Privacy policy

  1. Scope of the privacy policy

    In this privacy policy, we explain below how we collect, use and manage "personal" data that we receive in the course of our business and from users of this website, and under what circumstances we disclose personal data to third parties.
    "Personal data" means data that can be unambiguously attributed to a person, either independently or in combination with other data.
  2. Name and address of the person responsible for the data processing

    The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection provisions is:

    WEKAL Maschinenbau GmbH
    Wekalstraße 1 - 5
    34560 Fritzlar
    Tel: +49 5622 / 9957-0
    Email: info@wekal.de
  3. Name and address of the data protection officer

    WEKAL Maschinenbau GmbH
    Keyword: Data protection
    Wekalstraße 1 - 5
    34560 Fritzlar
    Tel: +49 5622 / 9957-0
    Email: datenschutz@wekal.de
  4. Data processing within the scope of our business activities

    For the purpose of fulfilling and implementing our contractual relationships and within the scope of our other business activities with a legitimate interest, we collect personal data of the respective contact persons of our business contacts pursuant to Art. 6 (1) item b and f EU-GDPR and process it in accordance with the provisions of the European Data Protection Regulation and the German Federal Data Protection Act.
    Personal data of our contractual partners are stored for the duration of the business relationship as well as for the period of commercial and tax retention periods, usually ten years from the end of the calendar year in which the respective exchange of services took place. After this period, we will immediately destroy or delete the data. Personal data that we receive outside of our contractual relationship, for example via enquiries by email or from applicants in the application process, is destroyed or deleted as soon as the purpose for storing it no longer applies (see below in detail).
  5. General information on data processing when using our website

    As a matter of principle, we only process personal data of the users of our website insofar as this is necessary for the provision of a functional website as well as our contents and services.
    Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) item a EU-GDPR serves as the legal basis.
    Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 para. 1 item c EU-GDPR serves as the legal basis.
    If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) item f EU-GDPR serves as the legal basis for the processing.
    The personal data will be deleted or blocked as soon as the purpose of the storage no longer applies. In addition, storage may take place if this has been provided for by the European or national legislator in EU-juridical regulations, laws or other provisions to which the person responsible is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

  6. Contact form and email contact

    A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.
    For the processing of the data, your consent is obtained during the submission process and reference is made to this privacy policy.
    Alternatively, it is possible to contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored.
    The legal basis for the processing of the data is Art. 6 (1) item a EU-GDPR if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 item f EU-GDPR. If the aim of the email contact is the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) item b EU-GDPR.
    The processing of the personal data from the input mask serves us solely to process the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.
    The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
    The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
    The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
    The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, however, the conversation cannot be continued.
  7. Data processing for job applications and during the job application procedure

    We collect and process personal data from job applicants for the purpose of processing the job application procedure.
    The legal basis for data processing is Art. 6 para. 1 item f EU-GDPR.
    If an employment relationship is established with an applicant, the transmitted data will be stored for the purpose of implementing the employment relationship in compliance with the statutory provisions. The applicant is comprehensively informed in a separate data protection declaration for our employees about the nature and scope of the data processing as well as his/her rights in this regard.
    If an employment relationship with the applicant does not materialise, the personal data collected will be destroyed or deleted after notification of the rejection decision, provided that no other legitimate interests of our company oppose deletion.
  8. Provision of the website and creation of log files

    Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
    The following data is collected:
    1. Information about the browser type and version used
    2. The operating system of the user
    3. The user's internet service provider
    4. The IP address of the user
    5. Date and time of access
    6. Websites from which the user's system accesses our website
    7. Websites that are accessed by the user's system via our website
    The data is stored in the log files of our system. This data is not stored together with other personal data of the user.
    The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 item f EU-GDPR. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
    The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the client accessing the site is no longer possible.
    The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
  9. Use of cookies

    Our website www.wekal.de itself does not use any cookies. For content and links from external providers, please refer to the data protection information of the respective provider.
  10. Audio and video conferencing

    1. Data processing
      Among other things, we use online conference tools to communicate with our clients. The specific tools we use are listed below. If you communicate with us by video or audio conference via the internet, your personal data will be collected and processed by us and the provider of the respective conference tool. The conference tools collect all data that you provide/enter to use the tools (email address and/or your telephone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other "contextual information" related to the communication process (metadata). Furthermore, the provider of the tool processes all technical data required for the handling of online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection. If content is exchanged, uploaded or otherwise made available within the tool, this is also stored on the servers of the tool providers. Such content includes, but is not limited to, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared while using the service. Please note that we do not have full control over the data processing operations of the tools used. Our options are largely determined by the corporate policy of the respective provider. For further information on data processing by the conference tools, please refer to the data protection statements of the respective tools used, which we have listed below this text.
    2. Purpose and legal basis
      The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 p. 1 item b GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6 para. 1 item f GDPR). Insofar as consent has been requested, the tools in question are used on the basis of this consent; consent can be revoked at any time with effect for the future.
    3. Storage period
      The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory statutory retention periods remain unaffected. We have no influence on the storage period of data which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.
    4. Conference tools used
      We use the following conference tools:
      • TeamViewer
        We use TeamViewer. The provider is TeamViewer Germany GmbH, Jahnstr. 30, 73037 Göppingen. For details on data processing, please refer to TeamViewer's privacy policy: https://www.teamviewer.com/de/datenschutzerklaerung/. Conclusion of an order processing contract We have concluded an order processing contract with the provider of TeamViewer and fully implement the requirements of the German data protection authorities when using TeamViewer.
      • Jitsi Meet
        When you communicate with us via Jitsi Meet, all data related to this communication process is processed exclusively on our servers (on premise).
      • Microsoft Teams
        We use Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For details on data processing, please refer to the Microsoft Teams privacy policy: https://privacy.microsoft.com/de-de/privacystatement.
        We use Teams to conduct telephone conferences, online meetings or video conferences (hereinafter: “online meetings"). Microsoft Teams is a cloud service from Microsoft Corporation. Various types of data are processed by Microsoft during use. The scope of the data also depends on the information you provide before or during participation in an online meeting. The following personal data are subject to processing:
        User details (display name), email address (if applicable), profile picture (optional), preferred language, etc.
        Meeting metadata: e.g. date, time, meeting ID, phone numbers, location, duration
        Text, audio and video data: You may have the option to use the chat function in an online meeting. In this respect, the text entries you make are processed in order to display them in the online meeting. To enable the display of video and the playback of audio, data from your terminal's microphone and any terminal video camera will be processed accordingly for the duration of the meeting. You can turn off or mute the camera or microphone yourself at any time via the Microsoft Teams apps.
        We do not record online meetings. As this is a cloud service, we have no control over what the Microsoft Corporation does with the data. We therefore cannot exclude the possibility that their data, images and conversation content may be recorded or further processed. If it is necessary for the purposes of logging the results of an online meeting, we will log the chat content. However, this will usually not be the case. Automated decision-making within the meaning of Art. 22 GDPR is not used.
  11. Rights of the data subject

    You have the right:
    • to request information about your personal data processed by us in accordance with Art. 15 EU-GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
    • in accordance with Art. 16 EU-GDPR to demand the correction of incorrect or completion of your personal data stored by us without delay;
    • demand the deletion of your personal data stored by us in accordance with Art. 17 EU-GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims
    • to request the restriction of the processing of your personal data in accordance with Art. 18 EU-GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 EU-GDPR;
    • pursuant to Art. 20 EU-GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
    • revoke your consent at any time in accordance with Art. 7 (3) EU-GDPR. This has the consequence that we can no longer continue the data processing based on this consent in the future and, pursuant to Art. 77 EU-GDPR, nor can you complain to a supervisory authority if you are of the opinion that the processing of your personal data is not lawful.

    The addresses of the supervisory authorities responsible for us are as follows

    WEKAL Machine Construction GmbH in Fritzlar

    Hessian Commissioner for Data Protection and Freedom of Information, Prof. Dr Michael Ronellenfitsch, anteroom: Ms Treisbach, P.O. Box 31 63, 65021 Wiesbaden, telephone: +49 611 1408 - 0, fax: +49 611 1408 - 611, email contact via: https://datenschutz.hessen.de

    Or:
    WEKAL Maschinenbau GmbH in Lichtenstein

    Saxon Data Protection Commissioner, Mr Andreas Schurig, P.O. Box 12 00 16, 01001 Dresden, telephone: +49 351 493 - 5401, fax: +49 351 493 - 5401, email contact via: https://datenschutz.sachsen.de.
  12. Right of revocation and objection

    Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) item f EU-GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 EU-GDPR, insofar as there are grounds for doing so that arise from your particular situation. If you wish to make use of your right of revocation or objection, it is sufficient to send an email to datenschutz@wekal.de.