I. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is

Nürnberg Gummi Babyartikel GmbH
Breitenloher Weg 6
91166 Georgensgmünd
Telefon + 49 9172 69 19 0
Telefax + 49 9172 69 19-45
E-Mail: info(at)nip-babyartikel.de

II. Name and address of the data protection officer

Dipl.-Inf. (FH) Tim Prinz
Datenschutz Prinz GmbH
Südliche Ringstraße 26
91126 Schwabach
Telefon +49 (0) 9122 / 6 93 73 02
E-Mail: info@datenschutz-prinz.de

III. General Information on Data Processing

1. Scope of Processing Personal Data
We process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The processing of personal data of our users is generally carried out only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for actual reasons, and the processing of the data is permitted by legal provisions.

2. Legal Basis for Processing Personal Data
If we obtain consent from the data subject for processing personal data, Article 6(1)(a) GDPR serves as the legal basis. When the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing necessary for pre-contractual measures.
If the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
In cases where the processing is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.
If the processing is necessary for the purposes of legitimate interests pursued by our company or a third party, and these interests are not overridden by the interests, fundamental rights, and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis.

3. Data Deletion and Storage Period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to exist. Storage may also occur if provided for by European or national legislation in Union regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned provisions expires unless there is a necessity for further storage of the data for a contract conclusion or contract fulfillment.

IV. Processing on the Website

IV.1. Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing
Each time our website is accessed, our web host automatically collects data and information from the accessing computer system and stores it in log files: IP address, time of access, time zone information, visitor request, referrer, browser/user agent, and accessed domain. The data is also stored in the log files of our system. However, IP addresses or other data enabling identification of the user are not affected. These data are not stored together with other personal data of the user.

2. Legal Basis for Data Processing
The legal basis for the temporary storage of data is Article 6(1)(f) GDPR.

3. Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to deliver the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. This constitutes our legitimate interest in data processing under Article 6(1)(f) GDPR.

4. Storage Period
The data is deleted as soon as it is no longer required for the purpose of its collection. The provider deletes log files after 7 or 14 days.

5. Right to Object and Removal
The collection of data for providing the website and storing data in log files is essential for the operation of the website. Therefore, the user has no right to object.

IV.2. Contact Form

1. Description and Scope of Data Processing
You can contact us via the provided contact form. In this case, the following data will be processed: salutation, first and last name, email address, and message. Voluntary information includes phone number, company, position, interest selection, and sales region. Your data will not be shared with third parties and will be used solely for processing our conversation.

2. Legal Basis for Data Processing
The legal basis for processing your data submitted via the contact form is Article 6(1)(f) GDPR. If your request via the contact form aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.

3. Purpose of Data Processing
Our legitimate interest in processing your data lies in responding to your contact request via the contact form.

4. Storage Period
Your data will be deleted as soon as it is no longer required to achieve the purpose of its collection. For personal data submitted via the contact form, this is the case when the respective conversation is concluded. A conversation is concluded when it can be inferred from the circumstances that the matter has been fully resolved.

5. Right to Object and Removal
You may object to the storage of your data at any time by notifying us of your objection. In this case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted unless legal provisions require otherwise.

IV.3. Contact via Email or Phone

1. Description and Scope of Data Processing
You can contact us via the email address or phone number published on our website. In this case, your email address and the data transmitted along with the email or your phone number will be processed. Your data will not be shared with third parties and will be used solely for the purpose of processing our conversation.

2. Legal Basis for Data Processing
The legal basis for processing your data transmitted via email or phone is Article 6(1)(f) GDPR. If your email inquiry is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.

3. Purpose of Data Processing
In the case of contact via email or phone, our legitimate interest in processing your data lies in responding to your inquiry.

4. Storage Duration
Your data will be deleted as soon as it is no longer required for the purpose of its collection. For personal data transmitted via email, this is the case when the respective conversation is concluded. A conversation is considered concluded when it can be inferred from the circumstances that the relevant matter has been fully resolved. No data storage occurs in the case of contact via phone.

5. Right to Object and Removal
You may object to the storage of your data at any time by notifying us of your objection. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted unless legal regulations require otherwise.

IV.4. Applications via Email

1. Scope of Processing Personal Data
By publishing our email address on our website, we may receive applications and related personal data from you. Your digital application documents will be electronically processed and stored for the purpose of handling the application process. If an employment contract is established after the application process, your application data will be stored for the purpose of implementing and managing the employment relationship.

2. Legal Basis for Processing Personal Data
The legal basis for processing is Article 6(1)(b) GDPR, as well as § 26 BDSG and Articles 9(2)(b) and (f) GDPR. Additionally, Article 6(1)(f) GDPR serves as the legal basis for storing your data, as we have a legitimate interest in legal defense or enforcement.

3. Purpose of Data Processing
The application documents and data you provide will be processed to carry out the application process and, if an employment relationship is established, stored for the purpose of managing the employment relationship.

4. Storage Duration
We delete your application data six months after notifying you of the rejection of your application, provided no employment relationship has been established. If an employment relationship has been established, we delete your data after the statutory retention periods following the termination of the employment relationship.

5. Right to Object and Removal
If you object to the processing of your data as described above, please note that we will be unable to continue the application process via email, and your application documents cannot be processed. Consequently, we will not be able to consider you for the advertised position.

IV.5. Google Maps

This website uses Google Maps provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps to visually present geographic information. By using this service, our location is displayed, and potential routes to our location are facilitated.
This service and the transmission of content to Google only occur after your consent pursuant to Article 6(1)(a) GDPR via the so-called two-click solution. You can withdraw your consent at any time with future effect. In this process, information about your use of our website (e.g., your IP address) is transmitted to Google servers and stored there. We do not store your usage data for the display of maps. Data may be transferred to Google LLC in the USA, which is covered by Google's participation in the EU Commission's adequacy decision. Google also uses the collected data for other purposes. For more information about data processing by Google when using Google services, visit www.google.de/intl/en/policies/privacy/. The terms of use for Google Maps can be found at www.google.de/intl/en/policies/terms/regional.html and www.google.com/intl/en_US/help/terms_maps.html.

IV.6. Integration of Google Analytics (with Anonymization Function)

This website integrates the Google Analytics 4 service (with anonymization function) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing is based on your consent pursuant to Article 6(1)(a) GDPR. The storage of cookies set by Google Analytics occurs until you withdraw your consent. For details on the specific cookies set, please refer to the list provided earlier in this privacy policy (section "Cookies"). The service is used with the "_gat._anonymizeIp" add-on for web analysis provided by Google Analytics. This add-on anonymizes the IP address of the user when accessing our website from a member state of the European Union or another contracting state of the Agreement on the European Economic Area. Access and processing by Google in the USA are regulated by certification under the US adequacy decision. Google uses the data collected for its own purposes and may share this data with third parties. Further information and the applicable privacy policy from Google can be found at support.google.com/analytics/answer/6004245.

IV.7. Cookies

We use the following cookies on our website:

Statistische Cookies

Statistik-Cookies helfen Webseiten-Besitzern zu verstehen, wie Besucher mit Webseiten interagieren, indem Informationen anonym gesammelt und gemeldet werden.

 
V. Information on Data Processing within the Scope of Social Media Presence

Our presence on social media allows us to inform interested parties and customers about our work, communicate directly with them, and initiate a dialogue. We process your data only if you voluntarily contact us through the respective profile and engage in dialogue with us. This constitutes our legitimate interest under Article 6(1)(f) GDPR, which serves as the legal basis for processing. We do not transfer data received from you via these profiles to third parties. We do not store any personal data processed as part of a contact initiated through the respective profile or provided to us by the profile provider. Processing occurs exclusively within the respective profile.

(Static) Usage Data Provided by Social Networks
We receive automatically generated statistics regarding our accounts through insights functionalities. These statistics contain only aggregated data that cannot be attributed to specific individuals. Consequently, it is not possible to identify you through these statistics.
Please note that social media providers may collect and store data from visitors to their profiles, even from those without a user account, and may use cookies or similar technologies over which we have no control. For further details regarding the extent, purposes of data processing, storage periods/deletion policies, and the use of cookies and similar technologies by social media providers, please refer to the privacy policies/cookie policies of the respective social network. You will also find information about your rights and options to object there.

Data Processing by XING
XING is a social network operated by New Work SE, headquartered in Hamburg, Germany, which facilitates the creation of private and professional profiles. Other XING users have access to this information and can write their own posts and share content. For more information on data processing by XING, visit: privacy.xing.com/en. XING's privacy policy can be found here: privacy.xing.com/en/privacy-policy.

Data Processing by LinkedIn
LinkedIn is a platform operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. In part, a data processing agreement exists, and in part, LinkedIn and we as page operators act as independent controllers. LinkedIn provides profile operators with so-called insights. Detailed information can be found in the Data Processing Agreement between us and LinkedIn: de.linkedin.com/legal/l/dpa.
LinkedIn uses data for its own purposes. Information on data processing by LinkedIn is available here: de.linkedin.com/legal/privacy-policy.
For processing outside the EU/EEA, LinkedIn claims to apply the EU Standard Contractual Clauses for such third-country transfers. Processing in the USA by LinkedIn is covered by their participation in the U.S.-EU adequacy decision.

Data Processing by YouTube
YouTube is a platform operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, and is part of Google Inc. We link to our YouTube channel from our website for marketing purposes, where videos are available for viewing. Data is not stored by us when these videos are accessed. When visiting our YouTube channel, YouTube processes your data to display the videos. Information on data processing by YouTube/Google for their own purposes can be found at: policies.google.com/privacy. Access from the USA by Google is covered by their participation in the U.S.-EU adequacy decision.

VI. Rights of the Data Subject

As a data subject, you have the following rights:
–    Right of access (Article 15 GDPR): You have the right to obtain information about your personal data processed by us, as outlined in Article 15 GDPR.
–    Right to rectification (Article 16 GDPR): You have the right to request the immediate correction of inaccurate or incomplete personal data stored by us.
–    Right to erasure (Article 17 GDPR): You have the right to request the deletion of your personal data stored by us, unless further processing is required:
o    To exercise the right of freedom of expression and information;
o    To comply with a legal obligation;
o    For reasons of public interest; or
o    To establish, exercise, or defend legal claims.
–    Right to restriction of processing (Article 18 GDPR): You have the right to request the restriction of the processing of your personal data if:
o    You contest the accuracy of the data;
o    The processing is unlawful, but you oppose the erasure of the data;
o    We no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or
o    You have objected to processing pursuant to Article 21 GDPR.
–    Right to data portability (Article 20 GDPR): You have the right to receive your personal data provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller.
–    Right to lodge a complaint (Article 77 GDPR): You have the right to lodge a complaint with a supervisory authority. In Bavaria, Germany, the competent authority is: Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
+49 981 180093 0
poststelle@lda.bayern.de
www.lda.bayern.de

VII. Your Right to Object

Where we process your personal data as explained above to safeguard our legitimate interests within the scope of a balancing of interests, you may object to this processing with future effect. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. If the processing is for other purposes, you have a right to object only on grounds relating to your particular situation. After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or if the processing serves to establish, exercise, or defend legal claims. This does not apply if the processing is for direct marketing purposes, in which case we will cease processing your personal data for this purpose immediately.