Privacy

Privacy Statement - Data Protection

Compliance with data protection laws is not only a legal obligation for sdp GmbH, but also an important factor in trust. With thefollowing data protection regulations we would like to inform youtransparently about the type, scope and purpose of the personal datacollected and processed from you within this website as well as yourrights.

Responsiblefor privacy protection/ processing entity is

sdp GmbH
Marie-Curie-Str. 12
85055 Ingolstadt
↗  Germany
+49 841 1380 68 - 0
Fax +49 841 1380 68 - 50
info@sdp.de

Geschäftsführer: Andreas Schüßler

Processing of your data as part of the services we provide

With our customers or business partners, or in the event that you are interested in our services, the type, scope and purpose of the processing of your personal data depend on the contractual or pre-contractual relationships that exist between us. We process personal data that we request from you or that you provide to us in order to answer your request, to make you an offer or to process your order. Affected persons are interested parties, business and contractual partners. The processing purpose is the processing of contractual services, communication, as well as answering contact inquiries and office and organizational procedures.

Unless otherwise stated in the further information in this data protection declaration, the processing of your data and its transfer to third parties is limited to the data required to answer your inquiries and / or to fulfill the contract, to safeguard our rights and to fulfill legal requirements.

Affected data are

  • Inventory data (e.g. names, addresses)
  • Payment data (e.g. bank details, invoices)
  • Contact details (e.g. email address, telephone number, postal address)
  • Contract data (e.g. subject of the contract, duration of the contract)

The legal basis for data processing is Art. 6 I 1 lit. b GDPR, the fulfillment of the contract or the fulfillment of pre-contractual inquiries.

We delete your personal data when we no longer need them, i.e. after the contractual relationship between us has ended, or after our legitimate interest in further processing of the data has ceased, or if you ask us to delete them. Mandatory statutory provisions - in particular statutory retention periods - remain unaffected. Likewise, to assert, exercise or defend legal claims from contractual relationships, or to protect the rights of another natural or legal person, it may be necessary to process your personal data until these deadlines have expired. We will delete the personal data required for this after these deadlines have expired. However, until these deadlines have expired, we limit the processing of this data to these purposes.

Accessing the website - processing of personal data and the type and purpose of use

When you call up our website you transmit (due to a technical necessity) data to our web server via your Internet browser. The following data are processed in the server log files during an ongoing connection for the communication between your internet browser and our web server:

  • Site, from where the file was requested - Referrer URL
  • the name of the requested file
  • the date and time of the request
  • a description of the type of web browser used / browser version and operating system
  • IP address of the requesting computer
  • access status (file transferred, file not found, etc.)
  • Transmitted data volume

For technical reasons (access to the website), this data are temporarily stored. It is not possible for us to draw any conclusions about individual persons based on this data. The IP addresses will be deleted or anonymized after 7 days at the latest.

The data is only evaluated for internal technical purposes and does not allow us to draw any conclusions about you personally. A comparison with other databases does not take place.

The data mentioned are processed for the following purposes:

  • ensuring a proper and smooth connection to the website,
  • ensuring comfortable use of the website,
  • evaluation of system security and stability of the website
  • for other administrative purposes.

The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. The legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally. You can visit our website without providing any personal information.

Data processing through contact via email, phone or fax

If you contact us by email or phone or fax, your request, including all personal data resulting from it (e.g. name, request) will be stored and processed by us for the purpose of processing your request. The data will not be passed on without your consent. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing your data.

This data is processed on the basis of Art. 6 Para. 1 lit. b GDPR, if your request is related to the fulfillment of a contract or is necessary for a pre-contract. In all other cases, processing is based on your consent (Art. 6 Para. 1 S 1 lit a GDPR) and / or on legitimate interests (Art. 6 Para 1 S 1 lit f GDPR).

The data you send to us via contact requests will be stored by us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - especially statutory retention periods - remain unaffected.

Contact form

If you send us a message via our contact form, you can also use a pseudonym instead of your real name. Entering an email address is necessary to enable us to contact you by email. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing your data.

The data you enter in the contact form will only be used by us to answer the contact in the context of your inquiry via the contact form. We do not pass on the data you enter in the contact form to third parties or use this data for any purposes other than to answer your request. The data processing takes place either for the purpose of fulfilling a contract to which the data subject is party, or for the implementation of pre-contractual measures (Art 6 I S 1 lit b GDPR), or according to Art. 6 Para. 1 S. 1 lit. a GDPR on the basis of your voluntarily given consent and / or on our legitimate interests (Art. 6 Para. 1 lit. f GDPR), as we have a legitimate interest in effectively processing the inquiries sent to us.

Your data will be deleted after your request has been processed, provided that the deletion does not conflict with any statutory retention requirements.

Data protection when sending application documents

If you send us your application documents, we will only use them to make a decision about your application and will not pass your data on to third parties. We would like to point out that when you send application documents by email, we currently do not offer any encryption of your data. However, you can send your systems to us encrypted using the 7ZIP program (http://www.7-zip.de/), for example, by email and provide us with your password separately, e.g. by telephone. You will receive an email message from us to your email address that your application has been received. You can also send us your application by post at any time.

Application data are stored and managed separately from other data records.
If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be automatically deleted no later than 6 months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests of the person responsible for processing or the applicant expressly requests that his application be saved and retained for a longer period of time, e.g. has consented for any subsequent contact with vacancies. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

The data processing for the purpose of establishing contact and processing your application data is carried out in accordance with Art. 6 Par. 1 S 1 lit. a, b GDPR on the basis of your voluntarily given consent, as well as for the implementation of pre-contractual measures.

Online presence in social networks

We have online presences in social networks for advertising purposes.
We would like to point out that you use the social services and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. sharing, rating).

If you visit our online presence in social media, personal data will be collected and processed by the respective provider for advertising and market research purposes. As a rule, usage profiles are also created here. This is particularly the case if you are a member of the respective platform and are logged in to it. The usage profiles can be used by the providers to show you interest-based advertising. In order to prevent social media operators from collecting information about you during your visit to our site, you should log out of the respective social medium before you start visiting our site and delete any existing social media cookies from your browser.

Social Network Links

No social plugins from Facebook or other social networks are integrated into this website. Therefore, no program code of a social network is active on our pages. The icons for Facebook etc. on our website are only linked images.

Data protection notice for online presence on Facebook / Instagram

Facebook Ireland (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland – “Facebook”) and the site administrator (I) are responsible for processing the personal data for the products included in the Terms of Use on the site administrator’s Facebook account that are processed in connection with a visit to or interaction with a page (including its content).

Products included are all Facebook Products, Facebook Pages, and Page Insights. Facebook products include Facebook itself (including the Facebook mobile app and the browser in the app), Messenger, Instagram (including apps like Direct and Boomerang), Portal branded devices, Bonfire, Facebook Mentions, Facebook Shops, Spark AR Studio, Audience Network, NPE Team Apps and any other feature, app, technology, software product, product or service offered by Facebook, Inc. or Facebook Ireland Limited. In addition, the Facebook business tools are also among the Facebook products.

The scope of joint processing and the addition for responsible parties includes the collection of the personal data specified in the Terms of Use for Covered Products and their transmission to Facebook. The subsequent processing of data by Facebook is not part of the joint processing. Likewise, it is not part of the joint processing if personal data is processed exclusively by the site administrator - in this case he is solely responsible for the data processing.

According to Article 13 I lit. a and b GDPR you can access the information required in Facebook's data policy at https://www.facebook.com/about/privacy . Further information on joint processing can be found in the respective terms of use for the specific products.

For the use of certain Facebook products (so-called "Facebook business tools") and the associated data processing, the additional agreement between us and Facebook as jointly responsible according to Art. 26 GDPR applies, which you can find at https://www.facebook.com/legal/controller_addendum .

The site administrator and Facebook have closed this addendum for data controllers to determine the respective responsibilities for the fulfillment of the obligations under GDPR with regard to joint processing (as set out in the Terms of Use for Covered Products).

Furthermore, we have agreed that between the parties Facebook is responsible for enabling the rights of data subjects in accordance with Articles 15-20 of the GDPR with regard to the personal data stored by Facebook after joint processing.

Data processing conditions on Facebook

We expressly point out that the use of certain Facebook products may involve the transmission of personal information to Facebook. Facebook Ireland Limited may also transmit EU data to Facebook Inc. in the USA for storage and further processing. By using Facebook products, the user agrees to Facebook's data processing conditions. You can find this at https://www.facebook.com/legal/terms/dataprocessing/update .
You can find the Facebook EU data transfer supplement at https://www.facebook.com/legal/EU_data_transfer_addendum
The Facebook data policy can be found at https://www.facebook.com/about/privacy/  - the Instagram data policy can be found at https://help.instagram.com/519522125107875  
Information about cookies and other storage technologies on Facebook can be found at https://www.facebook.com/policies/cookies/
You can view Facebook's data security conditions at https://www.facebook.com/legal/terms/data_security_terms.
You can find Facebook's terms of use for commercial use at https://www.facebook.com/legal/commercial_terms/update
You can contact the data protection officer of Facebook at https://www.facebook.com/help/contact/540977946302970.

More Information about Facebook Page Insights data

We expressly point out that the use of certain Facebook products may involve the transmission of personal information to Facebook. Facebook Ireland Limited may also transmit EU data to Facebook Inc. in the USA for storage and further processing. By using Facebook products, the user agrees to Facebook's data processing conditions. You can find this at https://www.facebook.com/legal/terms/dataprocessing/update .
You can find the Facebook EU data transfer supplement at https://www.facebook.com/legal/EU_data_transfer_addendum
The Facebook data policy can be found at https://www.facebook.com/about/privacy/  - the Instagram data policy can be found at https://help.instagram.com/519522125107875  
Information about cookies and other storage technologies on Facebook can be found at https://www.facebook.com/policies/cookies/
You can view Facebook's data security conditions at https://www.facebook.com/legal/terms/data_security_terms.
You can find Facebook's terms of use for commercial use at https://www.facebook.com/legal/commercial_terms/update
You can contact the data protection officer of Facebook at https://www.facebook.com/help/contact/540977946302970.

More Information about Facebook Page Insights data

Facebook continues to provide the page operator with so-called page insights for the Facebook page. Page insights data are aggregated data that gives the site administrator information on how users interact with the Facebook page. The legal basis for data processing is Art. 6 Para. I S. 1 lit. f GDPR – the legitimate interest is an optimized presentation of the website and effective communication with users.

The data processing takes place on the basis of an agreement between the jointly responsible persons in accordance with Art. 26 GDPR, which you can view at https://www.facebook.com/legal/terms/page_controller_addendum .
Further information on page insights data on Facebook can be found at https://www.facebook.com/legal/terms/information_about_page_insights_data and at https://www.facebook.com/help/instagram/155833707900388

Data processing when contact is made via Facebook products

We process personal data when you contact us e.g. via the contact form or via Messenger. These data are stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 Para. I S. 1 lit. f GDPR. Your data will be deleted after your request has been processed, provided that there are no statutory retention requirements.

Your rights

Facebook and we have agreed that Facebook is primarily responsible for providing you with information about the joint processing and for enabling you to exercise your rights under the GDPR. According to the GDPR, you have the right of information, correction, transferability and deletion of your data, as well as to object to the processing of your data and to restrict processing. You can find out more about these rights in your Facebook settings. For further information on your rights, see also under "Rights of the Data Subject" in this data protection declaration.
Facebook and we have agreed that the Irish Data Protection Commission will be the primary body responsible for overseeing the processing. You have the right to start a complaint with the Irish Data Protection Commission (see www.dataprotection.ie ) or with your local supervisory authority.

Right to object to advertising

Youcan object to the processing of your data for advertising purposes onFacebook at any time by changing your settings for advertisements inyour Facebook user account at https://www.facebook.com/settings?tab=ads.

Legal basis

We operate our Facebook / Instagram page for advertising our services. The processing of personal data takes place on the basis of Art 6 I S 1 lit f GDPR.

Data Security

On our website we use the SSL-process (Secure Socket Layer) in connection with the respective highest level of encryption supported by your browser. You can recognize if an individual page of our website is transmitted in an encrypted fashion by the locked depiction of the key or lock symbol in the lower status bar of your browser.

Apart from that we apply appropriate technical and organizational security measures in order to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved according to technological developments.

Google reCAPTCHA

For protection when submitting forms, we use the reCAPTCHA service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This is used to differentiate whether the input is made by a natural person or improperly through machine and automated processing. Your IP address and any other data required by Google for the reCAPTCHA service will be sent to Google. Your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. On behalf of the operator of this website, Google will use this information to evaluate your use of this service and to prevent spam. This represents a legitimate interest according to Art 6 I S 1. 1 lit f GDPR. The IP address transmitted by your browser as part of reCaptcha will not be merged with other data from Google.

You can view Google's data protection provisions at https://policies.google.com/privacy?hl=en.

Processing/ Disclosure of Data

A disclosure of your personal data towards third parties for purposes other than the ones mentioned above or below does not take place. We only pass on your data to third parties if:

  • you have given your explicit consent to it according to Art. 6 Par. 1 S. 1 lit a GDPR,
  • this is permitted by law and according to Art. 6 Par. 1 S. 1 lit. b GDPR necessary for the performance of a contract or for the performance of measures prior to entering into a contract with you,
  • in the case that according to Art. 6 Par. 1 S. 1 lit. c GDPR there is a legal obligation for us to do so,
  • if according to Art. 6 Par. 1 S. 1 lit. f GDPR processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Rights of the Data Subject

You have the right:

  • according to Art. 15 GDPR obtain information from us about the personal data on you we have processed.
  • according to Art. 16 GDPR request the immediate correction of incorrect data or the completion of your personal data stored by us;
  • according to Art. 17 GDPR request the erasure of your personal data stored by us insofar as the processing thereof is not necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of the public interest or the establishment, exercise or defense of legal claims;
  • according to Art. 18 GDPR obtain the restriction of processing of your personal data in as far as the accuracy of the data is contested by you, their processing is unlawful, but the erasure thereof opposed by you, and we no longer need the data, but you need them for the establishment, exercise or defense of legal claims, or according to Art 21 GDPR you have objected to the processing of the data;
  • according to Art. 20 GDPR to receive your personal data provided to us in a structured, commonly used and machine-readable format or to request their transmittal to another person responsible;
  • according to Art. 7 Abs. 3 GDPR withdraw their consent given to us at any time. This has the consequence that in the future we no longer have the right to process the data, once consented to;
    according to Art. 77 GDPR to lodge a complaint with a supervisory authority. In general you can turn to the supervisory authority at the place of your habitual residence or workplace or our place of business. A list of data protection officers as well as their contact data can be found under the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to Objection

You have the right to object to the processing of personal data pertaining to you taking place according to Article 6 Par. 1 lit e or f, due to reasons arising from your special situation. After objection by you we no longer process your personal data, except for the case in which we can prove compelling and legitimate reasons for the processing that outweigh your interests, rights or freedoms, or their processing serves the establishment, exercise or defense of legal claims.
If you want to make use of your right of objection an email to us suffices.

Changes to this Privacy Statement - Date

By developing our website and offers via the same further or due to changed legal or official requirements it can become necessary to make changes to this privacy statement in compliance with the applicable data protection regulations. The respective current privacy statement can at any time be called up by you on our website under Privacy Statement and printed out.

Dated: August 2021