Privacy notice
pursuant to GDPR and new BDSG

Foreword

You are currently visiting the website of Friedrich Boysen GmbH & Co. KG, www.boysen-online.de.
The protection of your data is important to us. This is why we should like to inform you below about the personal data that we collect when you visit our website and how we process this data. We have also included information on your rights under the current data protection legislation and details of who you can contact should you have any questions.

Name and contact details of the data controller

We are Friedrich Boysen GmbH & Co. KG, a leading manufacturer of exhaust systems with headquarters in Altensteig, Germany. As data controller, we take all measures required by law to protect your personal data.
Our contact details are as follows:

Friedrich Boysen GmbH & Co. KG
Friedrich-Boysen-Strasse 14 – 17
72213 Altensteig, Germany
Phone: +49 (0) 7453/20-0
Fax: +49 (0) 7453/20-227

Email: friedrich.boysen@boysen-online.de

Contact details of our data protection officer

Please contact our data protection officer with any questions or suggestions regarding this privacy notice:

Friedrich Boysen GmbH & Co. KG
- Data protection officer-
Friedrich-Boysen-Strasse 14 – 17
72213 Altensteig, Germany

Email: datenschutzbeauftragter@boysen-online.de 

Purpose of processing your data

We respect and protect your privacy. For this reason, we collect and process your personal data with due regard to the requirement for data economy, and only so that we are able to:

• process and respond to your contact requests,
• receive and carefully process your application and get in touch with you,
• provide you with an attractive online offering,
• guarantee IT security and the security of our IT operations.

Relevant legal bases

In the event that you submit an application or get in touch with us, your personal data is processed on the basis of your consent pursuant to Article 6 (1) (a) of the General Data Protection Regulation (GDPR).

Furthermore, the processing of personal data for pre-contractual measures that are taken as a result of your enquiry or application is carried out pursuant to Article 6 (1) (b) GDPR.

Your data may also be processed on the basis of a weighing up of interests pursuant to Article 6 (1) (f) GDPR for the purposes of the legitimate interests pursued by us or by a third party, in order to provide you with an attractive website and to guarantee IT security and the security of our IT operations.

In addition, your separate consent might be called upon as a requirement under data protection law pursuant to Article 6 (1) (a) and Article 7 GDPR in conjunction with Section 26 (2) of the new German Federal Data Protection Act (new BDSG).

Your personal data may also be processed for compliance with legal obligations to which we are subject, pursuant to Article 6 (1) (c) GDPR. These obligations include the prevention of fraud and money laundering and the fulfilment of monitoring and reporting requirements under tax law. We are obliged under European Regulations 2580/2001 and 881/2002 for the combating of terrorism to compare the details of applicants and business partners against the EU anti-terrorist lists to ensure that no money or other economic resources are provided for the purposes of terrorism.

Recipients or categories of recipients to whom the data can be disclosed

• Your application details specifically for a job vacancy from one of our plants within the EU will be forwarded to the parties directly involved at the plant offering the vacancy.
• IT service providers used by us may receive data in order to fulfil the purposes described if these service providers meet special confidentiality requirements. The statutory provisions for commissioned processors are observed to this end.
• Your details may also be disclosed to public bodies in order to satisfy legal requirements (e.g.: the prevention of fraud and money laundering).

Transfer of personal data to third countries

We do not transfer personal data to third countries.

Naturally, our website also has information on job offers in our plants outside the European Economic Area. Please send your application directly to the relevant plant in these cases.

Google Analytics is a tool used by us which may transfer data to third countries.
We have provided detailed information on this tool in the section entitled ‘Google Analytics’.

Storage period and deletion of data collected

The data processed by us will be deleted in accordance with Articles 17 and 18 GDPR. Unless expressly stated in this privacy notice, data stored by us is deleted as soon as it is no longer necessary for its intended purpose and there are no statutory retention periods opposing its deletion.

Your personal data will be deleted six months after the completion of the application procedure or after the completion of the contact process, unless you expressly and voluntarily consent to us storing your data for a maximum of two years.

Data collected via the Google Analytics tool is deleted after a maximum of 14 months.

Use of our website

Each time our website is accessed and each time a file is retrieved, general data is automatically stored in a log file via this process. This data is stored solely for system-related and statistical purposes (on the basis of Article 6 (1) (b) GDPR) and in exceptional cases, to report offences (on the basis of Article 6 (1) (e) GDPR). 

The data is not forwarded to third parties or otherwise analysed unless there is a statutory obligation to do so (Article 6 (1) (c) GDPR).

The following specific data set is stored about each retrieval:

• Name of the retrieved file
• Date and time of the retrieval
• Volume of data transferred
• Notification as to whether the retrieval was successful
• Description of the type of web browser used
• Operating system used
• The page previously visited
• Provider
• IP address

This data is processed on an anonymous basis, with the last segment of your IP address anonymised.

Additional functions and offerings on our website

In additional to the use of our website for purely informational purposes, we offer a range of services that you can use if interested. To do this, you must generally provide additional personal data, which we will use to render the service in question, and to which the above-mentioned data processing principles apply.

Sometimes, we use external service providers to process your data. These service providers are carefully selected and commissioned by us, are bound by our instructions, and regularly monitored.

We do not use cookies, apart from those created by the Google Analytics tool deployed by us. We have provided detailed information on this tool in the section entitled ‘Google Analytics’.

Contact

When you contact us by email or via a contact form, the data disclosed by you (your email address, your name, possibly your company, your address, and other data voluntarily provided by you) is stored by us so that we can respond to your queries. We will delete the data generated in this connection once its storage is no longer necessary, or will limit its processing if it is subject to statutory retention requirements.

When you send an enquiry using a contact form, you declare your consent to the processing of your data in accordance with this privacy notice.

The legal basis for processing your data where your consent has been given is Article 6 (1) (a) GDPR. The legal basis for processing data that has been transferred when an email was sent is Article 6 (1) (f) GDPR. If contact by email is aimed at the conclusion of a contract, additional legal grounds for processing are provided under Article 6 (1) (b) GDPR.

Applications

We offer you the opportunity to apply online for jobs advertised by us using the application form on our website. The data disclosed by you (name, email address, possible other information such as your title, address, phone number, date of birth, and nationality) is stored by us in order to process your application.

We will delete the data generated in this connection once its storage is no longer necessary, or will limit its processing if it is subject to statutory retention requirements.

When you send an application using our application form, you declare your consent to the processing of your data in accordance with this privacy notice.

The legal bases for processing your data are Article 6 (1) (a) GDPR and Article 6 (1) (b) GDPR. 

Google Analytics

Based on our legitimate interests in the analysis and optimisation of our online offering, we use the web analysis service “Google Analytics” by Google LLC (“Google”). Google uses ‘cookies’. These are text files, which are placed on your computer and allow the website to analyse how you use the site.
The information generated by the cookie about your use of the online offering will be transmitted to and stored by Google on servers in the USA.

Google will use this information on our behalf to analyse the use of our online offering by users and to compile reports on activities within this online offering. In the process, pseudonymous usage profiles of the users may be created from the processed data.

We use Google Analytics only with activated IP anonymisation. This means that users’ IP addresses are shortened by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google will not associate the IP address transmitted from your browser with any other data held by Google. You can prevent cookies from being stored on your computer by changing the settings on your browser software.

You can also prevent the data generated by the cookie relating to your usage of the online offering (including your IP address) from being collected and processed Google by downloading and installing the browser plugin available via the following link:
tools.google.com/dlpage/gaoptout.

Google is certified under the EU-US Privacy Shield Framework, thereby offering guaranteed compliance with European data protection legislation.

EU-US Privacy Shield Framework: www.privacyshield.gov/EU-US-Framework, 

Google’ certification:
www.privacyshield.gov/participant.

For more information on Google’s use of data, and options for changing your settings or opting out, please visit the following Google sites:
www.google.com/intl/de/policies/privacy/partners (“How Google uses information from sites or apps that use our services”), policies.google.com/technologies/ads (“Advertising”), adssettings.google.com/authentificated (“Control the information Google uses to show you ads”).

Your data protection rights as the data subject

You can request information from our data protection officer (contact details above in the section entitled “Contact details of our data protection officer”) regarding the data stored about you.

In addition, you can request that your data be corrected or deleted under certain conditions.

You may also have the right to limit the processing of your data and the right to receive the data provided by you in a structured, commonly used and machine-readable format.

Your right of revocation

You have the right to revoke any consents that you have given with effect for the future. Please contact our data protection officer in this regard.

Your right to object

If we process your data to safeguard legitimate interests, you can object to this on grounds relating to your particular situation. We will then cease processing your personal data unless we can demonstrate compelling legitimate grounds for this that override your interests, rights and freedoms, or unless the processing is being used to establish, exercise or defend legal claims. Please contact our data protection officer in this regard.

Your right to complain

You may contact our data protection officer (see above) or a data protection supervisory authority should you have a complaint. The data protection supervisory authority with responsibility for our company is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Postfach 10 29 32, 70025 Stuttgart, Germany

Königstrasse 10a,    71173 Stuttgart, Germany

Phone: +49 (0) 711/61 55 41-0

Fax: +49 (0) 711/61 55 41-15

Email: poststelle@lfdi.bwl.de
Website: www.baden-wuerttemberg.datenschutz.de