Data privacy
The protection of your personal data is important to us, Griffin & Kale GmbH ("we"). We only process your personal data in accordance with the statutory regulations, in particular Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the German Federal Data Protection Act (BDSG).
This privacy policy informs you about the processing of your personal data and your rights as a data subject if
• you use our website (www.griffin-kale.com.com);
• you contact us for business purposes by other means
• and when you apply for a position in our company.
You will also find more detailed information on the use of so-called "cookies" on our website below.
This privacy policy informs you about the processing of your personal data and your rights as a data subject if
• you use our website (www.griffin-kale.com.com);
• you contact us for business purposes by other means
• and when you apply for a position in our company.
You will also find more detailed information on the use of so-called "cookies" on our website below.
1. Responsible person and contact to the data protection officer
The controller under data protection law for the data processing described in this privacy policy is
Griffin & Kale GmbH
Beverbäker Wiesen 6b
26123 Oldenburg
Tel: +49 15 79 23 90 51 6
E-Mail: info@griffin-kale.com
You can reach our data protection officer at info@griffin-kale.com.
Griffin & Kale GmbH
Beverbäker Wiesen 6b
26123 Oldenburg
Tel: +49 15 79 23 90 51 6
E-Mail: info@griffin-kale.com
You can reach our data protection officer at info@griffin-kale.com.
2. Purposes and legal basis of our data processing
2.1 Data processing when using our website
When you use our website, we may process the following types of data. This data may be personal data.
2.1.1 Internet connection data
When you access our website,we collect and process your so-called Internet connection data (e.g. date and time of access, name of the page accessed, amount of data transferred and the requesting provider and your IP address), which your browser automatically transmits to our server when you access our website. We need this information to enable you to use our website, for example by adapting the website to the technical requirements of your end device. We store this data for a period of up to six months in order to identify and rectify possible malfunctions of our website. The legal basis for this data processing is our legitimate interest in ensuring the security and usability of our website, Art. 6(1)(f) GDPR.
2.1.2 Access and storage on your end device ("cookies")
We may use tracking technologies on our website that enable us or our service providers to collect data relating to the use of our website. These tracking technologies are usually referred to as cookies, which is why we also use this term below. However, the following explanations also apply accordingly to other tracking technologies or file formats, such as local storage, pixels, beacons or tags. What such technologies have in common is that when they are used, informationcan be stored or read on your end device (e.g. in the browser you use on your computer).
2.1.2.1 Technically necessary cookies
In certain cases, the storage of information on your end device or access to information already stored on your end device is absolutely necessary so that we can make our website available to you for use ("technically necessary cookies"). The legal basis for the use of such cookies is Section 25(2)(2) of the German Telecommunications and Telemedia Data Protection Act (TDDDG).
Insofar as this information has a personal reference and is further processed by us in our IT systems, the legal basis for this data processing is our legitimate interest in the provision of our website and the fulfilment of our accountability under data protection law, Art. 6(1)(f) GDPR in conjunction with Art. 5(2) GDPR.
Insofar as this information has a personal reference and is further processed by us in our IT systems, the legal basis for this data processing is our legitimate interest in the provision of our website and the fulfilment of our accountability under data protection law, Art. 6(1)(f) GDPR in conjunction with Art. 5(2) GDPR.
2.1.2.2 Optional cookies
We only use technically unnecessary cookies ("optional cookies") with your consent. When you access our website for the first time, we display a so-called cookie banner to inform you about the tracking technologies we use and to give you the choice of which optional cookies you would like to agree to.
By clicking on the "accept all" button in the banner, you consent to the storage and reading of all technically unnecessary cookies on your device (section25(1) TDDDG) and to the processing of your personal data stored to the cookie (Art. 6(1)(a) GDPR). Your consent is voluntary. You can also reject all optional cookies instead by clicking on "reject all". Finally, you can also select or deselect individual cookies or services.
You can with draw your consent at any time, but only with effect for the future. To do so, please click on the consent settings tab at the bottom of our website. In the consent settings, you have the option of with drawing the consent you have already given (reject all) or giving it again (accept all). You can also de-select or select individual cookies or services there. To do this, please use the checkbox in the consent settings. We use the following optional cookies:
By clicking on the "accept all" button in the banner, you consent to the storage and reading of all technically unnecessary cookies on your device (section25(1) TDDDG) and to the processing of your personal data stored to the cookie (Art. 6(1)(a) GDPR). Your consent is voluntary. You can also reject all optional cookies instead by clicking on "reject all". Finally, you can also select or deselect individual cookies or services.
You can with draw your consent at any time, but only with effect for the future. To do so, please click on the consent settings tab at the bottom of our website. In the consent settings, you have the option of with drawing the consent you have already given (reject all) or giving it again (accept all). You can also de-select or select individual cookies or services there. To do this, please use the checkbox in the consent settings. We use the following optional cookies:
Name
Purpose
Storage Period
_gcl_au
We use this cookie for so-called conversion tracking, i.e. for statistical and marketing purposes. This is a cookie from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, US ("Google"), which Google provides as a first-party cookie as part of its AdSense service. Google stores a pseudonymous identifier for this cookie, which enables Google to track the success of the online advertising placed by us on Google websites. In particular, Google uses the identifier to collect information on how often a user's online advertisement was tracked, whether the user clicked on the advertisement, what type of device the user used and which of our websites the user accessed. Google may use this information to create or enrich user profiles. We ourselves only receive aggregated data from Google, e.g. statistical conversion rates or information on the search terms by means of which users found our website in the Google search.
6 months
_ga
We use this cookie for web analysis of visits to our website, i.e. for statistical purposes and possibly also for marketing purposes. It is a cookie that Google provides as a first-party cookie as part of its Google Analytics 4 service. Google stores a pseudonymous identifier for this cookie, which enables Google to analyse user behaviour on our website. Google uses the identifier to collect information such as calls, clicks or other events triggered by the user on our website. Google may use this information to create or enrich user profiles. We ourselves only receive aggregated usage data from Google, which we analyse in order to improve the usability and functions of our website.
6 months
_ga_<container-id>
We use this cookie for web analysis of visits to our website, i.e. for statistical purposes and possibly also for marketing purposes. It is a cookie that Google provides as a first-party cookie as part of its Google Analytics 4 service. Google stores a pseudonymous session ID for this cookie, which enables Google to assign the data on the use of our website to the same user even if the user ends his or her individual usage session in the meantime. Google uses the identifier in particular to collect information such as calls, clicks or other events triggered by the user on our website. Google may use this information to create or enrich user profiles. We ourselves only receive aggregated usage data from Google, which we analyse in order to improve the usability and functions of our website.6 months
6 months
If you consent to the use of these cookies, Google may also process your IP address. You can access Google's privacy policy here. The data collected by Google is also stored on Google servers in the US. Google is certified under the Trans-Atlantic Data Privacy Framework (DPF).
2.1.3. Contact form
You have the option of sending us enquiries via the contact form on our website. In this case, we collect your name, the name of your company, your email address and your enquiry. We process your data to respond to your enquiry.
If your enquiry is made in connection with the performance of a contract concluded with you or for the initiation of such a contract, the legal basis for our data processing is Art.6(1)(b) GDPR. Otherwise, the legal basis is our legitimate interest in the efficient processing of your enquiry addressed to us (Art. 6(1)(f) GDPR). You can object to this data processing under the conditions of Art. 21(1) GDPR.
If your enquiry is made in connection with the performance of a contract concluded with you or for the initiation of such a contract, the legal basis for our data processing is Art.6(1)(b) GDPR. Otherwise, the legal basis is our legitimate interest in the efficient processing of your enquiry addressed to us (Art. 6(1)(f) GDPR). You can object to this data processing under the conditions of Art. 21(1) GDPR.
2.2 Data processing for other business contacts
If you contact us by means other than our website, for example by e-mail, telephone, post or at trade fairs and other events, we will collect your contact details, including your position in your company if applicable. We store this data in our CRM system and process your data in order to contact you.
If your enquiry is made in connection with the performance of a contract concluded with you or for the initiation of such a contract, the legal basis for our data processing is Art.6 para. 1 lit. b GDPR. Otherwise, the legal basis is our legitimate interest in the efficient processing of your enquiry addressed to us (Art. 6(1)(f) GDPR). You can object to this data processing under the conditions of Art. 21(1) GDPR.
If your enquiry is made in connection with the performance of a contract concluded with you or for the initiation of such a contract, the legal basis for our data processing is Art.6 para. 1 lit. b GDPR. Otherwise, the legal basis is our legitimate interest in the efficient processing of your enquiry addressed to us (Art. 6(1)(f) GDPR). You can object to this data processing under the conditions of Art. 21(1) GDPR.
2.3 Processing of applicant data
You have the opportunity to apply for a job with us by post, e-mail . When you apply for a position with us, we collect, store and process your applicant data. This applicant data includes your contact details, your salary expectations and information on your availability, your application documents including any cover letters you have enclosed, your CV, certificates and supporting documents, data relating to your job interviews and any notes we have taken during job interviews.
If your application is successful, we will store and process your data based on Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship.
If we are unable to make you a job offer, you reject a job offer or withdraw your application, we will store your data for a period of up to six months from the end of the application process. This storage is in our legitimate interest (Art. 6(1)(f) GDPR) to be able to prove compliance with legal regulations for the application process, in particular those of the German General Act on Equal Treatment (AGG). If we are not currently making you a job offer, we may offer to include you in our applicant pool in order to offer you a position at a later date. We will only include you in the applicant pool if you consent to this (Art. 6(1)(a) GDPR). In this case, we will store your applicant data for a period of up to two years. You can revoke your consent at any time with effect for the future.
If your application is successful, we will store and process your data based on Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship.
If we are unable to make you a job offer, you reject a job offer or withdraw your application, we will store your data for a period of up to six months from the end of the application process. This storage is in our legitimate interest (Art. 6(1)(f) GDPR) to be able to prove compliance with legal regulations for the application process, in particular those of the German General Act on Equal Treatment (AGG). If we are not currently making you a job offer, we may offer to include you in our applicant pool in order to offer you a position at a later date. We will only include you in the applicant pool if you consent to this (Art. 6(1)(a) GDPR). In this case, we will store your applicant data for a period of up to two years. You can revoke your consent at any time with effect for the future.
2.4 Processing for the purposes of IT security
Your personal data may be subject to rolling data backups. We create such backups in pursuit of our legitimate interest (Art. 6(1)(f) GDPR) in ensuring data security and the recoverability of data in the event of malfunctions or external attacks. You can object to this data processing under the conditions of Art. 21(1) GDPR.
3. Recipients of your personal data and third country transfers
When processing your personal data, we use various technical service providers who host our website for us and provide us with cloud and SaaS services. Insofar as these service providers may have access to your personal data, they process your data within the framework of a data processing agreement (Art. 28 GDPR) that we have concluded with these companies.
In this context, we may transfer your personal data to processors or sub-processors in countries outside the European Union ("EU") and the European Economic Area, namely to the USA. These data transfers are based on the adequacy decision of the EU Commission of 10 July 2023 (C(2023) 4745). Our service providers are certified under the Data Privacy Framework.
In this context, we may transfer your personal data to processors or sub-processors in countries outside the European Union ("EU") and the European Economic Area, namely to the USA. These data transfers are based on the adequacy decision of the EU Commission of 10 July 2023 (C(2023) 4745). Our service providers are certified under the Data Privacy Framework.
4. Deletion of your personal data
We delete your personal data as soon as its processing is no longer necessary for the purposes explained in this privacy policy. If and for as long as statutory retention obligations prevent deletion, we restrict the processing of your data to this archiving purpose (so-called data blocking) and delete your data when the retention period expires. Such retention obligations exist under German commercial and tax law, in particular for business letters for six years at the end of the year and for accounting-related documents for ten years at the end of the year.
5. Your rights
As a data subject of data processing by our company, you have the following rights under the respective legal requirements:
• The right to confirmation as to whether we are processing personal data relating to you (Art. 15 GDPR).
• The right to information about your personal data processed by us and to a copy of the data (Art. 15GDPR)
• The right to rectification in the event that your personal data is incorrect (Art. 16 GDPR).
• The right to erasure of your personal data (Art. 17 GDPR).
• The right to restriction (blocking) of your personal data (Art. 18 GDPR).
• The right to data portability (Art. 20 GDPR).
If your personal data is processed based on Art.6(1)(e) or (f) GDPR, you can also object to the processing in question under the conditions of Art. 21(1) GDPR. You can object to the processing of your personal data for direct marketing purposes at any time and without giving reasons with effect for the future (Art. 21(2) GDPR).
If the processing is based on your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, you can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR).
You also have the right to contact the competent data protection supervisory authority (Art. 77 GDPR).
• The right to confirmation as to whether we are processing personal data relating to you (Art. 15 GDPR).
• The right to information about your personal data processed by us and to a copy of the data (Art. 15GDPR)
• The right to rectification in the event that your personal data is incorrect (Art. 16 GDPR).
• The right to erasure of your personal data (Art. 17 GDPR).
• The right to restriction (blocking) of your personal data (Art. 18 GDPR).
• The right to data portability (Art. 20 GDPR).
If your personal data is processed based on Art.6(1)(e) or (f) GDPR, you can also object to the processing in question under the conditions of Art. 21(1) GDPR. You can object to the processing of your personal data for direct marketing purposes at any time and without giving reasons with effect for the future (Art. 21(2) GDPR).
If the processing is based on your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, you can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR).
You also have the right to contact the competent data protection supervisory authority (Art. 77 GDPR).
6. No automated decision in individual cases
Your personal data will not be used for automated individual case decisions within the meaning of Art. 22(1)GDPR.
7. Changes to the privacy policy
New legal requirements, business decisions or technical developments may require changes to this privacy policy. The privacy policy will then be adapted accordingly. You will always find the latest version on our website.