The protection of your privacy is an important concern for us. We process your personal data only in accordance with the provisions of the General Data Protection Regulation (GDPR) and other statutory data protection regulations, in particular the Federal Data Protection Act (BDSG). All data will of course be treated confidentially. With the following data protection information, we would like to explain to you in detail how your data is handled when using our websites.
1. General information on the collection of personal data
In principle, the collection, processing and use of personal data for the use of our Internet presence is limited to the necessary extent and data. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. In addition, we use the common SSL (Secure Socket Layer) procedure within our website in conjunction with the highest level of encryption supported by your web browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
Responsible for the collection, processing and use of your personal data in accordance with Art. 4 para. 7 GDPR is
01968 Senftenberg OT Brieske
Name and address of the Data Protection Officer
Hermann J. Janz, Janz Consulting Datenschutz, Schevenstr. 18, 01326 Dresden
2. Purposes and legitimate basis of the processing of your personal data as well as further information on specific data processing
2.1 Visiting our websites
2.1.1 Description and scope of data processing
Whenever you visit our websites, our systems automatically record data and information from the computer system of the calling computer (personal data that your browser sends to our server). This also occurs if you do not register or otherwise provide us with information, for example through active entries. The following data is always collected when you visit our websites:
- IP address of the user
- Date and time of the request or access
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request comes (from which the user’s system accesses our website)
- Website that is called up by the user’s system via our website
- Information about the browser type and version used
- Operating system and its interface
- Language and version of the browser software
This data is stored in the log files of our system. A storage together with other of your personal data does not take place regularly.
2.1.2 Purposes of data processing
The storage of the aforementioned data, in particular the IP address by our systems, is basically only temporary for the duration of the session and is necessary to enable the proper operation and presentation of the website. This processing of your data also serves the purposes of evaluating and further ensuring system security and system stability as well as other administrative purposes.
Insofar as your data is stored in our log files, this is also only done for reasons of ensuring the functionality of our websites. In addition, the data serves us to optimize and ensure the security of our information technology systems.
An evaluation of the data for marketing purposes does not take place in this context.
2.1.3 Legitimate bases of data processing
The legitimate basis for the processing and temporary storage of your personal data is Art. 6 para. 1 sentence 1 letter f GDPR. Our legitimate interests follow from the purposes for data collection described above.
2.1.4 Duration of storage
Your data will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended.
In the case of storage of your data in log files, this is the case after seven days at the latest. Storage beyond this period is only envisaged in exceptional cases, for example if this is necessary for technical reasons or to improve our systems. In this case, the IP addresses of the users are deleted or alienated so that an allocation is no longer possible.
2.1.5 Possibility of objection and removal
The collection of your data for the provision of the website and the storage in log files if applicable is absolutely necessary for the operation of the website.
There is therefore no possibility of objection.
2.2 Contact form, e-mail contact
A contact form is integrated on our website, through which you can get in touch with us. When using the contact form, the data entered in the input mask is transmitted to us and stored.
It is also possible to contact us via e-mail addresses provided by us. In this case, your personal data transmitted with the e-mail will be stored and processed by us, in particular to process your request or the reason for contacting us.
Depending on the content of your inquiry, the data will be forwarded to the responsible company in the BOSIG Group. The data will be used exclusively for processing the conversation.
2.2.1 Legitimate basis of the data processing
The legitimate basis for the processing of your data when using the contact form is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
The legitimate basis for the processing of your data when sending an e-mail to us is Art. 6 para. 1 sentence 1 lit. a as well as f GDPR. The processing is based on an implied consent and on our legitimate interests. If the e-mail contact is aimed at the conclusion of a contract, the additional legitimate basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR.
2.2.2 Purposes of data processing
The processing of personal data from the input mask or the e-mail sent to us serves only to process your contact with us. In the case of contacting us by e-mail, this indicates the necessary legitimate interest in the processing of the data by us. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
2.2.3 Duration of storage
We will delete your data as soon as it is no longer required for the purposes described. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. As a rule, the conversation is finished when the circumstances indicate that the reason for contacting us has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of 7 days at the latest.
2.2.4 Possibility of objection and erasure
You have the possibility to revoke your consent to the processing of your personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, however, the conversation with you may not be able to continue. All personal data stored in the course of the contact will be deleted in this case.
We process your order data (such as name, address, e-mail address, delivery modalities and other order information) to process the order and to deliver the ordered goods. In addition, we process the payment information required according to the payment method; for example, we store IBAN and BIC ourselves.
The legitimate basis for processing is the conclusion and fulfilment of the purchase contract for the ordered goods, Art. 6 para. 1 sentence 1 lit. b GDPR.
These data are deleted when they are no longer required for the execution of the contract (including customer service and warranty), unless we are legally obliged to store them, e.g. due to commercial or tax law retention obligations.
2.4 Applicant data
If you apply for a job offer or send an unsolicited application, you agree that we may save the documents sent and use the information contained therein to process your application. As a rule, your documents contain special categories of personal data (e.g. information on marital status; information on health; a photograph allowing conclusions to be drawn about your ethnic origin and, where applicable, sight and/or religion; similarly sensitive data within the meaning of Art. 9 GDPR), which may only be processed in the present form with your consent. You agree that we may process the special categories of personal data contained in your letter of application and the attached documents for the purpose of carrying out the application procedure. This consent serves exclusively to enable us to consider the application in its present form. The information will not be considered in the application process, unless there is a legal obligation to do so. You can refuse your consent to the processing of the application in the application process without giving reasons and revoke any consent you have given at any time, for example by e-mail. In the event of revocation, your data covered by your consent will be deleted immediately. As a result, data processing based on this consent may no longer be continued in the future. In the event that consent is not granted or is revoked, an application already submitted cannot be considered in its present form.
If your application is unsuccessful, you can agree that your personal data, which have been communicated during the entire application procedure (e.g. in cover letters, CV, certificates, applicant questionnaires, applicant interviews), may be stored beyond the end of the specific application procedure. For this purpose, you can consent to us using this data to contact you later and to continue the application procedure if you should be considered for another position. If special categories of personal data in accordance with Art. 9 GDPR have been communicated via the application documents (e.g. a photo that shows the ethnic origin, information about being severely handicapped, etc.), the consent also refers to this data. This consent also applies to data on your qualifications and activities from generally accessible data sources (especially professional social networks), which we have permissibly collected during the application process. Your data will not be passed on to third parties. This consent is voluntary and has no effect on your chances in the current application procedure. You can also revoke your consent at any time. In this case, your data will be deleted immediately after completion of the application procedure. As a result, we are not allowed to continue the data processing that was based on this consent in the future.
The legitimate basis for data processing of applications is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
When you visit and use our website, cookies are stored on your computer. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If a user calls up a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is called up again.
Some of them are essential, i.e. they are technically necessary for the operation of our website. Other cookies are used for statistical purposes or to analyze the access to our website or for marketing purposes or to offer you the use of external media. Temporary/session cookies as well as longer stored cookies (so-called permanent cookies) are used. Temporary cookies are deleted as soon as you close your browser. Permanent cookies are retained for a longer period of time, but can be deleted manually at any time. Some cookies are placed by third parties.
The legal basis for data processing in the use of essential cookies is Art. 6 para. 1 sentence 1 lit. f GDPR, in the use of all other cookies the legal basis is your consent under Art. 6 para. 1 sentence 1 lit. a GDPR. If we do not process your data on the basis of your explicit consent, your personal data will only be processed to the extent necessary to protect our legitimate interests or the legitimate interests of a third party and not to the extent that your interests or fundamental rights and freedoms that require the protection of personal data prevail.
We use so-called essential cookies as follows:
essential/technically necessary cookies (1)
Essential or technical cookies enable basic functions and are necessary for the proper functioning of the website.
- Provider: bosig.de
- Purpose: Stores the user’s consent status for cookies on the current domain
- Duration: 1 year
We use so-called statistics cookies as follows:
Statistics cookies are used to anonymously collect information that helps us understand how our visitors use our website.
Provider: Google Inc. Bzw. Google Ireland Ltd.
- Name: _ga (http-cookie)
- Purpose: Registers a unique ID that is used to generate statistical data about how the visitor uses the website.
- Expiration: 2 years
- Name: _gat (http-cookie)
- Purpose: Used within the Google Analytics service to limit the request rate.
- Expiration: 1 day
- Name: _gid (http-cookie)
- Purpose: Registers a unique ID that is used to generate statistical data about how the visitor uses the website.
- Expiration: 1 day
- Name: _gac_UA-164123901-1 (http-cookie)
- Purpose: Prevents data from being transferred to the Analytics server in too rapid a sequence..
- Expiration: 90 days
The legal basis for data processing when using essential cookies is Art. 6 (1) p. 1 lit. f GDPR, when using all other cookies the legal basis is your consent according to Art. 6 (1) p. 1 lit. a GDPR. For more details on the cookies used as part of the Google Analytics service, please refer to section 2.6.
Insofar as we do not process your data on the basis of your explicit consent, your personal data will only be processed to the extent that this is necessary to protect our legitimate interests or the legitimate interests of a third party and does not override your interests or fundamental rights and freedoms that require the protection of personal data.
2.6 Google Analytics
2.6.1 Description and scope of data processing
The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.
Google Analytics is used on this website with the extension “_anonymizeIp()”. This allows IP addresses to be processed in a shortened form and thus excludes the possibility of personal references. If the data collected about you contains a personal reference, this is immediately excluded and the personal data is immediately deleted.
2.6.2 Purpose of data processing
We use Google Analytics to analyze our website and to improve it regularly. We can use the statistics obtained to improve our offer and make it more interesting for you.
2.6.3 Consent to transfer personal data to a third country
Subject to legal or contractual permissions, personal data may only be stored in a third country if the special requirements of Art. 44 ff. GDPR may be processed in a third country. Data may be transferred if the European Commission has determined by way of a decision within the meaning of Art. 45 para. 1, 3 GDPR that an adequate level of data protection is provided in the third country concerned. The European Commission certifies that third countries have a level of data protection comparable to the recognized standard in the European Economic Area through such so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be obtained here: https://ec.europa.eu/info/law/law-topic/data-protection_en).
If, in exceptional cases, data is transferred between the USA and the EU, it should be noted that no such adequacy decision exists for the USA. Therefore, other suitable guarantees would have to exist in principle to ensure that data protection is sufficiently guaranteed in the USA. This would generally be possible through binding company regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct.
Although Google has submitted to such standard contractual clauses of the European Commission, U.S. companies are still obliged to surrender personal data to security authorities without you as the data subject being able to take legal action against this. Therefore, it cannot be excluded that US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities. It is also possible that you will not be able to assert or enforce your rights to information against Google on a sustained basis. Furthermore, the technical and organizational measures for the protection of personal data at Google may not fully comply with the requirements of the GDPR in terms of quantity and quality.
It is therefore possible that the standard contractual clauses of the European Commission used by Google do not constitute sufficient guarantees within the meaning of Art. 46 para. 2 lit. a GDPR.
By consenting to the collection of data by Google Analytics, you expressly consent to the data transfer described here, whereby you have been informed above about the possible risks of such data transfers without the existence of an adequacy decision and without suitable guarantees.
This consent can be revoked at any time. Revocation does not affect the lawfulness of the processing carried out on the basis of the consent given until revocation.
2.6.4 Legitimate basis of data processing
The legal basis is your explicit and voluntary consent under Art. 6 para. 1 sentence 1 lit. a GDPR to the processing of your personal data for the purposes of analysis and statistics on user behaviour using Google Analytics.
2.6.5 Further Information
3. Transfer of your data to third parties
We do not share personal information with companies, organizations or individuals outside of our company except in one of the following circumstances:
3.1 With your consent
We pass on personal data to third companies, organizations or persons outside our company if you have given us your explicit consent to do so.
3.2 Processing by other bodies
3.3 For legal reasons
We will disclose your personal information to companies, organizations or individuals outside of our company if we have a good faith belief that access to or use, preservation or disclosure of such information is reasonably necessary, in particular to comply with any applicable law, regulation or legal process or to comply with an enforceable governmental request.
4. Disclosure of your data to a third country or international organization
5. Automated decision making
There is no automated decision making.
6. Your rights
You have the right:
- to request information about your personal data processed by us in accord-ance with Art. 15 GDPR. In particular, you may request information on the purposes of processing, the category of personal data, the categories of re-cipients to whom your data have been or will be disclosed, the planned stor-age period, the existence of a right of rectification, cancellation, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details of the data;
- in accordance with Art. 16 GDPR, to demand without delay the correction of incorrect or incomplete personal data stored by us;
- in accordance with Art. 17 GDPR to demand the deletion of your personal data stored with us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer re-quire the data, but you require it for the assertion, exercise or defense of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request its transfer to another responsible party;
- in accordance with Art. 7 para. 3 GDPR, to revoke your consent to us at any time (see also Section 7.1). As a result, we may no longer continue data pro-cessing based on this consent for the future and
- complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can turn to the supervisory authority of your usual place of resi-dence or workplace or to the supervisory authority of our company head-quarters.
7. Objection or revocation against the processing of your data
If you have given your consent to the processing of your data, you can revoke this consent at any time in accordance with Art. 7 Para. 3 GDPR. Such revocation will affect the permissibility of processing your personal data after you have given it to us.
Insofar as we process the processing of your personal data in accordance with the balancing of interests in accordance with Art. 6 para. 1 sentence 1 letter f GDPR, you have the right to object to the processing in accordance with Art. 21 GDPR. This is the case if the processing is not necessary, in particular, for the fulfilment of a contract with you, which is described by us in each case in the description of the functions. If you exercise such an objection, we request that you explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the facts of the case and will either stop or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us about your objection to advertising by using the contact details given above.