The following company is responsible for processing personal data as part of this web presence in accordance with the requirements of the General Data Protection Regulation (GDPR):
Bio-Zentrale Naturprodukte GmbH
Johannes Mauss
Holzmühlenweg 4
D-84384 Wittibreut-Ulbering
Tel.: 08574 9610-0
www.biozentrale.de
E-Mail: [email protected]
Our data protection officer:
Michael Gruber
Tel.: 0941 462 909 29
E-Mail: [email protected]
We would like to use this Privacy Policy to inform you about the extent your personal data (hereinafter referred to simply as “data”) will be processed.
We process data as part of the operation of our website. The processing of the data will also include disclosure of the data when it is transferred.
Transfer of data to the USA is covered by a European Commission adequacy decision, the EU-US “Privacy Shield”. In the decision, the Commission has certified that the guarantees for the transfer of data to the US, based on the EU-US Privacy Shield, comply with EU data protection standards. Where we submit data to the USA, we have identified that our service providers participate in the EU-US Privacy Shield.
The specific data involved, the purposes behind the processing, the legal bases, recipients and transfers to third countries are listed below:
We keep a record of your visits to our website. The following data is processed as part of our record: Name of the website visited, date and time of the visit, the volume of data transferred, browser type and version, the operating system you use, the referrer URL (of the website you visited directly beforehand), your IP address and the requesting provider. This is necessary to ensure the security of the website. We process the data for the purposes of our legitimate interests, in accordance with Article 6 (1) f) GDPR. The log file will be deleted after seven days, unless it is required to clarify or to prove specific infringements of the law that have come to light during the retention period.
All data that needs be processed in connection with the operation of this website will be stored as part of the hosting process. This is necessary to ensure the operation of the website. We process the data for the purposes of our legitimate interests, in accordance with Article 6 (1) f) GDPR. In order to deliver our online presence, we use the services of web hosting providers to whom we provide the data mentioned above.
If you contact us, your data (name, contact details, if you provide them) and your message will be processed solely for the purpose of processing and dealing with your enquiry. In order to deal with your enquiry, this data will be processed by us on the basis of Article 6 (1) b) GDPR or Article 6 (1) f) GDPR .
So that we can send you regular information about our company and our offers, we offer you the option of receiving a newsletter. When you sign up for the newsletter, we will process the data you enter (email address and other voluntarily provided information).
When you sign up for the newsletter, we will obtain the following consent:
„[ ] I would like to order the Bio-Zentrale GmbH newsletter. I may withdraw my consent at any time by sending an email to [email protected] or by using the unsubscribe link in the newsletter.“
This newsletter will be sent to you following registration on the basis of your prior consent, in accordance with Article 6 (1) a) GDPR.
Signing up for our newsletter is carried out according to the so-called double opt-in procedure. In order to prevent fraudulent activity, we will send you an email after you register, asking you to confirm your registration. In order to prove that the registration process has occurred in accordance with legal requirements, your registration will be recorded. This will also include storing the time of registration and confirming your IP address. We use service providers to send the newsletter, and we provide them with the data mentioned above.
The data will be transferred to the servers of the following service providers in Germany:
rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Deutschland
The certification and more information on data protection can be found at: https://www.rapidmail.de/sicherheit-und-vertrauen
Our webpage uses Cookiebot’s cookie content technology to get your consent for the storage of certain cookies on your terminal device and to document these in accordance with data protection. The supplier of this technology is: Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (https://www.cybot.com).
When you enter our webpage, a connection to the servers of Cybot will be established in order to get your consent and other declarations of agreement regarding the use of cookies. Cookiebot will then store a cookie on your computer in order to be able to assign the given consent or its revocation to you. The data recorded in this way will be stored until you request us to delete it, you delete the Cookiebot cookie itself or until the purpose for which the data is stored no longer applies. Mandatory legal storage obligations remain unaffected.
Cookiebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1, lit. c GDPR.
For this purpose we have concluded a contract for order processing with Cybot A/S (Art. 28 GDPR): a data protection contract guaranteeing that Cybot A/S processes the personal data of our website visitors exclusively according to our instructions and in compliance with the GDPR.
In order to enable the use of certain functions, we use so-called “cookies”. These are small data packets that are stored on your device and exchanged with other providers. Some of the cookies we use are deleted immediately after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognise your computer when you visit next (persistent cookies).
You can delete all cookies stored on your computer and change the settings on most browsers to prevent cookies from being stored.
If you do this, you may have to reconfigure some of the settings manually every time you visit this website and accept some loss of functionality.
We use cookies in connection with the following features:
a) Google Analytics
We use Google Analytics, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google uses certain cookies. The information generated by the cookies about your use of this website (including your IP address) will be transferred to a Google server in the USA and stored there. We use the information stored to analyse your use of the website, compile reports on website activity for the website operators and provide other services related to use of the website. We process the data we obtain for our primary interest, which is to optimise the marketing of our online offer in accordance with Article 6 (1) f) GDPR. Google will not associate your IP address with other Google data under any circumstances.
Please note that this website uses Google Analytics with the extension “anonymizeIp()”. This truncates IP addresses before transferring them to a server in the United States. This means that there will usually be no direct personal link to the stored data. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there.
You may object to the collection of data at any time, and with effect for the future, by using the Google Analytics deactivation browser add-on, found at
http://tools.google.com/dlpage/gaoptout?hl=en.
Please refer to the guidance on Google data usage in the Google Partner Network at:
https://policies.google.com/technologies/partner-sites?hl=en
https://policies.google.com/technologies/ads?hl=en-US
Google’s certification can be found at:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information about data protection can be found at: https://policies.google.com/privacy?hl=en&gl=en
b) Google remarketing/retargeting
We use so-called “tracking cookies” on our website. When you visit our site, permanent cookies store information about which products you have viewed on our website, and via which third-party ads and pages users access our website. If you visit one of our partner websites at a later date, we can display personalised advertising for you based on the items you viewed on our website.
We process the data we obtain for our primary interest, which is to optimise the marketing of our online offer in accordance with Article 6 (1) f) GDPR. The information generated by the cookies about your use of this website (including your IP address) will be transferred to a Google server in the USA and stored there.
Google’s certification can be found at:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information about data protection can be found at: https://policies.google.com/privacy?hl=de&gl=de
We use dynamic content from external sources to optimise the presentation of our website and what it offers. When you visit the website, a request is automatically made via the API to the content provider’s server, and specific log data (such as the users’ IP addresses) is transferred. The dynamic content is then transferred to our website and displayed there.
We use external content in connection with the following features:
a) Integration of YouTube videos
We have videos from the YouTube portal belonging to YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“YouTube”) integrated into our website. When you play the videos, log data will be transferred to YouTube’s servers in the USA. We process the data we obtain for our overriding legitimate interest, which is to optimise the marketing of our online offer in accordance with Article 6 (1) f) GDPR.
YouTube’s certification can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information can be found at: https://policies.google.com/privacy?hl=en&gl=en
b) Google Fonts
We use Google Fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://policies.google.com/privacy?hl=en, Opt-Out: https://adssettings.google.com/authenticated.
We use third-party plugins on our website. You can use them to let your contacts know whether you like our website, and to highlight or share content. The plugins are indicated by the third-party provider’s logo.
When you visit our site, your data will be transferred to the third-party provider.
If you are also a user of a third-party provider’s website, this data can be assigned to your user account on the provider’s website.
This data may be transferred to the third-party provider even if you are not registered as a user on the third-party provider’s website and do not click on the plugin on our site.
However, if the data is transferred but you have not registered on the third-party provider’s website, no direct connection can be made directly to you via your IP address, for example; this could only happen with information from your provider.
The purpose and scope of the data processing carried out by the third-party provider can be found in the relevant provider’s privacy notice.
We process the data we obtain for our overriding legitimate interest, which is to optimise the marketing of our online offer in accordance with Article 6 (1) f) GDPR.
Plugins from the following providers are used on our website:
Facebook plugin, from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
The certification can be found at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Further information can be found at: https://www.facebook.com/privacy/explanation
Twitter plugin, from Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
The certification can be found at: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active
Further information can be found at: https://twitter.com/en/privacy
YouTube plugin, from Google Inc., based in San Bruno/California, USA
The certification can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information can be found at: https://policies.google.com/privacy?hl=en&gl=en
Instagram plugin, from Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA
The certification can be found at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Further information can be found at: https://help.instagram.com/155833707900388
We only store personal data for as long as we need it for the purposes for which it is processed or until you withdraw your consent. Where statutory retention periods must be observed, certain data may be stored for up to ten years, irrespective of the purposes for which it was processed.
You may request information, free of charge, about all of the personal data that we have stored about you.
If you no longer consent to the storage of your data or if the data is incorrect, we will arrange for your data to be erased or blocked, or for the necessary rectifications to be made, once we receive instructions to do so (provided this is permissible under the law as it currently stands). The same applies if you only want us to process data in a restricted manner in future.
Upon request, we will provide you with your data in a commonly used, structured and machine-readable format so that you can, if you wish, transmit the data to another controller.
In addition, you have the right to lodge a complaint with the competent supervisory authority:
(https://www.bfdi.bund.de/EN/Home/home_node.html;jsessionid=0145429720BB1268C7348BA3F7F246A7.1_cid344).
You may withdraw your consent at any time with effect for the future. The withdrawal of your consent will not affect the legality of the processing up to the time you withdraw your consent.
Data from which we are unable to identify the data subject, where this has been anonymised for the purposes of analysis, for example, is not covered by the above-mentioned rights. The right to information, erasure, blocking, rectification or transfer to another company with respect to this data will only be possible if you make additional information available to us which allows us to identify the data.
If you have any questions about the processing of your personal data, if you would like information about your data or would like your data rectified, blocked or erased, or if you would like to object to the processing of your data or to request data to be transferred to another company, please contact the following email address [email protected].
This privacy policy (data protection) informs you about the processing of your personal data during the application process at Bio-Zentrale Naturprodukte GmbH. In accordance with Art. 4 No. 1 DS-GVO, your personal data includes all information that relates or can be related to your person.
Personal information and personal data
During your employment we collect and process information (both in paper and digital form). This information may include:
• Name
• Address
• Date of birth
• Place of birth
• Religious affiliation
• Marital status
• Wage and salary data
• Tariff classification
• Qualification data
• Reviews
• …
If necessary, this may also include information on the severely disabled and other health data.
Purposes of collection and processing
Bio-Zentrale Naturprodukte GmbH processes your personal data exclusively for the purpose of staff recruitment and for business purposes related to this.
The person responsible for processing collects and processes the personal data of applicants for the purpose of handling the application procedure. The processing may also take place electronically. This is particularly the case if an applicant submits relevant application documents to the Controller electronically, for example by e-mail or via a web form available on the website. If the data controller concludes an employment contract with an applicant, the transmitted data is stored and processed for the purpose of processing the employment relationship in accordance with the statutory provisions.
Your data protection rights
You have the following rights in relation to the personal data concerning you:
• Right to information
• Right of correction or deletion
• Right of correction or deletion
• Right to restrict processing
• Right to object to the processing
• Right to data portability
If you have any questions about your rights and the exercise of your rights, please contact the personnel department or the company data protection officer.
Legal basis for the processing of your personal data
The legal basis for the processing of your personal data for the purposes of the employment relationship is § 26 of the BDSG, Art. 6 para. 1 lit. b DS-GVO (fulfilment of contract) and on Art. 6 para. 1 lit. f DS-GVO (legitimate interest of the company). A legitimate interest may arise, for example, from internal organisational and administrative purposes. Processing of your data is only permitted here if the protection of your interests, basic rights and fundamental freedoms does not prevail.
We can also obtain the applicant’s consent to the processing or transmission of your data. Your consent is voluntary in these cases and can be revoked by you at any time in the future, unless otherwise agreed.
Responsible office for the processing of your personal data
The competent and responsible authority for processing your personal data is Bio-Zentrale Naturprodukte GmbH, Holzmühlenweg 4, 84384 Wittibreut – Ulbering.
Duration of storage
If the controller does not conclude an employment contract with the applicant, the application file shall be automatically deleted at the latest 6 months after notification of the decision of refusal, unless deletion would be contrary to any other legitimate interest of the controller. Other legitimate interests in this sense include, for example, an obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG).
Complaints about the processing of your personal data
If you have any concerns or questions about the processing of your personal data, you can contact your human resources department, the external data protection officer or the data protection supervisory authority.
External Data Protection Officer:
Mr. Michael Gruber
BSP-SECURITY
Franz-Mayer-Str 1
D-93053 Regensburg
e-mail: [email protected]
Data protection supervisory authority:
Bavarian State Office for Data Protection Supervision
Promenade 27 (Schloss)
91522 Ansbach
phone: 0981/53-1300
e-mail: [email protected]
You can find out more about the biozentrale world here.