Website Privacy Policy and Information for Data Subjects in accordance with Articles 13 and 14 of the EU General Data Protection Regulation (GDPR)
General Information
Information about the data controller
Company: Felss Group GmbH
Legal Representative: Mr. Jürgen Wössner
Address: Dieselstraße 2, 75203 Königsbach-Stein
Data Protection Officer contact details: datenschutz@felss.com
General Information on Data Processing
Data concerned:
Personal data is collected only if you provide it to us voluntarily. No further personal data is collected. Any processing of your personal data that goes beyond the scope of the statutory permissions will only take place based on your explicit consent.
Purpose of processing:
Performance of contracts.
Categories of recipients:
- Public authorities where overriding legal provisions exist.
- External service providers or other contractors.
- Other external entities, provided that the data subject has given consent or a transfer is permitted due to overriding legitimate interest.
Transfers to third countries:
As part of contract execution, data processors outside the European Union may be used.
Duration of data storage:
The duration of data storage is determined by statutory retention requirements and is generally 10 years.
Specific Information about the Website
Usage data
When you access our website, your internet browser transmits data to our web server for technical reasons. The following data is recorded during an active connection between your internet browser and our web server:
- Date and time of the request
- Name of the requested file
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- Web browser and operating system used
- Full IP address of the requesting computer
- Amount of data transferred
For reasons of technical security, particularly to defend against attempted attacks on our web server, this data is stored temporarily. We are not able to identify individuals based on this data. After a maximum of 30 days, the data is anonymized by shortening the IP address at the domain level, making it impossible to link the data to any individual user. In anonymized form, the data is also processed for statistical purposes; no comparison with other data sets or transfer to third parties, even in excerpts, takes place.
Use of our own “cookies” required for website display
This website uses its own “cookies” to store settings necessary for displaying the website (“cookies” are data records sent by the web server to the user’s browser and stored there for later retrieval). No personal data is stored in our own “cookies.” You can generally prevent the use of “cookies” by disabling the storage of “cookies” in your browser settings.
Information on Further Data Processing Activities
Specific information regarding the application process
Data concerned:
Application details
Purpose of processing:
Carrying out the application process.
Categories of recipients:
- Public authorities where overriding legal provisions exist.
- External service providers or other contractors, e.g. for data processing and hosting.
- Other external entities, provided that the data subject has given consent or a transfer is permitted due to overriding legitimate interest, e.g. for background checks on information security.
Transfers to third countries:
As part of contract execution, data processors outside the European Union may be used, e.g. email providers.
Duration of data storage:
Application data is generally deleted within four months of notification of the decision, unless consent has been given for longer storage as part of inclusion in the applicant pool.
Specific Information on the Processing of Customer and Prospect Data
Data concerned:
Data provided for contract execution; where applicable, additional data processed based on your explicit consent.
Purpose of processing:
Contract execution, including offers, orders, sales and invoicing, quality assurance.
Categories of recipients:
- Public authorities where overriding legal provisions exist.
- External service providers or other contractors, e.g. for data processing and hosting, shipping, transport and logistics, printing and mailing of information.
- Other external entities, provided that the data subject has given consent or a transfer is permitted due to overriding legitimate interest, e.g. for credit checks in case of purchase on account, for electronic transmission of information, for quality assurance purposes.
Transfers to third countries:
As part of contract execution, data processors outside the European Union may be used, e.g. email providers.
Duration of data storage:
The duration of data storage is determined by statutory retention requirements and is generally 10 years.
Specific Information on the Processing of Employee Data
Data concerned:
Data provided for contract execution; where applicable, additional data processed based on your explicit consent.
Purpose of processing:
Contract execution within the employment relationship.
Categories of recipients:
- Public authorities where overriding legal provisions exist, e.g. tax authorities, social security institutions, trade associations.
- External service providers or other contractors, e.g. for data processing and hosting, payroll, travel expense accounting, insurance services, vehicle use.
- Other external entities, provided that the data subject has given consent or a transfer is permitted due to overriding legitimate interest, e.g. for business acquisition or insurance services.
Transfers to third countries:
As part of contract execution, data processors outside the European Union may be used, e.g. email providers.
Duration of data storage:
The duration of data storage is determined by statutory retention requirements and is generally 10 years.
Specific Information on the Processing of Supplier Data
Data concerned:
Data provided for contract execution; where applicable, additional data processed based on your explicit consent.
Purpose of processing:
Contract execution, including inquiries, purchasing, quality assurance.
Categories of recipients:
- Public authorities where overriding legal provisions exist, e.g. tax authorities, customs.
- External service providers or other contractors, e.g. for data processing and hosting, accounting, payment processing.
- Other external entities, provided that the data subject has given consent or a transfer is permitted due to overriding legitimate interest.
Transfers to third countries:
As part of contract execution, data processors outside the European Union may be used, e.g. email providers.
Duration of data storage:
The duration of data storage is determined by statutory retention requirements and is generally 10 years.
Further Information and Contacts
You may also at any time exercise your rights to access, rectification, deletion, restriction of processing, objection to processing, or data portability. You can contact us by email or letter via https://felss.com/impressum/.
Furthermore, you have the right to lodge a complaint with the data protection supervisory authority.
etracker
The provider of this website uses services from etracker GmbH in Hamburg, Germany (www.etracker.com) to analyze usage data. The etracker consent manager module is used for consent management. The etracker tag manager module can be used to integrate script codes from other tools. When used in combination, the etracker tag manager and consent manager enable the control of certain cookies and services with the appropriate consent. Even if statistical cookies are rejected, usage data is collected in accordance with the legal requirements of the EU General Data Protection Regulation (EU GDPR) and the Telecommunications Digital Services Data Protection Act (TDDDG). Data processing is carried out on the basis of the legal provisions of Art. 6 (1) lit. f (legitimate interest) of the EU GDPR. Our concern within the meaning of the EU GDPR (legitimate interest) is the optimization of our online offering and the legally compliant integration and administration of additional services on our website. Provided that consent has been given, other technologies are used on the basis of Art. 6 (1) (a) of the EU GDPR. Consent can be revoked at any time.
The web analysis data generated by etracker is processed and stored exclusively in Germany on behalf of the provider of this website and is therefore subject to strict German and European data protection laws and standards. etracker has been independently audited, certified, and awarded the ePrivacyseal data protection seal of approval. As the privacy of our visitors is important to us, data that could potentially be linked to an individual, such as IP addresses, login IDs, or device IDs, is anonymized or pseudonymized as soon as possible. It is not used for any other purpose, combined with other data, or passed on to third parties.
You can object to the data processing described above at any time by clicking on the slider. Objecting will not have any negative consequences. If no slider is displayed, data collection has already been prevented by other blocking measures.
Further information on data protection at etracker can be found here.