Privacy Policy of the Infraserv Höchst Group
Our privacy policy has been translated into English for the convenience of our English-speaking visitors and users of our websites and apps. In cases of doubt as to the appropriate interpretation, only the German text will control.
Contents
C. More information regarding the use of our websites or mobile apps for informational purposes only
D. General remarks on additional functions and possible uses
E. Special remarks on the right to object or withdraw
II. Special section – Special processing activities of individual Infraserv Höchst Group companies
B. Special forms of use of our websites
G. Online advertising and user behavior analysis
H. Processing of job applications
J. Using an Infraserv GmbH & Co. Höchst KG (“Infraserv”) hotspot
I. I. General section – General, websites and mobile apps of the individual Infraserv Höchst Group companies
A. General information
(1) This notice describes our privacy policy regarding the personal data that we collect in general as well as when you use the individual Group websites or mobile apps. Personal data refers to all the data that can be linked to you personally, including name, mailing address, email addresses, or user behavior.
“We” refers to the companies of the Infraserv Höchst Groups listed at the following link: www.infraserv.com/en/unternehmen/infraserv_hoechst_gruppe . It does not include the companies in the Provadis Group: https://www.provadis.de/fuer-unternehmen/kontaktinformationen/ueber-die-provadis-gruppe/ and KFT Chemieservice GmbH: https://www.kft.de . They have a separate privacy policy.
(2) No use of this website by children:
This website is not intended for children under 16 years of age. If you are younger than 16, you are not permitted to use this website or register on it.
(3) The controller as defined in Article 4(7) of the EU General Data Protection Regulation (GDPR) is as follows:
For processing carried out by Infraserv GmbH & Co. Höchst KG
Legal information: www.infraserv.com/impressum
For processing carried out by Infraserv Logistics GmbH
Legal information: www.infraserv-logistics.com/impressum
For processing carried out by Infrasite Griesheim GmbH
Legal information: www.infrasite-griesheim.com/impressum
For processing carried out by Infraserv Netze GmbH
Legal information: www.infraserv-netze.com/impressum.html
You can reach the Data Protection Officer of the above companies at datenschutz (at) infraserv.com or the following mailing address::
Infraserv GmbH & Co. Höchst KG
Data Protection Officer
Industriepark Höchst, Building C 770
65926 Frankfurt am Main
Germany
For processing carried out by Infraserv Höchst Prozesstechnik GmbH
Infraserv Höchst Prozesstechnik GmbH
Industriepark Höchst
Building G 810
65926 Frankfurt am Main
Germany
Managing Director: Frank Unger
Phone: +49 69 305-27390
frank.unger (at) infraserv.com
(4) When you contact us e.g. by email or through a contact form, we process the data you provide (for example, your email address, name and phone number if provided) in order to respond to your questions. We will delete any data that we may collect in this process once we are no longer required to store it. We are generally required by tax and accounting laws to retain your address, payment and order data for ten years. If there is a legal basis for further processing (for example, another legal retention period), we will restrict processing as much as possible.
(5) If we use external service providers for individual functions of our website or wish to use your data for advertising purposes, we will provide you with a detailed explanation of the underlying processes. The explanation will include the criteria that determine how long your data is stored.
B. Your rights under the GDPR
(1) You have the following rights with respect to your personal data:
- Right of access
- Right to rectification or erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
- Right to file a complaint with a data protection authority
(2) The data protection authority responsible for us is “Der Hessische Datenschutzbeauftragte” (the Hesse Data Protection Officer):
Der Hessische Datenschutzbeauftragte
Postfach 31 63
65021 Wiesbaden
Phone: 0611 1408-0
Fax: 0611 1408-611
C. More information regarding the use of our websites or mobile apps for informational purposes only
(1) When you use our websites or mobile apps solely for informational purposes – that is, if you don’t register or otherwise provide us with information – we will only collect the personal data that your browser transfers to our server. The following data is technically necessary for us to display our websites or mobile apps to you and to ensure their stability and security (processing is lawful on the basis of GDPR Article 6(1) point (f)).
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Data volume transferred
- Referring website
- Browser
- Operating system and its interface
- Language and version of the browser software
(2) Cookies are also stored on your computer when you use our websites or mobile apps. Cookies are small files with configuration information that are associated with your browser, stored on your hard drive and used to provide certain information to the entity (i.e., us) who placed the cookie on your computer. Cookies cannot execute programs or infect your computer with viruses. Their purpose is make our internet presence more effective and user-friendly overall.
(3) Use of cookies:
a) The websites and mobile apps use different types of cookies:
“Transient” cookies are deleted automatically when you close the browser. One type of transient cookie is a “session cookie”. It stores a “session ID” that associates various requests from your browser with one particular session. Session cookies allow us to recognize your computer if you return to our website. They are deleted when you log out or close your browser.
“Persistent” cookies, by contrast, are automatically deleted after a specific period that may vary from one cookie to the next. You can delete persistent cookies at any time by adjusting your browser’s security settings.
b) You can configure your browser settings based on your preferences, which may include refusing to accept all cookies or only third-party cookies. Please note, however, that you may not be able to use all the functions of our websites if you refuse to accept cookies.
c) We use cookies to identify you on subsequent visits if you have an account with us. If we did not use cookies, you would have to log in separately for each visit.
d) Flash cookies are managed by your Flash plugin, not by your browser. These objects store the data they need across browsers and do not have an automatic expiration date. If you do not wish Flash cookies to be processed, you will have to install a separate add-on. We also recommend manually deleting your cookies and browsing history on a regular basis.
D. General remarks on additional functions and possible uses
(1) In addition to using our websites or mobile apps solely for informational purposes, we also offer various services that you can use if you are interested. You will generally have to provide additional personal data to use these services. We use the data for service provision and handle the data in conformity with the data processing policies described above. When you contact us by email, letter or any other medium, we will process the personal data that you provide in order to answer your questions. We will delete the data once further processing is no longer necessary except where a statutory retention obligation applies.
(2) We sometimes use external service providers to process your data. These service providers have been carefully selected and hired by us. They are required to follow our instructions and are regularly monitored.
(3) We may also share your personal data with third parties if we offer sales campaigns, sweepstakes, contracts or similar services in conjunction with our partners. You will receive more information when you provide your personal data. More information is also provided below in the description of available services.
(4) The description of available services will also indicate the consequences of our using a service provider or partner based in a country outside the European Economic Area (EEA).
E. Special remarks on the right to object or withdraw
(1) You can withdraw your consent to the processing of your data at any time. A withdrawal will affect the lawfulness of the processing of your personal data from the moment you communicate it to us.
(2) You can object to our processing of your personal data wherever the processing is based on a balancing of interests. This includes processing that is not necessary for the performance of a contract to which you are a party, which we present below in the function descriptions. When you submit your objection, please include the reasons why we should not process your personal data as we have done. If your objection is warranted, we will review the facts and either stop or modify our data processing or provide the compelling legitimate grounds that allow us to continue processing your personal data.
(3) You can also object to your personal data being processed for direct marketing / advertising purposes at any time. You can communicate your objection to us at the following address:
a) Regarding direct marketing/advertising by Infraserv GmbH & Co. Höchst KG:
by email:
- marketing (at) infraserv.com
- kundenservice (at) infraserv.com
- messenundveranstaltungen (at) infraserv.com
- kommunikation (at) infraserv.com
- perspectives (at) infraserv.com
or by sending your objection to the above address.
b) For direct marketing/advertising by Infraserv Logistics GmbH:
by email: info.logistics (at) infraserv-logistics.com
or by sending your objection to the above address.
c) For direct marketing/advertising by Infrasite Griesheim GmbH:
by email: info (at) infrasite-griesheim.com
or by sending your objection to the above address.
g) For advertising by Infraserv Netze GmbH:
by email: thomas.kaiser (at) infraserv.com
or by sending your objection to the above address.
h) For advertising by durch Infraserv Höchst Prozesstechnik GmbH:
by email: frank.unger (at) infraserv.com
or by sending your objection to the above address.
II. Special section – Special processing activities of Infraserv Höchst Group companies
A. Use of our mobile apps
(1) Note on mobile apps
In addition to our website, we also provide mobile apps that you can download to your mobile device. We use two different types of apps:
- Apps that we are responsible for (responsible for programming or content management)
- Apps from third-party providers that we are not responsible for
(2) Collection of personal data when using our mobile apps
a) When you download the mobile app, the app store receives certain necessary information, including your user name, email address, customer number for your account, time of the download, payment information and the individual device ID. We have no control over or responsibility for this data collection. We process the data only to the extent required for the mobile app to download to your mobile device.
b) We may also in certain cases require additional information such as your device ID, International Mobile Equipment Identity (IMEI), International Mobile Subscriber Identity (IMSI), Mobile Station International Subscriber Directory Number (MSISDN), MAC address for WiFi use, name of your mobile device or email address.
c) Use of your address book, calendar, photos and memories
(i) When you first use mobile apps that we are responsible for, a pop-up window will appear in which we ask for permission to use your address book or calendar, for example. We will not use this data if you do not grant permission. You may not be able to use our app’s full functionality if you do not give us your permission. You can grant or withdraw permission in the app’s settings or in your operating system at a later time.
(ii) If you grant us access to this data, the mobile app will only access your data and transfer it to our server to the extent required to provide the associated function. We will treat your data confidentially and delete it if you withdraw your permission to use it or if the data is no longer needed to provide the services and is not covered by any legal retention obligations. The legal basis for processing is GDPR Article 6(1) point (f).
d) Collection of your location data
(i) We use location-based services to provide special services based on your location. You can use these functions only after having given us your permission in a pop-up window to collect your location data via GPS and your anonymized IP address for the purpose of providing services. You can grant or withdraw permission in the app’s settings or in your operating system at any time in the future. Your location will only be transferred to us if you use functions in the app that we can only provide if we know your location.
(ii) Your location data will not be used to generate a location history outside of your current location.
B. Special forms of use of our websites
(1) Use of the commenting function on the intranet
On the intranet, authorized users can comment publicly on various articles we publish on topics relating to our activities. The comments are published with the article and show the user’s indicated user name. We recommend that users use their real name but they can also use a pseudonym or no user name at all. Comments cannot be traced back to the IP address from which they were posted. The content of comments is solely the responsibility of the user who posted the comment. We do not check comments before they are published. We reserve the right to delete comments if we or others object to them as being unlawful.
(2) Use of our function for requesting an offer
a) If you use our website to request offers (for example, for services or seminars), you will have to provide your personal data so that we can respond to your request and send you the information. The information required to respond to the request is highlighted; the other information is voluntary. We process the data you provide in order to respond to your request and to perform any contract that may have been formed. In this case, the legal basis for processing is GDPR Article 6(1) point (b).
b) When a contract has been formed, we are generally required by tax and accounting laws to retain your address, payment and order data for ten years.
(3) Use of our supplier registration system
As a supplier, you can enter your contact details so that we can store your data for our future purchases.
(4) Use of our portals
a) Our portals can be used in various ways by authorized users such as employees, business customers, partner companies and other interested parties. This includes online registrations for visitors, applications for photo permits or property removal permits, or services relating to partner company management.
b) If you want to use our portals (for example, our Industriepark Höchst portal at www.industriepark-hoechst.com ), you will generally have to register by providing your email address, user name and a password of your choosing. We do not require you to provide your real name; you may use a pseudonym, but we do not recommend it. If you are employed by an Infraserv Höchst Group company, including Infrasite Monheim GmbH and Infraserv Höchst Prozesstechnik GmbH, you will need your “FRA Number” and your Windows login password in order to register. We use the “double opt-in” method for registration, which means that your registration will not be completed until you have confirmed it by clicking the confirmation link in a special confirmation email sent to you. If we do not receive your confirmation within 48 hours, your registration will be automatically deleted from our database. The above data is mandatory; you can provide all the other information voluntarily while using our portal.
c) If you use our portals, we will store your data until you permanently delete your account. The legal basis is GDPR Article 6(1) point (f).
d) When you use the portals, your contact details may become accessible to other portal users through a search tool. This makes it possible, for example, to find out the phone numbers of other portal users if they have shared them. Non-registered members cannot receive any information about you. All registered members can see your user name regardless of whether you have shared it.
(5) Use of our forums
a) Authorized users can read our forums without having to register. If you want to actively participate in the forum, certain forums (e.g., the “bulletin board” on the intranet) require you to register by providing your email address as well as a password and user name of your own choosing. We do not require you to provide your real name; you may use a pseudonym if you wish. Except for the “bulletin board” forum on the intranet, we use the “double opt-in” method for registration, which means that your registration will not be completed until you have confirmed it by clicking the confirmation link in a special confirmation email sent to you. If we do not receive your confirmation within 48 hours, your registration will be automatically deleted from our database.
b) To gain access to the forums, users must provide a user name, password and email address. If you sign up for a forum account, we will store your registration data and all your forum activities – public posts, wall posts, friendships, private messages etc. – for as long as you remain registered so that we can run the forum. The legal basis is GDPR Article 6(1) point (f).
c) Neither the administrator of these forums nor the participating moderators are responsible for the users’ activities. Please note that all the personal data you provide in forums becomes public data. You should exercise caution when deciding to publish personal data. We may remove or modify any data published in these forums if we or third parties believe that the data is unlawful.
d) If you delete your account, your public statements – especially forum posts – will remain visible for all viewers. Your account, however, can no longer be accessed and will be marked as “Guest” in the forum. All other data will be deleted.
(6) Use of our call-back function
The call-back function gives users an opportunity to request a return call.
The data you provide will be used for the sole purpose of making the call and will be stored for 3 months at most unless the user expresses an interest in information or services. In the latter case, we will store the data for processing. The call will be made by whichever Infraserv Höchst Group company can provide the desired information on that particular issue.
(7) Use of the option to order information and advertising materials
If, on our website, we offer to send you information materials (such as leaflets) in one single shipment, we will use your data solely for this purpose. The data you provide will be stored for 3 months at most unless the user expresses an interest in further information or services. In the latter case, we will store the data for processing.
(8) Use of the option to register for events, training courses or seminars
a) Signing up for events, seminars or training courses:
If you want to book events, training courses or seminars through our website, you will need to provide your personal data so that we can process your booking and enter into a contract with you. Information required for the performance of a contract is highlighted; the other information is voluntary. We process the data you provide in order to process your booking. Processing may include transferring your payment data to our primary bank. In this case, the legal basis for processing is GDPR Article 6(1) point (b).
We can also process the data you provide to notify you regularly or intermittently of other attractive products in our portfolio or to send you emails containing relevant information.
b) Signing up for individual appointments:
Individual appointments are generally booked on our website using third-party booking tools. The information required to process the booking is specially indicated. All other information is optional. We process the data you provide in order to process your booking. In this case, the legal basis for processing is GDPR Article 6(1) point (b). The maximum storage period is 1 year from the end of the appointment.
The following also applies to individual appointments booked at the Industrial Clinic: When scheduling an appointment, we will only collect data to the extent required to unambiguously link the patient to the appointment date and time and to check the Industrial Clinic's medical database for the patient's file. The file check is conducted manually at the Industrial Clinic by Industrial Clinic staff. There is no IT interface to the Industrial Clinic system. Individual appointments at the Industrial Clinic are stored for 21 days from the end of the appointment.
C. Third-party offers
Our website links to other websites so that you can receive interesting and related information. Our website also uses, or links to, third-party apps that we assume no responsibility for. These websites or mobile apps operated by other companies outside of our website or apps are not under our control and are not covered by this privacy policy. When you access other websites or use mobile apps by clicking the available links, the website or mobile app operator can collect your personal data. Do not transfer personal data until you are sure that the operator’s privacy policy is acceptable to you. We are not responsible, legally or otherwise, for what other companies do (example: The Industriepark Höchst portal www.industriepark-hoechst.com links to the “Pendlerportal” commuter portal of Marktplatz GmbH.). We will immediately remove these links if we learn of any legal violations.
D. Newsletter
(1) You may subscribe to the newsletter that we use to tell you about our latest interesting services. You can find a description of our Group portfolio at www.infraserv.com/portfolio .
(2) We use a double opt-in process for newsletter registration. It consists of sending an email to your stated email address after registration in which we ask you to confirm that you do in fact want to receive the newsletter. If you do not confirm your registration within 48 hours, your information will be placed on a “do not contact” list and automatically erased after one month. We also store your IP addresses and the points in time when you registered and confirmed your subscription. The purpose of this procedure is to verify your registration and identify any potential misuse of your personal data.
(3) Your email address is the only information that you absolutely have to provide in order to get the newsletter. Other, separately highlighted data is optional and will be used to address you personally. Once you provide confirmation, we will store your email address for the purpose of sending you the newsletter. The legal basis is GDPR Article 6(1) point (a).
(4) You can withdraw your consent to receiving a newsletter at any time and unsubscribe from the newsletter. You can withdraw your consent by clicking the link included in every newsletter email, by sending an email to kundenservice (at) infraserv.com or by sending a message to the contacts specified in the “Legal information” section of our website.
(5) Please note that we analyze your user behavior when we send out newsletters. This is done using the tracking functions developed by ClickDimensions and empaction GmbH (please see “Web analytics” for details). Our emails contain “web beacons” (a.k.a. “tracking pixels”), which are one-pixel graphics stored on our website that are used for the user behavior analysis. We associate the collected data and web beacons with your email address and an individual ID to conduct the analyses. The ID is also included in links contained in newsletters. We then use this collected data to create a user profile to tailor the newsletter to your personal interests. In this process, we track when you read our newsletters and what newsletter links you click in order to determine your personal interests. We associate this data with your actions on our website.
You can object to this tracking at any time by clicking the separate link provided in each email or by notifying us through a different communications channel. The information will be stored for as long as your newsletter subscription is active. Once you unsubscribe, we will store the data only statistically and anonymously. This type of tracking is not possible if you have deactivated automatic image loading in your email software. If you do this, the newsletter will not be displayed completely and you may not be able to use its full functionality. If you manually display the pictures, the tracking functions described above will be carried out.
E. Web analytics
(1) Use of Google Analytics
a) Our websites use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”. The information generated by the cookie about your use of the website will generally be transmitted to and stored on a Google server in the United States. On our websites IP anonymization is activated. That means: Google truncates your IP address within the member states of the European Union or within other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. By request of this website’s operator, Google will use this information for the purposes of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage for the website operator.
b) Google will not associate the IP address transmitted by your browser as part of Google Analytics with any other data held by Google.
c) You can refuse to store cookies by changing your browser settings; please note, however, that you may not be able to use the full functionality of this website in this case. You can also prevent the data generated by the cookie with regard to your use of the website (including your IP address) from being collected and processed by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout .
If you do not want to use the browser add-on or are using a browser on a mobile device,
to prevent any future collection by Google Analytics within this website (the opt-out only works in this browser and only for this domain). This places an opt-out cookie on your device. If you delete your cookies in this browser, you will have to click this link again.
d) This website uses Google Analytics with the extension “anonymizeIp()”. This extension ensures that IP addresses are only processed in truncated form and so cannot be linked to a person. The extension therefore prevents you from being identified by any of the data collected on you because it immediately deletes personal data.
e) We use Google Analytics to regularly analyze and improve the use of our website. The analytical statistics allow us to improve our online presence and give you a more engaging user experience. On the rare occasions when personal data is transferred to the United States, Google is EU-US Privacy Shield certified, see https://www.privacyshield.gov/EU-US-Framework . The legal basis for the use of Google Analytics is GDPR Article 6(1) point (f).
f) Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Service: http://www.google.com/analytics/terms/us.html , Overview of Data Privacy:: http://www.google.com/analytics/learn/privacy.html and the Privacy Policy: https://policies.google.com/privacy .
g) This website also uses Google Analytics to analyze cross-device visitor flows that can be based on user ID. You can deactivate the cross-device analysis of your activities in your customer account under “My data” ("Meine Daten") -> “Personal data” ("persönliche Daten").
(2) Use of web analytics tools
Our websites and newsletters use the web tracking services provided by ClickDimensions LLC (ATTN: Chief Operating Officer, 5901 Peachtree Dunwoody Road, NE, Suite B500, Atlanta, GA 30328, United States of America) and by empaction GmbH (Marktstrasse 33-35, 60388 Frankfurt am Main, Germany). These services use cookies, IP addresses and tracking pixels. The analyses give us useful insights into how you use the website. We can use this information to improve our website, make the information it contains more attractive and interesting to you, and supply you with information tailored to your interests.
F. Social media
(1) Use of social media interfaces
We currently use the following social media interfaces: Twitter, Xing, LinkedIn, AddThis. These interfaces are configured to work with a “two-click system”. In a two-click system, your personal data is not automatically transferred to the providers the moment you access our website. You can identify the social media provider by the initial letter or logo shown on the box. The provider is only notified that you have accessed this page on our website when you activate the associated field by clicking it. You have the option to share with other users the URL and the information that you can enter or to “like” individual pages or content. No personal data is transferred when you click “like”.
a) Embedding of YouTube videos
i) Our website contains embedded YouTube videos that are stored on http://www.YouTube.com and can be played without leaving our website. All the videos have been embedded in “privacy-enhanced mode” which means that YouTube will not receive any data about you if you do not play the videos. The data specified in para. 2 is not transferred until you play the videos. We have no control over this transfer of data.
ii) When you play a video, YouTube is notified that you have accessed a website page containing the embedded video. The provider will then also receive the data described in Section 3 of this policy. This happens whether or not you have a YouTube account or are logged into a YouTube account. If you are logged in with Google, your data will be linked to your account. If you do not want this data to be linked to your YouTube profile, you will have to log out before activating the button. YouTube stores your data in user profiles that it uses for advertising, market research and/or to tailor its website to market needs. This analysis (which even includes users who are not logged in) is mainly done to show targeted advertising and notify other users in the social network about what you have done on our website. You can object to the creation of user profiles by contacting YouTube.
iii) Please see YouTube’s privacy policy for more information on the purposes and extent to which it collects and processes data. The policy also contains more information on your rights and ways to adjust your settings to protect your privacy: https://policies.google.com/privacy . Google also processes your personal data in the United States and is EU-US Privacy Shield certified, see https://www.privacyshield.gov/EU-US-Framework .
b) Embedding of Google Maps
i) Our website uses Google Maps, which lets us show you interactive maps within our website and give you convenient access to map functions.
ii) When you visit the website, Google is notified that you have accessed a website page containing Google Maps. The provider will then also receive the data described in Section 3 of this policy. This happens whether or not you have a Google account or are logged into a Google account. If you are logged in with Google, your data will be linked to your account. If you do not want this data to be linked to your Google profile, you will have to log out before activating the button. Google stores your data in user profiles that it uses for advertising, market research and/or to tailor its website to market needs. This analysis (which even includes users who are not logged in) is mainly done to show targeted advertising and notify other users in the social network about what you have done on our website. You can object to the creation of user profiles by contacting Google.
iii) To learn more about the purpose and extent to which the plug-in provider collects and processes data, please see the provider’s privacy policy. The policy also contains more information on your rights and ways to adjust your settings to protect your privacy: https://policies.google.com/privacy . Google processes your personal data in the United States and is EU-US Privacy Shield certified, see https://www.privacyshield.gov/EU-US-Framework .
(2) Company presence on social media platforms
We maintain company pages on several social media platforms to provide information to people who are interested in our company through as many channels as possible. These pages contain our latest news, photo and video posts and allow users to communicate with us.
a) Our company presences
We operate online presences – which may also be called accounts, fan pages or channels – on the following social media platforms:
- Twitter: https://twitter.com/Infraserv
- YouTube https://www.youtube.com/user/InfraservVideo
- Xing: https://www.xing.com/company/infraserv
- LinkedIn: https://www.linkedin.com/company/infraserv-hochst
b) Information on data processing within the scope of joint responsibility pursuant to GDPR Article 26
Social media platforms publish what you do on the platform (e.g. comments, posts, likes). We do not process this data for any other purpose. The data generated by the company presence is not stored in our systems. The legal basis for processing is GDPR Article 6(1) point (f).
The operator of the social media platform also processes data and is therefore a controller within the meaning of GDPR Article 26, too. We have very little influence over these operators. Where we do have influence, we prevail upon them, within the limits of our abilities, to handle data in compliance with data protection laws. However, there are many areas where we have no influence over how social media platform operators process data, nor do we know exactly what data the operator is processing. Since we therefore cannot provide any reliable information about the purpose and scope of their processing of your data, we ask that you review the operators’ privacy policies. Each operator’s policy also contains more information on your rights and ways to adjust your settings to protect your privacy:
- Twitter: https://twitter.com/en/privacy
- YouTube: https://policies.google.com/privacy
- XING: https://privacy.xing.com/en/your-privacy
- LinkedIn: https://www.linkedin.com/legal/privacy-policy
c) Your rights under the GDPR
Point B of this privacy policy also states your rights under the GDPR and which supervisory authority has jurisdiction over us. You can also invoke the rights listed in point B. (1) against the operators of the social media platforms that we use. The operators’ contact details are provided in their privacy policies.
G. Online advertising and user behavior analysis
(1) Use of Google Ads conversion
a) We use Google Ads to advertise our attractive services on external websites. We can track the success of individual advertisements in relation to the advertising campaign data. Our interest in this process is to show you advertising that you find interesting, make our website more interesting for you and spend our advertising budget more effectively.
b) Google delivers Ads advertisements through “ad servers”. We use ad server cookies to track certain parameters of success such as impressions or clicks. If you reach our website through a Google ad, Google Ads will place a cookie on your PC. These cookies generally expire after 30 days and are not designed to identify you personally. The analytical parameters that these cookies generally contain are a unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (flag that the user no longer wants to be contacted).
c) These cookies enable Google to recognize your internet browser. If a user visits certain pages on an Ads customer’s website and the cookie stored on the user’s computer has not yet expired, Google and the customer will be able to tell that the user clicked the ad and was sent to this page. Each Ads customer is assigned a different cookie. That means that cookies cannot be tracked across multiple Ads customers’ websites. We do not collect or process personal data in connection with the above advertisements. Google merely provides us with statistical analyses. We can use these analyses to determine which advertisements have been particularly effective. We receive no further data from using Google Ads, nor can we identify users based on this information.
d) Your browser automatically establishes a direct connection to the Google server based on the marketing tools. We have no control over the scope or further use of the data that Google collects with this tool, and are therefore providing this information based on our understanding: When Google Ads is integrated, Google is told that you have accessed a certain part of our website or clicked one of our advertisements. If you have registered for a Google service, Google will be able to associate the visit with your account. Even if you are not registered with Google or are not logged in, the provider may still discover and store your IP address.
e) There are several ways to avoid participating in the tracking process:
(i) change the settings in your browser software; in particular, block third-party cookies to stop receiving ads from third-party providers;
(ii) deactivate the cookies for conversion tracking by setting your browser to block cookies from “www.googleadservices.com”,
https://adssettings.google.com
; note, however, that this setting is deleted when you delete your cookies;
(iii) deactivate interest-based advertising from providers who participate in “About Ads”, a self-regulatory campaign at
http://www.aboutads.info/choices
; note, however, that this setting is deleted when you delete your cookies;
(iv) permanently deactivate tracking in your Firefox, Internet Explorer or Google Chrome browser at the following link:
http://www.google.com/settings/ads/plugin
. Please note, however, that you may not be able to use the full functionality of our websites if you do this.
f) The legal basis for processing your data is GDPR Article 6(1) point (f). You can find more information about Google’s privacy policies here: https://policies.google.com/privacy?hl=en and https://services.google.com/sitestats/en.html . As an alternative, you can also visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org . Google is EU-US Privacy Shield certified, see https://www.privacyshield.gov/EU-US-Framework .
(2) Google Remarketing
We use Google Remarketing in addition to Ads conversion. We use this process in order to contact you again. Google Remarketing shows you our ads after you leave our website as you continue to use the internet. This feature relies on cookies stored in your browser, which Google uses to track and analyze your user behavior when you visit various websites. This allows Google to recognize that you have visited our website before. According to Google, the data collected during remarketing is not merged with any personal data that Google may have stored on you. Google claims that it uses pseudonymization for remarketing.
(3) Google Marketing Platform
a) This website also uses Google Marketing Platform by Google, an online marketing tool. Google Marketing Platform uses cookies in order to show ads that are relevant for the user, improve campaign performance reports and avoid displaying the same ads to a user repeatedly. Google uses a cookie ID to track which ads are displayed in which browser and prevent them from being displayed more than once. In addition, Google Marketing Platform can use cookie IDs to identify “conversions” that relate to ad requests. One example of a conversion is when a user sees a Google Marketing Platform ad and later, using the same browser, accesses the advertiser’s website and makes a purchase there. Google Marketing Platform cookies do not contain any personal data, according to Google.
b) Your browser automatically establishes a direct connection to the Google server based on the marketing tools. We have no control over the scope or further use of the data that Google collects with this tool, and are therefore providing this information based on our understanding: When Google Marketing Platform is integrated, Google is told that you have accessed a certain part of our website or clicked one of our advertisements. If you have registered for a Google service, Google will be able to associate the visit with your account. Even if you are not registered with Google or are not logged in, the provider may still discover and store your IP address.
c) There are several ways to avoid participating in the tracking process:
(i) change the settings in your browser software; in particular, block third-party cookies to stop receiving ads from third-party providers;
(ii) deactivate the cookies for conversion tracking by setting your browser to block cookies from “www.googleadservices.com”,
https://adssettings.google.com
; note, however, that this setting is deleted when you delete your cookies;
(iii) deactivate interest-based advertising from providers who participate in “About Ads”, a self-regulatory campaign at
http://www.aboutads.info/choices
; note, however, that this setting is deleted when you delete your cookies;
(iv) permanently deactivate tracking in your Firefox, Internet Explorer or Google Chrome browser at the following link:
http://www.google.com/settings/ads/plugin
. Please note, however, that you may not be able to use the full functionality of our websites if you do this.
d) The legal basis for processing your data is GDPR Article 6(1) point (f). For more information about DoubleClick by Google, go to https://www.doubleclickbygoogle.com/ and http://support.google.com/adsense/answer/2839090 . For more information about Google’s privacy policies in general, go to https://www.google.com/policies/privacy . As an alternative, you can also visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org . Google is EU-US Privacy Shield certified, see https://www.privacyshield.gov/EU-US-Framework .
H. Processing of job applications
(1) Storage period
We process the personal data you provide on your job application solely for administering the application process. Once we receive your job application, we will retain your application data for no more than 12 months unless you have given us an extended declaration of consent to store the data for up to 24 months. If we reject your job application, we will delete the data within 6 months of the rejection date.
(2) Categories of data, purpose of the processing and legal basis:
We process the personal data from your job application, which you disclose on our Careers page (using the online application form, as an attachment or as a paper application), for the purpose of selecting applicants. If we find you to be a suitable candidate, your data will be transferred within the Infraserv Höchst Group for further processing as part of the selection process. Your data can then be accessed by hiring managers at the appropriate companies.
We process certain personal data from your job application and during the selection process, including:
- First and last name
- Résumé photo
- Nationality
- Contact details (such as home address, phone number)
- Adult/minor
- Application data (such as diploma, grades, career preferences, internships, professional experience, letters of reference)
- Data from application questionnaires
- Data from aptitude tests (which may still have to be conducted)
- Data from job interviews (which may still have to be conducted)
- Information channels that led to the job application
Details regarding the information channels that led you to us will always be anonymized before we analyze it and use it for marketing campaigns.
(3) Special categories of personal data:
You consent to our collection and processing of the following special categories of personal data:
Any special categories of personal data contained in your job application (for example, information about your health, or a photo that allows us to infer your ethnic background, your visual acuity and/or religion) may only be processed with your consent. You consent to our processing of the special categories of personal data contained in your job application for the purpose of administering the application process. The sole purpose of your consent is to allow us to consider the job application in its present form. The information will not be used during the application process except where required by law, including, without limitation, applications submitted by individuals with severe disabilities. Your data will not be transferred to any third parties who are not already named above. You are under no obligation to provide these special categories of personal data with your job application. The disclosure or non-disclosure of this information has no bearing on the outcome of the application process.
(4) Withdrawal of consent
You can withdraw your consent at any time (preferably by email to hr-portal_admin (at) infraserv.com or by regular mail to Infraserv GmbH & Co. Höchst KG, HR Services, Bldg. C770, Industriepark Höchst, 65926 Frankfurt am Main, Germany). Your data covered by the consent will then be deleted within the framework of the legal requirements. However, if you withdraw your consent, we will be unable to consider your submitted job application in its present form.
(5) Disclosure of personal data
We may employ external service providers (“processors”) such as IT service providers when processing personal data. These service providers act solely as we have instructed and are contractually bound to comply with the applicable data protection requirements.
(6) Right of access, rectification, erasure, restriction of processing, objection and data portability
Current data protection law generally gives you the following rights:
- To have us confirm whether or not we process your personal data, and, if so, to give you access to the personal data and additional information
- To rectify inaccurate personal data;
- To erase the personal data that we process;
- To restrict our processing of your personal data;
- To receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or have this data transmitted to a third party; or
- To object to our processing of your personal data.
I. Video surveillance
(1) Purpose of data processing
We own and operate Industriepark Höchst (“IPH”) and conduct video surveillance of the industrial park’s outer perimeter, individual facilities and/or individual lots. Our surveillance is conducted in accordance with our right, as the property owner, to keep out trespassers and with applicable laws, regulations and/or government requirements to protect our land and the buildings, equipment and individuals on it. Generally speaking, areas placed under video surveillance are specifically and additionally identified by a pictogram at the gates and outside our perimeter security, along with the responsible party’s name. When the parties’ interests are balanced against each other as required by law, the legitimate interests cited above are not overridden by the fundamental rights and freedoms of data subjects with regard to the protection of personal data. Data processing is therefore an unavoidable consequence of entering the area under video surveillance.
(2) Storage of your data
We generally store video recordings for a limited duration in order to achieve the purpose of surveillance cited in II. point I. section (1) during our regular business hours. The recordings are then automatically deleted unless this purpose requires a longer processing period in conjunction with one of the legal bases cited in II. point I. section (3) .
(3) Legal bases
The legal bases of data processing are given in GDPR Art. 6 (1) point (b) (performance of a contract), (c) (legal obligation), (d) (vital interests) or (f) (legitimate interests of the controller).
J. Using an Infraserv GmbH & Co. Höchst KG (“Infraserv”) hotspot
(1) Purpose of data processing
Infraserv allows the user to access the internet over Wi-Fi for wireless use at specially designated locations such as “ISH-Gast” within the limits of current technical and operational capabilities. Wi-Fi technology is used to establish wireless data communications between ISH-Gast and the user’s Wi-Fi device. When the parties’ interests are balanced against each other as required by law, the legitimate interests cited above are not overridden by the fundamental rights and freedoms of data subjects with regard to the protection of personal data. Data processing is therefore an unavoidable consequence of using the hotspot.
(2) Storage of your data
When providing internet access, Infraserv records, for technical reasons, nothing more than the MAC address (“Media Access Control address” or also “physical address”) of the device being used, the date on which the services were used and how long they were used. This customer data is only stored temporarily and is deleted once it is no longer needed to fulfill the purpose for which it was originally collected and further processed.
Infraserv does not store or otherwise process any other personal data when providing internet access.
Infraserv is a service provider for the purposes of German Telemedia Act (TMG) §§ 2, 8, 13.
(3) Legal bases
The legal bases of data processing are given in GDPR Art. 6 (1) point (b) (performance of a contract) or (f) (legitimate interests of the controller). When the parties’ interests are balanced against each other as required by law, the legitimate interests cited above are not overridden by the fundamental rights and freedoms of data subjects with regard to the protection of personal data. Data processing is therefore an unavoidable consequence of using the hotspot.
Disclaimer
The content on our pages was prepared with utmost diligence. However, we cannot guarantee that the content is accurate, complete or up-to-date.
German Telemedia Act ("TMG") § 7 (1) makes us, as a service provider, responsible for our content on these pages in accordance with general laws. Under TMG § 8 - § 10, however, we are not required to monitor or investigate transmitted or stored third-party information for indications of illegal activity. This is without prejudice to obligations to remove or block the use of information in accordance with general laws. However, we cannot be held liable in this respect until we learn of a concrete legal violation. We will immediately remove content once we learn of any legal violations.
Copyright
German copyright law governs content and works created by the page operators and presented on these pages. Third-party contributions are identified as such. Copying, modification, distribution or any other form of exploitation outside the copyright limits is strictly prohibited without the author's or creator's written consent. This page may only be downloaded or copied for private, not commercial, use.
The page operators endeavor always to comply with third-party copyrights and/or to use self-produced and open-source works.
Last updated: November 23rd, 2020