Information requirements according to Art. 12 ff. of the EU GDPR

Data Protection

Impressionen aus der Produktion

Your contact as controller within the meaning of the European General Data Protection Regulation („GDPR”) and other national data protection laws of the member states as well as other provisions of data protection law is:

1. Data processing on our website

For the processing of your personal data in connection with your application and current or new business relationships, the WKS Group company to which you have sent your application or with which you have a business relationship is controller within the meaning of the GDPR:

WKS Druckholding GmbH
Industriestraße 3
41849 Wassenberg

Phone: +49 (0) 24 32/49 01 – 0
Fax: +49 (0) 24 32/49 01 – 75 29
Email: info@wksgruppe.de

(hereafter “we”, “us” or “our”)

2. Other data processing

In line with the EU GDPR, the entity responsible for the processing of your personal data relating to your application as well as to current or new business relations is the WKS Group affiliate to which you have addressed your application or with which you are conducting a business relationship:

WKS Druckholding GmbH
Industriestraße 3
41849 Wassenberg

Phone: +49 (0) 24 32/49 01 – 0
Fax: +49 (0) 24 32/49 01 – 75 29
Email: info@wksgruppe.de

WKS Print Partner GmbH
Westendstraße 145143 Essen

Phone.: +49 (0) 2 01/10 06 – 0
Fax: +49 (0) 2 01/10 06 – 71 70
Email: info@wksgruppe.de

Westend Druckereibetriebe GmbH
Westendstraße 1
45143 Essen

Phone: +49 (0) 2 01/10 06 – 0
Fax: +49 (0) 2 01/10 06 – 71 70
Email: info@wksgruppe.de

Kraft-Schlötels GmbH
Industriestraße 3
41849 Wassenberg

Phone: +49 (0) 24 32/49 01 – 0
Fax: +49 (0) 24 32/49 01 – 75 29
Email: info@wksgruppe.de

Inline Rollenoffset Ploch & Strube GmbH
Stimmerwiesen 3
34587 Felsberg

Phone: +49 (0) 56 62/94 87 – 2 00
Fax.: +49 (0) 56 62/94 87 – 2 88
Email: info@ploch-strube.de

Strube Druck & Medien GmbH
Stimmerwiesen 3
34587 Felsberg

Phone: +49 (0) 56 62/94 87 – 2 00
Fax.: +49 (0) 56 62/94 87 – 2 88
Email: info@ploch-strube.de

Haberbeck Druck GmbH
Industriestr. 17
32791 Lage

Phone: +49 (0) 52 32/6009 – 0
Fax: +49 (0) 52 32/99 99 81 00
Email: info@haberbeck.de

WKS Fulfillment GmbH
Industriestr. 17
32791 Lage

Phone: +49 (0) 5232/6009 – 100
Email: info@haberbeck.de

WKS Solutions GmbH
Pleidelsheimer Straße 15
74321 Bietigheim-Bissingen

Phone: +49 (0) 71 42/4 69 85 – 0
Fax: +49 (0) 71 42/4 69 85 – 90
Email: solutions@wksgruppe.de

The protection of your personal data has a high priority for us. To reflect this importance, we have commissioned a consulting firm specializing in data protection and data security to handle these central issues. Our data protection officer also comes from this highly experienced group of experts.

We are counselled by:

MAGELLAN Rechtsanwälte, Brienner Straße 11, 80333 München / www.magellan-datenschutz.de

For all questions concerning data protection and data security, please contact our data protection officer directly at MAGELLAN Rechtsanwälte:

Email: datenschutz_wks@magellan-rechtsanwaelte.de / Phone: +49 (0) 24 32/49 01 – 0

1. Website functions

i. Provision of website and creation of log files

a. Legal basis

Legal basis for the processing of your personal data in the context of providing the website and the creation of log files is Art. 6 (1) lit. f GDPR.

b. Purpose

The temporary storage of your personal data by us is necessary to enable the website to be delivered to your computer. For this purpose, your personal data must be stored for the duration of the session.

Your personal data are stored in log files to ensure the functionality of the website. Your personal data also help us to optimise the website and to ensure that our IT systems are secure. Your personal data will not be processed in any other way.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In case your personal data are recorded for the purpose of providing the website, this happens as soon as the relevant session has ended.

If your personal data is stored in log files, they will be erased after 3 month at the latest. If the log files are stored beyond this period, your personal data will be made anonymous so that it is no longer possible to assign them to a website visitor.

d. Objection and rectification option

The collection of your personal data for the provision of the website and the storage of your personal data in log files is mandatory for operating the website. Consequently, you cannot object to this data processing.

ii. Use of technically necessary cookies

a. Legal basis

Legal basis for the processing of your personal data in the context of the use of technically necessary cookies is Art. 6 (1) lit. f GDPR.

b. Purpose

The purpose of using technically necessary cookies is to make it easier for you to use our website. Some functions of our website cannot be offered without the use of cookies. For this, it is necessary that your browser is recognised again after a page change. Your personal data will not be processed in any other way.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected; this happens, in particular, as soon as the relevant session has ended.

d. Objection and Rectification Option

An overview of the technically necessary cookies used on our website can be found at the bottom of the page.

Cookies are stored on your computer and transmitted from the computer to our website. Therefore, you have complete control over the use of cookies.

By adjusting the settings of your browser you can deactivate or restrict the transmission of cookies. You can also, at any time, delete cookies that have already been stored. This can also be done automatically. However, if you deactivate cookies for our website, you might not be able to use all website´s functions to their full extent.


iii. YouTube videos

a. Legal basis

The legal basis for the processing of your personal data by means of the integration of YouTube videos in our website, is Art. 6 (1) lit. a GDPR.

b. Purpose

The processing of your personal data by means of the integration of YouTube videos serves the purpose of providing an appealing, uniform presentation of video content on our website, independent of your terminal device.

c. Duration of storage

We implement YouTube videos in our website using the advanced privacy mode. This mode ensures that no further information about your visit to our website is stored beyond the integration. Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. This is the case at the latest after the end of your visit to our website.

d. Objection and rectification option

You have the possibility to object to the processing of your personal data in the context of the presentation of video content on our website at any time for the future. You can revoke your consent by closing the application and/or reloading the website.

We have no influence on the data processing carried out by YouTube. You can find more information on this at:

https://policies.google.com/privacy?hl=en-US

2. Sales & Marketing

i. Contact form and email contact

a. Legal basis

Legal basis for the processing of your personal data transmitted in the course of contacting us is Art. 6 (1) lit. f GDPR. If you contact us in order to conclude a contract, Art. 6 (1) lit. b GDPR is an additional legal basis for the processing of your personal data.

b. Purpose

If you contact us, the processing of your personal data serves only to deal with your request.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of any personal data sent in the course of contacting us, this happens when your request has been processed and no legal retention periods prevent erasure.

d. Objection and rectification option

You can always object to the processing of your personal data in the context of contacting us for the future. In this case, however, we will not be able to process your request any further. All personal data stored in the context of contacting us will be erased, unless legal retention periods prevent erasure.


ii. Matomo

a. Legal basis

Legal basis for processing of your personal data in the context of the use of “Matomo” is Art. 6 (1) lit. f GDPR.

b. Purpose

The processing of your personal data enables us to optimise the user-friendliness of our website (“web analysis”) and promote turnover by selling goods or services.

c. Duration of storage

Your personal data will be deleted as soon as you object to the processing of your personal data in the context of the use of “Matomo” or they are no longer needed for the aforementioned purposes. If any further processing takes place, your personal data will be anonymised, so that they can no longer be matched to you.

d. Objection and rectification option

You can object to the processing of your personal data in the context of the use of “Matomo” at any time for the future by clicking on the “Opt-Out” checkbox, that you can find in section “IX. Objection option” at the end of our data protection policy.

3. Application process

a. Legal basis

i. Personal data

Insofar as we obtain your consent for the processing of personal data, Art. 6 (1) lit. a GDPR and Art. 88 (1) GDPR and § 26 (2) Bundesdatenschutzgesetz (BDSG) is the legal basis.

In the processing of personal data which is necessary for hiring decisions, Art. 6 (1) lit. b GDPR, Art. 88 (1) GDPR and § 26 (1) BDSG, § 611a Bürgerliches Gesetzbuch (BGB) is the legal basis.

Insofar as the processing of personal data is necessary to comply a legal obligation to which we are subject, Art. 6 (1) lit. c GDPR is the legal basis.

In the event that vital interests of you or another natural person make it necessary to process personal data, Art. 6 (1) lit. d GDPR is the legal basis.

If the processing is necessary to safeguard a legitimate interest of ours or of a third party and if your interests, fundamental rights and freedoms do not override the former, Art. 6 (1) lit. f GDPR is the legal basis for the processing.

ii. Special categories of personal data

Insofar as we obtain your consent for the processing of special categories of personal data (Art. 9 (1) GDPR) such as religious affiliation, nationality and health data, Art. 9 (2) lit. a GDPR is the legal basis.

If the processing of special categories of personal data is necessary to enable us to exercise our rights under labor law, social security and social protection law and to comply with our obligations in this respect, the legal basis for processing is Art. 9 (2) lit. b GDPR, Art. 88 (1) GDPR and § 26 (3) BDSG.

If the processing of special categories of personal data is necessary for the protection of vital interests, the legal basis for the processing is Art. 9 (2) lit. c GDPR.

If the processing relates to special categories of personal data which have manifestly been made public by you, the legal basis is Art. 9 (2) lit. e GDPR.

If the processing of special categories of personal data is necessary for the purposes of preventive or occupational medicine or for the assessment of the working capacity of the employee, the legal basis is Art. 9 (2) lit. h GDPR.

b. Purpose

Your personal data will be processed for the purpose of establishing the employment relationship, in particular for the fulfilment of contractual, legal, if applicable, collective agreement and social security obligations.

c. Duration of storage

Your personal data are erased or blocked as soon as they are no longer necessary to achieve the purpose for which they were stored. Furthermore, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which we are subject. Data will also be erased or blocked if a storage period prescribed by the aforementioned standards expires, unless it is necessary to continue storing the data in order to conclude or fulfil a contract.
 
Afterwards we store your data for the following periods, among others:
 
– Application files and application data will be stored for up to 6 months after the decision not to appoint a candidate, on the basis of the burden of proof of discrimination according to the legal term of §§ 21 (5), 22 Allgemeines Gleichbehandlungsgesetz (AGG).
– Application documents will otherwise be stored until the dissolution or termination of the employment relationship.
 

d. Objection and rectification option

The processing of your personal data within the application process is mandatory for the establishment of the employment relationship. Consequently, there is no possibility to object to this processing.

If the processing of your personal data is based on consent, you have the possibility to withdraw your consent at any time.

4. Data subjects´ requests and legal disputes

i. Data subjects´ requests pursuant to Art. 12 et seq. GDPR

a. Legal basis

Legal basis for the processing of your personal data in the context of processing your data protection related-request (“data subjects´ request”) is Art. 6 (1) lit. c in connection with Art. 12 et seq. GDPR. Legal basis for the subsequent documentation regarding the handling of your data subject´s request in accordance with the legal provisions is Art. 6 (1) lit. f GDPR.

b. Purpose

The purpose of processing your personal data in the context of handling your data subject´s request is to answer your data protection-related enquiry. The subsequent documentation regarding the processing of your request is to fulfil the obligation of accountability required by law, Art. 5 (2) GDPR.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the processing of data subject´s requests, pursuant to § 41 BDSG (German Federal Data Protection Act, “Bundesdatenschutzgesetz” – “BDSG”) in connection with § 31 (2) Nr. 1 OWiG (German Regulatory Offences Act, “Gesetz über Ordnungswidrigkeiten” – “OWiG”), this is three years after the conclusion of the respective procedure.

d. Objection and rectification option

You can object to the processing of your personal data for the future at any time in the context of the processing of data subject´s requests. In this case, however, we will not be able to process your request any further.

The documentation of the processing of the respective data subject´s request is mandatory by law. Consequently, you cannot object to this data processing.


ii. Defending and enforcing legal claims

a. Legal basis

Legal basis for the processing of your personal data in the context of defending and enforcing legal claims is Art. 6 (1) lit. f GDPR.

b. Purpose

The purpose of processing your personal data in the context of defending and enforcing legal claims is the defence of unjustified claims and the legal enforcement of claims and rights.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected.

d. Objection and rectification option

The processing of your personal data in the context of defending and enforcing legal claims is absolutely necessary for the defence and enforcement thereof. Consequently, you cannot object to this processing.

1. Supplier system and continuing business relationship

a. Legal basis

Legal basis for the processing of your personal data as well as the personal data of the contact persons of your company in the context of the supplier form, supplier system and continuing business relationship is Art. 6 (1) lit. b GDPR or Art. 6 (1) lit. f GDPR.

If you or the contact persons of your company have given their consent, Art. 6 (1) lit. 1 GDPR is an additional legal basis for the processing of your personal data as well as the personal data of the contact persons of your company.

b. Purpose

The purpose of processing your personal data as well as the personal data of the contact persons of your company within the context of the supplier form, supplier system and continuing business relationship is the contract award, implementation and accounting of the respective contract as well as the consideration in future contract awards or tenders.

c. Source

If we have not received your personal data directly from you, the contact person of your company has provided us with your personal data as part of the supplier form.

d. Duration of storage

Your personal data as well as the personal data of the contact persons of your company will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.

In the context of the supplier form, supplier system and continuing business relationship, this is considered to be the case when the contract on which the order is based has been fulfilled and all entitlements arising from the contractual relationship have become statute-barred or there are no longer any statutory retention periods.

In the case of consideration in future contract awards or tenders, this is the case if your company is clearly no longer interested in consideration in future contract awards or tenders.

e. Objection and rectification option

The processing of your personal data in the context of the supplier form, supplier system and continuing business relationship is absolutely necessary for the defence and enforcement thereof. Consequently, you cannot object to this.

 

2. Business closure and continuing business relationship

a. Legal basis

Legal basis for the processing of your personal data as well as the personal data of the contact persons of your company in the context of business closure and continuing business relationship is Art. 6 (1) lit. b GDPR or Art. 6 (1) lit. f GDPR.

b. Purpose

The purpose of processing your personal data as well as the personal data of the contact persons of your company within the scope of the business conclusion and continuing business relationship is the implementation and accounting of the respective order as well as the preparation of future orders or tenders.

c. Duration of storage

Your personal data as well as the personal data of the contact persons of your company will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.

In the context of the implementation and accounting of the respective order, this is considered to be the case when the contract on which the order is based has been fulfilled and all entitlements arising from the contractual relationship have become statute-barred or there are no longer any statutory retention periods.

In the case of the preparation of future contract awards or tenders, this is the case when your company has made a final decision against us as your service provider.

 

d. Objection and rectification option

The processing of your personal data in the context of the implementation and accounting of the respective order is absolutely necessary for the defence and enforcement thereof. Consequently, you cannot object to this.

You can always object to the processing of your personal data in the context of the preparation of future contract awards or tenders for the future.

Within our company, the offices and departments that receive personal data are those that need them to fulfil the aforementioned purposes. In some cases we work together with different service providers and therefore transfer your personal data to other trusted recipients. These can include:

– WKS Group entities
– human resources department
– possible superiors of the applicant concerned
– other departments
– financial accounting
– works council
– data protection officer
– severely disabled representatives
– equal opportunities officer
– controlling/auditing
– integration office in case of severe disability
– banking institutions
– insurance companies
– external service providers
– document shredder
– IT service provider
– lawyers, courts, tax consultants

As part of the processing of your personal data, we may transfer your personal data to trustworthy and specially selected service providers in third countries. Third countries are countries outside of the European Union (EU) or the European Economic Area (EEA).

We only work with service providers who provide us with the appropriate safeguards for the security of your personal data and can guarantee that your personal data will be processed strictly in accordance with the European data protection standards. A copy of these appropriate safeguards can be examined at our premises.

If we transfer personal data to third countries, we do so on the basis of a so-called “adequacy decision” of the European Commission or, in the absence of such a decision, on the basis of so-called “standard data protection clauses”, which have also been adopted by the European Commission.

You have the following rights against us:

1. Right of access

You have the right to access as to whether or not and, if so, what your personal data of you are being processed by us. Is this the case, we will additionally give you access to the following:
 
(1) the purpose of the processing;
(2) the categories of personal data concerned;
(3) the recipients of your personal data;
(4) the envisaged period of storage or the criteria used to determine the envisaged period of storage; 
(5) any other rights you have; 
(6) where we have not obtained the personal data from you: Any available information as to their source; 
(7) if available: the existence of automated decision-making and any information about the logic involved, as well as the significance and the envisaged consequences of the processing. 
 

2. Right to rectification

You have the right to rectification and/or completion of the personal data that is being processed by us, if it is inaccurate or incomplete.

3. Right to restriction of processing

You have the right to restriction of processing of your personal data, provided that
 
(1) we verify the accuracy of your personal data being processed by us;
(2) the processing of your personal data is unlawful;
(3) you need the personal data being processed by us for the purpose of prosecution when we no longer need your personal data for the purpose of processing;
(4) you have objected to the processing of your personal data and we are in the process of verifying your objection.
 

4. Right to erasure

You have the right to erasure of your personal data, provided that
 
(1) we no longer need your personal data for its original purpose;
(2) you withdraw your consent and there is no other legal ground for processing your personal data;
(3) you object to the processing of your personal data and, unless it is about direct marketing, there are no overriding grounds for further processing;
(4) the processing of your personal data is unlawful;
(5) the erasure of your personal data is required by law;
(6) your personal data have been collected in relation to the offer of information society services when you were a minor.
 

5. Right to notification

If you have asserted your right to rectification, erasure of data or restriction of processing, we will communicate any rectification, erasure of data or restriction of processing to any recipients of your personal data.

6. Right to data portability

You have the right to receive your personal data processed by us on the basis of your consent or for the performance of a contract in a structured, commonly used and machine-readable format as well as to transmit them to another controller. If it is technically feasible, you have the right to have them directly transmitted from us to another controller.

7. Right to object

You have the right to object to the processing of your personal data on particular grounds. If this is the case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing.

If your personal data is being processed for the purpose of direct marketing, you have the right to object at any time.

8. Right to withdraw

You have the right to withdraw your consent given to us at any time. The withdrawal of the consent does not affect the lawfulness of the processing carried out based on the consent before your withdrawal.

9. Right to lodge a complaint with a supervisory authority

Regardless of any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority, if you believe that the processing of your personal data by us violates the provisions of the GDPR.

The competent supervisory authority for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Kavalleriestr. 2 – 4
40213 Düsseldorf, Germany

Provider

Name of cookie

Description

Storage duration

WKS

wpjb_transient_id

This cookie is used to enable the functionality of our career portal.

Session

Matomo

MATOMO_SESSID

This cookie is used by Matomo to implement the manual “opt-out” from web analytics.

Session

Matomo

matomo_ignore

This cookie is used by Matomo to implement the manual “opt-out” from web analytics.

30 years

Matomo

mtm_consent_removed

This cookie is used by Matomo to implement the manual “opt-out” from web analytics.

30 years