Privacy Policy

Thank you very much for visiting our website. Compliance with data protection regulations is of particular importance to us. The purpose of this Privacy Policy is to inform you, as a user of this website, about the nature, scope, and purpose of the processing of personal data, as well as your rights, insofar as you are considered a data subject within the meaning of Article 4(1) of the General Data Protection Regulation.

1. Data Controller

This website and the services offered are operated by:Diese Website und das Leistungsangebot werden betrieben von:

SWB Dienstleistungsgesellschaft mbH

Friedrichstraße 16

69412 Eberbach

Germany

Tel.: +49 (0) 6271 / 82-0

E-Mail: info@swb-dl.de

2. Data Protection Officer

We have appointed a Data Protection Officer.

Herold Unternehmensberatung GmbH

Philipp Herold

Hafenstraße 1a

23568 Lübeck

E-Mail: datenschutz@hub24.de

3. General Information

We have designed this website to collect as little data from you as possible. In doing so, we always ensure that we process your personal data only in accordance with a legal basis or with your consent. We comply with the provisions of the General Data Protection Regulation (GDPR), which has been in effect since May 25, 2018, and the applicable national regulations, such as the Federal Data Protection Act, the Telecommunications and Digital Services Data Protection Act, or other more specific data protection laws.

4. Purpose and Legal Basis for the Processing of Personal Data

We always process your personal data for specific purposes.

In summary, we process your personal data for the following purposes:

1. To process your inquiry when you contact us (e.g., email address, first name, last name);
2. To technically operate our website and provide you with information on this website (e.g., IP address, cookies, browser information);
3. To receive and process your application for one of our job openings.

The following applies regarding the legal basis for the processing of your personal data:

We process personal data required for the establishment, performance, or fulfillment of our services (contract fulfillment) on the legal basis of Article 6(1)(b) of the GDPR. To the extent that we obtain your consent to process your personal data, such consent pursuant to Article 6(1)(a) of the GDPR constitutes the legal basis for data processing. Data processing is also permissible if we process your data to protect our legitimate interests and, in doing so, your interests or fundamental rights and freedoms regarding the processing of personal data are not overridden. (Article 6(1)(f) of the GDPR) To the extent that we engage external service providers in the context of data processing on our behalf, the processing is carried out on the legal basis of Article 28 of the GDPR.

5. Collection of Personal Data When Visiting Our Website

When you use the website solely for informational purposes—that is, if you do not register or otherwise provide us with information—we collect only the personal data that your browser transmits to our server. When you view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (the legal basis is Art. 6(1)(f) of the GDPR):

• IP address

• Date and time of the request

• Time zone difference from Greenwich Mean Time (GMT)

• Content of the request (specific page)

• Access status/HTTP status code

• Amount of data transferred in each case

• Website from which the request originates

• Browser

• Operating system and its user interface

• Language and version of the browser software.

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers.

We use the following hosting provider:

Strato AG

Otto-Ostrowski-Straße 7

10249 Berlin

We have entered into a data processing agreement (DPA) with the aforementioned provider. This is a contract required under data protection law that ensures the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

In addition to the data mentioned above, cookies are stored on your computer when you use our website. For more information on this, please see the “Cookies” section of this Privacy Policy.

6. Integration of Third-Party Services

Our website uses content, services, and features provided by third parties. These include, for example, services for displaying map content and for managing your cookie consent. In order for this data to be accessed and displayed in the user’s browser, the user’s IP address must be transmitted to the third-party providers involved.

Although we make every effort to use only third-party providers that require the IP address solely to deliver content or that work with anonymized IP addresses, we have no control over whether the IP address may be stored. Information about the third-party providers used can be found later in this Privacy Policy.

Google Fonts

This site uses so-called web fonts provided by Google to ensure consistent font display. The Google Fonts are installed locally. No connection to Google’s servers is established in this process.

For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.

Cookie Consent Tool Complianz

Nature and Scope of Processing

We have integrated Complianz into our website. Complianz is a consent management plugin that allows us to obtain and document consent for the storage of cookies. Complianz uses cookies to recognize users and to store consent that has been granted or revoked. Your consent is stored locally in a cookie on your device and is not transferred to third parties.

Purpose and Legal Basis

Use of the service is based on the legally mandated obligation to obtain consent for the use of cookies, in accordance with Article 6(1)(a) of the GDPR and Section 25(2)(2) of the TDDDG.

Retention Period

Complianz consent cookies are stored for a period of one year. For further information, please refer to the Complianz Privacy Policy: https://complianz.io/legal/privacy-statement/

7. Cookies

Cookies are small text files that are stored on your device and save certain settings and data for exchange with our system via your browser. A cookie typically contains the name of the domain from which the cookie data was sent, as well as information about the cookie’s age and an alphanumeric identifier. When you visit our website, the following cookies may be set:

• Functional Cookies

These cookies are technically necessary for the website to function properly and cannot be disabled. The legal basis is Article 6(1)(f) of the GDPR (legitimate interest).

• Preference Cookies

These cookies enable the website to save your personal settings, such as your preferred language or region. The legal basis is Article 6(1)(a) of the GDPR (consent).

• Marketing cookies

These cookies are used to create visitor profiles and display interest-based content or advertising. The legal basis is Article 6(1)(a) of the GDPR (consent).

• Consent Cookies (Complianz)

The following cookies are used to store your consent decision: cmplz_banner-status, cmplz_consented_services, cmplz_functional, cmplz_marketing, cmplz_policy_id, cmplz_preferences. These cookies are stored exclusively on this domain, have a duration of 1 year, and are not transferred to third parties.

You can withdraw your consent at any time by revisiting the cookie settings on our website and adjusting your selections. You can find the corresponding link in the footer of our website. Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent prior to withdrawal.

8. Application Process

We post job openings on our website, and you can apply for them using an application form. If you decide to apply for an open position, we and Badische Stahlwerke GmbH will process the personal data you provide there and submit to us solely for the purpose of conducting the application process.

The legal basis for processing your personal data as part of the application process is Section 26(1) in conjunction with Section 26(2) of the German Federal Data Protection Act (BDSG).

If your application is rejected, we will delete your data as soon as the 6-month retention period required under labor law has expired. This period begins when the rejection notice is sent. If you have expressly consented to the continued use of your data so that we may contact you in the future regarding positions that may be of interest to you, we will continue to store your data in accordance with your consent.

If an employment relationship is established following the application process, the data will initially continue to be stored to the extent necessary and permissible and will subsequently be transferred to your personnel file.

Your personal data may be processed on our behalf based on data processing agreements pursuant to Article 28 of the GDPR. In such cases, we ensure that the processing of personal data complies with the General Data Protection Regulation.

Otherwise, data will only be disclosed to recipients outside the company to the extent permitted or required by law, if such disclosure is necessary to fulfill legal obligations, or if you have given your consent. We do not intend to transfer data to a third country.

The provision of personal data as part of the application process is not required by law or by contract. You are therefore not obligated to provide personal data. However, providing personal data is necessary for us to make a decision regarding your application or to enter into an employment contract with us. When applying, you should only provide the personal data that is necessary for the initiation and processing of your application. If you do not provide us with any personal data as part of your application, we will not be able to make a decision regarding the establishment of an employment relationship.

For more information on data processing during the application process, please visit: https://karriere.bsw-kehl.de/Vacancies/DataProtection.

9. Rights of the Data Subject

You have the right:

• pursuant to Article 15 of the GDPR, to request information about your personal data that we process. In particular, you may request information regarding the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint; the origin of your data, if it was not collected by us; and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details;

• in accordance with Article 16 of the GDPR, to request without delay the correction of inaccurate personal data or the completion of your personal data stored by us;

• to request, pursuant to Article 17 of the GDPR, the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims;

• to request the restriction of the processing of your personal data pursuant to Article 18 of the GDPR, provided that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer need the data, but you require it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR;

• In accordance with Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transferred to another controller (data portability);

• In accordance with Article 7(3) of the GDPR, you may withdraw your consent at any time. As a result, we may no longer continue processing the data based on that consent in the future, and

• to file a complaint with a supervisory authority pursuant to Article 77 of the GDPR. As a general rule, you may contact the supervisory authority in your usual place of residence, your place of work, or where our company is headquartered.

• Right to Object

If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1), first sentence, letter f of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data, provided there are grounds arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will honor without requiring you to specify a particular situation.

If you wish to exercise your right of withdrawal or objection, simply send an email to datenschutz@hub24.de.

10. Disclosure of Your Personal Data

Your personal data will be disclosed as described below.

Data may also be disclosed if we are authorized or required to do so under statutory provisions and/or official or court orders. This may include, in particular, the disclosure of information for the purposes of criminal prosecution, to prevent danger, or to enforce intellectual property rights.

To the extent that your data is disclosed to service providers as necessary, these providers have access to your personal data only to the extent necessary to fulfill their tasks. These service providers are obligated to handle your personal data in accordance with applicable data protection laws, in particular the GDPR. To the extent that your personal data is processed on our behalf based on data processing agreements pursuant to Article 28 of the GDPR, we ensure that the processing of personal data complies with the General Data Protection Regulation.

We make it a priority to process your data within the EU/EEA. However, there may be instances where we use service providers that process data outside the EU/EEA. In such cases, we ensure that, prior to the transfer of your personal data, the recipient maintains an adequate level of data protection comparable to the standards within the EU. This can be achieved, for example, through EU Standard Contractual Clauses, Binding Corporate Rules, or special agreements to which the company can submit.

11. Data Security

We protect our website against the loss, destruction, unauthorized access, alteration, or disclosure of your data by unauthorized persons through technical and organizational measures.

In particular, your personal data is transmitted to us in encrypted form. We use the SSL/TLS (Secure Sockets Layer/Transport Layer Security) encryption system for this purpose. Our security measures are continuously improved in line with technological developments.

12. Retention Period for Personal Data

With regard to the retention period, we delete personal data as soon as its storage is no longer necessary to fulfill the original purpose and no statutory retention periods remain in effect. The statutory retention periods determine the final duration of personal data storage. Once the retention period has expired, the relevant data is routinely deleted. If retention periods apply, processing is restricted by blocking the data.

13. References and Links

When accessing websites linked to from our website, you may be asked again for information such as your name, address, email address, browser characteristics, etc. This Privacy Policy does not govern the collection, disclosure, or handling of personal data by third parties.

Third-party service providers may have different or separate policies regarding the collection, processing, and use of personal data. It is therefore advisable to review the privacy policies on third-party websites regarding their practices for handling personal data before entering any personal information.

11.2024