Data protection

We specifically process the following personal data:

Every time a user accesses our website and every time a file is downloaded, data regarding this process is temporarily stored in a log file. The stored data is analyzed anonymously and will only be used for internal statistical purposes so that we can continually improve the web content we offer. No person-related use takes place in this respect. In particular, a data set containing the following information is stored upon each user access:

• the IP address used
• the operating system used
• the browser used
• the time of access
• the pages you visit on our site
• the website you last visited (if transmitted)
• the volume of data transmitted

We have only integrated Google fonts locally on our website, i.e. no data is transferred to Google servers through their use.

Our web site uses Matomo (formerly Piwik) - open-source software for the statistical evaluation of user visits. Cookies are used for this, which are text files stored on your PC. Usage information generated by the cookies is sent to our server and stored for user analysis purposes, helping us to optimize the web site. This procedure immediately renders your IP address anonymous, ensuring that you remain an anonymous user as far as we are concerned. The server on which the statistical data is stored belongs to a German provider and is also physically located in Germany.

You can prevent Matomo from collecting your data at any time by adjusting your current selection under "Data protection settings". Doing so places an opt-out cookie that prevents your data from being collected when you visit our website in future. Please note that web analysis will only be prevented as long as the opt-out cookie is stored in your browser; if you delete the cookie, web analysis will not be prevented in future.

Opt-out - Disable Matomo Web Analytics: Adjust privacy settings (via cookie settings)

We have integrated YouTube videos on our website that are stored at www.youtube.com and can be viewed directly from our website.

They are all integrated in “privacy-enhanced mode”, which means that no data about you as a user is transmitted to YouTube, if you do not watch these videos. Data is only transmitted to the YouTube server when you play the videos. If you are logged into your YouTube account at the same time, this information is attributed to your YouTube user account. You can prevent this by logging out of your YouTube user account before visiting our website.

YouTube is operated by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc., based at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can find more information about how YouTube (Google) handles user data at: www.google.de/intl/de/policies/privacy.

This website uses the map service Google Maps from Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). In order for the Google map material we use to be integrated and displayed in your web browser, your web browser must connect to a Google server when you access the location map. This server can be located in the USA. For more information, please refer to the Google Maps Terms of Use at https://www.google.com/intl/en_ALL/help/terms_maps/. To further enhance the usefulness of the location map feature, you may be asked to approve your location. Of course, you will not be able to release this without problems.

Links

Our website contains links to other websites in some places. We take all reasonable care to check these links. The company is not responsible for the content of linked pages or for ensuring data privacy on these pages. You can find further information about the social media presences accessible from our site by clicking here.

For security reasons and in order to safeguard the transmission of confidential data you send to us, this website uses SSL encryption. You can recognize an encrypted connection by your browser’s address bar, which changes from “http://” to “https://” and displays a lock symbol.

When SSL encryption is activated, the data you transmit to us cannot be read by third parties.

If we have stored personal-related data of you, we will only process this data for the time period required to serve the purpose it was stored for or for the time period required by law.

If the storage purpose ceases to exist or if the storage period required by law expires, the personal data will be routinely blocked or deleted in accordance with legal requirements.

Logfiles are deleted according to provider specifications:

• The access logs of the Web servers capture, which page views took place at which time. They contain the following data: IP, directory protection user, date, time, pages viewed, protocols, status code, data volume, referer, user agent, host name viewed.
• The IP addresses are stored anonymously. The last three digits are removed, i.e. 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymized. The anonymous IP addresses are kept for 60 days. Information about the directory protection user used is anonymized after one day.  
• Error logs, which log incorrect page views, are deleted after seven days. Those include, in addition to error messages, the IP address accessing the page and, depending on the error, the website accessed. 
• Access via FTP is logged with anonymous information on user name and IP address and stored for 60 days. 
• The mail logs for sending e-mails from the web environment are anonymized after one day and then kept for 60 days. During anonymization, all data concerning the sender/recipient etc. is removed. Only the data at the time of sending and the information on how the e-mail was processed (queue ID or not sent) are retained.
• Mail logs for sending via our mail server are deleted after four weeks. The longer retention period is necessary to ensure the functionality of the mail services and to combat spam.
• It is not possible to individually define the storage period.

A storage going beyond this is exceptionally possible. In this case, however, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.

Personal data will not be disclosed unless there is a specific legal requirement to do so.

Data is only transferred to countries outside of the EU or the EEA (so-called third countries) insofar as this is stated in the present data privacy statement, is necessary to perform contracts, or is legally required, or in the case you have given us your consent to do so.

All data subjects have a right of access in accordance with Art. 15 GDPR. If we process your personal data, you have the right of rectification in accordance with Art. 16 GDPR, the right to erasure in accordance with Art. 17 GDPR, the right to restrict the processing in accordance with Art. 18 GDPR, the right to object pursuant to Art. 21 GDPR and the right of data portability pursuant to Art. 20 GDPR. Restrictions to the right of access and the right to erasure apply pursuant to Sections 34 and 35 of the German Federal Data Protection Act (BDSG). Furthermore, data subjects have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

If you have given us consent to process your personal data, you can also revoke this consent at any time by the same method you first provided it. You can revoke your consent without completing a form, e.g. by emailing datenschutz.holding@salzgitter-ag.de or by sending a message to the contact address listed above. Revoking your consent does not affect the legality of the processing performed on the basis of your previously issued consent.

Pursuant to Art. 21 para. 1 GDPR, you have the right to object at any time to the processing of your personal data performed on the basis of Art. 6 para. 1 lit. f) GDPR (data processing for the purposes of legitimate interests).

If you do raise an objection, we will no longer process your personal data for the purposes to which you have objected, unless

• we can demonstrate overriding legitimate grounds that outweigh the interests, rights and freedoms of the data subject, or
• the processing serves to assert, exercise or defend legal claims.

In the case that the objection only or also relates to data processing for the purpose of direct marketing, we will no longer process your personal data for this purpose.

You can raise an objection without completing a form, e.g. by emailing datenschutz.holding@salzgitter-ag.de or by sending a message to the contact address listed above.

Personal data processing relating to the use of contact forms is performed on the basis of Art. 6 para. 1 lit. b) GDPR, provided that the purpose of making contact serves to fulfill a contract or perform pre-contractual measures.

If our company is subject to a legal obligation which necessitates the processing of personal data, this processing is based on Art. 6 para. 1 lit. c) GDPR.

If we obtain your consent for personal data processing operations, this consent serves as the legal basis for processing pursuant to Art. 6 para. 1 lit. a) GDPR.

Furthermore, processing operations can be performed on the basis of Art. 6 para. 1 lit. f) GDPR, whereby processing is necessary to pursue a legitimate interest held either by our company or a third party, provided that the data subject’s interests, basic rights, or basic freedoms do not override our interest.

We use server log files, cookies, web fonts, Mapbox, embedded YouTube videos and web analysis tools so that you can use all of our website’s functions to their full extent and in order to structure and optimize our website in accordance with its users’ requirements. If you contact us via our contact form or using the functions in our Career blog, we will use your data for the purpose of interacting with you and for corporate communications.

As a fundamental rule, there is no obligation to provide personal data when visiting our website. Contractual regulations may provide otherwise. If the specified personal data is not provided, in some circumstances, it may not be possible to achieve the individual described purposes.

We do not use fully automated decision-making within the meaning of Art. 22 GDPR.

As the internet continues to develop, it will be necessary to make periodic amendments to the data privacy statement. Reviewing the data privacy statement at regular intervals will give you the opportunity to stay apprised of amendments.