Privacy Policy

1. Privacy at a glance

General Information

The following notes provide a simple overview of what happens to your personal information when you visit our website. Personal data is any data that can personally identify you. Detailed information on data protection can be found in our Privacy Policy.

Your data shall be forwarded to technical service providers on the basis of Art. 28 GDPR, who shall use your data exclusively on our behalf and under no circumstances for their own commercial purposes. In any other case, we shall only pass on your data to third parties with your express consent.

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Its contact details can be found in the legal information of this website.

How do we collect your data?

Your data is collected by us, on the one hand, based on what you tell us. This could for example be data that you enter in a contact form.

Other data is collected automatically when visiting the website by our IT systems. These include above all technical data (e.g. The internet browser, operating system or the timestamp of the page call). The collection of this information proceeds fully automatically as soon as you visit our website.

What do we do with your data?

Part of the data is collected to ensure a flawless provision of the website. Other data can be used to analyse your user behaviour.

What rights do you have regarding your data?

You have at any time the right to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have a right to request rectification, blocking or deletion of this data. For this purpose as well as for further questions about data protection you can contact us at any time at the address given in the legal information. Furthermore, you also have a right of appeal to the competent supervisory authority.

In addition, you also have the right to request the restriction of processing of your personal data in certain circumstances. Details can be found in this Privacy Policy under ""Right to restriction of processing"".

Analytical tools and third-party tools

When visiting our website, your surfing behaviour can be statistically evaluated. This happens particularly through the use of cookies and so-called analytical programs. The analysis of your surfing behaviour is usually anonymous; you surfing behaviour can not be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in this Privacy Policy.

You can object to this analysis. We shall inform you about the option of objecting in this Privacy Policy.

2. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.

If you use this website, various forms of personal data shall be collected. Personal data is any data that can personally identify you. This Privacy Policy explains what information we collect and what we use it for. It also explains how and for what purpose this may happen.

We would like to point out that the process of data transmission over the Internet (e.g. in the communication by E-Mail) may be subject to security gaps. A complete protection of the data from access by third parties is not possible.

Notice on the responsible party

The body responsible for data processing on this website is:

HEINRICHS GmbH & Co.KG Pressing - Drawing - Punching Walzwerkstraße 1 57368 Lennestadt-Meggen

Phone: +49 2721 836-0 E-Mail: info@heinrichs-gmbh.de

The responsible body is the natural or legal person who, alone or in concert with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Revocation of your consent to data processing

A large number of data processing operations are only possible with your express consent. You can revoke an already provided consent at any time. An informal message by e-mail to us is sufficient for this purpose. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and as a measure to counter direct mail (Article 21 GDPR)

If the data processing is done on the basis of Art. 6 para. 1 (e or f) of the GDPR, you have the right at any time to object to the processing of your personal data for any reason that arises from your particular situation; this also applies to profiling based on these provisions. The respective legal basis upon which the processing is based can be found in this Privacy Policy. If you raise objection, we shall cease processing your personal data unless we can provide evidence of compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or unless it is necessary for the purpose of enforcing, pursuing or defending legal claims (Objection according to Art. 21 Para. 1 GDPR).

If your personal data is processed to operate direct mail, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object, your personal data shall then no longer be used for the purpose of direct advertising (objection under Art. 21 (2) GDPR).

Right of appeal to the competent supervisory authority

In case of violations of the GDPR, the persons concerned have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right of appeal is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to obtain any data that we process on the basis of your consent or in fulfilment of a contract automatically, in itself or to a third party in a standard, machine-readable format. If you require the direct transfer of the data to another responsible individual, this shall only be done to the extent to which this is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, the site uses an SSL or TLS encryption. An encrypted connection is indicated by the browser's address bar changing from ""http: //"" to ""https: //"" and the appearance of a padlock icon in your browser bar.

If SSL or TLS encryption is enabled, the data you submit to us can not be read by third parties.

Information, blocking, deletion and rectification

Within the scope of the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and its recipients, as well as the purpose of the data processing and, if necessary, the right to rectify, block or delete this data. For further information on this and other aspects about your personal data, feel free to contact us at any time at the address given in the legal information.

Right to restriction of processing

You have the right to request the restriction of any processing of your personal data. You can contact us at any time about this at the address given in the legal information. The right to restrict processing exists in the following cases:

• If you dispute the accuracy of any personal information stored with us, we usually need time to verify this. For the duration of this verification you have the right to request the restriction of any processing of your personal data.
• If the processing of your personal data was or is unlawful, you may request a restriction of data processing rather than a deletion.
• If we no longer need your personal information, but you need it to exercise, defend or enforce any legal claims, you have the right to request that your personal information be restricted instead of being deleted.
• If you have filed an objection under Art. 21 (1) GDPR, a balancing between your interests and ours must be exercised. For as long as it may not be clear whose interests will prevail, you have the right to demand the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, apart from storage such data may only be used with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for an important public interest in the European Union or a Member State.

Objection to advertising emails

The use of any contact data published due to our obligation to provide legal information for the purposes of sending unsolicited advertising and information materials is hereby prohibited. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising, such as in the form of spam e-mails.

3. Data Protection Officer

Statutory data protection officer

We have appointed a data protection officer for our company.

Mr Karsten Kunde VIA Consult Kurfürst-Heinrich-Straße 10 57462 Olpe

Phone: +49 2761 8375-0 E-Mail: datenschutz@via-consult.de

4. Data collection on our website

Cookies

The internet pages of our website use so-called cookies in some places. Cookies do not harm your computer and do not contain viruses. We use cookies to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser when you next visit us.

You can set your browser so that you are informed about your cookie settings, to permit cookies individually, to permit cookies in only certain cases, or to generally exclude and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Cookies that are required to facilitate the electronic communication process or to provide certain functions that you wish to use (e.g. a shopping cart function) are saved on the basis of Art. 6 para. 1 (f) of the GDPR. The website operator has a legitimate interest in the storage of cookies for the technically correct and optimised provision of its services. If other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, they will be treated separately in this Privacy Policy.

Server log files

The provider of the pages automatically collects and stores information which your browser automatically transmits to us in so-called server log files. Such information includes:

• Browser type and browser version
• The operating system used
• The referrer URL
• The host name of the accessing computer
• The time of the server request
• The IP address

None of this data is merged in any way with other data sources.

The collection of this data is based on Art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website - and for this purpose, the server log files must be recorded.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you have provided there, will be stored in order to process the request and in the case of any follow-up questions. We will not share this information without your consent.

The processing of the data entered into the contact form takes place exclusively on the basis of your consent (Art. 6 (1) GDPR). You can revoke this consent at any time. An informal message by e-mail to us is sufficient for this purpose. The legality of the data processing operations carried out up until the revocation remains unaffected by the withdrawal of consent.

The data entered by you in the contact form shall remain with us until you ask us to delete it, until you revoke your consent for storage, or the purpose for the data storage no longer applies (e.g. after your query has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Inquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including any personal data emanating from it (name, request) will be stored and processed by us for the purpose of processing your request. We will not share this information without your consent.

The processing of this data is based on Art. 6 para. 1 (b) GDPR, as long as your request is related to fulfilling a contract or is required to carry out a pre-contractual action. In all other cases, the processing is based on your consent (Article 6 (1) a GDPR) and/or on our legitimate interests (Article 6 (1) (f) GDPR), since we have a legitimate interest in the effective processing any requests addressed to us.

The data sent by you to us via contact requests shall remain with us until you ask us to delete, revoke your consent to its storage, or the purpose for storage has lapsed (e.g. after completion of your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Processing of data (customer and contract data)

We collect, process and use personal data only insofar as they might be necessary for the establishment, shaping or amendment of the legal relationship (status data). This is done on the basis of Art. 6 para. 1 (b) of the GDPR, which allows the processing of data for fulfilling a contract or any precontractual measures. We only collect, process and use personal data on the use of our Internet pages (user data) to the extent that this is necessary in order to enable or charge the user for the use of the service.

The collected customer data shall be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

Data transfer upon conclusion of the contract for services and digital content

We only transfer personal data to third parties if this is necessary for fulfilling the contract, for example to the bank responsible for processing payments.

A further transmission of the data will not take place or shall only take place if you have expressly consented to the transmission. A transfer of your data to third parties without your explicit consent, such as for advertising purposes, does not occur.

The legal basis for data processing is Art. 6 para. 1 (b) GDPR, which allows the processing of data for fulfilling a contract or any precontractual measures.

5. Analysis tools and advertising

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called ""cookies"". These are text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool is legally regulated in Art. 6 para. 1 (f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

IP anonymisation

We have activated the IP anonymisation function on this website. This will result in your IP address being shortened by Google within the member states of the European Union or other parties to the Agreement on the European Economic Area prior to its transmission to the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by your browser for Google Analytics purposes shall not be merged with other Google data.

Browser plugin

You can prevent the storage of cookies by making a corresponding setting in your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may also prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.

For more information on how user data is handled by Google Analytics, please refer to the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.

Order processing

We have entered into a order-processing contract with Google and are fully implementing the strict requirements of the German data protection authorities when using Google Analytics.

Storage time

User and event level data stored at Google which is associated with cookies, user identifications (e.g. User IDs), or advertising IDs (e.g. DoubleClick cookies, Android Advertising IDs), shall be anonymised and deleted after 26 months. Details can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=en

6. Plugins and tools

Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform representation of fonts. The Google fonts are installed locally. No connection to Google servers is established during this process.

Google Maps

This site uses the mapping service Google Maps via an API. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

To use the features of Google Maps, it is necessary to store your IP address. This information is usually transmitted to and stored by Google on servers in the United States. The provider of this page has no influence on this data transfer.

The use of Google Maps is intended to facilitate an appealing presentation of our online offers and to allow you to find the locations we specify on our website with ease. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 (f) of the GDPR.

For more information on how user data is handled, please refer to Google's Privacy Policy: https://policies.google.com/privacy?hl=en.

7. Social media

(Facebook, Instagram, hashtag-Ausbildung.de, XING)

HEINRICHS presents itself on social media platforms to communicate there with any interested parties and users and to inform them about the company.

User data may be processed by the service provider outside the territory of the European Union. This may entail risks for the users, for example because enforcement of user rights could be made more difficult. 

The service provider generally processes user data for market research and advertising purposes. As a result, user interests becoming apparent from the user behaviour can be utilised, for example, to activate advertisements within and outside these platforms that might present offers of interest to the users. Cookies are usually stored on users' computers for this purpose. In addition, within individual usage profiles, data can also be stored independently of the devices used (particularly if the users are members of social media platforms upon which they are logged). Your data, which should be stored during the course of using our online presence, shall of course be deleted when deactivating website mode if this is possible for us.

  The social media platform you visit provides you the opportunity to respond to our posts, comment on them, create a user post yourself, and send us private messages with  personal concerns and questions. The data provided in this context by you and which may also be accessible to us (e.g. username, images, interests, contact details) are used by us exclusively for the purpose of communicating with customers and interested parties. Our interest lies in providing you with a platform upon which we can show you current information and with the help of which you can address any requests to us so that we can respond as quickly as possible.  We do not undertake any further data processing apart from the basic functions performed by this page. Please note that the service provider may use tracking tools as well as cookies, regardless of the use of the site by us. 

For a detailed description of the respective processing and the options for opting out, we refer to the following linked information from the provider.

Also in the case of requests for information and the assertion of user rights, we would like to state that these can most effectively be claimed from the providers. Only the providers have access to the user data and can directly take appropriate measures and provide information. If you should still require help, you can then contact us.

• Facebook (Meta Platforms  Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - Privacy Policy: www.facebook.com/about/privacy/, opt-out: www.facebook.com/settings and www.youronlinechoices.com
• Instagram (Meta Platforms  Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - Privacy Policy/Opt-Out: http://instagram.com/about/legal/privacy/.
• Hashtag Ausbildung (ontavio GmbH, Wigeystraße 12a, 57368 Lennestadt) - Privacy Policy/Opt-Out: https://www.hashtag-ausbildung.de/info/datenschutz
• Xing (New Work SE, Dammtorstraße 29-32, 20354 Hamburg, Deutschland) - Privacy Policy/Opt-Out: privacy.xing.com/de/datenschutzerklaerung.

8. Our own services

Applications

We offer you the opportunity to make an application to work with us (e.g. by e-mail, by post or via the online application form). In the following, we would likely to inform you about the scope, purpose and use of the personal data collected during the application process. We assure that the collection, processing and use of your data complies with the applicable data protection law and all other legal provisions and that your data is kept strictly confidential.

Scope and purpose of the data collection

If you send us an application, we shall process the personal data provided (e.g. contact and communication data, application documents, notes in the context of job interviews, etc.) as far as is necessary for deciding on our interest in your working with us. The legal basis for this is Section 26 of the German Federal Data Protection Act (BDSG, initiation of an employment relationship), Art. 6 para. 1 (b) of the GDPR (general contract initiation) and - if you have provided your consent - Art. 6 para. 1 (a) GDPR. The consent is revocable at any time. Your personal data will only be passed on within our company to persons who are involved in the processing of your application.

If the application is successful, the data submitted by you will be processed on the basis of Section 26 of the BDSG and Art. 6 para. 1 (b) of the GDPR for the purpose of establishing the employment relationship in our data processing systems.

Retention period of the data

If we can not make you a job offer, if you reject a job offer, withdraw your application, revoke your consent to data processing or request us to delete the data, then the data you provide, including any remaining physical application documents, shall be stored or kept for a maximum of 6 months after the completion of the application (retention period), in order to be able to understand the details of the application process in the event of discrepancies (Article 6 (1) (f) GDPR).

YOU MAY REJECT THIS STORAGE IF YOU HAVE JUSTIFIABLE LEGAL INTERESTS WHICH OUTWEIGH OUR INTERESTS.

After expiry of the retention period, the data shall be deleted unless there is a statutory retention obligation or any other legal reason for further storage. If it becomes apparent that the retention of your data will be required after expiry of the retention period (e.g. due to a threatening or pending legal dispute), a deletion shall not take place until the data becomes obsolete. Other statutory retention obligations remain unaffected.