PRIVACY POLICY

This is the privacy statement of the company

KASPAR SCHULZ Brauereimaschinenfabrik & Apparatebauanstalt GmbH
Kaspar-Schulz-Straße 1
96052 Bamberg / Germany
Telephone: +49 (0) 951 6099 0
Fax: +49 (0) 951 6099 60
Email: info@kaspar-schulz.de

– Hereinafter referred to as KASPAR SCHULZ –

Contact details of the data protection supervisor

Mr. Andreas Hein
ITs Hein GmbH
Kulmbacher Straße 27b
95460 Bad Berneck
Telephone: +49 (0) 9273 50139 0
Email: info@its-datenschutz.de

The official German language version of this imprint is binding in the case of any legal obscurities.

This privacy statement should inform the user of the extent and purpose to which their personal data is collected and processed by the website´s provider KASPAR SCHULZ in accordance with the EU General Data Protection Regulation (EU-GDPR) and Telemedia Act.

Access data
Data that arises by accessing this site is collected by the website’s provider and saved as “Server Log Files”. The following data will be protocolled:

  • Pages visited on our domain
  • Date and time of the server request
  • Type and version of browser
  • Operating system used
  • URL referrer
  • Host name of the accessing computer
  • IP address

This data will not be merged with any other sources of data. The processing of this data is based on Art. 6 Para. 1 lit. b GDPR, which allows the processing of data to fulfill a contract or preliminary contract obligations.

This data is automatically deleted through the user once the process is finished.

Cookies
Our website uses cookies. These are small text files that are saved by your web browser to your terminal device. Cookies help us to create a more user friendly, efficient and safer experience. A few cookies are known as “Session Cookies”. These cookies are automatically deleted once the browser session is over. Whereas other cookies stay on your device until you delete them yourself. These cookies help us to identify you when you revisit our website.
By using a modern web browser you can monitor, restrict and inhibit the use of cookies. Many web browsers can be configured so that when the program is closed, any cookies will be deleted. Deactivating cookies can lead to a restricted functionality of our website. The placement of cookies that are needed for the communicative process or for functions, which are desired by you, are based on Art. 6 Para. 1 lit. f GDPR. As the provider of this website, we have a reasonable interest in saving cookies to ensure the flawless and unobstructed availability of our services. In the case of other cookies being used (i.e. for Analytics), this will be described in a later section of the privacy statement.

Contact Form
By using the contact form, only data that pertains to your contact information will be saved in order to process your inquiry or to pose any resulting questions. This data will not be disclosed without your consent.
The processing of data, which results from using the contact form, occurs only on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). The withdrawal of your given consent is possible at any time. It suffices to send a withdrawal per email. The legality of the data processing, which took place before the withdrawal of consent, remains. Data, which is transferred from the contact form, will be stored until you request it be deleted, withdrawal your consent for it to be saved or it is no longer necessary to store them. Mandatory legislative regulations, especially retention periods, remain unaffected.
Before you send the contact form, you have the possibility to accept invitations from KASPAR SCHULZ concerning diverse product and information events. There is no disadvantage to either giving or withdrawing your consent to this.

Newsletter data
In order to send our newsletter, we need an email address from you. A verification of your email is necessary as well as consenting to receive the newsletter. Additional data is not collected or is voluntary. The data will only be used for sending the newsletter.
The data, which is created by registering for the newsletter, will only be processed on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). The withdrawal of your given consent is possible at any time. It suffices to send a withdrawal per email or you can unsubscribe via “Unsubscribe” link in the newsletter. The legality of the data processing, which took place before the withdrawal of consent, remains.
The information, which was provided to complete the subscription, will be deleted if you decide to unsubscribe. If this same information was provided for another purpose or elsewhere on our site, it will remain stored.

CleverReach
To send the newsletter we use CleverReach. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. By using this service, we can organize and analyze the distribution of the newsletter. The information you entered to subscribe to the newsletter, i.e. email address, is stored on the CleverReach servers. The locations of the servers are in Germany and Ireland. By using CleverReach to distribute our newsletter, we can analyze the behavior of our subscribers. The analysis provides information on how many subscribers viewed the newsletter and with which frequency the links in the newsletter were clicked. CelverReach utilizes conversion tracking in order to analyze if a predefined action, for example purchasing a product, took place after clicking on a link. Details on the data analysis through CleverReach can be found here https://www.cleverreach.com/en/features/reporting-tracking/conversion-tracking/.
The processing of data only occurs on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). The withdrawal of your given consent is possible at any time. It suffices to send a withdrawal per email or you can unsubscribe via the “Unsubscribe” link in the newsletter. The legality of the data processing, which took place before the withdrawal of consent, remains. If you do not wish for an analysis through CleverReach, you must unsubscribe from the newsletter. It suffices to send a cancellation per email or you can unsubscribe via the “Unsubscribe” link in the newsletter. The information, which was provided to complete the subscription, will be deleted from both our and CleverReach´s servers if you decide to unsubscribe. If this same information was provided for another purpose or elsewhere on our site, it will remain stored. Details on the privacy policy from CleverReach can be found at https://www.cleverreach.com/en-de/privacy-policy/.

Purchase order processing
We have contracted CleverReach to process the purchase orders as to fully adhere to the statuary data protection requirements.

Facebook
This website uses Facebook Social Plugins, which are operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). These can be identified by the Facebook logo or through the terms “Like” and “Share” in the Facebook colors (blue and white). Information on all Facebook plugins can be found at https://developers.facebook.com/docs/plugins/?locale=en_US.
This plugin provides a direct connection between your browser and the Facebook servers. The website provider has no influence over the nature and extent of the data, which is transferred to the Facebook Inc. servers. More information is found here https://www.facebook.com/help/186325668085084.
This plugin informs Facebook Inc. that you have visited this website. There is the possibility that your IP address will be saved. If you have visited this website while logged into your Facebook account, this information will be linked to it. If you use the plugin function by sharing or “Liking” a post, this information will be transferred to Facebook Inc. If you would like to prohibit Facebook Inc. from linking this data to your Facebook account, then please log out of Facebook before visiting this website.

YouTube
This website uses plugins from YouTube in order to integrate and display video content. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. A connection to the YouTube servers is established when accessing a site with integrated YouTube plugins. YouTube is then notified which of our pages you accessed. YouTube can directly link your surfing behavior to your personal profile if you are logged into your YouTube account. You can prevent this by logging out beforehand. It is in our interest to use YouTube to create an appealing presentation of our online offers. This creates a justified interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

Details on the use of user data can be found in YouTube´s privacy policy here https://policies.google.com/privacy?hl=en&gl=de.

Vimeo
This website uses plugins from Vimeo in order to integrate and display video content. The provider of the video portal is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
A connection with the Vimeo servers is established through accessing a site with an integrated Vimeo plugin. Vimeo is then notified, which of our pages you have accessed. Vimeo can identify your IP address regardless of you being logged into the Vimeo portal or having an account with them. Information, which Vimeo has gathered, is then transferred to the servers of the video portal in the USA. Vimeo can directly connect your surfing behavior to your personal profile. You can prevent this by logging out beforehand.

Details on the use of user data can be found in Vimeo´s privacy policy here https://vimeo.com/privacy.

Twitter plugin
Our website uses functions of the service Twitter. The provider is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
By using Twitter and the “Re-Tweet” function, websites you visited are connected to your Twitter account and published in your Twitter feed. Through this, data is transferred to Twitter. We have no knowledge of either the contents of this data or how Twitter uses them.

Details can be found here in Twitter´s privacy policy https://twitter.com/en/privacy.

You can change your privacy settings through the settings on your Twitter account.

Google Analytics
Our website uses functions of the web analysis service of Google Analytics. The provider of the web analysis service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses “Cookies”. Your web browser saves these small text files to your terminal device that enables an analysis of website use. Information about your use of our website that are collected by cookies is transferred and saved to a google server. The location of the server is usually in the USA.

Allowing cookies from Google Analytics follows the basis of Art. 6 Para. 1 lit. f GDPR. As provider of this website, it is in our interest to analyze user behavior in order to optimize our website and advertising.

IP Anonymization
We use Google Analytics in combination with the IP anonymization function. This guarantees that Google shortens your IP address within the member states of the European Union on in other contractual states of the Agreement on the European Economic Area before it is sent to the USA. In some cases, Google first sends your full IP address to the USA and then shortens it there. Through our contract with Google they are allowed to use this information to evaluate your use of the website, create reports on website activity and to provide us with other services related to website activity and internet usage. IP addresses transferred from Google Analytics are not merged with other data from Google.

Browser plugin
The placing of cookies by your web browser is preventable. However, this could restrict some functions of our website. It is equally possible to inhibit the collection of your data as well as your IP address and their subsequent processing through Google. You can do this by clicking on the following link to download and install the browser plugin https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to data collection
You can prevent the collection of data through Google Analytics by clicking on this link. This prevents any data collection through our website during future visits by placing an opt out cookie. Therefore, your browser must be allowed to save cookies. If you delete your cookies regularly, you need to click the link again each time you visit our website. Details of Google Analytics handling of user data can be found here in the privacy policy from Google https://support.google.com/analytics/answer/6004245?hl=en.

Contract processing
We have contracted Google to process the contracts as to fully adhere to the statuary data protection requirements.

Demographic characteristics from Google Analytics
Our website uses the “demographic characteristics” function from Google Analytics. This creates reports on the age, gender and interests of visitors to our website. This data comes from interest related advertisement from Google as well as visitor data from third parties. It is not possible to associate this data with a specific person. You can disable this function at any time. You can do this through your display settings on your Google account or by prohibiting the collection of your data as stated in the section “Objection to data collection”.

Processing of personal data
The provider of this website only processes your personal data if legally permissible or if consented to in the data collection form. Under personal data is understood various information used to verify your person or that which can be traced back to you. You can visit this website without making any claims to your person. To improve our online offerings we save, excluding personal data, your access data on this website (see above). Through anonymization of the data, it is impossible to make conclusions about your person. Your personal data will generally not be transferred to a country outside of the European Union or to an international organization. We do not use automated decision-making systems as stated in Article 22 GDPR. We would inform you if we were to use these systems in a certain case, as long as this is legally required.

Application process
We only process an applicant’s data within the framework of the application process and in accordance with legal requirements. The applicant´s data is processed to fulfill our (preliminary-) contractual requirements in accordance with Art. 6 Para. 1 lit. b. GDPR Art. 6 Para. 1 lit. f. GDPR as long as the data processing, for example is required as part of a legal process (Germany further requires § 26 BDSG).

The application process requires that the applicant provides us with his information. The necessary information can be taken from the job posting. Generally, information regarding person, mailing address and contact address as well as application documents such as cover letter, CV and certificates belong to the necessary applicant data. The applicant may also voluntarily offer us any additional information.
By sending us their application, the applicant agrees to us processing their data for the application process in accordance to the manner and extent as stated in the privacy policy. If, during the application process, information regarding particular categories of personal data (i.e. medical data, notification of a severe disability or ethnical origin) was voluntarily shared in accordance with Art. 9 Para. 1 GDPR, these will be processed in accordance with Art. 9 Para. 2 lit. b GDPR. If, during the application process, information was required regarding particular categories of personal data (i.e. medical data required to perform a job) in accordance with Art. 9 Para. 1 GDPR, these will be processed in accordance with Art. 9 Para. 2 lit. a GDPR.

Applications must be sent by email. Please be aware though, that emails are generally not encrypted and the applicant should therefore ensure their encryption. For this reason, we cannot accept responsibility for the application along its transmission route from sender to recipient. Rather than sending their application via email, there still remains the possibility to send it with the mail.
In the case of a successful application, data that was provided by the applicant may be further processed for the purpose of employment. If, on the other hand, the application for a job posting was unsuccessful, the applicant´s information will be deleted. If the applicant decides to withdraw their application, which is allowed at any time, his/her information will also be deleted. The deletion will take place after a time period of six months, under the condition that there is a justified reason for the withdraw, so that we can answer any follow-up questions concerning the application and to meet our obligation to provide proof in accordance with the Equal Treatment Act.
During the application process, we offer some applicants the possibility to be included into an “Applicant-Pool” for a time period of two years to which they must consent in accordance with Art. 6 Para. 1 lit. a. and Art. 7 GDPR. This declaration of consent will be sent to the respective applicant. The application documents within the “Applicant-Pool” will only be processed for future job postings or finding employment and will be deleted after the stated time period. Applicants will be informed that their participation in the “Applicant-Pool” is voluntary and has no influence on the actual application process. They may withdraw their consent for the future as well as file an objection in accordance with Art. 21 GDPR.

After receiving their application, applicants will be given separate privacy policy information.

Events, press work and public relations
The company KASPAR SCHULZ is an organizer for different events such as product, information and further education events as well as events for customer acquisition and retention.

In case of an invitation to or the participation in an event, KASPAR SCHULZ will only process your personal data for the event planning and implementation. Invitations or information on how to register can be sent in different ways such as by email, by filling out a form either by hand or online or by telephone. The data we process arises from the layout of the form, the digital input mask or questions asked over the telephone. Required information can easily be differentiated from voluntary information. Information on persons who may accompany you to events will also be processed. KASPAR SCHULZ assumes that the applicant has permission to provide us with their accompanying persons´ information. Accompanying persons have the same rights as the applicant. Information is not intended to be sent to a third party. We send your personal information to other departments inside our company who are responsible for organizing and implementing events (i.e. creating guest lists, access control, etc.) and that need your information. If KASPAR SCHULZ transferred your information to a contract processor, we would require a processing contract in order to protect your information from unauthorized use or disclosure. If KASPAR SCHULZ must work with another firm to organize an event, the latter will also receive any personal information that is associated with that particular event. In turn, your information will again be protected from unauthorized use or disclosure through order processing contracts. Exactly which firm this is, will be shared during the event announcement. Generally, your personal information will only be stored during the event´s organization and implementation. If you have given us permission to notify you concerning further and upcoming events, your information will be saved until withdrawal.

You may object to notifications and invitations at any time.

By taking part in events provided by KASPAR SCHULZ you automatically give us permission to take any photos, videos or audio recordings and process these at our discretion both in analog and digital form for press work, public relations and documentation.

Your privacy rights
As it is your personal data that is being processed, you are the affected person in regards to the GDPR and you have the following rights toward the responsible party:

You have the right to be informed (in accordance with Art. 15 GDPR) on personal data that was saved about you, the reason for it being processed, any potential transfer of it to another place and the length of time it will be stored. To become aware of your right to information you may obtain excerpts or copies.

If your data is incorrect or no longer necessary for the reason they were given, you may demand to correct (in accordance with Art. 16 GDPR), delete (in accordance with Art. 17 GDPR) or restrict (in accordance with Art. 18 GDPR) its processing.

If, in accordance with Art. 17 GDPR, you have asserted the right to correct, delete or restrict the processing of data towards the responsible party, the latter is required to inform all recipients of your personal data of their obligation to correct, delete or restrict the processing of your data, unless this proves to be impossible or requires disproportionate effort. You have the right towards the responsible party to be informed of the recipients.

You have the right to data portability (in accordance with Art. 20 GDPR). This gives you the right to demand to receive any personal data that relates to your person from the responsible party in a structured, common and compatible form. Furthermore, you have the right to demand the responsible party to which you have given your personal data, to transfer these to another responsible party as long as the processing can be done though an automated procedure to which you have consented or has been contracted. While exercising this right, you also have the right to have personal data that pertains to you be transferred from one responsible party to another as long as this is technically possible. The freedoms and rights of other persons are not allowed to be affected through this process.

If, due to a particular personal situation, you have reasons against the processing of your personal data you may, as far as the processing is based on a legitimate interest, objectify to the processing (in accordance with Art. 21 GDPR). In such a case, we will only process your data if there is an especially compelling reason to do so.

As long as you have given us consent to process, in accordance to Art. 6 Para. 1 lit. a GDPR, any of your personal data, you have the right to revoke your consent at any point (in accordance with Art. 7 Para. 3 GDPR). Any processing based on consent, which took place before revoking consent, does not lose its legality due to the withdrawal.

Any requests that concern exercising your rights should be sent in writing to the address listed above or directly to our data protection supervisor.

Complaints concerning the processing of your personal data
If you have any questions or concerns regarding the processing of your personal data or information, please contact our data protection supervisor (information listed above) or the regulatory authority for data protection.

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach / Germany
Telephone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
Email: poststelle@lda.bayern.de