Data privacy policy

I. Name and address of controller

The controller in accordance with the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is:

Küttner GmbH & Co. KG
Alfredstraße 28
45130 Essen
Germany
Tel.: +49 201 7293 0
E-Mail: info@kuettner.com
Website: https://www.kuettner.com/

 

II. Name and address of data protection officer

The data protection officer of the controller is:

ADICOM® Systems GmbH

Christian Scobel
Schwitter Weg 75
58706 Menden
Germany

Phone: +49 2373 170 678-0
E-Mail: dsb@adicom-systems.de

 

III. General information about data processing

1. Scope and processing of personal data

We process personal data of our users only to the extent necessary for providing a functioning website, as well as our content and services. Personal data of our users is regularly processed only with the consent of the user. An exception applies in such cases in which it is, in fact, not possible to obtain consent beforehand and the processing of the data is permitted by statutory regulations.

2. Legal basis for the processing of personal data

If we obtain the permission of the concerned party for processing of personal data, Art. 6, para. 1, letter a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data that is necessary for fulfillment of a contract in which the concerned party is a contracting party, Art. 6, para. 1, letter b GDPR serves as the legal basis. This also applies to processing that is necessary for pre-contractual measures.

If processing of personal data is necessary for fulfillment of a legal obligation to which our company is obligated, Art. 6, para. 1, letter c GDPR serves as the legal basis.

If vital interests of the concerned party or another natural person necessitate the processing of personal data, Art. 6, para. 1, letter d GDPR serves as the legal basis.

If the processing of personal data is necessary to protect a legitimate interest of our company or of a third party, and the interests and fundamental rights and liberties of the concerned party outweigh the first-mentioned interest, Art. 6, para. 1, letter f GDPR serves as the legal basis for processing of the data.

3. Deletion of data and duration of storage

The personal data of the concerned individual will be deleted or blocked as soon as the reason for storage of the data no longer exists. In addition, storage of data can take place beyond that time if this is provided for by European or national legislation in EU directives, laws, or other regulations by which the controller is bound. Data is likewise blocked or deleted if a retention period specified by the relevant standards expires, unless there is a necessity to further retain the data for conclusion or performance of a contract.

 

IV. Provision of the website and generation of log files

1. Description and scope of data processing

Upon each visit to our website, our system automatically collects data and information from the computer system of the requesting computer. The following data is collected:

  1. Information about the browser type and version used
  2. The user’s operating system
  3. The user’s Internet service provider
  4. The user’s IP address
  5. Data and time of access
  6. Websites from which the user’s system accesses our website
  7. Websites that are requested by the user’s system via our website

The data (1, 2, 4, 5, 6) is likewise stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Description and scope of data processing

The legal basis for the temporary storage of data and log files is Art. 6, para. 1, letter f GDPR.

3. Purpose of data processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the computer of the user. For this purpose, the IP address of the user must be stored for the duration of the session.

Data is stored in log files to ensure the functionality of the website. In addition, this data helps us to optimize the website and to protect the security of our information technology systems. In this connection, the data is not analyzed for marketing purposes.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6, para. 1, letter f GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for achieving the purpose of its being collected. In the event that data is collected for provision of the website, this is the case when the session is terminated.

In the event that data stored in log files, this is the case after a maximum period of ninety days. Storage of the data beyond that time is possible. In this case, the IP addresses of the users are deleted or modified so that the requesting client can no longer be identified.

5. Objection and removal options

Collection of data for provision of the website and storage of data in log files is imperative for operation of the website. Consequently, the user cannot object to such storage of data.

 

V. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the web browser or by the web browser on the user’s computer system. When a user visits a website, a cookie can be stored on the user’s operating system. This cookie contains a character string that allows unique identification of the browser when the website is visited again.

We use cookies to make our website more user-friendly. Some elements of our website make it necessary to identify the requesting browser after switching pages.

Cookies are used to store and transmit the following data:

  1. Language settings

In addition, our website uses cookies that allow analysis of the user’s surfing behavior.

In this way, the following data can be transmitted:

  1. Frequency of page requests
  2. Use of website functions

The user data collected in this manner is pseudonymized by technical means. This makes it impossible to allocate the data to the visiting user. The data is not stored together with other personal data of the user.

Upon visiting our website, an info banner informs users of the use of cookies for analysis purposes, together with a reference to this data protection policy. In this connection, information is also provided on how to prevent the storage of cookies in the browser settings.

2. Legal basis of data processing

The legal basis for the processing of personal data using cookies is Art. 6, para. 1, letter f GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify use of websites for the user. Some functions of our website cannot be offered without the use of cookies. These functions require that the browser can be identified after switching pages.

We require cookies for the following applications:

  1. Saving of language settings

The user data collected by technically necessary cookies is not used to create user profiles.

Analysis cookies are used to improve the quality of our website and its content. Through analysis cookies, we learn how the website is used, to enable continuous optimization of our content and services. For this purpose, we use the Google Analytics and Google Ads services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6, para. 1, letter f GDPR.

4. Duration of storage; right to objection and deletion

Cookies are stored on the user’s computer, from which they are transmitted to our website. As a user, you therefore have full control over the use of cookies. By changing the settings in your web browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can be done automatically. Deactivation of cookies for our website may result in restricted functionality of the website.

 

VI. Contact form and e-mail contact

1. Description and scope of data processing

Our website has a contact form that can be used to contact us by electronic means when applying for advertised positions. If a user makes use of this function, the data entered in the input mask is sent to us and stored. This data is:

  1. First name
  2. Last name / family name
  3. E-mail address
  4. Phone number
  5. Text, i.e. the user’s message to us
  6. Attachments, i.e. attached files / documents
  7. The acceptance of this data protection policy by the user (Yes / No)

At the time the message is sent, the following data is stored:

  1. The user’s IP address
  2. Date and time

For processing of the data, your consent is obtained, and you are informed of this data protection policy when the message is sent.

Alternatively, one can contact the company via the e-mail address provided. In this case, personal data of the user sent with the e-mail is stored.

No data is forwarded to third parties in this connection. The data will be used only for processing the conversation.

2. Legal basis of data processing

The legal basis for the processing of data if the consent of the user has been obtained is Art. 6, para. 1, letter a GDPR.

The legal basis for the processing of data transmitted by sending an e-mail is Art. 6, para. 1, letter f GDPR. If the purpose of the e-mail contact is to conclude a contract, the legal basis for the data processing is additionally Art. 6, para. 1, letter b GDPR.

3. Purpose of data processing

We use the personal data from the input mask only for processing the subject matter of the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing of the data.

The other personal data processed during the sending process is used to prevent misuse of the contact form and to protect the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for achieving the purpose of its being collected. For the personal data from the input mask of the contact form and data sent by e-mail, this is the case when the respective conversation with the user is terminated. The conversation is likewise terminated if the circumstances indicate that the matter has been conclusively resolved.

The additional personal data collected during the sending process is deleted after a period of no more than ninety days.

5. Objection and removal options

The user has the option to revoke processing of their personal data at any time. If users contact us by e-mail, they can object to storage of their personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored as a result of the contact will be deleted in this case.

 

VII. Web analysis by Google Analytics

1. Scope and processing of personal data

This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses “cookies”, or text files that are stored on your computer and allow analysis of your use of the website. The information generated by the cookie about your use of the website, such as

  • Browser type/version,
  • Operating system,
  • Referrer URL (the site previously visited),
  • Host name of the accessing computer (IP address),
  • Time of the server request,

is generally sent to a Google server in the USA, where it is stored. The IP address from your browser transmitted by Google Analytics will not be stored together with other data from Google. We have also expanded Google Analytics on this website to include the “anonymizeIP” code. This guarantees masking of your IP address so that all data can be collected anonymously. Only in exceptional cases is the full IP address sent to a Google server in the USA and truncated there.

In behalf of the operator of this website, Google will use this information to analyze your use of the website, to compile reports on the website activities and to provide additional services connected with the use of the website and of the Internet to the website operator.

2. Legal basis for the processing of personal data

The legal basis for the processing of the user’s personal data is Art. 6, para. 1, letter f GDPR.

3. Purpose of data processing

Processing of the user’s personal data allows us to analyze the surfing behavior of our users. By analyzing the collected data, we can compile information about the use of the single components of our website. This helps us to continuously improve our website and its user-friendliness. These purposes also constitute our legitimate interest in the processing of data in accordance with Art. 6, para. 1, letter f GDPR. Anonymization of the IP address sufficiently protects the users’ interest in protection of their personal data.

4. Duration of storage

The user and event data linked with your cookies is automatically deleted by Google Analytics as soon as it is no longer needed for our web analysis purposes. In our case, this is the case after 26 months.

5. Objection and removal options

Cookies are stored on the user’s computer, from which they are transmitted to our website. As a user, you therefore have full control over the use of cookies. By changing the settings in your web browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can be done automatically. Deactivation of cookies for our website may result in restricted functionality of the website.

In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de . As an alternative to the browser add-on, especially in the case of browsers on mobile end devices, you can also prevent the collection of data by Google Analytics byclicking this link. This will set an opt-out cookie, which prevents the collection of your data during future visits to our website. The opt-out cookie applies only in this browser and only for our website, and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.

We also use Google Analytics to analyze data from double-click cookies and also Google Ads for statistical purposes. If you do not want this, you can deactivate it in the Ad Manager at https://www.google.com/settings/ads/onweb/?hl=de .

 

VIII. Rights of the concerned party

If your personal data is processed, you are a concerned party in accordance with the GDPR and you are entitled to the following rights vis-à-vis the controller:

1. Right to information

You can request confirmation from the controller whether personal data related to you is processed by us.

If this is the case, you can request information about the following from the controller:

  1. the purposes for which the personal data is processed;
  2. the categories of personal data processed;
  3. the recipients or the categories of recipients to whom your personal data was disclosed or will be disclosed;
  4. the planned duration of storage of your personal data or, if specific information about this is not possible, criteria for defining the duration of storage;
  5. the existence of a right to correction or deletion of your personal data, a right to restriction of processing by the controller or a right to objection to processing of the data;
  6. the existence of a right to file a complaint with a supervisory authority;
  7. all available information about the origin of the data, if the personal data is not collected from the concerned party;
  8. the existence of an automated decision-making process including profiling in accordance with Art. 22, para. 1 and 4 GDPR and – at least in these cases – detailed information about the involved logic and the consequences and the desired effects of such processing of data for the concerned party.

You are entitled to request information about whether your personal data is transmitted to a non-member state or an international organization. In this context, you can request to be informed of the appropriate guarantees in accordance with Art. 46 GDPR in connection with communication of the data.

2. Right to correction

You are entitled to request correction and/or completion of your personal data by the controller, insofar as the personal data relating to you is incorrect or incomplete. The controller is obligated to correct the data without delay.

3. Right to restriction of processing

Under the following conditions, you can request the restriction of processing of your personal data:

  1. if you dispute the correctness of your personal data for a period that enables the controller to check the correctness of the personal data;
  2. processing of the data is unlawful and you reject deletion of the personal data and instead request restriction of use of the personal data;
  3. the controller no longer needs the personal data for the purposes of processing, but you need the data for the assertion, exercise, or defense of legal rights, or
  4. if you have objected to processing in accordance with Art. 21, para. 1 GDPR, and it is not yet certain whether the legitimate grounds of the controller outweigh your grounds.

If processing of your personal data has been restricted, this data – aside from its storage – may be processed only with your permission or to assert, exercise, or defend legal rights or to protect the rights of another natural or legal entity, or on grounds of an important public interest of the EU or a member state.

If the processing of the data has been restricted based on the aforementioned conditions, you will be informed by the controller before the restriction is rescinded.

4. Right to deletion

a) Obligation to delete

You can request from the controller that your personal data be deleted without delay, and the controller is obligated to delete the data without delay, insofar as one of the following grounds applies:

  1. Your personal data is no longer needed for the purposes for which it was collected or otherwise processed.
  2. You revoke your permission on which the processing was based in accordance with Art. 6, para. 1, letter a or Art. 9, para. 2, letter a GDPR, and there is no other legal basis for processing of the data.
  3. You object to the processing in accordance with Art. 21, para. 1 GDPR, and there are no prior legitimate grounds for the processing, or you object to processing of the data in accordance with Art. 21, para. 2 GDPR.
  4. Your personal data was processed unlawfully.
  5. Deletion of your personal data is necessary for fulfillment of a legal obligation in accordance with EU law or the law of member states by which the controller is bound.
  6. Your personal data was collected regarding services offered by the information company in accordance with Art. 8, para. 1 GDPR.

b) Information to third parties

If the controller has disclosed your personal data and is obligated to delete the data in accordance with Art. 17, para. 1 GDPR, he will take appropriate measures, also of a technical nature, in consideration of the available technology and the implementation costs, to inform the controllers who process the personal data that you as the concerned party have requested them to delete all links to the personal data or copies or replications of the personal data.

c) Exceptions

The right to deletion does not prevail if processing of the data is necessary

  1. to exercise the right of freedom of speech and information;
  2. to fulfill a legal obligation that requires processing of the data in accordance with EU law or member state law by which the controller is bound, or to attend to a duty in the public interest, or take place in execution of public power that has been assigned to the controller;
  3. for reasons of public interest in the public health sector in accordance with Art. 9, para. 2, letter h and i, as well as Art. 9, para. 3 GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89, para. 1 GDPR, as well as the right stated in section a) expected to make impossible or seriously impede the realization of the purposes of the data processing, or
  5. to assert, exercise, or defend legal rights.

5. Right to notification

If you have asserted your right to correction, deletion, or restriction of data processing to the controller, the latter is obligated to inform all recipients to whom your personal data was disclosed of the correction or deletion of the data or restriction of processing of the data, unless this proves to be impossible or involves inordinate expense.

You are entitled to be informed of these recipients by the controller.

6. Right to data transferability

You have the right to receive the personal data you have provided to the controller in a structured, common and machine-readable format. Furthermore, you are entitled to communicate the data to another controller without hindrance by the controller to whom the personal data was provided, insofar as

  1. the processing is based on permission in accordance with Art. 6, para. 1, letter a GDPR or Art. 9, para. 2, letter a GDPR or on a contract in accordance with Art. 6, para. 1, letter b GDPR and
  2. processing of the data takes place using automated processes.

In exercising this right, you furthermore are entitled to have your personal data transmitted directly from one controller to another controller, insofar as this is technically feasible. It must be ensured that liberties and rights of other persons are not impaired by this.

The right to transferability of data does not apply to processing of personal data that is necessary for attending to a duty in the public interest or in execution of public power that has been assigned to the controller.

7. Right to revocation

You have the right, for reasons resulting from your particular situation, to object at any time to the processing of your personal data carried out on the basis of Art. 6, para. 1, letter e or f GDPR; this also applies to profiling on the basis of these regulations.

The controller will no longer process your personal data unless he can prove that there are mandatory reasons for processing the protected data that outweigh your interests, rights, and liberties or the processing takes place in order to assert, exercise or defend legal rights.

If your personal data has already been processed for the purpose of direct advertising, you are entitled to object at any time to processing of your personal data for the purposes of such advertising; this also applies to profiling, insofar as it is related to such direct advertising.

If you object to processing of data for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the option, in connection with the use of services of the information company – notwithstanding Directive 2002/58/EC – to exercise your right to objection using automated processes, for which technical specifications are used.

8. Right to revocation of declaration of consent to processing of data

You have the right to revoke your declaration of consent to processing of data at any time. Revoking the consent does not affect the legality of data already processed on the basis of the consent up to the time of revocation.

9. Automated decision-making on an individual basis including profiling

You have the right not to be subjected to a decision based solely on automated processing – including profiling – with legal consequences or similar substantial impairments that affect you. This does not apply if the decision

  1. is necessary for the conclusion or fulfillment of a contract between yourself and the controller,
  2. is admissible on the basis of EU or member state legal provisions by which the controller is bound, and these legal provisions contain appropriate measures for protecting your rights, and liberties, as well as your legitimate interests, or
  3. is made with your express permission.

These decisions, however, may not be based on special categories of personal data in accordance with Art. 9, para. 1 GDPR, insofar as Art. 9, para. 2, letter a or g does not apply and appropriate measures for protecting your rights, and liberties, as well as your legitimate interests, have been taken.

Regarding the cases stated in (1) and (3) above, the controller will take appropriate measures to protect your rights, and liberties as well as your legitimate interests, including at least the right to effect the intervention of a person on the part of the controller, to explain one’s own standpoint, and to contest the decision.

10. Right to file a complaint with a supervisory authority

Notwithstanding other legal or judicial remedy you are entitled to file a complaint with a supervisory authority, especially in the member state of your place of residence, your workplace, or the place of presumed infringement, if you believe that the processing of your personal data violates the GDPR.

The supervisory body where the complaint was filed will inform the complainant of the status and results of the complaint, including the possibility of judicial remedy in accordance with Art. 78 GDPR.

The strengths of Küttner

EPC-Contracting

Whether you are planning a new production plant or want to modernize your existing equipment: It is …

Read more
Engineering

The basis of good planning is the clarification of facts and boundary conditions. This includes the …

Read more
Innovative strength

We make high demands on ourselves first, because this is the only way we remain able to fulfil your …

Read more