Data protection information
for visitors to the website

Data protection information for visitors to the website

We, the proFagus GmbH, Uslarer Straße 30, 37194 Bodenfelde, Germany, phone: +49 5572-9440, E-Mail: info@profagus.deset out below how we process your data on this website. Should you have any questions relating to data protection, our data protection officer would be happy to respond at profagus@dsb-moers.de. Further contact details can be found at www.dsb-moers.de.

Purpose, legal basis, categories of recipients, storage period for the data processing

Purpose: Presentation of the company and provision of services and/or sale of products, as well as communication through the Internet

The purpose of data processing on this website is to provide information about the products and services of our company, combined with the opportunity for users to be able to make contact with the appropriate contact person in house.

In providing our website, we comply with the requirements of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (FDPA), the German Digital Services Act (DDG) and the Telecommunications Digital Services Data Protection Act (TDDDG). We process personal data in particular in accordance with the following legal bases:

  • 6 para. 1 lit. a GDPR for the processing of personal data with the consent of the data subject.
  • 6 para. 1 lit. b GDPR for the processing of personal data necessary for the performance of a contract with the data subject, as well as for taking appropriate steps prior to entering into a contract.
  • 6 para. 1 lit. c GDPR for the processing necessary for compliance with a legal obligation to which we are subject in accordance with applicable EU law or in accordance with the applicable law of a country in which the GDPR is applicable in whole or in part.
  • 6 para. 6 lit. f GDPR for the processing of personal data necessary to protect the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Legitimate interests are, in particular, our commercial interest to be able to provide our website, the security of information, the enforcement of our own legal claims and the compliance with further legislation.

To this end, in the context of service provision, we use service providers that have been separately bound to maintain confidentiality and to protect data. This category of recipients includes IT service providers, hosting providers, cloud provider, data destruction service providers and external consultants. Data shall only be disclosed to a third party in the existence of overriding statutory provisions. Data is transferred to third countries as described below in compliance with the requirements of Art. 44 et seq. GDPR.

When you visit the website, a connection is established with your browser. The information collected, which is listed below, is stored in temporary system files and recorded automatically: IP address of your device, data and time of access, name and URL of files accessed, website from which access is initiated or from which you are directed to our site (referrer URL), browser used and, where applicable, the operating system of your device, as well as the name of your provider.

The data specified is processed by us for the purpose of seamlessly establishing a connection and for system security. The connection data created is automatically deleted is and is not retained for more than seven days. If the website is used improperly, log files, which need to be retained for evidence purposes, are saved until the incident is clarified.

Use of storage technologies on your device

This website uses storage technologies (“cookies” and/or your browser’s memory) to enable storage of your use of the website. The information generated by cookies about your usage behaviour on this website is used to evaluate visitor behaviour on the website and to improve how we provide information.

If the use of storage technologies on your end device is necessary for the functionality of the website, we use this technology on the basis of our legitimate interests in improving our information offering and ensuring the functionality of the website and information security on the website. The legal basis for data processing is then Art. 6 para. 1 lit. f GDPR and Section 25 para. 2 no. 2 TDDDG.

If cookies are used that are not necessary for the operation of the website, we ask for your consent in advance. The legal basis for data processing is then Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG (consent).

The cookies are deleted after one year at the latest. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. Data collection is anonymized; the data collected cannot be traced back to you personally.

Elementor

This website uses Elementor (Elementor Ltd., Rehov Tuval 40, 5252247 Ramat Gan, Israel) together with the WordPress theme used. Elementor enables us to customise the website in real time and therefore make adjustments or implement new content as quickly as possible. Elementor only stores cookies locally in the browser used. No data is passed on to third parties.

Elementor is used for the design and administration of the website and thus purely for the functionality of the website on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interests) in conjunction with § 25 Abs. 2 Nr. 2 TDDDG. Further information on the use of Elementor can be found at: https://elementor.com/about/privacy/.

Polylang plugin

We use the Polylang plug-in on our website to save your language preferences. The plug-in sets cookies to display the content of our website to visitors in a preferred language. The plug-in is purely for the functionality of the website and is used on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interests) in conjunction with § 25 para. 2 no. 2 TDDDG used.

Wordfence

We use the Wordfence plugin on our website, provided by Defiant, 800 5th Ave Ste 4100, Seattle, WA 98104, USA. This plugin helps protect our website from security threats. It filters website traffic and blocks suspicious requests. When using the plugin, cookies are set. You can find information about the cookies that are set at https://www.wordfence.com/help/general-data-protection-regulation/.

To prevent the transfer of your IP address to the USA, we have deactivated the “Participate in the Real-Time Wordfence Security Network” function.

The legal basis for using Wordfence is our legal obligation to ensure the security of our website in accordance with Article 6 para. 1 lit. c GDPR in conjunction with Article 32 GDPR. Additionally, improving the security of our website is in our legitimate interest under Article 6 para. 1 lit. f GDPR. The use of cookies is based on Section 25 para. 2 (2) of the TDDDG.

Further information on data protection at Wordfence can be found in Defiant’s privacy policy at https://www.wordfence.com/privacy-policy/.

Instagram

We integrate functions and content from Instagram, a service of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, on our website. The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you can revoke at any time with effect for the future via our privacy settings or via your browser. Users can share the displayed content within Instagram. Instagram can attribute the access to the content to the user profiles at Instagram, provided that the user is logged in. Data transfer to the USA only occurs if the requirements of Art. 44 et seq. GDPR are fulfilled. For more information, please visit Instagram’s privacy policy: http://instagram.com/about/legal/privacy/.

Customer account / download center

When you use our Download Center, we process your data for the purpose of fulfilling the contract. The legal basis is Art. 6 para. 1 lit b. GDPR. The data will only be passed on to third parties if it is necessary for the purpose of the contract. The data will be deleted after the expiry of the tax periods of 10 years after the annual financial statements and the end of the calendar year. The data in the user account will be stored as long as the customer account exists.

Without correct information from you, the use of our download center is not possible.

Your right to information, rectification, deletion, object and data portability

You may avail yourself of your right to information, rectification and deletion of data at any time. Simply contact us using one of the methods described above. Should you require data to be deleted, which we are still legally obligated to retain, access to your data will be restricted (blocked). The same applies to an appeal. You may avail yourself of your right to data portability if the recipient and ourselves have the technical means.

Right of appeal

You have the option at any time to lodge an appeal with a data protection supervisory authority.

Data security / encryption

This website uses “Hypertext Transfer Protocol Secure” (https). The connection between your browser and our server is encrypted.

Currency of and changes to this privacy policy

We reserve the right to change the content of this privacy policy at any time. This is usually done if the services used are subject to further development or adaptation. You can view the current privacy policy on our website.

Date of the Privacy Policy: 02.12.2024

Further data protection information

Purpose of the data processing 
We process and use your data within the scope of your visit to our website for the purpose of information security. This not only applies to data regarding you that are collected, processed, and used when you visit our site. This represents a legitimate interest as defined in Art. 6 para. 1 sentence 1 lit. f GDPR.

Categories of recipients 
Within the scope of providing the service, we employ service companies who are obliged to maintain confidentiality and data protection for special areas where access to personal data cannot be excluded. These categories of recipients are IT service companies and data destruction service providers. Data are only forwarded to authorities if priority legal regulations exist. Data are not transferred to third countries.

Duration of the storage and deletion of data 
Your data are stored for the duration of the processing for your visit and are deleted after the purpose is removed; if legal requirements exist, your data are kept until the end of these requirements and are then deleted.

Your right to information, rectification, erasure, object, and data portability 
You can exercise your right to information, rectification, and erasure of data at any time. Simply contact us in the ways described above. If you would like data erasure but are still legally obliged to keep data, access to your data is restricted. The same applies in case of an objection. You can exercise your right to data portability provided the recipient and we have the necessary technical capabilities.

Right to complain 
You have the right to submit a complaint to a data protection supervisory authority.

Duty to provide 
Without correct information from you, it is not possible for you to visit our company.

Purpose of the data processing 
The purpose of the data processing is the initiation of employment relationships on the basis of Art. 6 para. 1 lit. b, Art. 88 para. 1 GDPR in conjunction with § 26 BDSG. Data are not transferred to other companies.

Categories of recipients 
Data from job applicants are not passed on to third parties. Since we employ service companies separately obliged to maintain confidentiality and data protection for our information technology, access to personal data within this scope cannot be ruled out. Categories of recipients outside the management and HR management are service providers for hosting, support and operation of this website, and external consultants. Data are only forwarded to authorities if priority legal regulations exist. Data are not transferred to third countries.

Duration of the storage and deletion of data 
Your data are stored for the duration of the application process; if you start an employment relationship with us, your application are stored by us for the duration of your employment relationship. If the decision regarding your application leads to a rejection, we keep your data based on the law for a further 6 months and then delete them; in case of unsolicited job applications or if we have your consent to keep the data for longer for potential future employment, we keep your data until you withdraw your consent or after two years at the latest.

Your right to information, rectification, erasure, object, and data portability 
You can exercise your right to information, rectification, and erasure of data at any time. To do so, contact us in the ways described above. If you would like data erasure but are still legally obliged to keep data, access to your data is restricted (blocked). The same applies in case of an objection. You can exercise your right to data portability provided the recipient and we have the necessary technical capabilities.

Right to complain 
You have the right to submit a complaint to a data protection supervisory authority.

Duty to provide 
Without correct information from you, it is not possible to implement the job application process. This can result in your application not being able to be considered in a current process.

Purpose of the data processing 
If you contact us and no contract initiation exists, we process your data on the basis of our legitimate interests according to Art. 6 para. 1 lit. f GDPR to arrange our business operations. We make sure that, without an overriding legitimate interest, for example in the agreeing of data protection topics with suppliers of our customers, we do not process any data.

Categories of recipients 
Within the scope of providing the service, we employ service companies who are obliged to maintain confidentiality and data protection for special areas where access to personal data cannot be excluded. These categories of recipients are hosting providers, IT service companies, data destruction service providers and consultants (e.g., data protection advice). Data are only forwarded to authorities if priority legal regulations exist. Data are not transferred to third countries.

Duration of the storage and deletion of data 
Your data are stored for the duration of the processing and are deleted after the purpose is removed; if legal requirements exist, your data are kept until the end of these requirements and are then deleted.

Your right to information, rectification, erasure, object, and data portability 
You can exercise your right to information, rectification, and erasure of data at any time. Simply contact us in the ways described above. If you would like data erasure but are still legally obliged to keep data, access to your data is restricted. The same applies in case of an objection. You can exercise your right to data portability provided the recipient and we have the necessary technical capabilities.

Right to complain 
You have the right to submit a complaint to a data protection supervisory authority.

Duty to provide 
Without correct information from you, it is not possible to conclude a contract and correctly implement a contract.

Purpose of the data processing 
The purpose of the data processing is the initiation of a contract and contract implementation on the basis of Art. 6 para. 1 lit. b GDPR.

Categories of recipients
Within the scope of providing the service, we employ service companies who are obliged to maintain confidentiality and data protection for special areas where access to personal data cannot be excluded. These categories of recipients are IT service providers, data destruction service providers and consultants (e.g., tax consultants, data protection advice). Data are only forwarded to authorities if priority legal regulations exist. Data are not transferred to third countries.

Duration of the storage and deletion of data 
Your data are stored for the duration of the contract implementation; after the end of the contract relationship we are obliged to keep the tax-relevant documents for 10 years after the annual accounts and calendar year end. The data are then deleted.

Your right to information, rectification, erasure, object, and data portability 
You can exercise your right to information, rectification, and erasure of data at any time. Simply contact us in the ways described above. If you would like data erasure but are still legally obliged to keep data, access to your data is restricted (blocked). The same applies in case of an objection. You can exercise your right to data portability provided the recipient and we have the necessary technical capabilities.

Right to complain 
You have the right to submit a complaint to a data protection supervisory authority.

Duty to provide 
Without correct information from you, it is not possible to conclude a contract.

Purpose of the data processing 
The purpose of the data processing is the initiation of a contract and contract implementation on the basis of Art. 6 para. 1 lit. b GDPR.

Categories of recipients 
Within the scope of providing the service, we employ service companies who are obliged to maintain confidentiality and data protection for special areas where access to personal data cannot be excluded. These categories of recipients are IT service companies, data destruction service providers and consultants (e.g., tax consultants, data protection advice). Data are only forwarded to authorities if priority legal regulations exist. Data are not transferred to third countries.

Duration of the storage and deletion of data 
Your data are stored for the duration of the contract implementation; after the end of the contract relationship we are obliged to keep the tax-relevant documents for 10 years after the annual accounts and calendar year end. The data are then deleted.

Your right to information, rectification, erasure, object, and data portability 
You can exercise your right to information, rectification, and erasure of data at any time. Simply contact us in the ways described above. If you would like data erasure but are still legally obliged to keep data, access to your data is restricted (blocked). The same applies in case of an objection. You can exercise your right to data portability provided the recipient and we have the necessary technical capabilities.

Right to complain 
You have the right to submit a complaint to a data protection supervisory authority.

Duty to provide 
Without correct information from you, it is not possible to conclude a contract and correctly implement a contract.

Skip to content