Below, we provide information on the collection of personal data when you use our website. Personal data refers to any data that can be linked to you personally, e.g. your name, address, email address and user behaviour. We have implemented comprehensive technical and organisational security measures to protect your data against accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adapted to technological progress.

1. Data controller
The controller within the meaning of Article 4(7) of the EU General Data Protection Regulation (GDPR) is
DIBAG Industriebau AG
Lilienthalallee 25
80939 Munich
Fon +49 (0)89 324 700
E-Mail: info@dibag.de

2. How to contact the Data Protection Officer
You can contact our Data Protection Officer at datenschutz@dibag.de or our postal address, marked ‘for the attention of the Data Protection Officer’.

3. Your rights
You have the following rights in relation to the personal data we hold about you:

3.1 General rights
You have the right to access, rectify, erase, restrict the processing of, object to the processing of, and to data portability. Where processing is based on your consent, you have the right to withdraw that consent with future effect.

3.2 Rights relating to data processing on the basis of legitimate interest
In accordance with Article 21(1) of the GDPR, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) GDPR (data processing in the public interest) or Article 6(1)(f) GDPR (data processing to safeguard a legitimate interest); this also applies to profiling based on these provisions. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

3.3 Rights regarding direct marketing
Where we process your personal data for the purposes of direct marketing, you have the right, in accordance with Article 21(2) of the GDPR, to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.
If you object to the processing for the purposes of direct marketing, we will no longer process your personal data for these purposes.

3.4 Right to lodge a complaint with a supervisory authority
You also have the right to lodge a complaint with a competent data protection supervisory authority regarding our processing of your personal data.

4. Collection of personal data when visiting our website

When you use the website purely for information purposes – i.e. if you do not register or otherwise provide us with information – we only collect the personal data that your browser transmits to our server. When you view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security. The legal basis for this is Article 6(1)(f) of the GDPR:

– IP address, date and time of the request, time zone difference from Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request originates, browser, operating system and its interface, language and version of the browser software.

We cannot use this data to identify individual users. We merely evaluate the information statistically and use it exclusively to improve the appeal, content and functionality of our website.

5. Contact us by email or via the contact form

When you contact us by email or via a contact form, we will store the data you provide (your email address, and, where applicable, your name and telephone number) in order to answer your enquiries. The provision of this information is expressly on a voluntary basis and with your consent, Article 6(1)(a) GDPR. Insofar as this concerns details of communication channels (e.g. email address, telephone number), you also consent to us contacting you via this communication channel, if necessary, to respond to your enquiry. You may, of course, withdraw this consent at any time with future effect.

We will delete the data collected in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply.

6. Applications

You can apply to our company electronically, in particular via email or online forms. We will, of course, use your details solely for the purpose of processing your application and will not pass them on to third parties. Please note that emails sent in unencrypted form are not transmitted in a secure manner.

If you have applied for a specific position and it has already been filled, or if we consider you equally or even more suitable for another position, we would like to forward your application within the company. Please let us know if you do not consent to your application being forwarded.

Your personal data will be deleted immediately upon completion of the application process, or after a maximum of 6 months, unless you have expressly given us your consent for your data to be stored for a longer period or a contract has been concluded. The legal basis is Article 6(1)(a), (b) and (f) of the GDPR and Section 26 of the BDSG.

7. Data transmission

We do not, as a matter of principle, disclose your data to third parties, unless we are legally obliged to do so, or the disclosure of data is necessary for the performance of the contractual relationship, or you have previously given your express consent to the disclosure of your data.

Where our service providers may come into contact with your personal data, we ensure, within the framework of data processing on our behalf in accordance with Article 28 of the GDPR, that they comply with the provisions of data protection laws in the same manner. Please also note the respective privacy policies of the providers. The respective service provider is responsible for the content of third-party services, although we will, within reasonable limits, check the services for compliance with legal requirements.

8. Data security

We have implemented comprehensive technical and organisational security measures to protect your data against accidental or deliberate tampering, loss, destruction or access by unauthorised persons. Our security procedures are reviewed regularly and updated in line with technological advances.

As of May 2018