1. information on the collection of personal data
(1) In the following, we provide information about the collection of personal data when using our website and other services. Personal data is all data that can be related to you personally, e.g. name, address, e-mail address, etc.
(2) The controller pursuant to Art. 4 (7) of the General Data Protection Regulation (GDPR) is
OTTO WULFF Bauunternehmung GmbH
Archenholzstraße 42
22117 Hamburg
Tel 040 73624-0
E-mail: info@
otto-wulff.de
(3) When you contact us by e-mail, via a contact form or, if necessary, by telephone, the data you provide, such as your e-mail address, your name, your telephone number and the content of the message, will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer required, or restrict processing if there are statutory retention obligations.
(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes.
2 Your rights
(1) You have the following rights vis-à-vis us with regard to your personal data:
- Right of access,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to object to processing,
- Right to object to processing where consent has been given
- Right to data portability.
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
The contact details of the data protection supervisory authorities can be found at the following link
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
3. storage of access data
(1) Each time our website is accessed, access data is stored in a log file on our provider's server.
(2) This data record consists, for example, of your IP address, the date and time of the request, the name of the requested file, the amount of data transferred and the access status, a description of the web browser and operating system used and the name of your Internet service provider.
(3) This data is collected for technical reasons. It is automatically deleted after 14 days at the latest. The legal basis for the collection of this data is Art. 6 para. 1 f) GDPR. Our legitimate interest is the technically error-free presentation and optimization of the website.
4. other external services
We use links to the providers of external services on this website. If you do not want these providers to associate access data with your user account there, please log out before clicking on one of the links to these services.
The data collected there may be transferred by the aforementioned companies to countries outside the European Union and may also be merged with other data there. An adequate level of data protection in accordance with the legal framework of the European Union cannot always be guaranteed.
Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; parent company: Meta Platforms Inc, Menlo Park, California, USA.
Facebook data policy: https://www.facebook.com/policy
Information about Page Insights https://www.facebook.com/legal/terms/information_about_page_insights_data
Privacy Policy: www.facebook.com/about/privacy Standard Contractual Clauses: https://www.facebook.com/legal/EU_data_transfer_addendum
Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; parent company: Meta Platforms Inc, Menlo Park, California, USA.
Information on the cookie policy:
https://help.instagram.com/1896641480634370?ref=ig
Privacy policy:
https://instagram.com/about/legal/privacy.
We use the services of the technical platform of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter: LinkedIn).
In principle, LinkedIn is solely responsible for the processing of personal data when you visit our LinkedIn page. Further information on the processing of personal data by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
Links to the services of Xing (New Work SE) are integrated on our pages. Xing is used by us to provide information about our company and related events. Xing (New Work SE, Am Strandkai 1, 20457 Hamburg, Germany) Privacy Policy / Opt-Out: https: //privacy.xing.com/de/datenschutzerklaerung.
Plausible
We use the Plausible service. This service does not read any information from your end device and does not store any information on your end device. Only the anonymized connection data collected by the server is used and simple access statistics are created from the data. No user profiles are created for this purpose and no cookies are set. All of the data collected is completely anonymized and stored exclusively on this web server. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR. The legitimate interests in this case are to control the technical requirements of response time behavior, page load times and server utilization and, based on this, to ensure the equipment, programming and connection to the Internet in such a way that the expectations of the website user are met and the secure and reliable operation of the website is guaranteed.
In this case, the balancing of interests within the framework of Art. 6 para. 1 lit. f) GDPR has shown that the rights and freedoms of the data subjects are not impaired due to the type of processing mentioned above and that the interests mentioned represent a legitimate interest.
5. google maps
Maps from Google are integrated on our website. The provider is Google Ireland Limited Gordon House, Barrow Street Dublin 4 Ireland. If you wish to view these maps, you must click on the "Google Map" link. To use the functions, your IP address is processed by Google. This information may be transferred to a Google server in the USA and stored there.
An adequacy decision is in force between the EU and the USA, which confirms the permissibility of the data transfer.
Under certain circumstances, user data may be processed by Google for analysis purposes. For example, profiles can be created from the usage behavior and interests of users derived from this. These profiles can be used, for example, to place advertisements inside and outside the platforms that are likely to correspond to the interests of the users. For these purposes, cookies may be stored on the user's computer, through which the user behavior, the user's interests and/or the length of stay are stored.
In the case of requests for information and the assertion of user rights, we would like to point out that these can be asserted most effectively with the respective providers. Only the providers have access to the relevant user data and can take appropriate measures directly and provide specific information.
The provider of this site has no influence on this data transfer.
You can find more information on the handling of user data in Google's privacy policy:
www.google.com/intl/de/policies/privacy/index.html
www.google.com/intl/de_de/help/terms_maps.html
The legal basis for the processing is our legitimate interest pursuant to Art. 6 para. 1 f) GDPR.
6 Liability for content
The content of our website has been created with the utmost care. However, we cannot assume any liability for the accuracy, completeness and timeliness of the content.
7 Liability for links
Our pages may contain links to external third-party websites over whose content we have no influence. Therefore, we cannot accept any liability for this external content. The respective provider or operator of the external pages is always responsible for the content of the linked pages.
8 Applications and trainees
The controller collects and processes the personal data of applicants for the purpose of handling the application process. This data is processed on the basis of Art. 6 para. 1 lit. b) GDPR.
If the controller does not conclude an employment contract with the applicant, the application documents will be deleted five months after notification of rejection, provided that no other legitimate interests of the controller conflict with deletion. Other legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR may, for example, be a burden of proof in proceedings under the General Equal Treatment Act (AGG). If you wish to be included in the applicant pool, we will store your data for a period of one year.
The online application and trainee area has been transferred by Otto Wulff to a service provider who takes on this task on our behalf and processes and compiles the collected data and documents for Otto Wulff.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not technically possible.
If you feel that sending your application by e-mail is not secure enough, please send us your application documents by post.
9 Automated decision-making
Automated decision-making is not used.
10 Data security
We use suitable technical and organizational measures to secure our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorized persons. Despite regular checks, however, complete protection against all risks is not possible.
Our website uses the industry standard SSL/TLS (Secure Sockets Layer) for encryption. This guarantees the confidentiality of your personal data over the Internet. You can tell whether encrypted transmission is taking place by the closed key/lock symbol in your browser display.
11 Disclosure of data
Your personal data will only be passed on to third parties
- if you have given your express consent to this in accordance with Art. 6 para. 1 a) GDPR;
- if the disclosure is necessary for the fulfillment of contractual obligations pursuant to Art. 6 para. 1 b) GDPR;
- if we are legally obliged to pass on the data within the meaning of Art. 6 para. 1 c) GDPR;
- if the disclosure of the data is in the public interest within the meaning of Art. 6 para. 1 e) GDPR or;
- if the disclosure of the data is necessary to protect our legitimate interests or the legitimate interests of a third party pursuant to Art. 6 para. 1 f) GDPR, unless your interests in the protection of your data prevail.
12. categories of recipients
Contract processors
We use various external service providers who work exclusively on our behalf and in accordance with our instructions (order processing) to provide the service offered, e.g. the hosting of this website or the operation of our IT. These service providers have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
Third-party recipients
In order to process your requests satisfactorily, it may be necessary for us to pass on your personal data to third-party recipients. These may be suppliers, transport and logistics partners and service partners.
13. project documentation
Our website may include time-lapse videos of the construction progress of our new-build projects. These record and process the video data in compliance with data protection regulations without disclosing personal data or vehicle data. The processing is carried out by a European service provider.
14 Duration of the storage of personal data
Your data will be stored by us for as long as it is required for the purposes on which the processing is based. Beyond this, we only store data insofar as we are legally obliged to do so, e.g. due to statutory retention obligations.
15 Detailed information on the right to object
An objection to the processing of personal data concerning you on the basis of Art. 6 para. 1 e) GDPR (data processing in the public interest) or Art. 6 para. 1 f) GDPR (data processing to safeguard legitimate interests on the basis of a balancing of interests) is possible at any time in accordance with Art. 21 GDPR. In the event of an objection, the personal data will no longer be processed unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
Please address your objection to the controller named under point 1.
16. detailed information on the right of withdrawal
If you have given us your consent to the processing of personal data, you can withdraw this consent at any time. Of course, this also applies to declarations of consent given to us before May 25, 2018 (before the GDPR came into force). The revocation of consent can only take effect for the future. The legality of the processing is not retroactively removed by a revocation.
Please address your revocation to the responsible body named under point 1.
17. topicality
This privacy policy is dated 24.11.2023. It is the current and valid version of our privacy policy.
However, we would like to point out that it may be necessary to revise this privacy policy from time to time due to actual or legal changes.
18. data protection officer
If you have any questions about data protection, please contact us or our data protection officer:
Cord Lange
c/o Vater Solution GmbH
Boschstr. 5
24118 Kiel
E-Mail: colange@vater-gruppe.de
