In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail address, usage behaviour.
The responsible party pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is KEIMFARBEN GMBH, Keimstraße 16, 86420 Diedorf, Germany, Phone +49 821 4802-0, firstname.lastname@example.org.
You can reach our data protection officer via e-mail at email@example.com or by post with the addition "the data protection officer".
Contact form and e-mail
Our website contains information that enables you to contact our company quickly and electronically and to communicate directly with us. When you contact us by e-mail or via the contact form, the data you provide will be stored by us in order to answer your personal message to us.
We delete the data accruing in this context, if the enquiry is assigned to a contract, after the time limits for the term of the contract, otherwise after completion of the contact enquiry, or restrict the processing if there are legal obligations to retain data. In the case of a contract, our legal basis for processing is Art. 6 Para. 1 lit. b GDPR, in all other cases Art. 6 Para. 1. lit. f. Our and your interest lies in the simple and uncomplicated establishment of contact.
We use your personal data exclusively for the execution and processing of your online application. If you consent, we will also use your application for future selection procedures.
In the context of your online application, we process personal data to carry out pre-contractual measures on the basis of Art. 6 para. 1 lit. b in conjunction with. Art. 88 para. 1 GDPR in conjunction with. § 26 para. 1 p. 1 BDSG (Federal data protection act). In the event of your consent to longer storage for use in the context of future selection procedures, the legal basis is Art. 6 para. 1 lit. a GDPR.
When processing application data in the context of legal disputes, our legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the assertion, exercise or defence of legal claims.
Your personal data will be forwarded to the departments responsible for the specific application procedure (HR department and specialist department). If necessary, your application documents will also be forwarded to other specialist departments if we consider your applicant profile to be suitable for another internal position. Under no circumstances will your application documents be passed on to other companies or third parties.
After the end of the application process, we delete the data of your online application after six months if your application was unsuccessful. This does not apply if legal regulations prevent deletion. If you have consented to longer storage for future selection procedures, we will delete your application data after consultation, but at the latest after three years. In the event of a successful application, we will transfer your application data to the personnel file in compliance with legal admissibility.
Obligation to provide data
There is no legal or contractual obligation to provide us with personal data. Please note that application data that is not meaningful cannot be considered for the application process. For sending your online application documents to us by e-mail, we recommend that you encrypt your e-mail address. The PGP key for the application email address firstname.lastname@example.org is available for download below:
→ Download PGP key here
Web server usage data
In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above):
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request came
- Browser software
- Operating system and its interface
- Language and version of the browser software
- Directory protection user
The IP addresses are stored anonymously. For this purpose, the last three digits are removed, i.e. 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymised. The anonymised IP addresses are retained for 60 days. Details of the directory protection user used are anonymised after one day. Web server usage data on erroneous page views are deleted after seven days.
Technically necessary cookies
To enable you to use our website comfortably and securely, we use technically necessary cookies. These cookies are deleted again after the end of the session or have longer storage periods. In the case of the objection cookie, the storage period is 50 years. The technically necessary cookies do not store any personal data. The legal basis for the use of these technically necessary cookies is Art. 6 para. 1 lit. f GDPR. Our legitimate interests as a website operator result from the above-mentioned purposes.
Cloudflare processes the personal data for a specific purpose on our behalf. The data is deleted at the latest after completion of the order.
For more information on data processing by Cloudflare, please visit www.cloudflare.com/de-de/privacypolicy/ and www.cloudflare.com/de-de/gdpr/introduction/. Data processing in the USA takes place on the basis of standard contractual clauses, also available at www.cloudflare.com/de-de/gdpr/introduction/.
The legal basis for our use of Cloudflare is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in our responsibility as website operator and results from the above-mentioned purposes.
Social media channels
In our online offer you will find links to social networks such as Facebook, Google+, the two career networks Xing (DACH region) and LinkedIN (worldwide) as well as the video portal YouTube. You can recognise the links by the respective logo of the provider.
Clicking on the links opens the corresponding social media pages, for which this data protection declaration does not apply. For details of the provisions applicable there, please refer to the corresponding data protection declarations of the individual providers; you will find these at:
- Facebook/Instagram: www.facebook.com/policy.php
- Google+: https://policies.google.com/privacy/update?hl=de
- Xing: https://privacy.xing.com/de/datenschutzerklaerung
- LinkedIn: www.linkedin.com/legal/privacy-policy
- YouTube: policies.google.com/privacy;
YouTube is a service of the provider Google LLC, 1600 Amphiteatre Parkway, Mountain View, CA 94043, USA. In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
We have integrated YouTube videos into our online offer, which are stored on www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in the next paragraph be transferred. We have no influence on this data transmission. The legal basis for the display of the videos is Art. 6 para. 1 p. 1 lit. a GDPR, i.e. the integration only takes place after your consent.
By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under "Web server usage data" in this statement, such as IP address, are transmitted. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
The information collected is stored on Google servers, also in the USA. For these cases, the provider has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also concluded so-called standard contractual clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country and which can be accessed here https://policies.google.com/privacy/frameworks.
This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd Gordon House, Barrow Street Dublin 4 ("Google"). Google Analytics uses web memory in the browser, tracking pixels and so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by this about your use of this website is usually transferred to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website (see below), however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your Google customer account under "My data", "Personal data"].
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The legal basis for the use of Google Analytics is your consent (Art. 6 para. 1 p. 1 lit. a GDPR). You can revoke your consent at the top of this page via our Consent banner or install the Google browser add-on, which can be accessed via the following link: https://tools.google.com/dlpage/gaoptout?hl=en
This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, thus making it impossible to relate them to a specific person. If the data collected about you is related to a person, this is immediately excluded and the personal data is deleted immediately.
We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you. For the exceptional cases in which personal data is transferred to the USA, the data transfer takes place on the basis of standard contractual clauses, which can be viewed at https://policies.google.com/privacy/frameworks.
Users' personal data stored through tracking is deleted or anonymised as soon as it is no longer needed for our recording purposes. In our case, this happens after 14 months.
We use the Google Maps service on this website. Google Maps is a service of the provider Google LLC, 1600 Amphiteatre Parkway, Mountain View, CA 94043, USA. In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. The legal basis for the use of the maps is Art. 6 para. 1 p. 1 lit. a GDPR, i.e. the integration only takes place with your consent.
By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This takes place regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
(3) The information collected is stored on Google servers, including in the USA. For these cases, the provider has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country and which can be accessed here https://policies.google.com/privacy/frameworks.
Data subjects' rights
You have the following rights with regard to the personal data concerning you:
- Right to information
- Right to rectification or erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
You have the right to revoke an already given consent to the processing of your personal data at any time. The lawfulness of the processing carried out on the basis of the consent until revocation is not affected by this.
To exercise your rights, please contact us by e-mail at email@example.com.
Right of appeal
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The supervisory authority responsible for our company is the Bavarian State Office for Data Protection Supervision in Ansbach (www.baylda.de).