Menu
We take the protection of your personal data very seriously. We handle your personal data confidentially and in compliance with the data protection regulations and this privacy policy.
With the following we would like to inform you about the processing of your personal data:
I. General privacy policy;
II. Special provisions for our website;
III. Special provisions for contract partners;
IV. Special provisions for applicants.
The provisions under Section I. apply to all processing operations.
1. Who is responsible for the processing and use of my data and who can I contact?
The controller is:
Hägele GmbH
Am Niederfeld 13
73614 Schorndorf
Phone: +49 7181 96988 700
E-mail: info@cleanfix.org
You have the right:
to request information about your personal data processed by us as per Art. 15 GDPR. Specifically, you can request information regarding the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as regarding the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
to demand the immediate correction of incorrect or incomplete personal data stored by us as per Art. 16 GDPR;
to demand the erasure of your personal data stored by us as per Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
to demand the restriction of the processing of your personal data as per Art. 18 GDPR if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing as per Art. 21 GDPR;
to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller as per Art. 20 GDPR;
to withdraw your consent once given to us at any time as per Art. 7 (3) GDPR. As a consequence, we may no longer continue the data processing that was based on this consent in the future and
to lodge a complaint with a regulatory authority as per Art. 77 GDPR. You can generally contact the regulatory authority of your usual place of residence or workplace or our registered office.
If you wish to exercise one of the above rights, you can contact us directly at any time (see above for contact options).
Furthermore, you have the right to lodge a complaint with a regulatory authority if you believe that the processing of your personal data violates applicable privacy laws.
The regulatory authority responsible for us is the
Data Protection and Freedom of Information Commissioner of the State of Baden-Württemberg
Königstrasse 10 a
70173 Stuttgart
Phone: +49 711 615541-0
E-mail: poststelle@lfdi.bwl.de
Web: www.baden-wuerttemberg.datenschutz.de
Many types of data processing are only possible with your express consent. You can withdraw your consent at any time. The legality of the data processing carried out until the withdrawal remains unaffected by the withdrawal.
Insofar as data processing is carried out in accordance with Art. 6 (1) lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The legal basis on which processing is based can be found in this privacy policy. If you file an objection, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or process legal claims (withdrawal as per Art. 21 (1) GDPR).
In case your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you file an objection, your personal data will no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 (2) GDPR).
Unless a more specific retention period has been specified in this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you submit a justified request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, deletion will take place after these reasons no longer apply.
As long as you have consented to data processing, we process your personal data in accordance with Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, insofar as special categories of data are processed as per Art. 9 (1) GDPR. In the case of express consent to the transfer of personal data to third countries, data processing is also carried out in accordance with Art. 49 (1) lit. a GDPR. As long as you have consented to the storage of cookies or access to information in your end device (e.g., via device fingerprinting), data processing is also carried out in accordance with Section 25 (1) TTDSG. The consent can be withdrawn at any time. We will process your data on the basis of Art. 6 (1) lit. b GDPR if your data is required to fulfill the contract or to carry out pre-contractual measures. Furthermore, we process your data if this is necessary to fulfill a legal obligation in accordance with Art. 6 (1) lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest as per Art. 6 (1) lit. f GDPR. The following paragraphs of this privacy policy provide information regarding the relevant legal basis in each individual case.
Some of the tools we utilize are from companies based in the USA or other third countries that are not secure under privacy law. When these tools are active, your personal data may be transferred to these third countries and processed there. Please note that no level of data protection comparable to that in the EU can be guaranteed in these countries. For instance, US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. Therefore, it cannot be ruled out that US authorities (e.g., intelligence agencies) may process, analyze and permanently store your data on US servers for surveillance purposes. Such processing activities are beyond our control.
This privacy policy is currently valid and was last updated in February 2024.
Due to the further development of our website and offers on it or due to changes in legal or official requirements, it may become necessary to amend this privacy policy. You can access and print out the current privacy policy at any time on the website under Privacy Policy.
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. You will find detailed information regarding data protection in our privacy policy provided below this text.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information regarding the controller” in this privacy policy.
How do we collect your data?
Firstly, your data is collected when you provide it to us. This could, for instance, be data that you enter in a contact form. Other data is collected automatically or with your consent by our IT systems when you visit the website. This is mainly technical data (e.g., internet browser, operating system or time of the page access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure that the website can be provided without errors. Further data can be used to analyze your user behavior.
Analysis tools and third-party tools
Your surfing behavior can be statistically evaluated when you visit this website. This is mainly done with so-called analysis programs. Please refer to the following privacy policy for detailed information regarding these analysis programs.
We host the content of our website with the following provider:
External hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the hoster(s). Such data may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated regarding a website.
External hosting is performed for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of secure, fast and efficient provision of our online offering by a professional provider (Art. 6 (1) lit. f GDPR). Insofar as consent has been requested, processing is carried out exclusively in accordance with Art. 6 (1) lit. a GDPR and Section 25 (1) TTDSG, provided that the consent includes the storage of cookies or access to information in the user's terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.
Our host(s) shall only process your data to the extent that this is necessary to fulfill its performance obligations and follow our instructions with regard to this data.
We use the following hoster(s):
Iconics Informations- und Computersysteme GmbH
Gartenstaße 34
73660 Urbach
Germany
Phone: +49 7181 98340–0
E-mail: info@iconics.de
Contract processing
We have concluded a data processing agreement (DPA) regarding the use of the above-mentioned service. It is an agreement required by privacy law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
SSL and TLS encryption
This website utilizes SSL or TLS encryption for security reasons and to protect the transfer of confidential content, such as orders or inquiries that you send to us as the website operator. An encrypted connection can be recognized by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Cookies
Our Internet pages utilize so-called “cookies”. Cookies are small data packets and do not cause any damage to your end device. They are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser. Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g., cookies for processing payment services).
Cookies have a variety of functions. A number of cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes. Any cookies that are required to carry out the electronic communication process, to provide certain functions that you have requested (e.g., for the shopping cart function) or to optimize the website (e.g., cookies to measure the web audience) (necessary cookies) are stored in accordance with Art. 6 (1) lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the error-free and optimized provision of its services. In cases where consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 (1) lit. a GDPR and Section 25 (1) TTDSG); consent can be withdrawn at any time.
You can configure your browser in such a way that it informs you regarding the setting of cookies and only allows cookies in individual cases, excludes the acceptance of cookies for certain cases or in general and activates the automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website.
Please refer to this privacy policy to find out which cookies and services are used on this website.
Contact form
In case you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of any follow-up questions. We will not disclose this data without your consent.
This data is processed in accordance with Art. 6 (1) lit. b GDPR if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if this has been requested; the consent can be withdrawn at any time.
The data you enter in the contact form will be stored by us until you ask us to delete it, withdraw your consent to storage or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions, in particular retention periods, remain unaffected.
Inquiry by e-mail, telephone or fax
By contacting us by e-mail, telephone or fax, your inquiry including all personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not disclose this data without your consent.
This data is processed in accordance with Art. 6 (1) lit. b GDPR if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if this has been requested; the consent can be withdrawn at any time.
The data you enter in the contact form will be stored by us until you ask us to delete it, withdraw your consent to storage or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions, in particular statutory retention periods, remain unaffected.
Google Analytics 4
This website uses the analysis tool Google Analytics 4 to statistically analyze visitor access. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We can analyze the use of our website with Google Analytics 4. For this purpose, Google Analytics 4 records log files (IP address, referrer, browser used, origin of the user, search engine used) and activities performed by website visitors on the page (e.g., clicks and views).
The use of this analysis tool is in accordance with Art. 6 (1) lit. f GDPR. We have a legitimate interest in the anonymized analysis of user behavior in order to optimize both our website and our advertising. Insofar as consent has been requested, processing is carried out exclusively in accordance with Art. 6 (1) lit. a GDPR and Section 25 (1) TTDSG, provided that the consent includes the storage of cookies or access to information in the user's terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.
YouTube with extended data privacy
This website embeds videos from the YouTube website. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in extended data privacy mode. According to YouTube, this mode means that YouTube does not store any information regarding visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data privacy mode. YouTube establishes a connection to the Google DoubleClick network regardless of whether you are watching a video.
As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. In the process, the YouTube server is informed which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to associate your surfing behavior directly with your personal profile. This can be prevented by logging out of your YouTube account.
Furthermore, YouTube may store various cookies on your end device after starting a video or use comparable recognition technologies (e.g., device fingerprinting). This allows YouTube to receive information regarding visitors to this website. This information is used, e.g., to record video statistics, improve user-friendliness and prevent fraud attempts.
If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no influence.
Using YouTube is in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. Insofar as consent has been requested, processing is carried out exclusively in accordance with Art. 6 (1) lit. a GDPR and Section 25 (1) TTDSG, provided that the consent includes the storage of cookies or access to information in the user's terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.
Please refer to YouTube's privacy policy for more information regarding data protection:
https://policies.google.com/privacy?hl=en-us.
1. What data do we use and where do we get this data from?
We generally process personal data (legal definition in Art. 4 No. 1 GDPR) that we receive from you as part of our business initiation or ongoing business relationship (so-called direct collection). In addition, we process if necessary personal data that we have received from third parties, e.g., credit agencies or from publicly accessible sources (e.g., commercial register, press, media, profession-specific social networks, so-called data collection from third parties). Furthermore, we process your personal data if you have given us your consent to do so.
Relevant personal data are master data such as first name, surname, address and communication data (e.g., telephone number, mobile phone number, e-mail address). Furthermore, pre-contractual initiation data, contract and order data, delivery and supply data and creditworthiness data may also be personal data that we process.
2. What is the purpose of processing your data and what is the legal basis for this?
We process personal data in compliance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and all other relevant laws:
a) To fulfill contractual obligations (Art. 6 (1b) GDPR):
The processing of personal data (Art. 4 No. 2 GDPR) is carried out, for instance, to process orders, offers, invoices and other (pre-)contractual matters. Primarily, the purposes of the processing are determined by the services to be provided by us for you.
b) Within the scope of the consideration of interests (Art. 6 (1f) GDPR):
If necessary, we also process your personal data to protect our legitimate interests or those of third parties.
This may be the case, for instance, in order to:
In cases where we process your data to protect legitimate interests, you can object to this processing if your particular situation gives rise to reasons that speak against data processing.
Right to object to direct marketing: You have the right to object to the processing of your personal data for direct marketing purposes (see above).
c) With your consent (Art. 6 (1a) GDPR):
Insofar as we have your consent to the processing of personal data for specific purposes (e.g., receipt of a newsletter), the lawfulness of this processing is based on your consent. Any consent given can be withdrawn at any time. It should be noted that the withdrawal is effective going forward. Any processing carried out before this withdrawal is not affected by this. Please refer to the declaration of consent for more specific information on withdrawal in connection with submitting a declaration of consent.
d) Processing due to legal requirements (Art. 6 (1c) GDPR):
We process your personal data if we are legally obliged to do so. This includes, for instance, retention periods under commercial and tax law and, if applicable, information to authorities.
3. To whom is the data transferred/forwarded (categories of recipients)?
a) Data processing within our company and within our Group:
Provisions for data processing have been bundled in our company. These are handled centrally by specialized divisions. In this context, your data may be processed by a specialized department in our company, for instance for the processing of your specialist inquiry or invoice processing.
Within our Group, your personal data will be transferred to our subsidiaries and/or to us as the parent company if they perform data processing tasks centrally for the companies affiliated as a group or if data exchange is required for certain tasks.
b) External contractors and service providers (processors):
Sometimes we use external contractors and service providers to perform our tasks and fulfill contracts. This can include IT service providers, for instance. We conclude corresponding contracts with these so-called processors in compliance with Art. 28 GDPR to protect your data.
c) External recipients in third countries:
A transfer of data to third countries (countries outside the EU and the European Economic Area) only takes place insofar as this is necessary for the establishment, implementation or termination of the business relationship with you and only in compliance with the data protection requirements prescribed for this purpose.
d) Other recipients:
We transfer your personal data to third parties, such as law enforcement authorities and courts, insofar as we are legally obliged to do so.
4. How long do we store your personal data?
To the extent necessary, we process and store your personal data for the duration of our business relationship. This also includes the initiation and execution of a contract or order. Furthermore, we are subject to various retention obligations arising from the German Commercial Code (6 years) or tax laws (10 years), among others. Ultimately, the retention period is also determined by the statutory limitation periods, which are usually 3 years but can also be up to 30 years.
5. Are you obliged to provide us with your personal data?
In the context of a business initiation or ongoing business relationship with us, you generally only have to provide the data that we need for compliance with the establishment, implementation or termination of this business relationship. If you do not provide the necessary data, we may have to refuse to establish a business relationship or may not be able to do so or may even have to terminate such a relationship.
Nature of the data, purpose of data processing and legal basis for processing
We process the personal data we receive from you as part of your application. This includes name, address, e-mail address, telephone number and proof of performance, such as certificates and assessments. Your application may also contain special categories of personal data within the meaning of Art. 9 GDPR, either directly, i.e., through the information you provide, or indirectly, i.e., as these result from a photo or certificates.
Furthermore, we may process personal data that you have made publicly available in a professional social network (LinkedIn, XING), for instance.
The purpose of our processing is to review your application in the application process and to decide whether we would like to offer you employment with us. The legal basis for processing for the stated purposes is Art. 6 (1b) GDPR in conjunction with Section 26 BDSG.
For any other purposes, for instance to check whether you are also eligible for other positions in our company, we will only process your data if you have given us your consent to do so as per Art. 6 (1a) GDPR or Art. 7 GDPR in conjunction with Section 26 (2) BDSG.
BITE applicant management
In addition, the applicant platform "BITE" of the provider BITE GmbH (hereinafter "BITE"), Magirus-Deutz-Straße 12, 89077 Ulm, is integrated on our website to handle our application process. As soon as you click on a job offer on our website, you will be redirected via your browser to the BITE platform, through which Hägele GmbH publishes its job advertisements and through which your personal data will be processed in the event of an application on your part. From a data protection point of view, we, Hägele GmbH, remain responsible to you. We have concluded a contract with BITE GmbH for commissioned data processing in accordance with Art. 28 GDPR.
In the respective job offer on the BITE platform, you have the option of uploading your application documents as part of the online application. As a result, you will be registered with us (in BITE) as an applicant and your application documents will be stored and processed. Alternatively, you have the option of applying by e-mail. If this is the case, we will also register you as an applicant in BITE and store and process your application documents in BITE. If you apply to us in paper form, we will scan your application documents and also record you as an applicant in BITE and save and process your application documents in BITE.
You can find more information about BITE here: https://www.b-ite.de/legal-notice.html.
Disclosure of your applicant data
Within our company, your data will only be disclosed to the departments that process your application.
Furthermore, processors employed by us, such as IT service providers, may indirectly gain access to your data.
Retention period of your applicant data
Your personal data will generally be processed by us until the position is filled and deleted approx. 4 months thereafter, unless further storage is required due to legal disputes and/or you have not given us your consent to store your data for longer.
In case the position is filled with you, you will be informed separately regarding the further processing of your personal data.