Privacy Policy

Data Protection:

In the following, we inform you about the nature, scope, and purpose of the processing of personal data by our company, in accordance with the legal requirements of data protection law (in particular, according to the new Federal Data Protection Act (BDSG n.F.) and the European General Data Protection Regulation (GDPR)). This data protection declaration also applies to our websites and social media profiles. Regarding the definition of terms such as "personal data" or "processing," we refer to Art. 4 GDPR.

Name and Contact Details of the Controller

Our controller (hereinafter "Controller") within the meaning of Art. 4 No. 7 GDPR is:

Fliesen Nurkic GmbH

Industriestrasse 29

72585 Riederich

Telephone: 07123/9675888

Fax: 07123/9675889

info@fliesen-nurkic.de

 

Data Protection Officer

Fliesen Nurkic GmbH
Industriestrasse 29
72585 Riederich
info@fliesen-nurkic.de

Types of data, purposes of processing, and categories of data subjects

Below, we inform you about the nature, scope, and purpose of the collection, processing, and use of personal data.

  1. Types of data we process

Inventory data (name, address, etc.), contact data (telephone number, e-mail, fax, etc.), payment data (bank details, account details, payment history, etc.),

  1. Purposes of processing according to Art. 13 Para. 1 c) GDPR

Processing of contracts, fulfillment of contractual obligations, marketing / sales / advertising, customer service and customer care, handling contact inquiries,

  1. Categories of data subjects according to Art. 13 Para. 1 e) GDPR

Website visitors/users, customers, suppliers, prospective customers, applicants, employees, employees of customers or suppliers.

The data subjects are collectively referred to as "users."

Legal bases for processing personal data

Below, we inform you about the legal bases for processing personal data:

If we have obtained your consent for the processing of personal data, Art. 6 Para. 1 S. 1 lit. a) GDPR is the legal basis.

If processing is necessary for the performance of a contract or for the implementation of pre-contractual measures taken at your request, Art. 6 Para. 1 S. 1 lit. b) GDPR is the legal basis.

If processing is necessary for compliance with a legal obligation to which we are subject (e.g., statutory retention obligations), Art. 6 Para. 1 S. 1 lit. c) GDPR is the legal basis.

If processing is necessary to protect the vital interests of the data subject or of another natural person, Art. 6 Para. 1 S. 1 lit. d) GDPR is the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, and your interests or fundamental rights and freedoms do not override those interests, Art. 6 Para. 1 S. 1 lit. f) GDPR is the legal basis.

Disclosure of personal data to third parties and processors

Without your consent, we generally do not transfer data to third parties. Should this be the case, the transfer will take place on the basis of the aforementioned legal grounds, e.g., when transferring data to online payment providers for the fulfillment of the contract, or due to a judicial order or a legal obligation to disclose the data for purposes of criminal prosecution, averting danger, or enforcing intellectual property rights.

We also use processors (external service providers, e.g., for web hosting of our websites and databases) to process your data. If data is transferred to processors within the scope of a processing agreement, this is always done in accordance with Art. 28 GDPR. We carefully select our processors, monitor them regularly, and have reserved the right to issue instructions regarding the data. In addition, the processors must have implemented appropriate technical and organizational measures and comply with the data protection regulations according to the new BDSG and the GDPR.

Data transfer to third countries

The adoption of the European General Data Protection Regulation (GDPR) has created a uniform basis for data protection in Europe. Your data will therefore primarily be processed by companies to which the GDPR applies. Should processing by third-party services outside the European Union or the European Economic Area take place, these must meet the special requirements of Art. 44 et seq. GDPR. This means that processing takes place on the basis of special guarantees, such as the official recognition by the EU Commission of a data protection level equivalent to that of the EU, or compliance with officially recognized specific contractual obligations, the so-called "standard contractual clauses." For US companies, submission to the so-called "Privacy Shield," the data protection agreement between the EU and the USA, fulfills these requirements.

Deletion of data and storage period

Unless expressly stated otherwise in this data protection declaration, your personal data will be deleted or blocked as soon as the consent given for processing is revoked by you, or the purpose for storage ceases to apply, or the data is no longer required for the purpose, unless further retention is necessary for evidentiary purposes or legal retention obligations prevent this. This includes, for example, commercial law retention obligations for business letters according to § 257 Para. 1 HGB (6 years) as well as tax law retention obligations for documents according to § 147 Para. 1 AO (10 years). When the prescribed retention period expires, your data will be blocked or deleted, unless storage is still necessary for concluding a contract or fulfilling a contract.

Existence of automated decision-making

We do not use automatic decision-making or profiling.

Provision of our website and creation of log files

If you use our website for informational purposes only (i.e., without registration or other transmission of information), we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data:

  • IP address;
  • Internet service provider of the user;
  • Date and time of access;
  • Browser type;
  • Language and browser version;
  • Content of the request;
  • Time zone;
  • Access status/HTTP status code;
  • Amount of data;
  • Websites from which the request originates;
  • Operating system.

This data is not stored together with other personal data belonging to you.

This data serves the purpose of user-friendly, functional, and secure delivery of our website to you with functions and content, as well as its optimization and statistical evaluation.

The legal basis for this is our legitimate interest in data processing according to Art. 6 Para. 1 S.1 lit. f) GDPR, which also lies in the above purposes.

For security reasons, we store this data in server log files for a storage period of days. After this period, they are automatically deleted, unless we require their retention for evidentiary purposes in case of attacks on the server infrastructure or other legal violations.

Cookies

We use so-called cookies when you visit our website. Cookies are small text files that your internet browser stores and saves on your computer. When you revisit our website, these cookies provide information to automatically recognize you. Cookies also include so-called "user IDs," where user information is stored using pseudonymized profiles. When you access our website, we will inform you about the use of cookies for the aforementioned purposes and how you can object to them or prevent their storage ("opt-out") by means of a notice referring to our data protection policy.

The following types of cookies are distinguished:

  • Necessary, essential cookies: Essential cookies are cookies that are absolutely necessary for the operation of the website to store certain functions of the website such as logins, shopping cart or user input, e.g., regarding the language of the website.
  • Session cookies: Session cookies are required to recognize multiple uses of an offer by the same user (e.g., if you have logged in to determine your login status). When you revisit our site, these cookies provide information to automatically recognize you. The information obtained in this way is used to optimize our offers and enable you easier access to our site. When you close the browser or log out, the session cookies are deleted.
  • Persistent cookies: These cookies remain stored even after the browser is closed. They are used to store login information, measure reach, and for marketing purposes. They are automatically deleted after a specified period, which may vary depending on the cookie. In the security settings of your browser, you can delete cookies at any time.
  • Third-party cookies (third-party cookies, especially from advertisers): According to your wishes, you can configure your browser settings and, for example, refuse to accept third-party cookies or all cookies. However, we would like to point out that in this case, you may not be able to use all functions of this website. Read more about these cookies in the respective data protection declarations of the third-party providers.

Data categories: User data, cookie, user ID (especially visited pages, device information, access times and IP addresses).

Purposes of processing: The information obtained in this way serves the purpose of technically and economically optimizing our web offerings and enabling you easier and more secure access to our website.

Legal bases: If we process your personal data using cookies based on your consent ("opt-in"), then Art. 6 Para. 1 S. 1 lit. a) GDPR is the legal basis. Otherwise, we have a legitimate interest in the effective functionality, improvement, and economic operation of the website, so in this case Art. 6 Para. 1 S. 1 lit. f) GDPR is the legal basis. The legal basis is also Art. 6 Para. 1 S. 1 lit. b) GDPR if the cookies are set for contract initiation, e.g., for orders.

Storage period/Deletion: The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of data collection for the provision of the website, this is the case when the respective session is ended.

Otherwise, cookies are stored on your computer and transmitted from there to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

Here you will find information on deleting cookies by browser:

Chrome: https://support.google.com/chrome/answer/95647

Safari: https://support.apple.com/de-at/guide/safari/sfri11471/mac

Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen

Internet Explorer: https://support.microsoft.com/de-at/help/17442/windows-internet-explorer-delete-manage-cookies

Microsoft Edge: https://support.microsoft.com/de-at/help/4027947/windows-delete-cookies

Objection and "Opt-Out": You can generally prevent the storage of cookies on your hard drive, regardless of consent or legal permission, by selecting "do not accept cookies" in your browser settings. However, this may lead to a functional restriction of our offers. You can object to the use of third-party cookies for advertising purposes via an "opt-out" through this American website (https://optout.aboutads.info) or this European website (http://www.youronlinechoices.com/de/praferenzmanagement/).

Contract Processing

We process inventory data (e.g., company, title/academic degree, names and addresses as well as contact details of users, email), contract data (e.g., services used, names of contact persons) and payment data (e.g., bank details, payment history) for the purpose of fulfilling our contractual obligations (knowledge of who the contractual partner is; establishment, content design and processing of the contract; verification of data plausibility) and services (e.g., customer service contact) in accordance with Art. 6 para. 1 sentence 1 lit b) GDPR. The entries marked as mandatory in online forms are necessary for the conclusion of the contract. This data will generally not be passed on to third parties, unless it is necessary for the enforcement of our claims (e.g., transfer to a lawyer for debt collection) or for the fulfillment of the contract (e.g., transfer of data to payment providers) or there is a legal obligation to do so in accordance with Art. 6 para. 1 sentence 1 lit. c) GDPR.

We may also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For inventory and contract data, this is the case when the data is no longer required for the execution of the contract and no further claims can be asserted from the contract because they are time-barred (warranty: two years / standard limitation period: three years). Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, upon termination of the contract after three years, we will restrict the processing, i.e., your data will only be used to comply with legal obligations. Information in the user account remains until its deletion.

Contact via contact form / e-mail / fax / mail

When contacting us via contact form, fax, mail, or e-mail, your details will be processed for the purpose of handling the contact request.

The legal basis for processing the data, if you have given your consent, is Art. 6 Para. 1 S. 1 lit. a) GDPR. The legal basis for processing data transmitted in the course of a contact request or e-mail, letter, or fax is Art. 6 Para. 1 S. 1 lit. f) GDPR. The controller has a legitimate interest in processing and storing the data to be able to answer user inquiries, for evidentiary purposes due to liability reasons, and to comply with any statutory retention obligations for business letters. If the contact aims at concluding a contract, an additional legal basis for the processing is Art. 6 Para. 1 S. 1 lit. b) GDPR.

We may store your information and contact request in our Customer Relationship Management system ("CRM system") or a comparable system.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the matter concerned has been conclusively clarified. Inquiries from users who have an account or contract with us will be stored until two years after the contract ends. In the case of statutory archiving obligations, deletion takes place after their expiry: end of commercial law (6 years) and tax law (10 years) retention obligations.

You have the option to revoke your consent under Art. 6 Para. 1 S. 1 lit. a) GDPR for the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of personal data at any time.

Contact by phone

When contacting us by phone, your phone number will be processed and temporarily stored or displayed in the RAM/cache of the telephone device/display for the purpose of handling the contact request and its processing. Storage is carried out for liability and security reasons, to be able to prove the call, and for economic reasons, to enable a callback. In the event of unauthorized promotional calls, we will block the phone numbers.

The legal basis for processing the phone number is Art. 6 (1) sentence 1 lit. f) GDPR. If the contact aims at concluding a contract, an additional legal basis for processing is Art. 6 (1) lit. b) GDPR.

The device cache stores calls for days and successively overwrites or deletes old data; when the device is disposed of, all data is deleted and the memory may be destroyed. Blocked phone numbers are reviewed annually for the necessity of blocking.

You can prevent your phone number from being displayed by calling with a suppressed number.

Google Adsense

We have integrated advertisements from the Google service "Adsense" (service provider: Google Ireland Limited, registration number: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. The advertisements are marked with the (i) notice "Google Ads" in each ad.

Data categories and description of data processing: Usage data/communication data; Google receives information when you visit our website that you have accessed our website. For this purpose, Google places a web beacon or cookie on your computer. The data is also transmitted to the USA and analyzed there. If you are logged in with a Google account, Adsense can associate the data with your account. If you do not wish this, you must log out before visiting our website. However, other information can also be used by Google for this purpose:

  • the type of websites you visit and the mobile apps installed on your device;
  • Cookies in your browser and settings in your Google account;
  • Websites and apps you have visited;
  • Your activity on other devices;
  • previous interactions with Google ads or advertising services;
  • Your Google account activities and information.

When you click on an Adsense ad, the users' IP address is processed by Google (usage data), whereby the processing is pseudonymized (so-called "advertising ID") by truncating the IP by the last two digits. For personalized advertising, Google does not link identifiers from cookies or similar technologies with special categories of personal data according to Art. 9 GDPR, such as ethnic origin, religion, sexual orientation, or health.

Purpose of processing: We have enabled personalized ads to show you more interesting advertising that supports the commercial use of our website, increases its value for us, and improves your user experience. With the help of personalized advertising, we can reach users through Adsense based on their interests and demographic characteristics (e.g., "sports enthusiasts"). In addition, the processing serves for tracking, remarketing, and conversion measurement, as well as for financing our web offering.

Legal bases: If you have given your consent ("Opt-in") for the processing of your personal data using "Google Adsense with personalized ads," then Art. 6 (1) sentence 1 lit. a) GDPR is the legal basis. Otherwise, the legal basis for the processing of your data is Art. 6 (1) sentence 1 lit. f) GDPR due to our legitimate interests in the analysis, optimization, and efficient economic operation of our advertising and website.

Data transfer/recipient category: Google Ireland, USA; This website has also enabled Google AdSense ads from third-party providers. The aforementioned data may also be transferred to these third-party providers, "Certified External Vendors," listed at https://support.google.com/dfp_sb/answer/94149. Google USA is certified under the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

Storage duration: The data is stored for up to 24 months after the last visit.

Opposition and removal options ("Opt-Out"): You can object to or prevent the installation of cookies by Google Adsense in various ways:

  • You can prevent cookies in your browser by setting "do not accept cookies," which also includes third-party cookies;
  • You can directly deactivate personalized ads on Google via the link https://adssettings.google.com, but this setting will only last until you delete your cookies. Instructions for deactivating personalized advertising on mobile devices can be found here: https://support.google.com/adsense/troubleshooter/1631343;
  • You can deactivate personalized ads from third-party providers participating in the "About Ads" self-regulatory advertising initiative via the link https://optout.aboutads.info for US sites or for EU sites at http://www.youronlinechoices.com/de/praferenzmanagement/, but this setting will only last until you delete all your cookies;
  • You can permanently deactivate cookies via a browser plug-in for Chrome, Firefox, or Internet Explorer at the link https://support.google.com/ads/answer/7395996. This deactivation may result in you not being able to fully use all functions of our website.

Further information on the use of Google cookies in ads and its advertising technologies, storage duration, anonymization, location data, functionality, and your rights can be found in Google's privacy policy for advertising at https://policies.google.com/technologies/ads.

Google AdWords with Conversion Tracking

We use the service "Google Ads with Conversion Tracking" (service provider: Google Ireland Limited, registration number: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) to draw attention to our website on third-party websites through ads.

Data categories and description of data processing: Usage data/communication data. If you click on one of our Google ads, a cookie will be stored in your browser, which is valid for approximately 30 days. If you then visit our website, we and Google can evaluate, based on the cookie, whether you have visited our website and which page you visited. Google creates statistics about this. The data is also transferred to the USA and analyzed there. If you are logged in with a Google account, AdWords can associate the data with your account. If you do not wish this, you must log out before visiting our website.

Purpose of data processing: This conversion tracking serves the purpose of analysis/performance measurement, optimization, and the economic operation of our advertising and website.

Legal bases: If you have given your consent ("Opt-in") for the processing of your personal data using "Google Ads with Conversion Tracking," then Art. 6 (1) sentence 1 lit. a) GDPR is the legal basis. Otherwise, the legal basis for the processing of your data is our legitimate interest in the analysis, optimization, and efficient economic operation of our advertising and website according to Art. 6 (1) sentence 1 lit. f) GDPR.

Data transfer/recipient category: Google Ireland, USA; Google USA is certified under the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

Storage duration: up to 540 days.

Opposition and removal options ("Opt-Out"): You can object to or prevent the installation of cookies by Google in various ways:

  • You can prevent cookies in your browser by setting "do not accept cookies," which also includes third-party cookies;
  • You can directly deactivate conversion tracking on Google via the link https://adssettings.google.com, but this setting will only last until you delete your cookies;
  • You can deactivate personalized ads from third-party providers participating in the "About Ads" self-regulatory advertising initiative via the link https://optout.aboutads.info for US sites or for EU sites at http://www.youronlinechoices.com/de/praferenzmanagement/, but this setting will only last until you delete all your cookies;
  • You can permanently deactivate cookies via a browser plug-in for Chrome, Firefox, or Internet Explorer at the link https://support.google.com/ads/answer/7395996. This deactivation may result in you not being able to fully use all functions of our website.

Further information can be found in Google's privacy policy at https://policies.google.com/privacy?hl=de&gl=de and https://services.google.com/sitestats/de.html.

Google AdWords Remarketing / "Similar Audiences"

We use the Google Analytics Remarketing / "Similar Audiences" application (service provider: Google Ireland Limited, registration number: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) to draw attention to our website on third-party websites and other internet offerings through ads.

Data categories and description of data processing: Usage data/communication data. With the remarketing or "Similar Audiences" function in Ads, we can reach you when you have already visited our website and address you with a suitable message via ad. With remarketing, we can bring our previous visitors back to our website with a click. If you then visit other websites or internet offerings, we and Google can evaluate, based on the cookie, whether you have already visited our website and also display our advertising there. Google creates statistics about this. The full extent of data processing is not known to us. The data is also transferred to the USA and analyzed there. According to Google, the data collected through remarketing is not merged with your personal data possibly stored on Google but is processed pseudonymously.

Purpose of processing: This remarketing serves the purpose of analysis, optimization, and the economic operation of our advertising and website.

Legal bases: If you have given your consent ("Opt-in") for the processing of your personal data using "Google Ads Remarketing / "Similar Audiences," then Art. 6 (1) sentence 1 lit. a) GDPR is the legal basis. Otherwise, the legal basis for the processing of your data is our legitimate interest in the analysis, optimization, and efficient economic operation of our advertising and website according to Art. 6 (1) sentence 1 lit. f) GDPR.

Data transfer/recipient category: Google Ireland, USA; Google USA is certified under the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

Storage duration: When you visit certain pages of ours, a cookie is stored in your browser, which is valid for 30 days.

Opposition and removal options ("Opt-Out"): You can object to or prevent the installation of cookies by Google in various ways:

  • You can prevent cookies in your browser by setting "do not accept cookies," which also includes third-party cookies;

  • You can directly deactivate personalized ads on Google via the link https://adssettings.google.com, but this setting will only last until you delete your cookies.
  • You can deactivate personalized ads from third-party providers participating in the "About Ads" self-regulatory advertising initiative via the link https://optout.aboutads.info for US sites or for EU sites at http://www.youronlinechoices.com/de/praferenzmanagement/, but this setting will only last until you delete all your cookies;
  • You can permanently deactivate cookies via a browser plug-in for Chrome, Firefox, or Internet Explorer at the link https://support.google.com/ads/answer/7395996. This deactivation may result in you not being able to fully use all functions of our website.

Further information can be found in Google's privacy policy at https://policies.google.com/privacy?hl=de&gl=de.

Google Analytics

We have integrated the website analysis tool "Google Analytics" (service provider: Google Ireland Limited, registration number: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) on our website.

Data categories and description of data processing: User ID, IP address (anonymized). When you visit our website, Google places a cookie on your computer to analyze your use of our website. We have activated IP anonymization "anonymizeIP," which means that IP addresses are only processed in truncated form. On this website, your IP address is therefore truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website use and internet use to the controller. We have also enabled cross-device analysis of website visitors, which is carried out via a so-called User ID. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Further information on data usage with Google Analytics can be found here: https://www.google.com/analytics/terms/de.html (Analytics Terms of Service), https://support.google.com/analytics/answer/6004245?hl=de (Notes on data protection with Analytics) and Google's privacy policy https://policies.google.com/privacy.

Purpose of processing: The use of Google Analytics serves the purpose of analyzing, optimizing, and improving our website.

Legal bases: If you have given your consent ("Opt-in") for the processing of your personal data using "Google Analytics" from the third-party provider, then Art. 6 (1) sentence 1 lit. a) GDPR is the legal basis. The legal basis is also our legitimate interest (in the analysis, optimization, and improvement of our website) in data processing according to Art. 6 (1) sentence 1 lit. f) GDPR. For services provided in connection with a contract, the tracking and analysis of user behavior takes place according to Art. 6 (1) sentence 1 lit. b) GDPR, in order to be able to offer optimized services for the fulfillment of the contract purpose with the information thus obtained.

Storage duration: The data we send and link to cookies, user IDs (e.g., User ID), or advertising IDs are automatically deleted after months. Data whose retention period has been reached is automatically deleted once a month.

Data transfer/recipient category: Google, Ireland and USA. The collected data is transferred to the USA and stored there. If personal data is transferred to the USA, Google's certification under the Privacy Shield Agreement (https://www.privacyshield.gov/EU-US-Framework) guarantees compliance with European data protection law. We have also concluded a data processing agreement with Google according to Art. 28 GDPR.

Opposition and removal options ("Opt-Out"):

  • You can generally prevent the storage of cookies on your hard drive by selecting "do not accept cookies" in your browser settings. However, this may result in a functional limitation of our offers. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website, as well as Google's processing of this data, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
  • As an alternative to the browser plug-in above, you can prevent Google Analytics from collecting data by clicking [__please insert__the Analytics Opt-Out link of your website here]. By clicking, an "opt-out" cookie will be set, which will prevent the collection of your data when visiting this website in the future. This cookie is only valid for our website and your current browser and will only last until you delete your cookies. In that case, you would have to set the cookie again.
  • Cross-device user analysis can be deactivated in your Google account under "My Data > Personal Data".

Google Maps

We have integrated maps from "Google Maps" (provider: Google Ireland Limited, registration no.: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) on our website.

Data category and description of data processing: usage data (e.g., IP, location, accessed page). With Google Maps, we can display the location of addresses and directions directly on our website in interactive maps and enable you to use this tool. When you access our website where Google Maps is integrated, a connection to Google's servers in the USA is established. In this process, your IP and location may be transmitted to Google. Google also receives the information that you have accessed the corresponding page. This happens even without a Google user account. If you are logged into your Google account, Google can associate the above data with your account. If you do not wish this, you must log out of your Google account. Google creates user profiles from such data and uses this data for the purposes of advertising, market research, or optimizing its websites.

 

Purpose of processing: provision of a user-friendly, economical, and optimized website.

Legal bases: If you have given your consent for the processing of your personal data by "Google Maps" from the third-party provider ("Opt-in"), then Art. 6 para. 1 sentence 1 lit. a) GDPR is the legal basis. The legal basis is also our legitimate interest in data processing according to Art. 6 para. 1 sentence 1 lit. f) GDPR, which lies in the purposes mentioned above.

Data transfer/recipient category: Third-party providers in the USA. Google is certified under the Privacy Shield Agreement (https://www.privacyshield.gov/EU-US-Framework). This ensures that European data protection law is complied with.

Storage duration: Cookies up to 6 months or until deleted by you. Otherwise, as soon as they are no longer needed for the processing purposes.

Right to object and possibility of removal: You have a right to object to Google against the creation of user profiles. Please contact Google directly via the data protection declaration mentioned below. You can make an opt-out objection regarding advertising cookies here in your Google account:

https://adssettings.google.com/authenticated.

Further information on the use of Google cookies and their advertising technologies, storage duration, anonymization, location data, functionality, and your rights can be found in the Google Maps terms of use at https://www.google.com/intl/de_de/help/terms_maps.html and in Google's privacy policy for advertising at https://policies.google.com/technologies/ads. Google's general privacy policy: https://policies.google.com/privacy.

Data protection for applications and in the application process

Applications sent electronically or by post to the data controller will be processed electronically or manually for the purpose of carrying out the application process.

We expressly point out that application documents containing "special categories of personal data" according to Art. 9 GDPR (e.g., a photo that allows conclusions about your ethnic origin, religion, or marital status), with the exception of any severe disability that you may wish to disclose of your own free will, are undesirable. You should submit your application without this data. This will not affect your chances of being hired. 

Legal bases for processing are Art. 6 para. 1 sentence 1 lit. b) GDPR and Section 26 BDSG (new version).

If, after the completion of the application process, an employment relationship is entered into with the applicant, the applicant's data will be stored in compliance with relevant data protection regulations. If you are not offered a position after the completion of the application process, your submitted application letter and documents will be deleted 6 months after the rejection is sent, in order to comply with any claims and obligations to provide evidence under the AGG (General Equal Treatment Act). 

Rights of the data subject

Right to object or revoke consent to the processing of your data

Insofar as the processing is based on your consent pursuant to Art. 6 para. 1 sentence 1 lit. a), Art. 7 GDPR, you have the right to revoke your consent at any time. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

Insofar as we base the processing of your personal data on a balancing of interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, you may object to the processing. This is the case if the processing is not necessary for the performance of a contract with you, which is described by us in each case in the following description of the functions. When exercising such an objection, we ask for an explanation of the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

You can object to the processing of your personal data for advertising and data analysis purposes at any time. You can exercise your right to object free of charge. You can inform us of your objection to advertising using the following contact details:

 

Fliesen Nurkic GmbH

Industriestrasse 29

72585 Riederich

Phone: 07123/9675888

Fax: 07123/9675889

info@fliesen-nurkic.de

Commercial Register: 748192

Managing Director: Muhamed Nurkic

Right to information

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about your personal data stored by us in accordance with Art. 15 GDPR. This includes, in particular, information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data, if it was not collected directly from you.

Right to rectification

You have a right to rectification of inaccurate or completion of accurate data in accordance with Art. 16 GDPR.

Right to erasure

You have a right to erasure of your data stored by us in accordance with Art. 17 GDPR, unless legal or contractual retention periods or other legal obligations or rights for further storage prevent this.

Right to restriction of processing

You have the right to request a restriction of the processing of your personal data if one of the conditions in Art. 18 para. 1 lit. a) to d) GDPR is met:

  • If you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and you oppose the erasure of the personal data and request instead the restriction of their use; 
  • the controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims, or
  • if you have objected to processing pursuant to Art. 21 para. 1 GDPR pending the verification whether the legitimate grounds of the controller override your grounds.

Right to data portability

You have a right to data portability according to Art. 20 GDPR, which means that you can receive the personal data stored by us about you in a structured, commonly used and machine-readable format or request transmission to another controller.

 

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

Data security

In order to protect all personal data transmitted to us and to ensure that data protection regulations are complied with by us and our external service providers, we have taken appropriate technical and organizational security measures. Therefore, among other things, all data between your browser and our server is transmitted encrypted via a secure SSL connection.

As of: 09.04.2020

 

Source: Privacy Policy Generator by JuraForum.de