I. Name and address of controller
The controller as defined by the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Ferrostaal Industrieanlagen GmbH
Palmaille 67
22767 Hamburg
Germany
Tel.: +49 (0)40 3 80 22 - 1611
E-mail: contactnoSpam@ferrostaal.info
Website: ferrostaal.info

II. Name and address of data protection officer
A data protection officer is currently not required.

III. General information on data processing

1. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) c DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

2. Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a necessity for the continued storage of the data for the conclusion or fulfilment of a contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:

Information about the browser type and the version used.
(1) The user's operating system
(2) The IP address of the user
(3) Date and time of access
(4) Websites from which the user's system accesses our website
(5) Websites that are accessed by the user's system via our website.

This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO.

3. Purpose of the data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 Para. 1 lit. f DSGVO.

4. Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

In the case of storage of data in log files, this is the case after 365 days at the latest.

IP addresses are logged completely for a maximum of 24 hours. Afterwards, they are anonymised by deleting the last octet, so that it is no longer possible to assign the calling client.

5. Possibility of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

V. Use of cookies

1. Description and scope of data processing
Our website does not use cookies. 

VI. Rights of the data subject
You have the right:

• pursuant to Article 15 GDPR to request information on your personal data that is processed by us. In particular, you may request information on the purposes of the processing, on the categories of personal data, on the categories of recipients to whom your personal data have been or will be disclosed, on the envisaged period stored, on the existence of the right to request rectification, erasure, restriction of processing or to object, on the existence of the right to lodge a complaint, on the source of your data if they are not collected by us and on the existence of automated decision-making, including profiling and any meaningful information about the particulars thereof;
• pursuant to Article 16 GDPR to request prompt rectification of inaccurate personal data or completion of your personal data that is stored by us;
• pursuant to Article 17 GDPR to request the erasure of your personal data that are stored by us, provided that processing is not required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• pursuant to Article 18 GDPR to request the restriction of processing of your personal data, if you contest the accuracy of the data, if the processing is unlawful but you oppose its erasure and we no longer need the data but you require them for the establishment, exercise or defence of legal claims or if you have objected to processing pursuant to Article 21 GDPR;
• pursuant to Article 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller;
• pursuant to Article 7 (3) GDPR to withdraw the consent you have already granted us at any time. The result of this will be that we are no longer permitted to continue the data processing that was based on this consent in future and
• pursuant to Article 77 GDPR to lodge a complaint with a supervisory authority. To do so, you may generally contact the supervisory authority of your habitual residence or place of work or our company headquarters.

Contact form

We use a contact form on our website which you can use to contact us electronically. All of the data you enter in the input mask is transmitted to us and stored. This initially concerns the following data:
- Surname
- e-mail address

We absolutely need these two data in order to be able to assign the message to your person and subsequently also to answer it. Processing therefore takes place on the basis of our legitimate interest in accordance with Art. 6 Para. 1 lit. f DSGVO. You can object to this data collection at any time in accordance with Art. 21 DSGVO. This means that we may no longer process your data based on this objection.

All further entries are voluntary. This concerns the following data:
- First name
- Name of the company
- Telephone number

By entering your data and sending the enquiry via the contact form, you give us your consent in accordance with Art. 6 Para. 1 lit. a DSGVO to store and process this data. You can revoke this consent at any time. In this case, we will no longer be able to process your data based on this consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

If the purpose of contacting you is to conclude a contract, the relevant data may also be processed on the legal basis of Art. 6 (1) lit. b DSGVO.

The data processing is carried out exclusively within the framework of your contact. The data will not be passed on to third parties. As soon as the aforementioned purpose for data processing has ceased to exist, we will delete your data.

Contact for applicants

If you are interested in one of our current job advertisements, you can apply to us via the e-mail address given there with meaningful documents. Your personal data sent with the documents will then be processed as part of the application process.

This data processing is based on your consent in accordance with Art. 6 Para. 1 lit. a DSGVO and for the purpose of the possible establishment of an employment relationship in accordance with § 26 Para. 1 Sentence 1 BDSG. If we are legally obliged to store some data, Art. 6 para. 1 lit. c DSGVO serves as the legal basis for this data processing.

If the data processing is based on your consent, you can revoke this consent at any time. In this case, we will no longer be able to process your data based on this consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

The data is processed exclusively for the purpose of carrying out the application procedure. The data will not be passed on to third parties. If the purpose ceases to apply, in particular if no employment relationship is established, your data will be deleted (at the latest six months after the end of the application process). Beyond this, the data will only be stored for a longer period if you have given us your express consent to do so or if we are entitled or obliged to do so by law.

Right to object (to advertising)
Provided that your personal data are processed based on the legitimate interests under point (f) of Article 6 (1) GDPR, you have the right pursuant to Article 21 GDPR to object to the processing of your personal data to the extent that there are grounds for this relating to your particular situation or if the objection is to direct marketing. In the latter case, you have a general right to object that will be enforced by us without specifying a particular situation. If you would like to assert your right to withdraw or object, it is sufficient to send an email to contactnoSpam@ferrostaal.info.

Changes to data protection standards
If any change to these data protection standards become necessary in future, you will always be able to find the latest version here.

July 2023