Name and Address of the Controller

 

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

 

Suchy Textilmaschinenbau GmbH
Heidelbergstr. 13
07554 Korbußen
Germany

Tel.: +49 36602 134-0
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Website: www.suchy-textil.de

 

Name and Address of the Data Protection Officer

 

The controller’s data protection officer is:

 

ad hoc datenschutz GmbH
Im Bresselsholze 12
07819 Triptis

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Tel: 0365 527 862 30
Fax: 0365 527 862 59

 

General Information on Data Processing

 

Legal Basis for the Processing of Personal Data

 

In accordance with Art. 13 GDPR, we inform you of the legal bases for our data processing activities. Unless the legal basis is specifically stated in this privacy notice, the following applies:
The legal basis for obtaining consent is Art. 6(1)(a) in conjunction with Art. 7 GDPR. The legal basis for processing for the performance of our services and implementation of contractual measures as well as for responding to inquiries is Art. 6(1)(b) GDPR. The legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) GDPR. If the processing of your data is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not override the former interest, Art. 6(1)(f) GDPR serves as the legal basis for the processing. In the event that vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6(1)(d) GDPR serves as the legal basis.

 

Data Erasure and Storage Period

 

We adhere to the principles of data minimization pursuant to Art. 5(1)(c) GDPR and storage limitation pursuant to Art. 5(1)(e) GDPR. We store your personal data only for as long as is necessary to achieve the purposes stated here or as required by the retention periods provided for by law. Once the respective purpose no longer applies or once these retention periods have expired, the corresponding data will be deleted as quickly as possible.

 

External Links

 

This website may contain links to third-party websites or to other websites under our responsibility. If you follow a link to any website outside our responsibility, please note that these websites have their own privacy information. We assume no responsibility or liability for these external websites and their privacy notices. Therefore, before using these websites, please check whether you agree with their privacy policies.

External links can be recognized either by being displayed in a different color from the rest of the text or by being underlined. Your cursor will indicate external links when you move it over such a link. Your personal data is only transmitted to the destination of the link once you click on an external link. In particular, the operator of the other website receives your IP address, the time at which you clicked the link, the page on which you clicked the link, as well as other information that you can find in the privacy notices of the respective provider. 

Please also note that individual links may lead to data being transferred outside the European Economic Area. This could allow foreign authorities to access your data. You may not have any legal remedies against such data access. If you do not want your personal data to be transmitted to the link destination or even exposed to access by foreign authorities, please do not click any links. 

 

Rights of the Data Subject

 

As a data subject within the meaning of the GDPR, you have the option of asserting various rights. The rights of data subjects arising from the GDPR are the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority, and the right to data portability (Article 20).

 

Right to Withdraw Consent:

 

Some data processing operations are only possible with your express consent. You have the right to withdraw your consent at any time. However, the lawfulness of the data processing carried out until the withdrawal remains unaffected by this.

 

Right to Object:

 

If processing is based on Art. 6(1)(e) or (f) GDPR, you, as the data subject, may object at any time to the processing of personal data concerning you for reasons arising from your particular situation. This right also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR. Unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defense of legal claims, we will cease processing your data after your objection has been made.

If personal data is processed for direct marketing purposes, you also have the right to object at any time. The same applies to profiling insofar as it is related to direct marketing. In this case as well, we will no longer process personal data as soon as you object.

 

Right to Lodge a Complaint with a Supervisory Authority:

 

If you believe that the processing of personal data concerning you violates the GDPR, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

 

Right to Data Portability:

 

If your data is processed automatically on the basis of consent or for the performance of a contract, you have the right to receive this data in a structured, commonly used and machine-readable format. You also have the right to request the transfer and provision of the data to another controller, insofar as this is technically feasible.

 

Right of Access, Rectification and Erasure:

 

You have the right to obtain information about your processed personal data regarding the purpose of the data processing, the categories, the recipients, and the duration of storage. If you have questions on this subject or on other issues relating to personal data, you may of course contact us using the contact details provided in the legal notice.

 

Right to Restriction of Processing:

 

You may request the restriction of the processing of your personal data at any time. To do so, one of the following conditions must be met: 

• You contest the accuracy of the personal data. For the duration of the verification of the accuracy, you have the right to request restriction of processing.
• If processing is unlawful, you may request restriction of the use of the data as an alternative to erasure.
• If we no longer need your personal data for the purposes of processing, but you require the data for the establishment, exercise or defense of legal claims, you may request restriction of processing as an alternative to erasure.
• If you object to processing pursuant to Art. 21(1) GDPR, a balancing of your interests and ours will be carried out. Until this balancing has been completed, you have the right to request restriction of processing.

If processing has been restricted, the personal data may, apart from storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

 

Provision of the Website (Web Host)

 

When you access our website, we automatically collect and store information in so-called server log files. This information is automatically transmitted by your browser to our server or to the server of our hosting company.

This includes:

• IP address of the website visitor’s end device
• Device used
• Hostname of the accessing computer
• Visitor’s operating system
• Browser type and version
• Name of the retrieved file
• Time of the server request
• Amount of data
• Information on whether the retrieval of the data was successful
  
  

These data are not merged with other data sources.

Instead of operating this website on our own server, we may also have it operated on the server of an external service provider (hosting company). The personal data collected by this website are then stored on the servers of the hosting company. In addition to the data mentioned above, the web host also stores, for example, contact inquiries, contact details, names, website access data, meta and communication data, contract data, and other data generated via a website on our behalf.

The legal basis for processing these data is Art. 6(1)(f) GDPR. Our legitimate interest is the technically error-free presentation and optimization of this website. If the website is accessed in order to enter into contract negotiations with us or to conclude a contract, an additional legal basis applies (Art. 6(1)(b) GDPR).  In the event that we have commissioned a hosting company, a data processing agreement has been concluded with this service provider.

 

Use of Local Storage Items, Session Storage Items and Cookies

Our website uses local storage items, session storage items and/or cookies. Local storage is a mechanism that enables data to be stored within the browser on your end device. These data usually include user preferences, such as the “day mode” or “night mode” of a website, and remain stored until you manually delete the data. Session storage is very similar to local storage, except that the storage period only lasts for the current session, i.e. until the current tab is closed. After that, the session storage items are deleted from your end device. Cookies are pieces of information that a web server (server that provides web content) stores on your end device in order to identify that end device. They are either stored temporarily for the duration of a session (session cookies) and deleted after the end of your visit to a website, or stored permanently (permanent cookies) on your end device until you delete them yourself or until your web browser deletes them automatically.

These objects may also be stored on your end device by third-party companies when you enter our site (third-party requests). This enables us as the operator and you as the visitor of this website to use certain services provided by third parties that are installed on this website. Examples include the processing of payment services or the display of videos.

These mechanisms have a wide range of uses. They can improve the functionality of a website, control shopping cart functions, increase the security and convenience of website use, and perform analyses regarding visitor flows and behavior. Depending on their individual functions, they must be classified under data protection law. If they are necessary for the operation of the website and intended to provide certain functions (shopping cart function) or serve to optimize the website (e.g. cookies for measuring visitor behavior), their use is based on Art. 6(1)(f) GDPR. As the website operator, we have a legitimate interest in the storage of local storage items, session storage items  and cookies for the technically error-free and optimized provision of our services. In all other cases, local storage items, session storage items and cookies are only stored with your express consent (Art. 6(1)(a) GDPR).

Insofar as local storage items, session storage or cookies are used by third-party companies or for analysis purposes, we will inform you separately about this in this privacy notice. Your required consent will be requested and can be withdrawn at any time.

 

Consent Management

To comply with data protection requirements, we use a consent management tool on our website. With this tool, we obtain the necessary consents for the setting of cookies or the use of external services. The consents are stored.

The processing is necessary for compliance with a legal obligation to which the controller (operator of the website) is subject. Therefore, Art. 6(1)(c) GDPR is relied upon as the legal basis for processing.

 

Klaro

We use the Klaro service on our website. The provider of the service is KIProtect GmbH, Bismarckstr. 10-12, 10625 Berlin, Germany.

Since this service is hosted locally on the web server, no data is transferred to third parties.

 

Contact Form

Our website offers the possibility to contact us via a contact form. In particular, your contact details are required to get in touch with us through this form.

If you give your consent, the legal basis is Art. 6(1)(a) GDPR. This consent can be withdrawn at any time.

If you send inquiries regarding our products, services or our company, the processing is carried out for the purpose of contract performance or pre-contractual measures pursuant to Art. 6(1)(b) GDPR. In addition, a legitimate interest may exist in order to maintain business relationships or to respond to your inquiry for other reasons. In this case, the legal basis for processing your data would be Art. 6(1)(f) GDPR.

The data will be deleted once we have conclusively answered your inquiry and no other retention obligations prevent deletion.

Contact by Telephone or E-mail

In accordance with legal requirements, we have provided a telephone number and e-mail address on our website. The data transmitted via these channels are automatically stored by us in order to process corresponding inquiries or to contact the inquiring person. These data will not be passed on to third parties without your consent.

If contact is made by telephone or via our e-mail address for pre-contractual or contractual purposes, the processing of personal data is based on the legal basis of Art. 6(1)(b) GDPR. In all other cases of contact initiated by you, our processing of personal data is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

 

Applicant Pool

If no employment relationship is established, the applicant may be included in our applicant pool. In this case, all information from the application will be stored in order to be able to contact the person concerned regarding suitable job vacancies.

The storage of data in the applicant pool only takes place after consent has been given on the basis of Art. 6(1)(a) GDPR. This consent can be withdrawn at any time, whereupon the corresponding data will be deleted unless there are statutory reasons for retention. Deletion takes place no later than two years after consent has been given. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

 

Handling of Applicant Data

It is possible to send us an application (e.g. by post, online application form or e-mail). The personal data received in this way are stored and processed by us for the application procedure. 

The basis for the processing is Art. 6(1)(b) GDPR as well as Art. 6(1)(a) GDPR, provided that consent has been given. You may withdraw your consent at any time. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

If an employment relationship results from the application, the collected data will be stored for the execution of the employment relationship on the basis of Art. 6(1)(b) GDPR. If no employment relationship is established, the data will be stored on the basis of Art. 6(1)(f) GDPR for the duration of statutory claims, in particular due to discrimination in the application procedure. This is necessary for the defense against any lawsuits or allegations. If consent has been given, the data will be stored for a longer period on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time. The lawfulness of the processing carried out up until the withdrawal remains unaffected.

If no employment relationship is established, the applicant may be included in our applicant pool. In this case, all information from the application will be stored in order to be able to contact the person concerned regarding suitable job vacancies.

The storage of data in the applicant pool takes place exclusively after consent has been given on the basis of Art. 6(1)(a) GDPR. This consent can be withdrawn at any time, whereupon the corresponding data will be deleted unless there are statutory reasons for retention. Deletion takes place automatically no later than two years after consent has been given. The lawfulness of the processing carried out up until the withdrawal remains unaffected.