Privacy Policy
Information obligations under Article 13 GDPR
The protection of your personal data is of particular concern to us. We therefore process your personal data (hereinafter referred to as “data”) exclusively on the basis of the statutory provisions. With this privacy policy, we aim to provide you with comprehensive information, in accordance with Article 13 of the European General Data Protection Regulation (EU GDPR), about the processing of your data within our company as well as about your data protection rights and entitlements.
1. Data Controller and Contact Information
The data controller is:
Druckerei Max Götz GmbH
Graphische Kunstanstalt
Laufamholzstraße 124
90482 Nürnberg
Tel: 0911-99544-0
E-Mail: info@mg-druck.de
The Data Protection Officer (DPO) is:
Protekto Gruppe
Kent Schwirz
Wendenstraße 279
20537 Hamburg
Germany
E-Mail: datenschutz(at)protekto.group
Tel.: +49 40 422 369 24
2. What data do we process and where do we obtain it from?
We process the data that we obtain from you during the initiation or execution of a contract, on the basis of consent, or in connection with your application to our company or your employment with us.
The categories of personal data include:
Your basic personal and contact information, which for customers includes, for example: first and last name , contact details (email address, telephone number, fax), and bank details.
For applicants and employees, this includes, for example: first and last name, address, contact details (email address, telephone number, fax), date of birth, data from résumés and employment references, bank details, religious affiliation, and photographic images.
For business partners , this includes, for example: the designation of their legal representatives, company name, commercial register number, VAT ID number, business identification number, address, contact details of contact persons (email address, telephone number, fax), and bank details.
For visitors to our company, this includes name and signature.
For journalists this includes first and last name, email address, and fax number.
For For competition participants , this includes first and last name, and email address.
In addition, we also process the following other personal data:
Information on the type and content of contractual data, order data, sales and voucher data, customer and supplier history as well as consulting records; marketing and sales data; information from your electronic interactions with us (e.g. IP address, login data); other data that we receive from you in the course of our business relationship (e.g. during customer meetings); data that we generate ourselves from master / contact data and other information, such as through customer needs and potential analyses; documentation of your consent to receive, for example, newsletters; photographic recordings made during events.
Server log files:
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
Date and time of the request
Name of the requested file
Page from which the file was requested
Access status (file transferred, file not found, etc.)
Web browser and operating system used
Full IP address of the requesting computer
Amount of data transferred
These data are not merged with other data sources.
Processing is carried out pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
For reasons of technical security, in particular to prevent attempts to attack our web server, this data is stored by us for a short period of time. It is not possible for us to draw any conclusions about individual persons from this data. After no more than seven days, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a link to an individual user. In anonymized form, the data is also processed for statistical purposes; no comparison with other data sources or transfer to third parties, even in part, takes place.
3. For what purposes and on what legal basis are the data processed?
We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act 2018 (BDSG) in their applicable versions:
for the performance of (pre-)contractual obligations (Art. 6 (1) (b) GDPR):
The processing of your data takes place for the execution of contracts online or in one of our branches, as well as for the administration of employment relationships within our company. In particular, the data are processed during the initiation of business and the performance of contracts with you.
For compliance with legal obligations (Art. 6 (1) (c) GDPR):
The processing of your data is required for the purpose of complying with various legal obligations, for example arising from the German Commercial Code (HGB) or the Fiscal Code (AO)for the protection of legitimate interests (Art. 6 (1) (f) GDPR):
On the basis of a balancing of interests, data processing may be carried out beyond the actual fulfillment of the contract in order to safeguard the legitimate interests of ourselves or third parties. Data processing for the protection of legitimate interests takes place, for example, in the following cases:
Advertising or marketing (see section 4)
Measures for business management and the further development of services and products
Maintaining a group-wide customer database to improve customer service
In the context of legal prosecution
Sending of non-promotional information and press releases.
on the basis of your consent (Art. 6 (1) (a) GDPR):
If you have given us your consent to the processing of your data, e.g. for sending our newsletter, publishing photos, participation in competitions, etc.
4. Processing of personal data for advertising purposes
You may object to the use of your personal data for advertising purposes at any time, either in whole or in part, without incurring any costs other than the transmission costs in accordance with the basic rates. In accordance with the statutory provisions of Section 7 (3) of the German Unfair Competition Act (UWG), we are entitled to use the e-mail address you provided when concluding the contract for direct advertising of our own similar goods or services. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. If you do not wish to receive such recommendations by e-mail, you may object to the use of your address for this purpose at any time, without incurring any costs other than the transmission costs in accordance with the basic rates. A notification in text form is sufficient for this. Of course, every e-mail always contains an unsubscribe link as well.
5. Am I obliged to provide data?
The processing of your data is required for the conclusion and/or performance of the contract you have entered into with us. If you do not provide us with this data, we will generally have to refuse to conclude the contract or will no longer be able to perform an existing contract and will therefore have to terminate it. However, you are not obliged to give your consent to the processing of data that is not relevant for the performance of the contract or not required by law.
6. Who receives my data?
If we use a service provider within the meaning of commissioned data processing, we remain responsible for the protection of your data. All processors are contractually obliged to treat your data confidentially and to process it only within the scope of providing the service. The processors we engage will receive your data only if they require such data to perform their respective services. These include, for example, IT service providers that we need for the operation and security of our IT systems, as well as marketing and address publishers for our own promotional activities. Your data will be processed in our customer database. The customer database helps to improve the quality of the existing customer data (elimination of duplicates, marking of moved/deceased customers, address correction) and enables enrichment with data from public sources. These data are made available to affiliated group companies if necessary for the performance of contracts. Customer data are stored on a company-related and segregated basis, with our parent company acting as a service provider for the individual participating companies. Where a legal obligation exists, and in the context of legal proceedings, public authorities and courts as well as external auditors may be recipients of your data. In addition, for the purpose of contract initiation and performance, insurance companies, banks, credit agencies, and service providers may also be recipients of your data.
7. How long will my data be stored?
We process your data until the termination of the business relationship or until the expiry of the applicable statutory retention periods (for example, under the German Commercial Code, the Fiscal Code, or the Working Hours Act); beyond that, until the conclusion of any legal disputes in which the data are required as evidence.
8. Will personal data be transferred to a third country?
As a rule, we do not transfer any data to a third country. A transfer will only take place in individual cases on the basis of an adequacy decision of the European Commission, standard contractual clauses, appropriate safeguards, or your explicit consent.
9. Security
"We have implemented technical and administrative security measures to protect your personal data against loss, destruction, manipulation, and unauthorized access. All our employees as well as service providers working for us are bound by the applicable data protection laws. Whenever we collect and process personal data, these are encrypted before transmission. This means that your data cannot be misused by third parties. Our security measures are subject to a continuous improvement process, and our privacy policies are constantly being revised. Please ensure that you are aware of the most current version.
10. Contact form
If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this data without your consent. The processing of this data is based on Art. 6 (1) (b) GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your inquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
11. Applications
We collect various personal data during the application process. Personal data includes all information that can be used to draw conclusions about your personal or factual circumstances or that can identify you. For the automated processing of your application, the following data are collected and processed:
First name, last name, address, e-mail, date of birth, salutation, telephone number, country of residence, and nationality
Additional questions depending on the respective job posting (e.g. driver’s license)
Curriculum vitae, in particular information on professional experience and education
Skills and knowledge relevant to the advertised position
Application photo
Qualifications, awards, and language skills
Cover letter
Files and documents that you send to us or upload in connection with your application
By submitting your application data, you as the applicant give your consent to the processing of your personal data for the purposes and to the extent set out in this privacy policy.
For the processing of your application, no information is required that may not be processed under the General Equal Treatment Act (AGG). This includes, among other things, data relating to race, ethnic origin, gender, disability, religion or belief, or age. We kindly ask you not to provide any information that is irrelevant for the processing of your application under the Equal Treatment Act (including details on illnesses, pregnancy, trade union membership, or sexual life). Please also do not submit any content that could violate the copyrights or press rights of third parties.
12. Cookies
When you visit our website, we may store information on your computer in the form of cookies. Cookies are small files that are transferred from an internet server to your browser and stored on its hard drive. Only the Internet Protocol (IP) address is stored in this process – no personal data. The information stored in the cookies allows us to automatically recognize you on your next visit to our website, making it easier for you to use our site. Of course, you can also visit our website without accepting cookies. If you do not want your computer to be recognized on your next visit, you can refuse the use of cookies by changing your browser settings to "reject cookies." The procedure for doing this can be found in the instructions provided by your browser. However, if you refuse the use of cookies, some areas of our website may be restricted in their functionality.
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the related consents, we use the consent tool ‘Real Cookie Banner’. Details on the functionality of ‘Real Cookie Banner’ can be found at https://devowl.io/knowledge-base/real-cookie-banner-data-processing/. The legal bases for the processing of personal data in this context are Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents. The provision of personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the personal data. However, if you do not provide the personal data, we will not be able to manage your consents.
13. Third-party services
Google Web Fonts
For an improved visual presentation of various information on our website, we use Google Web Fonts (http://www.google.com/webfonts/
). The web fonts are transferred to the cache of your browser when the page is called up in order to be used for display. If the browser does not support Google Web Fonts or blocks access, the text will be displayed in a standard font.
When the page is accessed, no cookies are stored on the visitor’s computer. Data transmitted in connection with the page request are sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.
You can configure your browser so that the fonts are not loaded from the Google servers (for example, by installing add-ons such as NoScript or Ghostery for Firefox). If your browser does not support Google Fonts or if you block access to the Google servers, the text will be displayed in the system’s standard font. For information on Google Web Fonts’ privacy conditions, please visit:
https://developers.google.com/fonts/faq#Privacy
For information on Google’s privacy policy and terms of use, please visit Google directly: http://www.google.com/intl/en/policies/privacy/
Google Maps
This website uses Google Maps to display maps and to create directions. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. By using Google Maps on this website, you consent to the collection, processing, and use of the automatically collected data as well as the data you enter by Google, one of its representatives, or third-party providers.
The terms of use for Google Maps can be found here.
The privacy policy of Google Maps can be viewed here.
14. What data protection rights do I have?
You have the right at any time to obtain information about your stored data, to have it corrected, deleted, or to restrict its processing, as well as the right to object to processing. You also have the right to data portability and to lodge a complaint, in accordance with the requirements of data protection law.
Right of access:
You may request information from us as to whether we process your data and to what extent.
Right to rectification:
If we process data that are incomplete or incorrect, you may request that they be corrected or completed at any time.
Right to erasure:
You may request the deletion of your data if we process it unlawfully or if the processing disproportionately infringes upon your legitimate protection interests. Please note that there may be reasons that prevent immediate deletion, such as in the case of statutory retention obligations.
Irrespective of the exercise of your right to erasure, we will promptly and fully delete your data, provided that no contractual or statutory retention obligations to the contrary exist.
Right to restriction of processing:
You may request that we restrict the processing of your data if
you contest the accuracy of the data, for a period enabling us to verify the accuracy of the data,
the processing of the data is unlawful, but you oppose the erasure and instead request the restriction of the use of the data,
we no longer need the data for the intended purpose, but you still require it for the establishment, exercise, or defense of legal claims, or
you have objected to the processing of the data.
Right to data portability:
You may request that we provide you with the data you have made available to us in a structured, commonly used, and machine-readable format, and that you can transmit these data to another controller without hindrance from us, provided that
we process these data on the basis of your consent, which may be revoked, or for the performance of a contract between us, and
this processing is carried out by automated means.
Where technically feasible, you may request that we transmit your data directly to another controller.
Right to object:
If we process your data on the basis of legitimate interests, you may object to this processing at any time; this also applies to any profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
You may object to the processing of your data for direct marketing purposes at any time without providing reasons.
Right to lodge a complaint:
If you believe that we are processing your data in violation of German or European data protection law, we kindly ask you to contact us so that we can clarify any questions. Of course, you also have the right to contact the supervisory authority responsible for you, namely the respective State Data Protection Authority.
If you wish to assert any of the rights mentioned above against us, please contact our Data Protection Officer. In case of doubt, we may request additional information to confirm your identity.
You have the option to prevent actions you take here from being analyzed and linked. This will protect your privacy, but it will also prevent the site owner from learning from your actions and improving usability for you and other users.Your visit to this website is currently being tracked by Matomo web analytics. Uncheck this box to opt out.
