Privacy policy


    Thank you for your interest in our online presence. The protection of your personal data is a vital concern of Schuler AG (hereinafter referred to as “Schuler”, “we” or “us”). With this data protection declaration, we would like to inform you about the processing of your personal data within the scope of use of the website available under https://www.schulergroup.com/ and other websites if and to the extent they are referred to below (hereinafter jointly referred to as “websites”) according to the requirements of the EU General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016 – called "GDPR" hereinafter).

    This data protection declaration does not apply to our websites via which you can apply directly to us electronically. The special data protection declaration, can be accessed here. In the event of a contradiction with this data protection declaration, the special data protection declaration takes precedence.

    1. Name and contact data of the responsible body

    Data controller for the data processing explained in this data protection declaration is the following body:

    Schuler Group GmbH
    Schuler-Platz 1
    D-73033 Göppingen
    Germany
    Tel: +49 (71 61) 66-0
    Fax: +49 (71 61) 66-233
    E-mail: info@schulergroup.com

    Schuler Group GmbH is represented by its Managment Board, which comprises the following persons:

    Martin Drasch, CEO
    Dr. Peter Jost, COO
    Thomas Kamphausen, CFO

    2. Contact details of the data protection officer

    The data protection officer of Schuler is:

    RA Dr. Thorsten B. Behling
    WTS Legal Rechtsanwaltsgesellschaft mbH
    Sachsenring 83
    50677 Cologne
    Germany
    E-mail: datenschutz.web@schulergroup.com

    3. Categories of personal data we process

    When using our website, we process the following categories of personal data, depending on the services you use:

    a.     The use of our website as a whole (so-called surfing):

    • Information about the type of browser you are using and the browser version
    • Your device’s operating system
    • Your Internet service provider 
    • Your IP address 
    • Date and time of the access
    • Websites from which your system accessed our website 
    • Websites that your system accesses from our website
    • Cookie data (e.g., pseudonym cookie ID, length of stay on our websites, pages called, movement of the user through links, IP address) insofar as you do no prohibit the col-lection of this information as explained under Section 8

    b.     Use of the option to register for events:

    • Personal master data (form of address, first name, last name)
    • Contact data (telephone number, fax number, e-mail address)
    • Company
    • Address data (street, postal code, city, country) [invoice may vary]
    • Position and role of the contact person
    • Possibly a message

    c.      Use of the application form:

    You can find out more about this under Section 3 c of our application pages.

    d.     Use of our contact form:

    • Personal master data (form of address, first name, last name)
    • Company
    • Contact data (telephone number, e-mail address and possibly fax number)
    • Address data (street, postal code, city, country)
    • Content of your message

    e.      Use of our contact e-mail address or telephone number: 

    • Sender e-mail address
    • Content of the message/your concern
    • Telephone number (when contacting us by telephone)

    f.      Use of electronic invoice processing:

    • Company address data (e.g., street, house number, postal code, city, country)
    • Contact data for contact person (e.g., telephone number, e-mail address)
    • Invoice sender data (e.g., e-mail address, domain)
    • Company customer number
    • Company bank data (e.g., account number, bank code or IBAN and BIC as well as ac-count holder)
    • Invoice data (e.g., invoice number, items, prices)

    g.      Social media channels:

    In the context of our social media sites on Facebook (available via the following Link), YouTube (available via the following Link), Xing (available via the following Link), Twitter (available via the following Link), LinkedIn (available via the following Link), Kununu (available via the following Link), and Instagram (available via the following Link) (hereinafter jointly referred to as “social media site(s)”), we also process the following categories of personal data on our social media sites:

    • User name and profile picture of the social media visitor
    • Comment information (e.g., profile picture, user/display name, comment content)
    • Contents of messages to us
    • Information about Likes on our posts
    • Information on posts that we share
    • Photos of people shown in posts on our social media sites Name and photos of employees (e.g., on Xing)

    4. Origin of personal data not collected directly from you

    We generally only collect personal data about you from you personally. However, if this is not the case in exceptional cases, we will specifically point this out to you. Within the scope of the processing of the data collected through our online forms and systems, we obtain the data of the person who enters it into the respective form or system. 

    If you send us the personal data of third parties through our abovementioned services, you must observe all data protection requirements, especially Art. 5 through 9 and 12 ff. GDPR. Otherwise we have no intention to collect such data and reserve the right to take legal action against you.

    5. Storage period

    The personal data we have collected is stored only as long as required for the fulfillment of the purpose connected with the storage. If this purpose no longer applies, we fundamentally delete or anonymize the data again insofar as no legitimate grounds or obligations to obtain the data (e.g., according to tax-law regulations) exist. In the latter case, the data is processed only with limitations, i.e., to fulfill the grounds or obligation to retain the data and in all other cases only with consent for the assertion, exercise or defense of legal claims, for the protection of the rights of other natural or legal person or for reasons of an important public interest of the European Union(EU) or an EU member state. In case an obligation to retain data or a legitimate reasons for storage exists, we delete or anonymize the data after the certain expiration of the legitimate grounds and/or obligation to retain the data.

    In the event of data processing on our social media site, we delete or anonymize the data processed by us (for further details, please refer in particular to Section 12) generally after two years, provided that and insofar as there are no legitimate reasons or obligations for storage.

    6. Purposes for which the personal data is processed

    We observe the basic principle of the specific use of personal data and process your personal data fundamentally only for the purposes explained in this data protection declaration.

    Your personal data is fundamentally not passed on to third parties without your express consent unless otherwise stipulated in this data protection declaration. 
    Data is sent to state institutions and authorities entitled to receive such information only within the scope of the legal duty of disclosure or if we are obligated to provide information on the basis of a court decision. Any of our employees assigned with data processing or service provided that we have commissioned are obliged to us to maintain confidentiality and observe data protection provisions.
    When you visit our website, it is not legally or contractually required for you to actively provide information about your person. We still collect certain data in an anonymized manner or using pseudonyms in order to evaluate your usage behavior. For this purpose, so-called cookies and other tools are used on our websites (more information can be found under Section 8).
    We use the personal data you have provided for the following purposes:
    • To process your inquiry/-ies (e.g., through the contact form)
    • Customer care and management
    • Direct advertising (e.g., sending of newsletters (provided consent is given) or invitations to events)
    • To fulfill the contract and perform precontractual measures
    • To accept registrations for Schuler events
    • Individual company and/or company group controlling (e.g., for budget plans and reporting)
    • To provide access data for restricted areas of the website
    • Decision on the establishment for an employment relationship and, in case of an establishment of an employment relationship, the conducting and termination of the same. Please click here for details.
    • Observance of legal requirements (e.g., for the fulfillment of tax and commercial law responsibilities and the implementation of a compliance management system, including compliance inspections)
    • Data protection and security management and inspections

    7. Legal basis for processing

    The basis for the processing of personal data is the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz (BDSG)) and other European and German ordinances and laws.

    a.     Overview of the legal basis

    The following list provides you with a brief overview of the existing and/or applied legal bases according to DGPR and BDSG to which we refer when processing your data:
            Legal basis         Description / establishment

    Consent according to

    Art. 6 Sect. 1 Clause 1 a) GDPR

    This legal basis steps in when you have consented to our processing of your data for one or more purposes (e.g., consent to receiving a newsletter).

    To fulfill the contract or perform precontractual measures according to

    Art. 6 Sect. 1 Clause 1 b) GDPR

    If we have concluded a control with your person (e.g., for the purchase of a machine) or if you have requested that we execute a precontractual measure (e.g., creation of a quotation), this legal basis allows us to process all of your data that is required for the fulfillment of the contract or the execution of precontractual measures.

    Fulfilment of a legal obligation according to

    Art. 6 Sect. 1 Clause 1 c) GDPR

    This legal basis permits us to process your data This legal basis allows us to process your data if it is required for the fulfillment of a legal obligation (e.g., for the fulfillment of obligations according to commercial or tax law).

    Our own legitimate interests or the legitimate interests of third parties according to

    Art. 6 Sect. 1 Clause 1 f) GDPR

    To some extent, we base our processing of personal data on our legitimate interests or on the legitimate interests of third parties. All legal, economical and non-material interests not prohibited by the legal system are considered to be legitimate interests. Examples of our legitimate interests include the following:

    - Data processing for communication with our customers and contacts (if not already included under Art. 6 Sect. 1 Clause 1 b) GDPR). 

    - Direct advertising (if not already included under Art. 6 Sect. 1 Clause 1 a) GDPR), e.g., if we want to draw the attention of you or your company to products or events. You can object to direct advertising with future effect at any time as described under Section 11 g).

    Decision on the establishment for an employment relation-ship according to

    Art. 88 GDPR

    in conjunction with § 26 Sect. 1 Clause 1 of the German Federal Data Protection Act (BDSG)

    If you apply to us, we will also use your data to decide whether to establish an employment relationship with you and, if applicable, to establish, implement and terminate it.

       

    b.     Details regarding the legal bases of data processing

    aa.   Surfing

    For technical reasons related to the provision of our websites, we automatically collect data and information on the computer system of the terminal device calling our websites each time our websites are called. We therefore process your data types listed under Section 3 a). The legal basis for this is Art. 6 Sect. 1 Clause 1 a) GDPR, whereby you consent to the processing by using our websites in combination with the displayed cookie banner.

    We also use a web font from the Google Fonts library on our website. The fonts from the Google Fonts library that we use are integrated such that they reside on our own web servers. No data are forwarded to third parties here, in particular not to Google Inc. Processing is carried out on the basis of Art. 6 Sect. 1, Clause 1 f) GDPR. Our legitimate interest lies in presenting to you a website with an optimal design, and thus portraying our enterprise in a positive manner.

    In addition, we especially process cookie data to understand how visitors traverse our web-sites. We explain the details on this topic under Section 8, whereby you can also obtain information on how you can prevent this processing.

    bb.   Registering for events

    If you register for an event, we will use the data types listed under Section 3 b) to register you for this event and to carry out the event. The data transmitted during registration for an event is required for the preparation and execution of a contractual relationship (event attendance). The legal basis for the processing of your data is therefore Art. 6 Sect. 1 Clause 1 b) GDPR.

    cc.    Use of the application form

    We only accept job applications via our application pages, which you can reach here. If you should send us your application documents by other means (for example by e-mail or post), please note that we have no desire to collect the personal data contained therein.

    For further details, please refer to the data protection declaration for our application pages, which you can access here.

    dd.   Use of contact form

    If you contact us through our contact form, the processing of the data you entered is required to answer your inquiry and, if pertinent, to perform any precontractual measures you have requested (e.g., to send a quotation you have requested). In doing so, we process the data types mentioned under Section 3 d), insofar as these are specified by you. Please provide only the information we need to respond to your request (for example, your telephone number only if you wish to be contacted by phone). The legal bases for the processing are Art. 6 Sect. 1 Clause 1 b) and f) GDPR accordingly.

    ee.    Use of our contact e-mail address or telephone number

    If you contact us by e-mail or telephone (e.g., for service or purchasing inquiries), we process the data types specified under Section 3 e). The processing of the data entered is required to answer your inquiry and, if pertinent, to perform any precontractual measures you have requested (e.g., to send a quotation you have requested). The legal bases for the processing are Art. 6 Sect. 1 Clause 1 b) and f) GDPR accordingly.

    ff.     Sending a machine/ product inquiry

    If you click the “Technologies & Products” item on the header of our website, you will obtain an overview of the technologies, forming techniques and used machines (machines) you can order from us. If you click individual machines in the “Used Machines” area, you have the opportunity to send us an inquiry (machine inquiry) regarding the respective machine through the contact form in addition to receiving details on the machine. The company for which you are making the inquiry should be specified in the corresponding contact form in addition to your personal master data, address data, telephone number and e-mail address. The specification of the other data types described in Section 3 d) is voluntary here.

    Another option for a product inquiry is available under the “Product inquiry” subitem. Various PDF forms are available for download in this area. They also need to be filled with the aforementioned data types and other product-specific information (e.g., bandwidth, intended use and processed material, nominal force) required to answer your question. Please note that the product-specific information varies depending on which machine the inquiry is about and comes from the respective form. The corresponding forms for product inquiries can be sent back to us by e-mail or fax after filling. The processing of the data in the context of a machine or product inquiry is carried out on the basis of Art. 6 Sect. 1 Clause 1 b) GDPR in order to send you a corresponding quotation and/or corresponding information and thus to implement a pre-contractual measure. If you make an inquiry as a company contact person, we process your data on the basis of Art. 6 Sect. 1 Clause 1 f) GDPR, whereby our legitimate interest lies in the implementation of pre-contractual measures with your employer and you are our contact person for this purpose.

    gg. Use of electronic invoice processing

    If you have a business relationship with Schuler, you can register for electronic invoice processing. If you make use of this service, you can send us your invoices in PDF format or as an EDI data record. In doing so, we process the data types mentioned under Section 3 f). The data is required to allow you to make use of electronic invoice processing as well as to read and process your invoices. Our processing is based on Art. 6 Sect. 1 Clause 1 f) GDPR. Our legitimate interest is to be able to process invoices quickly, efficiently and by means of a modern technical procedure and thus remain competitive in the future. Further details on the terms and conditions of the use of electronic invoice processing and the option to register for this procedure can be found here.

    When using electronic invoice processing, your data will be processed responsibly by the Schuler company, which is your contractual partner and to which the invoice is therefore sent.

    hh. Use of our social media sites

    If you use our social media sites, we process the data types listed under Section 3 g). You have the opportunity to comment on our posts and ask questions, for example. You can also contact us via the contact options on our social media sites. If you make an inquiry or comment on a post with the aim of obtaining information about our products for the conclusion of a contract, we process your data on the basis of Art. 6 Sect. 1 Clause 1 b) GDPR to implement pre-contractual measures that you have inquired about or to fulfil a contract with you. If you contact us for the purpose of information only, we will process your personal data on the basis of our legitimate interests pursuant to Art. 6 Sect. 1 Clause 1 f) GDPR. Our legitimate interest is to answer your inquiry and thereby present our company optimally on the Internet and inform interested parties. We process your profile picture on the basis of Art. 6 Sect. 1 Clause 1 a) GDPR, whereby by uploading your profile picture on your social media profile and by interacting with our social media site you have given your consent to your photo being shown on our corresponding social media site (e.g., in a comment).

    In addition, we use the analysis tools provided on the social media sites (e.g., Facebook In-sights, YouTube Analytics) to evaluate which content from us is more interesting for you as a user and how large the range of our posts is. We only have access to anonymized – i.e. non-personal – statistical information that we cannot assign to you without additional information. The processing is carried out on the basis of Art. 6 Sect. 1 Clause 1 f) GDPR, whereby our legitimate interest lies in the optimization and user-friendly design of our social media sites. For further details on whether and how we use analysis tools on the individual social media sites, please refer to section 12.

    If we show a photo of you in a post on one of our social media sites or you can be seen/heard in a video, we process this data on the basis of consent given to us in accordance with Art. 6 Sect. 1 Clause 1 a) GDPR.

    If you are displayed on our Xing social media site under “Employees” with your name and, if applicable, a photo, processing will also take place on the basis of your consent pursuant to Art. 6 Sect. 1 Clause 1 a) GDPR. Your consent lies in the fact that you have stated in your Xing profile that you work at Schuler and have not made your privacy settings such that a listing on our site is prevented. Your consent to this is also voluntary and can be revoked at any time with future effect by adjusting your privacy setting. If you do not give your consent, you will of course not suffer any disadvantages beyond the fact that your name (and, if applicable, your profile picture) will not be displayed on Xing's website under the Employees section.

    For information on the responsibilities for data processing on our social media sites, please refer to the explanations under Section 12.

    ii.  Other purposes (including direct advertising)

    The data types mentioned in Section 3 can also be processed for the following purposes and on the basis of the following legal bases:

    • Customer care and management, as well as direct advertising (without a newsletter, e.g., sending of event invitations or product information in paper form), whereby the legal basis is Art. 6 Sect. 1 Clause 1 f) GDPR in this case. Our legitimate interest consists of remaining in contact with you, increasing our sales and processing all of your matters in a Group-uniform, appropriate, timely and efficient manner. Especially data according to Section 3 that we have received from you in connection with the fulfillment of the contract and/or performance of precontractual measures is affected here.
    • Individual company and/or company group controlling (e.g., for budget plans and reporting), which also includes group reporting and uniform group management (e.g., purchasing controlling and customer care). Here, the legal basis is Art. 6 Sect. 1 Clause 1 f) GDPR and our legitimate interest is individual company and company group controlling, as well as uniform group management, which lies in the economic interest of us and/or our parent company (Andritz AG) and therefore qualifies as a legitimate interest within the scope of this regulation. Especially data according to Section 3 that we have received from you in connection with the fulfillment of the contract and/or performance of precontractual measures is affected here.
    • Observance of legal requirements (e.g., for the fulfillment of tax and commercial law responsibilities and the implementation of a compliance management system, including compliance inspections), whereby the legal basis is Art. 6 Sect. 1 Clause 1 c) GDPR.
    • Data protection and security management including corresponding inspections by our data protection officer and the responsible information security officer at our company. In regard to inspections performed by our data protection officer, the legal basis is Art. 6 Sect. 1 Clause 1 c) GDPR, especially in conjunction with Art. 24 Sect. 2 Clause 2 and Art. 38 Sect. 2 and Art. 39 Sect. 1 b) and c) GDPR, as well as Art. 6 Sect. 1 Clause 1 f) GDPR. Here, our legitimate interest lies in a secure and data-protection-compliant processing of personal data.

    8. Use of cookies

    We use cookies on our website. Cookies are small data packets generated by our web server and stored on the hard disk of your computer during the communication of your computer with the web server. Session cookies that the mere functionality of our websites and that are deleted again immediately when the browser closes and cross-session cookies (so-called persistent cookies) that are saved and used beyond a session are differentiated; we use both types of cookies. By using our website, you grant your consent for us to process your data through cookies as described in the following in combination with the displayed cookie banner. The legal basis for the processing of your data in this context is Art. 6 Sect. 1 Clause 1 a) GDPR accordingly. If you want to assert your pertinent right to revocation or objection, proceed as follows, irrespective of the descriptions in Sections 11 g) and i):

    a.     Prevention of session cookies

    You can assert your right to reject cookies at any time. Irrespective of the other possibilities for preventing cookies described in the following, you can set your browser so that it does not accept cookies or so that you receive a prompt to consent before the setting of a cookie. The details can be found in the help function of your browser. If you do not accept cookies, you will possibly not be able to utilize the full range of website functions.

    b.     Prevention of persistent cookies for range analysis

    For us, it is important to understand how our websites are used to improve them and design them more attractively for users. For this reason, we analyze how you use our websites whereby we process cookie data using external service provider as described in the following. These descriptions also contain information on how to prevent such processing.

    aa.   Google Analytics cookies

    This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called cookies, text files that are stored on your computer and that allow an analysis of your use of the website. The data generated by the cookie regarding your use of this website is usually sent to a Google server in the United States and stored there. In case of an activation of IP anonymization on this website, your IP address is previously shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is sent to a Google server in the United States and stored there only in exceptional cases. On behalf of the website operator, Google uses this information to evaluate your use of the website, compile reports on the website activities and render other services for the website operator connected with the use of the website and the Internet itself. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other data by Google. You can prevent the storage of cookies by a corresponding setting in your browser software; please note, however, that you might not be able to use the full scope of functions of this website in this case. In addition, you can prevent the sending of the data generated by the cookie and related to your use of the website (including your IP address) to Google and prevent the processing of this data by Google by downloading and installing the browser plugin available under the following link. Please note that you will leave the Schuler website in this case. Schuler does not process the affected data.

    More detailed information on the conditions for use and data protection can be found under the following links: http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/. Please note that Google Analytics has been expanded by the code “anonymizeIp” on this website to guarantee an anonymized collection of IP addresses (so-called IP masking).

    c.      Important information on the saving of your cookie settings

    Please note that you must repeat the abovementioned cookie settings if you or your browser deletes cookies. The same applies if your visit our websites with another browser or terminal device.

    9. Recipient or categories of recipients of personal data

    The personal data is passed on to the following recipients:

    • Public bodies to which the data must be sent based on legal regulations (e.g., tax authorities, supervisory bodies, social security agencies, law enforcement agencies, if pertinent)
    • Internal departments involved in the performance of the connected tasks (essentially: Marketing, Human Resources, IT & Security)
    • Contractors (service providers, such as IT service providers and forwarding agents that may or may not belong to the Schuler and/or Andritz Group)
    • Our external data protection officer
    • Other group companies and departments (e.g., Auditing or Information Security department or the General Management of the Schuler and/or Andritz Group)
    • Providers of our social media sites

    10. Sending of personal data to third-party countries

    We fundamentally do not send personal data collected on these websites to countries outside of the European Union or European Economic Area (third-party countries).

    It is possible, however, that data collected on these website will be sent to third-party countries if required for the fulfillment of the control, for internal communication, customer care and/or customer management or due to the use of a service provider or the involvement of a group company in a third-party country as an intermediary. We involve our data protection officer in such cases. The data is sent only if the receiving body has an appropriate data protection level based on a decision on adequacy or using suitable guarantees (Art. 45 ff. GDPR) or if neither a decision on adequacy nor suitable guarantees are required in exceptional cases (Art. 49 Sect. 1 Clause 2 GDPR). In general, we apply the EU Standard Contractual Clauses to guarantee an appropriate degree of data protection on the part of the pertinent recipient. The guarantees we use can be obtained from our data protection officer. If you would like to obtain more information on the guarantees in individual cases, please contact our data protection officer under the contact data listed under Section 2.

    11. Rights with respect to data processing

    In regard to our use of your data, you have the following rights arising from Art. 15 through 21 GDPR, as well as the right of the revocation of your consent at any time and the right to complain to a supervisory body as described in the following. You can assert your rights to us informally, either directly using the contact data specified under Section 1 or by involving our data protection officer as an intermediary; the contact information of the data protection officer can be found under Section 2. With the exception of any transmission or connection fees, the assertion of these rights does not entail any costs.

    a.     Right of information (Art. 15 GDPR)

    You have the right to request a confirmation from us as to whether and which personal data on your person are process and to obtain information regarding this data, especially in regard to the purposes and legal bases of the processing (refer to Sections 6, 7 and 8), the categories of the data we process (Section 3), the categories of recipients (Section 9) and our intention to transfer to data to recipients in a third-party country (Section 10). This also comprises information on the origin of the data insofar as it was not collected from you personally. You also have the right to obtain a copy of the personal data being processed insofar as the rights and freedoms of other people are not infringed in regard to their own personal data. Right to correction (Art. 16 GDPR)

    b.     Right to correction (Art. 16 GDPR)

    You also have a right to demand the correction of any incorrect personal data we have on you immediately. You also have the right to demand the completion of incomplete personal data, even by means of a supplementary declaration, under consideration of the purpose for processing.

    c.      Right to deletion (Art. 17 GDPR)

    You have to right to request the immediate deletion of your personal data if one of the following reasons applies and none of the exceptions explained in the following comes into play:

    • The data you processed are no longer required for the purposes described in this data protection declaration.
    • You have revoked your granted consent (for more information, refer to Section 11. i)) and we have no other legal basis for the processing of your data.
    • The data was unlawfully processed.
    • The deletion is required for the fulfillment of a legal obligation according to the law of the European Union or the member states to which we are subject. 
    • You have objected our processing of your data (for more information, refer to Section 11. g)) and we have no overriding grounds for the processing your data.

    We must not and/or may not implement your wish for deletion if one of the following reasons applies:

    • The processing is required for the exercising of the right to freedom of expression and information.
    • The processing is required to fulfill a legal requirement to which we are obliged according to the law of the European Union or a member state (e.g., legal storage obligations).
    • The processing is required for the assertion, exercise or defense of legal claims.
    • The processing is required for reasons of public interest within the scope of public health.

    d.     Right to the limitation of processing  (Art. 18 GDPR)

    You also have a right to demand the limitation of the processing of your personal data. You particularly have this right if one of the following reasons applies:

    • You dispute the correctness of your data.
    • The processing of the data is unlawful and you reject the deletion of the data.
    • We no longer require your data, but you require it for the assertion, exercise or defense of legal claims.
    • You have objected to the process (for more information, see Section 11 g)) and we are still checking whether our legitimate grounds for processing have priority over your legitimate grounds for objection.

    e.       Right to notification (Art. 19 GDPR)

    If you have asserted your right to correction, deletion or limitation of processing to Schuler, we are obliged to inform all recipients to which your personal data has been disclosed of the correction or deletion of your data or the limitation of its processing unless such an undertaking proves impossible or is associated with undue effort. You have the right to be notified of such measures by the recipient.

    f.      Right to data transferability (Art. 20 GDPR)

    You have the right to obtain the pertinent personal data in a structured, common, machine-readable format and send it or have us send it to another responsible party insofar as you have provided this data to use on the basis of consent or a contract and the data is processed in an automated manner. You have the right to have us send the data directly to the new responsible part if technically feasible and the rights and freedoms of other people are not violated.

    g.     Right to objection (Art. 21 GDPR)

    For reasons arising from your particular situation, you have the right to object to the processing of your personal data at any time insofar as the processing of this data is required for the safeguarding of the legitimate interests of Schuler or a third party or for the performance of a task that lies in the public interest.

    You can object to the processing of your data for advertising purposes with future effect at any time. We will always comply with such a request. Please note, however, that we cannot exclude that we may not be able to recall an advertising material in individual cases if we receive your objection after the publication of the advertising material has already been unstoppably initiated. In such cases, we will naturally remove you before the publication of any future advertising materials.

    h.     Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

    In addition, you can lodge a complaint at any time with the responsible data protection authority, for example at your place of residence or at the place of the alleged infringement.

    The following data protection authority is responsible for us:

    State Officer for Data Privacy and Freedom of Information
    Lautenschlagerstraße 20
    70173 Stuttgart
    https://www.baden-wuerttemberg.datenschutz.de/

    i.       Right to the revocation consent

    Insofar as you have provided us with a declaration of consent for the processing of your data, you have the right to revoke this consent with future effect at any time. Through such a revocation, the legality of any processing based on the provided consent up to the point in time of the revocation, the revocation affects only the legality of future processing.

    12. Information on social media sites and relationships with Schuler

    Please note that Schuler is only the data controller and service provider with respect to the social media sites referred to in Section 3 g) to the extent that Schuler itself processes data in accordance with the explanations in this Section 12. Schuler is neither responsible for nor can Schuler influence telemedia and related data processing that can be accessed via the social media sites named below. For this reason, Schuler has no control over whether and, if so, to what extent your personal data is transferred to recipients in third countries by other service providers who provide telemedia via the social media sites. Other service providers may also process technical information concerning you when you visit our social media sites. Irrespective of the data that we process in accordance with Section 3 f), the following information can be retrieved from these providers in particular:

    • The IP address of your device and/or your Internet connection
    • Date and time of access to our social media sites
    • Your browser type
    • The browser settings and the operating system
    • The last page you visited and the amount of data transferred.

    This information applies to all social media sites mentioned below, unless and to the extent that we state otherwise with respect to the respective social media sites.

    a. Facebook

    For example, as the service provider of the Facebook fan page referred to in Section 3 g), we can see who has called up our fan page and/or posted, commented on and/or shared posts. We process your posts in order to be able to process your inquiry and, for example, to answer a question you have asked. In addition, we process all information that you provide when you contact us via the contact options provided on our Facebook fan page, e.g., your user name, e-mail address and your inquiry. We process the data based on the legal basis set out in Section 7 b) hh).

    Furthermore, Facebook Inc, 1601 Willow Road Menlo Park, CA 94025, USA (hereinafter re-ferred to as “Facebook USA”) and/or Facebook Ireland Ltd, 4 Grad Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as “Facebook Ireland”) may provide us with anonymized – i.e. non-personal – statistical information that we cannot assign to you without further additional information (e.g., through so-called Facebook Insights).

    Further information on the processing of your data by Facebook USA and/or Facebook Ire-land can be found in the data protection declaration which can be accessed via https://www.facebook.com/about/privacy.

    b. YouTube

    For example, as the service provider of the YouTube site referred to in Section 3 g), we can see who has viewed and liked our videos. We can also see comments under ours. We process your posts and your user names in order to be able to process your inquiry and, for example, to answer a question you have asked. We process the data based on the legal basis set out in Section 7 b) hh).

    Furthermore, YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter re-ferred to as “YouTube”) may provide us with anonymized – i.e. non-personal – statistical information that we cannot assign to you without further additional information (e.g. through YouTube Analytics).

    Further information on the processing of your data by YouTube can be found in the data protection declaration which can be accessed via https://policies.google.com/privacy?hl=en&gl=en.

    c. Xing

    As a service provider of the Xing site referred to in Section 3 g), we can, for example, see when and with what content ratings were submitted for our company. The corresponding ratings are displayed pseudonymously on our Xing page and we have no way of referring them to a specific person. We can also see which employees have posted on their own Xing profiles, worked at Schuler and allowed an ad on our Xing page. Furthermore, we can see who “follows” our Xing page, i.e., wants news to be displayed in their profile, which we publish on our Xing page. We process the data based on the legal basis set out in Section 7 b) hh).

    Further information on the processing of your data by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany (hereinafter referred to as “Xing”) can be found in the data protection declaration which can be accessed via https://privacy.xing.com/en/privacy-policy.

    d. Twitter

    As a service provider of our Twitter page we can, for example, see who follows our Twitter page, i.e., wants to see our contributions (“tweets”) regularly, who likes our tweets, who responds to them by publishing them again (“retweets”). If you reply to one of our tweets, we will process your data in order to respond to your inquiry. If you follow us on Twitter, you also have the option to send us a private message. In this case we use your data to answer your inquiry. We process the data based on the legal basis set out in Section 7 b) hh).

    Further information on the processing of your data by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter referred to as “Twitter”) can be found in the data protection declaration which can be accessed via https://twitter.com/en/privacy.

    e. LinkedIn

    For example, as the provider of our LinkedIn page, we can see who follows our LinkedIn page and which employees with their own LinkedIn profiles have indicated that they want to work for Schuler. Furthermore we can see who liked our posts, shared them or wrote a comment. In the case of comments, we process your data to be able to answer your inquiry.

    Furthermore, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”) may provide us anonymized – i.e. non-personal – statistical information that we cannot assign to you without further additional information (e.g. analysis for company pages).

    Further information on the processing of your data by LinkedIn can be found in the data protection declaration which can be accessed via https://www.linkedin.com/legal/privacy-policy.

    f. Kununu

    As a provider of our Kununu site, we can, for example, see when and with what content ratings were submitted for our company. The corresponding ratings are specified pseudonymously on our Kununu page and we have no way of referring them to a specific person. You also have the option to make an inquiry about Schuler to the Kununu community via the Kununu page. Corresponding inquiries are also pseudonymized. If we respond to such an inquiry, we will process the data, in particular the content of the inquiry, in order to process your inquiry. We process the data based on the legal basis set out in Section 7 b) hh).

    Kununu also displays anonymized – i.e. non-personal – data on the profile visits to our Kununu site without being asked and also graphically evaluates the ratings given on our Kununu site. It is not possible for us to assign the relevant information to you without additional information.

    Further information on the processing of your data by Xing, which operates the website of kununu GmbH, Neutorgasse 4-8, Top 3.02, A - 1010 Vienna (hereinafter referred to as “Kununu”), can be found in the data protection declaration which can be accessed via https://privacy.xing.com/en/privacy-policy.

    g. Instagram

    For example, as the provider of our Instagram page, we can see who has subscribed to our Instagram page and regularly see our new posts. Furthermore, we can see who has liked or commented on our posts. In the case of comments on our posts, we process the data in order to answer your inquiry. If we publish a video on our Instagram page, we can also see how many people have seen the video, but we cannot see who has seen the video. If you send us a message via our Instagram page, we will process your data, such as your user name and the content of your message, in order to respond to your request. If we create a story post on our Instagram page, we can see who viewed our story post for the duration of the story post. Story posts are temporary posts that can be viewed via the profile picture on our Instagram page and are visible for 24 hours from the time they are published.

    Further information on the processing of your data by Facebook Ireland, which operates the website of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA (hereinafter referred to as “Instagram”), can be found in the data protection declaration which can be accessed via https://help.instagram.com/519522125107875.

    13. No obligation for the provision of data by you

    No legal or contractual obligation exists that would require you to provide us with your data as described in Section 3. It is possible, however, that we will not be able to fulfil existing contractual obligations (e.g., the delivery of a product) or to perform precontractual measures (e.g., the provision of a quotation, answering of a machine/product inquiry, booking of an event) towards you or your employer/client if you do not provide us with the required data.

    If you technically prevent us from collecting data that is required for the use of our website, it is possible that you will not be able to use the services listed under Section 3 or you will be able to use them only in a restricted manner.

    The provision of personal data (according to Section 3 c)) within the scope of a job application at Schuler is required for the decision on the establishment of an employment relationship with you. A non-provision of this data can lead to us not making a (positive) decision on your hiring.

    The provision of your data within the scope of our contact form is also voluntary. Without the specification of a contact possibility, however, we will not be able to answer your query. The same applies to contacting us by other means (e.g., by e-mail or telephone).

    You are not obliged to provide us with your personal data when using our social media sites. However, if you do not provide us with your information, it may not be possible for you to leave comments, send us messages, share posts or like them.

    The processing of your personal data for the use of electronic invoice processing is also not prescribed by law or contract. However, if you do not provide us with the required data, you cannot use our electronic invoice processing.

    14. Automated decisions, including profiling, in the sense of Article 22 GDPR

    Your personal data will not be used for automated decision-making, including profiling, pursuant to Article 22 Para. 1 and 4 GDPR. 

    15. Data security

    We take technical and organizational security measures to protect your personal data against unintentional or unlawful deletion, editing or loss, as well as any unauthorized passing on to third parties or unauthorized access.

    16. Validity of this privacy policy for other Schuler companies

    This If and to the extent that you should enter into or are already in correspondence with a company of the Schuler Group other than Schuler Group GmbH (hereinafter referred to as “other Schuler company”; a current list of all Group companies is available here), this other Schuler company will, as a general rule, process your data as a separate data controller. Should the other Schuler company reference this privacy policy (e.g., in an e-mail signature), the statements contained in this privacy policy shall also apply to the other Schuler company accordingly, insofar as the statements contained in this privacy policy do not solely concern the provision and functions of this website and of our social media pages. Therefore, in particular that privacy policy information which can be found in the following Sections shall apply accordingly in relation to other Schuler companies who reference this privacy policy: Section 2, Section 3 (not including letters a, d and g), Sections 4 through 7 (not including Section 7 (b) letters aa, dd and hh), Sections 9 through 11, and Sections 13 through 17. You can find the name of and contact information for the company in the relevant e-mail signature or, for correspondence by mail (such as information about an event), in the sender information contained in the relevant document.

    17. Status and modifications of this data protection declaration 

    This data protection declaration corresponds with the status named below. We reserve the right to modify this data protection declaration. We therefore request that you regularly check the data protection declaration in order to remained informed of any changes.

     

    Status: May 2019