Data protection (in accordance to the German data protection law DSGVO)
This data protection declaration explains the type, scope and purpose of the processing of personal data (further named as "data") within our online offer and the websites, functions and content associated with it. For terms like "processing" or "responsible person" we refer to the definition of the data protection regulation (DSGVO), article 4
responsible person
Ingenieurbüro Ledwig & Partner Beratende Ingenieure PartG mbB
used terms
„personal data“ are all information relating to an identified or identifiable natural person (further named as "data subject"); an identifiable natural person is one who can beidentified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or one or more special features are an expression of the physical, phyiological, genetic mental, economic, cultural or social identity of that natural person. "Processing" is any process or series of processes carried out with or without the aid of automated processes in connection with personal data. The term is broad and encompasses practically every handling of data. The "responsible person" is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data.
authoritative legal basis
related to article 13, DSGVO we will inform you of the legal basis of our data processing. If the legal basis is not mentioned in the data protection declaration, the following applies: The legal basis for obtaining consent is article 6paragraph 1 letter a and article 7 DSGVO. The legal basis for processing to fulfill our services and carry out contractual measures as well as answering inquiries is article 6 paragraph 1 letter b DSGVO. The legal basis for processing to fulfill our legal obligations is article 6 paragraph 1 letter c DSGVO. The legal basis for processing to safeguard our legimitate interests is article 6 paragraph 1 letter f DSGVO.
In case vital interests of the data subjects or another natural person require the processing of personal data there is article 6 (1) (d) DSGVO as the legal basis DSGVO as the legal.
safety measures
We ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the data protection declaration processing we carry out make this necessary. We will inform you as soon as the changes require your participation (e.g. consent) or other individual notification.
cooperation with processors and third parties
If, as part of our processing, we share data with other companies or other people (contract processors or third parties), transmit it to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if the data is transmitted to third parties, as to payment services providers, pursuant to article 6 paragraph 1 letter b DSGVO is required for the fulfillment of the contract) you have consented al legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc...) If we commission third parties to process data on the basis of a so-called "order processing contract" this is done on the basis of article 28 DSGVO.
transfer to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic area (EEA)) or this happens as part of the use of third parties, this only takes place if it is to fulfill our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitmate interests. Subjects to legal or contractual permissions we only process or have the data processed in a third country if the special requirements of article 44 et seq. DSGVO are met. This means the processing takes place e.g. on the basis of special guarantees such as the officially recognized determination of a data protection level corresponding to that of the EU (e.g. for the USA through the "privacy shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
rights of data subjects
You have the right to request confirmation as to whenever the data in question is being processed and to request information about this data a well as further information and a copy of the data in accordance with article 15 DSGVO. You have the right to request the completion of the data concerning you or the correction of incorrect data concerning you in accordance with article 16 DSGVO. In accordance with article 17 DSGVO you have the right to demand that the data in question be deleted immediately or alternatively in accordance with article 18 DSGVO to demand a restriction of the processing of the data. You have the right to request that you receive the data that you have provides to us un accordance with article 20 DSGVO and to request that it be transmitted to other responsible parties. You also have the right, in accordance with article 77 DSGVO, to lodge a complaint with the competent supervisory authority.
Right of withdrawal
You have the right to revoke your consent in accordance with article 7 paragraph 3 DSGVO with effect for the future.
Right of object
You can object to the future processing of data relation to you at any time in accordance with article 21 DSGVO. The objection can be made in particular against processing for direct advertising purposes. The data processed by us will be deleted or their processing restricted in accordance with article 17 and 18 DSGVO. Unless expressly stated in this data protection declaration the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage requirements. If the data is not deleted because it is required for other and legally permissible purposes its processing will be restricted. This means the data will be blocked and not processed for other purposes. This applies e.g. to data that must be retained for commercial or tax reasons. According to legal requirements in Germany storage takes place in particular for 10 years in accordance with § 147 paragragh 1 AO, §257 paragraph 1 No 1 and 4, paragraph 4 HGB (books, records, management reports, accounting documents, trading books, relevant for taxation documents...) and six years in accordance with " 257 paragraph 1 No 2 and 3, paragraph 4 HGB (commercial letters). According to legal requirements in Austria, storage takes place in particular for seven years in accordance with § 132 paragraph 1 BAO (accounting documents, receipts/invoices, accounts, business papers etc...) and for 22 years in connection with properties and for 10 years for documents related to electronically supplied services, telecommunications, radio and television services to on-businesses in EU member states and for which the mini one stop shop (MOSS) is used.
data protection information for the application process
We process the applicant data only for the purpose and as part of the application process in accordance with the legal requirements. The applicant data is processed to fulfill our (pre)contractual obligations within the scope of the application process within the meaning of article 6 paragraph 1 letter b and f DSGVO if the data processing is necessary for us, e.g. in the context of legal proceedings (in Germany §26 BDSG also applies). The application process requries that applicants provide with the applicant data. If we offer an online form the necessary applicant data is marked otherwise it results from the job descriptions and basically includes personal information, postal and contact addresses and the documents belonging to the application such as cover letter, curriculum vitae and certificates. In addition, applicants can voluntarily provide us with additional information. By submitting the application to us, the applicants agree to the processing of their data for the purposes of the application process in accordance with the type and scope set out in this data protection declaration. If special categories of personal data within the meaning of article 9 paragraph 1 DSGVO are voluntarily communicated as part of the application process, they are also processed in accordance with article 9 paragraph 1 letter b DSGVO (e.g. health data, such as server disability or ethnic origin). If made available, applicants can send us their applications using an online form on our website. The data is transmitted to us in encrypted form using state-of-the-art technology. Applicants can also send their application via email. However, we ask you to note that emails are generally not sent in encrypted form and that the applicants themselves must ensure that they are encrypted. We can therefore not assume any responsibility for the transmission path of the application between the sender and the receipt on our server and therefore recommend using an online form or sending it by post. In the event of a successful application, the data provided by the applicants can be processed by us for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the data of the applicants will be deleted. The applicants" data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. The deletion takes place subjects to a justified revocation by the applicant, after a period of six months, so that we can answer any follow-up questions about application and meet our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived in accordance with tax regulations.
contact
When contacting us (e.g. via contract form, email, telephone or social media) the information provided by the user is processed in other to process the contract request and its processing in accordance with article 6 paragraph 1 letter b DSGVO. User information can be stores in a customer relationship management system ("CRM system") or comparable inquiry organization. We delete the requests if they are no longer necessary. We review necessity every two years, furthermore the statutory archiving obligation apply.