The party responsible for data collection on these websites is:
troy gmbh (hereinafter: “we”)
Represented by: Till Völzke, Philip Rürup
Tel.: +49 2941 270 240
Fax: +49 2941 7280 369
Data protection officer:
Sieling law firm
Tel.: +49 (0)5251-142 87 42
Section 1 Collection and processing of data
We collect and process personal data if you provide us with this data via an input form on our website or through another channel, e.g. via email. Furthermore, we collect and process data that you provide when you use our website. The collection, use and retention of your data takes place in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG). Personal data is all data that relates to an identified or identifiable natural person. Below, we will explain in detail how we collect which data and on which legal basis. In addition, we explain which rights you have and how long your data will be retained.
Section 2 Processing of your personal data when you contact us and send us your application
If you provide us with your personal data as a result of contacting us, e.g. via email, we process your data in accordance with point (b) of Art. 6 (1) sentence 1 GDPR for the purpose of fulfilling our obligations under a contract or to carry out pre-contractual measures as a result of your query or pursuant to point (f) of Art. 6 (1)
sentence 1 GDPR due to our legitimate interest in answering your question.
If you provide us with your personal data and application documents as a result of a job advertisement or as part of an unsolicited application, we will process your personal data based on point (b) of Art. 6 (1) sentence 1 GDPR, Section 26 BDSG. According to these provisions, the processing of data is permitted if it is required in relation with the decision regarding the establishment of an employment relationship.
If the data is needed after completion of the application process, e.g. for any required legal action, data processing can take place based on the provisions in Art. 6 GDPR, particularly to safeguard legitimate interests pursuant to point (f) of Art. 6 (1) sentence 1 GDPR. Our interest in this case lies in the assertion or rejection of claims.
In the event of a rejection, your data will be erased after 6 months.
In addition, you can assert the rights listed in Section 7 of this Privacy Statement. Additional information regarding the erasure of your data is also provided in Section 8 of this Privacy Statement.
Our website uses files called cookies based on point (f) of Art. 6 (1) sentence 1 GDPR to analyse the use of the website. A cookie is a file that stores certain information on the user’s access device (PC, tablet, smartphone, etc.). If our website is accessed from a user’s device, our website server can analyse the data stored in the cookie in various ways. Additional information in this respect and also regarding how you can object to the data processing performed by cookies is available in Section 4 of this Privacy Statement. We have a legitimate interest in the analysis of visits to our website as the information extracted may potentially help us to adjust and optimise it.
Moreover, you can allow the placement of cookies or deactivate them via your browser settings.
Our website also uses so-called log files based on point (f) of Art. 6 (1) sentence 1 GDPR which retain the access data of every page accessed. The data record stored in this process contains the following information:
- Your anonymised IP address, the date and time, which file was accessed, the status, the query that your browser sent to the server, the amount of data transmitted and the webpage from which you were referred to the requested page (referrer), and
- the product and traffic information of the browser used, your operating system and your country of origin.
We use the log data (logs) once it has been anonymised, i.e. without connection or reference to your person, for statistical analysis, e.g. to find out on which days and at which times the products available on our websites are most popular and how much data volume is generated on our websites. In addition, the log files may enable us to detect errors, e.g. broken links or programming errors. In this way, we are able to use the log files to improve our websites. At no time do we link the page views stored in the server log and the use of our website with an individual person. We reserve the right to use data from the log files if we suspect, based on certain facts, that users are using our websites and/or services illegally or in violation of agreements. In the event of such a suspicion, we also may temporarily have to retain IP addresses which will, however, be immediately erased when we no longer require them. The above-described purposes for saving log files also represent a legitimate interest on our part.
Section 4 Google Analytics
According to the implementation decision (EU) 2016/1250 of the European Commission dated 12/07/2016, it is permitted to transfer data from an entity responsible for their processing or a processor in the EU to organisations in the USA, which have undertaken to comply with the framework principles of the EU/US Privacy Shield through self-certification with the US Department of Commerce including additional principles. Google has undertaken to comply with these principles through self-certification with the US Department of Commerce.
If you activate the IP anonymisation on our website, Google will shorten your IP address within the EU member states or in other contracting countries to the Agreement on the European Economic Area before transmitting it to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. IP anonymisation is active on this website. Google uses this information on our behalf to analyse your use of the website, to put together reports about website activities and to provide additional services to us as website operator in relation to website and internet use. We have a legitimate interest in the analysis of user behaviour, both to optimise our website as well as our advertising.
You can prevent cookies from being stored on your computer through adjusting settings in your browser software accordingly. You can also prevent the collection and transmission of the cookie-generated data relating to your use of the website to Google and its processing by Google by downloading and installing the available browser plugin provided under the following link (external link to Google):
Additional information regarding privacy protection at Google can be found under https://policies.google.com/ (external link to Google).
Section 5 Encryption
To the extent that you can enter personal data on our website, this data is transmitted via the internet using SSL encryption. We secure our website and other systems by implementing technical and organisational measures against loss, destruction, access, change or distribution of your data by unauthorised persons.
Section 6 Recipients of data; data transmission to third countries
Service providers and agents employed by us in relation to the website, e.g. host providers, agencies and IT services providers, may have access to your personal data. To the extent that these service providers and agents act on our behalf, they only act upon instruction and will be bound by contract accordingly. We also use IT systems that may process data outside the EU/EEA. To the extent that we use such IT systems, however, we ensure that your data is adequately protected through relevant contracts with the providers and/or by enforcing respective commitments from such providers.
Section 7 Your rights
Pursuant to Art 15 GDPR, you have the right to receive information regarding your personal data that we retain free of charge upon request. Moreover, you have the right pursuant to Art. 16, 17 and 18 GDPR to request the correction of erroneous data as well as the blocking or erasure of your personal data.
Pursuant to the provisions set forth in Art. 20 GDPR, you also have the right to have the personal data affecting you, which was retained, provided to you in a structured, common and machine-readable format or transferred to another responsible party without obstruction from our side.
Moreover, pursuant to Art. 21(1) GDPR, you are entitled to object to the processing of personal data affecting you which is carried out based on point (e) of Art. 6 (1) sentence 1 GDPR, including profiling for reasons resulting from your special situation. We will fulfil your aforementioned rights to the extent that a legal basis exists for the assertion of such rights. If your personal data is processed for direct advertising purposes, you have the right at any time pursuant to Art. 21 (2) GDPR to object to the processing of your data for such advertising, including profiling to the extent it is connected to such direct advertising.
Please address any request regarding your personal data to the contact specified at the start of this Privacy Statement or to the contact info specified in the legal notice (company information) of this website.
Every data subject also has the right to submit a complaint about how we process data to a supervisory data protection authority.
Section 8 Duration of data retention and erasure
Unless specified otherwise in this Privacy Statement, we process and retain personal data only for the time required to achieve the purpose of processing or if intended by the laws and regulations applicable to us.
The personal data is routinely blocked or erased in accordance with legal provisions if the reason for retaining the data no longer exists or if a legally prescribed retention period expires.