Datenschutzerklärung/Privacy Policy

Privacy Policy

Our company attaches great importance to the protection of personal data and respects your desire for privacy. Below we inform you about the collection of personal data when using our website. If you have any further questions about the handling of your personal data, please contact our data protection officer.

1. 1. Person responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) is the:

DISCO HI-TEC EUROPE GmbH
Liebigstrasse 8

D-85551 Kirchheim b. München
Germany

2. 2. Contact details of the data protection officer

You can contact our data protection officer at DSB-DISCO_HT-TECH@intersoft-consulting.de or at our postal address with the addition "the data protection officer".

3. 3. Legal basis of our data processing

The processing of personal data can be based on various legal bases. If we need your data to fulfil a contract with you or to respond to your enquiries regarding a contract, the legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b GDPR. If we obtain your consent for certain data processing, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. We carry out some data processing on the basis of our legitimate interest, whereby a balance is always struck between your interests worthy of protection and our legitimate interests. The legal basis for this is Art. 6 para. 1 lit. f GDPR. Insofar as the processing is necessary to fulfil a legal obligation to which we are subject, the legal basis is Art. 6 para. 1 sentence 1 lit. c GDPR.

Below we explain how we process personal data via our website.

1. 3.1 Data processing when accessing the website

If you use the website for information purposes only, i.e. if you do not contact us via the online form or otherwise provide us with information, we collect the following technical information (log file data):

- the operating system of the device you are using to visit our website
- browser (type, version & language settings)
- the amount of data accessed
- the current IP address of the device you are using to visit our website
- the date and time of access
- the URL of the previously visited website (referrer)
- the URL of the (sub)page you are accessing on the website
- the Internet service provider of the accessing system

The collection of this data is technically necessary in order to display our website to you and to ensure stability and security. We (and our service provider) regularly do not know who is behind an IP address. We do not merge the data listed above with other data.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR and § 25 para. 2 no. 2 TDDDG (German national law). Since the collection of data for the provision of the website and storage in log files is absolutely necessary for the operation of the website and to protect against misuse, our legitimate interest in data processing prevails at this point.

2. 3.2 Contacting us by e-mail or contact form

When you contact us by email or via a contact form, the data you provide (your email address, possibly your name and telephone number) will be stored by us in order to answer your questions and process your requests. The legal basis in this respect is Art. 6 para. 1 sentence 1 lit. f GDPR. If we request information via our contact form that is not required for contacting you, we have always labelled this as optional. We use this information to specify your enquiry and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Art. 6 para. 1 sentence 1 lit. a GDPR. If this involves information on communication channels (e.g. email address, telephone number), you also consent to us contacting you via this communication channel in order to respond to your enquiry. You can of course revoke this consent at any time for the future.

Your data that we have received in the course of contacting you will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

4. 4. Applications

You can apply to our company by e-mail. Please note that unencrypted e-mails are not protected against unauthorised access.

Your data will be used to process your application and to decide on the establishment of an employment relationship. The legal basis is § 26 para. 1 i.V.m. para. 8 sentence 2 BDSG. Furthermore, your personal data may be processed if this is necessary for the defence of legal claims asserted against us in the application process. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. The legitimate interest in the processing also lies in the stated purposes.

If there is an employment relationship between you and us, we may process the personal data already received from you for the purposes of the employment relationship in accordance with Section 26 (1) BDSG if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the employee representation arising from a law or a collective agreement, a works or service agreement (collective agreement).

Your application data will not be processed beyond the use described above.

Your personal data will be deleted after completion of the application process after 6 months at the latest, unless deletion conflicts with any other legitimate interests on our part or you have not given us your consent for longer storage. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

5. 5. Use of cookies

Cookies are data that are stored on your computer by a website that you visit and enable your browser to be reassigned. Cookies are used to transmit information to the organisation that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you make there. Cookies cannot execute programmes or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.

1. 5.1 Transient cookies

These cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

2. 5.2 Persistent cookies

These cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

6. 6. Google Maps Plug-In

This site uses the map service Google Maps to display an interactive map and to create directions or to support the search for a stationary market. Google Maps is a map service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

To use the functions of Google Maps, information, including the IP address and the address entered as part of the route function, may be transmitted to the provider's servers. This information is usually transferred to a Google server in the USA and stored there. When you visit a website that contains Google Maps, your browser establishes a direct connection with Google's servers, whereby the map content is sent to your browser and integrated by it. The provider of this site has no influence on this data transfer. According to current knowledge, this includes the following data:

- Date and time of the visit to the website in question,

- Internet address or URL of the website accessed,

- IP address, (start) address entered during route planning

You can find more information on the handling of user data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

The use of third-party services also means that third-party cookies are sometimes used on this website. A third-party cookie is set by a third party, i.e. not by the actual website you are currently visiting. Third-party cookies can store the number of page views and the time spent on a website or the path travelled by a user via hyperlinks. They enable the tracking of user behaviour across different websites.

Data is only collected and stored with express consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR and § 25 para. 1 TDDDG. This can be revoked at any time with effect for the future.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

7. 7. YouTube plug-in

We use the services of YouTube, LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, a subsidiary of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. For users who have their habitual residence in the European Economic Area or Switzerland, Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland is the controller responsible for your data.

We use a two-click solution to protect your personal data. When you access a page in which a YouTube video is embedded, a connection to the YouTube servers is only established when you click on the "Confirm" button. In this case, YouTube will set cookies and use your visit data for its own purposes. If you are logged in to YouTube at this time, the information about the videos you have viewed will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website. If data is processed outside the European Economic Area / the EU, where there is no level of data protection corresponding to the European standard, Google uses standard contractual clauses according to its own information.

Further information on data protection from YouTube is provided by Google at the following link: https://www.google.de/intl/de/policies/privacy/.

8. 8. Google Tag Manager

For reasons of transparency, we would like to point out that we use Google Tag Manager. This is a tag management system for managing JavaScript and HTML tags, which is used for the implementation of tracking and analysis tools. It is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The controller in the EU/EEA is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The Google Tag Manager itself does not collect any personal data. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that are used, among other things, to measure traffic and visitor behaviour, record the impact of online advertising and social channels, set up remarketing and targeting and test and optimise websites. If you have opted out, this opt-out will be taken into account by Google Tag Manager.

The recipients of the data are:

Google Ireland Limited, EU,

Google LLC, USA

Alphabet Inc., USA.

This service may process data outside the European Union and the European Economic Area (EEA).

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You have the option of revoking your consent with effect for the future by clicking on the "Cookie / Privacy Settings" link at the bottom centre of the website footer and changing your settings. The legality of the data processing until the revocation remains unaffected.

For more information about Google Tag Manager, please visit:

https://www.google.com/intl/de/tagmanager/use-policy.html.

9. 9. Google Analytics

If you have given your consent, we use Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics uses cookies that enable us to analyse your use of our website. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

 

 

We use Google Signals. This enables Google Analytics to collect additional information about users who have activated personalised ads (interests and demographic data) and ads can be delivered to these users in cross-device remarketing campaigns.

We use the 'anonymiseIP' function (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to our website, the following data is collected, among others:

• the pages you have called up, your "click path",

• Achievement of "website goals" (conversions, e.g. newsletter registrations, downloads),

• Your user behaviour (e.g. clicks, dwell time, bounce rates),

• Your approximate location (region),

• Your IP address (in abbreviated form),

• technical information about your browser and the end devices you use (e.g. language setting, screen resolution),

• Your Internet provider and

• the referrer URL (via which website/advertising medium you came to this website).

On behalf of the operator of this website, Google will use this information to analyse your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as the processor. We have concluded a data processing agreement with Google for this purpose. Google LLC, based in California, USA, and, if applicable, US authorities can access the data stored by Google.

The user data is automatically deleted after 14 months. Event data is being stored for 2 months. Data that has reached the end of its retention period is automatically deleted once a month.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link

a. do not give your consent to the setting of the cookie or

b. download and install the browser add-on to deactivate Google Analytics HERE .

You can also prevent the storage of cookies by configuring your browser software accordingly. However, if you configure your browser to reject all cookies, this may restrict the functionality of this and other websites.

To prevent Universal Analytics from collecting data across different devices, you must opt out on all systems used. If you click here, the opt-out cookie will be set: javascript:gaOptout().

You can find more information on the terms of use of Google Analytics and on data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.

The legal basis for this data processing is your consent, Art. 6 para. 1 lit. a) GDPR and § 25 para. 1 TDDDG. You can revoke your consent at any time with effect for the future by opening the data protection settings at the bottom centre of the footer and activating the slider accordingly.

10. 10. Social plug-ins

This website uses social plugins from the provider(s)

- Meta formerly Facebook (Operator: Meta Platforms, Inc., 1601 Willow Road, Menlo Park California 94025, USA. The entity responsible for handling data subject rights within the EU/EEA is Meta Platforms Ireland Ltd. 4 Grand Canal Square Grand Canal Harbour Dublin 2 Ireland)

- YouTube (operator: YouTube, LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA. For users who have their habitual residence in the European Economic Area or Switzerland, Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland is the controller responsible for your data).

- Linkedin (Operator: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.)

These plugins normally collect data from you by default and transmit it to the servers of the respective provider. To ensure the protection of your privacy, we have taken technical measures to ensure that your data cannot be collected by the providers of the respective plugin without your consent. When you call up a page on which the plugins are integrated, they are initially deactivated. The plugins are only activated when you click on the respective symbol, thereby giving your consent for your data to be transferred to the respective provider. The legal basis for the use of the plugins is your consent in accordance with Art. 6 para. 1 lit. a) GDPR and Section 25 para. 1 TDDDG.

Once activated, the plugins also collect personal data, such as your IP address, and send it to the servers of the respective provider, where it is stored. In addition, activated social plugins set a cookie with a unique identifier when the relevant website is accessed. This also allows the providers to create profiles about your usage behaviour on websites that you have visited. This happens even if you are not a member of the social network of the respective provider. If you are a member of the provider's social network and are logged in to the social network during your visit to this website, your data and information about your visit to this website may be linked to your profile on the social network. We have no influence on the exact scope of the data collected from you by the respective provider. For more information about the scope, type and purpose of data processing and about rights and setting options to protect your privacy, please refer to the data protection information of the respective provider of the social network. These are available at the following addresses:

Facebook: https://www.facebook.com/policy.php

YouTube: https://www.google.de/intl/de/policies/privacy/

LinkedIn: https://de.linkedin.com/legal/privacy-policy

Insofar as data is processed outside the EU/EEA, the providers have certified themselves in accordance with the Data Privacy Framework (DPF) programme and are listed in the Data Privacy Framework list of the International Trade Administration (ITA). This means that the companies have publicly committed to complying with the DPF obligations and that any data transfer to the USA is unobjectionable due to the current adequacy decision of the European Commission of 10 July 2023.

A list of currently certified US companies can be found here: https://www.dataprivacyframework.gov/s/participant-search

You can find more information on the Data Privacy Framework Programme on the official website of the ITA: https://www.dataprivacyframework.gov/s/

11. 11. Data transmission

Your data will not be transferred to third parties except in the cases mentioned, unless we are legally obliged to do so, or the transfer of data is necessary for the fulfilment of the contractual relationship or you have previously expressly consented to the transfer of your data.

External service providers and partner companies such as online payment providers or the shipping company commissioned with the delivery will only receive your data if this is necessary to process your order. In these cases, however, the scope of the transmitted data is limited to the necessary minimum. Insofar as our service providers come into contact with your personal data, we ensure that they comply with the provisions of the data protection laws in the same way as part of order processing in accordance with Art. 28 GDPR. Please also note the respective data protection notices of the providers. The respective service provider is responsible for the content of external services, whereby we check the services for compliance with the legal requirements within the scope of reasonableness.

We attach great importance to processing your data within the EU/EEA. However, we may use service providers who process data outside the EU/EEA. In these cases, we ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient before your personal data is transferred.

12. 12. Data security

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted to technological progress.

13. 13. Your rights

You have the following rights with regard to your personal data. To exercise your aforementioned rights, please contact us by e-mail DSB-DISCO_HT-TECH@intersoft-consulting.de or by post to

intersoft consulting services AG

- Team data protection -

Beim Strohhause 17

20097 Hamburg

Germany

 

1. 13.1 General rights

We will be happy to provide you with information as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR. In addition, you have the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR) under the respective legal requirements.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

2. 13.2 Rights in data processing according to the legitimate interest

Pursuant to Art. 21 para. 1 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 sentence 1 lit. e GDPR (data processing in the public interest) or on Art. 6 para. 1 sentence 1 lit. f GDPR (data processing to safeguard a legitimate interest). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Datenschutzerklärung zur Meldestelle nach dem Hinweisgeberschutzgesetz (HinSchG)

Die DISCO HI-TEC EUROPE GmbH nimmt den Schutz von personenbezogenen Daten sehr ernst. Diese Datenschutzerklärung erläutert, welche personenbezogenen Daten wir bei der Nutzung der Meldestelle von Ihnen erheben und wie wir sie verwenden. Die Einhaltung der geltenden Datenschutzvorschriften stellen wir durch entsprechende technische und organisatorische Maßnahmen sicher.

Verantwortliche Stelle und Datenschutzbeauftragter

Verantwortlich für die Verarbeitung personenbezogener Daten ist die

intersoft consulting services AG

- Team Datenschutz -

Beim Strohhause 17

20097 Hamburg

Deutschland

Der Datenschutzbeauftragte des Unternehmens ist unter DSB-DISCO_HT-TECH@intersoft-consulting.de zu erreichen.

Die technische Umsetzung der Meldestelle erfolgt durch die It- und Rechtsabteilungen der DISCO HI-TEC EUROPE GmbH.

Personenbezogene Daten

Grundsätzlich ist die Nutzung der Meldestelle – soweit rechtlich zulässig – ohne die Angabe personenbezogener Daten möglich. Sie können jedoch im Rahmen des Hinweisgeberprozesses freiwillig personenbezogene Daten bekanntgeben, insbesondere Angaben zu Ihrer Identität, Vor- und Nachname, Land des Wohnsitzes, Telefonnummer oder E-Mail-Adresse.

Grundsätzlich erfragen und verarbeiten wir keine besonderen Kategorien personenbezogener Daten im Sinne von Art. 9 der DSGVO, bspw. Informationen zur rassischen und/oder ethnischen Herkunft, religiöser und/oder weltanschaulicher Überzeugung, Gewerkschaftszugehörigkeit oder sexueller Orientierung. Solche besonderen Kategorien personenbezogener Daten können jedoch freiwillig von Ihnen bekanntgegeben werden.

Der von Ihnen gegebene Hinweis kann darüber hinaus personenbezogene Daten Dritter enthalten, auf die Sie sich in Ihrem Hinweis beziehen. Betroffene Personen erhalten die Möglichkeit, sich zu den Hinweisen zu äußern. In diesem Fall werden wir die betroffenen Personen über den Hinweis informieren. Auch in diesem Fall ist Ihre Vertraulichkeit gewahrt, da der betroffenen Person – soweit rechtlich möglich – keine Angaben zu Ihrer Identität gemacht werden und Ihr Hinweis so verwendet wird, dass Ihre Anonymität nicht gefährdet ist.

Zwecke und Rechtsgrundlagen der Verarbeitung

Die Meldestelle ermöglicht es Ihnen, mit uns in Verbindung zu treten und Hinweise zu Compliance- und Rechtsverstößen nach dem Hinweisgeberschutzgesetz zu melden.

Wir verarbeiten Ihre personenbezogenen Daten, um die von Ihnen über die Meldestelle gemachte Meldung zu prüfen und die mutmaßlichen Compliance- und Rechtsverstöße zu untersuchen. Hierbei kann es vorkommen, dass wir Rückfragen an Sie haben. Dafür nutzen wir ausschließlich die Kommunikation über die Meldestelle. Hierbei steht für uns die Vertraulichkeit der von Ihnen gemachten Angaben an erster Stelle.

Die entsprechende Verarbeitung Ihrer personenbezogenen Daten erfolgt freiwillig aufgrund Ihrer bei der Meldung über das Hinweisgebersystem erteilten Einwilligung (Art. 6 Abs. 1 lit. a Europäische Datenschutzgrundverordnung, DSGVO).

Des Weiteren verarbeiten wir Ihre personenbezogenen Daten, soweit dies zur Erfüllung rechtlicher Verpflichtungen erforderlich ist. Darunter fallen insbesondere Meldungen von straf-, wettbewerbs- und arbeitsrechtlich relevanten Sachverhalten. Die Verarbeitung besonderer Kategorien personenbezogener Daten durch die Meldestelle ist zulässig, wenn dies zur Erfüllung der Aufgaben erforderlich ist. (Art. 6 Abs. 1 lit. c DSGVO i.V.m. § 10 HinSchG).

Schließlich erfolgt die Verarbeitung Ihrer personenbezogenen Daten, sofern dies zur Wahrung berechtigter Interessen des Unternehmens bzw. eines Dritten erforderlich ist (Art. 6 Abs. 1 lit. f DSGVO). Wir haben ein berechtigtes Interesse an der Verarbeitung der personenbezogenen Daten zur Prävention und Aufdeckung von Verstößen innerhalb des Unternehmens, zur Überprüfung der internen Prozesse auf ihre Rechtmäßigkeit und zur Wahrung der Integrität des Unternehmens.

Wir beabsichtigen nicht, Ihre personenbezogenen Daten zu anderen als den oben aufgeführten Zwecken zu verwenden. Andernfalls werden wir vorgängig eine entsprechende Einwilligung bei Ihnen einholen.

Technische Umsetzung und Sicherheit Ihrer Daten

Die Meldestelle enthält eine Möglichkeit zur anonymen Kommunikation über eine eigens hierfür eingerichtete E-Mailadresse und Telefonnummer, zur denen nur die die Meldestelle betreuende Person Zugriff hat.

Zur Sicherstellung des Datenschutzes und der Vertraulichkeit unterhalten wir entsprechende technische Maßnahmen. Die von Ihnen zur Verfügung gestellten Daten werden auf einem besonders gesicherten Laufwerk von der betreuenden Person der Meldestelle gespeichert.

Weitergabe der personenbezogenen Daten

Das Unternehmen ist international tätig und hat Standorte in verschiedenen Ländern inner- und außerhalb der Europäischen Union. Eine Einsichtnahme der gespeicherten Daten ist ausschließlich durch speziell hierfür autorisierte Personen innerhalb des Unternehmens möglich. Soweit dies zur Erfüllung des hiervor genannten Zwecks erforderlich ist, können auch speziell autorisierte Personen unserer Tochtergesellschaften zur Einsichtnahme berechtigt sein. Dies ist insbesondere dann der Fall, wenn die Untersuchung ihrer Meldung im betroffenen Land durchgeführt wird. Alle zur Einsichtnahme autorisierten Personen sind ausdrücklich zur Vertraulichkeit verpflichtet.

Zur Erfüllung des hiervor genannten Zwecks kann es zudem erforderlich sein, dass wir Ihre personenbezogenen Daten an externe Stellen wie Anwaltskanzleien, Straf- oder Wettbewerbsbehörden, inner- oder außerhalb der Europäischen Union übermitteln.

Sofern wir Ihre personenbezogenen Daten gruppenintern oder extern weitergeben, wird mittels interner Datenschutzregelungen und/oder entsprechender vertraglicher Vereinbarungen ein einheitliches Datenschutzniveau sichergestellt. In sämtlichen Fällen verbleibt die Verantwortung zur Datenverarbeitung beim Unternehmen.

Dauer der Speicherung

Zur Erfüllung der im Abschnitt „Zweck und Rechtsgrundlagen der Verarbeitung“ dargelegten Verpflichtungen und Aufgaben werden die personenbezogenen Daten nach Vorgaben des § 11 Abs. 5 HinSchG für einen Zeitraum von drei Jahren nach Abschluss des Verfahrens gespeichert. Die Dokumentation kann länger aufbewahrt werden, um die Anforderungen nach dem HinSchG oder nach anderen Rechtsvorschriften zu erfüllen, solange dies erforderlich und verhältnismäßig ist.

Ihre Rechte

Wenn Sie personenbezogene Daten angegeben haben, haben Sie jederzeit ein Recht auf Auskunft (Art. 15 DSGVO), Berichtigung (Art. 16 DSGVO) und Löschung (Art. 17 DSGVO) der personenbezogenen Daten. Sie können die Verarbeitung zudem einschränken (Art. 18 DSGVO) oder ihre Übermittlung an eine andere verantwortliche Stelle verlangen.

Des Weiteren haben Sie das Recht, aus Gründen, die sich aus ihrer besonderen Situation ergeben, jederzeit gegen die Verarbeitung der Sie betreffenden personenbezogenen Daten Widerspruch einzulegen (Art. 21 DSGVO).

Sie haben das Recht, Ihre Einwilligungserklärung jederzeit zu widerrufen (Art. 7 Abs. 3 DSGVO). Durch den Widerruf der Einwilligung wird die Rechtmäßigkeit, der aufgrund der Einwilligung bis zum Widerruf erfolgten Verarbeitung, nicht berührt.

Diese Rechte machen Sie durch eine formlose Mitteilung an die Verantwortliche oder unseren oben genannten Datenschutzbeauftragten geltend. Haben Sie das Recht auf Berichtigung, Löschung oder Einschränkung der Verarbeitung gegenüber uns geltend gemacht, sind wir verpflichtet, allen Empfängern, denen wir die Sie betreffenden personenbezogenen Daten offengelegt haben, diese Berichtigung oder Löschung der Daten oder Einschränkung der Verarbeitung mitzuteilen, es sei denn, dies erweist sich als unmöglich oder ist mit einem unverhältnismäßigen Aufwand verbunden. Auf Verlangen informieren wir Sie über diese Empfänger.

Schließlich steht Ihnen unbeschadet eines anderweitigen verwaltungsrechtlichen oder gerichtlichen Rechtsbehelfs das Recht auf Beschwerde bei einer Aufsichtsbehörde, insbesondere in dem Mitgliedstaat ihres Aufenthaltsorts, ihres Arbeitsplatzes oder des Orts des mutmaßlichen Verstoßes, zu, wenn Sie der Ansicht sind, dass die Verarbeitung der Sie betreffenden personenbezogenen Daten gegen die DSGVO verstößt.

Externe Meldestelle des Bundes

Alternativ können Sie einen Verstoß nach dem Hinweisgeberschutzgesetz auch bei der externen Meldestelle des Bundes (Bundesamt für Justiz) melden: https://www.bundesjustizamt.de/DE/MeldestelledesBundes/MeldestelledesBundes_node.html

 

Privacy statement for the reporting office in accordance with the German Whistleblower Protection Act (HinSchG)

DISCO HI-TEC EUROPE GmbH takes the protection of personal data very seriously. This data protection declaration explains what personal data we collect from you when you use the reporting service and how we use it. We ensure compliance with the applicable data protection regulations through appropriate technical and organizational measures.

Responsible department and data protection officer

Responsible for the processing of personal data is

intersoft consulting services AG

- Team Datenschutz -

Beim Strohhause 17

20097 Hamburg

Deutschland

The company's data protection officer can be contacted at DSB-DISCO_HT-TECH@intersoft-consulting.de.

The technical implementation of the reporting office is carried out by the IT and legal departments of DISCO HI-TEC EUROPE GmbH.

Personal Data

In principle, it is possible to use the reporting service - as far as legally permissible - without providing personal data. However, you can voluntarily provide personal data as part of the whistleblowing process, in particular information about your identity, first and last name, country of residence, telephone number or e-mail address.

In principle, we do not request and process any special categories of personal data within the meaning of Art. 9 of the GDPR, e.g. information on racial and/or ethnic origin, religious and/or philosophical beliefs, trade union membership or sexual orientation. However, such special categories of personal data can be voluntarily disclosed by yourself.

The information you provide may also contain personal data of third parties to which you refer in your information. Data subjects are given the opportunity to comment on the information. In this case, we will inform the persons concerned about the notification. Your confidentiality is also protected in this case, as no information about your identity will be provided to the person concerned - as far as legally possible - and your report will be used in such a way that your anonymity is not jeopardized.

Purposes and legal grounds for processing

The reporting office enables you to contact us and report information on compliance and legal violations in accordance with the German Whistleblower Protection Act.

We process your personal data in order to check the report made by you via the reporting service and to investigate the suspected compliance and legal violations. In doing so, we may have further questions for you. We only use communication via the reporting service for this purpose. The confidentiality of the information you provide is our top priority.

The corresponding processing of your personal data takes place voluntarily on the basis of your consent given when reporting via the whistleblower system (Art. 6 para. 1 lit. a European General Data Protection Regulation, GDPR).

Furthermore, we process your personal data insofar as this is necessary to fulfill legal obligations. This includes, in particular, reports of matters relevant under criminal, competition and labor law. The processing of special categories of personal data by the reporting office is permitted if this is necessary to fulfill the tasks. (Art. 6 para. 1 lit. c GDPR in conjunction with Section 10 HinSchG).

Finally, your personal data will be processed if it is necessary to safeguard the legitimate interests of the company or a third party (Art. 6 para. 1 lit. f GDPR). We have a legitimate interest in the processing of personal data for the prevention and detection of infringements within the company, to check the legitimacy of internal processes and to safeguard the integrity of the company.

We do not intend to use your personal data for purposes other than those listed above. Otherwise, we will seek your consent in advance.

Technical implementation and security of your data

The reporting service includes an option for anonymous communication via a dedicated e-mail address and telephone number to which only the person in charge of the reporting service has access.

We maintain appropriate technical measures to ensure data protection and confidentiality. The data you provide will be stored on a designated secure drive by the person in charge of the registration service.

Transfer of personal data

The company operates internationally and has locations in various countries within and outside the European Union. The stored data can only be viewed by specifically authorised persons within the company. Insofar as this is necessary to fulfil the aforementioned purpose, specifically authorised persons from our subsidiaries may also be entitled to view the data. This is particularly the case if the investigation of their report is carried out in the country concerned. All persons authorised to inspect data are expressly obliged to maintain confidentiality.

In order to fulfil the above-mentioned purpose, it may also be necessary for us to transfer your personal data to external bodies such as law firms, criminal or competition authorities, within or outside the European Union.

If we pass on your personal data within the Group or externally, a standardised level of data protection is ensured by means of internal data protection regulations and/or corresponding contractual agreements. In all cases, the responsibility for data processing remains with the company.

Duration of storage

In order to fulfil the obligations and tasks set out in the section " Purposes and legal grounds for processing", personal data is stored for a period of three years after the end of the procedure in accordance with the provisions of Section 11 (5) HinSchG. The documentation may be stored for longer in order to fulfil the requirements of the HinSchG or other legal provisions, as long as this is necessary and proportionate.

Your rights

If you have provided personal data, you have the right to access (Art. 15 GDPR), correction (Art. 16 GDPR) and deletion (Art. 17 GDPR) of your personal data at any time. You can also restrict the processing (Art. 18 GDPR) or request its transfer to another responsible party.

Furthermore, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation (Art. 21 GDPR).

You have the right to withdraw your declaration of consent at any time (Art. 7 para. 3 GDPR). The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You can assert these rights by sending an informal notification to the person responsible or our data protection officer named above. If you have asserted the right to correct, delete or restrict processing against us, we are obliged to notify all recipients to whom we have disclosed the personal data concerning you of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. We will inform you about these recipients on request.

Finally, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

External reporting service of the German federal government

Alternatively, you can also report an infringement under the Whistleblower Protection Act to the German Federal Government's external reporting office (German Federal Office of Justice): https://www.bundesjustizamt.de/DE/MeldestelledesBundes/MeldestelledesBundes_node.html