Data protection

1 . Introduction 

Thank you for your interest in our website. The protection of your privacy is important to us. This privacy policy provides you with comprehensive information about how we handle your data in accordance with the General Data Protection Regulation (GDPR). We want to ensure that you understand how your data is used and what options you have to protect your privacy. However, if you have any questions or comments about the processing of your data, please contact us via the following contact point: Windhoff GmbH, 05971/58-0

 

2. Existence of suitable guarantees

  • 2.1  Pseudonymization

Where we collect usage data, we always store it under pseudonyms (in the case of cookies, for example, via a unique session key). This session key is deleted at the end of the session and the usage data is analyzed by us anonymously for statistical purposes and to improve our website. We do not merge your pseudonymous usage data with the data you have entered (e.g. from the contact form).

 

2.2 Use of encryption technologies

Our website automatically supports strict transport encryption via HTTPS. This prevents your data from being read or modified by unauthorized persons during transmission over the Internet. When our website is accessed via the unencrypted HTTP protocol, it automatically switches to an encrypted connection for your protection and ours. We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

 

3. Person responsible

The controller* within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations and contact person for data processing on this website is

WINDHOFF Bahn- und Anlagentechnik GmbH

Represented by the management: 
Uwe Dolkemeyer, Markus Massing, Ludwig Wehling

Hovestrasse 10

48431 Rheine

Phone: +49 5971/58-0

E-mail: info@windhoff.de

 

* The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

 

4. Our data protection officer

We have appointed a data protection officer for our company:

Claus Wissing

Expert office Mülot GmbH

Grüner Weg 80

48268 Greven

datenschutz@svb-muelot.de

Tel: 02571-54020

 

5. Overview

The following statements provide you with an overview of the type, scope and purpose of the collection, processing and use of your data in connection with your visit to the website and any further use of the content and services.

We store and process your personal data (hereinafter referred to collectively as "processing") in compliance with the relevant data protection regulations, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

We observe the principles of data protection. This means that personal or personal-related data is processed to the extent necessary to fulfill the purposes of processing, as is appropriate and necessary to provide a functional website and with regard to the content and services offered. When you access our web-based services (digital services), we process certain usage data in compliance with the Telecommunications Digital Services Data Protection Act (TDDDG) in order to enable you to use our website.

 

5.1 Brief explanation of the Telecommunications Digital Services Data Protection Act (TDDDG)

The TDDDG regulates the protection of your privacy in telecommunications and digital services. Our website is a digital service. Therefore, according to Section 25 (1) TDDDG, the principle applies here that read and write access to your end devices (PC, laptop, tablet or smartphone etc.) when visiting our website is subject to consent, regardless of whether personal data is processed or not. You give us this voluntary consent in accordance with the TDDDG as part of the cookie consent tool settings. You can adjust these cookie settings at any time and thus easily revoke your consent <- Link to the cookie settings.

However, in accordance with Section 25 (2) No. 2 TDDDG, your consent is not required if this access is technically necessary in order to provide you with the requested information and expressly requested services of our website when you visit our website.

In the information on cookie settings, you can see which cookies are technically absolutely necessary and therefore fall under this exception and therefore do not require consent. If personal data is processed in this context, the legal basis for the processing is derived from the GDPR (Art. 6 para. 1 sentence 1 GDPR). The applicable legal basis for the processing of personal data in the specific case can be found below in the respective cookie or in the respective processing itself.

You have a right of access to your data and a right to rectification, erasure and restriction of processing of your data, a right to object to processing, a right to data portability and a right to lodge a complaint with a supervisory authority. These and other rights are explained in more detail below.

 

5.2 Possible legal bases

  1. Insofar as we obtain your consent as a data subject for the processing of your personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis for the processing of personal data or special categories of personal data.
  2. When processing your personal data that is required to fulfill a contract with us, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
  3. Insofar as the processing of your personal data is necessary for compliance with a legal obligation to which our organization is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
  4. If processing is necessary for the purposes of the legitimate interests pursued by our organization or by a third party, it will only be carried out if your interests, fundamental rights and freedoms as the data subject do not override these interests. Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.

 

5.3 Data erasure and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we as the controller are subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

 

5.4 Forwarding of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

  • you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
  • the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
  • in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
  • this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

You can find more information below.

 

6. Processing of personal data and nature and purpose of use

 

6.1. Visit the website

When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information, which is technically necessary within the meaning of Section 25 TDDDG, is recorded without your intervention and stored until it is automatically deleted:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which access is made (referrer URL)
  • the browser used and, if applicable, the operating system of your computer and the name of your access provider.

 

6.1.1. Purposes and legal basis

We process the aforementioned data for the following purposes:

  • Ensuring a smooth connection to the website
  • Ensuring a comfortable use of our website
  • Evaluation of system security and stability for your and our protection
  • for other administrative purposes relating to the website.

For example: If our website receives an unusually high number of requests from a certain IP address, we can recognize this in the log files and take measures to ward off a possible attack. This helps us to ensure the security of our systems and therefore also the protection of your data.

Read and write access to the terminal device you are using is technically necessary within the meaning of Section 25 TDDDG and does not require any special consent in this respect in accordance with Paragraph 2.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

The legal basis for the storage and analysis of the data is Section 12 TDDDG in conjunction with Art. 95 GDPR. Art. 95 GDPR as well as Art. 6 para. 1 lit. c GDPR, insofar as action by the provider is required for reasons of information security.

 

6.1.2. Retention and deletion periods

For security reasons, we store your IP address and the name of your Internet service provider as log data for a period of 7 days, after which they are automatically deleted. Otherwise, we delete your personal data as soon as the purpose for which we collected and processed the data no longer applies. In most cases, this happens when you end your visit to our website. Beyond this point in time, data will only be stored if this is necessary in accordance with the laws, regulations or other legal provisions to which we are subject.

 

6.1.3. Automated decision making/profiling

Automated decision-making, including profiling, does not take place.

 

6.1.4. Data transfer to third countries

We do not transfer your usage data to countries outside the EU/EEA.

 

6.2. Cookies and consents

Our website uses cookies to enable the use of certain services for which your consent is required as a legal basis. These cookies are more or less extensive data records (information) that are stored on your computer for specific purposes and always have a validity period. Some of the cookies we use are deleted again at the end of the browser session (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies).

 

For administration purposes, we use a cookie consent tool on our website for our consent management in order to be able to verifiably store and manage the consents you have given in accordance with data protection requirements. The status of the consent is stored on our server or in a cookie or comparable technology in order to be able to assign the consent to a user or their device. In addition, the time of the declaration of consent is recorded (consent ID and number, time of submission, status of consent or rejection) as well as metadata.

 

6.2.1. Purposes and legal basis

The cookie consent tool helps us to fulfill our obligation to make all technically unnecessary cookies and tracking technologies transparent to you and to control them on the basis of your consent or refusal. As a website visitor, you can use our cookie consent tool to manage the consents and preferences you have given or to withdraw your consent at any time.

The purpose of the processing is to obtain consent in accordance with the legal requirements of Section 25 (1) TDDDG and Art. 6 (1) (a) and to fulfill the obligation to provide evidence for the implementation of consent management in accordance with Art. 7 GDPR.

 

6.2.2. Automated decision making/profiling

Automated decision-making, including profiling, does not take place.

 

6.2.3. Data transfer to third countries

We do not transfer your usage data to countries outside the EU/EEA.

 

6.2.4. Your revocation options

You can revoke your consent to the use of your data for analysis purposes using Matomo at any time with effect for the future by rejecting the corresponding processing in the cookie consent: The processing of your personal data, which we have carried out on the basis of your consent until your revocation, is not affected by the revocation and remains lawful.

 

6.2.5. Deletion of cookies

If you wish to stop the processing of your data, we recommend that you delete the above-mentioned cookies. By deleting the cookies, you ensure that the personal reference associated with the cookie is permanently interrupted. Deleting the cookies in your browser will cause the cookie consent banner to appear again, as this cookie is one of the necessary cookies required to save and apply your cookie settings. The cookie duration is one month. After expiry, renewed consent is required.

 

6.3. Hosting of the website, website support

We have commissioned bitloft GmbH, Schulstr. 2, 42551 Velbert, Germany, as a qualified external service provider with the creation and hosting of our website and have also concluded an order processing contract with it, which is required under data protection law, so that your data is processed exclusively on our instructions and in compliance with data protection regulations. The service provider processes the access data on the server in server log files (Internet service provider, operating system used, referrer, date and duration of the visit, websites visited and IP address of the end device) for a period of 7 days.

As part of the design and safeguarding of the functionality of our website, the commissioned web agency bitloft GmbH receives the access data for our website in order to carry out adjustments and changes and other programming activities on our behalf. It cannot be ruled out that bitloft GmbH may also gain access to other personal data, e.g. from forms or log data. Processing of the data by bitloft GmbH for its own purposes does not take place. The servers are located in Germany. No data is transferred to a third country.

 

6.3.1. Purposes and legal basis

The processing of your data by the commissioned service provider within the framework of a contract is based on our legitimate interest in a technically flawless and reliable presentation of our website, avoidance of downtimes, high scalability, reduction of the bounce rate on the website, improvement of the content in accordance with Art. 6 para. 1 lit. f GDPR. If you have obtained consent for the processing of data, the legal basis is Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time.

 

6.3.2 Automated decision making/profiling

Automated decision-making, including profiling, does not take place.

 

6.3.3 Data transfer to third countries

We do not transfer your usage data to countries outside the EU/EEA.

 

6.4 Statistical analysis with Matomo

We use the web analysis tool Matomo on our server as open source software for the statistical evaluation of user behavior on our website. When Matomo is used, anonymized data is transmitted exclusively to servers that are under our control. For this purpose, we have concluded an order processing contract with our service provider as required by data protection law, so that your data is processed exclusively on our instructions and in compliance with data protection principles.

The Matomo analysis tool is deactivated by default when you visit our website. Your usage behavior is only recorded anonymously if you actively consent to this. With this consent, you also consent to read or write access to your end device (smartphone, tablet, laptop, etc.) in accordance with Section 25 (1) TDDDG.

With your consent, Matomo places so-called cookies on your end device. These are information files that are stored on your computer and enable us to analyze the use of our website. For this purpose, the information obtained by the cookie about usage is stored so that usage behavior can be statistically evaluated. Your IP address is immediately anonymized. This means that you remain anonymous as a user. The information obtained with the help of the cookie about the use of this website is not passed on to third parties.

With your consent, the following data is collected when you visit our website:

(1) Your IP address as a user, anonymized to 2 bytes

(2) The website accessed

(3) The website from which the user accessed the website (referrer)

(4) The subpages that are accessed from the accessed website

(5) The time spent on the website

(6) The frequency of visits to the website

 

6.4.1. Purposes and legal basis

The processing of this personal data serves to analyze the surfing behavior of our website visitors with the aim of improving the content of our websites and user-friendliness by evaluating the data.

In this case, the legal basis for read or write access to your end device (smartphone, tablet, laptop, etc.) is your consent in accordance with Section 25 (1) TTDSG. The legal basis for the processing of personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

 

6.4.2. Retention and deletion periods

We delete your personal data as soon as the purpose for which we collected and processed the data no longer applies. Beyond this point in time, data will only be stored if this is required by the laws, regulations or other legal provisions to which we are subject. Due to the irreversible anonymization of the data, the statistical data obtained in this way is no longer subject to data protection.

 

6.4.3. Automated decision making/profiling

Automated decision-making, including profiling, does not take place.

 

6.4.4. Data transfer to third countries

We do not transfer your usage data to countries outside the EU/EEA.

 

6.4.5. Your revocation options

You can revoke your consent to the use of your data for analysis purposes using Matomo at any time with effect for the future by rejecting the corresponding processing in the cookie consent: [Data Protection.] The processing of your personal data, which we have carried out on the basis of your consent until your revocation, is not affected by the revocation and remains lawful. 

 

6.5. Social media links

We provide links on our website to our social media offerings on LinkedIn, Facebook, Instagram and YouTube. Clicking on these links will cause you to leave our website and open a new browser window or, if applicable, the associated app on your device in order to access the social media offer. Further information about the data processing that takes place in this context can be found in the data protection information in the respective social media offer.

 

6.6 Use of the contact form

For questions or concerns of any kind, we offer you the opportunity to get in touch with us using the contact form provided on our website. In order to be able to reply to you, it is necessary to provide at least your valid e-mail address and your first name and surname, as well as your telephone number if you wish to contact us by telephone. Further personal details are a voluntary part of your individual request.

 

6.6.1. Purposes and legal basis

The above-mentioned contact data, including your other details from the inquiry form, will be processed and stored by us exclusively for the purpose of processing the inquiry. We will not pass on this data without your consent.

The data processing for the purpose of contacting us is based on our legitimate interest in the effective processing of the inquiries addressed to us in accordance with Art. 6 para. 1 lit. f GDPR.

If your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures, Art. 6 para. 1 lit. b GDPR may also be used as the legal basis.

 

6.6.2 Retention and deletion periods

The data you enter in the contact form will remain with us until the purpose for data storage no longer applies (e.g. after your request has been processed) or you have withdrawn your request, unless mandatory statutory provisions - in particular retention periods - or our legitimate interest in further storage (e.g. to prevent damage) prevent immediate deletion.

 

6.6.3. Automated decision-making/profiling

Automated decision-making, including profiling, does not take place.

 

6.6.4. Data transfer to third countries

We do not transfer your personal data to countries outside the EU/EEA.

 

6.7. Request by e-mail or phone

You will find contact details in various places on our website that you can use to get in touch with us by e-mail or telephone.

 

6.7.1. Purposes and legal basis

If you contact us directly by e-mail or telephone, your request, including all resulting personal data (name, request) will be collected and processed by us exclusively for the purpose of processing your request. We will not pass on the processed data without your consent.

This data is processed on the basis of our legitimate interest in the effective processing of the inquiries addressed to us in accordance with Art. 6 para. 1 lit. f GDPR or on the basis of Art. 6 para. 1 lit. b GDPR if your inquiry is related to the implementation of pre-contractual measures or the fulfillment of a contract or on the basis of your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested by us; consent can be revoked at any time.

 

6.7.2 Retention and deletion periods

We store the data provided by you until the purpose for data storage no longer applies (e.g. after processing of your request has been completed or you declare your request to be settled). The data will then be deleted or blocked immediately, unless mandatory statutory provisions etc. - in particular statutory retention periods - or our overriding legitimate interest in further storage (e.g. in the event of legal disputes) prevent deletion.

 

6.7.3 Automated decision making/profiling

Automated decision-making, including profiling, does not take place.

 

6.7.4. Data transfer to third countries

We do not transfer your personal data to countries outside the EU/EEA.

 

6.8. Handling your application data

We process your personal data that we receive from you by post, email or data upload as part of contacting you for application purposes or your application, insofar as this is necessary for the decision on the establishment of an employment relationship with us. This may include basic personal data (name, address, contact details, etc.), information about your professional qualifications and school education, further professional training and possibly other data that you send us in connection with your application.

Only those authorized persons who are to be involved in the decision-making process for technical, organizational and legal reasons will have access to and insight into your personal data within our company to the extent necessary in each case.

 

6.8.1. Purposes and legal basis

We process your personal data insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with Section 26 BDSG and, if applicable, Art. 6 para. 1 lit. b GDPR for the initiation or execution of contractual relationships.

 

If there is an employment relationship between you and us, we may, in accordance with Art. 88 GDPR in conjunction with Section 26 BDSG, further process the personal data already received from you for the purposes of establishing, implementing and terminating the employment relationship, insofar as this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the representation of employees' interests arising from a law or a collective agreement, a works agreement (collective agreement).

 

Furthermore, we may process your personal data if this is necessary to fulfill legal obligations (Art. 6 para. 1 lit. c GDPR) or to defend against legal claims asserted against us. The legal basis for this is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, for example a burden of proof in proceedings under the General Equal Treatment Act (AGG).

 

If you send us your speculative application (unsolicited application), we will assume that you have given your consent to the processing of your data on the basis of your conclusive action and will provisionally accept your data in order to subsequently obtain your voluntary, informed consent.

If you give us your express consent to process personal data for specific purposes, e.g. for the transfer of your application data to a talent pool for later consideration in other job advertisements, the legality of this processing is given on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Section 26 para. 2 BDSG.

 

6.8.2. Your revocation options

You can revoke your consent to the processing of your data or withdraw your application at any time with effect for the future by sending an informal e-mail. Please send this revocation to: karriere@windhoff.de. The processing of your personal data, which we have carried out on the basis of your consent until your revocation, is not affected by the revocation and remains lawful.

 

6.8.3. Retention and deletion periods

We store your personal data for as long as this is necessary for the decision on your application. If the application procedure is followed by an employment relationship, training relationship or internship relationship, your data will be transferred to your personnel file in our personnel administration, if necessary and permissible, for the purpose of implementing the employment relationship on the basis of Art.6 para.1 GDPR in conjunction with §26 para.1 BDSG. Your data will then be deleted and destroyed at the earliest when your employment relationship has ended and a further three years have elapsed since the end of the year of termination. Otherwise, the earliest possible date for deletion of your data depends on the statutory retention periods, which are generally 6 or 10 years, but may also require longer retention in individual cases.

If your application is unsuccessful, your personal data or application documents will be deleted or destroyed a maximum of 6 months after the end of the application process (date of the rejection decision), unless longer storage is legally required or permitted.

We only store your personal data beyond this if this is required by law or in a specific case for the assertion, exercise or defense of legal claims for the duration of a legal dispute.

Following the application process, you may receive an invitation to join our talent pool. If you agree, you allow us to consider you for suitable vacancies in the future. If we have your consent to do so, we will continue to store your application data in accordance with your consent and delete it after the deadline has expired or if you withdraw your consent. If necessary, please send your revocation to: karriere@windhoff.de

 

6.8.4. Automated decision-making/profiling

Automated decision-making, including profiling, does not take place.

 

6.8.5. Data transfer to third countries

We do not transfer your personal data to countries outside the EU/EEA.

 

6.9. Use of the supplier portal

We offer our suppliers the opportunity to register via our website in the supplier portal in order to be able to book time slots for the delivery of the ordered products and materials via this portal. After registration, the supplier receives an e-mail from us approving the registration. Only after approval can the supplier log in to the portal with an e-mail address and password. The supplier will then be informed by e-mail that his account has been approved.

The following data will be recorded as mandatory fields of the registration and approval process and stored in a securely protected database: Company name, street & house number, postal code, city, company telephone number, company e-mail address, password. If a personal e-mail address is used instead of a functional address, personal data may also be processed, including first and last names and company telephone number.

 

6.9.1. Purposes and legal basis

This data is used to register suppliers in the portal and to coordinate and book delivery periods in consultation with us.

Insofar as personal data is involved, data processing is carried out on the basis of our contractually agreed business relationship or the implementation of the contractually owed services in accordance with Art. 6 para. 1 lit. b GDPR.

 

6.9.2. Retention and deletion periods

The data entered by the supplier will remain with us until the purpose for data storage no longer applies. I.e. either the business relationship with the supplier is terminated or as soon as the contract with its main and ancillary services has not been fulfilled, unless mandatory statutory provisions - in particular retention periods - or our legitimate interest in further storage (e.g. to prevent damage) prevent deletion. The retention period for commercial letters (e.g. delivery bills) is 6 years. If a delivery bill also serves as an invoice, it is to be regarded as an accounting document and is subject to a retention period of ten years.

 

6.9.3. Automated decision-making/profiling

Automated decision-making, including profiling, does not take place.

 

6.9.4. Data transfer to third countries

We do not transfer your personal data to countries outside the EU/EEA.

 

7. Your rights as a data subject

7.1. Right to information (Art. 15 GDPR)

You have the right to request information about your personal data processed by the provider. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

 

7.2. Right to rectification (Art. 16 GDPR)

You have the right to demand the immediate correction of incorrect or incomplete personal data stored by us.

 

7.3 Right to erasure (Art. 17 GDPR)

You have the right to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

 

7.4 Right to restriction of processing (Art. 18 GDPR)

You have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.

 

7.5 Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

 

7.6 Right to object (Art. 21 (3) GDPR)

If we process your personal data on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation. In the case of direct advertising, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

 

7.7 Right not to be subject to automated decision-making (Art. 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you.

 

7.8 Right to lodge a complaint (Art. 77 GDPR/§ 19 BDSG)

You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

 

The supervisory authority responsible for us is

 

State Commissioner for Data Protection and Freedom of Information

North Rhine-Westphalia

Kavalleriestraße 2 - 4

40213 Düsseldorf

Fax: 0211 38424-999.

E-mail: poststelle@ldi.nrw.de

https://www.ldi.nrw.de

 

7.9 Right to withdraw your consent (Art. 7 (3) GDPR)

You have the right to revoke your consent once given to us at any time without giving reasons with effect for the future. As a result, we will no longer continue the data processing that was based on this consent in the future and will delete your data immediately, provided that there are no retention periods to prevent deletion.

If you wish to exercise your right of revocation or objection, simply send us an e-mail.
In the case of application procedures to: karriere@windhoff.de

In all other cases to: info@windhoff.de

 

8. Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and is dated September 19, 2024.

 

Due to the further development of our website, services and offers or due to changes in legal or regulatory requirements, it may be necessary to amend this privacy policy. You can call up and print out the current data protection declaration at any time on this website.