Data Protection Statement

The following data protection statement applies to all services of WEBER GmbH.

We thank you for your interest in our company. The WEBER GmbH attaches great importance to data protection. Your personal data is collected and processed in accordance with the applicable data protection regulations, and in particular the EU General Data Protection Regulation (GDPR). This statement describes how and for what purpose your data is collected and used and what options you have related to your personal data. This statement may change. Please check the statement regularly for any changes. With your use of this website, you give your consent to the collection, use and transfer of your data in accordance with this data protection statement.

The controller responsible for the collection, processing and use of your personal data within the meaning of the GDPR is
WEBER GmbH
Wailandtstraße 6
63741 Aschaffenburg
Germany
Telefon +49 6021 3588-0
E-Mail service@webergmbh.de
Webseite www.webergmbh.de

Contact details of data security official:
Jörg Fay
WEBER GmbH
Wailandtstraße 6
63741 Aschaffenburg
Germany
Telefon +49 6021 3588-135
E-Mail datenschutzbeauftragter@webergmbh.de

If you wish to object to the collection, processing or use of your data by us pursuant to these data protection provisions as a whole or for individual measures, you can send your objection to the above address. You can print out or store this data protection statement at any time.

1. General use of the website

1.1. Access data
We collect information about you when you use this website. We automatically record information about your usage behaviour and your interaction with us and record data about your computer or mobile device. We collect, store and use data concerning every visit to this website (so-called server log files). The access data includes the name and URL of the file retrieved, the date and time of retrieval, the data volume transferred, report on successful retrieval (HTTP response code), browser type and browser version, operating system, referrer URL (i.e. the last visited website), IP address and the requesting provider. We use this log data without assigning it to your person and without creating a profile for statistical analyses for the purpose of the operation, security and optimisation of our website, for the anonymous recording of the number of visitors to our website (traffic) and the scale and nature of use of our website and services, to measure the number of clicks obtained by cooperation partners. On the basis of this information, we can provide personalised and location-related content and analyse the data traffic, to find and rectify errors and improve our services. We reserve the right to check the log data retroactively if there are clear grounds for justified suspicion of illegal use. We store IP addresses for a limited period in the log files, if this is necessary for security purposes or for the provision of a service. We also store IP addresses if we suspect a criminal act relating to the use of our website. We also store the data of your last visit in some cases (e.g. registration, login, clicking of links etc.).

1.2 E-mail contact
If you contact us (e.g. by contact form or e-mail), we store your details in order to reply to your enquiry and any follow-up questions. We delete the data in this context after the storage is no longer required. We only store additional personal data if you give your consent to this or if this is permitted by law without special consent.

1.3 Cookies
For purposes of quality assurance and expansion of the functionality of our website, we use on our website so-called cookies. These are text files that are stored on the user's computer. Cookies can be used to determine the number of page visits. We use this information solely to improve our website. A user can prevent the use of cookies by our website at any time by adjusting the settings of the internet browser used accordingly and permanently opt out from the use of cookies. In addition, cookies that have already been used can be deleted at any time. If the user deactivates the use of cookies, it may be the case that not all of the functions of our website will be fully available.

1.4 Integration of services and contents of third parties

Google Analytics

We use Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, text files which are stored on your computers and allow an analysis of the use of the website. The information produced by the cookie on the visitor's use of this website will be transmitted to and stored on a Google server in the USA. For more information on how to handle user data on Google Analytics, please refer to the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

We use the function "activation of IP anonymization" on this website. As a result, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website activity and internet usage.

The IP address provided by Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website You may also prevent data generated by the cookie and relating to your use of the website (including your IP address) being collected and processed by Google by downloading and installing the browser plugin available at the link: http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plugin or in browsers on mobile devices, you can click on the following link to set an opt-out cookie which will prevent data being collected by Google Analytics on this website in future (this opt out cookie only works in this browser and only for this domain. To delete the cookies in your browser, you have to click on this link again): Deactivate Google Analytics

Google Fonts

We integrate the fonts ("Google Fonts") provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/

Google ReCaptcha

We integrate the function to detect bots, e.g. when entry online forms ("ReCaptcha") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google Maps

We include maps from the Google Maps service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The processed data may include, in particular, users' IP addresses and location data, but these are not collected without their consent (usually as part of the settings of their mobile devices). The data can be processed in the USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Type kit fonts of Adobe

On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO), we use external type kit fonts of the provider Adobe Systems Software Ireland Limited, 4 -6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. Adobe is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).

1.5 Online presence in Social Media
We maintain online presence within social networks and platforms in order to communicate with customers, prospects and users active there and to inform them about our services. We point out that data of the users outside the area of the European Union can be processed. This may result in risks for the users because e.g. enforcement of user rights could be made more difficult. With respect to US providers certified under the Privacy Shield, we point out that they are committed to respecting EU privacy standards.

Furthermore, the data of the users are usually processed for market research and advertising purposes. Thus, e.g. user profiles are created from the user behavior and the resulting interests of the users. The usage profiles can in turn be used to e.g. Place advertisements inside and outside the platforms that are presumably in line with users' interests. For these purposes, cookies are usually stored on the computers of the users, in which the user behavior and the interests of the users are stored. Furthermore, in the usage profiles, data can also be stored independently of the used devices (in particular if the users are members of the respective platforms and logged in to them).

The processing of the personal data of users is based on our legitimate interests in an effective information of users and communication with users in accordance with. Art. 6 para. 1 lit. f. DSGVO. If the users are asked by the respective providers for a consent to the data processing (that is, explain their agreement, for example, by ticking a check box or confirming a button), the legal basis of the processing is Art. 6 para. a., Art. 7 GDPR.

For a detailed description of the relative processing and the possibilities of opt-out, we refer to the following linked information of the provider. Also in the case of requests for information and the enforcement of user rights, we point out that these can be claimed most effectively from the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. If you still need help, then you can contact us.

Facebook

(Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland)
Privacy Policy: https://www.facebook.com/about/privacy/
Opt-Out: https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Google / YouTube

(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
Privacy Policy: https://policies.google.com/privacy
Opt-Out: https://adssettings.google.com/authenticated
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Twitter

(Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
Privacy Policy: https://twitter.com/de/privacy
Opt-Out: https://twitter.com/personalization
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Activ

LinkedIn

(LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland)
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

Xing

(XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland)
Privacy Policy/Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung

1.6 Legal basis and storage duration
The legal basis of the data processing in accordance with the above paragraphs is Art. 6 Para.1 Letter f) GDPR. Our interest in data processing lies in particular ensuring the operation and security of the website, analysing the way the website is used by visitors and simplifying the use of the website. Unless otherwise is specifically stated, we only store personal data as long as necessary to fulfill the intended purposes.

2 Protection of the data of applicants, customers and suppliers

2.1 Customer contacts/customers
The data relating to customer contacts originates from information disclosed by themselves and personal contact. The data is used for the purpose of establishing business relations and customer service. The legal basis is provided by the contract initiation process. This data is only used internally. It is not transferred to third countries or international organisations. We process data relating to customer contacts so long as it is required for the fulfilment of our contractual purposes, to meet our legal obligations and for the contract initiation process.

2.2 Applicants
The data of applicants originates from the application documents and from external databases. The data is used for the purpose of application management in order to provide personnel for customer projects. The legal basis is provided by the regulation permitting data processing in the employment context. The recipients of the data are office-based employees and customers of the controller. It is not transferred to third countries or international organisations. The deletion deadline is 6 months after completion of the procession process. If an applicant gives his consent, his data will be stored for a further 24 months.

2.3 Suppliers
The data originates from offers made by suppliers by e-mail or through a cooperation network. The data is processed for the purpose of supplier management and the establishment of business relations. The legal basis is provided by the contract fulfilment and contract initiation process. The recipients of the data are office-based employees and customers of the controller. We process data relating to suppliers so long as it is required for the fulfilment of our contractual purposes, to meet our legal obligations and for the contract initiation process.

3. Your rights as a data subject

3.1 Your enquiry
Under the applicable laws you have various rights concerning your personal data. If you would like to exercise these rights, please send your enquiry by e-mail or post clearly identifying yourself to the address above. An overview of your rights is listed below.

3.2 Right to confirmation and information
You have at all times the right to receive confirmation from us about whether personal data concerning yourself is processed. If this is the case, you have the right to obtain from us free of charge information about the personal data stored concerning yourself together with a copy of this data. You also have the right to the following information:
  • The processing purposes
  • The categories of personal data which are processed
  • The recipients or categories of recipients to whom the personal data has been disclosed or is yet to be disclosed, in particular recipients in third countries or in international organisations
  • If possible, the planned length of time the personal data is to be stored, or if this is not possible, the criteria for determining this length of time
  • The existence of a right to correction or deletion of the personal data concerning yourself or the limitation of processing by the controller or a right to object to this processing
  • The existence of a right to complain to a supervisory authority
  • If the personal data is not collected from you, all available information about the origin of the data
  • The existence of automated decision-making including profiling according to Article 22 Paragraphs 1 and 4 GDPR and – at least in these cases– meaningful information on the logic involved and the consequences and intended effect of such processing for you
If personal data is transferred to a third country or an international organisation, you have the right to be informed of the suitable safeguards relating to the transfer pursuant to Article 46 GDPR.

3.3 Right to correction
You have the right to ask us to correct immediately incorrect personal data concerning yourself. Taking into account the purposes, you have the right to ask for the completion of incomplete personal data – including by means of a supplementary statement.

3.4 Right to deletion (“right to be forgotten”)
You have the right to ask us to delete immediately personal data concerning yourself, and we have to delete personal data immediately if one of the following reasons applies:
  • The personal data is no longer required for the purposes for which it was collected or otherwise processed.
  • You revoke your consent upon which the processing is based pursuant to Article 6 Paragraph 1 Letter a GDPR or Article 9 Paragraph 2 Letter a GDPR, and there is no other legal basis for the processing
  • You object to the processing pursuant to Article 21 Paragraph 1 GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Article 21 Paragraph 2 GDPR.
  • The personal data was processed unlawfully.
  • The deletion of the personal data is required to meet a legal obligation under Union law or the law of the member states which we are subject to.
  • The personal data was collected in relation to information society services pursuant to Article 8 Paragraph 1 GDPR.
If we have published personal data and are accordingly required to delete it, we will take appropriate measures, including of a technical nature, taking into account the available technology and implementation costs, to inform the persons responsible for the data processing that you have asked them to delete all links to this personal data or copies or replications of this personal data.

3.5 Right to limit the processing
You have the right to ask us to limit the processing if one of the following circumstances exists:
  • The correctness of the personal data is disputed by you, for a period of time which allows us to check the correctness of the personal data
  • The processing is unlawful and you rejected the deletion of the personal data and instead asked for the limitation of the use of the personal data
  • We no longer need the personal data for processing purposes, but you need the data to enforce, exercise or defend legal rights, or
  • You have objected to the processing pursuant to Article 21 Paragraph 1 GDPR, unless and until it is clear our company’s legitimate reasons override your own reasons.

3.6 Right to data portability
You have the right to receive the personal data concerning yourself that you have provided us in a structured, common and machine-readable format, and you have the right to transfer this data to another controller without any obstruction of us, if
  • The processing is based on consent pursuant to Article 6 Paragraph 1 Letter a GDPR or Article 9 Paragraph 2 Letter a GDPR or a contract pursuant to Article 6 Paragraph 1 Letter b GDPR and
  • processing is performed with the help of automated processes..
In exercising your right to data portability pursuant to Paragraph 1, you have the right to have the personal data transferred directly from one controller to another, where technically feasible.

3.7 Right to object
You have the right to object at any time for reasons relating to your particular situation to the processing of personal data concerning yourself which is performed on the basis of Article 6 Paragraph 1 Letters e or f GDPR; this also applies to profiling based on these provisions. We will no longer process the personal data, unless we can provide proof of compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the enforcement, exercising or defence of legal rights.

If personal data is processed by us for direct advertising purposes, you have the right to object at any time to the processing of personal data concerning yourself for the purpose of such advertising; this also applies to profiling, if it is related to such direct advertising. You have the right, for reasons relating to your particular situation, to object to the processing of personal data concerning yourself for scientific or historical research purposes or statistical purposes pursuant to Article 89 Paragraph 1 GDPR, unless the processing is required for the performance of a task in the public interest.

3.8 Automated decisions including profiling
You have the right not to be subject to a decision based exclusively on automated processing, including profiling, which produces legal effects concerning yourself or similarly significantly affects you.

3.9 Right to revoke consent required under data protection law
You have the right to revoke at any time any consent to the processing of personal data.

3.10 Right to complain to a controlling institution
You have the right to complain to a controlling institution, in particular in the member state of your place of residence, your place of work or the place of the alleged breach, if you are of the view that the processing of the personal data concerning yourself is unlawful.

4. Data security

We make every effort to guarantee the security of your data within the confines of what is permitted by the applicable data protection laws and what is technically possible. Your personal data is transmitted by us in encrypted form. This applies to your orders and to the customer login. We use the SSL (Secure Socket Layer) coding system, but point out that the transmission of data in the internet (e.g. communication by e-mail) may be subject to security vulnerabilities. It is not possible to protect data fully from access by third parties.
In order to protect your data, we maintain technical and organisational security measures which we update repeatedly to ensure that they are in keeping with the current state of technology. We do not guarantee that our service will be available at specific times; malfunctions, disruptions and failures cannot be ruled out. The servers used by us are backed up carefully on a regular basis.

5. Automated decision making

Automated decision-making based on the personal data collected does not take place.

6. Transfer of data to third parties
no transfer of data to non-EU countries

We use your personal data only within our company. If we use third parties in the fulfilment of contracts, personal data will only be transferred to these third parties to the extent that it is required for the respective service. If we outsource some parts of the data processing (“contract data processing”), we place the contract data processor under contract to use the personal data only in accordance with the requirements of the applicable data protection laws and to ensure that the rights of the data subject are protected. We do not transfer and do not plan to transfer data to bodies or persons outside of the EU.