Privacy Policy

The following data privacy policy informs you about the type and scope of the processing of your personal data when using our website and as part of application and recruiting processes.

Personal data are all data that are or can be assigned to your person directly or indirectly. The statutory basis for data protection is, in particular, the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Contents

1. Accessing our websites
2. Your rights as data subject
3. Contact persons
4. Name and contact details of the controller and contact details of the company’s data protection officer

1. Accessing our websites

When you access our websites, various information is exchanged between your end device and our server. This may also involve personal data. The information collected in this way is used to optimize our website or to display ads in your end device’s browser.

Purposes of the data processing / legal bases:

When accessing our websites, the browser used on your end device will – automatically and without any action on your part – send

• the IP address of the accessing Internet-enabled device;
• the date and time of access;
• the name and URL of the requested file;
• the website / application from which the access occurred (referrer URL);
• the browser and, where relevant, the operating system of your Internet-enabled computer as well as the name of your access provider
  

to our website server and this information will be stored temporarily in what is known as a log file for the following purposes:

• to ensure a fault-free connection;
• to ensure the comfortable use of our website / application;
• to analyze system security and stability.

The legal basis for the data processing is Article 6(1)(f) GDPR. The purposes of data processing listed above constitute our legitimate interest.

Recipients
In exceptional cases, your personal data may be accessible to Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm for support and maintenance purposes, since our website is hosted and stored on our behalf on servers provided and operated by Schwarz IT KG.

Storage time / criteria for determining storage time:
Data will be stored for a period of seven months and automatically deleted thereafter.

1.1 Use of cookies and other similar techniques to process usage data

Purposes of the data processing / legal bases:
We at Schwarz Media Plattform GmbH, Stiftsbergstraße 1, 74172 Neckarsulm, Germany, process data as a data controller in connection with the use of so-called cookies and other similar technologies used to process usage data on our website https://smp.schwarz

Cookies are small files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our websites. Cookies do not cause any damage to your end device, nor do they contain any viruses, trojans or other malware. The cookie stores certain information that results in connection with the specific end device deployed. This does not mean, however, that we will obtain direct knowledge of your identity.

Cookies and the other technologies used to process usage data are deployed for the following purposes, depending on the categories of cookie / other technologies:

• Technically necessary: These are cookies and similar technologies without which you cannot use our services (e.g., for the correct display of our websites / functions requested by you, to record you signing in).
• Preferences: Using these methods, we can take into account your actual or perceived preferences to enhance the user experience. For example, we can use your settings to display our websites in a language relevant to you. They also mean we can avoid displaying products that may not be available in your region.
• Statistics: These technologies enable us to tailor the design of our services by producing anonymized statistics about how they are used. For example, we can use them to determine how better to adapt our websites to user habits.
• Marketing: These enable us to display relevant advertising content based on an analysis of your usage behavior. Your usage behavior can also be tracked over various websites, browsers or devices via a user ID (unique identifier).

Please click here for an overview of the cookies and other technologies we use, including their function, expiration, and any third party providers involved.

Depending on the purpose, the use of cookies and similar technologies to process usage data involves processing the following types of personal data in particular:

Technically necessary:

• Consent to cookie preferences
• User input to ensure that input is saved across several sub-pages;
• Data on playing multimedia content (e.g. playing videos selected by user);
• Required data.

Preferences:

• Settings for optimized display of maps

Statistics:

• Pseudonymized usage profiles containing information on the use of our website. These contain in particular:
  • browser type / browser version;
  • operating system used;
  • referrer URL (i.e. the page previously visited);
  • host name of the accessing computer (IP address);
  • time of the server request;
  • individual user ID; and
  • events triggered on the website (web browsing behavior).
• IP addresses are routinely anonymized, which in principle means it is no longer possible to identify you.
• In itself, we cannot use the user ID to identify you. We may potentially share the user ID and associated usage profiles with third parties via providers of advertising networks.

Marketing:

• Pseudonymized usage profiles containing information on the use of our website. These contain in particular:
  • IP address;
  • individual user ID;
  • products potentially of interest;
  • events triggered on the website (web browsing behavior).
• IP addresses are routinely anonymized, which in principle means it is no longer possible to identify you
• In itself, we cannot use the user ID to identify you. We may potentially share the user ID and associated usage profiles with third parties via providers of advertising networks.

The legal basis for using preference, statistics and marketing cookies is your consent given pursuant to Article 6(1)(a) GDPR. The legal basis for using technically necessary cookies is Article 6(1)(f) GDPR since we have a legitimate interest in offering you a fully functional website.

You may withdraw / modify your consent at any time with effect for the future. Just click here and make your selection. Simply uncheck the respective box to withdraw your consent for the given data processing purpose.

Recipients / categories of recipient:

When using cookies and similar technologies to process usage data, we may on occasion retain specialized service providers, particularly from the field of online marketing, to process data. They process your data on our behalf as processors. Each has been carefully selected and bound by contract in accordance with Article 28 GDPR. All of the companies listed as service providers in our cookie policy act as processors on our behalf.
In the context of our cooperation with Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, the aforementioned data is generally also processed for statistical and marketing purposes on servers located in the U.S.

Storage time / criteria for determining storage time:

For information on the duration of storage for cookies, see our cookie policy. If „persistent“ is entered in the „expiration“ column, the cookie will be stored permanently until the corresponding consent is withdrawn. The storage period for data stored in session storage is limited to the respective session and ends when the browser is closed.

1.2 Inquiries by e-mail / phone

We treat all personal data which we receive from you by e-mail or by phone confidentially. We use your data solely for the limited purpose of processing your inquiry. The legal basis for the data processing is Article 6(1)(f) GDPR. Our shared (legitimate) interest in the data processing arises from the objective of answering any inquiries and resolving any issues you may have and thus ensuring and improving your level of satisfaction as a user of our website.

Recipients / categories of recipient
As a rule, we do not transfer the data to third parties. In exceptional cases, we will have a processor process the data on our behalf. Such processors are carefully selected and bound by contract in accordance with Article 28 GDPR.

Storage time / criteria for determining storage time:
We delete or anonymize all personal data we receive from you when you make inquiries by e-mail or telephone no later than 4 months after the final response is sent. Based on experience, we generally do not receive any questions concerning our responses after 4months. If you assert your rights as a data subject (see below), your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met.

1.3 Data transfers to recipients in a third country

If we transfer data to recipients in a third country (located outside of the European Economic Area), this will be evident in the information on the recipients / categories of recipient in the description of the respective data processing. Some third countries have been certified by the European Commission through so-called adequacy decisions as having a level of data protection comparable to that offered in the European Economic Area. A list of these countries is available at http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html. If and insofar as there is no comparable data protection standard in effect, we will ensure that data protection is adequately guaranteed by other measures. These include, for example, binding company policies, standard contractual clauses for data transfers issued by the European Commission, certificates, or recognized codes of conduct. For further information, please contact our data protection officer (section 6).

2. Your rights as data subject

2.1 Right of information pursuant to Article 15 GDPR

Pursuant to Article 15(1) GDPR, you have the right to request information, free of charge, on the personal data stored about you. This particularly includes:

• the purposes for which the personal data is processed;
• the categories of personal data that are being processed;
• the recipients or categories of recipient to whom personal data concerning you has been or will be disclosed;
• the planned duration of the storage of the personal data concerning you or, if it is not possible to give any specific details, the criteria used to determine the storage duration;
• the existence of a right to rectification or erasure of the personal data concerning you, a right to request from the controller that processing be restricted or a right to object to this processing;
• the right to lodge a complaint with a supervisory authority; all available information regarding the origin of the data if the personal data is not being collected from the data subject;
• the existence of any automated decision-making processes including profiling pursuant to Article 22(1) and (4) GDPR and – at least in these cases – meaningful information regarding the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

If personal data is transferred to a third country or an international organization, you have the right to be notified about appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.

2.2. Right to rectification pursuant to Article 16 GDPR

You have the right to request the immediate rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

2.3. Right to erasure pursuant to Article 17 GDPR

You have the right to obtain from us the erasure of any personal data concerning you without undue delay where one of the following grounds applies:

• the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
• you withdraw your consent on which the processing pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR was based and there is no other legal ground for the processing;
• you object to the processing pursuant to Article 21(1) or (2) GDPR, and in the case of Article 21(1) GDPR there are no overriding legitimate grounds for the processing;
• the personal data was unlawfully processed;
• the erasure of personal data is necessary in order to comply with a legal obligation;
• the personal data was collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where we have made the personal data public and are obliged to erase it, taking account of available technology and the cost of implementation we will take reasonable steps to inform any third parties processing your data of the fact that you have requested the erasure by such third parties of any links to, or copies or replications of, such personal data.

2.4. Right to restriction of processing pursuant to Article 18 GDPR

You have the right to require us to restrict the processing where one of the following applies:

• you contest the accuracy of the personal data;
• the processing is unlawful and you request the restriction of the use of the personal data rather than its erasure;
• the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defense of legal claims or
• you have objected to the processing pursuant to Article 21(1) GDPR pending verification of whether the legitimate grounds of the controller override those of the data subject.

2.5. Right to data portability pursuant to Article 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another controller without hindrance by us, where

• the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) GDPR and
• the processing is carried out by automated means.

In exercising your right to data portability you have the right to have the personal data transmitted directly from us to another controller where technically feasible.

2.6. Right to object pursuant to Article 21 GDPR

Provided the requirements of Article 21(1) GDPR are met, you may object to the data processing on grounds relating to your particular situation.
The aforementioned general right to object applies to all processing grounds set out in this privacy policy, which are processed on the basis of Article 6(1)(f) GDPR. In contrast to the specific right to object to data processing for promotional purposes (see above, in particular section 3), the GDPR only obliges us to act on such objection if you cite grounds of overriding importance, e.g., a possible risk to life or health.

2.7. Right to lodge a complaint with the data protection supervisory authority pursuant to Article 77 GDPR

You also have a right to lodge a complaint with the competent data protection supervisory authority at any time. In order to do this, you can contact the data protection supervisory authority of the state where you have your place of residence or the authority of the state of Baden-Württemberg as the state where Schwarz Dienstleistung KG is headquartered.

3. Contact person

3.1. Contact person for questions regarding your application

Please contact our recruiting department for questions regarding your application:
Schwarz Dienstleistung KG
Recruiting
Stiftsbergstraße 1
74172 Neckarsulm, Germany
recruiting@mail.schwarz

3.2. Contact person for questions regarding data protection

Should you have any further questions regarding the processing of your data, please contact the company’s data protection officer of Schwarz Media Plattform GmbH (see section 4).

4. Name and contact details of the controller and contact details of the company’s data protection officer

Unless otherwise indicated, the controller for the above-described data processing is
Schwarz Media Plattform GmbH
Stiftsbergstraße 1
74172 Neckarsulm, Germany
recruiting@mail.schwarz

You can contact the data protection coordinator of Schwarz Media Plattform GmbH at the address above (for attention of „Data protection officer“) or by e-mail at datenschutz@mail.schwarz.