DATA PROTECTION
Overview of data protection
Thank you for your interest in our company and our products! When visiting our website we take the protection of your personal data very seriously, and we guarantee the most possible security and protection of your personal data. We are obliged to inform you about the type, scope and purpose of the collection and use of your personal data. Our data protection practice is in accordance with the EU General Data Protection Regulation, the German Federal Data Protection Act and the German Telemedia Act.
General Information
The following information will provide a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy found below.
Data collection on our website
Who is responsible for the data collection on this website?
The data collected on this website are processed by the website operator. The operator's contact details can be found in the website's required legal notice.
How do we collect your data?
Some data are collected when you provide them to us. This could, for example, be data you enter on a contact form.
Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site.
What rights do you have regarding your data?
You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. Under certain circumstances you also have the right to request the restriction of processing your personal data. You may also, of course, file a complaint with the competent regulatory authorities.
You can contact the office at @-yet in Leichlingen or us at any time at the address given in the legal notice if you have any further questions about data protection.
General information and mandatory information
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.
If you use this website, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.
Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
Data protection information for business partners
This data protection information for business partners informs you about the processing of your personal data at the
@-yet GmbH, Schloss Eicherhof in 42799 Leichlingen (Germany). Pursuant to Art. 4 lit. 1 GDPR, your personal data includes all information that relates or can be related to your person, in particular by means of assignment to an identifier such as a name or to an organisation or customer number by which your person can be identified.
We are providing this Privacy Notice to Business Partners ("Notice") to explain, as a data controller, the data processing practices relating to our customers, business partners and suppliers (collectively, "Business Partners") and, where applicable, their employees who have dealings with the @-yet GmbH.
Scope: This notice applies if you are an independent business partner of @-yet GmbH or if you are an employee of a business partner acting on behalf of the business partner with @-yet.
Categories of personal data and data sources: @-yet processes the following personal data about you, your company or third parties:
- Personal data relating to independent business partners: Name, business contact details, services or products offered, contract information, communication content (such as emails or business letters), payment information, billing information and business relationship history.
- Personal data relating to employees of a business partner: name, business contact details, name of employer, title/position and communication content (such as emails or business letters).
Data processing purposes, legal basis and consequences: Your personal data is processed for the purposes of fulfilling the contractual relationship with the business partner (including the fulfilment of contractual performance obligations, invoice processing, communication and compliance with legal requirements), for marketing and CRM activities and for fraud prevention. @-yet relies on the following legal bases with regard to data processing:
- Fulfilment of the contractual relationship with the business partner (Art. 6 lit. b GDPR);
- Performance of a contract with the @-yet GmbH (Art. 6 (1) lit. b GDPR)
- Legitimate interest of @-yet GmbH, (Art. 6 lit. f GDPR). Legitimate interests may include, in particular, marketing and CRM activities, as well as prevention of fraud, IT misuse, money laundering, operation of a whistleblowing system, physical security, IT and network security, internal investigations;
- Consent, if provided by you and recorded by law (Art. 6 (1) lit. a GDPR in conjunction with Art. 88 GDPR and § 26 (2) BDSG);
- Compliance with legal requirements (Art. 6 (1) lit. c GDPR).
The provision of personal data is necessary for the conclusion and/or performance of the contractual relationship and is voluntary. However, if you do not provide this data, it could delay or even make impossible the business partner management and administrative processes.
Categories of recipients: The @-yet GmbH may use service providers acting as processors to provide IT and other
administrative support (e.g. service providers offering IT hosting or maintenance support). These service providers may have access to your personal data to the extent necessary to provide such services. Any access to your personal information is limited to those who need the information to complete your activities. The @-yet GmbH may disclose your personal information if required or requested to do so by government authorities, courts, external agencies or similar third parties.
Retention period: The personal data will be stored by the @-yet GmbH and its service providers for as long as
necessary until our obligations are fulfilled. The data will be backed up for as long as necessary for the purpose in accordance with the GDPR. Once the @-yet GmbH no longer needs the data to fulfil contractual or legal obligations, it will be removed from our systems and records and/or measures will be taken so that your personal data is properly
anonymised and you are no longer identifiable. Exceptions to this are cases where we need to retain your personal data to comply with legal or regulatory obligations to which @-yet GmbH is subject. E.g. legally required retention periods resulting from the German Commercial Code, tax law or the Money Laundering Act, which are usually between 5 and 10 years, or we need to preserve evidence within the statute of limitations, which is usually 3 years but can also last up to 30 years.
Your rights: If you have given your consent with regard to certain processing activities, you can revoke this at any time with effect for the future. This revocation will not affect the previous processing of data. According to the applicable data protection laws, you have the following rights:
- Right of information, Art. 15 GDPR.
- You have the right of information about the personal data stored about you.
- Right of rectification, Art. 16 GDPR.
- If you discover that inaccurate data relating to you is being processed, you may request rectification. Incomplete data must be completed, taking into account the purpose of the processing.
- Right of erasure, Art. 17 GDPR.
- You have the right to request the deletion of your data if certain reasons for deletion exist. This is particularly the case if they are no longer necessary for the purpose for which they were originally collected or processed.
- Right to restriction of processing, Art. 18 GDPR.
- You have the right to restrict the processing of your data. This means that your data will not be deleted, but will be marked to restrict its further processing or use.
- Right of data portability, Art. 20 GDPR.
- You have the right to receive the personal data you have provided to @-yet GmbH in a structured, common and machine-readable format. Furthermore, you have the right of transfer this data to another responsible party without delay by @-yet GmbH.
- Right of objection to unreasonable data processing, Art. 21 GDPR.
- You have the right to object at any time, on reasons relating to your particular situation, to the processing of personal data concerning you, which is carried out based on Art. 6 lit. e or f of the GDPR.
- Since @-yet GmbH processes and uses your personal data primarily for the purposes of the contractual relationship with you, @-yet GmbH basically has a legitimate interest in processing your data, which, on the other hand, will override your restriction request.
Complaining to the supervisory authority about data protection violations: You have the right to lodge a complaint with the competent supervisory authority if you are of the opinion that the processing of your data by @-yet GmbH is not permitted under data protection law. This is based on Art. 77 of the GDPR. The complaint to the supervisory authority can be made informally.
Automated decision making/profiling: @-yet GmbH does not use any automated decision-making processes in connection with the recruitment and its data processed.
Data protection information for applicants and employees
This data protection information for applicants informs you about the processing of your personal data at @-yet GmbH, Schloss Eicherhof in 42799 Leichlingen (Germany). Pursuant to Art. 4 lit. 1 of the General Data Protection Regulation ("GDPR"), personal data include all information that relates or can be related to a person. In particular by means of assignment to an identifier such as a name or to an organisation number or personnel number by which a person can be identified.
Personal information and personal data: @-yet GmbH collects and processes the following personal data (on both paper and digitally) provided by you through your application (collectively "Applicant Data"):
- Contact details, such as your name, address, telephone number and email address;
- Information on your professional experience and skills, as well as previous employment, language skills, performance appraisals, evaluations and quotas;
- Photo (if added voluntarily).
It is not planned that special categories of personal data (Art. 9 (1) GDPR) will be processed. However, should you provide them, such as health data, these data will also be processed.
Data processing purposes, legal basis and consequences: Applicant data is collected and processed for recruitment and hiring purposes only to determine the skills and suitability of applicants who have applied for a job (collectively, "processing purposes"). @-yet GmbH relies on the following legal bases with regard to data processing:
- Necessity of the recruitment (Art. 88 GDPR in conjunction with § 26 German Data Protection Act (BDSG))
- Performance of a contract with the @-yet GmbH (Art. 6 (1) lit. b GDPR)
- Legitimate interest of @-yet GmbH (Art. 6 (1) lit. f GDPR)
- Consent, if provided by you and recorded by law (Art. 6 (1) lit. a GDPR in conjunction with Art. 88 GDPR and § 26 (2) BDSG);
- Compliance with legal requirements (Art. 6 (1) lit. c GDPR.
The provision of personal data is on a voluntary basis. However, if you do not provide this data, it could prevent the recruitment process so that @-yet GmbH unfortunately cannot consider your application.
Categories of recipients:
Besides the Human resources and relevant employees, @-yet GmbH may use service providers acting as processors to provide IT and other administrative support (e.g. service providers offering IT hosting or maintenance support). These service providers may have access to your personal data to the extent necessary to provide such services.
Any access to your personal data is limited to those who need the information to complete your activities.
Retention period:
Application data will be retained by @-yet GmbH and, where applicable, its service providers for as long as necessary to fulfil its obligation and in accordance with applicable data protection law for the time necessary to achieve its purposes. @-yet GmbH will delete your application data upon expiry of a maximum of six months after we have informed you that your application will not be considered. This does not apply if you expressly consent to longer retention at our request because we want to keep you in a talent pool (Art. 7 GDPR); in that case, deletion will take place after expiry of the time specified in the consent or after your consent revocation. Deletion is subject to a right of retention pursuant to Art. 17 (3) GDPR or in accordance with applicable provisions in the BDSG. If the application leads to an employment, the application will be assigned to your personnel file created with the establishment of the employment relationship and the retention will be considered in accordance to data protection law.
Your rights: Should you have given your consent with regard to certain processing activities, you can revoke this at any time with future effect. This revocation will not affect the previous processing of data. In accordance with the applicable data protection laws, you have the following rights:
- Right of information, Art. 15 GDPR. You have the right of information about the personal data stored about you.
- Right of rectification, Art. 16 GDPR. If you discover that inaccurate data relating to you is being processed, you may request rectification. Incomplete data must be completed, taking into account the purpose of the processing.
- Right of erasure, Art. 17 GDPR. You have the right to request the deletion of your data if certain reasons for deletion
exist. This is particularly the case if they are no longer necessary for the purpose for which they were originally collected or processed.
- Right to restriction of processing, Art. 18 GDPR. You have the right to restrict the processing of your data. This means that your data will not be deleted, but will be marked to restrict its further processing or use.
- Right of data portability, Art. 20 GDPR. You have the right to receive the personal data you have provided to @-yet GmbH in a structured, common and machine-readable format. Furthermore, you have the right of transfer this data to another responsible party without delay by @-yet GmbH.
- Right of objection to unreasonable data processing, Art. 21 GDPR. You have the right to object at any time, on reasons relating to your particular situation, to the processing of personal data concerning you, which is carried out based on Art. 6 lit. e or f of the GDPR.
Since @-yet GmbH processes and uses your personal data primarily for the purposes of the contractual relationship with you, @-yet GmbH basically has a legitimate interest in processing your data, which, on the other hand, will override your restriction request.
Complaining to the supervisory authority about data protection violations: You have the right to lodge a complaint with the competent supervisory authority if you are of the opinion that the processing of your data by @-yet GmbH is not permitted under data protection law. This is based on Art. 77 of the GDPR. The complaint to the supervisory authority can be made informally.
Automated decision making/profiling: @-yet GmbH does not use any automated decision-making processes in connection with therecruitment and its data processed.
Contact person responsible for this website
Responsible for processing data on this website is:
POLYTRON Kunststofftechnik GmbH & Co. KG
An der Zinkhütte 17
51469 Bergisch Gladbach
Telephone: +49 2202 1009 0
Telefax: +49 2202 1009 333
E-Mail-address: info@polytron-gmbh.de
POLYTRON Kunststofftechnik GmbH & Co. KG has appointed a data protection officer pursuant to Article 37 GDPR. You can contact him under
@-yet GmbH
Schloss Eicherhof
42799 Leichlingen
Telefon: +49 2175 1655 0
Telefax: +49 2175 1655 11
E-Mail: info@at-yet.de
www.at-yet.de
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. An informal e-mail to us is sufficient. The legality of the data processing carried out before the revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)
If the data processing is carried out according to Art. 6, 1 lit. e GDPR you have the rigth to object to the processing of your personal data at any time for reasons arising from your particular situation. This also applies to profiling based on these provisons. The respective legal basis can be found in the present data protection declaration.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing which override your interests, rights and freedoms or the processing is for the establishment, exercise or defence of legal claims (objection according to Art. 21, 1 GDPR).
If you personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of your data for the purpose of marketing; this also applies to profiling if connected with direct marketing. If you object your personal dta will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21, 2 GDPR).
Right of appeal to a supervisory authority
If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged violation.
Right to data transferability
You have the right to receive information about yourself that you have provided to us from us in a structured, common and machine-readable format for the purpose of transfer to another person responsible. At your request and taking into account the available technical possibilities, this also includes the direct transfer from us to the other person responsible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries or purchase orders including enclosures you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Contact form and Contact by e-mail
If you contact us by e-mail or contact form regarding questions of any kind, you give us your voluntary consent for the purpose of contacting you. For this purpose, it is necessary to provide a valid e-mail address. This is used for the assignment of the request and the subsequent response to the same. The provision of further data is optional. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions. After your request has been dealt with, personal data will be processed and/or archived in accordance with the General Data Protection Regulation (DSGVO) and the Federal Data Protection Act. We process and store your personal data for as long as it is necessary for the duration of our business relationship and for as long as you work for us or as a representative or authorized agent of a business partner, supplier, interested party and/or customer.
Information, deletion and correction
According to the applicable statutory provisions, you have the right to free information about your stored personal data, their origin and recipient and the purpose of the data processing and, if necessary, a right to correct or delete this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of personal data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. To do this, you can contact us at any time at the address given in the imprint. The right to restrict processing exists in the following cases:
- If you dispute the accuracy of the personal data we have stored about you, we generally need usually time to check the issue. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to request restriction of the processing of your personal data instead of deletion.
- If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, the data may - apart from from their storage - only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.
Data Collection on our website
Cookies
Some of our web pages use so-called "cookies". Cookies are small text files and do not harm your computer and do not contain any viruses. Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies ("permanent cookies") remain stored on your device until you delete them yourself or your web browser automatically resolves them. These cookies, however, make it possible to recognize your browser when you visit the site next time.
In some cases, cookies from third-party companies can also be stored on your device when you enter our site (third-party cookies). These enable us or you to use certain third-party services (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or to display advertising.
Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies) or to optimize the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 (1) lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent to store cookies has been requested, the cookies in question are stored exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR); consent can be revoked at any time.
If you want to be informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close your browser, you can set your browser accordingly. If cookies are deactivated, the functionality of this website may be restricted. Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you of this separately in the context of this data protection declaration and, if necessary, request your consent.
Plugins and Tools
YouTube
This website integrates videos from the YouTube website. The operator of the website is Google Ireland Limited
(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of our websites on which YouTube is integrated, a connection to the YouTube servers is established. The YouTube server is informed on which of our pages you have visited. Furthermore, YouTube can save various cookies on your device. With the help of these cookies, YouTube can obtain information about visitors of our website for e.g. to collect video statistics, improve usability and prevent fraud attempts. The cookies remain on your device until you delete them. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6, 1 lit. f GDPR. If a corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6, 1 lit.a GDPR; the consent can be revoked at any time. Further information on the handling of user data can be found in YouTube's data protection declaration at: https://policies.google.com/privacy?hl=de.
Google Maps
This site uses the Google Maps map service via an API. It is operated by Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland.
To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO. If a corresponding consent has been requested, processing is based exclusively on Art. 6, 1 lit. a DSGVO; the consent can be withdrawn at any time.
Further information about handling user data, can be found in the data protection declaration of Google at
https://policies.google.com/privacy?hl=de.
Sources: e-recht24.de; at-yet.de