This privacy policy informs you about the processing of your personal data in connection with the use of our website and its features [https://papp-logistics.de/] (our „website“).
I. Name and address of the person responsible
The person responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:
Balthasar Papp Internationale Lebensmittellogistik GmbH & Co. KG
Finsinger Feld 5
85521 Ottobrunn
Telefon: 089/7204-0
II. Data protection officer
Our data protection officer is:
Angela Molinari
Balthasar Papp Internationale Lebensmittellogistik GmbH & Co. KG
Finsinger Feld 5
85521 Ottobrunn
Telefon: 089/7204-235
Electronic contact: https://papp-logistics.de/en/contact/
III. General information on data processing
1. Scope of the personal data processing
We only process personal data of our users as far as this is necessary to provide a functional website as well as our contents and services. The processing of personal data of our users regularly only takes place with the user's consent or if the processing of the data is permitted by law.
2. General Legal basis for the processing of personal data
As far as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a) GDPR serves as the legal basis.
When processing personal data which is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b) GDPR serves as the legal basis. This also applies to processing operations which are necessary for the implementation of pre-contractual measures.
As far as processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c) GDPR serves as the legal basis.
In the case that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d) GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 para. 1 letter f) GDPR serves as the legal basis for the processing.
3. Handling of applicant data
If you send us an application by contact form, post (see also section VII.1.), e-mail or other means, we process your associated personal data in order to decide on the establishment of an employment relationship. Your application data will only be made accessible within our company to persons involved in the decision-making process. If your application is successful, the application data you submit will be stored in our data processing systems.
If we are unable to make you a job offer, you reject it, withdraw your application or, if applicable, you revoke your consent to personal data processing, we will store the data you have submitted for a maximum of 6 months after the application process has been completed and then delete it. Should we wish to keep your personal data longer, we would obtain your consent for this.
4. Data deletion and storage duration
We delete your personal data in accordance with standardized processes as soon as it is no longer required for the aforementioned purposes of processing, in the event of an objection, there are no compelling reasons worthy of protection to the contrary, or in the event of a revocation of your consent, there is no other legal basis for processing. In certain cases, e.g., if there is a legal obligation to retain data, your personal data will initially be blocked and deleted upon expiry of the retention period.
IV. Data procession for the provision of the website
1. Description and scope of data processing
Whenever our website is called up, our system collects data and information from the system of the end device. The following data are collected: Information about the browser type and version used, the user's operating system, the user's Internet service provider, the user's IP address, date, and time of access. These data (server log files) are stored for the duration of the session. Not affected by this is the user's IP address or other data that allows the assignment to a user. This data is not stored together with other personal data of the user.
2. Legal basis for data processing
The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f) GDPR.
3. Purpose of the data processing
Temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's terminal devices. For this purpose, the user's IP address must remain stored for the duration of the session.
This is also our legitimate interest in data processing in accordance with Art. 6 para. 1 letter f) GDPR.
4. Duration of storage
The personal data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of the collection of data for the purpose of providing the website, this is the case when the relevant session of the user has ended.
5. Possibility of objection
The collection of personal data for the provision of the website and the storage of the data in log files is mandatory for the operation of our website.
V. Use of Cookies and other services
1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. Cookies contain a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
In addition to technically necessary cookies, we also use optional cookies to make our website more user-friendly and/or to improve the user experience:
Domain Name/ Cookie Name: vimeo.com/Cookie: “__cf_bm”
Processing purpose: Provision and integration of video content on our website through the Vimeo player. The optional cookie is necessary to support Cloudflare Bot Management, which is currently in private beta. As part of the Cloudflare Bot Management service, this cookie helps manage incoming traffic that matches circles associated with bots.
Provider: Cloudflare
Expiry time: 30 minutes
2. Legal basis for data processing
When calling up our website, the user is informed about the use of cookies and, in the context of the use of optional cookies, his consent to the processing of personal data collected in this context is obtained. In this context, a reference to this data protection declaration is also made. The legal basis for data processing in the context of the use of optional cookies is Art. 6 para. 1 lit. a) GDPR. The legal basis for the use of technically necessary cookies is Art. 6 para. 1 lit. f) GDPR.
3. Purpose of the data processing
The purpose of using technically necessary cookies is to simplify the use of the website for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. The user data collected through technically necessary cookies are not used to create user profiles. For further details on the purposes of data processing in the context of the use of optional cookies, see section V.1.
4. Duration of storage
Cookies are stored on the user's end device and transmitted by the user to our site. Therefore, you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, it may not be possible to use all the functions of the website to their full extent.
VI. Use of "Plausible Analytics" on our website
1. Description and scope of data processing
We use the open-source web analytics service "Plausible Analytics" to continuously improve and optimize our offers and our website. The "Plausible Analytics" service is provided by Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia ("Plausible"). Plausible follows a particularly privacy-friendly approach to user analysis. Plausible collects the following information for this purpose, among others: Date and time of your visit, title and URL of the websites visited, incoming links, the country you are in and the user agent of your browser software. Plausible does not use or store any "cookies" on your terminal device. All personal data (e.g. your IP address) is stored in so-called hashes. For technical reasons, your IP address is transmitted to Plausible, where it is processed for a legal second to generate the hash, which is not stored on your end device. In this way, we can analyse your visit to our website without having to process personal data or set "cookies".
Further information on the technical implementation of Plausible Analytics can be found here: https://plausible.io/privacy-focused-web-analytics . Plausible's privacy policy is available at https://plausible.io/data-policy.
2. Legal basis for data processing
The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR.
3. Purpose of data processing
We use the web analytics service "Plausible Analytics" on our website to analyse and statistically evaluate our website. This purpose is also our legitimate interest in data processing according to Art. 6 para. 1 lit. f) GDPR.
VII. Use and integration of the Vimeo video player on our website
1. Description and scope of data processing
We use the Vimeo video player on our website to provide and integrate video content on our website. The Vimeo video player is provided by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA ("Vimeo"). The Vimeo player allows us to provide you with video content on our website and embed it directly on our website.
When you view embedded video content on our website, certain data is transmitted to Vimeo. This data may include your IP address, technical information about your device (e.g. browser type, operating system, basic device information), the websites you visit or search queries you enter and your activities. These may be tracked using cookies (see section V.1.). Vimeo may use analytics tools to analyse this. We have no influence on the type and scope of the data collected by Vimeo.
Vimeo is based in the USA. The company uses computer systems, databases, and servers in the USA and also in other countries. Your data may therefore also be transferred to the USA and processed there. You can find more information on the technical implementation and privacy policy of Vimeo here: https://vimeo.com/privacy.
2. Legal basis for data processing
The legal basis for processing is Art. 6 para. 1 lit. a) GDPR. Video content is only integrated if you have given us your consent.
3. Purpose of data processing
We use the Vimeo video service on our website to provide and integrate video content.
VIII. Contact form
1. Description and scope of data processing
There are various contact forms on our website which can be used to contact us electronically, to apply for a job advertisement or to make a partnership enquiry. If a user makes use of this option, the information entered in the respective input mask is transmitted to us and stored. Depending on the type of contact, the following information can be entered by users in the input mask for the above-mentioned purposes: First name, last name, e-mail address, telephone number, subject and the content of the message/letter of application (free text field) and salary requirements. Furthermore, there is the possibility of a file upload via which additional information (e.g., CVs, documentation) can be provided to us by the user.
Please note that you are not obliged to use the contact form provided on our website or to enter or upload certain information in it. You are also welcome to contact us by other means.
In this context, the information entered is not passed on to third parties. Personal data is processed exclusively for the purpose of handling the respective electronic contact, application, or partnership enquiry.
2. Legal basis for data processing
The legal basis for the processing of personal data transmitted by you to us in the course of contacting us is Art. 6 para. 1 lit. f) GDPR. If the purpose of contacting us in the course of an application or partnership enquiry is to conclude, implement or terminate a contract with us, the legal basis for processing is Art. 6 lit. (b) GDPR.
3. Purpose of the data processing
The processing of the personal data from the input mask serves to process the contact, application and/or partnership enquiry. This also constitutes the necessary legitimate interest in processing the data.
4. Duration of storage
Personal data sent to us via a contact form will be deleted in any case when the processing of the contact, application or partnership enquiry has been completed. This is the case when it can be taken from the circumstances that the facts concerned have been conclusively clarified.
IX. Rights of the data subject
As a data subject, you have the right to obtain confirmation as to whether personal data relating to you is being processed by us and, if so, the right to obtain information about the data stored about you and a copy of it (Article 15 of the GDPR). If inaccurate personal data is processed, you have the right to rectification (Art. 16 GDPR). If the legal requirements are met, you may request the erasure or restriction of processing (Art. 17 and 18 GDPR).
If the processing is based on your consent within the meaning of Art. 6 par. 1 lit. a) / Art. 9 par. 2 lit a) GDPR, you may revoke this consent at any time with effect for the future (Art. 7 par. 3 GDPR). The lawfulness of the data processing carried out on the basis of the consent until the revocation is not affected by your revocation.
Insofar as you have consented to the processing or the processing of your personal data is carried out for the fulfilment of the contract with you and the data processing is carried out with the help of automated procedures, you have a right to data portability with regard to the personal data that you have provided to us (Art. 20 GDPR).
You have the right to object to the processing of your data at any time for reasons arising from your particular situation if the processing is based on our legitimate interest pursuant to Art. 6 par. 1 lit. f) GDPR (Art. 21 par. 1 GDPR).
If you would like to make use of your data protection rights, please contact our data protection officer (see the contact details under section I.).
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
However, if you have questions or complaints about data protection, we recommend that you first contact our data protection officer (see the contact details under section I.).
X. International data transfers
Countries outside the European Union and the European Economic Area ("EEA") handle the protection of personal data differently than countries within the European Union.
Where we transfer personal data to countries outside the EEA, in particular the USA, which do not offer an adequate level of data protection, we take special measures to ensure that your personal data is processed securely in the third countries. With service providers in third countries, we conclude the standard contractual clauses provided by the EU Commission of the European Union to protect your data.
If you would like more information on international data transfers and existing guarantees, you can contact our data protection officer (see the contact details undersection I.).
XI. No automated individual case decisions
We do not use your personal data for automated individual case decisions within the meaning of Art. 22 par. 1 GDPR.
XII. Changes to the data protection declaration
New legal requirements, business decisions or technical developments may require changes to our data protection declaration. The data protection declaration will then be adapted accordingly. You will always find the current version on our website.
Status: 26.05.2023