Privacy Policy

We are pleased that you are interested in our company, our products and our services and would like you to feel secure when visiting our website regarding the privacy of your personal data. We want you to know when and which data we store and how we use it. We are subject to the provisions of the European General Data Protection Regulation (GDPR) and the supplementary regulations of the German Federal Data Protection Act (BDSG). To ensure that the regulations on data protection are implemented both by us and by service providers commissioned by us, we have taken appropriate technical and organizational measures.

This data protection information applies to our online offers. This includes our websites, their functions and content as well as external online presences, such as social media. This general data protection information also serves to inform you about further processing of your personal data and our fulfillment of the information obligations towards you.

The terms used in this privacy notice, such as data accountabillity or personal data, are used in accordance with the definitions of the GDPR. For reasons of readability and thus also comprehensibility provision of information, the naming of individual articles, paragraphs or the like is generally omitted.

Responsible Party

The responsible party according to the DSGVO, other national data protection laws of the member states, as well as any other data protection regulations, is:

allsafe GmbH & Co. KG
Gerwigstrasse 31
D-78234 Engen
Phone: +49 7733 50 02 0
E-Mail: sales(at)allsafe-group.com

Privacy Policy Commissioner

The responsible party has appointed a data protection officer. His contact details are

Pascal Kohler

Bechtle System House GmbH

Leinenweberstrasse 1

79108 Freiburg

Germany

E-mail: data protection officer(at)allsafe-group.com

You can contact our data protection officer directly at any time with questions about data protection or and to enforce your rights listed below.

General Information on Data Processing

Legal Basis for the Processing of Personal Data

Within the scope of the data protection laws, processing of personal data is generally not permitted unless there is a legally permissible reason for permission. We are obliged to inform you about the legal basis of data processing.

If we obtain your consent for processing operations of personal data, this serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which you are a party, the performance of the contract serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

The processing of personal data is necessary for compliance with a legal obligation to which we are subject, this serves as the legal basis.

In the event that vital interests of the data subject or another natural person make processing of personal data necessary, this serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and these interests, are not outweighed by your fundamental rights and freedoms, this serves as the legal basis for the processing.

Data Transfer to Third Countries

The GDPR ensures a uniformly high level of data protection within the European Union (EU) and the European Economic Area (EEA). When selecting our service providers and cooperation partners, we therefore rely on European partners wherever possible if your personal data are to be processed. 

If we have your data processed in a third country - i.e. outside the EU/EEA - this is always done in accordance with the legal requirements.

In addition to your explicit consent or contractually or legally required transfer, we only have your data processed in third countries with a recognized level of data protection, through a contractual obligation by so-called standard contractual clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations.

Use of Automated Decision Making

We abstain from automated decision-making.

Recipients of the Data/Categories of Recipients

Within our company, we ensure that only those persons receive your data who need it to fulfill contractual and legal obligations.

In some cases, we use carefully selected external service providers to process your data. If data are passed on to service providers as part of a so-called order processing, this is done within the framework of the requirements of the DSGVO. Our order processors are carefully selected, bound by our instructions and are checked at regular temporal intervals. We only commission processors who provide sufficient guarantees that appropriate technical and organizational measures are taken in such a way that the processing is carried out in accordance with the requirements of the DSGVO and BDSG and ensures the protection of your rights.

Disclosure of Personal Data to Third Parties

In principle, we do not pass on any personal data to third parties without your explicit consent. However, if, in the course of processing, we disclose your data to third parties, transmit it to them or otherwise grant them access to the data, this is also done exclusively on the basis of one of the previously mentioned legal grounds.

For example, we transmit data to payment service providers or suppliers if this is necessary for the performance of the contract. If we are required to do so by law or by court order, we must transfer your data to the respective authorities entitled to receive such information.

Use of Our Online Offer

Principally, you can use our online offer without disclosing your identity. In this section we explain when and in what context we process data when you use our online services, which functions of service providers we have implemented, how they work and what happens to your data.

Children

Our offer is essentially aimed at adults. Persons under the age of 16 may not transmit any personal data to us without the consent of their parents or legal guardians.

Transmission encryption

To ensure the security of your data during the transfer process, we use a state-of-the-art SSL/TLS encryption process.

Data collection when visiting our websites

If you use our websites for information purposes only, i.e. you do not register for an offer, conclude a contract with us or otherwise disclose information to us, we only collect the personal data that your browser transmits to our servers.

When you call up our websites, we collect the following data, which is technically necessary for us to be able to display our websites to you and to ensure stability and security:

This data is temporarily stored in the log files of our system for a maximum of seven days. Storage beyond this period is possible, but in this case the IP addresses are shortened or alienated so that it is no longer possible to assign the calling client. In this context, the log files are not stored together with other personal data relating to you. The legal basis for these processing operations is our legitimate interest.

Since the collection of data to display the websites and the storage of the data in log files is absolutely necessary for the operation of our websites and the maintenance of IT security, you have no possibility to object in this respect.

Requests

If you send us an inquiry via our website - for example, by using the contact form - your personal data will be processed to answer your inquiry.

Payment Service Providers

We use external payment service providers through whose platforms our users and we can make payment transactions  

Visa https://www.visa.de/datenschutz 

Mastercard https://www.mastercard.de/de-de/datenschutz.html 

As part of the performance of contracts, we use the payment service providers to fulfill the contract. In addition, we use external payment service providers based on our legitimate interests to provide our users with effective and secure payment options. 

The data processed by the payment service providers includes inventory data, such as name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, total and recipient-related information. The information is required to carry out the transactions. However, the data entered is only processed by the payment service providers and stored with them. I.e. we do not receive any account or credit card related information, but only information with confirmation or negative report of the payment. Under certain circumstances, the payment service providers transmit the data to credit agencies. The purpose of this transmission is to check identity and creditworthiness. In this regard, we refer to the terms and conditions and data protection information of the payment service providers. 

For the payment transactions, the terms and conditions and data protection information of the respective payment service providers apply, which can be accessed within the respective websites or transaction applications. We also refer to these for the purpose of further information and assertion of revocation, information and other data subject rights.

Paypal

As a service provider for payments of orders in our online store we use the online payment service PayPal. PayPal makes it possible to make online payments to third parties. The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. PayPal may transmit your data to credit agencies. This transmission serves to check your identity and creditworthiness. PayPal may also share your data with additional third parties. PayPal collects personal data, information about payment instruments used, device details, technical usage data and location data in order to be able to carry out the transaction. If you are an account holder and make a payment without a PayPal account, Paypal collects information about the transaction and links it to your account as part of its own compliance and analytics activities. If you are not an account holder and make a payment without a PayPal account, Paypal collects and stores any information you provide and uses it in accordance with its own privacy policy. You can view PayPal's privacy policy here.

The legal basis for the transfer of your data to Paypal for payment processing is the fulfillment of the contract.

Customer account

Personal data are required for the management of a customer account. The required data are marked with a "*" in the registration. By registering, you consent to the use of this data for the purpose of account management. For orders via the store, further data are required depending on the type of payment. For processing electronic payments, we may cooperate with electronic payment service providers and transmit your personal data for these processing purposes.

Use of Cookies

General Information on the Use of Cookies

In addition to the previously mentioned data, cookies are stored on your device when you use our websites. Cookies are data records that can be sent from a website to the browser, which stores them and sends them back again. Different data can be stored in cookies, which are read by the body that sets the cookie. As a rule, they contain a characteristic string of characters (ID) that enables the browser to be uniquely identified when the website is called up again or when a page is changed.

Legal foundations

We use cookies in accordance with the legal requirements. Therefore, we obtain consent from you in advance for cookie use, except where such consent is not required by law. Consent is not required if the storage and reading of the information stored in cookies is absolutely necessary to provide the telemedia service (i.e. our online offering) that you have expressly requested. In all other cases, your consent is required. This consent can be given by you in advance, verifiably and revocably with the help of our Consent Management Tool. Information on the legal basis under data protection law for the respective cookie use can be found either in this data protection notice or in our Cookie Management Tool.

Storage period

Regarding the storage period, two different types of cookies can be used:

Information on the storage period of the respective cookies can be found in our Cookie Management Tool.

Information on Used Services

Cookie Management Tool

We use a so-called cookie management tool. This allows you to manage the cookies we use as well as the permissions you have given, to find out more information about data processing using cookies, and to view the purpose and storage period of the cookies used.

Matomo 

Our website uses Matomo. This is a web analysis service for statistical evaluation. No data is transmitted to third parties. Matomo also uses cookies. The information obtained through the cookie about the use of our site is transmitted to our server and stored so that usage behavior can be evaluated. In the process, your IP address is immediately anonymized; so that we can no longer assign your usage behavior to you personally. The information generated by the cookie about your use of this website will not be disclosed to third parties. 

We understand this analysis as part of our Internet services. We want to use it to continuously improve our website and adapt our offer to the needs of our users. We delete the processed data as soon as it is no longer required for our analysis purposes. 

The legal basis is our legitimate interest in the continuous improvement of our websites.

Commercial and Business Services

We process data of our contractual and business partners, e.g. suppliers, customers and interested parties (hereinafter referred to as business partners) within the scope of contractual or comparable legal relationships as well as related measures and within the scope of communication with our business partners.

This data is processed to fulfill our contractual obligations, to secure our rights and for the purposes of related administrative tasks as well as our business organization. We disclose the data of our business partners to third parties within the framework of the applicable laws only to the extent that this is necessary for the aforementioned purposes or for the fulfillment of legal obligations or with the consent of the data subjects (e.g. to participating telecommunications, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). Contractual partners will be informed about other forms of processing, e.g. for marketing purposes, as part of this data protection notice.

We inform our business partners which data is required for these purposes before or in the course of data collection.

Deletion of Data and Storage Period

As soon as the purpose for processing ceases to apply, we delete or block your personal data. However, data may be stored beyond this period if this is required by legal regulations to which we are subject. This applies in particular to data that must be retained for legal archiving reasons (e.g. for commercial law purposes, usually for 6 years, or for tax law purposes, usually for 10 years).

Processed Data:

Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. subject of contract, term,).

Purposes of Processing:

Provision of contractual services and customer service, contact requests and communication, internal organizational procedures, administration and response to requests.

Legal Foundation:

Contract performance/pre-contractual inquiries, Legal obligation Legitimate interests.

Applications

When you apply for a job with us, the data you provide - such as your contact details and qualifications - will be used exclusively to process the application procedure.

We use an online application portal to organize applications. When using this online portal, the following personal data is processed (title, first name, last name, street and house number, postal code and city, e-mail address, telephone/mobile number, free field for application letters, attachment upload for application letters and documents). The transmission of the data is encrypted.

Your data will be forwarded internally to the responsible department heads. We process your personal data for the purpose of your application for an employment relationship, insofar as this is necessary for the decision on the establishment of an employment relationship with us.

Furthermore, we may process personal data about you to the extent necessary to defend any legal claims asserted against us as a result of the application process.

Your data will generally be deleted 6 months after completion of the application process, unless otherwise agreed with the applicant (see, among other things, inclusion in the applicant pool). If your application is followed by employment, the data will be included in the personnel file.

How long will Your Data be Stored?

We store your personal data for as long as is necessary to make a decision about your application. If an application does not result in an employment relationship between you and us, we may continue to store data beyond this, insofar as this is necessary for the defense against possible legal claims. In this case, the application documents will be deleted 6 months after notification of the rejection decision, unless longer storage is required due to legal disputes.

Admission into the Applicant Pool

We are happy to include your application in an applicant pool. Your consent is required for this. You can give this consent by activating the corresponding option before sending your application.

If we do not currently have a suitable position for your application - for example, as part of a initiative application - we will be happy to include your application in an applicant pool. However, this requires your consent, which we will request from you in such a case.

If your application documents in the applicant pool are not used by us within one year, your application documents will be automatically deleted.

No Automated Decision-Making

There is no automated decision-making in individual cases, which means that the decision regarding your application is not based exclusively on an automated process.

Your Data Protection Rights

If affected by infringement of these laws, you are entitled to various rights, which we would like to inform you about in the following. Depending on the reason and type of processing of your personal data, you are entitled to the rights described in the following sections.

Your Right to Information

As an affected party, you have the right to find out from us whether we process personal data about you and - if so - which personal data we process about you.

You also have the right to request a copy of your personal data from us that is the subject of processing.

Your Right to Rectification

You have the right to request, without unreasonable delay, that we correct any of your personal data that you consider to be inaccurate.

You also have the right to request the completion of personal data that you consider incomplete

Your Right to Deletion

If the legal requirements are met, you can request the deletion of your personal data.

This is the case, for example, if we process your data based on your consent and you revoke it.

However, we may not delete data, for example, if we have to store it due to legal retention periods. We also cannot comply with your deletion request if it is necessary for us to process your personal data in order to assert, exercise or defend legal claims.

Your Right to Restriction of Processing

Under certain conditions, you as an affected party have the right to request for us to restrict the processing of your personal data.

One of these conditions is, for example, that you dispute the accuracy of your personal data. Or also the case in which we no longer need your personal data, but you need this data to assert, exercise or defend legal claims

Your Right to Objection

If we process your personal data, on the basis of a legitimate interest, you have the right to object to this processing, if this arises due to your particular personal situation.  However, this right of objection does not exist insofar as there is a compelling public interest in the processing which outweighs your interest, a legal provision obliges us to process or the processing serves the assertion, exercise or defense of legal claims.

If we use your personal data for direct marketing, then you have the right to object at any time to processing for the purpose of such marketing. If you object to processing for this reason, your personal data will no longer be processed for this purpose.

If we process your data with your consent, then you have the right to revoke your consent at any time regarding the future. Your revocation does not affect the lawfulness of the processing that took place until the revocation.

Your Right to Data Transferability

You only have this right with regard to personal data that you have provided to us yourself. You have the right to request that we transfer this personal data directly to another responsible party.

Alternatively, you have the right to request that we provide you with your data in a machine-readable format. However, this only applies if we process your personal data on the basis of your consent or on the basis of a contract and the processing is carried out with the help of automated processes.

Amendments

This data protection notice will be amended from time to time. These adjustments are made, for example, when changes occur due to technical progress, legal requirements or other influences.

Stand: 23.03.2023