Privacy Policy

1. General information

The protection of personal data is important to us. In this privacy policy, we explain what personal data is processed when you visit our website or contact us, for what purposes this is done, and what rights data subjects have.

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, contact details, IP address or the content of an enquiry.

2. Data controller

The data controller for data processing on this website is:

PREMA-SERVICE GmbH
a company of the Rohrer Group
Bornweg 100 / Building 20
61191 Rosbach v. d. Höhe
Germany

Telephone: +49 (0) 6003 / 46 292-0
Email: info@prema-service.de

Represented by:
Dr.-Ing. Norbert Kaiser
Isabella Rohrer, MAS, MSc

3. Data Protection Officer

You can contact our Data Protection Officer at:

PREMA-SERVICE GmbH
Güven Göksu
Bornweg 100 
61191 Rosbach v. d. Höhe
Germany

Email: gueven.goeksu@prema-service.de

4. Hosting and server log files

When you visit our website, the web server automatically processes information that your browser transmits to the server. This may include, in particular:

• IP address of the requesting device
• Date and time of access
• Page or file accessed
• Amount of data transferred
• Confirmation of successful retrieval
• Browser used and browser version
• Operating system used
• Referrer URL, if transmitted
• Requesting provider

This data is processed in order to provide the website from a technical perspective, to ensure the stability and security of the system, and to be able to detect misuse or attacks.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable and error-free provision of our website.

Server log files are only stored for as long as is necessary for the purposes stated. They may be stored for longer if this is necessary to investigate security incidents or to establish, exercise or defend legal claims.

5. Cookies and similar technologies

Our website may use cookies or similar technologies. Cookies are small text files that are stored on the user’s device. They may be technically necessary for a website to function, or may serve additional purposes, such as statistics, convenience features or marketing.

Technically necessary cookies and similar technologies are used insofar as they are necessary for the operation of the website or for a function expressly requested by the user.

Where cookies or similar technologies are not technically necessary, they are used only on the basis of prior consent. Consent that has been given may be withdrawn at any time with future effect.

Cookie settings can be adjusted at any time via your browser settings.

6. Contact via email, telephone or contact form

If you contact us by email, telephone or via a contact form, we will process the personal data you provide. This may include, in particular:

• Name
• Company
• Address
• Telephone number
• Email address
• Details of your enquiry
• Any further details or documents you have provided

The processing is carried out to handle your enquiry, to communicate with you and, where applicable, to prepare for or fulfil a contractual relationship.

The legal basis is Article 6(1)(b) of the GDPR, insofar as the enquiry relates to an existing or potential contractual relationship. In all other cases, processing is carried out on the basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in the proper handling of incoming enquiries and business communication.

The data will be deleted as soon as it is no longer required for processing the enquiry, provided there are no statutory retention obligations or legitimate interests in further storage.

7. Enquiries regarding quotations, projects and business matters

If you contact us in connection with a quotation, project or business enquiry, we process the necessary personal data to review, process and fulfil the enquiry. This may include, in particular, contact details, company information, technical details of the project and the content of communications.

The legal basis is Article 6(1)(b) of the GDPR, insofar as the processing is necessary for the implementation of pre-contractual measures or a contract. Furthermore, the processing may be based on Article 6(1)(f) of the GDPR, insofar as we have a legitimate interest in the documentation, processing and follow-up of business transactions.

Where statutory retention periods apply, the relevant data will be stored for the duration of those periods.

8. Job Applications

If you apply for a job with us, we will process the personal data that you provide to us as part of your application. This may include, in particular:

• Name and contact details
• Application documents
• Professional background
• Qualifications
• References
• Communication content

Data processing is carried out for the purpose of conducting the recruitment process and deciding whether to enter into an employment relationship.

The legal basis is Article 6(1)(b) of the GDPR. Where consent has been given, for example for longer-term storage in the applicant pool, processing is also carried out on the basis of Article 6(1)(a) of the GDPR.

Application data will be deleted as soon as it is no longer required for the recruitment process and there are no statutory retention obligations or legitimate interests preventing this. Data will only be retained for a longer period where this is permitted by law or where consent has been given.

9. Recipients of personal data

Within our company, access to personal data is restricted to those departments that require it to fulfil the stated purposes.

In addition, personal data may be disclosed to external service providers where this is necessary for the provision of the website, technical support, communication or the execution of our business processes. This may include, in particular, hosting service providers, IT service providers, communications service providers or other data processors.

Where service providers process personal data on our behalf, this is done on the basis of a data processing agreement in accordance with Article 28 of the GDPR.

Data will only be disclosed to third parties if there is statutory authorisation, a legal obligation exists, it is necessary for the performance of a contract, or consent has been given.

10. Transfer to third countries

Personal data will only be transferred to countries outside the European Union or the European Economic Area if there is a legal basis for doing so under data protection law. This may include, in particular, an adequacy decision by the European Commission, appropriate safeguards such as EU Standard Contractual Clauses, or explicit consent.

11. Retention period

Personal data is stored only for as long as is necessary for the respective purposes. Data may be stored for longer if there are statutory retention obligations or if storage is necessary for the establishment, exercise or defence of legal claims.

Once the relevant purpose no longer applies or statutory retention periods have expired, the data will be deleted or blocked, provided there is no further legal basis for processing.

12. Your rights

Data subjects have the following rights within the framework of the statutory requirements:

• Right to access the personal data being processed
• Right to rectification of inaccurate data
• Right to erasure of personal data
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing operations
• Right to withdraw consent with effect for the future
• Right to lodge a complaint with a data protection supervisory authority

You may contact us at any time to exercise your rights.

13. Right to object under Article 21 of the GDPR

Where we process personal data on the basis of Article 6(1)(f) of the GDPR, data subjects have the right to object to such processing at any time on grounds relating to their particular situation.

We will then no longer process the personal data in question, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to establish, exercise or defend legal claims.

14. Withdrawal of consent

Where processing is based on consent, that consent may be withdrawn at any time with effect for the future. The lawfulness of the processing up to the point of withdrawal remains unaffected.

15. Right to lodge a complaint with the supervisory authority

Data subjects have the right to lodge a complaint with a data protection supervisory authority if they believe that the processing of their personal data infringes data protection law.

The supervisory authority responsible for us is:

The Hessian Commissioner for Data Protection and Freedom of Information
PO Box 3163
65021 Wiesbaden
Telephone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de

16. SSL or TLS encryption

For security reasons, our website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar begins with ‘https://’ and a padlock icon is displayed.

Where SSL or TLS encryption is enabled, transmitted data cannot, as far as is currently known, be easily read by third parties.

17. Validity and amendments to this privacy policy

We reserve the right to amend this privacy policy if this becomes necessary due to technical changes, new features on the website or changes in legal requirements.

The current version published on our website shall apply at all times.