revocation affects the admissibility of processing your personal data, once you have expressed it to us.
- In as far as the processing of your personal data is based on the balance of interest, you can lodge an objection to the processing at any time. This applies if the processing is particularly not necessary for the fulfilment of a contract with you, which we shall demonstrate in each case in the subsequent description of the functions. When exercising such revocation, we request the disclosure of the reasons why we should not process your personal data. In the event of a justi-fied revocation, we shall check the facts and shall either cease the data processing or adapt it or illustrate to you our mandatory reasons worthy of protection, based upon which we have to continue processing.
- As a matter of fact, you can object to the processing of your personal data for the purpose of advertising or data analysis at any time. You can inform us about your objection to advertising purposes under the contact data in 1 (Responsible Authority).
7. Right to object to data collection in special cases as well as direct advertising Section 21 GDPR)
If data is processed based on Section 6 (1) lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. Please check this Data Protection Policy for the respective legal basis on which processing is based. If you object, we shall no longer pro-cess your personal data, unless we can verify mandatory reasons worthy of protection for the processing of the data, which outweigh your interests, rights and freedoms or the processing is designed for the assertion, execution or defence of legal claims (Objection according to Section 21 (1) GDPR.
If your personal data is processed for the purpose of direct marketing, you have the right to ob-ject at any time to processing of personal data concerning you for the purpose of such marke-ting; this also applies to profiling in as far as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct advertising purposes (Objec-tion according to Article 21 (2) GDPR).
8. Data acquisition on our website
Objection to advertising emails
The use of the contact data published in the context of the obligation to provide an imprint for the transmission of advertising and info material not explicitly requested is hereby vetoed. The operators of the websites explicitly reserve the right to legal actions in case of the unsolicited transmission of advertising material, i.e. via spam mails.
The websites use so-called cookies in certain cases. Cookies do not cause damage to your com-puter and do not contain viruses. Cookies are designed to make our offer more user friendly, more effective and safer. Cookies are small text files which are deposited on your computer and which are saved by your browser.
Most of the cookies used by us are so-called session cookies. They are automatically erased after the conclusion of your visit. Other cookies remain on your terminal device until you delete them. These cookies make it possible for us to recognise your browser at your next visit.
You can set your browser to inform you of the placement of cookies and allow cookies only in a specific case, on certain occasions, or exclude cookies generally as well as activate the automa-tic erasure of the cookies when you close your browser. The deactivation of cookies can restrict the functionality of this website.
Cookies, which are necessary for the execution of the electronic communication process or for the provision of certain functions requested by you (e.g. shopping basket function), are stored based on Section 6 (1) lit. f GDPR. The website operator has a legitimate interest in the storing of cookies for the technically defect-free and improved provision of his services. In as far as other cookies (e.g. cookies to analyse your surfing behaviour) are stored, these are treated sepa-rately in this Data Protection Policy.
10. Contact form
If you send us queries via the contact form, your information from the enquiry form including the provided contact data are stored by us in order to process your query and in the event of subsequent enquiries. We do not transmit this data without your consent.
Therefore, the processing of the data entered into the contact form occurs exclusively based on your consent (Section 6 (1) lit. a GDPR. You can revoke this consent at any time. An informal notice via email is sufficient for this purpose. The legitimacy of the data processing procedure up to the revocation remains unaffected by the revocation.
The data you have entered in the contact form remains with us until you request from us the deletion, revoke your consent for storage or until the purpose for the data storage is redundant (e.g. after the finalisation of your enquiry). Mandatory statutory regulations - particularly re-tention periods - remain unaffected.
11. Enquiry via email, phone or fax
If you contact us via email, phone or fax, your enquiry including all subsequently provided per-sonal data (name, enquiry) will be stored and processed by us in order to process your request. We do not transmit this data without your consent.
This data is processed based on Section 6 (1) lit. b GDPR, if your enquiry is connected to the fulfilment of a contract or required for the execution of preliminary contractual measures. In all other cases, processing is based on your consent (Section 6 (1) lit. a GDPR) and/or our legitimate interest (Section 6 (1) lit. f GDPR), as we have a legitimate interest in the effective processing of the enquiry directed at us.
The data you have transmitted to us via contact enquiry remains with us until you request from us the deletion, revoke your consent for storage or until the purpose for the data storage is re-dundant (e.g. after the finalisation of your request). Mandatory statutory regulations - particu-larly statutory retention periods - remain unaffected.
12. Processing of data (customer and contractual data)
We collect, process and use personal data only in as far as necessary for the establishment, the execution of content or change of the legal relationship (personal data). This occurs based on Section 6 (1) lit. b GDPR, which permits the processing of data for the fulfilment of a contract or contractual measures. We process and use personal data, which we collect due to the utilisation of our websites (usage data) only to the extend as is necessary to enable the user to utilise the service or for the purpose of reconciliation.
The collected customer data will be erased upon conclusion of the contract or termination of the business relationship. Statutory retention periods remain unaffected.
13. Analysis tools and advertising
When you visit our website, your surfing behaviour can be statistically analysed. This occurs pri-marily with cookies and so-called analysis programs. Your surfing behaviour is generally analysed anonymously; the surfing behaviour cannot be traced back to you.
You can object to this analysis or prevent it by avoiding to use certain tools. Detailed informati-on on these tools and your options to object are specified in the following Data Protection Po-licy.
14. Revocation of your consent to data processing
Many data processing procedures are only possible with your explicit consent. You can revoke a previously given consent at any time. An informal notice via email is sufficient for this purpose. The legitimacy of the data processing up to the revocation remains unaffected by the revocati-on.
15.1 Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Ana-lytics uses so-called cookies, text files which are stored on your computer and which permit an analysis of your usage of the website. The information about your usage of this website genera-ted by the cookie is generally transmitted to and stored by a Google server in the USA. How-ever, if the IP anonymisation on this website is activated, your IP address will be truncated be-forehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. The full IP address is only transmitted to and truncated by a Google server in the USA in exceptional cases. On behalf of the operator of this website, Google uses this information to analyse your usage of this website, to collate reports about the activities of the website and to provide further services to the website operator associated with the usage of the website and the internet.
Any data on user and event level stored at Google which are linked to cookies, user recognition (e.g. user ID) or advertising IDs (e.g. double-click cookies, Android advertising IDs) will be ano-nymised and/or deleted after 14 months. Details to this matter are available at: https://support.google.com/analytics/answer/7667196? hl = de
The IP address transmitted by your browser in the context of Google Analytics will not be joined with other data of Google.
You can prevent the storage of the cookies by a respective setting of your browser software; however, we point out that you may not have the full usage of all functions of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by down-loading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout? hl = de.
This website uses Google Analytics with the extension "_anonymizeIp()". The IP addresses are hereby processed in a truncated format and any association with a person is thus excluded. In-sofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is instantly deleted.
You can also prevent the recording by Google Analytics by clicking on the cookie. This places an Opt-Out cookie which prevents the recording of your data when you visit the website in the future
We use Google Analytics to analyse the usage of our website in order to improve it on a regular basis. We can improve our offer with the use of the obtained statistics and design it more inte-resting for you, the user. In the exceptional cases whereby your personal data is transmitted to the USA, we base the processing upon your explicit consent granted via the consent banner according to Section 49 I 1 a) GDPR. Legal basis for the usage of Google Analytics is your consent, Section 6 I 1 a) GDPR. You can revoke your consent at any time.
Information of third party supplier: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the Data Protection Po-licy: http://www.google.de/intl/de/policies/privacy.
15.2 YouTube with extended data protection
We have linked YouTube videos to our online offer, which are stored at http://www. YouTube.com and can be accessed directly from our website. These are all lined in the "extended data protection mode", i.e. no data about you as the user are transmitted to Y-ouTube if you do not play the videos. The data mentioned in paragraph 2 are only transmitted when you play the videos. We have no influence over this data transmission. Legal basis for the collection is your consent Section 6 I 1 a) GDPR.
When the video is played, YouTube receives the information that you have accessed the respec-tive sub-page of our website. In addition, the data specified under § 3 of this Declaration are transmitted. This occurs regardless whether YouTube provides a user account through which you are logged in or whether or not a user account exists. If you are logged on at Google, your data is allocated directly to your account. If you do not wish the allocation with your profile at Y-ouTube, you have to log out prior to activating the button. YouTube stores your data as user profiles and uses them for advertising or market research and/or need-based design of its web-site. Such an assessment is made particularly (even for users which are not logged in) for the introduction of user-based advertising and to inform other users of the social network about your activities on our website. You are entitled to object against the formation of such user pro-files.
Further information for the purpose and extent of the data collection and processing by YouTu-be is available in the Data Protection Policy. There, you can also obtain further information re-garding your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy and https://policies.google.com/technologies/types? hl = de. Google processes your personal data also in the USA. Legal basis for the execution of a data transfer is your explicit consent according to Section 49 I 1 a) GDPR.
15.3 Google Maps
This website uses the mapping service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer. In case Google Maps has been activated, Google has the option to use Google web fonts for the purpose of the uniform depiction of fonts. When you access Google Maps, your browser will load the required web fonts into your browser cache, to correctly display text and fonts.
We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. This constitutes a legitimate interest as defined in Art. 6(1)(f) GDPR. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.
15.4 Consent with Usercentrics
This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your device or for the use of specific technologies, and to document the former in a data protection compliant manner. The party offering this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 München, Germany, website: https://usercentrics.com/ (hereinafter referred to as “Usercentrics”).
Whenever you visit our website, the following personal data will be transferred to Usercentrics:
- Your declaration(s) of consent or your revocation of your declaration(s) of consent
- Your IP address
- Information about your browser
- Information about your device
- The date and time you visited our website
Moreover, Usercentrics shall store a cookie in your browser to be able to allocate your declaration(s) of consent or any revocations of the former. The data that are recorded in this manner shall be stored until you ask us to eradicate them, delete the Usercentrics cookie or until the purpose for archiving the data no longer exists. This shall be without prejudice to any mandatory legal retention periods.
16. Right of data portability
You are entitled to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a conventional, machine-readable format. In as far as you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
17. Right to complain at the respective supervisory authority
In the event of violations against the GDPR, data subjects shall have a right of appeal to a super-visory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged violation. The right to appeal is without prejudice to other ad-ministrative or judicial remedies.
18. Use of the AUSSCHREIBEN.DE platform
We use the services of the AUSSCHREIBEN.DE platform on our website to make it easy for you to select and download our tender texts. AUSSCHREIBEN.DE uses, among other things, cookies for session recognition and the services of Google Analytics and Matomo. Information on this and also on deactivating the cookies may be found in the data privacy / protection information of the responsible site, AUSSCHREIBEN.DE.