privacy policy

We take the protection of your personal data very seriously. Our efforts to meet the requirements of the European General Data Protection Regulation (GDPR) and the revised Federal Data Protection Act (BDSG) are primarily aimed at respecting your privacy and personal rights.

In general, it is possible to use our website without providing any personal data. However, if a data subject wishes to make use of special services offered by our company via our website, the processing of personal data may become necessary. If the processing of personal data is required and there is no legal basis for such processing, we will generally obtain the consent of the data subject.

We will not disclose your personal information to third parties under any circumstances – neither for payment nor free of charge. Companies affiliated with the seele group and service providers contractually bound to us for data processing on behalf shall not be considered third parties in this context. We do not carry out any automated decision-making or profiling. By submitting your personal data, you accept this privacy policy in its currently valid, GDPR-compliant form.

Information on the collection of personal data

(1) In the following, we provide information on the collection of personal data when using our website. Personal data includes all information that can be related to you as an individual, such as your name, address, email address, user behaviour, and similar data.

(2) The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is:

seele verwaltungs GmbH
A company of the seele group
Gutenbergstr. 6
86368 Gersthofen
Germany
Phone: +49 821 2494 – 0
Fax: +49 821 2494 – 100
info(at)seele.com

(3) Our external Data Protection Officer be contacted under datenschutz(at)seele.com.

(4) When you contact us by email, the data you provide (such as your email address and, where applicable, your name and telephone number) will be stored by us in order to respond to your enquiry. Any personal data transmitted on a voluntary basis by a data subject to the controller will be stored solely for the purpose of processing the enquiry or for contacting the data subject. The data arising in this context will be deleted once it is no longer required for the respective purpose, or its processing will be restricted if statutory retention obligations exist.

(5) If we make use of commissioned service providers for individual functions of our offering or if we intend to use your data for advertising purposes, we will inform you in detail of the respective processes below. In doing so, we will also specify the criteria used for determining the duration of storage.

(6) As the controller, we have implemented numerous technical and organisational measures to ensure the most comprehensive protection possible of personal data processed via this website. Nevertheless, internet-based data transmissions may be subject to security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example, by telephone.

(7) As a responsible company, we do not engage in automated decision-making or profiling.

Collection of personal data when visiting our website

(1) Browser-based data

When using our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we collect only the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary to display the website and to ensure its stability and security (legal basis: Article 6(1)(f) GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Internet service provider of the accessing system
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Respective amount of data transferred
  • Website from which the request originates (referrer)
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

Server log data is stored separately from any personal data voluntarily provided by a data subject and is deleted as follows:

  • Mail server log: retained for 7 days
  • Apache log: storage period can be configured individually by the customer in the console under “Settings > Account Maintenance”
  • Backups: retained in encrypted form for 14 days
  • Spam and Trash (email): deleted after 14 days
  • Web server logs: stored for 1 day

(2) Use of cookies

In addition to the aforementioned data, cookies are stored on your device when using our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you use, and that transmit certain information back to the entity that sets the cookie (in this case, us). Cookies cannot run programs or transmit viruses to your computer. They are used to make our website more user-friendly and effective overall.

a) The following types/functions of cookies are generally distinguished:

  • Transient cookies are automatically deleted when you close your browser. These include session cookies, which store a session ID that enables various requests from your browser to be assigned to the same session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
  • Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete these cookies at any time in your browser’s security settings.
  • Essential cookies are strictly necessary for the operation of the website.
  • Statistics, marketing, or personalisation cookies are used, among other things, for reach measurement or when user interests or behaviour are stored in a user profile – a process also referred to as "tracking." If we use such cookies or tracking services, you will be informed separately in this privacy policy or within the context of consent requests.
  • You can configure your browser settings according to your preferences, for example, to refuse the acceptance of third-party cookies or all cookies. Please note that if you do so, you may not be able to use all functions of this website.
  • We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again on each visit.
  • Flash cookies are not captured by your browser but by your Flash plug-in. Additionally, we use HTML5 storage objects that are stored on your device. These objects store the necessary data independently of the browser you use and do not have an automatic expiration date. If you do not wish Flash cookies to be processed, you must install a corresponding add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using the private browsing mode in your browser. We also recommend that you manually delete your cookies and browser history on a regular basis.

b) Data processed via cookies are generally processed on the basis of our legitimate interests (Article 6(1)(f) GDPR) or, where necessary, in order to fulfil our contractual obligations (Article 6(1)(b) GDPR). If we request your consent, the legal basis for the data processing is the consent provided (Article 6(1)(a) GDPR).

c) You may withdraw your consent at any time or object to the processing of your data using cookie technologies ("opt-out"). You can express your objection via your browser settings. An objection to the use of cookies for online marketing purposes can also be declared via various services, particularly in the case of tracking, e.g. through the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/ or generally at http://optout.aboutads.info.

(3) Data collection via email

Our website contains information that enables rapid electronic contact with our company and facilitates direct communication with us. If a data subject contacts the controller via email, the personal data voluntarily transmitted by the data subject is automatically stored. Such personal data transmitted on a voluntary basis is stored for the purpose of processing the enquiry or contacting the data subject. This data is not shared with third parties. To submit an enquiry, your name, email address and the subject line are sufficient. The data will be deleted once the request has been processed or the purpose no longer applies, provided there are no statutory retention obligations. The legal basis for this is Article 6(1)(f) GDPR, with our legitimate interest arising from the purposes outlined above.

Online applications

In order to process your application, it is necessary to collect, store and use your personal data. Processing may also take place electronically, particularly when an applicant submits relevant application documents electronically – for example, by email or via a contact form provided on our website. Your personal data will be used exclusively for the purpose of managing and processing your application. It will only be shared with those departments and individuals involved in the specific recruitment process and will not be passed on to other companies or third parties.

Applicant pool
If you have consented to being included in our applicant pool, we will use your data in accordance with your consent in order to contact you at a later time and continue the application process should you be considered for another position. Within the applicant pool, your data may be shared with the following affiliated companies within the corporate group: seele companies worldwide.

Retention period for applications
We store your application data for the duration of the recruitment process. Upon completion of the recruitment process and in the event that your application is unsuccessful, we will delete your application data in accordance with applicable local legal provisions. This does not apply where statutory retention obligations prevent deletion. A legitimate interest within the meaning of such provisions may also exist, for example, where data must be retained as evidence in legal proceedings under the German General Equal Treatment Act (AGG).

If you are included in our applicant pool, we will retain your data until you withdraw your consent. Should your application be successful, we will transfer your application data to your personnel file, in compliance with the applicable legal requirements. The legal basis for the processing of your application data is Article 6(1)(b) GDPR and, where consent has been given, Article 6(1)(a) GDPR (in Germany, additionally Section 26 of the Federal Data Protection Act – BDSG).

Consent to the use of WhatsApp
If you choose to send your application via WhatsApp and wish to submit your application documents using this messaging service, you consent to communication via WhatsApp and the use of this service in accordance with Article 6(1)(a) GDPR. Please note that we have no influence over how WhatsApp handles and processes user data. Details regarding data processing by WhatsApp can be found in WhatsApp’s privacy policy here.

You may withdraw the consent you have expressly granted at any time with future effect by contacting: bewerbung(at)seele.com. Upon receipt of your withdrawal, your data will be deleted without undue delay. The lawfulness of the processing carried out on the basis of your consent until its withdrawal remains unaffected.

 

Visitor statistics with Matomo

In order to continuously improve our website and evaluate it statistically, we use the web analytics platform Matomo. Matomo allows us to monitor website traffic and analyse user behaviour in order to identify potential issues, such as broken links, unsuccessful search engine indexing, or user experience bottlenecks. It also helps us determine which content is most popular. This enables us to enhance the overall usability of our online offering. Once the data has been processed (e.g. the number of visitors reaching a non-existent page), Matomo generates reports that allow us to take appropriate action, such as adjusting the layout of specific pages or publishing new content.

When using Matomo, the following personal data is processed:

  • Anonymised IP address (truncated by 2 bytes)
  • Date and time of page access
  • Title of the viewed page (Page Title)
  • URL of the viewed page (Page URL)
  • Referrer (URL of the page visited prior to the current page)
  • Time in the local time zone
  • Files clicked and downloaded
  • Clicked external links
  • Page generation time
  • User location: country, region, city, approximate latitude and longitude
  • Primary browser language
  • Browser user agent
  • Device type and screen resolution
  • Custom dimensions

The legal basis for processing personal data using Matomo is Article 6(1)(f) GDPR. Our legitimate interests are derived from the aforementioned purposes of data processing with Matomo. We operate Matomo on our own servers. The personal data collected through Matomo is not shared with third parties. Personal data collected via Matomo is deleted after 180 days. Matomo does not engage in profiling and respects your browser’s “Do Not Track” setting. If you prefer that we do not process any personal data via Matomo during your visit to our website, you may opt out at any time. This will have no impact on your ability to use our website.

Links to external platforms

Links to social media platforms
Our website offers the option to access our company pages on the social media platforms Facebook, X, Instagram, Google+, LinkedIn, and Xing. To protect your personal data, we use simple links rather than embedded plugins. This means that these platforms are represented by graphics containing links to the respective websites. Only when you click on such a graphic will you be redirected to the respective provider’s service. Only then will any data be transmitted to the relevant platform. If you do not click on the graphic, there will be no exchange of data between you and the aforementioned social networks. For further information on the purpose and scope of data collection and its processing by the providers of Instagram, X, WhatsApp, Facebook, and LinkedIn, please refer to the respective providers’ privacy policies. Third-party software used by these platforms that involves the processing of personal data in non-EU countries has submitted to the EU–US Privacy Shield framework: https://www.privacyshield.gov/EU-US-Framework.

Embedding of YouTube videos
As a rule, videos are embedded directly on our website. In exceptional cases, we may provide links to http://www.YouTube.com to share engaging content with you. Further details on the purpose and scope of data collection and its processing by YouTube can be found in their privacy policy. There you will also find additional information about your rights and privacy protection settings: https://www.google.de/intl/de/policies/privacy.
Google also processes personal data in the United States and has submitted to the EU–US Privacy Shield framework: www.privacyshield.gov/EU-US-Framework.

Rights of data subjects

With regard to your personal data, you have the following rights vis-à-vis us as the data controller:

Right to information
Every data subject has the right, granted by the GDPR, to obtain from the controller, at any time and free of charge, information about the personal data stored concerning them, as well as a copy of such information. In addition, the data subject has the right to the following information:

  • the purposes of the processing
  • the categories of personal data concerned
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of the right to request rectification or erasure of personal data, or restriction of processing, or to object to such processing
  • the right to lodge a complaint with a supervisory authority
  • where the personal data are not collected from the data subject, any available information as to their source
  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject

The data subject also has the right to be informed whether personal data have been transferred to a third country or an international organisation. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer. To exercise this right of access, the data subject may contact the Data Protection Officer at any time.

Right to rectification
The data subject has the right to request from the controller without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject also has the right to have incomplete personal data completed, including by means of providing a supplementary statement. To exercise this right, the data subject may contact a member of staff at any time.

Right to erasure / Right to be forgotten
The data subject has the right to request from the controller the erasure of personal data concerning them without undue delay, and the controller is obliged to erase personal data without undue delay where one of the following grounds applies:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
  • the data subject withdraws consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a), and where there is no other legal ground for the processing
  • the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2)
  • the personal data have been unlawfully processed
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject
  • the personal data have been collected in relation to the offer of information society services referred to in Article 8(1)

To exercise this right, the data subject may contact our Data Protection Officer at any time. Where we have made personal data public and are obliged pursuant to Article 17(1) GDPR to erase the personal data, we shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers that are processing the personal data that the data subject has requested the erasure of any links to, or copies or replications of, those personal data.

Right to restriction of processing
The data subject has the right to request the restriction of processing where one of the following conditions applies:

  • the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data
  • the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead
  • the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims
  • the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject

To exercise this right, the data subject may contact a member of staff at any time.

Right to object to processing
Every data subject has the right, granted by the GDPR, to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.

  • We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.
  • Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to the processing of personal data concerning them for such marketing. This includes profiling to the extent that it is related to such direct marketing. If the data subject objects to processing for direct marketing purposes, we shall no longer process the personal data for such purposes.
  • Additionally, the data subject has the right, on grounds relating to their particular situation, to object to processing of personal data concerning them for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
  • To exercise this right of objection, the data subject may contact any member of staff directly. In addition, the data subject is free to exercise their right to object in the context of the use of information society services – notwithstanding Directive 2002/58/EC – by automated means using technical specifications.

Right to data portability
The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

  • the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a), or on a contract pursuant to Article 6(1)(b), and
  • the processing is carried out by automated means.

In exercising the right to data portability pursuant to Article 20(1) GDPR, the data subject also has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that the rights and freedoms of others are not adversely affected. To exercise this right, the data subject may contact a member of staff at any time.

Right to withdraw consent
You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Please address your withdrawal to: info.de(at)seele.com

Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority at any time – for example, with the Bavarian Data Protection Authority responsible for us: https://www.lda.bayern.de/en/complaint.html