The following information provides a simple overview of what happens to your
personal data when you visit our website. Personal
data
is all data with which you can be personally identified. For detailed
information on the subject of data protection, please refer to our
privacy policy listed below this text.

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact details at
in the legal notice of this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may be
data that you enter in a contact form, for example.

Other data is collected automatically by our IT systems when you visit the website. The
is primarily technical data (e.g. internet browser, operating system or time of the
page view). This data is collected automatically as soon as you enter our website
.

What do we use your data for?

Some of the data is collected in order to ensure error-free provision of the website at
. Other data may be used to analyze your user behavior.

What rights do you have with regard to your data?

You have the right to obtain information about the origin, recipient and purpose
of your stored personal data at any time and free of charge. You also have the right to request the
correction, blocking or deletion of this data. You can contact us at any time at the
address given in the legal notice if you have any further
questions on the subject of data protection. You also have the right to lodge a complaint with the competent
supervisory authority.

You also have the right to request the restriction of processing
of your personal data under certain circumstances. For details, please refer to the
privacy policy under “Right to restriction of processing”.

Analysis tools and tools from third-party providers

When you visit our website, your surfing behavior may be statistically evaluated. This
is done primarily using cookies and so-called analysis programs. The analysis of your
surfing behavior is generally anonymous; the surfing behavior cannot be traced back to you
. You can object to this analysis or prevent it by
not using certain tools. You can find detailed information on this at
in the following privacy policy.

You can object to this analysis. We will inform you about the objection options at
in this privacy policy.

Data protection

The operators of these pages take the protection of your personal data very seriously. We
treat your personal data confidentially and in accordance with the statutory
data protection regulations and this privacy policy.

When you use this website, various personal data is collected.
Personal data is data that can be used to identify you personally. This privacy policy
explains what data we collect and what we use it for
. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating via
e-mail) may be subject to security vulnerabilities. Complete protection of data against access
by third parties is not possible.

Note on the responsible body

The controller responsible for data processing on this website is:

Karl SPÄH GmbH & Co. KG
Industriestrasse 4-12
72516 Scheer

Phone: +49 7572 602-0
E-mail: info@spaeh.de

The controller is the natural or legal person who alone or jointly
with others determines the purposes and means of the processing of personal data (e.g.
names, email addresses, etc.).

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You
can revoke any consent you have already given at any time. All you need to do is send us an informal email to
. The legality of the
data processing carried out until the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases and to direct marketing
(Art. 21 GDPR)

If data processing is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR
, you have the right to object to the processing of your personal data at any time for reasons arising from your particular
situation
; this also applies to profiling based on these provisions. The
respective legal basis on which processing is based can be found in this
privacy policy. If you object, we will no longer process your affected
personal data unless we can demonstrate compelling
legitimate grounds for the processing which override your interests, rights and
freedoms or for the establishment, exercise or
defense of legal claims (objection pursuant to Art. 21 (1) GDPR).

Where your personal data are processed for direct marketing purposes,
you have the right to object at any time to processing of personal data concerning you
for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to
, your personal data will subsequently no longer be used for the purpose of
direct marketing (objection pursuant to Art. 21 (2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority at
, in particular in the Member State of their habitual residence, their place of work at
or the place of the alleged breach. The right to lodge a complaint exists
without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data which we process automatically on the basis of your consent or in fulfillment of a
contract handed over to you or to a third party in a common,
machine-readable format. If you request the direct transfer of the data
to another controller, this will only be done insofar as it is technically feasible
.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential
content, such as orders or requests that you send to us as the site operator
. You can recognize an encrypted connection at
by the fact that the address line of the browser changes from “http://” to “https://” and by the
lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you transmit to us at
cannot be read by third parties.

Information, blocking, deletion and correction

Within the scope of the applicable statutory provisions, you have the right to obtain information free of charge at any time from
about your stored personal data, its origin and
recipients and the purpose of the data processing and, if applicable, a right to rectification, blocking
or erasure of this data. You can contact us at any time at the address given in the legal notice if you have further questions on the subject of personal data
.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data at
. To do so, you can contact us at any time at the address given in the legal notice at
. The right to restriction of processing exists in the following cases:

• If you contest the accuracy of your personal data
  stored by us, we generally need time to verify this. You have the right to request the restriction of the processing of your
  personal data for the duration
  of the verification.
• If the processing of your personal data has taken place unlawfully /
  , you can request the restriction of data processing
  instead of erasure.
• If we no longer need your personal data, but you require it for the
  exercise, defense or assertion of legal claims, you
  have the right to request the restriction of the processing of your
  personal data instead of its erasure.
• If you have lodged an objection pursuant to Art. 21 (1) GDPR, a
  balance must be struck between your interests and ours. As long as
  it is not yet clear whose interests prevail, you have the right to request the
  restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this
data – apart from its storage – may only be processed with your consent or for the
establishment, exercise or defense of legal claims or for the protection of the rights
of another natural or legal person or for reasons of important
public interest of the European Union or of a Member State.

Objection to advertising e-mails

The use of contact data published in the context of the imprint obligation to send unsolicited advertising and information material to
is hereby objected to
. The operators of the website expressly reserve the right to take legal
steps in the event of the unsolicited sending of advertising information, for example via
spam e-mails.

Statutory data protection officer

We have appointed a data protection officer for our company.

Ulrike Eben

Phone: 0151 176 409 68
Email: datenschutz@spaeh.de

Cookies

Some of the Internet pages use so-called cookies. Cookies do not cause any damage to your
computer and do not contain viruses. Cookies are used to make our website
more user-friendly, effective and secure. Cookies are small text files that are stored on your computer by
and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit to
. Other cookies remain stored on your end device
until you delete them. These cookies enable us to recognize your browser the next time you visit
.

You can set your browser so that you are informed about the setting of cookies
and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases
or in general and activate the automatic deletion of cookies when closing the
browser. If cookies are deactivated, the functionality of this website
may be restricted.

Cookies that are required to carry out the electronic communication process or to
provide certain functions that you have requested (e.g. shopping cart function)
are stored on the basis of Art. 6 para. 1 lit. f GDPR. The
website operator has a legitimate interest in the storage of cookies for the technically
error-free and optimized provision of its services. Insofar as other cookies (e.g.
cookies to analyze your surfing behavior) are stored, these are treated separately in this
privacy policy.

Server log files

The provider of the pages automatically collects and stores information in so-called
server log files, which your browser automatically transmits to us. These are

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The
website operator has a legitimate interest in the technically error-free presentation of
and the optimization of its website – the server log files must be recorded for this purpose.

Contact form

If you send us inquiries via the contact form, your details from the
inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the
inquiry and in the event of follow-up questions. We will not pass this data on to
without your consent.

The data entered in the contact form is therefore processed exclusively
on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent
at any time. All you need to do is send us an informal email. The
lawfulness of the data processing operations carried out prior to the revocation remains unaffected by the revocation

We will retain the data you provide on the contact form until you request its deletion
, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory
statutory provisions – in particular retention periods – remain unaffected.

Request by e-mail, telephone or fax

If you contact us by email, telephone or fax, we will store and process your inquiry including
all personal data (name, inquiry) for the purpose of
processing your request. We will not pass this data on to
without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, provided that
your request is related to the performance of a contract or is necessary for the implementation of
pre-contractual measures. In all other cases, the processing
is based on your consent (Art. 6 para. 1 lit. a GDPR) and / or on our legitimate
interests (Art. 6 para. 1 lit. f GDPR), as we have a legitimate interest in the effective
processing of the inquiries addressed to us.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request).
Mandatory statutory provisions – in particular statutory retention periods – remain unaffected by
.

Registration on this website

You can register on our website in order to use additional functions on the
website. We will only use the data you enter for the purpose of using the respective
offer or service for which you have registered. The mandatory information requested during registration at
must be provided in full. Otherwise we will reject the
registration.

In the event of important changes, for example to the scope of the offer or technically necessary changes
, we will use the e-mail address provided during registration to inform you via
.

The processing of the data entered during registration is based on your
consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to
at any time. All you need to do is send us an informal email. The
legality of the data processing that has already taken place remains unaffected by the revocation.

The data collected during registration will be stored by us for as long as you are registered on
our website and will then be deleted. Statutory
retention periods remain unaffected.

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited,
Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool,
with the help of which we can integrate tracking or statistics tools and other technologies on
our website. The Google Tag Manager itself does not create
user profiles, does not store cookies and does not carry out any independent analyses.
It is only used to manage and display the tools integrated via it.
However, the Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company
in the United States. The
use of Google Tag Manager is based on Art. 6 para. 1 lit. f
GDPR. The website operator has a legitimate interest in the fast and
uncomplicated integration and management of various tools on its website.
If a corresponding consent has been requested, the processing
is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG,
insofar as the consent includes the storage of cookies or access to
information in the user’s terminal device (e.g. device fingerprinting) within the meaning of
TTDSG. Consent can be revoked at any time.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is
, Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on
your computer and enable your use of the
website to be analyzed. The information generated by the cookie about your use of the
website will generally be transmitted to and stored by Google on servers in the United States
.

The storage of Google Analytics cookies and the use of this analysis tool
are based on Art. 6 para. 1 lit. f GDPR. The website operator has a
legitimate interest in analysing user behaviour in order to optimize both its
website and its advertising.

IP anonymization

We have activated the IP anonymization function on this website. As a result,
your IP address will be truncated by Google within member states of the European Union or
in other contracting states of the Agreement on the European Economic Area before
is transmitted to the USA. Only in exceptional cases will the full IP address
be transmitted to a Google server in the USA and shortened there. On behalf of the operator of
, Google will use this information for the purpose of evaluating your use of
, compiling reports on website activity for
and providing other services relating to website activity and internet usage to
the website operator. The IP address transmitted by your browser as part of
Google Analytics will not be merged with other
data from Google.

Browser plugin

You may refuse the use of cookies by selecting the appropriate settings on your
browser, however please note that if you do this you may not be able to use the full functionality of this website
. You can also prevent the collection of data generated by the
cookie and related to your use of the website (including your IP address)
to Google and the processing of this data by Google by downloading and installing the
browser plug-in available at the following link
: Link to a download page of the
plugin at Google.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link
. An opt-out cookie will be set to prevent
from collecting your data on future visits to this website: Deactivate Google Analytics
.

You can find more information on how Google Analytics handles user data in Google’s privacy policy at
: Link to the Google support page.

Order processing

We have entered into a contract data processing agreement with Google and fully implement
the strict requirements of the German data protection authorities when using Google
Analytics.

Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function of Google Analytics.
This allows reports to be created that contain statements about the age, gender and
interests of the site visitors. This data comes from interest-based
advertising from Google and from visitor data from third-party providers. This data cannot be assigned to
to a specific person. You can deactivate this function at any time via
the ad settings in your Google account or generally prohibit the collection
of your data by Google Analytics as described in the section “Objection to data collection”
.

Google AdSense

This website uses Google AdSense, a service for integrating advertisements
of Google Inc (“Google”). The provider is Google Inc, 1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA.

Google AdSense uses “cookies”, which are text files placed on your computer
, to help the website analyze how users use the site.
Google AdSense also uses so-called web beacons (invisible graphics). By
these web beacons, information such as visitor traffic on these pages
can be analyzed.

The information generated by cookies and web beacons about the use of this
website (including your IP address) and the delivery of advertising formats is
transmitted to a Google server in the USA and stored there. This
information may be passed on by Google to contractual partners of Google. However,
Google will not merge your IP address with other data stored by you
.

AdSense cookies are stored on the basis of Art. 6 para. 1 lit. f
GDPR. The website operator has a legitimate interest in the analysis of
user behavior in order to optimize both its website and its advertising.

You may refuse the use of cookies by selecting the appropriate settings on your
browser, however please note that if you do this you may not be able to use the full functionality of this
website
. By using this website, you consent to the processing of
data about you by Google in the manner and
for the purposes set out above.

Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction
with the cross-device functions of Google AdWords and Google DoubleClick.
provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043,
USA.

This function makes it possible to link the
advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and
Google DoubleClick. In this way, interest-based,
personalized advertising messages that have been adapted to you depending on your previous usage and
surfing behavior on one device (e.g. cell phone) can also be displayed on
another of your devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and app browsing history with your Google account for this purpose
. In this way, the same
personalized advertising messages can be displayed on
every device on which you sign in with your Google account.

To support this function, Google Analytics collects Google-authenticated
IDs of users, which are temporarily linked to our Google Analytics data
in order to define target groups for cross-device advertising and to create
.

You can permanently object to cross-device remarketing/targeting,
by deactivating personalized advertising in your Google account; follow this link
: https://www.google.com/settings/ads/onweb/.

The aggregation of the data collected in your Google Account takes place exclusively
on the basis of your consent, which you can give or revoke to Google
(Art. 6 para. 1 lit. a GDPR). For data collection processes that are not merged in your
Google account (e.g. because you do not have a Google account or have objected to
merging), the collection of data is based on Art. 6 para.
1 lit. f GDPR. The legitimate interest arises from the fact that the
website operator has an interest in the anonymized analysis of website visitors for
advertising purposes.

Further information and the data protection provisions can be found in Google’s privacy policy at
: https://policies.google.com/technologies/ads?hl=de.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program of
Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
(“Google”).

As part of Google AdWords, we use what is known as conversion tracking. When
you click on an ad placed by Google, a cookie is set for
conversion tracking. Cookies are small text files that
the Internet browser stores on the user’s computer. These cookies lose
their validity after 30 days and are not used to personally identify
users. If the user visits certain pages of this website and the cookie has not yet expired
, Google and we can recognize that the user clicked on the
ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via
the websites of AdWords customers. The information collected using the
conversion cookie is used to generate conversion statistics for
AdWords customers who have opted for conversion tracking. The
customers learn the total number of users who have clicked on their ad and
were redirected to a page with a conversion tracking tag.
However, they do not receive any information that can be used to personally identify users
. If you do not wish to participate in tracking, you can object to
this use by easily deactivating the Google conversion tracking cookie
via your Internet browser under user settings. You
will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” and the use of this tracking tool
are based on Art. 6 para. 1 lit. f GDPR. The website operator has a
legitimate interest in analysing user behaviour in order to optimize both its
website and its advertising.

You can find more information about Google AdWords and Google Conversion Tracking in Google’s privacy policy at
: Link to Google’s privacy policy.

You can set your browser so that you are informed about the setting of cookies
and only allow cookies in individual cases, exclude the acceptance of cookies
for certain cases or in general and activate the automatic deletion of
cookies when closing the browser. If you deactivate cookies
, the functionality of this website may be restricted.

Newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from
as well as information that allows us to verify that
is the owner of the e-mail address provided and that you agree to receive the
newsletter. No other data is collected, or only on a voluntary basis.
We use this data exclusively for sending the requested information and
does not pass it on to third parties.

The processing of the data entered in the newsletter registration form takes place
exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your
consent to the storage of the data, the e-mail address and its use for sending
the newsletter at any time, for example via the “unsubscribe” link in the
newsletter. The legality of the data processing operations already carried out remains unaffected by the
revocation.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter
and deleted after you unsubscribe from the newsletter
. Data stored by us for other purposes remains unaffected by this
.

CleverReach

This website uses CleverReach to send newsletters. The provider is
CleverReach GmbH & Co KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which
can organize and analyze the sending of newsletters. The data you enter for the purpose of
newsletter subscription (e.g. e-mail address) is stored on the servers of
CleverReach in Germany or Ireland.

Our newsletters sent with CleverReach allow us to analyze the behavior of
newsletter recipients. Among other things, we can analyze how many recipients have opened the
newsletter message and how often which link in the newsletter was clicked on.
With the help of conversion tracking, we can also analyze whether a predefined action (e.g. purchase of a product on
our website) has taken place after
clicking on the link in the newsletter. Further information on data analysis by
CleverReach newsletters can be found at: Link to Cleverreach.

The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR).
You can revoke this consent at any time by unsubscribing from the newsletter.
The legality of the data processing operations already carried out remains unaffected by the revocation
.

If you do not wish to be analyzed by CleverReach, you must unsubscribe from the newsletter.
We provide a link for this purpose in every newsletter message.
You can also unsubscribe from the newsletter directly on the website.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until
until you unsubscribe from the newsletter and deleted from both our servers and CleverReach’s servers after you unsubscribe from the
newsletter. Data stored by us for
other purposes remains unaffected by this.

You can find more details in CleverReach’s privacy policy at: Link to Cleverreach’s privacy policy.

Conclusion of a contract for order processing

We have concluded an order processing contract with CleverReach and fully implement
the strict requirements of the German data protection authorities when using CleverReach
.

The chat function

You can use a chat function on some of our websites. This is
not a chatbot, but the chat is operated by our
employees. For this reason, the chat function is only available during normal
working hours.

For the chat itself, we use a solution from the company Webschuppen. There is a contract processing agreement with the company
Webschuppen within the meaning of the GDPR.

Your data is processed exclusively on servers located in Germany.

Since the functions of the chat require cookies that require your consent, you have the option of granting this consent to
in our consent banner when you visit our website
. If you do not give this consent, the chat window
will not be displayed. You can then send us your questions by e-mail.

The legal basis for the processing of your personal data is GDPR Art. 6 para. 1
lit b (fulfillment of a contract) when it comes to the processing of chat content.

For the technical integration of the chat and the processing of your data for this purpose, we ask
for your consent. The legal basis in this case is Art. 6 para. 1 lit. a GDPR.

YouTube with extended
data protection

Our website uses plugins from the YouTube website. The operator of the pages is YouTube,
LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

We use YouTube in extended data protection mode. According to YouTube,
, this mode means that YouTube does not store any information about visitors to this website before
they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the
extended data protection mode. For example, YouTube –
establishes a connection to the Google
DoubleClick network regardless of whether you watch a video.

As soon as you start a YouTube video on our website, a connection to the
servers of YouTube is established. This tells the YouTube server which
of our pages you have visited. If you are logged into your YouTube account,
allows YouTube to associate your browsing behavior directly with your personal profile.
You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can store various cookies on your
device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to
our website. This information is used, among other things, to collect
video statistics, improve user-friendliness and prevent
fraud attempts. The cookies remain on your end device until you delete them
.

After starting a YouTube video, further
data processing operations may be triggered over which we have no control.

The use of YouTube is in the interest of an appealing presentation of our
online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit.
f GDPR.

You can find more information about data protection at YouTube in their privacy policy at
: Link to Google’s privacy policy.

Google Web Fonts

This site uses so-called web fonts,
provided by Google, for the uniform display of fonts. The Google fonts are installed locally. A
connection to Google servers does not take place.

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited
(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps, it is necessary to store your IP address at
. This information is usually transmitted to a Google server in the USA
and stored there. The provider of this website has no influence on this
data transfer. If Google Maps is activated, Google may use Google Web Fonts for the purpose of
uniform display of fonts. When you call up
Google Maps, your browser loads the required web fonts into your browser cache in order to display texts
and fonts correctly.
Google Maps is used in the interest of an appealing presentation of our
online offers and to make it easy to find the places we have indicated on the
website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit.
f GDPR. If a corresponding consent has been requested,
processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1
TTDSG, insofar as the consent includes the storage of cookies or access to
information in the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG
. Consent can be revoked at any time.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission
.

You can find details here: https://privacy.google.com/businesses/gdprcontrollerterms

and here: https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

You can find more information on the handling of user data in Google’s privacy policy
: https://policies.google.com/privacy?hl=de

Which of your data do we process? And for what purposes?

If we have received data from you, we will only process it for the
purposes for which we received or collected it.

Data processing for other purposes will only be considered if the necessary legal requirements pursuant to Art. 6 (4) GDPR are met
. We will of course comply with any
information obligations pursuant to Art. 13 para. 3 GDPR and Art. 14 para. 4 GDPR in the
case.

What is the legal basis for this?

The legal basis for the processing of personal data is generally – insofar as
there are no other specific legal provisions – Art. 6 GDPR. In particular,
the following possibilities come into consideration here:

• Consent (Art. 6 para. 1 lit. a) GDPR)
• Data processing for the performance of contracts (Art. 6 (1) (b) GDPR)
• Data processing on the basis of a balancing of interests (Art. 6 para. 1 lit. f) GDPR)
• Data processing to fulfill a legal obligation (Art. 6 para. 1 lit.
  c) GDPR)

If personal data is processed on the basis of your consent,
you have the right to withdraw your consent at any time with effect for the future by contacting us at
.

If we process data on the basis of a balancing of interests, you as the data subject
have the right to object to the processing of
personal data, taking into account the provisions of Art. 21 GDPR.

How long will the data be stored?

We process the data as long as this is necessary for the respective purpose.

Insofar as statutory retention obligations exist – e.g. under commercial law or tax law –
, the personal data concerned will be stored for the duration of the retention obligation
. After the retention period has expired, we will check whether there is any further
need for processing. If there is no longer a requirement,
the data will be deleted.

As a matter of principle, towards the end of a calendar year we carry out an examination of data with regard to
the need for further processing. Due to the volume of data,
this check is carried out with regard to specific data types or purposes of processing.

To which recipients is the data forwarded?

Your personal data will only be disclosed to third parties if
this is necessary for the performance of the contract with you, the disclosure is permitted on the basis of
a balancing of interests within the meaning of Art. 6 para. 1 lit. f) GDPR, we are legally obliged to
disclose the data or you have given your consent in this respect.

Where is the data processed?

Your data will be processed exclusively in the Federal Republic of Germany.

What rights do you have as a data subject?

You will find your rights as a data subject under point 2

Which of your data do we process? And for what purposes?

We process the data that you have sent us in connection with your application to
in order to check your suitability for the position (or any other open positions in our company)
and to carry out the application process.

What is the legal basis for this?

The legal basis for the processing of your personal data in this
application procedure is primarily Section 26 BDSG in the version applicable from 25.05.2018. According to this
, the processing of data required in connection with the decision on the
establishment of an employment relationship is permitted.

Should the data be required for legal prosecution
after completion of the application process, data processing may be carried out on the basis of the requirements of Art. 6
GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 para. 1 lit. f)
GDPR. Our interest then lies in the assertion of or defense against
claims.

How long will the data be stored?

Applicants’ data will be deleted after 6 months in the event of rejection.

If you have been accepted for a position as part of the application process,
the data from the application documents will be transferred to our personnel information system.

To which recipients is the data forwarded?

Your data will only be processed by us and will not be passed on to third parties.

Your application data will be reviewed by the HR department upon receipt of your application.
Suitable applications will then be forwarded internally to the department managers responsible for the respective
open position. The further process is then coordinated. At
, only those persons who need access to your data for the
proper conduct of our application process have access to it.

What rights do you have as a data subject?

You will find your rights as a data subject under point 2

Our social media presence

This privacy policy applies to the following social media sites:

https://www.facebook.com/spaeh.dichtungen
https://www.instagram.com/explore/locations/257197217689223/spah-dichtungen-und-mehr/
https://www.xing.com/pages/karlspahgmbh-co-kg-dichtungenundmehr
https://www.linkedin.com/company/spaeh-unternehmensgruppe/
https://www.youtube.com/@spaehdichtungen

Data processing by social networks

We maintain publicly accessible profiles on social networks. The individual social networks used by
can be found below. Social networks such as Facebook,
Twitter etc. can generally analyze your user behavior comprehensively when you visit their
website or a website with integrated social media content (e.g. like buttons or
advertising banners). Visiting our social media presences triggers numerous
data protection-relevant processing operations. In detail: If you are logged into your
social media account and visit our social media presence, the
operator of the social media portal can assign this visit to your user account. However, your
personal data may also be collected if you are not logged in to
or do not have an account with the respective social media portal. In this case,
data is collected, for example, via cookies that are stored on your
device or by recording your IP address. With the help of the data collected in this way
, the operators of the social media portals can create user profiles in which your
preferences and interests are stored. In this way, interest-based
advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network
, the interest-based
advertising can be displayed on all devices on which you are logged in or were logged in
. Please also note that we cannot track all processing operations on the
social media portals. Depending on the provider, further
processing operations may therefore be carried out by the operators of the social media portals.
For details, please refer to the terms of use and data protection provisions of the
respective social media portals.

Legal basis

Our social media presence is intended to ensure the widest possible presence on the
website. This is a legitimate interest within the meaning of Art. 6
para. 1 lit. f GDPR. The analysis processes initiated by the social networks are
possibly based on deviating legal bases, which must be specified by the operators of the social networks
(e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).

Responsible party and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible
with the operator of the social media platform for the
data processing operations triggered during this visit. You can exercise your rights (information, rectification,
erasure, restriction of processing, data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the respective social media portal (e.g. vis-à-vis
).
Facebook). Please note that despite the joint
responsibility with the social media portal operators, we do not have full influence on
the data processing operations of the social media portals. Our options are
largely determined by the corporate policy of the respective provider.

Storage duration

The data collected directly by us via the social media presence will be deleted from our
systems as soon as you ask us to delete it, revoke your consent to the storage
or the purpose for data storage no longer applies. Stored cookies remain
on your end device until you delete them. Mandatory statutory provisions – in particular
retention periods – remain unaffected. We have no influence on the storage period of your data that is stored by the
operators of the social networks for their own purposes
. For details, please contact the operators of the
social networks directly (e.g. in their privacy policy, see below).

Your rights

You have the right to obtain information about the origin, recipient and purpose
of your stored personal data at any time and free of charge. You also have the right to
object, the right to data portability and the right to lodge a complaint with the competent
supervisory authority. Furthermore, you may request the rectification, blocking, erasure and, under
certain circumstances, the restriction of the processing of your personal data
.

Social networks in detail

Facebook

We have a profile on Facebook. The provider of this service is Meta Platforms
Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter
Meta). According to Meta, the data collected is also transferred to the USA and other
third countries. We have concluded an agreement with Meta on joint processing
(Controller Addendum). This agreement specifies which
data processing operations we or Meta are responsible for when you visit our Facebook page
. You can view this agreement at the following link:

https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings yourself in your user account. To do this, click on the following link
and log in:

https://www.facebook.com/settings?tab=ads.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission
. Details can be found here:

https://www.facebook.com/legal/EU_data_transfer_addendum

and

https://de-de.facebook.com/help/566994660333381.

Details can be found in Facebook’s privacy policy:

https://www.facebook.com/about/privacy/.

Instagram

We have a profile on Instagram. The provider of this service is Meta Platforms
Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission
. Details can be found here:

https://www.facebook.com/legal/EU_data_transfer_addendum,

https://help.instagram.com/519522125107875

and

https://de-de.facebook.com/help/566994660333381.

Details on how they handle your personal data can be found in Instagram’s privacy policy at
:

https://help.instagram.com/519522125107875.

XING

We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354
Hamburg, Germany. Details on how they handle your personal data can be found at
in XING’s privacy policy at
:

https://privacy.xing.com/de/datenschutzerklaerung.

LinkedIn

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited
Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. If
you wish to disable LinkedIn advertising cookies, please use the following link:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission
. Details can be found here:

https://www.linkedin.com/legal/l/dpa

and

https://www.linkedin.com/legal/l/eu-sccs.

Details on how they handle your personal data can be found in LinkedIn’s privacy policy at
:

https://www.linkedin.com/legal/privacy-policy.

YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon
House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal
data can be found in YouTube’s privacy policy: https://policies.google.com/privacy?hl=de.