Data Protection

Data Protection Policy

This document explains how we process your personal data when you visit www.klett-gruppe.de.

I. Controller and data protection officer

Ernst Klett AG, Rotebühlstraße 77, 70178 Stuttgart, Germany
E-mail: , tel.: +49 (0)711 66720

If you have any questions regarding the protection of your data, please contact our data protection officer:

Ernst Klett AG (Attn: Data Protection Officer), Rotebühlstraße 77, 70178 Stuttgart, Germany
E-mail: , Tel.: +49 (0) 711 6672 1173

II. Visiting www.klett-gruppe.de

1. Server log files

When you visit this website, we process your IP address and the date and time of your visit, information on your device’s operating system and the browser you use, including your language settings, the address of the website from which you accessed www.klett-gruppe.de (also known as a “referrer URL”), the names of the files you access and the amount of data transferred in the process. This information is stored in log files for no more than seven days. We receive this information from your Internet service provider.

For technical reasons, much of the data involved has to be processed in order to display this website on your computer or smartphone and to safeguard system security. It is also analysed in anonymised form for statistical purposes and to improve the quality of the site (see also section II. 2 below). None of this data is linked to the personal data of any specific natural person.

This data is processed based on Article 6 (1) (f) of the EU General Data Protection Regulation (GDPR). We have a legitimate interest in ensuring the proper presentation of this website on your screen, being able to swiftly respond to hacking attacks and other disruptions, and the anonymous analysis of this data for statistical purposes. While the provision of said data is not stipulated by law or any contract, not processing the bulk of the data in question would make using this website impossible for related technical reasons.

2. Cookies

Our website makes use of cookies, which are small files that contain an identification number. Cookies are stored on your computer or mobile device when you visit our website. If you access our website again, the identification number assigned makes it possible to recognise your computer or mobile device.

Session cookies, meanwhile, enable you to avoid having to enter information on our website multiple times, even if you visit other websites in the interim. Such cookies are thus meant to make it easier for you to use our website. We also use permanent cookies to collect statistics on how our website is used and analyse them for optimisation purposes (see II.3).

The legal basis for this is Article 6 (1) (f) GDPR. We have an interest in optimising our website to ensure that it offers you a user-friendly experience.

Session cookies are deleted when you close your browser. Permanent cookies remain valid for up to 12 months, at which point they are also deleted.

You can visit our website without allowing the use of cookies. There is no obligation to use cookies. While most browsers accept cookies automatically, you can configure yours to deny them. These settings must be configured separately for every browser and device you use.

3. Generation of statistics through Matomo

Our website uses the web analytics service Matomo. The purpose of Matomo is to log users’ clicking and surfing behaviour on this website, which enables us to generate statistics on how the site is used. These statistics help us to improve our website. The data collected for this purpose is anonymised and not stored along with your other data. During this process, your IP address is anonymised as quickly as possible so that you remain unidentifiable to us as a user.

The storage of Matomo cookies and the use of this analytics tool take place on the basis of Article 6 (1) (f) of the GDPR. The website operator has a legitimate interest in anonymised analysis of user behaviour in order to optimise its website and its advertising. If you consent to this (e.g. by consenting to the storage of cookies), the data will be processed exclusively in accordance with Article 6 (1) (a) of the GDPR. You may withdraw your consent at any time. The information generated by the cookie about the use of this website will not be passed on to third parties. The cookies set by Matomo remain valid for up to 13 months. The corresponding data is stored for three months.

There is no obligation to allow the use of Matomo or permanent cookies. You can also use our website without Matomo or permanent cookies. You can also configure your browser to deny the use of cookies (see II. 2), but doing so may prevent you from using all the functions this website offers.

4. Google Maps

This website uses the Google Maps mapping service via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. If you visit a section of our website that includes Google Maps, data related to how you use Google Maps will be transmitted to and processed by Google. Google will be informed that you visited the webpage in question, for example, and your IP address will also be disclosed. We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. If you are a Google customer and have logged into a Google service, the data will be linked directly to your Google account. If you wish to prevent this, you will need to log out of Google before visiting our website. For further information on Google’s privacy policy, please visit: https://policies.google.com/privacy?hl=en.

This data is processed based on your consent (pursuant to Art. 6 (1) (a) of the GDPR). The provision of this data is required neither by law nor by any contract, nor is it necessary in order to conclude a contract with our organisation. If you do not want your data to be transmitted to Google, you should not activate Google Maps. Alternatively, you can deactivate JavaScript in your browser. In both cases, you will not be able to use Google Maps on our website.

5. YouTube videos

This website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We have embedded our own YouTube videos on our website. All the videos are embedded using “enhanced data protection mode”, meaning that no data on you as a user is transmitted to YouTube if you do not play the videos. The data described in the next paragraph will only be transmitted if you play one of these videos. We have no influence on this transmission of data.

If you play a video, YouTube will be informed that you have visited our website. The data described under section II. 1 will also be transmitted. This will take place regardless of whether you have and have logged into a YouTube account. If you have logged into Google or YouTube, your data will be linked directly to your corresponding user account. If you do not wish to be associated with your YouTube account, you will need to log out before playing a video. YouTube stores your data in usage profiles for the purposes of advertising, market research and/or the provision of tailored content on its own website. It performs analyses to display tailored advertising, even when users have not logged into YouTube.

The purpose of this processing is to display the videos we have published on YouTube and on our own website. The corresponding legal basis is Article 6 (1) (f) of the GDPR, along with (1) (a), assuming you have provided your consent.

While providing this data is required neither by law nor by any contract, the transmission of your data to YouTube is necessary if you wish to view the YouTube videos embedded on our website. We have no influence on how long YouTube will store your data.

For further information on YouTube’s privacy policy, please visit: https://policies.google.com/privacy?hl=en.

6. Meta Ireland

This website includes Facebook’s “Share” and “Like” buttons. The provider is Meta Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. These are used in connection with a plug-in that enables content from our website to be shared with Meta. Cookies may also be involved in this process (see section II. 2 above).

If you wish to share content from our website with Meta, you can activate the aforementioned plug-in by clicking the “Activate Facebook” button (this is referred to as a “two-click solution”). As soon as you click this button, Meta Ireland will process the data described under section II. 1 and be informed that you have visited our website. Meta Ireland will also publish the information that you have shared certain content. Other data may be processed, as well. This data processing takes place even if you do not have a Meta Ireland account or have not logged in. If you have logged into Meta Ireland, your data will be linked to your account. If you wish to prevent your data from being processed for these purposes, do not click any Meta Ireland buttons.

This processing is performed in order to inform other Meta Ireland users of the content you have shared. Meta Ireland also processes the data for the purposes of advertising, market research and/or the provision of tailored content on its own website. The legal basis is Article 6 (1) (f) and Article (1) (a) of the GDPR, assuming you have provided your consent. We have an interest in making it easier to share content and distributing content from our blog on social media.

While providing this data is required neither by law nor by any contract, the transmission of your data to Meta Ireland is necessary if you wish to share content on its platform. We will process the data collected by the plug-in until you decide not to share further content in the future. We have no influence on whether Meta Ireland will continue to store your data beyond that point.

For further information, please visit http://www.facebook.com/policy.php

www.facebook.com/about/privacy/your-info-on-other and www.facebook.com/about/privacy/your-info

7. Meta platforms

We maintain publicly accessible profiles on the social networks of Meta Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. When you visit these profiles, a variety of data processing procedures are initiated. Below, we provide you with an overview of these data processing procedures, including what personal data concerning you is collected, used and stored by us when you visit our profiles on the Meta platforms. “Personal data” means any information relating to an identified or identifiable natural person (e.g. name, age, address, photos, e-mail addresses and even IP addresses in some cases). We also inform you of your rights with regard to the processing of your personal data. You are not obliged to provide us with your personal data. However, this may be necessary for individual functionalities of our profiles in the social networks. These functionalities may not be available to you, or only to a limited extent, if you do not provide us with your personal data.

When you visit our profiles, your personal data is collected, used and stored not only by us, but also by the Meta platforms operator. This happens even if you yourself do not have a profile on the respective social network. The individual data processing procedures and their scope differ depending on the operator of the respective social network and they are not necessarily comprehensible to us. Details about the collection and storage of your personal data as well as the type, scope and purpose of its use by the operator of the respective social network can be found in the privacy policy of the respective operator:

- The privacy policy for the social network Facebook, which is operated by Meta platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, can be viewed at www.facebook.com/about/privacy/update;

- The privacy policy for the social network Instagram, which is operated by Meta platforms Ireland Limited, can be found at help.instagram.com/155833707900388;

As the operator of a Facebook or Instagram fan page, we can only view the information stored in your public Facebook profile, and only if you have such a profile and are logged in to it when you access our fan page. Furthermore, Facebook provides us with anonymous visitor statistics, which we use to improve the user experience for visitors to our fan page. We do not have access to the usage data that the Meta platforms collect to create these statistics. Meta platforms has undertaken to assume primary responsibility under the GDPR for the processing of this data, to fulfil all obligations under the GDPR with regard to this data and to make the substance of this obligation available to the data subjects. This data processing serves our (and your) legitimate interest in improving the user experience for the target audience when visiting our fan page. The legal basis for this is therefore Art. 6 (1) (f) GDPR. In addition, Meta platforms uses cookies, which are small text files placed on your device when you visit our fan page even if you do not have your own Facebook profile or are not logged into it when visiting our fan page. These cookies allow Meta platforms to build user profiles based on your preferences and interests and to show you ads (within and outside of Facebook) that are most likely to be of interest to you. Cookies remain on your device until you delete them. For more details, please refer to the Facebook privacy policy.

If you contact us through one of our profiles on the Meta social networks (e.g. by creating your own posts, responding to one of our posts or by sending us a private message), we will process your data solely for the purpose of contacting you. The legal basis for the data collection is therefore Art. 6 (1) (a) and (b) GDPR.

III. Contact form and other forms of communication

We process the data you enter on our contact form or send to us by e-mail in order to manage and respond to your enquiries.

The legal basis for this processing is Art. 6 (1) (b) GDPR. The processing is necessary for the performance of a pre-contractual action taken in response to your enquiry, as such actions include contact requests.

By voluntarily providing further contact details and/or your customer number, you make it easier for us to respond to your enquiry and contact you. The legal basis for this is Art. 6 (1) (f) GDPR, which permits the processing of personal data within the scope of our “legitimate interests” unless these are overridden by your interests or fundamental rights and freedoms. Our legitimate interests are to facilitate the processing of the contact request.

The provision of this data is required neither by law nor by any contract, nor is it necessary in order to conclude a contract. The use of the contact form does, however, require you to supply an e-mail address, as we will otherwise be unable to reply to your enquiry. Any further data you provide is voluntary.

IV. Applications

If you apply for a position at Ernst Klett AG, we will process your data to facilitate our hiring decision based on Articles 6 (1) (a) and 88 of the GDPR (in conjunction with Section 26 (1) sentence 1 of the Federal Data Protection Act). After using this data to complete the application process, we will retain it for no longer than six months, at which point it will be deleted. Further processing related to establishing or maintaining a corresponding employment relationship is permitted based on the aforementioned legal basis, provided that you begin working for our company once the application process is complete.

While the provision of your personal data is required neither by law nor by any contract, submitting an online application always necessitates the transmission and storage of data. If you provide us with special categories of data on a voluntary basis – that is, those that contain details regarding your ethnicity; political, religious, or philosophical beliefs; union affiliation; health; or sexual preferences – you thus also consent to the processing of this data. We ask that you refrain from transmitting data of this nature to us.

If you apply to a company within the Klett Group, that company alone is responsible for processing your data in the course of its application process. Information on the respective data protection policies of the individual companies within the Klett Group can be found on the website of the company to which you apply.

V. Data recipients

We transmit the data described above to the following processors, which process your data based solely on our directives and not for their own purposes:

Support and maintenance of www.klett-gruppe.de

RYZE Digital GmbH
Mombacher Str. 4
55131 Mainz, Germany

Hosting

COM+IT Consulting
Klosterstraße 168
67480 Edenkoben, Germany

uvensys GmbH
Robert-Bosch-Straße 4b
35440 Linden, Germany

In certain cases, we may forward some of your data to other recipients if you have provided corresponding consent (pursuant to Art. 6 (1) (a) of the GDPR), we are required by law to do so (Art. 6 (1) (c)), or doing so is necessary in order to preserve legitimate interests (Art. 6 (1) (f)). These recipients include:

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (provided that you click on YouTube videos)
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, if you have enabled Google Maps
Meta Inc., 1601 S. California Ave., Palo Alto, California 94304, USA
Postal and telecommunications companies involved in communicating with you
Law enforcement authorities and courts involved in asserting or defending legal claims
Financial auditors, attorneys, and tax advisors
Insurance companies involved in settling liability cases

If the processors or any other recipients are based in the United States, your data will also be sent there.

VI. Your rights regarding your data

Pursuant to Article 15 of the GDPR, you have the right to request information about whether we process your data (and if so, which data). You can also ask that your data be corrected (and completed, if applicable) in accordance with Article 16 of the GDPR. The GDPR further grants you the right to have your data deleted (Article 17) or restricted (Article 18). In line with Article 20 of the GDPR, you have the right to receive the personal data concerning you, which you have provided to us based on your consent or on a contract, provided that the processing is carried out by automated means. Upon your request and provided that this is technically feasible, we will transmit this data to a third party.

If you have consented to the processing of your data for a specific purpose, you have the right to withdraw your consent at any time. You will not face any negative consequences by doing so. Withdrawing your consent will not affect the legality of the processing performed up to that point. You can withdraw your consent by sending an e-mail to info@klett-gruppe.de. Once you withdraw your consent, the data will no longer be processed for the purpose for which the consent was previously given unless we are legally entitled or obligated to do so.

Finally, you have the right to lodge complaints regarding the applicable data protection laws, in particular with the Baden-Württemberg state representative for data protection and freedom of information (Landesbeauftragter für Datenschutz und Informationsfreiheit, Lautenschlagerstr. 20, 70173 Stuttgart, Germany).

Information on the right to object:

In cases in which we process data to preserve our interests on the sole basis of Article 6 (1) (f) of the GDPR, you have the right to object to the processing of your data for reasons pertaining to your particular situation. If you raise such an objection, we will no longer process the data in question unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Last updated: May 2023