Privacy Policy

We would like to welcome you to our website and thank you for your interest in our company. The protection of your personal data is very important to us. We process your data in compliance with the applicable legal provisions for protecting personal data but in particular the EU General Data Protection Regulation (EU GDPR) and the countryspecific implementing legislation that applies to us. This data privacy statement provides you with comprehensive information about how Waldner Holding SE & Co. KG processes your data and your rights.

Personal data is information that allows a natural person to be identified. This includes but is not limited to the name, date of birth, address, telephone number, e-mail address and also your IP address.

Data is anonymous, if it is not possible to make a personal connection to the person.

Data controller and data protection officer

Address:
WALDNER Holding SE & Co. KG
Anton-Waldner-Straße 10-16
88239 Wangen, Germany

Contact information:
www.waldner.de
Tel.: 49 75 22 986-0
Fax: 49 75 22 986-280
info@waldner.de

Contact: Data protection
datenschutz@waldner.de

Your rights as a data subject

First of all, we would like to inform you about your rights as a data subject. These rights are standardised in Art. 15 - 22 of the EU GDPR. These include:

The right to obtain information (Art. 15 EU GDPR),
The right to the erasure of data (Art. 17 EU GDPR),
The right to the rectification of data (Art. 16 EU GDPR),
The right to data portability (Art. 20 EU GDPR),
The right to restriction of data processing (Art. 18 EU GDPR),
The right to object to data processing (Art. 21 EU GDPR).

To assert these rights, please contact: datenschutz@waldner.de. The same applies if you have any queries about data processing within our company or if you wish to withdraw permission you have granted. You also have the right to lodge a complaint with the supervisory authority.

Rights to object

Please note the following points in relation to your rights to object:

If we process your personal data for direct marketing purposes, you have the right to object to your data being processed for this purpose at any time and without stating reasons. This also applies to profiling, where this relates to direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and it does not require a pre-scribed form. If possible, it should be sent to: datenschutz@waldner.de.

If we process your data to safeguard legitimate interests, you can object to this processing at any time for reasons linked to your particular situation; this shall also apply to profiling based on these provisions.

We will then no longer process the personal data relating to you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the purpose of processing is the establishment, exercise or defence of legal claims.

Purposes and legal basis for data processing

The provisions of the EU GDPR and all other applicable data protection provisions will be complied with when processing your personal data. Data processing is lawful under Art. 6 EU GDPR in particular.

We use your data to win business, to meet contractual and statutory obligations, to implement the contractual relationship, to offer products and services, and to intensify the customer relationship, which may also involve analyses for marketing purposes and direct marketing.

Your consent to data processing may also be construed as authorisation under data protection legislation. Before you give your consent we will explain to you about the purpose of the data processing and your right to withdraw consent.

Should the consent also relate to processing particular categories of personal data, we will expressly make you aware of this in the consent. Special categories of personal data in accordance with Art. 9 EU GDPR are only processed, if this is necessary because of legal re-quirements and there is no reason to assume that your legitimate interest for exclusion of processing is overriding.

Disclosure to third parties

We shall only disclose your data to third parties if required by law or if appropriate consent has been given. Otherwise data will not be disclosed to third parties, unless we are obligated to do so on account of mandatory regulations (disclosure to external bodies such as supervisory authorities or law enforcement authorities).

Recipients of data/categories of recipients

Within our company we ensure that your data is only received by those persons who require it to fulfil contractual and statutory obligations. If you submit an enquiry using a contact form on the website or via e-mail which relates to a company in our corporate group, we will pass on this enquiry and the personal data associated with this so that the relevant company in our corporate group can supply you with the service you request.

In certain cases, service providers help our user departments to carry out their work. The necessary contractual arrangements required under data protection legislation have been signed with all service providers. These include but are not limited to IT service providers and agencies.

Transmission to third countries/Intention to transmit to third countries

Data will only be transferred to third states (outside the European Union or the European Economic Area) where this is required to fulfil the contractual obligation, prescribed by law or where you have given us your consent.

At the present time, we send your personal data to service providers outside the European Economic Area: these are in the USA (Google Analytics, Google Tag Manager).

The contractual arrangements required for data protection have been signed with the service providers.

Storage period for data

We store your data for as long as this is required for the relevant processing purpose. Please note that numerous retention periods mean that data will (have to) continue to be stored. In particular, this relates to retention obligations under commercial or tax law (e.g. commercial code, tax code). Where there are no more continuing retention obligations, data is erased as a matter of routine once the purpose has been achieved.

In addition to this, we can retain data if you have given us permission or if legal disputes occur and we use evidence within the scope of legal limitation periods, which can be up to thirty years; the regular limitation period is three years.

Secure transmission of your data

We apply appropriate technical and organisational security measures to give the data stored with us the best possible protection against unintentional or deliberate manipulation, loss, destruction or access by unauthorised persons. Working with security experts, we continuously examine the security level and upgrade to new standards.

Data from and to our website is always exchanged in encrypted form. We use the HTTPS transmission protocol for our website, using the current encryption protocols in each case. It is also possible to use alternative communication channels (e.g. the post).

Obligation to make data available

Various items of personal data are required for establishing, implementing and terminating contractual obligations and satisfying the associated contractual and statutory duties. The same applies as regards the use of our website and the various functions that this makes available.

We have summarised for you details on this in the point above. There are certain cases where data must be collected and/or made available, including for statutory requirements. Please note that it is not possible to process your inquiry or fulfil the underlying contractual obligations without this data being provided.

Categories, sources and origin of data

The respective context determines what data we process: This depends, for example, whether you enter an enquiry in the contact form, send us a job application or make a complaint.

Please note that we provide information for special processing situations, if necessary also separately in a suitable place, e.g. when uploading documents for job applications or when requesting someone to make contact.

We collect the following data when our website is visited:

Name of the internet provider
Information about the website that is the referral source
Web browser and operating system used
The IP address assigned to you by your internet service provider
Files requested, quantity of data transferred, downloads/file export
Information about the web pages you access with us, incl. date and time

For reasons of technical security (in particular to counter attempts at attacking our web servers) this data will be stored in accordance with Art. 6 (1) (f) EU GDPR. After seven days at the latest the data is anonymised through shortening the IP address so no link can be made to the user.

We collect and process the following data when a request for contact is made:

Your name
Your e-mail address
The nature of your request
The information you provide in the message field

We process the following data during an order transaction:

Form of address
Surname, first name
Date of birth
Delivery address
Invoicing address
E-mail address
Data from other sources that it is permitted to process

Cookies (Art. 6 (1) (f) EU GDPR / Art. 6 (1) (a) EU GDPR if consent has been given)

Our website uses cookies in several places.

A cookie is a small text file that is transferred from the server to your computer and can contain certain data such as the IP address, browser, operating system, etc. Cookies never start programs and do not carry malware. They purely allow more efficient usage and improve our offers (optional cookies) and are essential for certain features (technically necessary cookies).

In addition, cookies allow us to measure the effectiveness of a certain advertisement and where it is placed, for example in conjunction with topics of interest to users.

The majority of cookies that we use are what are called "session cookies". These are automatically deleted when you leave the site. Permanent cookies are automatically deleted from your computer when they reach the end of their validity (generally six months) or if you delete these yourself before the end of the validity period.

The use of all cookies on your computer that are not technically necessary is lawful with your prior consent in accordance with Art 6 (1) sentence 1 (a) GDPR.

When you visit our website for the first time, you will be asked to agree to the use of cookies and you can activate or deactivate different types of cookies. You can also deactivate, limit or also delete cookies on your device through settings on your browser or with the assistance of software.

However, we would make you aware that deactivation of cookies may impair some functions on this website and reduce ease of use.

You also have an option at any time to retrospectively change the settings you once made via the cookie banner by clicking the following link:

Matomo Analytics

You can deactivate tracking by our Matomo Analytics instance below:
You have the option to prevent actions you take here from being analysed.

Contact form/making contact via e-mail (Art. 6 (1) (a), (b) EU GDPR)

A contact form is provided on our website that can be used to make contact electronically. When you write to us using the contact form, we process the data you gave us via the contact form to make contact with you and answer your questions and requests.

The principle of data minimisation and data avoidance is followed here, because you only have to provide the data that it is absolutely necessary for us to have to make contact. These are your name, your e-mail address, the nature of your request and the message field itself. It is a technical requirement and also as a legal safeguard that the IP address is processed. All other data is in voluntary fields and the provision of this data is optional (e.g. so that you can receive a more personalised answer to your questions).

We implement appropriate security measures to protect the security and confidentiality of your data in the best possible way. Your request is sent to us in encrypted form.

Where you contact us via e-mail, we will only use the personal data sent to us in the e-mail for the purpose of processing your enquiry. If you do not use the form offered to make contact, no more extensive data collection takes place.

Automated decision-making

We do not use any purely automated processing to come to a decision.

Google reCAPTCHA

We use Google's reCaptcha service to ascertain whether a human or a computer is making a certain entry in our contact or newsletter form. Google checks whether you are a human or a computer using the following data: IP address of the device used, the website on which you visit us and on which the Captcha is integrated, the date and duration of the visit, the identification data of the browser and operating system type used, Google account, if you are logged on to Google, mouse movements on the reCaptcha areas and the tasks where you have to identify images. It is lawful to process the data in the way described under Art. 6 (1) (f) of the General Data Protection Regulation. We have a legitimate interest to process data in this way on our website in order to ensure the security of our website and protect ourselves against automated entries (attacks).

Advertising purposes for existing customers (Art. 6 (1) (f) EU GDPR)

Waldner Holding SE & Co. KG is interested in maintaining a relationship with you as a customer and sending you information and offers about our products, services and events. We therefore process your data to send you appropriate information and offers via e-mail.

If you do not want this, you can object at any time to your data being used for direct marketing purposes; this also applies to profiling where this is associated with direct marketing. If you lodge an objection, we will no longer process your data for this purpose.

No reasons have to be given when lodging an objection and no prescribed form is required: if possible, it should be sent by e-mail to datenschutz@waldner.de.

Online offers for children

Nobody aged under 16 is allowed to send us personal data or grant us consent without the consent of their legal guardian. We would urge parents and legal guardians to be actively involved in the online activities and interests of their children.

Links to other providers

Our website also contains links to the websites of other companies and such sites are clearly identified. We do not have any influence on the content of any other providers' websites to which links may have been provided. As a result, we cannot accept any responsibility or liability for such content. The relevant website providers or operators are responsible for the content of these websites.

The linked pages were inspected for possible violations of law and identifiable legal infringements at the time the links were placed on our website. At the time the links were placed on the site no illegal content could be identified. It is however not reasonable to continuously monitor the linked websites without concrete indications that the law has been infringed. Where we become aware that the law has been infringed, we remove such links immediately.

Links to the social media

On our website you will find links to the social media services of Facebook, Twitter, YouTube, LinkedIn, Xing and Instagram. You will recognise the links to websites of social media services through their respective corporate logos.

When you follow these links, you will come to where you can find Waldner Holding SE & Co. KG on the relevant social media service. Clicking on a link to a social media service creates a connection to the social media service's servers. This will communicate to the servers of the social media service that you have visited our website. In addition to this, other data is transferred to the provider of the social media service. This includes, for example:

Website address which contained the activated link
The data and time the website was accessed or the link was activated
Information on the browser and operating system used
IP address

If you are already logged into your relevant social media account at the time when you activate the link, the provider of the social media service may be able to identify your user name and possibly even your real name from the data transferred and assign this information to your personal user account at the social media service. You can rule out the possibility of as-signment to your personal user account, if you log out of your user account first.

The services of the social media services are in the USA and other countries outside the European Union. Therefore the social media service provider may also process the data in countries outside the European Union. Please note that companies in these countries are subject to data protection legislation that in general does not protect personal data to the same extent as is the case in the European Union.

Please note that we do not have any influence on the scope, nature and purpose of data processing by the social media service providers. More detailed information on the use of your data by the social media services included on our website can be found in the data privacy guidelines of the respective social media service.

Information on data protection in the social media

Waldner Holding SE & Co. KG has a presence on "social media" and is present on Facebook, Instagram, YouTube, Xing and LinkedIn. Where we control the processing of your data, we ensure that the current data protection regulations are complied with.

You will find below the most important information on data protection legislation in relation to our internet presence.

Name and address of the persons responsible for operation

In addition to Waldner Holding SE & Co. KG, the parties responsible for corporate presences as defined by the EU General Data Protection Regulation (EU GDPR) and other regulations relating to data protection legislation are:

Facebook:   Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Instagram:   Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
YouTube:   Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Xing:   New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
LinkedIn:   LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

However, you are responsible when you use these platforms and their functions. This is particularly applicable when you use interactive functions (e.g. commenting, sharing, rating).
We would also point out that your data may be processed outside the European Union and it is therefore not possible to ensure a comparable level of data protection. The contractual arrangements required under data protection legislation have been signed with the providers.

Purpose and legal basis

We maintain the fan pages ourselves so that we can communicate with visitors to these pages and at the same time inform them about our offers.

We also collect data for statistical purposes so that we can continue to develop and optimise the content and make our offering more attractive. The data required for this purpose (e.g. total number of times the pages are accessed, page activities and data provided by visitors, interactions) is prepared by the social networks and made available to us. We do not have any influence on how the data is generated and presented.

Furthermore, your personal data is processed by the social media providers for marketing and advertising purposes. It is therefore possible that user profiles are produced on the basis of, say, your user behaviour and the interests that arise from this.As a result, advertisements among other things that reflect your interests can be placed both within and outside the platforms. As a rule, cookies are stored on your computer for this purpose. Independently of this, data can also be stored in your user profiles that are not collected directly on your devices. Data is also stored and analysed across devices. This is especially true but not exclusively if you are registered as a member and logged into the respective platforms.

We do not collect and process any personal data over and above this.

Waldner Holding SE & Co. KG processes your personal data because we have a legitimate interest in effective information and communication in accordance with Art. 6 (1) sentence 1 (f) EU GDPR.

If you are asked to give your consent to data processing, i.e. if you give your permission by confirming with a button or a similar opt-in, the legal basis for processing your data is Art. 6 (1) sentence 1 (a), Art. 7 EU GDPR.

Your rights/opt-out option

If you are a member of a social network and do not want the network to collect data about you via our website and link this to the data stored about you as a member of the respective network, you must

log out before you visit our fan page on the respective network,
delete the cookies already on the device and
close your browser and start it again.

However, once you log on again, the network can identify you as a certain user.
Please see the following links for detailed information on processing in each case and the opt-out options:

Facebook:

Data privacy statement: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads and
http://www.youronlinechoices.com

Instagram:

Data privacy statement: https://help.instagram.com/519522125107875
Opt-out: http://www.networkadvertising.org/managing/opt_out.asp and
http://www.youronlinechoices.com

YouTube:

Data privacy statement: https://policies.google.com/privacy
Opt-out: https://tools.google.com/dlpage/gaoptout?hl=de and
http://www.youronlinechoices.com

Xing:

Data privacy statement: https://privacy.xing.com/de/datenschutzerklaerung
Opt-out: http://www.youronlinechoices.com

LinkedIn:

Data privacy statement: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/legal/cookie-policy and
http://www.youronlinechoices.com

Overall, you have the following rights in respect of processing your personal data:
Right to obtain information; right to rectification of data; right to erasure of data; right to restriction of processing; right to object; right to data portability; right to complain to the relevant data protection authorities about unlawful processing of your personal data.

However, as Waldner Holding SE & Co. KG does not have full access to your personal data, you should assert your rights directly with the social media providers, because each of these providers has access to their users' personal data and can take appropriate measures and provide information.

If you need any further help, we will naturally try to assist you. Please contact datenschutz@waldner.de

Information on copyright and art copyright

If you wish to publish images, texts, plans, videos, music, etc. that is on our website, you should be aware that, by doing this, you may possibly assign all user rights to the network, which ultimately could have legal consequences for you, if you yourself are not the originator or owner of the rights.

Go Back