Privacy Policy
ascobloc Gastro-Gerätebau GmbH, Grüner Weg 29, 01156 Dresden, Germany, as the data controller within the meaning of the General Data Protection Regulation (GDPR), explain what personal data we process when you visit our website and use our online services in the following Privacy Policy. Please be assured that all data that is transferred in connection with our website is sent using SSL encryption.
We reserve the right to amend our Privacy Policy from time to time so that it always complies with current legal requirements or to reflect changes in our services. We therefore recommend that you read the Privacy Policy regularly to keep up to date with protection of the personal data we process.
Processing contract and customer data
We collect, process and use personal data only where necessary in order to establish, prepare the content for or amend our legal relationship (customer data). The legal basis is Article 6(1)(b) GDPR, which allows data to be processed for the performance of a contract or to take steps prior to entering into a contract. We collect, process and use personal data about the use of our website (usage data) only where necessary to enable the user to use the service or in order to charge for use of the service. For further details, please see below. Statutory retention periods remain unaffected
Logging and the creation of log files
When you access our website, various technical data is logged. This general data and information is stored in the server's log files. Your IP address, your browser ID and domain, the name of the retrieved file, the date and time of retrieval, the amount of data transferred and successful retrieval are recorded in a log file. Personal data is processed in order to make the website available, to fix errors and to investigate misuse or fraud on the basis of legitimate interest pursuant to Article 6(1)(f) GDPR. The log files are anonymised after one day.
Use of cookies
We use cookies on our website. Cookies are used to optimise the information and content of our website in the interests of users. Cookies allow us to recognise users of our website when they access the website again. The purpose of recognising returning users is to make it easier for users to use our website.
Cookies are used on our website in connection with the following services:
- Google Analytics, Google Ireland Limited
We use Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), on the basis of your consent pursuant to Article 6(1)(a) GDPR and with regard to the setting of cookies pursuant to Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TTDSG) in conjunction with Article 4 No. 11 and Article 7 GDPR. For this purpose, a data processor agreement has been concluded with Google in accordance with Article 28 GDPR. In addition, for data transfer to the parent company, Google LLC (based in the USA), there are suitable guarantees for the protection of data subjects within the meaning of Article 46(2)(c) GDPR by concluding standard contractual clauses for data protection within the meaning of Article 46(1) GDPR. Your declaration of consent also expressly includes the possibility of transfer around the world and the processing of data by other Google LLC group companies. We hereby expressly note in this regard the potential risks, such as more difficult enforcement of data protection rights.
We use the following cookies with Google Analytics:
- Cookie: _ga/storage period: twelve months
- Cookie: _gid/storage duration: one day
- Cookie: _gat/storage period: one minute
- Cookie: _gali/storage period: 30 seconds
The cookies set by Google Analytics are used to process usage data (e.g. pages visited, access times) and communication data (e.g. IP addresses, device information) on our behalf in order to analyse the use of our website, compile reports on activities within our website and provide other services associated with the use of our website. It is also possible to create pseudonymised user profiles for this purpose.
Google Analytics is used exclusively with IP anonymisation. For more information on Google's use of data, settings and opt-out options, please see Google's Privacy Policy and Google's Ads Settings.
We also only use essential cookies on our website in accordance with Section 25 of the German Telecommunications and Telemedia Data Protection Act (TTDSG) in conjunction with Article 4 No. 11 and Article 7 GDPR. The subsequent processing of your personal data is based on our overriding legitimate interest pursuant to Article 6 (1)(f) GDPR. We have a legitimate interest in this case in ensuring that the website is provided in accordance with data protection requirements (this uses the “privacy layer” cookie/function is to store the selection made for cookie layer/storage period is twelve months).
Integrated services
- Google Maps, Google Ireland Limited - map display
On the basis of your consent pursuant to Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TTDSG) in conjunction with Article 4 No. 11 and Article 7 GDPR, we integrate Google Maps, an online map provided by Google Ireland Limited (“Google”), into our website to show our location and any directions conveniently for you. Any processing of your personal data associated with the integration is based on your consent pursuant to Article 6(1)(a) GDPR. Your declaration of consent also expressly includes the possibility of transfer around the world and the processing of data by other Google LLC group companies. We hereby expressly note in this regard the potential risks, such as more difficult enforcement of data protection rights. By concluding standard contractual clauses on data protection in accordance with Article 46(2)(c) GDPR, there are appropriate guarantees for the protection of data subjects in the event of data transfer to the parent company, Google LLC, which is based in the USA, within the meaning of Article 46(1) GDPR.
Integrating the service and using the map content means that both usage data (e.g. access times, addresses entered for route planning, if applicable) and communication data (e.g. IP addresses) may be processed by Google. We have no influence over the further processing of personal data by Google. The cookies set by Google Maps to ensure functionality are deleted at the end of the session.
Please see Google's Privacy Policy for the purpose and scope of data processing by Google, for your rights in this regard and for available settings to protect your privacy.
- YouTube, Google Ireland Limited – displaying video content
On our website, we use the Youtube embedding function to display and play Youtube videos with your consent in accordance with Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TTDSG) in conjunction with Article 4 No. 11 and Article 7 GDPR. Any processing of your personal data associated with the integration is based on your consent pursuant to Article 6(1)(a) GDPR. Your declaration of consent also expressly includes the possibility of transfer around the world and the processing of data by other Google LLC group companies. We hereby expressly note in this regard the potential risks, such as more difficult enforcement of data protection rights. By concluding standard contractual clauses on data protection in accordance with Article 46(2)(c) GDPR, there are appropriate guarantees for the protection of data subjects in the event of data transfer to the parent company, Google LLC, which is based in the USA, within the meaning of Article 46(1) GDPR.
We use the privacy-enhanced mode, which, according to the provider, only initiates storage of user information when the video is played. At the moment playback of the embedded video is started, your IP address is sent to Youtube. According to Youtube policies, this data is used, among other things, to collect video statistics, improve the user experience and prevent misuse.
For more information about data protection at YouTube, see the provider's Privacy Policy at: https://www.google.de/intl/de/policies/privacy/; to opt-out, go to:
https://adssettings.google.com/authenticated.
- Sendinblue, Sendinblue GmbH – E-mail dispatch
We use the Sendinblue service to deliver our newsletters. Subscription to the newsletter always takes place on the basis of your consent in accordance with Art. 6(1) (1) (a) GDPR. We only require your e-mail address to send you the newsletter. To ensure that your details are correct and to verify your consent, you will receive a relevant confirmation e-mail from us. Based on current case law, we log your e-mail address, your IP address and the date and time of the subscription and confirmation as part of the newsletter subscription process. To provide the newsletter service, a data processing agreement has been concluded with Sendinblue in accordance with Article 28 GDPR.
Naturally, you have the option of revoking your consent for the future at any time. To do this, please use the unsubscribe link, which you will find at the end of every e-mail notification from us. Subsequently, the personal e-mail address stored for you will be deleted and you will not receive any further e-mail notifications in the future.”
Contact form
A contact form is provided on our website, which can be used to contact us electronically. You can also contact us by email using the contact details provided in the legal notice. When you contact us, we process the personal data you provide, in particular your last name and first name, your email address, the page and what you have contacted us about, in order to review your request.
This personal data is processed on the basis of our legitimate interest in satisfactorily responding to contacts and enquiries pursuant to Article 6(1)(f) GDPR or, in the case of requests for quotations and on contractual matters, on the basis of performance of a contract or steps prior to entering into a contract pursuant to Article 6 (1)(b) GDPR.
The personal data you provide is treated confidentially, is only used to process your request and is not passed on to third parties, unless this is necessary in specific cases due to the nature of your request. The personal data is erased (deleted) after your query has been resolved or after you have exercised your right to object. The erasure (deletion) periods described here only apply where there are no statutory retention periods that prevent deletion.
Separate login section of our website
To use special functions in our login section, you can register on our website on the basis of legitimate interest pursuant to Article 6(1)(f) GDPR. For registration, we process information about your company, your title, your last name and first name, your contact details (email address, phone number, website and address) as well as other information you provide voluntarily, which is provided on the registration form. Our legitimate interest is in providing the login section of our website. To log in after registration, you must enter a username and a password. Your personal data is not used for other purposes or linked to other data. You can change your personal data at any time via the profile settings. You can delete your registration at any time.
Links to other websites
Our website contains links to other websites (external links). We have no control over whether the operators of other websites comply with data protection regulations. Please note that if you click on a link for another website, different data protection regulations apply. We have no control over the processing of data on any other website.
Processing of job applicant data
If you apply to us as a job application, we process the information we receive from you as part of the application process, e.g. your letter of application, your CV, references, correspondence, information provided by phone or in person, or you use our contact form provided on our website. In addition to your contact details, information about your education, qualifications, work experience and skills is of particular relevance to us.
Your data is initially processed exclusively for the purpose of carrying out the application procedure. If your job application is successful, the data will become part of your personnel file and is used to carry out and end your employment contract and is deleted in accordance with the regulations that apply to personnel files. If you withdraw your application, we will of course delete your data. Please note that any false statement or omission may lead to rejection or the employment contract being contested at a later date. If we are currently unable to offer you employment, we will continue to process your data for up to three months after sending the rejection in order to defend ourselves against any legal claims, in particular on the basis of alleged discrimination in the application process.
The legal basis for data processing in the application procedure and as part of the personnel file is Article 88(1) GDPR in conjunction with Section 26(1) sentence 1 of the German Federal Data Protection Act (BDSG) and Article 6(1)(b) GDPR and, if you have given your consent, e.g. by sending information not required for the application procedure, your consent in accordance with Article 88(1) GDPR in conjunction with Section 26(2) of the German Federal Data Protection Act (BDSG) and Article 7 GDPR. You may also withdraw your consent at any time with effect for the future. The relevant data will then be erased (deleted) immediately. In this case, please send your notice of withdrawal to personal@ascobloc.de, stating your full name and email address. Erasure (deletion) may be replaced by blocking of the data in the cases provided for by law.
Please note that CVs, certificates and the other data you provide for application purposes in particular may also contain special categories of personal data (Article 9 GDPR). In general for the application process, we do not require any special categories of personal data within the meaning of Article 9 GDPR. Please do not send us any information of this kind at all. If such information is relevant to the application process in exceptional cases, we process such data with your other applicant data. This may, for example, relate to information about a severe disability which you may provide to us voluntarily and which we then need to process to fulfil our specific obligations in relation to severely disabled people. In these cases, we process the data in order to exercise our rights or to fulfil legal obligations under labour law, social security law and social protection. The legal basis for data processing is Article 9(2)(b) GDPR in conjunction with Section 26(3) of the German Federal Data Protection Act (BDSG).
The data that you have sent will be erased (deleted) if you withdraw your application (please send notice of withdrawal to personal@ascobloc.de) or if we are unable to offer you a vacant position, at the earliest three months after the end of the application process. This does not apply if statutory provisions prevent erasure (deletion) or if further storage is necessary for the purpose of providing evidence or if you have consented to storage for a longer period.
Use of service providers to provider the website
To provide the website, we use service providers who process personal data on our behalf or who may access personal data. In addition to the service providers above, these include Host Europe GmbH (hosting) and creativ clicks GmbH (support).
Rights of the data subject and data protection officer contact details
Data subjects may at any time request access to the personal data concerning them and, if necessary, request rectification (correction) or erasure (deletion) or the restriction of processing, or may object to processing. Data subjects also have a right to data portability. In addition, if data is processed on the basis of consent, such consent may be withdrawn at any time with effect for the future. To exercise your rights, please contact our data protection officer, RA Alexander Weidenhammer, Dresdner Institut für Datenschutz at datenschutz[at]ascobloc.de (for further contact details, go to www.dids.de). You also have the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR, if you consider that your personal data is being processed unlawfully.