We process users' personal data (hereinafter referred to as “data”) only if this is necessary for the provision of a functional and user-friendly website and of our content and services.
“Processing” refers to collection, use, forwarding and/or storage. Under the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “personal data” refers to all data by means of which a natural person can be identified. The precise definitions of the terms are set out in Article 4 GDPR.
The statements below inform you in particular of the nature, scope, purpose, duration and legal basis of the processing of personal data; we, alone or in conjunction with others, decide on the purposes and means of processing of said data, and on the components of third parties that may be used by us for optimisation and quality of use and process data under their own responsibility:
The controller (hereinafter referred to as the “provider”) as defined by the GDPR and other national data protection legislation of the member states as well as other data protection regulations is:
Volmary GmbH
Kaldenhofer Weg 70
D-48155 Münster
Tel.: +49 (0)251-270 70-100
Fax: +49 (0)251-270 70-270
E-Mail: info(at)volmary.com
The data protection officer of the controller is:
Christian Westkemper
Kaldenhofer Weg 70
48155 Münster
Tel.: +49 (251) 27070 100
E-Mail: datenschutz(at)volmary.com
With regard to the processing of their personal data carried out by the provider and described below, the user has the right,
1. to request confirmation of whether the data relating to them will be processed and to request precise information on these data as well as further information and copies of the data as per Article 15 GDPR;
2. to request immediate rectification of incorrect data concerning them or completion of said data as per Article 16 GDPR;
3. to request that the data relating to them are erased immediately as per Article 17 GDPR, or alternatively, for example if further processing as per Article 17(3) GDPR is required, to request restriction of processing of the data in accordance with Article 18 GDPR;
4. to receive the personal data concerning them which they have provided in accordance with Article 20 DSGVO, and to request that said data be transmitted to other controllers;
5. to lodge a complaint with the supervisory authority as per Article 77 GDPR if the user considers that processing of their data by the provider infringes the GDPR.
If no detailed information is subsequently provided regarding the individual data processing operations, the user's data processed by the provider shall be deleted or blocked as soon as the storage purpose ceases to apply and no statutory storage obligations stand in the way of erasure.
For communication and security reasons, data such as those listed below are collected during the visit to the website and are sent by the user's web browser to the provider or the provider's web space provider (server log files):
a) Session cookies/persistent cookies
The provider uses cookies on its website. Cookies are small text files or other storage technologies that the user's web browser deposits and stores on the terminal. These cookies process specific information of the user, such as browser and location data and IP address values, to an individual extent.
Processing allows the provider to make its website more user-friendly, effective and secure. For instance, if applicable, processing of session cookies enables reproduction of the content in different languages or use of a shopping-basket function.
Persistent cookies allow the website to recognise the user via their browser on a regular visit to the website.
If personal data is processed by these cookies for the purpose of contract initiation or contract execution, the legal basis for processing is Article 6(1)(b) GDPR.
If processing is not intended for contract initiation or contract execution, processing serves the provider's legitimate interest in improving the functioning of the website and is based on the legal basis of Article 6(1)(f) GDPR.
The session cookies are erased when the user closes their browser. The persistent cookies are automatically erased after a period stipulated by the provider. This period differs depending on the cookie, but shall not exceed one year.
If the user makes contact with the provider via contact form or e-mail, the user's personal data entered in this instance shall be used for processing of the request. The data content is essential to a response to the request; only a partial response or no response at all is possible without provision of the data.
If the contact request serves the purpose of fulfilling a contract or implementing precontractual measures, the legal basis is Article 6(1)(b) GDPR.
The user's data shall be erased if the user's request has been definitively answered and no statutory storage obligations stand in the way of this, e.g. in the event of subsequent contract execution.
Consent from the user can also be a legal basis as per Article 6(1)(a) GDPR. In the context of the contact form, if applicable, the user's consent to the aforementioned processing shall be obtained and this privacy policy shall be referred to.
The user can withdraw granted consent for the contact request at any time under Article 7(3) GDPR by notifying the provider. The data processed in connection with this shall be erased as soon as processing thereof is no longer required.
In the event of digital applications, we shall electronically collect and process the application data for the purpose of handling the application process.
The legal basis for processing is Article 26(1) sentence 1 of the German Federal Data Protection Act (BDSG) in conjunction with Article 88(1) of the General Data Protection Act (GDPR).
If your application results in conclusion of an employment contract, the transmitted data may be stored in the personnel file for the purpose of the customary organisational and administrative process, with due consideration of the relevant statutory regulations.
The legal basis for processing is Article 26(1) sentence 1 BDSG in conjunction with Article 88(1) GDPR.
If the job application is rejected, the transmitted data shall be automatically erased two months after notification of rejection. This shall not apply if a longer storage period of two to four months or conclusion of legal proceedings is necessary on the basis of statutory requirements (burden of proof under the German General Equal Treatment Act, AGG).
The legal basis here is Article 6(1)(f) GDPR and Section 24(1) no. 2 BDSG. The legitimate interest of the provider consists of legal defence.
If consent has been expressly given for storage of the data for a longer period in a database of interested parties, the data shall be processed further on the basis of said consent.
The legal basis is Article 6(1)(a) GDPR. Consent relating to this can be withdrawn for the future at any time under Article 7(3) GDPR by notifying the provider.