AutomatiseringVia its websites Lorch Schweißtechnik GmbH offers extensive information to contract partners, customers and interested parties. In this regard we place particular value on the trustworthy and secure handling of your personal data and the data of your company. The following Privacy Policy is the basis of our conduct and it is a component of the business relationship with customers, interested parties and third-parties. We amend the Privacy Policy as needed due to legal and technical changes. The most up-to-date version of the Privacy Policy, which is published on the website, is valid.
Right to information
a. the purposes for which the personal data is processed;
- Name and address of the party responsible for the processing (relevant controller)
The responsible party (relevant controller), as defined in the General Data Protection Regulation (GDPR) and other applicable data protection laws and other regulations with data protection implications in the Member States of the European Union, is:
Lorch Schweißtechnik GmbH
Im Anwänder 24-26
71549 Auenwald
Germany
Tel.: +49 7191 503-0
Email: info(at)lorch.eu
Website: www.lorch.eu - Name and address of the data protection officer
The data protection officer of the relevant controller is:
Dirk Janthur
Datenschutzberatung Janthur GmbH
Hedelfinger Straße 12
73734 Esslingen
Tel.: +49 711 71530104
dirk.janthur(at)janthur.net
- Use of cookies
The websites of Lorch Schweißtechnik GmbH use cookies. Cookies are files that are stored on the computer system of the user by the Internet browser. When accessing a website the cookies can be transmitted to the website and thus enable an identification of the user. In this regard, cookies help to facilitate use of websites for the users.
It is possible to disable the setting of cookies by appropriately changing the settings in the Internet browser. Cookies that have been set can be deleted. We expressly state that if cookies are deactivated it is possible that not all the functions of our website can be used to their full extent. - Creation of log files
At each access of the website Lorch Schweißtechnik GmbH collects data and information through an automated system. This information and data is stored in the log files of the server.
In this regard the following data can be collected:
(1) Information concerning the browser type and the version used
(2) The user's operating system
(3) The user's Internet service provider
(4) The user's IP address
(5) Date and time of the access
(6) Websites from which the user's system reaches our website (referrers)
(7) Websites that are accessed by the user's system via our website
Data is processed for the purpose of delivering the content of our website, ensuring the functionality of our IT systems and for optimisation of our website. In this regard the log file data is stored separately from other personal data of the user. - Analysis tools and advertsing
Google Analytics
Lorch Schweißtechnik GmbH uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie concerning your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to produce reports on website activities and to provide other services related to the use of the website and of the Internet to the operator of the website. Google will also transmit this information to third parties if necessary, if this is legally prescribed or if third parties process this data on Google's behalf. Under no circumstances will Google Inc. link your IP address with other data of Google. More information concerning Google's terms of use and privacy policy is provided at www.google.com/analytics/terms/de.html. We refer you here to Google's privacy policy, which is provided at policies.google.com/privacy.
You can prevent Google Analytics from collecting your information by clicking the opt-out link at the bottom of the page. An opt-out cookie will be set to prevent your information from being collected on future visits to this website. Please note that if you delete your browser cache, you may have to opt-out again.
Google also offers a tool that prevents collection of data through the Google Analytics code for various browsers. You can activate the tool by following the instructions at this link: tools.google.com/dlpage/gaoptout
You can prevent the installation of cookies through an appropriate setting of your browser software; however we expressly state that in this case it is possible that you will not be able to use all the functions of this website to their full extent. By using this website you declare that you consent to the processing of data collected by Google about you in the manner described above and for the aforementioned purposes.
Facebook Pixel
Our website uses the visitor action pixel of Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") to measure conversion. Thus the behaviour of website visitors after they have been redirected to the provider's website by clicking on a Facebook ad can be tracked. Through this measure the effectiveness of Facebook advertisements can be evaluated for statistical and market research purposes and future advertising measures can be optimised. The collected data is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy. This means that Facebook can enable advertisements to be placed on Facebook pages and outside Facebook. This use of the data cannot be influenced by us as the website operator. The use of Facebook pixels is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures, including social media. See Facebook's Privacy Notices for more information concerning the protection of your privacy: de-de.facebook.com/about/privacy/. Moreover, you can also disable the Custom Audiences re-marketing feature in the Ad Preferences section at www.facebook.com/ads/preferences/. You must be logged in to Facebook to do this. If you do not have a Facebook account, you can disable Facebook's usage-based advertising on the European Interactive Digital Advertising Alliance website: www.youronlinechoices.com/de/praferenzmanagement/. - Links and content on third-party websites
On our website you will find links to the offerings of third parties. Lorch Schweißtechnik GmbH cannot accept any liability for these third party websites and the handling of personal data on these websites. Notice of liability: With the judgement of 12 May 1998, the Hamburg District Court ruled that a party, through provision of a link, can, if necessary be made co-responsible for the content of the linked site. According to the Hamburg District Court, this liability can only be prevented if the party expressly distances itself from this content. Lorch Schweißtechnik GmbH has set links to other Internet sites on this website. For all of these links the following applies: Lorch Schweißtechnik GmbH expressly declares that Lorch Schweißtechnik GmbH has no influence whatsoever on the design and content of the linked websites. Consequently, Lorch Schweißtechnik GmbH hereby expressly distances itself from all content of all websites linked on our homepage and dissociates itself from this content. This declaration is valid for all links displayed on the homepage and for all content of the websites that can be accessed via the banners, buttons and links on the Lorch Schweißtechnik GmbH website. - SSL encryption
For security reasons, and to protect the transmission of confidential content, such as inquiries that you send to us as the website operator, this website uses an SSL encryption. You can identify an encrypted connection by the fact that the address of the line of browser changes from "http://" to "https://" and by the lock icon in your browser line.
When SSL encryption is activated the data that you transmit to us cannot be read by third parties. - Registration on our website
If the person concerned (data subject) avails himself of the possibility of registering on the website of the controller by providing personal data, then the data in the respective input screen will be transferred to the controller. The data will be stored at the facilities of the controller exclusively for the purpose of internal use.
At registration the IP address of the user, as well as the date and time of registration are stored. This prevents misuse of the services. Forwarding of the data to third parties does not occur. There is an exception if a statutory obligation exists to forward the data.
Registration data is required for the provision of content or services. Registered persons have the possibility to have the stored data deleted or modified at any time. The data subject receives information at any time concerning the stored personal data relating to the data subject. - Newsletter
If the data subject subscribes to our newsletter, then the data in the respective input screen will be transferred to the controller.
When subscribing to the newsletter the IP address of the user, as well as the date and time of registration, are stored. This is done to prevent misuse of the services or of the email address of the data subject. Forwarding of the data to third parties does not occur. There is an exception if a statutory obligation exists to forward the data.
The data is used exclusively for the sending of the newsletter. The subscription to the newsletter can be cancelled by the data subject at any time. Likewise the consent to store the personal data can be revoked at any time. An appropriate link is provided in every newsletter for this purpose. - Contacting possibilities
There is a contact form on the Lorch Schweißtechnik GmbH website that can be used to contact us electronically. Alternatively, contacting via the provided email address is possible. If the data subject makes contact with the controller via one of these channels, then the personal data of the data subject will be stored automatically. This storage occurs solely for the purposes of processing the data of or contacting the data subject. A forwarding of the data to third parties does not take place.
This is considered to be a voluntary provision of personal data. Lorch Schweißtechnik GmbH has categorically implemented all technical and organisational measures to ensure that this data is also secure.
Nevertheless, be very careful with the information and do not transmit any sensitive data, such as your bank account information, via the contact form. - Applicant Portal / handling of applications
Via the website, applicants can apply for jobs at Lorch Schweißtechnik GmbH with the aid of an Applicant Portal. The Applicant Portal is provided by d.vinci HR-Systems GmbH as a service provider in accordance with Article 28 GDPR. All data is processed on behalf of Lorch Schweißtechnik GmbH. Only the data provided by the applicants as part of the application will be processed. The data will only be processed within the framework of the job application procedure. Forwarding of the data to third parties does not occur. Regarding the rights of the applicants please refer to the other provisions in this Privacy Policy. In particular this includes the rights of the persons concerned (data subjects). - Routine erasure and blocking of personal data
The controller processes and stores personal data of the data subject only as long as this is required to achieve the purpose for which the data was stored. Moreover, storage can also occur if such storage has been provided for by European or national legislation in Union ordinances, laws or other regulations, to which the controller is subject.
As soon as the purpose of the storage no longer applies, or the storage period prescribed in the regulations cited above expires, the personal data will be routinely blocked or deleted. - Use of social plugins
Facebook plugins
Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our website. You can identify the Facebook plugins by the Facebook logo or by the "Like button" on our website. An overview of the Facebook plugins is provided here:
developers.facebook.com/docs/plugins/. When you visit our website, via the plugin a direct connection is established between your browser and the Facebook server. Through this means Facebook obtains the information that you with your IP address have visited our website. If you click the Facebook "Like button" while you are logged into your Facebook account, you can link the content of our website to your Facebook profile. Through this means Facebook can allocate the visit to our website to your user account. We expressly state that as provider of the website we obtain no knowledge of the content of the transmitted data or of its use by Facebook. For more information, please refer to Facebook's Privacy Policy at de-de.facebook.com/policy.php.
If you do not want to give Facebook the ability to allocate your visit to our website to your Facebook user account, then please log out of your Facebook user account.
YouTube plugins
We have integrated a plugin from YouTube – YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA – on our website.
When you visit our website, via the plugin a direct connection between your browser and the YouTube server will be established. Through this means YouTube obtains the information that you with your IP address have visited our website. If you click the YouTube button while you are logged into your YouTube account, you can link the content of our websites to your YouTube profile. Through this means YouTube can allocate the visit to our website to your user account.
We expressly state that as provider of the website we obtain no knowledge of the content of the transmitted data or of its use by YouTube. Additional information in this regard is provided in YouTube's Privacy Policy at www.google.de/intl/de/policies/privacy/.
If you do not want to give YouTube the ability to allocate your visit to our website to your YouTube user account, then please log out of your YouTube user account.
LinkedIn plugins
On our site we have added a plugin from LinkedIn – LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
When you visit our pages, LinkedIn establishes a direct connection between your browser and the LinkedIn server. Through this means LinkedIn obtains the information that you, with your IP address, have visited our website. If you click the LinkedIn button while logged in to your LinkedIn account, you can link the content of our pages to your LinkedIn profile. Thus LinkedIn can allocate the visit to our website to your user account.
We expressly state that as provider of the website we obtain no knowledge of the content of the transmitted data or of its use by LinkedIn. Additional information in this regard is provided in LinkedIn's Privacy Policy at www.linkedin.com/legal/privacy-policy.
If you do not want to enable LinkedIn to assign the visit to our website to your LinkedIn user account, please log out of your LinkedIn user account. - Rights of the person concerned (data subject)
If your personal data is processed, you are the person concerned (data subject) as stipulated in the GDPR and you are entitled to the following rights relative to the responsible party (controller):
You can assert all rights relative to the company using the contact data in point 1 or by contacting our data protection officer using the contact data in point 2.
14.1 Right to information
You can demand a confirmation from the controller as to whether personal data relating to you is processed by us.
If such processing exists, you can demand that the controller disclose the following information:
a. the purposes for which the personal data is processed;
b. the categories of personal data that are processed;
c. the recipients, or the categories of recipients, to whom the applicable personal data has been disclosed or will yet be disclosed;
d. the planned duration of storage of the personal data relating to you, or if specific information in this regard is not possible, the criteria for determination of the duration of storage;
e. the existence of a right to rectify or erase the personal data relating to you, a right of restriction of the processing through the controller or a right to object to this processing;
f. the existence of a right to appeal to a supervisory authority;
g. all available information concerning the origin of the data if the personal data is not collected from the data subject;
h. the existence of automated decision-making, including profiling pursuant to Article 22(1) and (4) GDPR and – at least in these cases – meaningful information concerning the logic involved, as well as the scope and the intended effects of this type of processing for the data subject.
You are entitled to demand information as to whether the personal data relating to you has been transferred to a third country or to an international organisation.
In this context you can demand to be informed of the suitable guarantees pursuant to Article 46 GDPR in conjunction with the transmission.
In the case of data processing for the purposes of scientific or historical research or for statistical research purposes:
This right to information can be limited, if it presumably renders the realisation of the research or statistical purposes impossible or seriously impairs said realisation, and the restriction is necessary for the fulfilment of the research or statistical purposes.
14.2. Right to rectification
You have a right to rectification and/or completion relative to the controller, if the processed personal data relating to you is incorrect or incomplete. The controller must undertake the rectification without delay.
In the case of data processing for the purposes of scientific or historical research or for statistical research purposes:
This right of rectification can be restricted insofar as it presumably renders the realisation of the research or statistical purposes impossible or seriously impairs said realisation and the restriction is necessary for the fulfilment of the research or statistical purposes.
14.3. Right to restriction of the processing
Under the following prerequisites you can demand restriction of the processing of the personal data relating to you:
a. if you dispute the correctness of the personal data relating to you for a duration that enables the controller to review the correctness of the personal data;
b. if the processing is unlawful and you refuse erasure of the personal data and instead demand restriction of the use of the personal data;
c. if the controller no longer requires the personal data for the purposes of processing, and you however do require this data for establishment, exercise or defence of legal claims, or
d. if you have lodged an objection to the processing pursuant to Article 21(1) GDPR and it has not yet been determined whether the legitimate reasons of the controller override your reasons. If the processing of the personal data relating to you has been restricted, this data – except for its storage – may only be processed with your consent or for establishment, exercise or defence of legal claims or for protection of the rights of another natural or legal person or for reasons of an important public interest on the part of the Union or of a Member State. If the restriction of the processing has been limited pursuant to the prerequisites cited above, you will be informed by the controller before the restriction is removed. In the case of data processing for the purposes of scientific or historical research or for statistical research purposes: Your right of restriction can be limited insofar as it presumably renders the realisation of the research or statistical purposes impossible or seriously impairs said realisation and the limitation is necessary for the fulfilment of the research or statistical purposes.
14.4. Right to deletion
14.4.1. You can demand that the controller delete the personal data relating to your without delay, and the controller is obligated to delete this data without delay, if one of the following reasons applies:
a. The personal data relating to you is no longer required for the purposes for which it was collected or it has been processed in some other manner.
b. You revoke your consent on which the processing pursuant to Article(6)(1)(a) or Article 9(2)(a) GDPR was based and there is no other legal basis for the processing.
c. You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
d. The personal data relating to you has been unlawfully processed.
e. The erasure of the personal data relating to you is required for fulfilment of a legal obligation pursuant to union law or the law of the Member States, to which the controller is subject.
f. The personal data relating to you was collected in reference to offered information society services pursuant to Article 8(1) GDPR.
14.4.2. If the controller has made the data relating to you public and he is obligated to delete it pursuant to Article 17(1) GDPR, then he takes appropriate measures with due consideration of the available technology and implementation costs, also of a technical nature, to inform the controllers that process the personal data, that you as data subject have demanded from them the erasure of all links to this personal data or to copies or replications of this personal data.
14.4.3. The right to deletion does not exist if the processing is required
a. for exercise of the right to freedom of expression and information;
b. for fulfilment of a legal obligation that requires the processing pursuant to the law of the Union or of the Member States to which the controller is subject, or for performance of a task that is in the public interest or in the exercise of official authority that has been vested in the controller;
c. for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i), as well as Article 9(3) GDPR;
d. For archiving purposes in the public interest, purposes of scientific or historic research or for statistical purposes pursuant to Article 89(1) GDPR, if the right cited in (1) does not render impossible or seriously impair the realization of these objectives of this processing, or
e. for establishment, exercise or defence of legal claims.
14.5. Right to be informed
If you have asserted the right to rectification, erasure or restriction of the processing relative to the controller, the controller is obligated to inform all recipients to whom the personal data relating to you has been disclosed, to correct the data or delete the data or restrict the processing, unless this proves to be impossible or it involves disproportionate effort.
You have the right to be informed of these recipients by the controller.
14.6. Right to data portability
You have the right to receive the personal data relating to you that you have provided to the controller in a structured, commonly used and machine-readable format. Moreover you have the right to transmit this data to a different controller without hindrance from the controller to which the personal data was provided, if
a. the processing is based on a consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and
b. the processing occurs by automated means.
Moreover, in exercising this right you have the right to have the personal data relating to you transmitted from one controller to another where technically feasible. Freedoms and rights of other persons must not be hereby impaired.
The right to data portability does not apply to processing of personal data that is required for processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority that has been vested in the controller.
14.7. Right to object
You have the right, at any time, to object to the processing of your personal data, for reasons arising from your particular situation, which is based on Article 6(1)(e) or (f) GDPR, including profiling based on these provisions.
The controller no longer processes the personal data relating to you, unless he can provide compelling legitimate reasons for the processing that override your interests, rights and freedoms, or if the processing is used for establishment, exercise or defence of legal claims.
If the personal data relating to you is used for direct marketing, you have the right to object to the processing of your personal data for the purpose of this type of marketing; this also applies for profiling, to the extent that profiling is related to such direct marketing.
If you object to the processing of your personal data for direct marketing purposes, then the personal data will no longer be processed for these purposes.
You have the possibility, in the context of use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object via automated means using technical specifications.
In the case of data processing for the purposes of scientific or historical research or for statistical research purposes:
You also have the right, for reasons arising from your particular situation, to object to the processing of the personal data relating to you that occurs for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR.
This right to object can be restricted, if it presumably renders the realisation of the research or statistical purposes impossible or seriously impairs said realisation and the restriction is necessary for the fulfilment of the research or statistical purposes.
14.8. Right to revoke the declaration of consent under data protection law.
You have the right to revoke your declaration of consent under data protection law at any time. Through revocation the lawfulness of the processing, due to the consent that occurred until revocation, remains unaffected.
14.9. Automated decision-making in the specific case, including profiling
You have the right to not be subjected to a decision based exclusively on automated processing – including profiling – that develops its legal effect relative to yourself you or that considerably affects you in a similar manner. This does not apply if the decision
a. is required for entering into a contract or for fulfilment of a contract between yourself and the controller,
b. is permissible due to statutory regulations of the Union or of the Member States, to which the controller is subject, and these statutory regulations contain appropriate measures for protecting your rights and freedoms and your legitimate interests or
c. occurs with your express consent.
However, these decisions must not be based on special categories of personal data pursuant to Article 9(1) GDPR, if Article 9(2)(a) or (g) does not apply and appropriate measures have been taken for protection of rights and freedoms, as well as your legitimate interests.
With regard to the cases cited in a. and c. the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or your own point of view and to contest the decision.
14.10. Right to appeal to a supervisory authority
Without prejudice to administrative or judicial remedy, you also have the right to appeal to a supervisory authority, in particular a supervisory authority in the Member State in which you reside, in which your place of work is located, or in which the presumed infringement occurs, if you are of the opinion that the processing of the personal data relating to you is in violation of the GDPR. The supervisory authority to whom the appeal has been submitted informs the appellant of the status and of the results of the appeal, including the possibility of judicial remedy pursuant to Article 78 GDPR. - Forwarding of the data to third parties
15.1 If we disclose data to other persons and companies (commissioned processors or third parties) as part of our processing, transfer the data to them, or otherwise grant them access to the data, this shall only take place on the basis of legal permission (e.g. if a transfer of the data to third parties, such as payment service providers, pursuant to Article 6(1)(b) GDPR is required for contract fulfilment), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
15.2 If we commission third parties with the processing of data on the basis of a so-called "commissioned data processing contract", then this occurs on the basis of Article 28 GDPR. - Legal basis of the processing
If we obtain the consent of the data subject for the processing of personal data, then Article 6(1)(a) of the General Data Protection Regulation (GDPR) serves as the legal basis. For the processing of personal data that is required for fulfilment of a contract, with the data subject as contracting party, Article 6(1)(b) GDPR serves as the legal basis. This also applies for processing procedures that are necessary for pre-contractual measures. If a processing of personal data is required for fulfilment of a legal obligation, to which our company is subject, then Article 6(1)(c) GDPR serves as the legal basis. In the event that vital interests of the data subject or of a different natural person necessitate processing of personal data, then Article 6(1)(d) GDPR serves as the legal basis. If the processing is required for protection of a legitimate interest of our company or of a third person and the interests, fundamental rights and freedoms of the data subject do not override the first interest cited, then Article 6(1)(f) GDPR serves as the legal basis for the processing. The legitimate interest of our company is the execution of our business activity. - Duration of the storage of personal data
Personal data is stored for the duration of the respective statutory retention period. After this period expires a routine erasure of the data occurs, if a need for a contract initiation or contract fulfilment does not exist.
17.1. Questions & suggestions
If you have questions or suggestions please send an email to info@lorch.eu
26.08.2018