Privacy Policy
In the following, we explain to you which data we collect when you visit our website, how we collect it and what rights you are entitled to.
1. Legal basis
Since 2021, website operators have had to comply with the requirements of the Telecommunications Telemedia Data Protection Act (TTDSG). This law (§25) overrides in principle the General Data Protection Regulation (GDPR) when it comes to the reading and storage of data from the user's terminal device, irrespective of the types of data.
2. Responsibility
Responsible for the decision on the rights and means of processing personal data is Maschinenfabrik ALFING Kessler GmbH, based in Aalen. It is represented by its managing director Konrad Grimm.
The person responsible can be contacted by e-mail at info@mafa.alfing.de or by mail at: Maschinenfabrik Alfing Kessler GmbH, Auguste-Kessler-Strasse 20, 73433 Aalen. Our website operator is SINEOS GbR, Stuttgarter Str. 40, 73430 Aalen.
3. Personal data
Personal data is any information relating to an identified or identifiable natural person (...) (Art. 4 (1) GDPR). This includes, for example: Your name, address, email address, date of birth or telephone number.
4. Principles
We are expressly committed to the legal basis TTDSG and GDPR. We take the issue of data minimization (Art. 5 (1) (c) very seriously and proceed according to the principle of as little data as possible and as much data as necessary. Furthermore, we only collect data according to the reasons of permission described in the next section.
5. Reasons of permission
Article 6 of the GDPR specifies exactly 6 different reasons of permission for data processing, whereby only the following shall be applicable for us:
Art. 6 para. 1 lit. a) Concerned person gives consent
Art. 6 para.1 lit. b) Processing is necessary for the performance of a contract or preliminary contract
Art. 6 para. 1 lit. c) Processing is necessary for the fulfillment of a legal obligation
Art. 6 para. 1 lit. f) Legitimate interest of the responsible person outweighs fundamental rights and freedoms of the person in question.
TTDSG specifies the following:
§25 (2) no. 2 Processing of the data is absolutely necessary so that the provider can enable the expressly desired use of the website.
§25 para 1 regulates the processing of data for statistical analysis and to increase reach.
6. Collection and processing of personal data
We collect personal data from you only with your express consent or insofar as this is necessary for the provision of a functional website. We use the personal data transmitted only to fulfil your request, whereby the legal basis according to Art. 6 (1) ( a) GDPR is your consent.
7. Collection of technical data
The following information is transmitted to us by your browser: browser type / version, operating system used, name of the file accessed, amount of data transferred, notification of successful call, referrer URL – the previously visited page -, host name of the accessing computer (IP address), time of the server request, screen resolution. Legal basis is the TTDSG § 25 and Art 6 para 1 lit f) GDPR. Here, the website operator has a legitimate interest in a technically error-free presentation and optimization of his website.
8. Duration of data storage, data deletion
Personal data will be deleted if their knowledge is no longer necessary for the purposes for which they were collected and processed – usually your request. The only exception is the case that legal provisions require longer storage.
9. Location of data storage
Personal data is stored and processed exclusively in data centers within the scope of the GDPR. The only exception are American partner companies (Google, etc.), which are subject to American law despite unilateral commitments.
10. Disclosure of personal data
A transfer or transmission of personal data to third parties only takes place if you have previously expressly consented to do so, if this is necessary for the fulfilment of a contract, if this is done on the basis of a service within the framework of order data processing or if the transmission is necessary due to legal requirements. A resale of personal data will never take place in the future.
11. Your rights
In Articles 15 to 21, the GDPR clearly regulates your rights with regard to our data processing:
- the right to information about your data stored,
- the right to data portability,
- the right to erasure,
- the right to withdraw a given consent
- the right to correction of incorrect data, restriction of processing, restriction of processing of your personal data.
Furthermore, you have the right to contact one of the supervisory authorities at any time with questions and complaints. Regardless of the responsibilities of other data protection supervisory authorities, you can also contact the State Commissioner for Data Protection and Information Security Baden-Württemberg. You can reach him by e-mail at poststelle@lfd.bwl.de or by post as follows: Landesdatenschutzbeauftragter BW, Postfach 10 29 32, 70025 Stuttgart
11.a) Right to information
In accordance with Article 15 GDPR, you can request information from us at any time about the personal data stored about you.
11.b) Transferability of data
According to Article 20 GDPR, you can request at any time that we transfer your personal data to another responsible person. We shall provide the data in a structured, common format. As far as technically possible, personal data can also be transmitted directly to another person responsible in encrypted form at your request.
11.c) Right to erasure
According to Article 17 GDPR, you have the right to have your data stored by us deleted, unless processing is required under Article 17 (3).
11.d) Revocation of a given consent
You have the right (Art. 7 (3) GDPR) to revoke your consent at any time with effect for the future. The lawfulness of the processing up to this point in time is not affected by the revocation.
11.e) Correction
The subject person has the right (Art. 16 GDPR) to obtain from the responsible person the correction of inaccurate personal data concerning him or her without delay.
12. E-mail contact
If you contact us via the e-mail address provided by us, the personal data transmitted with the e-mail will be stored. The legal basis here is our legitimate interest (Art. 6 para1 lit f), if your e-mail is aimed at the conclusion of a contract, the legal basis changes to Art.6 para 1 lit b). The personal data will be processed exclusively for the purpose intended with the transmission.
13. Application Portal
Our website contains an application portal that is available to you for vacancies published or for unsolicited applications. When applying, the personal data provided by you will be transmitted. In addition to the date and time, the following mandatory information (title, first and last name, date of birth, nationality, address and e-mail address) are stored. Your consent will be obtained for the transmission of your data.
Four months after completion of the recruitment procedure for the advertised position, your personal data will be deleted, in the case of unsolicited applications, this will be done four months after receipt of your application, unless an employee contract is concluded. In addition, you have the option of consenting to your personal data being stored in our applicant pool for a maximum of 24 months and to be taken into account for vacancies during this period.
14. Cookies
This website uses Google Analytics, a web analytics service provided by Google Inc. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Union Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly. In this case, you may not be able to use all the functions of this website to their full extent. Cookies are stored either temporarily on your device for the duration of a session (session cookies) or permanently (permanent cookies). While session cookies are automatically deleted at the end of your visit, permanent cookies remain on your device until you delete them yourself or they are automatically deleted by your web browser.
Numerous cookies are technically necessary because certain website functions would not work without them (see TTDSG).
Through browser settings, you can parameterize your device in such a way that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser.
In addition, you can prevent Google from collecting the data generated by the cookies and relating to your use of the website (including your IP address) and from processing it by Google by downloading and installing the browser plug-in available under the link (http://tools.google.com/dlpage/gaoptout?hl=de). Further information can be found at:www.google.com/analytics/terms/de.html and on data protection at:www.google.com/intl/de/analytics/privacyoverview.html
View cookie settings and change them if necessary »
15. External links
Despite careful control of the content, we assume no liability for external links to third-party content, as we have not initiated the transmission of this information, have not selected the addressee of the transmitted information and have neither selected nor changed the transmitted information.
16. Data Protection Officer
Questions, suggestions or complaints can be sent at any time to our data protection officer at DSB@mafa.alfing.de or by post at: Mr. Wolfgang Schick, Maschinenfabrik ALFING Kessler GmbH, -Datenschutzbeauftragter-, Auguste-Kessler-Straße 20, 73433 Aalen.
17. Miscellaneous
As explained in the individual descriptions, we only store your data within the scope of the General Data Protection Regulation. The only exception is the transfer to the USA, which is based on applicable law of the United States. On 7 Oct 2022, US President Joe Biden published that the American side is now also seeking a data protection agreement with the EU, which will be recognized by the European Court of Justice.