DATA PRIVACY STATEMENT
§ 1 Information on the collection of personal data
In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour. The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is PLATH GmbH & Co. KG, Gotenstraße 18, 20097 Hamburg (see also under Imprint). You can contact our data protection officer at datenschutz@plath.de or at our postal address with the addition "the data protection officer".
Contact form: For questions of any kind, we offer you the opportunity to contact us using a form provided on the website. It is necessary to provide a valid e-mail address so that we know who sent the enquiry and can respond to it. Further information can be provided voluntarily. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after your enquiry has been dealt with.
The form entries on our website are protected from hackers and bots by a captcha (riddle). We use the services of an external service provider (POWER CAPTCHA). The captcha data you enter and the necessary technical log data are transmitted to the POWER CAPTCHA server in encrypted form. Processing and evaluation are pseudonymised in the memory. Immediately after processing and transmission of the result to our website, the data is deleted from the server. There is no further processing of this data and no permanent persistence on the server.
If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.
§ 2 Your rights
You have the following rights with regard to the personal data concerning you:
- Right of access,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to object to processing,
- Right to data portability.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. You can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
§ 3 Collection of personal data when visiting our website
When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):
- IP address,
- Date and time of the enquiry,
- Time zone difference to Greenwich Mean Time (GMT),
- Content of the request (specific page),
- Access status / HTTP status code,
- Amount of data transferred in each case,
- Website from which the request originates,
- Browser,
- Operating system and its interface,
- Language and version of the browser software.
This data is only stored temporarily and is automatically deleted after a short time.
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the organisation that sets the cookie (in this case, us). Cookies cannot execute programmes or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.
This website uses the following types of cookies, the scope and function of which are explained below:
Transient cookies. Transient cookies are automatically deleted when you close the browser. These include, in particular, the session cookies. The latter store a so-called session ID that allows your browser’s various queries to be assigned to the joint session, thus enabling your computer to be recognised when you return to our website. The session cookies are deleted once you log out or close the browser.
When you visit our website, we employ the following technically required cookie: fe_typo_user. This cookie is a standard TYPE O3 session cookie. It stores the access data entered during a user login for a closed area and is automatically deleted after leaving our website. The user data collected by technically required cookies are not used to create user profiles. These functions also form the basis of our legitimate interest in processing personal data according to Article 6 Paragraph 1 Letter f GDPR.
On our website you will find videos that are stored on the social media platform YouTube. Cookies are stored by YouTube during playback. These videos are integrated in extended data protection mode. When the videos are played, there is no personalization of surfing on YouTube and no personalization of advertising that is displayed to you outside our website.
You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website.
You can configure the use of cookies via the cookie consent banner when you enter the website. To do this, use the buttons "Reject all" or "Settings". After selecting "Settings", you have the option of activating or deactivating individual cookies using the slider. By selecting the link "?", information on the data collected, the purpose of data processing and the legal basis is displayed. The configuration is completed by clicking the "Save+Exit" button.
§ 4 Collection of personal data when using the career portal
If you would like to apply for a job in a PLATH Group company via our website, it is necessary to provide and transmit certain personal data via the contact form provided.
If you apply for an advertised position, your data will only be processed for the purpose of applying for this specific position. Once this position has been filled and a period of 6 months has elapsed, this data will be deleted.
If you send us a speculative or unsolicited application via the career portal, your data may be viewed by HR managers who have vacancies to fill and by HR advisors. We will contact you and invite you to apply if your profile matches a vacant position. This data will also be deleted after a period of 6 months, unless you have specified otherwise in your application.
The data you enter is temporarily stored in a database on the web server. When this data is collected promptly (usually on the following working day) by employees of our HR department, it is deleted from this database. All our employees have been obliged to observe data secrecy in accordance with §53 German Data Protection Act.
We use the services of an external company to implement the functionality of the career portal. An order data processing contract has been concluded with this company in accordance with Art. 28 GDPR. The data is collected, stored and processed in Germany. The above-mentioned deletion periods apply.
Data processing for the purpose of the application is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily granted consent to data collection and data processing.
§ 5 Collection of personal data when registering to receive newsletters from the PLATH Group
You can register to receive newsletters in the menu on our website. We use an external service provider to send newsletters: rapidmail. We have concluded a contract with this service provider for the processing of personal data on behalf of Art. 28 GDPR.
We collect the following personal data: Gender, first name, surname and e-mail address.
This data is processed for the purpose of sending the newsletter. The legal basis for processing is your consent. You can revoke the sending of the newsletter to your e-mail address at any time. After revocation, your data will be deleted immediately and you will not receive any newsletters from us in the future.
§ 6 Objection or revocation against the processing of your data
If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us. Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing. Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details: PLATH GmbH & Co. KG, Gotenstraße 18, 20097 Hamburg, datenschutz@plath.de , see also under Imprint.
§ 7 Data security
We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser. We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
§ 8 Web Analytics
We use the web analysis service Matomo to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. The Matomo software and the data collected with Matomo are operated, stored and processed exclusively on our own servers.
We use Matomo with an extension to anonymise IP addresses. This means that the IP addresses are further processed in abbreviated form and a direct personal reference is excluded. Your IP address collected in this way is neither merged with other data collected by us nor passed on to third parties.
If you do not agree with the anonymous storage and evaluation of the data, you can
with the anonymous storage and analysis of the data, you have the option to object to this at any time with a click of the mouse. An opt-out cookie will then be set in your browser with the result that Matomo will no longer collect session data. To do this, you must follow this link to our cookie consent banner https://www.plath.de/#cmpscreen , click the "Change settings" button and set the Matomo slider at the bottom to inactive under "Measurement". Finally, "Save+Exit" at the bottom.
§ 9 Social networks
Our website does not use any social media plugins. Social media plugins such as the Like button are small buttons, e.g. under articles, with which the user can share them with others in a practical way, without having to click on them.
You will find buttons with links to social networks. Please note the data protection information of these providers when using these links.
§ 10 Data portability
You have a right to data portability if the processing is based on your consent (Art. 6 para. 1 sentence 1 letter a) or Art. 9 para. 2 letter a) GDPR) or on a contract to which you are a party and the processing is carried out using automated procedures. In this case, the right to data portability includes the following rights, provided that this does not adversely affect the rights and freedoms of others
You may request to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format.
You have the right to transmit this data to another controller without hindrance from us.
Where technically feasible, you can request that we transfer your personal data directly to another controller.
§ 11 Up-to-dateness
Up-to-dateness and amendment of this privacy policy. This Privacy Policy is currently valid and was last updated in July 2024. It may become necessary to amend this Privacy Policy as a result of the further development of our website and services or due to changes in legal or official requirements. You can access and print out the current privacy policy at any time on the website at www.plath.de/en/privacy/.
Hamburg, July 2024