A) Privacy Policy

1. Scope

1.1
The following privacy policy applies to the use of the website www.siegleundepple.de and the services offered through it. This website is provided by SIEGLE + EPPLE GmbH & Co. KG, Flachter Straße 2, D-70499 Stuttgart, Email: info@siegleundepple.de, which acts as the controller within the meaning of Article 4 of the General Data Protection Regulation (GDPR).

1.2
Our Data Protection Officer:
K11 Consulting GmbH
Dr. Alexander Deicke
Kaffeeberg 11, D-71634 Ludwigsburg
Email: datenschutzbeauftragter@k11-consulting.de
Telephon: +49 7141 947532-1
Fax: +49 7141 947532-6

1.3
We take the protection of your personal data seriously, particularly with regard to safeguarding your privacy rights when processing and using this information. Below, we provide information on the collection of personal data when you use our website. Personal data refers to any information that can be linked to you personally, such as your name, address, email address and user behaviour.
 

2. Automated data collection and processing via the browser

2.1
As with any website, our server automatically and temporarily collects information in the server log files that is transmitted by your browser, unless you have disabled this feature. When you visit our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis: Article 6(1)(f) of the GDPR):
 

• IP address of the requesting computer
• File request from the client
• the HTTP response code
• the website from which you are visiting us (referrer URL)
• the time of the server request
• Browser type and version
• the operating system used by the requesting computer

No personal analysis of the server log files is carried out. At no time can the provider link this data to specific individuals. This data is not combined with other data sources.
 

2.2
The data referred to in section 2.1, with the exception of the IP address, is also collected and processed by an additional programme used for statistical analysis. This statistical analysis is carried out for the purposes of advertising, market research and tailoring our website to user needs (the legal basis is Article 6(1)(f) of the GDPR). No personal data is stored during the analysis. Anonymised usage profiles are created from the collected data. Cookies (see Section 5 for general information) may be used for this purpose. The data collected via the statistical programme cannot be used to personally identify the website user, as the data is not combined with personal data.
 

2.3 Google Maps
On this website, we use Google Maps. This allows us to display interactive maps directly on the website and enables you to use the map function with ease. The legal basis for the use of Google Maps is Article 6(1)(f) of the GDPR.

When you visit the website, Google receives information that you have accessed the relevant page of our website. In addition, the data specified in section 2.1 of this policy is transmitted. This occurs regardless of whether you are logged in to a Google user account or do not have a user account. If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the customisation of its website. Such analysis is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, in which case you must contact Google directly to exercise this right.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and the settings available to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the US and has opted into the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
 

3. Collection and processing of data provided voluntarily

3.1 General enquiries
If you provide us with personal data via email or through our website (surname, first name, email address, postal address), this is generally done on a voluntary basis. This data is used to manage the contractual relationship, to process your enquiries or orders, and for our own market or opinion research and for our own advertising by post and email. No further use, in particular the disclosure of data to third parties for the purposes of advertising, market research or opinion polling, takes place. We delete the data collected in this context once storage is no longer necessary, or restrict processing where statutory retention obligations apply. The legal basis is Article 6(1)(b) of the GDPR or Article 6(1)(f) of the GDPR.
 

3.2 Careers / Data Protection for Applicants (m/f/d)
We are delighted that you are interested in a potential role at SIEGLE + EPPLE. The protection of your personal data is important to us. Below, we provide information in accordance with Article 13 of the GDPR and Section 26 of the BDSG regarding the processing of your data as part of a potential application process.

Purpose and legal basis of the processing:

Via our careers page, you can apply either on your own initiative or in response to specific job vacancies. Your data (name, email address, contact details, application documents) will only be processed in connection with the relevant job advertisement (Art. 6(1)(b) GDPR, Section 26 BDSG) or, where you have given your consent, for use in relation to other job vacancies (Art. 6(1)(a) GDPR). If you have given us your consent to process your application data, you may withdraw this consent at any time.

Note regarding sensitive data:

We would like to draw your attention to the fact that applications, in particular CVs, references and other data you provide to us, may contain particularly sensitive information regarding mental and physical health, racial or ethnic origin, political opinions, religious or philosophical beliefs, membership of a trade union or political party, or your sex life.

If you provide us with such information in your online application, you expressly consent to our processing of this data for the purpose of handling your application; in such cases, the processing is carried out in accordance with Article 9(2) of the GDPR. The processing of this data is carried out in accordance with this privacy policy and other relevant legal provisions.

Recipients of the data:

Your data will always be treated confidentially within the company and will only be passed on to the departments responsible for the recruitment process. It will not be disclosed to third parties, unless required by law or expressly agreed.

Our employee representative body, as established under the Works Constitution Act, may request access to applicants’ personal data during the recruitment process.

Furthermore, system administrators may have access to your data during the operation and/or maintenance of our jobs and careers portal; the same applies to members of the HR team, in each case in compliance with the applicable data protection regulations and in strict confidence.

Retention period:

Your application details will be stored for the duration of the selection process. Once the process has been completed, your data will be deleted within six months at the latest, unless you have consented to it being stored for a longer period.
 

4. Disclosure to third parties

Where you have provided us with personal data, this will not, as a rule, be disclosed to third parties. Disclosure will only take place
 

• where you have given your consent (see section 3.2). When the data is collected, you will be informed of the recipients or categories of recipients.
• in connection with the processing of your enquiries, your orders and your use of our services to authorised subcontractors, who will only receive the data necessary to carry out this task and will use it solely for that purpose.
• within the framework of commissioned data processing in accordance with Article 28 of the GDPR to external service providers. These providers have been carefully selected and appointed by us, are bound by our instructions and the provisions of the GDPR, and are subject to regular monitoring.
• in order to comply with legal obligations to authorities entitled to receive such information.

5. Cookies

5.1
This website uses cookies. Cookies are small text files that are stored locally in your browser’s cache. The following types of cookies, the scope and functionality of which are explained below, are used on this website:
 

• Transient cookies (see 5.2)
• Persistent cookies (see 5.3).

5.2
Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which allows various requests from your browser to be associated with the same session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
 

5.3
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete these cookies at any time via your browser’s security settings.
 

5.4
You can configure your browser settings as you wish and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the features of this website.
 

6. Duration of storage

Your data will only be used for as long as is necessary for the existing customer relationship, unless you have given us your consent or we have a legitimate interest in further processing. In such cases, we will process your data until you withdraw your consent or object to our legitimate interests. Notwithstanding this, we are obliged under commercial and tax law to retain your address, payment and order details for a period of ten years.
 

7. Your rights

7.1
You have the following rights in relation to your personal data:
 

• Information about your stored data (Article 15 GDPR)
• Correction of inaccurate data (Article 16 GDPR)
• Deletion (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 DSGVO)
• Objection (Article 21 GDPR)
• Complaint to a supervisory authority (AArticle 77 GDPR)

Please send your written enquiry to SIEGLE + EPPLE GmbH & Co. KG, Flachter Straße 2, D-70499 Stuttgart or to the email address info@siegleundepple.de.
 

7.2
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
 

B) Whistleblower scheme

If you have specific information regarding breaches of regulations that pose risks in connection with our business activities, you can contact our Ombudsman’s Office or the Ombudsman via the following channels:

Contact Whistleblower Helpdesk, Ombudsman's Office (OBS):

Degen Deicke Wagner GmbH
Ombudsman Dr. Alexander Deicke
Alexanderstraße 8a
D-70184 Stuttgart
Email: deicke@whistleblower-helpdesk.de
Telephone: +49 177 6333972

You can use the telephone number and postal address to report high-risk breaches to the whistleblowing system – anonymously if you wish.