DATA PROTECTION

Responsible body as defined in data protection laws, in particular, the EU General Data Protection Regulation (GDPR), is:
DIOSNA Dierks & Söhne GmbH

Am Tie 23
D-49086 Osnabrück,
Germany
Phone: +49 (0)541 331 040
E-mail: info@diosna.de
Web: www.diosna.de

Osnabrück office, Commercial Register Part B (HRB) 890
Managing Director: Henrik Oevermann

VAT no.: DE 811 796 248


Data Protection | Use of homepage



Your rights as a concerned party

You may exercise the following rights acc. to Art. 15 - 23 GDPR at any time using the contact details provided by our Data Protection Officer regarding 

• Information about your data stored with us and its processing acc. to Art. 15 GDPR
• Correction of incorrect personal data acc. to Art. 16 GDPR
• Deletion of your data stored with us acc. to Art. 17 GDPR
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations acc. to Art. 18 GDPR
• Objection to the processing of your data by us acc. to Art. 21 GDPR and
• Data transferability acc. to Art. 20 GDPRif you have consented to data processing or have concluded a contract with us.

If you have given us your consent, you may revoke it at any time with effect for the future.
You may contact the regulatory authority acc. to Art. 77 GDPRresponsible for you at any time with a complaint. Your competent supervisory authority depends on the German state (Bundesland) where you are resident, where you work or where the alleged infringement has occurred. A list of regulatory authorities (for the non-public sector) and their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
 

Purposes of data processing by the responsible body and third parties

We shall process your personal data acc. to Art. 6 GDPR  only for the purposes stated in this Privacy Policy. Your personal data shall not be disclosed to third parties for purposes other than those referred to. We shall only pass on your personal data to third parties if:

• you have given your express consent acc. to Art. 6 (1) a) GDPR 
• processing is necessary to process a contract with you acc. to Art. 6 (1) b) GDPR 
• processing is necessary to fulfil a legal obligation acc. to Art. 6 (1) c) and e) GDPR 

processing is necessary to protect legitimate interests acc. to Art. 6 (1) f) GDPR and there is no reason to believe that you have an overriding interest worthy of protection in not disclosing your data.

Deletion or blocking of data

We adhere to the principles of data avoidance and data economy. We shall therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as provided for in the various storage periods stipulated by law. After the respective purpose ends or expiry of these periods, the corresponding data shall be blocked or deleted as a matter of routine and in accordance with statutory regulations.


Collection of general information when you visit our website

When you access our website, information of a general nature is automatically collected by means of a cookie. This information (server log files) includes the type of web browser, the operating system used, the domain name of your internet service provider and similar information. This is exclusively information which does not allow any conclusions to be drawn about your person.
This information is technically necessary in order to correctly deliver the content you have requested from websites and is mandatory when using the internet. In particular, it is processed for the following purposes:

• Ensuring a trouble-free connection of the website
• Ensuring smooth use of our website
• Evaluating of system security and stability, as well as
• for other administrative purposes.

The processing of your personal data is based on our legitimate interest arising from the aforementioned purposes for data collection. We shall not use your data to draw conclusions about you personally. The recipients of the data shall only be the responsible body and, if applicable, the contract processor.
Anonymous information of this kind may be statistically evaluated by us in order to optimise our website and the technology its is based on.


SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.


Contact form

If you contact us by e-mail or contact form regarding questions of any kind, the personal data you enter and submit in the mandatory fields will be processed for the purpose of dealing with your request. The information in the fields not marked as mandatory is optional. When using our contact form, the IP address of the sender is also recorded. The content of the completed data fields is transmitted exclusively to our customer service. The contents of the contact form are transmitted via an encrypted Https connection.
 
The data you provide will be stored for the purpose of contacting you and processing your request and then deleted immediately when it is no longer required for this purpose. It will also be deleted if you exercise your right to object.  Any disclosure to third parties will only take place with your express consent.
 
The data is processed either in accordance with Article 6 (1) (b) GDPR (fulfilment of a contract or pre-contractual measure) or in accordance with Article 6 (1) (f) GDPR (legitimate interest). The legitimate interest results on the one hand from your interest in answering the enquiry, and on the other hand from our service interest in enabling uncomplicated contact with us.


Use of Google Analytics

This website uses Google Analytics, a web analysis service from Google Inc. (hereafter: Google). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website to analyse how you use the site. The information generated by the cookie about your use of this website will generally be transmitted to and stored by Google on a server in the USA. However, due to activation of IP anonymisation on these websites, your IP address will first be truncated by Google within the Member States of the European Union or other state signatories to the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and abbreviated in exceptional cases. On behalf of this website operator, Google will use this information to analyse your use of this website, to compile reports on website activities, and to provide the website operator with other services associated with the use of this website and the internet. The IP address that your browser transmits within the scope of Google Analytics will not be collated with any other data held by Google.
The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Other related services are then to be provided based on the use of the website and the internet. The processing is based on the explicit consent of the user (pursuant to Art. 6(1)(a)GDPR) by agreeing to the statistics cookies.
You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do so, you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) being transmitted to and processed by Google by downloading and installing the browser plug-in available at the following link: Browser add-on for deactivating Google Analytics.


Use of Google Maps

This website uses Google Maps API to present geographical information. When using Google Maps, Google also collects, processes and uses data about the use of the map functions by visitors. More detailed information about data processing by Google can be obtained from the Google privacy notices. On its site, you can also change your personal privacy settings in the Safety Center.
Detailed instructions on managing your own data in connection with Google products can be found here.


Use of LinkedIn

LinkedIn is only integrated on our website in the form of a link to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the LinkedIn page. Only after the redirection, user information is transferred to LinkedIn. We are not aware of nor do we have any influence on the extent to which your data is processed by LinkedIn as soon as you call up the LinkedIn page.
For information on the handling of your personal data when using these websites, please refer to the respective privacy policy of LinkedIn.
In addition, we are represented on LinkedIn with our company.
Responsible party, on LinkedIn: Should you visit our company presence on LinkedIn, your personal data will be processed by LinkedIn and LinkedIn is responsible for data processing in the sense of the GDPR. For the assertion of your data subject rights, we point out that these can be asserted most effectively at LinkedIn. Only the latter has access to the data collected from you. If you still require assistance, please feel free to contact us at any time.
You can reach LinkedIn's data protection officer at:
LinkedIn Ireland Unlimited Company

As soon as you contact us via the various communication channels offered by LinkedIn, we are independently responsible for the lawfulness of the data processing. Your data will then be processed for the purpose of answering the question so that we can process your request in the best possible way. The legal basis for this processing is our legitimate interest in answering your communication according to Art. 6 (1) f) GDPR.


Use of cookies
 
This website uses cookies. We use cookies to personalise content and ads, provide social media features and analyse traffic to our website. Our partners may combine this information with other data that you have provided to them or that they have collected in the course of your use of the services.
Cookies are small text files used by websites to make the user experience more efficient, to provide certain functions or to enable certain evaluations.
 
By law, we may store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission. 
 
These help us to optimise our website and our advertising measures. They are used for statistical and marketing purposes (e.g. your behaviour when visiting our website). However, if you select "Allow cookies", you are only agreeing to the activation of the cookies you have selected.
 
Further information on data protection can be found here
https://www.diosna.com/uk/data-protection/ or
https://www.diosna.com/uk/imprint/.
Your consent applies to the following domains: www.diosna.de
 
Cookie statement was last updated by Cookiebot on December 22, 2019:

Use necessary cookies only (2)
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
 

 
Statistics (4)
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
 

 


Data Protection | Use for business partners


1. Whenever DIOSNA processes personal data of another party in the course of the business relationship, DIOSNA is the controller within the meaning of Article 4(8) GDPR. Our external data protection officer as well as our internal data protection contact can be contacted at the contact details provided at the bottom of this website. 
 
2. If we have received data from you, we will only process it for the purposes for which we have received or collected it.

Legal bases for the processing of the data are:
 

• Processing for the performance of contracts pursuant to Art. 6 (1) (b) GDPR.

If personal data are collected and processed for the performance of pre-contractual measures or on the basis of a contract, these data are used for the conclusion of the contract, the performance of the contractual relationship and, if applicable, its termination.
 

• Processing for the protection of legitimate interests pursuant to Art. 6 (1) (f) GDPR

It may happen that data is processed in order to safeguard legitimate corporate interests of DIOSNA or, if applicable, those of third parties. This may be necessary, for example, to ensure IT security and IT operations, to prevent and investigate criminal offences/administrative offenced, to safeguard the right of domicile, to be able to offer our customers a post-contractual service, or for the purposes of direct advertising to our own customers if further preconditions are met, etc.
 

• Processing based on consent, Art. 6 (1) (a) GDPR

Insofar as the data subject has given DIOSNA consent to process data for specific purposes (e.g. sending e-mail newsletters), this personal data may be lawfully used in accordance with the scope of the consent.
 

• Processing for the fulfilment of legal obligations, Art. 6 (1) (c) GDPR

Data processing may ultimately be necessary for the fulfilment of legal obligations, in particular retention obligations under the German Commercial Code and the German Fiscal Code.
 

• If we process special categories of personal data, the legal basis for this is Art. 9 (2) and (4) GDPR, if applicable in conjunction with § 22 Federal Data Protection Act.

3. Categories of personal data

We process the following categories of personal data in particular:
 

• contact details (name, address, e-mail address, telephone number, fax number or similar)
• contact person (professional position/job title, industry)
• creditworthiness information
• bank details
• tax identification number

 
4. Origin of personal data
 
DIOSNA processes personal data insofar as this data is provided or transmitted by the data subjects themselves (e.g. by suppliers and customers within the framework of the business relationship) or, where applicable, by third parties.
 
Insofar as DIOSNA receives personal data from third parties, these are in particular the following bodies:
 

• credit agencies
• commercial agents and authorised dealers
• other business partners within the framework of the fulfilment of contractual services
• banks, lawyers / tax consultants and authorities

 
5. We only pass on data to recipients who are absolutely necessary for the establishment and implementation of the contract, as well as to those who support us in the context of our internal company administration. These are, for example, IT service providers, system administrators, logistics companies, banks, lawyers / tax consultants and authorities. We do not intend to pass on data to bodies outside the EU / EEA.
We only store personal data as long as it is required for the respective purpose or as long as it must be stored due to legal retention obligations, e.g. in commercial or tax law, or as long as it may be stored for other legal reasons, such as legal defense.

6. You have the following rights when your personal data is collected:
 

• Right of access, Art. 15 GDPR: Data subjects have the right under Article 15 (1) of the GDPR to request confirmation as to whether personal data relating to them are being processed. If this is the case, they also have the right of access to this personal data and to the further information pursuant to Art. 15 (1) (a) to (h) of the GDPR.
• Right to rectification, Art. 16 GDPR: Should the personal data be inaccurate or incomplete, taking into account the purposes of processing, there is a right under Art. 16 GDPR to request rectification or completion of the personal data.
• Right to erasure, Art. 17 GDPR: According to Art. 17 (1) GDPR, there is a right to request erasure of personal data if the processing of personal data is unlawful for one of the reasons mentioned in this provision. However, erasure cannot be requested if further processing is necessary in the cases of Art. 17 (3) GDPR, e.g. to comply with legal obligations.
• Right to restriction of processing, Art. 18 GDPR: Under the conditions of Art. 18 (1) (a) to (d) GDPR, the data subject has the possibility to request the restriction of processing (blocking).
• A right to data portability under Art. 20 GDPR: Data subjects have the right to receive their personal data, which they themselves have provided to DIOSNA and which is processed automatically by DIOSNA on the basis of consent or a contract, in a common machine-readable format. This right is subject to, among other things, technical feasibility.
• Right to object, Art. 21 GDPR: Data subjects have the right to object to the processing of their personal data processed on the basis of a balance of interests (Art. 6 (1) (f) GDPR), taking into account the requirements of Art. 21 GDPR.

If the objection is directed against direct advertising (possibly with associated profiling), data processing will then no longer take place. In other cases, processing may only continue despite the objection if compelling legitimate grounds for the processing override the interests, rights and freedoms of the data subject or the processing serves to assert, exercise or defend legal claims.
Furthermore, consent given may be amended or withdrawn entirely at any time and without giving reasons with effect for the future.  The revocation does not affect the lawfulness of the processing of your data carried out on the basis of your consent up to any revocation.
You can send the revocation either by post to the above-mentioned address of DIOSNA, or by e-mail to datenschutz@diosna.de. In doing so, you will not incur any further costs outside the basic rates.
You have the right to lodge a complaint with a supervisory authority for data protection. The contact details of the supervisory authority responsible for us are as follows:
State Commissioner for Data Protection of Lower Saxony, E-mail: poststelle@lfd.niedersachsen.de.
 
7. The contracting party ensures and is solely responsible that the personal data provided may also be processed for the aforementioned purposes. The contractual partner shall ensure that the aforementioned information is made available to the respective data subjects in its area of responsibility.


DATA PROTECTION DECLARATION | APPLICATION PROCEDURE
 
Information according to art. 13, 14 of the GDPR in the context of application procedures
 
Thank you for your interest in working for our company. DIOSNA Dierks & Söhne GmbH takes the issue of data protection very seriously. The protection and confidentiality of personal data is a very high priority for us. In the following, we inform you about the type, scope and purposes of the collection and processing of your personal data in connection with your application in accordance with the GDPR, the Federal Data Protection Act (BDSG) and other applicable data protection regulations.
 
Who is responsible for data processing and whom can I contact?
The responsible party for data processing within the meaning of Art. 4 (7) GDPR is.
 
DIOSNA Dierks & Sons GmbH
Am Tie 23
D-49086 Osnabrück
Phone: +49 541 33104 0
E-mail: info@diosna.de
Web: www.diosna.de
You can reach our external data protection officer using the contact details provided at the bottom of this website.
 
From which sources do we obtain your data?
We collect your personal data for the application relationship from various sources in order to determine your suitability.
 

• Data that you provide to us: We first process personal data that you provide to us as part of the application process. This applies in particular to your application documents.
• Data collected from third parties: We also process - to the extent necessary - personal data that we have received from third parties (e.g. an employment agency) in a manner permitted under data protection law.
• Data from publicly available sources: We process personal data that we have permissibly obtained from publicly accessible sources (e.g. social or professional networks) insofar as this is necessary to determine your suitability to fill the vacancies in the application process.

 
What data or categories of data will we process?
As part of the application process, we will process your personal data to the extent necessary to determine your suitability to fill the vacancies. This data processing may concern the following data or data categories, among others:

• Personal and contact information, such as name, email address and telephone number, home address, date of birth, national identification number, gender, marital status and nationality
• Educational, performance and employment data, such as details of school and university qualifications, professional experience and skills, and performance appraisals
• Other application documents you provide us with, such as letters of application, references, CVs, driving licence class, passport photos or other information, e.g. reference to hobbies or voluntary work
• Special categories of personal data: If you provide information in your application documents that contains special categories of personal data (e.g. information on marital status that may allow conclusions to be drawn about your sexual orientation; information on your health; enclosure of a photo that allows conclusions to be drawn about your ethnic origin and, if applicable, your eyesight and/or religion), we will also only process this data to the extent permitted by law.

 
For what purposes do we process your data and on what legal basis?
We will only process your data in the context of the application process to the extent permitted by an applicable legal provision, i.e. based on the provisions of the GDPR, the BDSG and other applicable legal provisions, such as the Works Constitution Act (BetrVG). In doing so, we will base the processing of your personal data on the following legal bases, among others:
 

• For the decision on the establishment of the employment relationship
• For the fulfilment of legal obligations
• On the basis of your consent
• To safeguard legitimate interests

 
To which authorities will my data be transferred?
 
Within the company, your data will only be passed on to those departments that are entrusted with the preparation and implementation of the application process. This includes employees of the personnel department and the departments in which a vacancy is to be filled. In addition, in individual cases we will use service providers who may process data on our behalf and in accordance with our instructions for the aforementioned purposes. Whenever your personal data is transferred to external recipients who process this data on our behalf, we will contractually ensure that your data is transferred, protected and processed in accordance with all applicable data protection regulations.
 
How long will we store your data?
We will store your personal data in accordance with the legal requirements, in particular Art. 17 GDPR.
 

• Storage during the application process: If necessary, we will store your data for the duration of the application process.
• If an employment relationship is established: If we establish an employment relationship with you following the application process, we will transfer your data to the personnel file and then store it for as long as required by law.
• If your application is rejected: If no employment relationship is established between you and us, the application process ends with the receipt of a rejection. Against the background of § 61 para. 1 ArbGG in conjunction with § 15 AGG, we reserve the right to retain the data for up to six months after rejection.
• Storage due to legitimate interests: Under certain circumstances, we will also store your data for the duration of the statutory limitation period pursuant to §§ 195 et seq. German Civil Code (BGB).

 
Is data transferred to a third country or to an international organisation?
We do not transfer personal data to third countries.
 
What rights do I have as a data subject?
Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR and the right to data portability under Article 20 of the GDPR. With regard to the right to information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG apply.
Right to object: You can object to the processing of your data at any time. In this case, we will no longer process your data.
Right of revocation: If we base data processing on your consent (cf. Art. 6 (1) (a) and Art. 9 (2) (a) GDPR), you have the right to revoke your consent at any time with effect for the future. This also applies if special categories of personal data are involved. The lawfulness of the processing of your data up to the time of the revocation remains unaffected.
 
Where can you complain?
You have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG). You can contact the data protection supervisory authority responsible for us at the following address:
 
State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hanover
Phone: 0511 120-4500
E-mail: poststelle@lfd.niedersachsen.de
 
To what extent do automated individual decisions or profiling measures take place?
We do not use any purely automated processing processes to bring about a decision - including profiling - on the establishment of an employment relationship.
 
Is there an obligation for me to provide data?
In order to be able to decide whether we want to establish an employment relationship with you, we need the personal data mentioned above. Without this data, we cannot carry out the application process. However, there is no legal obligation to provide this data as part of the application process.



Changes to our privacy regulations

We reserve the right to adapt this Privacy Policy to ensure that it always complies with current legal requirements or to implement changes to our services in the Privacy Policy, e.g. when introducing new services. The new Privacy Policy shall then apply for your next visit.


Queries for the Data Protection Officer

If you have any queries about data protection, please write us an e-mail or contact the person responsible for data protection in our organisation directly:

DIOSNA Dierks & Söhne GmbH
Am Tie 23
D-49086 Osnabrück
Phone: +49 541 33104 0
E-mail: datenschutz@diosna.com
Web: www.diosna.de
 
You can reach our external data protection officer at:
 
Alexander Schmidt
Fully qualified lawyer, Ass. iur.
Senior Consultant Data Protection and Compliance
Data protection auditor (TÜV)
Data Protection Officer (TÜV)

Creditreform Compliance Services GmbH
Hellersbergstraße 11
D - 41460 Neuss
Web: datenschutz@diosna.com