Data Protection Statement
1. Data protection at a glance
General information
The following information provides a simple overview over what happens with your personal data when you visit our website. Personal data refers to any data that identify you personally. Detailed information on the subject of data protection is provided in the Data Protection Statement below this text.
Data collection on this website
Who is responsible for the data collection on this website?
The data processing on this website is performed by the website operator. The contact details of the website operator are provided in the section ‘Information on the controller’ in this Data Protection Statement.
How do we collect your data?
Some of your data are collected when you communicate them to us. This includes for example data that you enter into a contact form.
Other data are collected automatically, or following your consent when visiting the website, by our IT systems. These are primarily technical data (e. g. web browser, operating system or the timestamp of when a page was called up). These data are collected automatically as soon as you access this website.
What do we use your data for?
Some of the data are collected in order to ensure the error-free availability of the website. Other data can be used to analyse user actions.
What are your rights concerning your data?
You have the right, at any time and free of charge, to receive information about the origin, recipient and purpose of your stored personal data. You also have the right to request the rectification or erasure of such data. If you have consented to the processing of data, you have the right at any time to withdraw this consent for the future. You also have the right under certain circumstances to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with a supervisory authority.
In this regard and for any other questions on the issue of data protection, you can contact us at any time.
2. General notes and mandatory information
Data protection
As the operator of this site, we are committed to the protection of your personal data. We treat your personal data as confidential and in compliance with the legal data protection requirements as well as with this Data Protection Statement.
When you use this website, a variety of personal data is collected. Personal data means data that identify you personally. This present Data Protection Statement explains which data we collect and what we use them for. It also explains how and for what purpose this is done.
Please note that data transmission via the internet (e. g. e-mail communication) can have security gaps. Absolute protection of the data from access by third parties is not possible.
Information on the controller
The controller of the data processing on this website is:
GALLER Lager- und Regaltechnik GmbH
Robert Galler Str. 1
D-95326 Kulmbach
Tel.: +49 (0) 9221-700-0
e-mail:
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e. g. names, e-mail addresses or similar).
Storage period
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e. g. names, e-mail addresses or similar). Unless this Data Protection Statement indicates a specific storage period, your personal data will be stored by us until the purpose of the data processing no longer applies. If you make a justified request for erasure or if you withdraw your consent to the data processing, your data will be erased unless we have other legally sound reasons for storing your personal data (e. g. retention periods mandated by tax or commercial laws); in the latter case, the erasure will be performed after such reasons no longer apply.
General information on the legal basis for data processing on this website
Provided you have consented to the data processing, we will process your personal data based on Article 6 paragraph 1 lit .a GDPR or Article 9 paragraph 2 lit.a GDPR if special categories of data pursuant to Article 9 paragraph 1 GDPR are being processed. In the case of express consent to the transfer of personal data to third countries, the data processing is also based on Article 49 paragraph 1 lit.a GDPR. If you have consented to the storage of cookies or the accessing of information on your device (e. g. via device finger-printing), the data processing is also based on § 25 paragraph 1 TTDSG. The consent can be withdrawn at any time. If your data are required for the performance of a contract or to take steps requested prior to entering into a contract, we process your data based on Article 6 paragraph 1 lit. b GDPR. Furthermore, if your data are necessary for compliance with a legal obligation, we process them based on Article 6 paragraph 1 lit.c GDPR. Moreover, the data processing can be based on purposes of our legitimate interests pursuant to Article 6 paragraph 1 lit. f GDPR. The following sections of this Data Protection Statement specify which legal basis is applicable in each specific case.
Data protection officer
Withdrawal of your consent to data processing
Many data processing operations can only be performed with your explicit consent. You can withdraw your consent at any time. The lawfulness of the data processing up until the withdrawal of consent remains unaffected by the withdrawal.
Right to object to the collection of data in specific cases and to direct marketing (Art. 21 GDPR)
IF THE DATA ARE PROCESSED ON THE BASIS OF ARTICLE 6 PARAGRAPH 1 LIT.E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH DATA ARE PROCESSED CAN BE FOUND IN THIS DATA PROTECTION STATEMENT. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS USED FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ARTICLE 21 PARAGRAPH 1 GDPR.
IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ARTICLE 21 PARAGRAPH 2 GDPR).
Right to lodge a complaint with a supervisory authority
If infringements of the GDPR occur, the affected individuals have a right to lodge a complaint with a supervisory authority, in particular in the member state of his or her habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to receive, or have a third party receive, data processed by us based on your consent or during the performance of a contract in an automated manner; the data shall be in a commonly used and machine-readable format. If you request to have the personal data transmitted directly to another controller, this will be done only where technically feasible.
SSL/TLS encryption
This page uses SSL/TLS encryption for security and the protection of the transmission of confidential information, such as purchase orders or enquiries which you submit to us as the operator of the website. You can recognise encrypted connections when the address bar in your browser switches from ‘http://’ to ‘https://’ and a padlock icon is displayed in the browser bar.
If SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.
Access, erasure and rectification
Within the framework of applicable law, you have at any time the right of free-of-charge access to your stored personal data, their origin or recipient and the purpose of the data processing and, where applicable, the right to rectification or erasure of these data. In this regard and for any other questions on the issue of personal data, you can contact us at any time.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time in this regard. The right to the restriction of processing exists in the following cases:
- If you dispute the accuracy of the personal data we hold about you, we will usually need time to verify this. You have the right to request the restriction of the processing of your personal data for the period required for this verification.
- If the processing of your personal data has happened or is happening unlawfully, you can request the restriction of data processing instead of erasure.
- If we no longer need your personal data, but you need it to exercise, defend or establish legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
- • If you have lodged an objection according to Art. 21 paragraph 1 GDPR, there must be a balancing of your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, such data may – apart from their storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.
Objection to e-mail advertisement
We hereby object to the use of our contact details, published in compliance with the mandatory legal notice, for the sending of advertisements and information materials not expressly requested. The operators of this website expressly reserve the right to take legal action in the case of unsolicited advertisements, such as spam e-mail.
3. Data collection on this website
Cookies
Our web pages use cookies. Cookies are small text files that do not damage your device. Some cookies are stored on your device temporarily for the duration of a session (‘session cookies’); some cookies are stored on your device permanently (‘permanent cookies’). Session cookies are deleted automatically after your session has ended. Permanent cookies remain stored on your device unless you delete them yourself or until they are deleted automatically by your web browser.
In some cases, cookies from third party service providers can be stored on your device when you access our site (‘third party cookies’). They allow us or you to use certain services provided by the third party (example: cookies used for the processing of payments).
Cookies have various functions. Many cookies are necessary for technical reasons; without them, website functions could not work (example: shopping basket function, playing videos). Other cookies help analyse user actions or display advertisements.
Cookies that are necessary for performing electronic communication, for providing certain functions for your benefit (example: shopping basket function) or for website optimisation (example: cookies that measure web traffic) (‘necessary cookies’) are stored on the basis of Article 6 paragraph 1 lit.f GDPR unless a different legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the error-free and optimal provision of its services. Provided the consent to the storage of cookies and similar recognition technologies has been requested, data are processed exclusively based on this consent (Article 6 paragraph 1 lit. a GDPR and § 25 paragraph 1 TTDSG ); the consent can be withdrawn at any time.
You can adjust your browser settings to alert you when a website is attempting to place a cookie; you can allow cookies on a case-by-case basis, reject cookies in certain cases or in general, and activate the automatic deletion of cookies when exiting the browser. If cookies are deactivated, the functionality of this website may be limited.
To the extent that cookies are used by third parties or for analytical purposes, we will notify you separately in the framework of this Date Protection Statement and, where applicable, request your consent.
Server log files
The website provider collects and stores data automatically in so-called server log files that your browser automatically transmits to us. These include:
- Browser type and browser version
- Operating system
- Referrer URL
- Host name of the accessing computer
- Timestamp of the server request
- IP address
These data are not combined with other data sources.
These data are collected on the basis of Article 6 paragraph 1 lit. f GDPR. The website operator has a legitimate interest in displaying the website free from technical errors and in optimising the website – the server log files must be recorded for this.
Enquiry by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your enquiry. We do not pass on these data without your consent.
The processing of these data is based on Art. 6 paragraph 1 lit. b GDPR if your enquiry is related to the performance of a contract or is necessary for steps requested prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to use (Article 6 paragraph 1 lit. f GDPR) or on your consent (Article 6 paragraph 1 lit. a GDPR) where this consent has been requested; the consent can be withdrawn at any time.
The data you send to us via contact enquiries remain with us until you request their erasure or withdraw your consent for storage or until the purpose for storing the data no longer applies (e. g. after we have dealt with your enquiry). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
Use of SalesViewer® technology:
This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.
Hierzu wird ein javascript-basierter Code eingesetzt, der zur Erhebung unternehmensbezogener Daten und der entsprechenden Nutzung dient. Die mit dieser Technologie erhobenen Daten werden über eine nicht rückrechenbare Einwegfunktion (sog. Hashing) verschlüsselt. Die Daten werden unmittelbar pseudonymisiert und nicht dazu benutzt, den Besucher dieser Webseite persönlich zu identifizieren.
The data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.
The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.
4. Our own services
Handling of applicant data
We provide you with the opportunity to apply for a position at our company (e. g. by e-mail, post or via the online application form). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing and use of your data will be carried out in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.
Scope and purpose of the data collection
If you send us an application, we process your associated personal data (e. g. contact and communication information, application documents, notes taken during interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG (German Federal Data Protection Act; initiation of an employment relationship), Article 6 paragraph 1 lit. b GDPR (general contract initiation) and – if you have given your consent – Article 6 paragraph 1 lit. a GDPR. The consent can be withdrawn at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application.
If your application is successful, the data submitted by you will be stored in our data processing systems on the basis of §26 BDSG and Article 6 paragraph 1 lit. b GDPR for the purpose of conducting the employment relationship.
Data retention period
If we are unable to make you a job offer, if you reject a job offer or withdraw your application, we reserve the right to retain the data you have provided on the basis of our legitimate interests (Article 6 paragraph 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will subsequently be erased and the physical application documents destroyed. The retention is intended in particular for evidential purposes in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e. g. due to an impending or pending legal dispute), the data will not be erased until the purpose for continued retention no longer applies.
Longer retention is also possible if you have given the appropriate consent (Article 6 paragraph 1 lit. a GDPR) or if statutory retention obligations prevent erasure.
Inclusion in applicant pool
If we do not make you a job offer, we may be able to include you in our pool of applicants. In the case of inclusion in the applicant pool, all documents and details from your application will be transferred to the applicant pool in order to contact you if suitable vacancies arise.
Inclusion in the applicant pool is based exclusively on your express consent (Article 6 paragraph 1 lit. a GDPR). Giving consent is voluntary and is not related to the current application process. The data subject can withdraw his consent at any time. In this case, the data will be irrevocably erased from the applicant pool, unless there are legal reasons for retention. The data from the applicant pool will be irrevocably erased no later than two years after consent has been given.
Status: May 2022