PRIVACY POLICY

If you have any questions about our privacy policy, please email us at info@kosklima.de.

1. PRIVACY AT A GLANCE

1.1 General Information

The following information provides a brief overview of what happens to your personal information when you visit this website. Personal information is any information that can be used to identify you personally. For more detailed information on privacy, please see our Privacy Policy, which is located below this text.

1.2 Information collected on our website

1.2.1 Who is responsible for collecting information on this website?

The data processing on this website is carried out by the website operator. You can find the contact details of the Website Operator in the “Information about the data controller” section of this Privacy Policy.

1.2.2 How do we collect your information?

First, we collect your information when you provide it to us. For example, this may be information that you enter into a contact form. Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. Internet browser, operating system or time of page view). This information is collected automatically when you enter this website.

1.2.3 What do we use your information for?

Some of the information is collected to ensure that the Site operates properly. Other information may be used to analyze your usage patterns.

1.2.4 What rights do you have regarding your data?

You have the right to obtain information at any time, free of charge, about the source, recipient and purpose of the personal data stored about you. You also have the right to request that this data be corrected or deleted. If you have given your consent to data processing, you may revoke this consent at any time with effect for the future. You also have the right to request the restriction of the processing of your personal data in certain circumstances. You also have the right to lodge a complaint with the competent supervisory authority.

 

2. HOSTING AND CONTENT DELIVERY NETWORKS (CDN)

2.1 External Hosting

This Website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our host will process your data only to the extent necessary to fulfill its obligations and will follow our instructions with respect to such data.

We use the following hoster:

 

Hetzner Online GmbH

Industriestr. 25

91710 Gunzenhausen

Gunzenhausen, Germany

2.2 Conclusion of an order processing contract

In order to ensure that your order is processed in accordance with data protection regulations, we have concluded an order processing agreement with our host.

 

3. GENERAL NOTES AND MANDATORY INFORMATION

3.1 Privacy Policy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.

When you use this website, various personal data is collected. Personal information is information that can be used to identify you personally. This Privacy Policy explains what information we collect and how we use it. It also explains how and for what purpose we do this.

Please be aware that there are inherent security risks in transmitting data, such as e-mails, over the Internet. A complete protection of data against access by third parties is not possible.

3.2 Information about the responsible body

The party responsible for data processing on this website is

KOS KLIMA Anlagenbau Projektierung und Service GmbH

Managing Director: Manuel Müller

Olbrichtstr. 23

69469 Weinheim, Germany

Phone: 06201 479996-0

Fax: 06201 479996-6

E-mail: info@kosklima.de

 

The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

3.3 Retention period

Unless a more specific retention period is specified in this Privacy Policy, your personal data will be retained by us until the purpose of the data processing no longer applies. If you make a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the data will be deleted after these reasons no longer apply.

3.4 Note on data transfer to the USA

Among other things, our website integrates tools from companies based in the USA. If these tools are active, your personal data may be transferred to the US servers of the respective companies. Please note that the USA is not a safe third country under EU data protection law. U.S. companies are required to disclose personal data to security authorities without you, as the data subject, being able to take legal action. Therefore, it cannot be excluded that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

3.5 Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You may revoke your consent at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Right to complain to the competent supervisory authority

In the event of a breach of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged breach. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

3.6 Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

If the data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object at any time to the processing of your personal data for reasons relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which the processing is based can be found in this Privacy Policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such direct marketing, including the creation of profiles in connection with such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21 (2) GDPR).

3.7 Right to complain to the competent supervisory authority

In the event of a breach of the GDPR, Data Subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged breach. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

3.8 Right to data portability

You have the right to have the data that we process automatically on the basis of your consent or in fulfillment of a contract transferred to you or to a third party in a common, machine-readable format. If you request the data to be transferred directly to another controller, we will only do so if this is technically feasible.

3.9 SSL or TLS Encryption

This site uses SSL or TLS encryption for security purposes and to protect the transmission of confidential content, such as orders or requests, that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

 

3.10. Information, Blocking, Deletion

Within the framework of the applicable legal provisions, you have the right to obtain information free of charge about the personal data stored about you, its origin and recipients, as well as the purpose of the data processing, and you have the right to correct or delete this data at any time. You can contact us at any time with regard to this and other questions concerning personal data.

3.11. Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time for this purpose. The right to restrict processing exists in the following cases:

If you have restricted the processing of your personal data, such data may be processed – except for its storage – only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

3.12. Objection to advertising e-mails

The use of contact data published within the framework of the imprint obligation by third parties for the purpose of sending unsolicited advertising and information materials is hereby expressly prohibited. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.

 

4. INFORMATION COLLECTED ON OUR WEBSITE

4.1 Cookies

Our website does not use cookies.

4.2 Server Log Files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

This data will not be merged with other data sources.

This data is collected on the basis of Art. 6 par. 1 lit. f GDPR. The website operator has a legitimate interest in the technically flawless presentation and optimization of its website – the server log files must be recorded for this purpose.

4.3 Contact form

If you send us inquiries via the contact form, we will store your data from the inquiry form, including the contact data you provide there, for the purpose of processing the inquiry and in the event of follow-up questions. We will not share this information without your consent.

These data are processed on the basis of Art. 6 para. 1 lit. b GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested.

We will store the data provided by you on the contact form until you request its deletion, revoke your consent to its storage, or the purpose for which it was stored no longer applies (e.g. after your request has been fulfilled). Mandatory legal provisions – in particular retention periods – remain unaffected.

4.4 Login/Registration to this Website – Customer Login/Employee Login

You may register/login on this Site to use additional features of the Site. We will use the information provided for this purpose only for the purpose of using the particular offer or service for which you have registered/logged in. The mandatory information requested during registration/login must be provided in full. Otherwise, we will reject your registration/login.

We will use the e-mail address provided during registration to inform you of important changes, such as changes in the scope of the offer or technically necessary changes.

The data entered during registration/login is processed for the purpose of implementing the user relationship established by the registration and, if necessary, for the initiation of further contracts (Art. 6 para. 1 lit. b GDPR).

The data collected during registration will be stored by us for as long as you are registered on this website and will then be deleted. Legal retention periods remain unaffected.

4.5 Inquiries by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, we will store and process your inquiry, including all personal data (name, inquiry), for the purpose of processing your inquiry. We will not share this information without your consent.

These data are processed on the basis of Art. 6 par. 1 lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested.

The data that you send us in the context of contact requests will remain with us until you ask us to delete it, revoke your consent to storage, or until the purpose for which the data was stored no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

 

5. PLUGINS AND TOOLS

5.1 Videos on our website

Automatically playing videos are integrated into our website. These videos are hosted by us.

When you visit a page that contains such a video, NO data is stored or processed by you.

 

6. SERVICES

6.1 Handling of Candidate Data

We offer you the opportunity to apply to us (e.g. by e-mail, post or online application form). In the following, we inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that your data will be collected, processed and used in accordance with the applicable data protection laws and all other legal provisions and that your data will be treated as strictly confidential.

6.1.1 Scope and purpose of data collection

If you send us a job application, we will process your personal data (e.g. contact and communication data, application documents, notes from interviews, video chats, etc.) to the extent necessary to decide whether to enter into an employment relationship. The legal basis for this is § 26 BDSG-new according to German law (establishment of an employment relationship), Art. 6 para. 1 lit. b GDPR (general initiation of a contract) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application.

If the application is successful, the data you submit will be stored in our data processing systems on the basis of Section 26 of the new BDSG and Article 6 para. 1 lit. b GDPR for the purpose of carrying out the employment relationship.

6.1.2. Data retention period

If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to store the data you have submitted with us for up to 6 months from the end of the application process (rejection or withdrawal of the application) on the basis of our legitimate interests (Article 6 para. 1 lit. f GDPR). The data will then be deleted and the physical application documents destroyed. The storage serves in particular for proof purposes in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your consent (Article 6 para. 1 lit. a GDPR) or if statutory retention periods prevent deletion.

6.1.3. Inclusion in the applicant pool

If we do not make you a job offer, there may be the possibility of including you in our applicant pool. If you are included, all documents and information from the application will be transferred to the applicant pool in order to contact you if suitable vacancies arise.

Inclusion in the applicant pool takes place exclusively on the basis of your express consent (Art. 6 para. 1 lit. a GDPR). The consent is voluntary and has no connection with the ongoing application process. The person concerned can revoke his consent at any time. In this case, the data from the applicant pool will be irrevocably deleted unless there are legal reasons for retention.

The data from the applicant pool will be irrevocably deleted no later than two years after the consent is given.