Privacy policy

We, SHC Stolle & Heinz Consultants GmbH & Co KG (hereinafter referred to as SHC or us) are pleased about your visit to our website https://stolleundheinz.com/ and your interest in our company.

We assume no liability for external links to external content, despite careful control of the content, as we have not initiated the transmission of this information, have not selected or changed the addressee of the transmitted information and the transmitted information ourselves.

The protection of your personal data during the collection, processing and use when visiting our website is an important concern to us and it is carried out in a manner compliant with the legal regulations. Below you will find information about what data is collected during your visit on this website, for what purposes and how it is used. The basic EU data protection regulation (GDPR) grants you, as the person affected by the processing of your personal data, certain rights, which we will also inform you about in the following.

1 COLLECTION AND STORAGE OF PERSONAL DATA AS WELL S TYPE AND PURPOSE OF USE

Every time a customer (or other visitor) accesses our website, the Internet browser used on your end device (computer, laptop, tablet, smartphone, etc.) automatically sends information to our website’s server. This information is temporarily stored in a so-called log file.

The following data is recorded without your intervention and stored until it is automatically deleted, after three months:

  • (pseudonymised) IP address of the requesting computer, as well as device ID or individual device ID and device type,
  • Name of the retrieved file and transferred data volume, as well as date and time of retrieval,
  • Notification of successful retrieval,
  • requesting domain,
  • Description of the type of Internet browser used and, if applicable, the operating system of your mobile device and the name of your access provider,
  • Your browser history and your standard weblog information,
  • Location data, including location data from your mobile device. Please note that on most mobile devices you can control or disable the use of location services in the settings menu of the mobile device.

Our legitimate interest pursuant to Art. 6 para. 1 sentence 1 f DSGVO for the collection of data is based on the following purposes:

  • Ensuring a smooth connection setup and a comfortable use of the website,
  • evaluation of system security and stability as well as

for other administrative purposes.

Under no circumstances will the data collected by us either be passed on to third parties or  linked to personal data. The legal basis for this temporary storage of data and log files is Art. 6 para. 1 f) DSGVO.

The data will be deleted as soon as it is no longer necessary for achieving the purpose for which it was collected. In the case of the collection of data for the provision of our website, the data will be deleted as soon as the respective session has ended. However, further storage is also possible. In this case, however, your IP address will be deleted or alienated, so that it is no longer possible to attribute the data to your person.

The collection of data for the provision of our website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for you to object in this respect.

If you have any questions, we offer you the opportunity to contact us using the form provided on the website. You need to provide at least a valid e-mail address and your name, in order to be aware of who sent the request and to be able to respond to it. Further information can be provided voluntarily.

The data will be processed for the purpose of contacting us pursuant to Art. 6 para. 1 sentence 1 lit. a DSGVO on the basis of your voluntary consent.

The personal data collected by us for the use of the contact form will be automatically deleted after your request has been processed.

The use of this comment function requires the input of a name, whereby you can also choose a pseudonym. The e-mail address must also be provided., as it is the only means for us to be able to forward any complaints about your comments and to ask you to comment on them.

It is not possible for you to use the comment function without this information. When your comment is published, the e-mail address you provided is stored, but not published. Your name will be published, unless you have chosen to write under the use of a pseudonym.

If you leave comments on our website, the time of their creation will be saved in addition to the information mentioned. This serves our security, since we can be prosecuted for illegal contents on our webpage, even if these were provided by users.

The data will be processed in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO on the basis of your voluntary consent.

The data will be deleted as soon as they are no longer required for the purpose of collection. This is generally the case when communication with the user has been completed and we can conclude from the circumstances that the relevant facts have been finally clarified.

The download function requires the entry of a name, whereby you can also choose a pseudonym. You must also enter your e-mail address. It is necessary to share a valid e-mail address, so that we can provide you with the desired document/article/whitepaper.
The use of the download function by you is not possible without this information.

Data processing is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO on the basis of your voluntary consent.

The data will be deleted as soon as it is no longer required for the purpose of collection. This is generally the case when the communication with the user has been completed and we can see, from the circumstances, that the relevant facts have been conclusively clarified.

In the career section you can find information regarding our vacancies and send us your application by e-mail, among other things.

The legal basis for the processing of data transmitted in the course of sending an application by e-mail is Art. 6 para. 1 lit. b) DSGVO, since the e-mail contact aims at the conclusion of a contract. In addition, Art. 6 para. 1 lit. f) DSGVO provides an additional legal basis for processing.

The information you provide is solely used for the purpose of making a decision concerning your employment.

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. If no employment relationship is established between you and us, the application documents will be automatically deleted after releasing the rejection notification, provided no other legitimate interests on our part stand in the way of the deletion. Other legitimate interests in this sense include, for example, a duty of proof in proceedings under the General Equal Treatment Act.

2 COOKIES

We use cookies on our website. These are small text files that your browser automatically creates and that are stored on your device when you visit our website.

Information is stored in a cookie, which results in each case in connection with the specifically used terminal device. However, this does not mean that we immediately become aware of your identity.

The use of cookies initially serves to make the use of our offer more pleasant for you: We use so-called session cookies to recognize that you have already visited individual pages of our website.

These session cookies are automatically deleted after leaving our website. In addition, we also use temporary cookies that are stored on your end device for a specified period of time to optimize user-friendliness. If you visit our site again to use our services, it will automatically recognize that you have already been with us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record and evaluate the use of our website and to optimize our offer for you. These cookies enable us to automatically recognize when you return to our website that you have already been with us. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is required for the aforementioned purposes in order to protect our legitimate interests and those of third parties pursuant to Art. 6 Para. 1 S. 1 lit. f DSGVO and to Art. 6 Para. 1 lit. a DSGVO. Most browsers automatically accept cookies. If you do not want us to recognize information about your computer, please set your Internet browser so that it deletes cookies from your computer hard drive, blocks all cookies or warns you before a cookie is stored. You can find out how to delete or block cookies in the Help and Support section of your Internet browser. There you will find instructions for searching the file or directory in which cookies are stored.

Please note that the complete deactivation of cookies can lead to the fact that you cannot use all functions of our website.

If you leave our website via a link and thus reach external sites, it is possible that cookies may also be set by the addressee of the target page clicked on. We are not legally responsible for these cookies.

3 ANALYTICS TOOLS

We use tracking tools on our website to analyse the behaviour of users on our website. With this statistical collection we want to design our website according to your needs and continuously adapt it for you as our user and optimize its use. The tracking measures we use are based on Art. 6 Para. 1 S. 1 lit. f DSGVO, § 15 Para. 3 TMG. Our stated interests are justified in the sense of the aforementioned regulation.

We use Google Analytics, a web analysis service of Google LLC (hereinafter”Google”), for the purpose of the demand-oriented design and continuous optimisation of our websites. In this context, pseudonymised user profiles are created and cookies (see above) are set.

The information generated by the cookie about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address) and the time of the server request are generally transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other countries party to the Agreement on the European Economic Area beforehand. The information is used to evaluate the use of the website, to compile reports on the website activities and to provide further services associated with the use of the website and the Internet for the purposes of market research and demand-oriented design of these websites. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is § 15 Paragraph 3 TMG in connection with Art. 6 Paragraph 1 lit. f DSGVO.

This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of the company. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are made anonymous so that an assignment is not possible (so-called IP masking).

The data sent by us and linked with cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

Further information on Google Analytics’ terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:https://tools.google.com/dlpage/gaoptout?hl=en.

As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent the collection of your data by Google Analytics by clicking on this link: Opt-Out Cookie. An opt-out cookie will be set which prevents Google Analytics from tracking your visit on this website. The opt-out cookie is only valid in this browser and only for our website and it is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

The Google Tag Manager is used on this website. With the Google Tag Manager it is possible to manage website tags via an interface. The tool tag manager itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager. For more information about Google Tag Manager, please visit: https://www.google.com/intl/de/tagmanager/use-policy.html.

4 GOOGLE MAPS

On this website we use the offer of Google Maps. Google Maps is operated by Google. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.

For more information about Google’s data processing, please refer to the Google Privacy Policy (http://www.google.com/privacypolicy.html). There you can also change your personal data protection settings in the Data Protection Center.

Detailed instructions for managing your own data in connection with Google products can be found here: http://www.dataliberation.org/.

5 SOCIAL PLUGINS

Social plugins from the providers listed below are used on our websites. You can recognize the plugins by the fact that they are marked with the corresponding logo, which may be used to send information to the service provider, which may also include personal data, and may be used by the service provider.

This website offers the possibility to share content in social services via the service AddToAny. Data is only collected if these services are called up by you. Since you can only use these services if you have a user account there and must log in with your access data, the responsibility no longer lies with us from this point on, because the creation of user accounts, i.e. the membership of social services, requires your consent to the respective data protection regulations. The AddToAny service does not store any personal data according to the data protection declaration (http://www.addtoany.com/privacy). We also do not receive any data from AddToAny or data resulting from the use of the share buttons. AddToAny provides an opt-out option for a large number of advertising networks.

6 YOUR RIGHTS

The GDPR grants you certain rights as a person affected by the processing of personal data. If you wish to exercise one or more of these rights, simply send an e-mail to: info@stolleundheinz.com privacy@stolleundheinz.com.

You have the right to request information from us at any time and free of charge as to whether or not we process personal data relating to you.

If you are an affected person, since personal data concerning you is being processed by our company, you are entitled to the following information:

  • the purposes of processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • where the personal data are not collected from the data subject, any available information as to their source.

You are also entitled to information as to whether your personal data is the subject of an automated decision within the meaning of Art 22 GDPR (profiling) and, if this is the case, what decision criteria form the basis of such an automated decision (logic involved) or what significance and effects the automated decision may have on you.

If personal data are transferred to a third country outside the scope of the GDPR, you are entitled to be informed of it as well as of the appropriate safeguards pursuant to Articles 45, 46 GDPR relating to the transfer.

Furthermore, you have the right to request a copy of your personal data undergoing processing. As a matter of principle, we make data copies available in electronic form, unless you have indicated otherwise. The first copy is free of charge; an appropriate fee may be charged for further copies. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.

You have the right to request us to correct your data if it is inaccurate and/or incomplete; the right to correct includes the right to supplement it with additional explanations or notifications. Corrections or additions must be made immediately, i.e. without culpable delay.

You have the right to request us to delete personal data concerning you without delay, and we are obliged to delete this data immediately as long as one of the following grounds apply:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • the data processing is based on a consent given by you, and you have withdrawn the consent, unless there is no other legal ground for the data processing;
  • you have filed an objection to data processing pursuant to Art. 21 GDPR and there are no overriding legitimate reasons for further processing,
  • your personal data have been unlawfully processed;
  • it concerns data of a child, collected in relation to information society services pursuant to Art. 8 para. 1 GDPR.

There is no right to delete personal data if

  • the right to freedom of expression and information precludes the request for cancellation;
  • the processing of personal data is necessary to fulfil a legal obligation (e.g. statutory retention obligations), to perform public tasks and interests under EU law or the law of the member states (this also includes interests in the field of public health) or for archiving and/or research purposes;
  • the personal data is necessary to assert, exercise or defend legal claims.

The deletion must take place immediately, i.e. without culpable hesitation. If personal data has been made public by us and we are obliged to delete the personal data pursuant to Art. 17 para. 1 GDPR, we shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform other data processors who process the published personal data, that you have requested the deletion of all links to this personal data or of copies or replications of this personal data, unless processing is absolutely necessary for other reasons.

Furthermore, you have the right to request us to restrict the processing of your data, provided that the legal requirements are met:

  • If you have disputed the accuracy of your personal data, you can demand that we do not use your data for other purposes for the duration of the accuracy check and limit them in this respect.
  • In the event of unlawful data processing, you may request the restriction of data use in accordance with Art. 18 GDPR instead of data deletion in accordance with Art. 17 (1) (d) GDPR.
  • If you need your personal data to assert, exercise or defend legal claims, but otherwise your personal data are no longer required, you can request us to restrict processing to the aforementioned legal prosecution purposes;
  • If you have filed an objection to data processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether our interests in processing outweigh your interests, you may demand that your data shall not be used for other purposes for the duration of the examination and be restricted in this respect.

Where processing has been restricted at your request, such personal data shall, with the exception of storage, only be processed:

  • with your permission,
  • to assert, exercise or defend legal claims,
  • for the protection of the rights of other natural or legal persons, or
  • for reasons of important public interest.

If a processing restriction is lifted, you will be informed of this in advance.

As the data subject, you have the right to request us to inform of all recipients, to whom we have disclosed the personal data concerning you. Furthermore, we shall inform these recipients of any correction or deletion or restriction of processing in cases in which you assert the right of rectification (Article 16 DSGVO), to erasure (Article 17 DSGVO) or to restriction of processing (Article 18 DSGVO), unless this proves impossible or involves a disproportionate effort.

As the person concerned, you have the right to demand that we hand you the personal data concerning you, which we process automatically on the basis of your consent or to fulfil a contract, in a common electronic, machine-readable format. The right to data portability includes the right to transfer the data to another controller.

If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible. The right to data portability according to Art. 20 GDPR does not affect the right to data erasure according to Art. 17 GDPR. Data portability is subject to the rights and freedoms of other persons whose rights may be affected by the data transfer.

In the case of processing personal data to perform tasks in the public interest (Art. 6 para. 1 lit e GDPR) or to safeguard legitimate interests (Art. 6 para. 1 lit f GDPR), you can object to the processing of your personal data at any time with future effect. In the event of an objection, we shall refrain from any further processing of your data for the aforementioned purposes, unless,

  • there are compelling, legitimate grounds for processing which outweigh your interests, rights and freedoms, or
  • the processing is necessary to assert, exercise or defend legal claims.

You can object to the use of your data for the purpose of direct advertising at any time with effect for the future; this also applies to profiling, insofar as it is connected with direct advertising. In the event of objection, we must refrain from any further processing of your data for the purpose of direct marketing. An informal notification by e-mail is sufficient for the revocation.

The exercise of the right of objection is directed towards future processing. The legality of the data processing up to the revocation remains unaffected by the revocation.

You have the right to change or revoke your consent to the processing of personal data at any time without giving reasons to us with effect for the future. As a result, we are no longer allowed to continue the processing of data based on this consent. Any processing that has already taken place in the past will neither become ineffective nor must it be reversed.

As the person concerned, you have a right of appeal to the responsible supervisory authority in the event of a breach of data protection law.

The responsible supervisory authority is the

Bavarian State Office for Data Protection Supervision
PO Box 606
91511 Ansbach
Phone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 5300
E-Mail: poststelle@lda.bayern.de

als auch jede andere Aufsichtsbehörde. Die Behörde biete auch ein complaint forman.

7 Security

We have taken the necessary technical and organisational security measures to protect your personal data from loss and misuse. For example, your data is stored in a secure operating environment in a data centre in the EU which is not accessible to the public.

Should you wish to contact us by e-mail, we would like to point out that the confidentiality of the information transmitted is not guaranteed.

8 CHANGES TO OUR PRIVACY POLICY

We reserve the right to adapt this privacy policy, so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply for your next visit.

9 THE RESPONSIBLE BODY AND THE DATA PROTECTION OFFICER

Responsible for the data processing occurring on this website is:

SHC Stolle & Heinz Consultants GmbH & Co. KG
Konrad-Adenauer-Allee 15
86150 Augsburg
Germany
Phone: +49 821 599 997 00
E-Mail: privacy@stolleundheinz.com

If you have any questions regarding the data protection policy, please contact our data protection officer:

PROLIANCE GmbH / www.datenschutzexperte.de
Data Protection Officer
80802 München
Germany
Phone: +49 89 / 250 039 220

E-Mail: datenschutzbeauftragter@datenschutzexperte.de