Privacy Policy - Schauhaus viel zu sehen GmbH

Privacy policy

Name and address of the responsible person

The responsible party within the meaning of the European Data Protection Regulation (“EU-DSGVO”) and other national data protection laws of the member states as well as other data protection regulations is:

Schauhaus – viel zu sehen GmbH
Managing Director Barbara Saller
Markt Platz 5
90762 Fürth
Phone 0911 7879787
Fax 0911 7879786
www.schauhaus.com
info@schauhaus.com

Data processing when you visit our website

a. Storage in so-called log file

At our website, information is automatically sent to our server by the browser used on your end
automatically sent to the server of our website by the browser used on your sent. This information is temporarily stored in a so-called log file.
The following information is collected without your intervention and stored until
stored until automatically deleted after the browser is closed:

IP address of the requesting computer
Date and time of access
Name and URL of the accessed file
Website from which the access was made (referrer URL)
Browser used and, if applicable, the operating system of your computer as well as the name of your access provider

b. Legal basis

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f EU-DSGVO. Our legitimate interest follows from the purposes for data collection listed below.

c. Purpose

The aforementioned data is processed by us for the following purposes:

Ensuring a smooth connection setup of the website
Ensuring a comfortable use of our website
Evaluation of system security and stability as well as
For further administrative purposes

Contact by e-mail

a. Description, scope and duration of data processing

For questions of any kind, we offer you the possibility to contact us by e-mail.
The scope of the data we collect includes your e-mail address and the content of your e-mail. Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose of their collection. For the personal data that was sent in the context of contacting us, this is the case when your request has been processed and legal has been processed and legal retention periods oppose deletion.

b. Legal basis

Legal basis for the processing of your personal data, which is transmitted in the context of the
contact is your consent in accordance with Art. 6 para. 1. lit. a.EU-DSGVO. If the contact is aimed at the conclusion of a contract, then Art. 6 para. 1 lit. b EU-DSGVO is an additional legal basis for
the processing of your personal data.

c. Purpose

The processing of your personal data in the event of a contact serves us solely to process your request.

d. Possibility of objection and removal

You have the option at any time to object to the processing of your personal data in the context of contacting us for the future. In this case, however, we will not be able to further process your request. All personal data stored in the course of contacting you will be deleted in this case, unless legal retention periods prevent deletion.

Data subject input according to Art. 12 ff. EU-DSGVO

a. Legal basis

The Legal basis for the processing of your data and the personal data of the contact persons of your company within the scope of processing a data protection-related inquiry (“data subject input”) is Art. 6 para. 1 lit. c in conjunction with. Art. 12 et seq. EU-DSGVO. The legal basis for the subsequent documentation of the legally compliant processing of data subject input is Art.
6 para. 1 lit. f EU-DSGVO.

b. Purpose

The purpose of the processing of personal data within the framework of the processing of
Data Subject Submissions is to respond to the data protection-related inquiry.
The subsequent documentation of the legally compliant processing of the respective
data subject input serves to fulfill the legally required obligation to provide evidence, Art. 5 para. 2 EU-DSGVO.

c. Storage period

The personal data is deleted as soon as it is no longer required to achieve the purpose of their collection is no longer required. In the case of the processing of data subjects, this is in accordance with § 41 BDSG in conjunction with § 31 Para. 2 No. 1 OWiG three years after the end of the respective process.

d. Possibility of objection and removal

You have possibility at any time to object to the processing of your personal data in the context of
processing of data subject data for the future. object. In this case, however, we will not be able to further process your data protection request.

The documentation of the legally compliant processing of the respective data subject input is mandatory. Consequently, there is no possibility for you to object.

Legal defense and enforcement

a. Legal basis

The legal basis for the processing of your data and the personal data of your company’s contact persons in the context of legal defense and enforcement is Art. 9 para. 2 f lit. f; 6 para. 1 lit. f EU-DSGVO.

b. Purpose

The purpose of the processing of personal data within the framework of legal defense and enforcement is the defense against unjustified claims as well as the legal enforcement and assertion of claims and rights.

c. Storage period

The personal data will be deleted as soon as they are no longer required for the purpose of their collection is no longer required.

d. Possibility of objection and removal

The processing of your personal data in the context of legal defense and enforcement is absolutely necessary for the legal defense and enforcement. Consequently, there is no possibility to object.

Rights of the data subjects

If your or the personal data of your company’s contact persons are processed by us, you
processed by us, you or the respective contact person of your company is the data subject within the meaning of the EU-DSGVO. Data subjects have the following rights vis-à-vis us:

a. Right to information

You have in accordance with Art. 15 EU-DSGVO the right to request information about their personal data processed by us. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom their data have been or are being disclosed, the planned storage period, the existence of a right to rectification, erasure,
restriction of processing or objection, the existence of a right of right to lodge a complaint, the origin of their data, insofar as this has not been collected by us, as well as the existence of a data
as well as on the existence of automated decision-making, including profiling, and, if applicable
including profiling and, if applicable, meaningful information about their details thereof;

b. Right to rectification

You have in accordance with Art. 16 EU-DSGVO the right to immediately request the correction of incorrect or completion of your personal data stored by us.

c. Right to deletion

You have in accordance with Art. 17 EU-DSGVO the right to request the deletion of your personal
personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, or the assertion, exercise or defense of legal claims.

d. Right to restriction of processing

You have in accordance with Art. 18 EU-DSGVO the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by them, the processing is unlawful, but they reject their erasure and we no longer need the data, but they want to use it for the purpose of assertion, exercise or defense of legal claims, or if they have objected to the processing in accordance with Art. 21 EU-DSGVO.

e. Right to information

Insofar as they asserted their right to rectification, erasure or restriction of processing have asserted, we are obliged to inform all recipients of the recipients of the personal data of this correction, deletion of the data or Restriction of processing inform. Pursuant to Art. 19 Sentence 2
EU-DSGVO, you have the right to be informed by us about these recipients upon request.
be informed.

f. Right to data portability

You have the right, pursuant to Art. 20 EU-DSGVO, to have the personal data that you have
provided to us in a structured, common and machine-readable format or to format or to request the transfer to another responsible party.

g. Right to object to direct marketing

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f EU-DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 EU-DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

h. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right under Article 77 EU GDPR to lodge a complaint with a supervisory authority if you consider that the processing of your personal data is not lawful.

As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose. The data protection supervisory authority responsible for our registered office is the

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach
https://www.lda.bayern.de

Social Media

We would like to point out that user data may be processed outside the European Union. This may result in risks for the users because, for example, the enforcement of the rights of the users could be made more difficult.

The processing of the users’ personal data is based on basis of our legitimate interests in providing effective information to the Users and communication with the Users pursuant to Art. 6 para. 1 lit. f. DSGVO.
If the users are asked by the respective providers of the platforms for a consent to the aforementioned data processing, the legal basis of the processing is legal basis of the processing is Art. 6 para. 1 lit. a., Art. 7 DSGVO.

For a detailed description of the respective processing and the opt-out options, please refer to the information of the providers linked below.

Facebook, -pages, -groups, (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) based on an agreement on joint processing of personal data – privacy policy: https://www.facebook.com/about/privacy/, specifically for pages: https://www.facebook.com/legal/terms/information_about_page_insights_data, opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com,

Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – privacy policy/opt-out: http://instagram.com/about/legal/privacy/.

Use of OpenStreetMap

We use a map section from OpenStreetMap (https://www.openstreetmap.de/) on our website to display the route to our company for you and to make it easier for you to plan your journey.

OpenStreetMap is an open source mapping tool. In order for the map to be displayed to you, your IP address is forwarded to OpenStreetMap. You can see how OpenStreetMap stores your data on OpenStreetMap’s privacy page here https://wiki.openstreetmap.org/wiki/DE:Datenschutz and here https://wiki.openstreetmap.org/wiki/DE:Legal_FAQ.

We base the use of the aforementioned tools on Art. 6 (1) (f) DSGVO: the data processing is done to improve the user experience on our website and is therefore in our legitimate interest.

Supplementary data protection information for our customers, suppliers and other business partners (m/f/d)

a. Scope of processing personal data

As a matter of principle, we process your personal data as well as the personal data of your company’s contact persons only to the extent that this is necessary for the performance of our services. Your personal data is regularly processed only on the basis of the performance of a contract or for the implementation of a pre-contractual measure.

b. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) lit. a EU-DSGVO serves as the legal basis.

When processing personal data that is necessary for the performance of a contract between you and us, Art. 6 (1) lit. b EU-DSGVO serves as our legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

If processing of personal data is necessary for compliance with a legal obligation to which we are subject, Art. 6 (1) c EU-DSGVO serves as the legal basis for us.

If the processing is necessary to protect a legitimate interest of us or a third party and if your interests or the interests, fundamental rights and freedoms of the contact persons of your company do not override the former interest, Art. 6 (1) lit. f EU-DSGVO serves us as the legal basis for the processing.

c. Data deletion and storage period

Your personal data as well as the personal data of your company’s contact persons will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which we are subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

Supplementary data protection information for our applicants (m/f/d)

If you apply for a position in our company, your application is voluntary and you can also
voluntary and you can also withdraw your application at any time. Within our company, personal data will be disclosed to those departments and data that they need to carry out the application process. In the course of the application process, we process your personal data as follows
as follows:

a. Categories and origin of your personal data

We process all data and documents relevant in the application process, in particular the following types of personal data:

name, date of birth, curriculum vitae, citizenship/work permit
contact details, in particular address, telephone number, email
certificates, qualifications, e.g. driving license holder
if applicable, data on health suitability and any restrictions
if applicable, severe disability

We process the personal data received from you and, if applicable, personal data permissibly received from other bodies or from other third parties to the extent that this is necessary for the application process and we are permitted to process this data in accordance with the statutory provisions.

b. Purposes and legal basis of the processing of your personal data

aa. For the fulfillment of a contract or pre-contractual measures, Art. 6 para. 1 lit. b) EU-DSGVO in conjunction with § 26 BDSG.

Your personal data is processed for the purpose of processing your application in response to a specific job advertisement or as a speculative application, and in this context in particular for the following purposes:

to check and assess your suitability for the position to be filled
to draw up the employment contract
to assert legal claims and defend you in legal disputes

bb. In the context of a balancing of interests, Art. 6 para. 1 lit. f) EU-DSGVO in conjunction with § 26 BDSG.

Beyond the actual performance of the (pre-)contract, we may process your data if it is necessary to protect legitimate interests of us or third parties. These include:

Assertion of legal claims and defense in legal disputes
Prevention and investigation of criminal acts
Measures for building and facility security (e.g., access controls using electronic locking systems where available)

Processing of your data will only take place if and to the extent that no overriding interests on your part speak against corresponding processing.

cc. Based on your consent, Art. 6 para. 1 lit. a) EU-DSGVO in conjunction with. § SECTION 26 BDSG

A processing of your personal data may be carried out with your consent for specific purposes, e.g. for obtaining references from previous employers or for the employers or for the use of your data for subsequent vacancies or for the Placement with our customers and potential customers.

As a rule you can revoke this consent at any time for the future. Processing that took place before the revocation is not affected by this and remain lawful. You will be informed about the purposes and the consequences of a revocation or refusal of consent, you will be informed separately in the corresponding the relevant text of the consent.

Insofar as your application documents contain photos, we regard this as implied consent to process your photo. In accordance with Art. 7 (3) sentence 1 DSGVO, you are entitled to revoke this consent at any time.

dd. To fulfill a legal obligation to which the controller is subject, Art. 6 para. 1 lit. c) EU-DSGVO in conjunction with Section 26 BDSG.

We also process your personal data for the fulfillment of various legal obligations to which we are subject. These are e.g. labor, social, commercial and tax law regulations. As legal basis for the processing in this case are the respective legal regulations in conjunction with Art. 6 para. 1 lit. c DSGVO and in conjunction with. § 26 BDSG.

Insofar as special categories of personal data, in particular health data, are processed in accordance with Art. 9 (1) DSGVO, this serves exclusively to fulfill the obligations incumbent on us in accordance with § 164 SGB IX as part of the application process.

c. Recipients or categories of recipients of your data

Within our company will receive your data from those persons, internal departments or
organizational units receive your data to the extent that these persons require them for the
fulfill our contractual and legal obligations or in the context of the processing and
processing and implementing our legitimate interests, e.g.
Executives and specialist managers who are looking for a new employee or participate in the decision on filling a position, accounting, etc.

A transfer of your data to external parties will take place exclusively

with your consent to clients and potential clients for your placement
for purposes where we are obliged, e.g. tax authorities, to provide information, report or pass on data in order to comply with legal requirements, or where we are entitled to do so, or where passing on data is in the public interest
insofar as external service companies process data on our behalf as order processors or function transferees, e.g. external IT service providers, web providers
on the basis of our legitimate interest or the legitimate interest of the third party for within the scope of the above-mentioned purposes, e.g. to lawyers
if you have given us consent to transfer your data to third parties.

We will not pass on your data to third parties unless we inform you of this separately.
Insofar as we commission service processing, your data will be subject to the security standards specified by us in order to adequately protect your data. In the other cases, the recipients may only use the data for the purposes for which they were for which they were transmitted to them.

d. Duration of storage and deletion of your applicant data

The deletion personal data is deleted as soon as it is no longer required for the application procedure, e.g. in the event of rejection or negative application. This does not apply if legal regulations prevent the deletion or if the or if the continued storage is necessary for evidentiary purposes.
For example, personal data may be retained for evidentiary purposes for the time
for the time during which there is a possibility that claims may be asserted against our company, e.g. those arising from the General Equal Treatment Act.

e. Duration of storage and deletion of your applicant data in the event of your consent to the inclusion of your application in the applicant pool

If you have consented to the inclusion of your application in our applicant pool, your application will be stored for a maximum of 48 months, after which we will automatically your data there automatically. Even before the end of these 48 months, you can contact us at any time and request the deletion of your data from the applicant pool as well. The data will then be deleted immediately.

f. Duration of storage and deletion of your applicant data in the event of the conclusion of a contract

If a contract is concluded following your application, your data will be stored for the purpose of the
the usual organizational and administrative process and for the implementation of the
employment relationship in compliance with the relevant legal regulations.
You will be informed of the details connection with the respective process.

g. No data transfer to third countries

If we process data in a third country i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or if this is done in the context of using third-party services or disclosing, or transferring data to other persons or companies, this is only done if it is done to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or leave the data in a third country only if the legal requirements are met. This means, for example, that the processing takes place on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU or compliance with officially recognized special contractual obligations.