Data protection statement

Dated 23 October, 2018

1. Privacy at a glance

General information

Our company places the greatest value on the protection of your personal data. We process this data occurs in strict adherence to the provisions of data protection legislation including the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (FDPA) and other legislation. The GDPR obliges us to provide you with the following information on the processing of your data.

Data collection on our website

Who is responsible for data collection on this website?
Data collection on this website is carried out by the website operator.
You can find his contact data in the Legal Notices section of this website.

How do we collect your data?

Some of your data is collected when you share it with us, e.g. via e-mail or in the course of order processing.

Other data is automatically collected by our IT systems when you visit our website. This includes technical data in particular (e.g. your Internet browser, operating system and the time you called up the website). This data is collected automatically as soon as you access our website.

What do we use your data for?

When you contact us with a request:
You can contact us with a request at any time. You can do this by telephone, letter, e-mail, fax or in person. If you transmit your data to us at this time, the following applies:
Personal data: Information you voluntarily share with us
Purpose of the processing: Processing your request
Legal basis: Article 6 Paragraph 1, Letter a of the GDPR
Recipient of the data:
– Management and internal departments
– Entities to which we forward the data at your request
Retention period:
The data is archived following the completion of processing. The data in the archive are deleted after 10 years.

Business partners (customers, suppliers, service providers etc.):
Most of our service providers nominate one of their employees as a contact to Saalemühle Alsleben GmbH and Dresden Mill. We process the contact data of these contact persons is processed as follows:
personal data:
– Names
– Company name and address
– Position, function
– Phone number, fax number
– E-mail address
Purpose of the processing: Discussion on services ordered/deliveries
Legal basis:: Article 6 Paragraph 1, Letter a of the GDPR
Data origin:
– Notification by the contact person himself
– Notification by a different office of the service-provider/supplier
Data recipient:
– Company management and internal departments
Retention period:
The data is archived following completion of the order. The data in the archive is deleted after 10 years. There is no obligation to pass on this data to others. Processing also is not absolutely necessary for the service/supply. The effort required for discussions would be disproportionately high without defined contact persons. The risk of misunderstandings would also be very high. For this reason, there is a legitimate interest in this processing.
Applicants
Please send us your application by e-mail.
When you apply with us, we process the following data about you:
Personal data: Data you send with the application
Purpose of processing: Decision about employment
Legal basis:
– Article 88 GDPR in conjunction with §26 of the Federal Data Protection Act
– Article 6, Paragraph 1, Letter a of the GDPR (consent to lengthy archiving of the documents)
Data recipient:
– Company management and internal departments Retention period:
– on employment: 10 years following the end of your employment with us
– no employment offer: 3 months following the negative decision (should you not consent to a longer retention period)
Processing the data is necessary for checking the possibility of employment. An employment contract is not possible without the provision of this data.
We follow the principle of data economy and minimisation here. Only data required for managing our business relationship is processed. The data is neither used for other purposes nor made accessible to others for their purposes.
We would like to point out that we will continue saving data of the type described above in future as this is absolutely necessary for handling our business processes.
As required by data protection legislation we will destroy data which we no longer require and for which there is no legal or commercial requirements for archiving.

What rights do you have with regard to your data?

With regard to this processing of your personal data, you have the following rights:
– Information about your personal data which has been saved (Art. 15 GDPR)
– Rectification of incorrect data (Art. 16 GDPR)
– Erasure if permitted by law (Art. 17 GDPR)
– Restriction of processing (Art. 18 GDPR)
– Receipt of your data in a structured, commonly used and machine-readable format (Art. 20 GDPR)
– Objection to processing (Art. 21 GDPR)
– Lodging a complaint with a supervisory authority (Art. 77 GDPR)
Some forms of processing are dependent on your consent (e.g. for processing a request to archive job applications for longer than 3 months).
In these cases, you have the right to withdraw consent at any time with effect for the future.

Analysis tools and tools of third-party providers

When visiting our website, your surfing behaviour may be statistically analysed. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous. You can prevent the statistical analysis by making settings in your browser. You will find detailed information on this in the following data protection declaration.
You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.

2. General information and compulsory information

Data protection concept

We take the protection of your personal data very seriously. We treat your personal data in a confidential manner and in accordance with the provisions of data protection law and this Data Protection Statement.
Your personal data is saved and used solely for the purpose of communication and business with you. We follow the principle of data economy and minimisation here. The data is neither used for other purposes nor made accessible to others for their purposes.
Your data is protected from outside and unauthorised access by the framework of our technical and organisational measures. We take suitable technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction and unauthorised access by third parties. Our security measures are continually being improved in accordance with the latest technological developments.
We would like to point out that data transmission on the Internet (e.g. communication via e-mail) can exhibit security vulnerabilities. Seamless protection of data against access by third parties is not possible.

Note on the responsible entity

The entity responsible for data processing on the website is:
Saalemühle Alsleben GmbH, Bernburger Strasse 35b, D-06425 Alsleben
Tel. +49 (0) 34692 263 0, Fax +49 (0) 34692 263 50, Email: info@saalemuehle.de
Michael Gutting (General Manager)
Data Protection Officer
Anja Twietmeyer
Email: bds@saalemuehle.de

Withdrawal of consent to data processing

Some data processing procedures are only possible with your express consent. You can withdraw consent you have given at any time. No specific form is required for the notification sent to us by email. The legality of data processing up to the point of withdrawal remains unaffected by the withdrawal.

SSL or TLS encryption

For security purposes and to protect transmissions of confidential content such as orders and enquiries which you send to us, the website operator, this website uses SSL or TLS encryption. Encrypted connections can be identified by the address line of the browser changing from “http://” to “https://” and the lock symbol on the browser line.

When SSL or TSL encryption is activated, the data you transfer to us cannot be read by third parties.

Information, blocking and erasure

Within the scope of the applicable provisions of law you have the right to information, free of charge, on the personal data about you which we have saved, its origin and recipients, the purpose of data processing and, if applicable, the right to rectification, blocking and erasure of these data within a reasonable period of time. Please feel free to contact us at the address specified in the Legal Notices at any time in this regard and for any other questions you may have on personal data.

Objection to promotional e-mails

We hereby object to the use of contact data published in the Legal Notices obligation for the purpose of transmitting advertising and informational materials not expressly requested. The operators of the websites expressly reserve the right to take legal action in the event of unsolicited transmission of advertising information for example by the use of spam e-mails.

3. Data Protection Officer

Data Protection Officer required by law
We have appointed a Data Protection Officer for our Company.
Data Protection Officer
Anja Twietmeyer
Email: bds@saalemuehle.de

Data collection on our website

Cookies

The Internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for the analysis of your surfing behavior) are stored, these are treated separately in this privacy policy.

Server log files

The provider of the website automatically collects and saves information in so-called server log files which are automatically sent to us by your browser . This includes:
Browser type and version
Operating system used
Referrer URL
Host name of the computer accessing our site
Time of server request
IP address
This data is not linked with other data sources.
The basis for data processing is Article 6, Paragraph 1, Letter b of the GDPR which permits the processing of data for the performance of a contract or pre-contractual measures.

Contact form

Should you send us requests using the contact form, your information – including the contact data specified by you there – in the request form is saved by us for the purpose of processing your request and in case of follow-up questions. We do not pass on this data without your consent.

You can withdraw this consent at any time. No specific form is required for the communication sent to us by email. The legality of data processing procedures up to the point of withdrawal remains unaffected by the withdrawal.

5. Plug-ins and tools

Google Maps

This website uses the Google Maps service over an API. This is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To utilise the functions of Google Maps, your IP address must be saved. This information is generally transferred to a server by Google in the USA and saved there. The provider of this website has no influence on this data transfer.

The Google Maps service is used in the interest of attractive presentation of our online offerings and the easy traceability of the locations specified by us on the website. This represents a legitimate interest within the meaning of Section 6, Paragraph 1, Letter f of the GDPR.

6. Visiting our site

Our facility grounds and locations which are especially sensitive with regard to product security are monitored by video. No other working areas are monitored. Persons visiting us are only recorded if they enter monitored areas. Saalemühle Alsleben GmbH and Dresdener Mühle have a legitimate interest (GDPR Article 6, Paragraph 1, Letter f) in exercising their domiciliary right and protecting themselves against deleterious influence on product security. Video monitoring is a necessary means for monitoring sensitive areas.

7. Analytics and advertising

Google Analytics

This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.

IP anonymization

We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

Browser plugin

You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objecting to the collection of data

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.

For more information about how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Outsourced data processing

We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic data collection by Google Analytics

This website uses Google Analytics’ demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section “Refusal of data collection”.