This privacy policy explains how we handle your personal data and sets out your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Tietjen Verfahrenstechnik GmbH (hereinafter referred to as “we” or “us”) is the data controller.

 

Contents

1. General information
2. Contact
3. Legal basis
4. Duration of storage
5. Categories of data recipients
6. Data transfer to third countries
7. Processing in connection with the exercise of your rights
8. Your rights
9. Right to object
10. Data Protection Officer
11. Data processing on our website
12. Processing of server log files
13. Contact details and enquiries
14. Newsletter
15. Cookies
16. Consent Management Tool
17. Analysis of our website
18. a) Google Tag Manager
19. b) Google Analytics
20. c) WP Statistics
21. Tracking & Retargeting
22. a) Google Ads
23. b) Microsoft Advertising
24. External media and third-party services
25. a) Google Maps
26. b) Google reCAPTCHA
27. c) YouTube

III.    Data processing on our social media pages

1. Visiting a social media page
2. Communication via social media pages
3. Further data processing
4. Job applications
5. Making contact
6. Customer and prospect data
7. Use of email addresses for marketing purposes
8. Further information for data subjects in Switzerland

 

 

I.                   General information

1.      Contact

If you have any questions or suggestions regarding this information, or if you wish to contact us to exercise your rights, please direct your enquiry to

 

Tietjen Verfahrenstechnik GmbH
Vor der Horst 6

25485 Hemdingen
Tel.        +49 (0)4106 / 63330
Email    info@ tietjen-original.com

 

2.      Legal basis

The data protection term “personal data” refers to all information relating to an identified or identifiable natural person.  We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. We only process data on the basis of a legal authorisation. We process personal data only with your consent (Section 25(1) TDDDG or Article 6(1)(a) GDPR), to fulfil a contract to which you are a party or, at your request, to take steps prior to entering into a contract (Article 6(1)(b) GDPR), to fulfil a legal obligation (Article 6(1)(c) of the GDPR) or where processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, provided that your interests or fundamental rights and freedoms requiring the protection of personal data do not override those interests (Article 6(1)(f) of the GDPR).

 

If you apply for a vacancy within our company, we also process your personal data for the purpose of deciding on the establishment of an employment relationship (Section 26(1) sentence 1 BDSG or Article 6(1)(b) GDPR).

 

3.      Duration of storage

Unless otherwise stated in the following information, we store the data only for as long as is necessary to achieve the purpose of processing or to fulfil our contractual or legal obligations. Such legal retention obligations may arise in particular from commercial or tax law provisions. From the end of the calendar year in which the data was collected, we will retain personal data contained in our accounting records for ten years and personal data contained in commercial correspondence and contracts for six years. Furthermore, we will retain data relating to consents requiring proof, as well as complaints and claims, for the duration of the statutory limitation periods. We will delete data stored for marketing purposes if you object to its processing for this purpose.

 

4.      Categories of data recipients

We use data processors in connection with the processing of your data. The processing operations carried out by such data processors include, for example, A data processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the data controller. Data processors do not use the data for their own purposes, but carry out data processing exclusively on behalf of the data controller and are contractually obliged to ensure appropriate technical and organisational measures for data protection. In addition, we may transfer your personal data to entities such as postal and delivery services, our bank, tax consultancy/audit firms or the tax authorities. Further recipients may be identified in the following information.

 

5.      Data transfers to third countries

Our data processing activities may involve the transfer of certain personal data to third countries, i.e. countries where the GDPR is not applicable. Such a transfer is permissible if the European Commission has determined that an adequate level of data protection is provided in such a third country. If no such adequacy decision has been issued by the European Commission, the transfer of personal data to a third country will only take place if suitable safeguards are in place in accordance with Article 46 of the GDPR or if one of the conditions set out in Article 49 of the GDPR is met.

 

In the absence of an adequacy decision and unless otherwise stated below, we use the EU Standard Data Protection Clauses as appropriate safeguards for the transfer of personal data to third countries. You have the option of receiving a copy of these EU Standard Data Protection Clauses or viewing them. Please contact us at the address provided under ‘Contact’  for this purpose.

 

If you consent to the transfer of personal data to third countries, the transfer takes place on the legal basis of Article 49(1)(a) of the GDPR.

 

6.      Processing in connection with the exercise of your rights

When you exercise your rights under Articles 15 to 22 of the GDPR, we process the personal data provided for the purpose of implementing these rights and to be able to provide evidence thereof. We will process data stored for the purpose of providing information and preparing such information solely for this purpose and for data protection monitoring purposes, and will otherwise restrict processing in accordance with Article 18 of the GDPR.

 

This processing is based on the legal basis of Article 6(1)(c) of the GDPR in conjunction with Articles 15 to 22 of the GDPR and Section 34(2) of the BDSG.

 

7.      Your rights

As a data subject, you have the right to exercise your data subject rights against us. In particular, you have the following rights:

• In accordance with Article 15 of the GDPR and Section 34 of the BDSG, you have the right to request information as to whether, and if so to what extent, we process personal data relating to you.
• You have the right, in accordance with Article 16 of the GDPR, to request that we rectify your data.
• You have the right, in accordance with Article 17 of the GDPR and Section 35 of the BDSG, to request that we erase your personal data.
• You have the right to have the processing of your personal data restricted in accordance with Article 18 of the GDPR.
• You have the right, in accordance with Article 20 of the GDPR, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and to transmit this data to another controller.
• If you have given us separate consent to the processing of your data, you may withdraw this consent at any time in accordance with Article 7(3) of the GDPR. Such withdrawal does not affect the lawfulness of processing carried out on the basis of your consent prior to the withdrawal.
• If you consider that the processing of your personal data infringes the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR.

 

8.      Right to object

In accordance with Article 21(1) of the GDPR, you have the right to object to processing based on the legal grounds of Article 6(1)(e) or (f) of the GDPR on grounds relating to your particular situation. If we process your personal data for the purpose of direct marketing, you may object to such processing in accordance with Article 21(2) and (3) of the GDPR.

 

9.      Data Protection Officer

You can contact our Data Protection Officer using the following details:

 

Email: datenschutzbeauftragter@tietjen-original.com

Herting Oberbeck Datenschutz GmbH

Hallerstr. 76, 20146 Hamburg

https://www.datenschutzkanzlei.de

 

 

II.            Data processing on our website

When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website. Under data protection law, an IP address is generally also considered to be personal data. An IP address is assigned to every device connected to the internet by the internet service provider so that it can send and receive data.

 

1.      Processing of server log files

When you use our website for purely informational purposes, general information transmitted by your browser to our server is initially stored automatically (i.e. not via registration). By default, this includes: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request, and HTTP status code.

 

The processing is carried out to safeguard our legitimate interests and is based on the legal basis of Article 6(1)(f) of the GDPR. This processing serves the purposes of technical administration and website security. The stored data will be deleted after 30 days at the latest, unless there are specific grounds for a legitimate suspicion of unlawful use and further examination and processing of the information is required for this reason. We are unable to identify you as a data subject on the basis of the stored information. Articles 15 to 22 of the GDPR therefore do not apply in accordance with Article 11(2) of the GDPR, unless you provide additional information enabling your identification in order to exercise your rights set out in these articles.

 

2.      Contact details and enquiries

Our website contains contact forms through which you can send us messages. Your data is transferred in encrypted form (indicated by ‘https’ in the browser’s address bar). All data fields marked as mandatory are required to process your enquiry. Failure to provide this information means that we will be unable to process your enquiry. The provision of further data is voluntary. Alternatively, you can also send us a message via the contact email address. We process the data for the purpose of responding to your enquiry.

 

We process your data on the basis of our legitimate interest in contacting enquirers and, where applicable, initiating or executing contracts with B2B customers. The legal basis for data processing is Article 6(1)(f) of the GDPR.

 

3.      Newsletter

On our website, we offer the option to subscribe to our newsletter. Once you have subscribed, we will keep you regularly updated on the latest news regarding our products and services. A valid email address is required to subscribe to the newsletter. To verify your email address, you will first receive a registration email, which you must confirm by clicking on a link (double opt-in). When you subscribe to the newsletter on our website, we process personal data such as your email address and your name on the basis of the consent you have given. The processing is based on the legal basis of Article 6(1)(a) of the GDPR. You may withdraw the consent you have given at any time with future effect, for example via the “Unsubscribe” link in the newsletter or by contacting us via the channels mentioned above. The lawfulness of any data processing operations that have already taken place remains unaffected by the withdrawal.

 

When you subscribe to the newsletter, we also store your IP address and the date and time of your subscription. The processing of this data is necessary to be able to provide evidence of the consent given. The legal basis arises from our legal obligation to document your consent (Article 6(1)(c) in conjunction with Article 7(1) of the GDPR).

 

We also analyse the reading behaviour and open rates of our newsletter. We evaluate the data generated during the delivery and retrieval of our emails in aggregated form (e.g. delivery rate, open rate, click-through rates, unsubscribe rate, bounce rate) in order to measure the usage and success of the emails. To this end, we collect and process pseudonymised usage data, which we do not link to your email address or IP address. The legal basis for the analysis of our newsletter is Article 6(1)(f) of the GDPR, and the processing serves our legitimate interest in optimising our newsletter. You may object to this at any time by contacting us via one of the channels listed above.

 

We use the Mailchimp service, provided by The Rocket Science Group LLC d/b/a Mailchimp (USA), to manage subscriptions, send the newsletter and carry out analysis. Your email address is therefore transmitted by us to the service provider. If you do not wish your data to be processed by this service provider, you should not subscribe to the newsletter or you should unsubscribe from it.

 

Please note the information in the section ‘Data transfer to third countries’.

 

4.      Cookies

We use cookies and similar technologies (“cookies”) on our website. Cookies are small data files that are stored by your browser when you visit a website. This identifies the browser being used and allows it to be recognised by web servers. You have full control over the use of cookies via your browser. You can delete cookies at any time in your browser’s security settings. You can object to the use of cookies via your browser settings, either generally or in specific cases.

 

The use of cookies is, in part, technically necessary for the operation of our website and is therefore permitted without the user’s consent. We may also use cookies to offer specific functions and content, as well as for analytical and marketing purposes. These may include third-party cookies. We only use such non-technically necessary cookies with your consent in accordance with Section 25(1) of the German Telemedia Act (TDDG) and, where applicable, Article 6(1)(a) of the GDPR. Information on the purposes, providers, technologies used, data stored and the storage duration of individual cookies can be found in the cookie settings of our Consent Management Tool.

 

5.      Consent Management Tool

This website uses the Cookiebot consent management tool from Usercentrics A/S (Denmark, EU) to manage cookies and the processing of personal data.

 

The consent banner allows users of our website to give their consent to specific data processing activities or to withdraw consent that has already been given. By clicking the “I accept” button or by saving individual cookie settings, you consent to the use of the associated cookies.

The legal basis under data protection law is your consent within the meaning of Article 6(1)(a) of the GDPR.

 

In addition, the banner helps us to provide evidence of the declaration of consent. To this end, we process information regarding the declaration of consent and further log data relating to this declaration. Cookies are also used to collect this data. The processing of this data is necessary to be able to provide evidence of consent given. The legal basis arises from our legal obligation to document your consent (Article 6(1)(c) in conjunction with Article 7(1) of the GDPR).

 

You can withdraw your consent to cookies here

Click here to manage your consent.

 

 

6.       Analysis of our website

a)      Google Tag Manager

We use Google Tag Manager from Google Ireland Limited (Ireland, EU) on our website. Google Tag Manager is used to manage our website tags via an interface and triggers other tags, which may in turn collect data without actually accessing this data themselves. Google Tag Manager is a cookie-free domain to which the IP address is transmitted for technical reasons. If deactivation has been carried out at domain or cookie level, this remains in effect for all tracking tags implemented with Google Tag Manager.

 

The processing of your data is carried out on the basis of Article 6(1)(f) of the GDPR and is based on our legitimate interest in the optimisation and efficient operation of our website, as well as the management of our website services and the triggering of tags. Further information on data processing is available at: https://support.google.com/tagmanager/answer/7157428

 

In certain cases, particularly with Google Ads, Google Tag Manager also loads a Google tag before events are sent (e.g. clicking a button or submitting a form). This tag may result in the use of tracking technologies and the transfer of personal data to Google servers even before a specific event is triggered.

 

The processing of your data by the Google Tag is based on your consent in accordance with Article 6(1)(a) of the GDPR.

 

Cookies are set with your consent, which you may withdraw at any time with future effect via the Consent Management Tool. When using the service, the transfer of your data to the USA cannot be ruled out. Please note the information in the section ‘Data transfer to third countries’. Further information on data protection at Google can be found in Google’s privacy policy at https://policies.google.com/privacy#infocollect.

 

b)     Google Analytics

We use the Google Analytics service provided by Google Ireland Limited (Ireland, EU) on our website.

 

Google Analytics is a web analytics service that enables us to collect and analyse data on user behaviour on our website. Google Analytics allows us to measure interaction data from various devices and across different sessions. This enables us to contextualise individual user actions and analyse long-term relationships.

 

To this end, Google Analytics uses cookies that enable an analysis of the use of our website. In addition, personal data in the form of IP addresses, device identifiers and information about interaction with our website is processed. Some of this data consists of information stored on the device you are using. Furthermore, the cookies used also store additional information on the device you are using.

 

Google Ireland will process the data collected in this way on our behalf in order to evaluate how users use our website, to compile reports on activity within our website, and to provide us with further services related to the use of our website and internet usage. In doing so, pseudonymous user profiles may be created from the processed data.

 

The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for data processing in connection with the Google Analytics service is therefore Article 6(1)(a) of the GDPR. You may withdraw this consent at any time with future effect via our Consent Management Tool.

 

We only use Google Analytics with IP anonymisation enabled. This means that the IP address of users is truncated by Google Ireland within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. The IP address transmitted by the user’s browser is not merged with other data. The IP address is truncated on servers within the EU.

 

Data relating to user actions is stored for a period of 2 months and then automatically deleted. Data whose retention period has expired is automatically deleted once a month.

 

 

Further information on how data from websites or apps is used by Google for advertising purposes can be found in Google’s information at:www.google.com/policies/technologies/ads/ .

 

c)      WP Statistics

We use the WP Statistics service on our website, a WordPress plugin provided by VeronaLabs OÜ (Estonia, EU). WP Statistics provides us with various statistics on the use of our website, e.g. regarding the number of website visitors and their origin. These statistics enable us to improve our website and tailor it to the needs of our visitors.

 

When using the service, your IP address is collected and subsequently anonymised.

The processing of your data is carried out on the basis of Article 6(1)(f) of the GDPR and is based on our legitimate interest in optimising and the economic operation of our website.

 

Further information on data protection when using WP Statistics can be found at https://wp-statistics.com/2018/08/16/wp-statistics-gdpr/?utm_source=WordPress&utm_medium=link&utm_campaign=ProductIntroduction.

 

7.      Tracking & Retargeting

a)      Google Ads

We use the online advertising programme Google Ads from Google Ireland Limited (Ireland, EU) on our website, through which we place advertisements on the Google search engine. If you arrive at our website via a Google advert, Google places a cookie on your device (‘conversion cookie’). Each Google Ads customer is assigned a different conversion cookie, so the cookies cannot be tracked across the websites of different Ads customers. The information collected via the cookie is used to generate conversion statistics. This tells us the total number of users who have clicked on one of our Google ads. However, we do not receive any information that can be used to personally identify users.

 

In addition, we use the “Enhanced Conversions” feature, which enables us to track conversions more effectively by processing so-called first-party data (e.g. email address, name, postal address or telephone number). You provide this data to us voluntarily as part of an online interaction (e.g. when submitting a contact form or a quote request) and it is encrypted (“hashed”) using the hash method before being transmitted to Google and subsequently sent to Google in pseudonymised form.

 

Google uses this pseudonymised information to better attribute interactions with our adverts and to improve conversion measurement. In doing so, a comparison with Google accounts may take place, provided that the data subjects are logged in to Google. Neither we nor Google directly identify individual persons.

 

The processing of your data is based on your consent in accordance with Article 6(1)(a) of the GDPR.

 

Cookies are set with your consent, which you may withdraw at any time with future effect via the Consent Management Tool. When using the service, a transfer of your data to the USA cannot be ruled out. Please refer to the information in the section ‘Data transfer to third countries’. Further information on data protection at Google can be found in Google’s privacy policy at https://policies.google.com/privacy#infocollect.

 

 

b)     Microsoft Clarity

We use the Microsoft Clarity service provided by Microsoft Ireland Operations Limited (Ireland/EU) on our website. Microsoft Clarity is a web analytics and user behaviour service that enables us to analyse user interactions on our website. The aim of using this service is to optimise our website and improve its user-friendliness.

In particular, the service collects interaction data (e.g. mouse movements, clicks and scrolling behaviour), technical page data and metadata relating to your session (e.g. session ID, timestamp, approximate location), and makes this data available in the form of heatmaps, session recordings and AI-powered analyses. By default, input content (e.g. form fields) is masked by Microsoft Clarity and is not transmitted in plain text.

The data collected is stored by Microsoft and is available to us, as the website operator, for a period of up to 30 days from the time of recording. Microsoft is entitled to use the collected data beyond this period and for its own purposes.

The processing of your data is based on your consent in accordance with Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR.

Cookies are placed on your device to integrate the service. Cookies are set with your consent, which you may revoke at any time with future effect via our Consent Management Tool.

When using the service, your data will be transferred to third countries, in particular to the USA. Please refer to the information in the section ‘Data transfers to third countries’. For further information on data protection at Microsoft Clarity, please see Microsoft’s privacy statement at https://www.microsoft.com/de-de/privacy/privacystatement.

 

8.      External media and third-party services

a)      Google Maps

We use Google Maps from Google Ireland Limited (Ireland, EU) on our website to display maps and locations. For this integration, processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Google, and Google may set its own cookies.

 

The processing of your data is based on your consent in accordance with Article 6(1)(a) of the GDPR.

 

When using the service, the transfer of your data to the USA cannot be ruled out. Please also note the information in the section ‘Data transfer to third countries’. Further information on data protection at Google can be found in Google’s privacy policy at https://www.google.com/policies/privacy.

 

b)     Google reCAPTCHA

We use the reCAPTCHA service provided by Google Cloud EMEA Limited (Ireland, EU). For this integration, processing of your IP address is technically necessary so that the content can be sent to your browser. Furthermore, Google uses cookies or similar technologies to provide the service. Your IP address and other collected information (e.g. information about your browser and your click behaviour) are therefore transmitted to Google. We use the service for security reasons to verify that form entries are made by a natural person. In this way, automated access attempts and attacks can be detected and prevented. We are legally obliged to take technically and economically reasonable measures to ensure the security of the portal.

 

The processing of your data is based on Article 6(1)(c) of the GDPR in conjunction with Article 32 of the GDPR and Section 19(4) of the TDDDG.

 

When using the service, the transfer of your data to the USA cannot be ruled out. Please refer to the information in the section ‘Data transfer to third countries’. Further information on data protection at Google can be found in Google’s privacy policy at https://www.google.com/policies/privacy.

 

c)      YouTube

We use the YouTube service provided by Google Ireland Limited (Ireland, EU) on our website to embed videos. For such embedding, processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Google, and Google may set its own cookies. We use YouTube in “enhanced privacy mode”, meaning that YouTube does not set any cookies to analyse usage behaviour.

 

The processing of your data is based on your consent in accordance with Article 6(1)(a) of the GDPR. Your consent is managed via our Consent Management system and can be withdrawn at any time via this system.

 

When using the service, the transfer of your data to the USA cannot be ruled out. Please refer to the information in the section ‘Data transfer to third countries’. Further information on data protection at Google can be found in Google’s privacy policy at https://www.google.com/policies/privacy.

 

 

III.  Data processing on our social media pages

We maintain a company page on several social media platforms. Through these, we aim to provide further opportunities to learn about our company and engage in dialogue. Our company has pages on the following social media platforms:

 

• Facebook operated by Meta Platforms Ireland Limited (Ireland, EU), hereinafter “Meta”;
• Instagram by Meta Platforms Ireland Limited (Ireland, EU), hereinafter “Meta”;
• LinkedIn by LinkedIn Ireland Unlimited Company (Ireland, EU), hereinafter “LinkedIn”;
• XING by NEW WORK SE (Germany, EU), hereinafter “XING”;
• YouTube by Google Ireland Limited (Ireland, EU), hereinafter “Google”.

 

When you visit or interact with a profile on a social media platform, your personal data may be processed. The information associated with a social media profile also regularly constitutes personal data. This includes messages and statements made whilst using the profile. Furthermore, during your visit to a social media profile, certain information is often automatically collected, which may also constitute personal data.

 

1.      Visiting a social media page

When you visit our social media page, through which we present our company or individual products from our range, certain information about you is processed. The operators of the social media platforms are solely responsible for this processing of personal data. Further information on the processing of personal data can be found in their privacy policies, to which we provide links below:

 

• Meta (https://www.facebook.com/privacy/explanation). Meta offers the option to object to certain data processing; relevant information and opt-out options can be found at https://www.facebook.com/settings?tab=ads;
• LinkedIn (https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy)
• XING (https://privacy.xing.com/de/datenschutzerklaerung/druckversion)
• Google (https://policies.google.com/privacy)

 

The operators of the social media platforms collect and process event data and profile data and provide us with statistics and insights for our pages in anonymised form, which help us gain an understanding of the types of actions people take on our page (so-called ‘page insights’). These page insights are generated on the basis of specific information about people who have visited our page. This processing of personal data is carried out by the social media operators and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions taken on our page and improving our page based on these insights. The legal basis for this processing is Article 6(1)(f) of the GDPR.

 

We cannot link the information obtained via Page Insights to individual user profiles that interact with our pages. We have entered into agreements with the operators of the social media platforms regarding processing as joint controllers, which set out the distribution of data protection obligations between us and the operators. Details regarding the processing of personal data for the creation of Page Insights and the agreement concluded between us and the operators can be found at the following links:

 

• Meta (https://www.facebook.com/legal/terms/information_about_page_insights_data);
• LinkedIn (https://legal.linkedin.com/pages-joint-controller-addendum);
• XING (https://www.xing.com/terms/onlyfy-one#h2-vereinbarung-zur-gemeinsamen-datenschutzrechtlichen-verantwortlichkeit)

 

You also have the option of exercising your rights vis-à-vis the operators. Further information on this can be found via the following links:

• Meta (https://www.facebook.com/privacy/explanation);
• LinkedIn (https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de);
• XING (https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen)

 

We have agreed with Meta and LinkedIn that the Irish Data Protection Commission is the lead supervisory authority responsible for monitoring the processing of Page Insights. You always have the right to lodge a complaint with the Irish Data Protection Commission (see www.dataprotection.ie) or with any other supervisory authority.

 

2.      Communication via social media pages

We also process information that you have provided to us via our company page on the relevant social media platform. Such information may include the username used, contact details or a message sent to us. We carry out this processing as the sole data controller. We process this data on the basis of our legitimate interest in contacting enquirers. The legal basis for data processing is Article 6(1)(f) of the GDPR. Further data processing may take place if you have given your consent (Article 6(1)(a) of the GDPR) or if this is necessary to comply with a legal obligation (Article 6(1)(c) of the GDPR).

 

 

IV.             Further data processing

1.      Job applications

You have the option to apply via the Careers section of our website. To this end, we collect personal data from you, including in particular your name, CV, cover letter and any other content you provide.

 

Your personal application data will be processed exclusively for purposes related to your interest in current or future employment with us and the processing of your application. Your application will only be processed and reviewed by the relevant contact persons within our organisation.

 

All employees entrusted with data processing are obliged to maintain the confidentiality of your data. Should we be unable to offer you employment, we will retain the data you have provided for up to six months after the conclusion of the application process for the purpose of answering any questions relating to your application and rejection. This does not apply if statutory provisions preclude deletion, if further storage is necessary for the purposes of providing evidence, or if you have expressly consented to longer storage.

 

The legal basis for data collection is Section 26(1) sentence 1 of the Federal Data Protection Act (BDSG).

 

Should we retain your application data for a period exceeding six months and have you expressly consented to this, we would like to point out that this consent may be freely revoked at any time in accordance with Article 7(3) of the GDPR. Such revocation does not affect the lawfulness of the processing carried out on the basis of your consent prior to the revocation.

 

2.      Contacting

If you call us or send a message via the contact email address provided, we will process the data transmitted for the purpose of responding to your enquiry. We process this data on the basis of our legitimate interest in contacting enquirers.

 

The legal basis for data processing is Article 6(1)(f) of the GDPR.

 

3.      Customer and prospect data

When you, as a customer or prospective customer, contact our company, we process your data to the extent necessary to establish or fulfil the contractual relationship. This typically involves processing the personal master data, contractual data and payment details provided to us, as well as the contact and communication details of our points of contact at business customers and business partners. The legal basis for this processing is Article 6(1)(f) of the GDPR.

 

We also process customer and prospective customer data for evaluation and marketing purposes. This processing is carried out on the legal basis of Article 6(1)(f) of the GDPR and serves our interest in further developing our offering and providing you with targeted information about our services.

 

Further data processing may take place if you have given your consent (Article 6(1)(a) of the GDPR) or if this is necessary to comply with a legal obligation (Article 6(1)(c) of the GDPR).

 

4.      Use of your email address for marketing purposes

We may use the email address you provided when placing an order to inform you about similar products and services we offer.

 

The legal basis is Section 7(3) of the Unfair Competition Act (UWG). You may object to this at any time without incurring any costs other than the transmission costs in accordance with standard rates. To do so, you can unsubscribe by clicking on the unsubscribe link included in every email or by sending an email to info@tietjen-original.com.

 

 

V.                Further information for data subjects in Switzerland

If you are a data subject within the scope of the Swiss Federal Act on Data Protection, the information under this section also applies.

The legal references made in this privacy policy are directed at data subjects in Switzerland in accordance with the comparable provisions of the Federal Act on Data Protection. This applies in particular to the applicable data subject rights under Articles 25–29 and 32 of the FADP.

Data processing also takes place in the following countries outside Switzerland:

• Member states of the European Economic Area (e.g. Denmark, Germany, Ireland)
• USA

We guarantee an adequate level of data protection. This is ensured by:

• a recognised adequate level of data protection in accordance with Article 16(1) of the FADP for the recipient country;
• standard data protection clauses that have been previously approved, issued or recognised by the FDPIC, in particular the European Commission’s standard contractual clauses;
• certification in accordance with the principles of the Data Privacy Framework between Switzerland and the USA, where data processing is carried out by an organisation in the USA certified under that framework;
• an international treaty which provides for an adequate level of data protection.