Privacy Policy TALLAG Group

1 General Privacy Notice

1.1 Who is responsible for data processing and who can I contact?

Responsible within the meaning of the General Data Protection Regulation (GDPR) is:

TALLAG Saalfeld GmbH
Hüttenstrasse 21
D-07318 Saalfeld/Saale, Germany
E-mail: info@tallag.com

You can reach our data protection officer using the aforementioned contact details or by e-mail at datenschutz@tallag.com

The TALLAG Group includes the following companies (also referred to as “locations”):

TALLAG Saalfeld GmbH
Hüttenstraße 21
07318 Saalfeld/Saale

TALLAG Rottenbach GmbH
Industrie und Gewerbegebiet 80
7426 Königsee OT Rottenbach

TALLAG Gera GmbH
Hermsdorf 31 a
07554 Gera

1.2 What data do we collect?

We typically process the following categories of personal data:

• Master data: name, address,
• Contact details: e.g., telephone number, e-mail address, any company affiliation,
• Contact preferences: e.g., preferred contact medium, advertising messages received,
• Inquiries: e.g., offers, inquiries, expressions of interest, feedback,
• Customer data: e.g., correspondence, contracts, services, orders, joint appointments,
• Financial and payment data: e.g., bank account number, billing address, payments received,
• Application data: e.g. CV, certificates, cover letter, previous activities and positions in other organisations, education, professional qualifications, reference contact information, position preferences, salary expectations, interests and wishes, gender, marital status, age, information from publicly available sources, such as professional social media networks, any other information you provide to us and, if necessary, sensitive data such as origin, religion, possibly health data and degree of disability, criminal convictions, sanctions by supervisory or professional organisations,
• Device data: e.g., information about your end devices with which you visit our website, such as the operating system used, browser type, language setting, IP address.

1.3 For what purposes do we collect, use, and store this personal data?

We collect, use, and store or process your personal data:

1.3.1 if you have given us your consent (Art. 6 (1) (a) GDPR)

• to receive information about TALLAG offers, by post, telephone, messenger or e-mail;

1.3.2 if necessary, to fulfil contractual obligations and pre-contractual measures (Art. 6 (1) (b) GDPR)

• Processing of your inquiries and thisbzgl. Contact, for example for certain contractually bound offers of TALLAG,
• to decide on the establishment of an employment relationship for applications (legal basis for this is § 26 Abs. 1 BDSG). In particular, we process the data that you have sent us in connection with your application in order to check your suitability for the position (or, if applicable, other vacancies in our companies) and to carry out the application process,
• for example, to carry out an order and invoicing, or to contact you for these purposes by post, telephone, e-mail, messenger service;

1.3.3 insofar as the legitimate interests of us or third parties require it, and no legitimate interests of data subjects prevail and you have not objected to the use (Art. 6 (1) (f) GDPR)

• for the purposes of maintaining, maintaining, and improving our IT systems and services, data protection control and data backup,
• to respond to other inquiries and complaints,
• for internal administrative purposes,
• to photograph or film events for the purposes of documentation and reporting as well as the possible publication of the recordings on our website, if necessary,
• to detect, prevent or otherwise address fraud, security deficiencies or technical problems,
• to provide law enforcement authorities with the information necessary for criminal prosecution in the event of suspicion of a criminal offence,
• to protect and safeguard our legitimate business interests, terms and conditions and legal rights and obligations. This includes, but is not limited to, the use of any personal data in connection with compliance, regulatory, audit and legal claims (including disclosure of such information in connection with legal proceedings or litigation),
• for direct marketing outside of the existence of consent to the extent permitted by law. In connection with the sale of goods or services to you or your company, we may process your postal contact details outside the presence of a specific consent in order to occasionally send you information about new offers (direct marketing). Under the legal requirements of § 7 Abs. 3 UWG, we are entitled to use your e-mail address, which you have provided when purchasing goods or services, for direct advertising for our own, similar goods or services;

1.3.4 if necessary to comply with a legal obligation (Art. 6 (1) (c) GDPR)

• for example, to store the data collected for the execution of the contract until the expiry of the statutory retention periods,
• to fulfil storage, documentation, and retention obligations, including the obligations to provide evidence regulated in Article 5 (2) and Article 7 (1) GDPR.

1.4 Who receives your data?

1.4.1 Transfers to companies that provide services to us as processors

Your personal data will be disclosed to companies that provide services on our behalf in accordance with our instructions. These are companies in the categories of IT services, including website hosters, data destruction.

1.4.2 Transfers to third parties

We share your information with third parties if we are required by law to disclose your personal information or if we believe it is necessary to protect the rights, property, or safety of us, our customers, or third parties. Transfers to public authorities and/or law enforcement authorities are made to the extent required by law or where it is necessary to protect our legitimate interests in accordance with applicable laws. We will inform you separately about these transfers to third parties in accordance with Art. 13 – 14 GDPR, e.g., within the scope of a consent given to us.

1.5 Is there an obligation for me to provide data?

As part of our business relationship, you must provide the personal data that is necessary for the initiation, execution, and fulfilment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we will usually have to refuse to conclude the contract or no longer be able to execute an existing contract and may have to terminate it.

1.6 How long do we store your data?

In principle, we process and store personal data of data subjects only for as long as the purpose pursued requires it or is required by law. For example, commercial and tax retention periods may prevent deletion. The periods specified there for storage or documentation are up to ten years. If the storage purpose no longer applies or if a legally prescribed storage period expires, the personal data will be routinely deleted in accordance with the statutory provisions, unless they are used as evidence.

1.7 What data protection rights do you have?

You have the right to know whether we process data about you. Each person affected by our personal data processing also has the right of access pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR, the right to object pursuant to Article 21 GDPR and the right to data portability pursuant to Article 20 GDPR. The restrictions according to §§ 34 and 35 BDSG apply to the right to information and the right to deletion. In addition, there is a right of appeal to the supervisory authority for data protection, e.g., to the data protection authority responsible for your place of residence, your workplace or for the place of the data protection violation.

If you have any questions about this Privacy Notice or would like to contact us for any other reason regarding the processing of personal data, please contact us using the contact details set out above.

1.7.1 Information about your right to object according to Article 21 GDPR

1.7.1.1 Right to object on a case-by-case basis

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is based on Article 6 (1) (e) or (f) GDPR (data processing on the basis of a legal obligation or balancing of interests); this also applies, if applicable, to profiling based on this provision within the meaning of Article 4 (4) GDPR.

In individual cases, we also process your personal data for direct marketing purposes. You also have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling to the extent that it is associated with such direct marketing.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. In cases of direct marketing by e-mail, you can revoke their receipt at any time without incurring any costs other than the transmission costs according to the basic rates. A message in text form to the aforementioned contact details (e.g. e-mail, fax, letter) is sufficient for this.

1.7.1.2 Revocation of granted consent

You can revoke your consent given to us at any time with effect for the future.

1.8 Updates to this Privacy Notice

This privacy notice may be updated regularly. We will update the date at the top of this website accordingly and encourage you to check it for changes.