This English translation is provided for convenience only. The German version is legally binding.
Thank you for visiting our website and for your interest in our company. For us, data protection is not only a legal obligation but also an important means of increasing transparency in how we handle your personal data every day. Protecting your personal data (hereinafter “data”) is a matter of great importance to us. Below, we therefore inform you in detail about which data are collected when you visit our website and use the services offered there, how we subsequently process or use them, and which accompanying technical and organisational protective measures we have taken. Please send any questions or comments about this privacy policy or about data protection in general to our data protection coordinator at datenschutz@bafatex.de.
The controller within the meaning of Art. 4(7) of the General Data Protection Regulation (GDPR) is BAFATEX GmbH; please refer to our legal notice.
The general provision and maintenance of our website and email systems is carried out with the support of IT service providers acting on our behalf. They have no access to our email system.
Contracted web hosting provider: Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale), Germany, HRB 214733 (Stendal Local Court), Managing Director: Daniel Hagemeier. Data protection officer: info@bafatex.de
The scope and type of collection and use of your personal data differ depending on whether you visit our website only to obtain information or whether you make use of any services we may offer.
If we use further (IT) service providers for individual functions of our website or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes (all data processing). In doing so, we will also state the defined criteria for the storage period and the applicable legal basis for the data processing.
For purely informational use of our website, we only collect the personal data that your browser automatically transmits to us, such as:
IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Amount of data transferred in each case and access status (file transferred, file not found, etc.)
Website from which the request originates; browser type / version / language; operating system and its interface
Language and version of your browser
During an informational visit, we collect and use these data exclusively in non-personal form. This is done to enable the use of the web pages you access at all, for statistical purposes and to improve our website. No personal evaluation takes place. Our web host Alfahosting records a series of general data and information each time the website is accessed by a data subject or an automated system. These general data and information are stored in the server log files. The following may be recorded: (a) browser types and versions used, (b) the operating system used by the accessing system, (c) the website from which an accessing system reaches our website (so-called referrer), (d) the sub-pages accessed by an accessing system on our website, (e) the date and time of access to the website, (f) an Internet Protocol address (IP address), (g) the internet service provider of the accessing system and (h) other similar data and information used to avert danger in the event of attacks on our IT systems. When using these general data and information, Alfahosting does not draw any conclusions about the data subject. Rather, this information is needed (1) to deliver the content of our website correctly, (2) to optimise the content of our website and its advertising, (3) to ensure the long-term functionality of our IT systems and the technology of our website and (4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack. Alfahosting therefore evaluates these anonymously collected data and information statistically and with the aim of increasing data protection and data security in our company, ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject. In the log files, all IP addresses are anonymised after 24 hours by setting the last octet to zero. The data are deleted after 7 days at the latest. The log files are collected and stored to maintain server operation and for statistical evaluation. We do not combine these data with other data sources. We reserve the right to check these log files retrospectively if we become aware of specific indications of unlawful use. Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of this website.Legal basis for data processing:The above data are technically necessary to display our website to you and to ensure its stability and security, pursuant to Art. 6(1)(f) GDPR.
If you wish to use services offered by us, however, it is necessary for you to provide further data for this purpose. Your data are collected or used for the purpose of providing the service you have requested, for example to be able to respond to a contact request from you. For this, we need, among other things, your name and email address.
You may provide further information voluntarily; this is marked accordingly. For the aforementioned purpose, your data may be passed on to service providers supporting us, whom we have, of course, selected carefully. These may be technical service providers or service providers supporting us with dispatch.
Otherwise, your data will only be passed on to other third parties if we are legally obliged to do so.
When you contact us via the contact form or by email, the data you provide (company, first and last name, address, telephone number, email address and the content of your message) are stored by us in order to answer your question(s). Mandatory information required for this purpose is marked separately; further information is voluntary.
Storage period:
We delete the data arising in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply (max. ten years as part of the archiving of business email correspondence required under commercial and tax law).
Legal basis for data processing:
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, pursuant to Art. 6(1)(b) GDPR.
We process the data you have sent us in connection with your application in order to assess your suitability for the position (or, where applicable, other open positions) and to carry out the application process. After receipt, your application is reviewed by the HR department. Suitable applications are then forwarded to the managers responsible for the respective open or suitable position at the relevant site and department. The next steps are then agreed. Throughout BAFATEX GmbH, only those persons who need your data for the proper conduct of our application process have access to them.
Storage period:
Data of applicants are deleted 6 months after a rejection. If you have consented to further storage of your personal data, we will add your data to our applicant pool, where they will be deleted after 2 years. If you are offered a position as a result of the application process, your data will be transferred to our personnel information system.
Legal basis for data processing:
The processing of your data in the context of the application process is permitted for deciding on the establishment of an employment relationship, pursuant to Section 26 of the German Federal Data Protection Act (BDSG, new version).
Should the data be required for legal proceedings after completion of the application process, data processing may take place to protect legitimate interests pursuant to Art. 6(1)(f) GDPR. Our interest then consists in asserting or defending against claims.
Our website uses cookies. Cookies are small text files that are sent by our web server to your browser during your visit to our website and stored by your browser on your computer for later retrieval.
This website uses cookies to the following extent:
1. Transient cookies (temporary use)
Session cookie – PHPSESSID
Cookie for the cookie notice, so that it is not displayed again after confirmation
2. Persistent cookies (time-limited use)
Slimstat Analytics (explained in the section on web analytics)
3. Third-party cookies
Cookies from third-party providers may be set by integrated services (see the section on integrated services)
Cookies can generally be divided into two categories:
Transient cookies are deleted automatically when you close the browser. These include, in particular, session cookies. They store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to the website. Session cookies are deleted when you log out or close the browser.
Persistent cookies are deleted automatically after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser. You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. Please note, however, that you may then not be able to use all functions of this website.
Further information on how cookies can be refused using special browser plug-ins can also be found in the introduction to the section Integrated services further below in our privacy policy.
It is important to us to design our website as well as possible and thus make it attractive for our visitors. To do this, we need to know which parts of it are received by our visitors and how. For this purpose, we use the statistics tool “Slimstat Analytics” by Jason Crouse. We have anonymised Slimstat Analytics. This means that the last block of the IP addresses is set to zero, so no website visitor can be identified. The data are then merely aggregated in statistics, e.g. total number of visitors to the website, total number of visitors to individual pages, and total numbers of visitors by country, browser type, screen size and operating system.
These are our Slimstat Analytics settings: Track WordPress Users: Off. Enable Privacy Mode: On (Mask your visitors’ IP addresses to comply with European Privacy Laws. This feature will turn the final part of each IP address into a ZERO. Based on our understanding of the various privacy guidelines, this is enough to comply with the existing regulations.)
Do Not Track Header: On (The Do Not Track (DNT) header is the proposed HTTP header field DNT that requests that a web application disable either its tracking or cross-site user tracking (the ambiguity remains unresolved) of an individual user. You can decide to ignore this header and track any pageview regardless of the headers sent by the browser.)
Set Cookie: On (so that returning visitors are not counted more than once, provided they allow cookies and do not delete them). Allow Opt-out: On (The European General Data Protection Regulation (GDPR) requires website owners to provide a way for their visitors to opt-out of tracking. If enabled, the message here below will be displayed to all users who don’t have the corresponding cookie set.
A notice will be recorded under Settings > Maintenance every time a pageview is ignored because the corresponding visitor has opted out of tracking.)
Opt-out cookie duration: 80,000 days (approx. 219 years)
Slimstat Analytics stores cookies in compliance with the European General Data Protection Regulation (GDPR). If you choose to opt out, only one cookie is stored in your browser, which remembers your decision for 1 year. If you delete cookies and history in your browser, this cookie will also be deleted.
Accept or Decline
Legal basis for data processing: the service is integrated in our own interest to optimise our website, pursuant to Art. 6(1)(f) GDPR.
To design our website and provide additional functions, we integrate the following external services.
1. Google Maps
We integrate content from Google Maps on our website to show you the location of our company more easily. This automatically establishes a connection from your browser to the Google Maps server, which also transmits your IP address. If you are logged in to Google with an existing user account while visiting our website, Google may also be able to assign your visit to our website to your user behaviour. In addition, further cookies may be sent to your browser by Google. We have no influence on this procedure and do not receive any information from Google about the content transmitted.
Analysis of your user behaviour by Google:
Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its websites. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.
Service provided by:
The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; its representative in the EU is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Further information on data protection at Google Inc. can be found at: https://www.google.com/intl/de/policies/privacy/
Storage period:
See the storage period of the logs under “Informational use” earlier in this privacy policy.
Legal basis for data processing:
The service is integrated in our own interest to optimise our website, pursuant to Art. 6(1)(f) GDPR. For the exceptional cases in which personal data are transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .
2. Google Web Fonts
Google Web Fonts are implemented on our website. They are responsible for displaying fonts. Using Google Web Fonts calls up a Google server in the USA, and your IP address is transmitted to Google. If you are logged in to Google with an existing user account while visiting our website, Google may also be able to assign your visit to our website to your user behaviour. We have no influence on this procedure and do not receive any information from Google about the content transmitted. If you do not want this to be assigned to your Google profile, you must log out of Google before your next visit to our website.
Service provided by:
The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; its representative in the EU is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Further information on data protection at Google Inc. can be found at: http://www.google.de/policies/privacy/
Storage period:
See the storage period of the log files under “Informational use” earlier in this privacy policy.
Legal basis for data processing:
The service is integrated in our own interest to optimise our website, pursuant to Art. 6(1)(f) GDPR. For the exceptional cases in which personal data (your IP address) are transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .
3. Bootstrap
CDN (MaxCDN)
We use Bootstrap technology on our website for a modern design and display of the content offered on different devices. To increase the loading speed of our website, we use the BootstrapCDN (content delivery network) from MaxCDN to deliver so-called libraries (collections of technical instructions) to your browser. It is very likely that you have already downloaded one of these libraries from the BootstrapCDN when visiting another website. In this case, your browser can use the copy stored in its cache. If your browser has not stored a copy in its cache or downloads the file from the BootstrapCDN for another reason, your IP address is transmitted to the provider MaxCDN during the connection to the BootstrapCDN server.
What is Bootstrap?What is the BootstrapCDN?What is a CDN (Wikipedia article)?
Service provided by:
The provider is StackPath, LLC, 2021 McKinney Avenue, Suite 1100, Dallas, Texas 75201, USA
Further information on data protection at StackPath, LLC can be found at: https://www.stackpath.com/legal/master-service-agreement/#pp
Storage period:
See the storage period of the logs under “Informational use” earlier in this privacy policy.
Legal basis for data processing:
The service is integrated in our own interest to optimise our website, pursuant to Art. 6(1)(f) GDPR. For the exceptional cases in which personal data are transferred to the USA, StackPath (Bootstrap CDN) has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
We currently do not use any social media plug-ins.
Your personal data are not processed in countries outside the European Union and the European Economic Area, with the exception of the following applications: Google Maps, Google Web Fonts and BootstrapCDN (technically necessary transmission of your IP address).
You have the following rights vis-à-vis us with regard to the personal data concerning you:
Right of access,
Right to rectification or erasure,
Right to restriction of processing,
Right to data portability
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.
The supervisory authority directly responsible for us is:
The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)
https://www.ldi.nrw.de/metanavi_Kontakt/index.php
Please note that you can withdraw any consent you may have given us under data protection law at any time with effect for the future. The best way to do this is informally by email to: info@bafatex.deSuch withdrawal affects the lawfulness of the processing of your personal data after you have declared it to us. Insofar as we base the processing of your personal data on a balancing of interests (the legal basis is then Art. 6(1)(f) GDPR), you can object to the processing. This is the case if the processing is not, in particular, necessary for the performance of a contract with you, which we indicate in each case in the description of the individual data processing operations and functions on our website earlier in this privacy policy. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. If your objection is justified, we will examine the situation and either stop or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
You can, of course, object to the processing of your personal data for advertising and data analysis purposes at any time, e.g. if you receive advertising from us in the context of a business relationship in the form of a newsletter, customer magazine or information material by post. Should we use your data within functions of our website for direct marketing and related data analysis, we inform you about these data processing operations earlier in this privacy policy, including a way of exercising your right of withdrawal by technical means where applicable.
You can contact us at any time to exercise your rights. The best way to do this is to use the following email address: info@bafatex.de. You are also welcome to use one of the contact options in our legal notice or to contact our data protection officer directly (contact details above).
We also use technical and organisational security measures to protect personal data arising or collected, in particular against accidental or intentional manipulation, loss, destruction or attack by unauthorised persons. Our security measures are continuously improved in line with technological developments. The transmission of your personal data is encrypted using SSL technology (https) to prevent access by unauthorised third parties.
Our email systems support encrypted communication using SSL technology (TLS 1.2 incl. PFS). Your email can therefore generally be transmitted in encrypted form. Please note, however, that encryption also depends on the configuration of your email program, so we cannot guarantee complete data security for the transmission route. We would also like to point out that our web host Alfahosting (see I.) – like all web hosts – is technically able to access and read emails. Alfahosting has undertaken in a data processing agreement not to read any emails – unless we ask Alfahosting to do so because we ourselves are unable to retrieve our mail accounts due to technical problems. The probability of this is extremely low but cannot be completely ruled out. Should Alfahosting read emails on our behalf in order to forward them to us, confidentiality regarding their content vis-à-vis third parties is assured. For information requiring a high level of confidentiality, we recommend sending it by post.
Leiersmühle 19
51688 Wipperfürth/Germany
E-mail: info@bafatex.de
Phone: +49 (0) 22 67 87 13-0
