Thank you for your interest in our company and in learning more about how we handle data. Data protection is a high priority for the management of Wendt Maschinenbau GmbH & Co. On this page, we will provide you with detailed information about the data that we use and how it is handled.
Data subjects are not able to make use of some of the services that our company offers via our website. To do so, you must contact us directly by telephone, e-mail, fax or post. If it is necessary to process personal data and no legal basis exists for such processing, we generally request the consent of the data subject.
Personal data, e.g. the name, address, e-mail address, or telephone number of a data subject is always processed in accordance with the General Data Protection Regulation and in compliance with the applicable country-specific data protection regulations. The intention of this data protection declaration is to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, this data protection declaration informs data subjects of their rights.
As the controller, Wendt Maschinenbau GmbH & Co KG has implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, absolute protection cannot be guaranteed, as it is always possible for Internet-based data transmissions to have security vulnerabilities. For this reason, every data subject is free to transmit personal data to us by alternative means, e.g. by telephone.
1. Definitions
This data protection declaration is based on the terms used by European regulators when issuing the General Data Protection Regulation (GDPR). Our data protection declaration is intended to be easy to read and understand for the public, as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.
This data protection declaration uses the following terms, among others:
a) Personal data
Personal data are any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). An identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) Data subject
A data subject refers to any identified or identifiable natural person whose personal data are processed by the controller.
c) Processing
Processing refers to any operation or set of operations performed on personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or linking, restriction, deletion or destruction.
d) Restriction of processing
Restriction of processing refers to the marking of stored personal data with the aim of limiting their future processing.
e) Profiling
Profiling refers to any automated processing of personal data consisting in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or change of location.
f) Pseudonymisation
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.
g) Controller or controller responsible for the processing ;
The controller or data controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.
h) Processor
A processor refers to a natural or legal person, public authority, agency or other body which processes personal data on behalf of controllers.
i) Recipient
A recipient refers to a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or this recipient is a third party. However, public authorities that may possibly receive personal data in the scope of a specific investigation under Union or Member State law are not considered to be recipients.
j) Third party
A third party refers to any natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who are authorised to process the personal data under the direct authority of the controller or the processor.
k) Consent
Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. ;
l) Newsletter
Newsletters are emails sent out regularly with customised information that are often sent to large distribution lists.
How data is handled at Wendt Maschinenbau:
Storage of access data
For technical reasons, our hosting provider stores anonymised IP addresses for 60 days. These are not further processed or analysed.
Use of provided personal data
Apart from the data listed below, our hosting provider does not store or analyse any other personal data when a user accesses our website. We do not analyse the data stored when our website is accessed, nor do we have any interest in storing or analysing it.
Cookies
“Cookies” are small files that are stored on users' computers. Different information can be stored in the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after their visit to a website. Temporary cookies, also known as "session cookies" or "transient cookies", are cookies that are deleted after a user leaves a website and closes their browser. The contents of a shopping basket in an online shop or a login status can be stored in such a cookie, for example. The term "permanent" or "persistent" refers to cookies that remain stored even after the browser is closed. A login status can be saved, for example, for several days after a user visits a website. The interests of users can also be stored in such cookies and used for marketing purposes or to track the range of advertising measures. Cookies from providers other than the controller who operates the website are offered as "third-party cookies". (otherwise, if only the controller’s cookies are used, they are referred to as "first-party cookies").
We may use temporary and persistent cookies.
If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Saved cookies can be deleted using the system settings of the user’s browser. Denying all cookies can restrict the function of a website. We do not use cookies for advertising or direct marketing purposes.
Cookie-Banner
We use the consent tool Cookie-Consent from team4media GmbH, hereinafter referred to as the "cookie banner", to request consent to process information about your device and personal data using cookies or other tracking technologies on our website.
You can use the cookie banner to consent to or reject the processing of information about your device and personal data using cookies or other tracking technologies for the purposes listed in the cookie banner. Such processing purposes may include integrating external elements, integrating streaming content, statistical analysis,measuring the range of advertising measures, customised product recommendations and targeted advertising.
You can use the cookie banner to give or refuse your consent for all (non-technically necessary) processing purposes.
Personal data and information about the devices you use are processed when you use the cookie banner. Your data will also be sent to Mittwald CM Service GmbH & Co KG (see Hosting). Information about the settings you have selected is also stored on your device.
The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. c) GDPR in conjunction with Art. 7 para. 1 GDPR, insofar as the processing serves to fulfil the legally standardised obligation to verify that consent has been granted. Otherwise, Art. 6 para. 1 sentence 1 lit. f) GDPR is the relevant legal basis. We have a legitimate interest in processing data in order to store user settings and preferences in relation to the use of cookies and to evaluate consent rates.
Enquiry by e-mail, telephone
If you contact us by e-mail or telephone, we will store and process your enquiry including all personal data (name, e-mail address, telephone number, enquiry) for the purpose of processing your request. We will not share this data without your consent.
If your enquiry concerns the performance of a contract or pre-contractual measures, your data will be processed on the basis of point (b) of Art. 6 (1) GDPR. In all other cases, the processing is based on our legitimate interest to effectively process enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested. You may withdraw your consent at any time.
We will store the data that you enter in the contact form until you request that we delete it, until you withdraw your consent store the data, or until the purpose for which your data was collected no longer applies (e.g. once your enquiry has been fully processed). We reserve the right to comply with mandatory legal provisions, particularly statutory retention periods.
Enquiry via contact form
If you contact us via the contact form, we will store and process your enquiry including all personal data (name, e-mail address, telephone number if applicable, content of the enquiry) for the purpose of processing your enquiry. We will not share this data without your consent. We use our own form blocks for the contact form. The data you enter will be sent to our general e-mail address.
If your enquiry concerns the performance of a contract or pre-contractual measures, your data will be processed on the basis of point (b) of Art. 6 (1) GDPR. In all other cases, the processing is based on our legitimate interest in effectively processing the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.
We will store the data that you enter in the contact form until you request that we delete it, until you withdraw your consent store the data, or until the purpose for which your data was collected no longer applies (e.g. once your enquiry has been fully processed). We reserve the right to comply with mandatory legal provisions, particularly statutory retention periods.
Application via contact form
If you would like to apply to our company using the contact form, we will store and process your enquiry including all personal data included in it (name, email address, content of the enquiry) for the purpose of processing your application. We will not share this data without your consent. We use our own form blocks for the contact form. The data you enter will be sent to our e-mail inbox for applications and careers.
If your enquiry concerns the performance of a contract or pre-contractual measures, your data will be processed on the basis of point (b) of Art. 6 (1) GDPR. In all other cases, the processing is based on our legitimate interest in effectively processing the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.
We will store the data that you enter in the contact form until you request that we delete it, until you withdraw your consent store the data, or until the purpose for which your data was collected no longer applies (e.g. once your enquiry has been fully processed). We reserve the right to comply with mandatory legal provisions, particularly statutory retention periods.
Use of OpenStreetMap
We use a map section from OpenStreetMap (www.openstreetmap.de) on our website. OpenStreetMap is an open source mapping tool. Your IP address will be forwarded to OpenStreetMap so that the map can be displayed. You can find out what data OpenStreetMap processes in the OpenStreetMap privacy policy . In this respect, OpenStreetMap is considered the controller responsible for data protection in accordance with Art. 4 No. 7 GDPR.
Storage of access, FTP, error and mail logs
Our hosting provider records the access logs of the web servers to determine which pages were accessed at what time. This includes the following data: IP, directory protection user, date, time, pages accessed, logs, status code, browser, operating system, data volume, referrer, user agent, host name accessed.
The IP addresses are stored in anonymised form. To do so, the last three digits are removed, i.e. 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymised. The anonymised IP addresses are stored for 60 days. Information on the directory protection user used is anonymised after one day.
Links to other websites
Our website may contain links to other websites.
Personal data of data subjects
As part of our business relationship, you must provide the personal data necessary to establish and carry out a business relationship and to fulfil the associated contractual obligations, or the data that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude your contract or execute your order, or we will no longer be able to fulfil an existing contract and may have to terminate it. This data is not collected via our website, but rather in writing or by email.
Automated decision-making
We do not currently use automated decision-making in accordance with Art. 22 GDPR to establish and conduct business relationships. We do not make use of “profiling”. We use Google Tag Manager.
Newsletter
Wendt Maschinenbau does not generate or send newsletters.
Your questions and suggestions on the subject of data protection are very welcome and important to us. You can reach us at the following address: datenschutz@wendt-maschinenbau.de
Your right to object in accordance with Article 21 GDPR
Individual right of objection
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data carried out based on Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.
If you file an objection, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless your data is being processed for the establishment, exercise or defence of legal claims.
Right to object to the processing of data for direct marketing purposes
We do not process personal data for the purpose of direct marketing.
Recipient of the objection
Should you nevertheless wish to object to the collection or processing of your data by Wendt Maschinenbau which, as described, does not take place via our website, you can submit your objection in any form with the subject "Objection", stating your name and address. Your objection should be addressed to:
Wendt Maschinenbau GmbH & Co. KG
Oeseder Strasse 1, 49124 Georgsmarienhütte
+49 5401 86050 / 8605-11 Fax
datenschutz@wendt-maschinenbau.de
Data Protection Officer:
Ingenieurbüro Derschewsky GbR
E-Mail: datenschutz@ib-derschewsky.de
Internet: www.ib-derschewsky.de
Right to lodge a complaint with the competent supervisory authority
If the provisions of the GDPR are ever breached, you have the right to lodge a complaint with a data protection supervisory authority, particularly in the Member State of your habitual place of residence / work or the location of the alleged breach. Even after lodging a complaint, you reserve the right to seek other forms of administrative or judicial remedy.
Right to data portability
If we are processing your data by automated means on the basis of your consent or for the performance of a contract, you may ask for this data to be returned to you or transferred to a third party in a commonly used, machine-readable format. If you ask for your data to be transferred directly to another controller, we will only be able to honour your request if it is technically feasible.
SSL and TLS encryption
This site uses SSL and TLS encryption to ensure security and protect the transmission of sensitive data, such as any orders or enquiries that you send to the website operator. You can tell whether an encrypted connection has been established, as your browser’s address bar will have changed from “http://” to “https://” and a padlock symbol will be displayed in your browser bar.
If SSL or TLS encryption is enabled, third parties will not be able to intercept any data you send us.
Information, deletion and correction
In accordance with the applicable legal provisions, you have the right to obtain free information on your stored personal data, as well as its source, recipients and the purpose of processing at any time; if applicable, you may also request the rectification or erasure of your data. You can contact us at any time if you have further questions on the subject of personal data.
Right to the restriction of processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. You may request the restriction of processing in the following cases:
If you dispute the accuracy of the personal data we hold on you, it will usually take some time for us to process your request. While we check the accuracy of your personal data, you may request the restriction of processing.
If the processing of your personal data is or has been unlawful, you may opt against the erasure of your data and request the restriction of processing instead.
If we no longer require your personal data but you need it for the establishment, exercise or defence of legal claims, you may opt against the erasure of your data and request the restriction of processing instead.
If you have objected to data processing in accordance with Art. 21 (1) GDPR, a balance must be struck between your legitimate interests and ours. If it is not yet clear whose interests prevail, you may request the restriction of the processing of your personal data.
If the processing of your personal data has been restricted, it may only be processed (with the exception of storage) with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a Member State.
Analytic tools and advertising
Google Tag Manager
We use Google Tag Manager.The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that we can use to integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google's parent company in the United States.
We use Google Tag Manager on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the fast and simple integration and management of various tools on its website. If consent has been requested in this respect, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Sec. 25 of the Telecommunications Digital Services Data Protection Act, insofar as the consent includes the storage of cookies or access to information in the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. You may withdraw your consent at any time.
Our social media presence
Data processing by social networks
We have various public profiles on social networks. You can find each of the social networks we use further below.
Whenever you visit a social media website like Facebook, Twitter, etc. or a website with integrated social media content (e.g. “Like” buttons or advertising banners), the social media provider will usually be able to comprehensively analyse your user behaviour. Visiting our social media presences triggers numerous processing operations that are relevant in terms of data privacy. In detail:
If you visit one of our social media pages while you are logged in to your account with the relevant social network, the operator of the social media portal will be able to see that you have visited our page via your user account. However, your personal data may also be recorded even if you are not logged in or if you do not have an account with the relevant social media provider. In such cases, your data may be collected by storing cookies on your device or by recording your IP address.
The operators of the social media portals will be able to use the data collected in this way to create user profiles containing your preferences and interests. As a result, they will be able to show you targeted advertising both on and outside of the relevant social media page. If you have an account with the social network, the operator will be able to display targeted advertising on all devices in which you are or have been logged in.
Please also note that we cannot keep track of all processing operations on social media portals. Depending on the provider, additional processing operations may also be carried out by the operators of the social media portals. You can find more details in each social media portal’s terms of use and privacy policy.
Legal basis
Our social media presence is designed to ensure the most comprehensive online presence possible. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analytic processes initiated by the social networks may have a different legal basis in each case, which must be specified by the social network operators (e.g. consent pursuant to point (a) of Art. 6 (1) GDPR).
Responsible party and assertion of rights
If you visit one of our social media sites (e.g. LinkedIn), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can exercise your rights (access, rectification, erasure, restriction of processing, data portability and complaint) either against us or against the operator of the relevant social media portal (e.g. LinkedIn).
Although we are jointly responsible alongside the social media portal operators, please note that we do not have full control over the data processing operations carried out by the social media portals. Our capabilities are largely based on each provider’s company policy.
Retention period
The data collected directly by us via the social media presence will be deleted from our systems as soon as you ask us to delete it or revoke your consent to storage, or as soon as the purpose for which the data was stored no longer applies. The cookies stored on your device will remain there until you delete them. We reserve the right to comply with mandatory legal provisions, particularly retention periods.
We have no control over the amount of time for which the social network operators will store your data for their own purposes. For more details on this, please refer to the information provided by the operators of the social networks (e.g. their privacy policy, see below).
Social networks in detail
LinkedIn
We have a profile LinkedIn. This is a service provided by LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland). LinkedIn uses advertising cookies.
If you would like to disable LinkedIn advertising cookies, please click on the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data is transferred to the USA based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs.
For more information on how your personal data will be used, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.
Youtube
We operate a "YouTube channel" to draw attention to our services and to interact with our customers and visitors to the YouTube channel (hereinafter referred to as "users"). Personal data is processed when you use our YouTube channel. In the following section, we inform you about the type and scope of data processing for which we are responsible under data protection law in this context.
The YouTube channel is accessible via the YouTube platform (www.youtube.com) ), which is operated in the European Union by
Google Ireland Limited („Google“)
Gordon House Barrow Street Dublin 4 Irland
We ourselves are responsible under data protection law for some of the data processing carried out on the YouTube account.
When you visit the YouTube account or other pages of the YouTube platform, Google collects usage data. Google uses certain data that it has collected from users of the YouTube platform (e.g. which videos users watch) to create aggregated usage statistics and make them available to the respective operators of the YouTube profile (so-called "YouTube Analytics"). We also receive such aggregated usage statistics. The information we receive from YouTube Analytics does not allow us to draw any conclusions about individual users. We do not have access to the personal data that Google processes for the purpose of YouTube Analytics. Google alone determines which data is processed for YouTube Analytics and how. We have no legal or actual influence on this processing by Google. Google is solely responsible for this data processing. Google provides information on this in the Google Privacy Policy.
If you contact us via the YouTube account, e.g. by commenting on a video, we will process your data (e.g. your name and the content of the communication) in order to handle your request. Where necessary, we also process your data to assert legal claims and defend our company in legal disputes as well as to prevent and investigate criminal offences. The processing is carried out on the basis of a balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, which always takes your interests into account.
We do not store any personal data about your use of the YouTube account. Google stores information that you publish on your YouTube account (e.g. comments on videos) on the basis of your user relationship, and you can delete it there yourself.
When we communicate with you via our YouTube account, we transmit the personal data required for this purpose to Google. Otherwise, we will only pass on your personal data to third parties if you have consented to this, if there is a legal basis for this or if this is necessary to enforce our rights, in particular to enforce or defend claims.
We do not transfer personal data collected via our YouTube account to third countries (i.e. countries outside the European Union and the European Economic Area). We have no influence over whether Google processes personal data in third countries within its area of responsibility and transfers it to Google LLC in the USA, for example.
Instagram & Facebook
We operate Instagram and Facebook profiles to publicise our services and to interact with our customers and visitors to these profiles (hereinafter referred to as "users"). Personal data is processed when you use our Instagram and Facebook profiles. In the following section, we inform you about the type and scope of data processing for which we are responsible under data protection law in this context.
Our Instagram and Facebook profiles are accessible via the respective platforms, which are operated in the European Union by
Meta Platforms Ireland Limited
Merrion Road Dublin 4
Dublin
We are responsible for some of the data processing carried out on our Instagram and Facebook profiles under data protection law.
When you visit our Instagram or Facebook profiles or other pages of the respective platform, Meta collects usage data. Meta uses certain data that it has collected from users of the platforms (e.g. which posts users view or which content they interact with) to create aggregated usage statistics and make them available to the respective operators of the profiles (so-called "insights"). We also receive such aggregated usage statistics. The information we receive through Insights does not allow us to draw any conclusions about individual users. We do not have access to personal data that Meta processes for these statistics. Meta alone determines which data is processed and how. We have no legal or actual influence on the processing by Meta. Meta is solely responsible for this data processing. Meta provides information on this in the Meta data protection policy.
If you contact us via our Instagram or Facebook profiles, e.g. by commenting on a post or sending us a message, we will process your data (e.g. your name and the content of the communication) in order to handle your inquiry. Where necessary, we also process your data to assert legal claims and defend our company in legal disputes as well as to prevent and investigate criminal offences. The processing is carried out on the basis of a balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, which always takes your interests into account.
We do not store any personal data about your use of our Instagram and Facebook profiles. Information that you publish on our profiles (e.g. comments or messages) is stored by Meta on the basis of your user relationship and can be deleted there by you.
If we communicate with you via our Instagram or Facebook profiles, we transmit the personal data required for this purpose to Meta. Otherwise, we will only pass on your personal data to third parties if you have consented to this, if there is a legal basis for this or if this is necessary to enforce our rights, in particular to enforce or defend claims.
We do not transfer personal data collected via our Instagram or Facebook profiles to third countries (i.e. countries outside the European Union and the European Economic Area). We have no influence on whether Meta processes personal data in third countries within its area of responsibility and transfers it to Meta Platforms, Inc. in the USA, for example.
Further information
If you require information that this data protection declaration cannot provide or if you require further information on a specific point, please contact our data protection officer. They will be happy to help you.
