Data protection and security are very important to us. Therefore, we take the protection of your personal data very seriously. In connection with your visit to our websites, data is collected and processed. This is always done in accordance with the relevant regulations and laws. Our data protection declaration informs you about the type, scope and purpose of the processing of your personal data. With regard to the terms used in the following, such as "processing" or "controller", we refer to the definitions in Art. 4 of the EU General Data Protection Regulation (GDPR) and the explanations below.
Terms used
- Personal data means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- Processing is any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and includes virtually any handling of data.
- Pseudoanonymization the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
- Profiling any type of automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.
- The controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
- Processor a natural or legal person, public authority, agency or other body that processes personal data on behalf of the Controller.
Responsible
Arwed Löseke Papierverarbeitung und Druckerei GmbH
Industriestr. 1
31135 Hildesheim
Managing Director
Ariane Löseke
Contact details
Phone: +49 (0) 5121 / 7610 - 0
Fax: +49 (0) 5121 / 7610 - 91
E-mail: zentrale[at]loeseke.de
Contact on the subject of data protection
E-mail: datenschutz[at]loeseke.de
Relevant legal basis
In accordance with Art. 13 DS-GVO, we inform you about the legal basis of our data processing. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 DS-GVO, the legal basis for processing to fulfill our services and carry out contractual measures and respond to inquiries is Art. 6(1)(b) DS-GVO, the legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) DS-GVO, and the legal basis for processing to protect our legitimate interests is Art. 6(1)(f) DS-GVO. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) DS-GVO serves as the legal basis.
Security measures
We take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk in accordance with Article 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons.
The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access to, entry into, disclosure of, assurance of availability of and segregation of the data. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, deletion of data, and response to data compromise. Furthermore, we already take the protection of personal data into account during the development and selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Article 25 of the GDPR).
Cooperation with processors and third parties
Insofar as we disclose data to other persons and companies (order processors or third parties) in the course of our processing, transmit it to them or otherwise grant them access to the data, this shall only be done on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as to payment service providers, is necessary for the performance of the contract pursuant to Art. 6 (1) lit. b DS-GVO), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data on the basis of a so-called "order processing agreement", this is done on the basis of Art. 28 DS-GVO.
Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure, or transfer of data to third parties, this will only occur if it is done to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or allow the processing of data in a third country only if the special requirements of Art. 44 et seq. DS-GVO are met. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection that corresponds to the EU (e.g. for the USA by the "EU-US Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "EU standard contractual clauses").
Rights of the data subjects
- Right to information
In accordance with Art. 15 DS-GVO, you as the data subject have the right to receive information free of charge about what data Arwed Löseke Papierverarbeitung und Druckerei GmbH has stored about you. - Right to surrender the data
Pursuant to Art. 20 (1b) and (2) DS-GVO, you may demand the surrender of the data stored about you in machine-readable form. - Right of revocation
You have the right to revoke given consent in accordance with Art. 7 (3) DS-GVO with effect for the future at any time. The revocation of consent does not affect the lawfulness of the personal data processed until the revocation. - Right of objection
You may object to the processing of data concerning you in accordance with Art. 21 DS-GVO. - Right to completion and/or correction
You have according to. Art. 16 DS-GVO the right to demand the completion of the data concerning you or the correction of the incorrect data concerning you. - Right to deletion
Pursuant to Art. 17 DS-GVO, you have the right, insofar as there are no (longer) any legal or contractual obligations on the part of Arwed Löseke Papierverarbeitung und GmbH to store your data, to demand that the data concerned be deleted without delay - alternatively, you may demand restriction of the processing of the data in accordance with Art. 18 DS-GVO. - Right of complaint
In the event of possible violations of data protection regulations, you have the right to file a complaint with the competent supervisory authority pursuant to Art. 77 DS-GVO.
Competent supervisory authority
The State Commissioner for Data Protection of Lower Saxony
Prinzenstr. 5
30159 Hanover
Phone: +49 (0) 511 / 120-4500
Fax: +49 (0) 511 / 120-4599
E-Mail:
Deletion of data by the processor
The data processed by us will be deleted or restricted in its processing in accordance with Articles 17 and 18 DS-GVO. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.
According to legal requirements in Germany, data is stored in particular for 10 years in accordance with §§ 147 para. 1 AO, 257 para. 1 nos. 1 and 4, para. 4 HGB (books, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and 6 years in accordance with § 257 para. 1 nos. 2 and 3, para. 4 HGB (commercial letters).
Data protection information in the application process
We process applicant data only for the purpose of and within the scope of the application procedure in accordance with legal requirements. Applicant data is processed for the fulfillment of our (pre)contractual obligations within the scope of the application procedure in accordance with Art. 6 para. 1 lit. b. DS-GVO Art. 6 para. 1 lit. f. DS-GVO insofar as the data processing becomes necessary for us, e.g. in the context of legal procedures (in Germany, Section 26 BDSG NEW also applies).
The application procedure requires applicants to provide us with applicant data. The necessary applicant data results from the job descriptions. In principle, this includes personal details, postal and contact addresses and the documents belonging to the application, such as cover letter, CV and certificates. In addition, applicants may voluntarily provide us with additional information.
By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in the manner and to the extent set out in this privacy policy.
Insofar as special categories of personal data within the meaning of Art. 9 (1) DS-GVO are voluntarily communicated within the scope of the application procedure, their processing is additionally carried out in accordance with Art. 9 (2) lit. b DS-GVO (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 (1) DS-GVO are requested from applicants as part of the application process, their processing is additionally carried out in accordance with Art. 9 (2) a DS-GVO (e.g. health data, if this is necessary for the exercise of the profession).
Applicants can send us their applications by e-mail. However, please note that e-mails are generally not encrypted and applicants must ensure encryption themselves. Therefore, we cannot assume any responsibility for the transmission path of the application between the sender and the receipt on our server. We therefore recommend sending us applications by post. Applications received by e-mail will only be transmitted in encrypted form during all necessary in-house forwarding in accordance with the state of the art.
In the event of a successful application, the data provided by applicants may be processed by us for the purposes of the employment relationship. Otherwise, if the application for a job offer or a speculative application is not successful, the applicants' data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.
Subject to a justified withdrawal by the applicants, the deletion will take place after the expiry of a period of six months so that we can answer any follow-up questions about the application and satisfy our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses will be archived in accordance with tax law requirements.
Contact e-mail contact/telephone
When contacting us (e.g. by e-mail or telephone), the user's details are processed for the purpose of handling the contact request and its processing pursuant to Art. 6 (1) a) and b) DS-GVO. The user's details may be stored by means of suitable software programs.
It is possible to contact us via the e-mail addresses provided on our homepage. In this case, the personal data transmitted with your e-mail will be stored. In this context, the data will not be passed on to third parties. The data will be used exclusively for the purpose of conversation.
We delete the requests if they are no longer necessary. We review the necessity every two years. Furthermore, the legal archiving obligations apply.
Hosting
Our web server is located in an external data center. The hosting services we use serve to provide: Infrastructure and platform services, computing capacity, storage space and database services, security services as well as technical maintenance services, which we require for the secure operation of our website.
We or our hosting provider process personal data of visitors to our websites on the basis of our legitimate interests in an efficient and secure provision of this offer pursuant to Art. 6 para. 1 lit. f DS-GVO in conjunction with. Art. 28 DS-GVO (conclusion of order processing contract).
Collection of access data and log files
Our hosting provider collects on the basis of legitimate interests within the meaning of Art. 6 para. 1 lit. f. DS-GVO data about each access to the server on which our website is located (so-called server log files). The access data includes IP address, date of access, page(s) visited and browser type.
Log file information is deleted after 4 weeks.
Use of cookies
Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user's computer. A cookie is primarily used to store information about a user during or after his visit within an online offer. Stored information may include, for example, language settings on a website, login status, a shopping cart, or where a video was watched. The term cookies also includes other technologies that perform the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also referred to as "user IDs").
The following cookie types and functions are distinguished:
- Temporary cookies (also: session cookies):Temporary cookies are deleted at the latest after a user has left an online offer and closed his browser.
- Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, the interests of users used for reach measurement or marketing purposes can be stored in such a cookie.
- First-party cookies: First-party cookies are set by us.
- Third-party cookies (also: third-party cookies): Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
- Necessary (also: essential or absolutely necessary) cookies: Cookies may be absolutely necessary for the operation of a website (e.g. to store logins or other user inputs or for security reasons).
- Statistics, marketing and personalization cookies: Furthermore, cookies are generally also used in the context of range measurement and when a user's interests or behavior (e.g. viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles are used, for example, to show users content that matches their potential interests. This process is also referred to as "tracking", i.e., tracking the potential interests of users. Insofar as we use cookies or "tracking" technologies, we will inform you separately in our privacy policy or in the context of obtaining consent.
Notes on legal bases: The legal basis on which we process your personal data using cookies depends on whether we ask you for consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is your declared consent. Otherwise, the data processed with the help of cookies is processed on the basis of our legitimate interests (e.g. in a business operation of our online offer and its improvement) or, if the use of cookies is necessary to fulfill our contractual obligations.
Storage period: If we do not provide you with explicit information on the storage period of permanent cookies (e.g. in the context of a so-called cookie opt-in), please assume that the storage period can be up to two years.
General information on revocation and objection (opt-out): Depending on whether the processing is based on consent or legal permission, you have the option at any time to revoke any consent given or to object to the processing of your data by cookie technologies (collectively referred to as "opt-out"). You can initially declare your objection by means of your browser settings, e.g. by deactivating the use of cookies (whereby this may also restrict the functionality of our online offer).
You have the possibility to edit your consent via the following buttons:
Processing of cookie data on the basis of consent: We use a cookie consent management procedure, in the context of which the consent of users to the use of cookies, or the processing and providers mentioned in the cookie consent management procedure can be obtained and managed and revoked by users. In this context, the declaration of consent is stored in order not to have to repeat its request and to be able to prove the consent in accordance with the legal obligation. The storage can take place on the server side and/or in a cookie (so-called opt-in cookie, or with the help of comparable technologies), in order to be able to assign the consent to a user or their device. Subject to individual information on the providers of cookie management services, the following information applies: The duration of the storage of consent can be up to two years. A pseudonymous user identifier is created and stored with the time of consent, information about the scope of consent (e.g., which categories of cookies and/or service providers), as well as the browser, system and end device used.
- Types of data processed: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
- Data subjects: Users (e.g., website visitors, users of online services).
- Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), Legitimate Interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
Google Maps
Our homepage uses the map service Google Maps. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. We have no influence on this data transmission.
Google Maps is used in the interest of making it easy to find the company location indicated by us on the homepage. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DS-GVO.
More information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de
Matomo
This website uses the web analytics service Matomo to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 para. 1 p. 1 lit. a DS-GVO.
All tracking cookies are disabled by default!
We use Matomo with the extension "AnonymizeIP". This means that IP addresses are processed in abbreviated form, which means that they cannot be directly linked to a specific person. The IP address transmitted by your browser via Matomo is not merged with other data collected by us.
The Matomo program is an open source project. Information from the third-party provider on data protection is available at https://matomo.org/privacy-policy/.
AGB
Here you can find our General Terms and Conditions (GTC).