Data protection statement

Dated 23 October, 2018

1. Privacy at a glance

General information

Our company places the greatest value on the protection of your personal data. We process this data occurs in strict adherence to the provisions of data protection legislation including the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (FDPA) and other legislation. The GDPR obliges us to provide you with the following information on the processing of your data.

Data collection on our website

Who is responsible for data collection on this website?
Data collection on this website is carried out by the website operator.
You can find his contact data in the Legal Notices section of this website.

How do we collect your data?

Some of your data is collected when you share it with us, e.g. via e-mail or in the course of order processing.

Other data is automatically collected by our IT systems when you visit our website. This includes technical data in particular (e.g. your Internet browser, operating system and the time you called up the website). This data is collected automatically as soon as you access our website.

What do we use your data for?

When you contact us with a request:
You can contact us with a request at any time. You can do this by telephone, letter, e-mail, fax or in person. If you transmit your data to us at this time, the following applies:
Personal data: Information you voluntarily share with us
Purpose of the processing: Processing your request
Legal basis: Article 6 Paragraph 1, Letter a of the GDPR
Recipient of the data:
– Management and internal departments
– Entities to which we forward the data at your request
Retention period:
The data is archived following the completion of processing. The data in the archive are deleted after 10 years.

Business partners (customers, suppliers, service providers etc.):
Most of our service providers nominate one of their employees as a contact to Saalemühle Alsleben GmbH and Dresden Mill. We process the contact data of these contact persons is processed as follows:
personal data:
– Names
– Company name and address
– Position, function
– Phone number, fax number
– E-mail address
Purpose of the processing: Discussion on services ordered/deliveries
Legal basis:: Article 6 Paragraph 1, Letter a of the GDPR
Data origin:
– Notification by the contact person himself
– Notification by a different office of the service-provider/supplier
Data recipient:
– Company management and internal departments
Retention period:
The data is archived following completion of the order. The data in the archive is deleted after 10 years. There is no obligation to pass on this data to others. Processing also is not absolutely necessary for the service/supply. The effort required for discussions would be disproportionately high without defined contact persons. The risk of misunderstandings would also be very high. For this reason, there is a legitimate interest in this processing.
Applicants
Please send us your application by e-mail.
When you apply with us, we process the following data about you:
Personal data: Data you send with the application
Purpose of processing: Decision about employment
Legal basis:
– Article 88 GDPR in conjunction with §26 of the Federal Data Protection Act
– Article 6, Paragraph 1, Letter a of the GDPR (consent to lengthy archiving of the documents)
Data recipient:
– Company management and internal departments Retention period:
– on employment: 10 years following the end of your employment with us
– no employment offer: 3 months following the negative decision (should you not consent to a longer retention period)
Processing the data is necessary for checking the possibility of employment. An employment contract is not possible without the provision of this data.
We follow the principle of data economy and minimisation here. Only data required for managing our business relationship is processed. The data is neither used for other purposes nor made accessible to others for their purposes.
We would like to point out that we will continue saving data of the type described above in future as this is absolutely necessary for handling our business processes.
As required by data protection legislation we will destroy data which we no longer require and for which there is no legal or commercial requirements for archiving.

What rights do you have with regard to your data?

With regard to this processing of your personal data, you have the following rights:
– Information about your personal data which has been saved (Art. 15 GDPR)
– Rectification of incorrect data (Art. 16 GDPR)
– Erasure if permitted by law (Art. 17 GDPR)
– Restriction of processing (Art. 18 GDPR)
– Receipt of your data in a structured, commonly used and machine-readable format (Art. 20 GDPR)
– Objection to processing (Art. 21 GDPR)
– Lodging a complaint with a supervisory authority (Art. 77 GDPR)
Some forms of processing are dependent on your consent (e.g. for processing a request to archive job applications for longer than 3 months).
In these cases, you have the right to withdraw consent at any time with effect for the future.

Analysis tools and tools of third-party providers

Only one so-called “session cookie” is set. This is required for technical reasons and is deleted again automatically by your browser when you leave our website. No other cookies are used.
Purpose of processing:
Operation of the website, evaluation of errors
Legal basis:
Article 6, Paragraph 1, Letter f of the GDPR
Data recipient: no
specific retention period: 3 months

2. General information and compulsory information

Data protection concept

We take the protection of your personal data very seriously. We treat your personal data in a confidential manner and in accordance with the provisions of data protection law and this Data Protection Statement.
Your personal data is saved and used solely for the purpose of communication and business with you. We follow the principle of data economy and minimisation here. The data is neither used for other purposes nor made accessible to others for their purposes.
Your data is protected from outside and unauthorised access by the framework of our technical and organisational measures. We take suitable technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction and unauthorised access by third parties. Our security measures are continually being improved in accordance with the latest technological developments.
We would like to point out that data transmission on the Internet (e.g. communication via e-mail) can exhibit security vulnerabilities. Seamless protection of data against access by third parties is not possible.

Note on the responsible entity

The entity responsible for data processing on the website is:
Saalemühle Alsleben GmbH, Bernburger Strasse 35b, D-06425 Alsleben
Tel. +49 (0) 34692 263 0, Fax +49 (0) 34692 263 50, Email: info@saalemuehle.de
Michael Gutting (General Manager)
Data Protection Officer
Anja Twietmeyer
Email: bds@saalemuehle.de

Withdrawal of consent to data processing

Some data processing procedures are only possible with your express consent. You can withdraw consent you have given at any time. No specific form is required for the notification sent to us by email. The legality of data processing up to the point of withdrawal remains unaffected by the withdrawal.

SSL or TLS encryption

For security purposes and to protect transmissions of confidential content such as orders and enquiries which you send to us, the website operator, this website uses SSL or TLS encryption. Encrypted connections can be identified by the address line of the browser changing from “http://” to “https://” and the lock symbol on the browser line.

When SSL or TSL encryption is activated, the data you transfer to us cannot be read by third parties.

Information, blocking and erasure

Within the scope of the applicable provisions of law you have the right to information, free of charge, on the personal data about you which we have saved, its origin and recipients, the purpose of data processing and, if applicable, the right to rectification, blocking and erasure of these data within a reasonable period of time. Please feel free to contact us at the address specified in the Legal Notices at any time in this regard and for any other questions you may have on personal data.

Objection to promotional e-mails

We hereby object to the use of contact data published in the Legal Notices obligation for the purpose of transmitting advertising and informational materials not expressly requested. The operators of the websites expressly reserve the right to take legal action in the event of unsolicited transmission of advertising information for example by the use of spam e-mails.

3. Data Protection Officer

Data Protection Officer required by law
We have appointed a Data Protection Officer for our Company.
Data Protection Officer
Anja Twietmeyer
Email: bds@saalemuehle.de

Data collection on our website

Cookies

Only one so-called “session cookie” is set. This is required for technical reasons and is deleted again automatically by your browser when you leave our website. No other cookies are used.
Purpose of processing:
Operation of the website, evaluation of errors
Legal basis:
Article 6 Paragraph 1, Letter f of the GDPR
data recipient: no
specific retention period: 3 months

Server log files

The provider of the website automatically collects and saves information in so-called server log files which are automatically sent to us by your browser . This includes:
Browser type and version
Operating system used
Referrer URL
Host name of the computer accessing our site
Time of server request
IP address
This data is not linked with other data sources.
The basis for data processing is Article 6, Paragraph 1, Letter b of the GDPR which permits the processing of data for the performance of a contract or pre-contractual measures.

Contact form

Should you send us requests using the contact form, your information – including the contact data specified by you there – in the request form is saved by us for the purpose of processing your request and in case of follow-up questions. We do not pass on this data without your consent.

You can withdraw this consent at any time. No specific form is required for the communication sent to us by email. The legality of data processing procedures up to the point of withdrawal remains unaffected by the withdrawal.

5. Plug-ins and tools

Google Web Fonts

This website uses so-called web fonts provided by Google for the standardised representation of fonts. When a website is accessed, your browser loads the required web fonts into the browser cache for the correct display of text and fonts.

For this purpose, the browser you are using must connect to Google servers. This notifies Google that our website was accessed from your IP address. The use of Google web fonts occurs in the interest of the uniform and attractive representation of our online offerings. This represents a legitimate interest within the meaning of Section 6, Paragraph 1, Letter f of the GDPR.

If your browser does not support web fonts, a standard font from your computer is used.

Google Maps

This website uses the Google Maps service over an API. This is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To utilise the functions of Google Maps, your IP address must be saved. This information is generally transferred to a server by Google in the USA and saved there. The provider of this website has no influence on this data transfer.

The Google Maps service is used in the interest of attractive presentation of our online offerings and the easy traceability of the locations specified by us on the website. This represents a legitimate interest within the meaning of Section 6, Paragraph 1, Letter f of the GDPR.

6. Visiting our site

Our facility grounds and locations which are especially sensitive with regard to product security are monitored by video. No other working areas are monitored. Persons visiting us are only recorded if they enter monitored areas. Saalemühle Alsleben GmbH and Dresdener Mühle have a legitimate interest (GDPR Article 6, Paragraph 1, Letter f) in exercising their domiciliary right and protecting themselves against deleterious influence on product security. Video monitoring is a necessary means for monitoring sensitive areas.