4. Here you will find information about the processing of data of our customers and business partners.
Customer data/interested parties
Purpose of processing
We process data that we receive in the course of handling our business relationship with you. We receive this data directly from you. Either in the case of enquiries from interested parties and contacts, the placing of orders or order processing (see point "Information on data collection and processing").
Legal basis: The collection and processing of data is necessary for the performance of the contract and is based on Art. 6 (1) (b) G. The use for direct advertising is based on Art. 6 para. 1 (f) GDPR. It is our legitimate interest to draw your attention to special offers by means of direct advertising. The data will not be passed on to third parties unless required by law, e.g. to the tax office within the framework of tax laws. The data will be deleted as soon as they are no longer required for the purpose of their processing or after expiry of the statutory retention periods (such as accounting records relevant under tax and commercial law: 10 years; commercial and business letters: 6 years; records of suppliers, type, quantity, purchase, delivery: 3 years).
You have the right to object to the use of your data for the purpose of direct marketing at any time. In addition, you are entitled to request information about the data we have stored about you, as well as to request that the data be corrected if it is incorrect or deleted if it has been stored inappropriately. You also have the right to lodge a complaint with a supervisory authority (see "Right to lodge a complaint").
Duration of data storage
After the contractually owed service has been provided, your personal data will be stored for 2 years for the purpose of the legal warranty, for 5 years for the purpose of fulfilling the warranty conditions, for 5 years for the purpose of carrying out follow-up orders (requested at the time of the conclusion of the contract or at a later date) and for 10 years for tax law purposes.
Deletion of data
Your personal data will be deleted at the latest after the expiry of the aforementioned periods.
Suppliers
Purpose of processing
We process data that we receive in the course of processing our business relationship with you. We receive the data directly from you when placing an order or processing an order (see item "Information on data collection and processing").
Legal basis: The collection and processing of data is necessary for the performance of the contract and is based on Art. 6 para. 1 (b) GDPR. The data is not passed on to third parties unless required by law, such as to the tax office within the framework of tax laws. The data will be deleted as soon as they are no longer required for the purpose of their processing or after expiry of the statutory retention periods (such as accounting records relevant under tax and commercial law: 10 years; commercial and business letters: 6 years; records of suppliers, type, quantity, purchase, delivery: 3 years).
You are entitled to request information about the data we have stored about you, as well as to request correction of the data if it is incorrect or deletion of the data if it has been stored inappropriately. You also have the right to lodge a complaint with a supervisory authority (see point "Right of complaint").
Applications
Purpose of the processing
If you apply to us on the basis of a job advertisement, we will collect your personal data such as first name, surname, address, telephone number, e-mail address, attachments (covering letter, CV, certificates, photo) and store them for the duration of the selection procedure.
Your data will only be used by authorised persons of the personnel department or the management for processing within the scope of the selection procedure. Your personal data will not be passed on to third parties.
If the specific position for which you are applying has already been filled by someone else, but your profile makes you eligible for a later position or for a position in a partner or subsidiary company, we will obtain your express consent before further storing or forwarding your application, unless you have already consented to such storage or forwarding in your application.
If you send us a speculative application using our general contact e-mail address, the content of your application e-mail may be viewed by unauthorised personnel. There is a requirement that the application documents - unopened - are forwarded immediately to the personnel department and the incoming e-mail is deleted. If you would like to exclude this, please contact us by telephone before submitting your unsolicited application so that we can provide you with the contact details of the correct contact person.
The legal basis is Art. 6 para. 1 (b) GDPR, for the processing of pre-contractual measures.
Unless you inform us otherwise, the data will be deleted 6 months after completion of the application process, or destroyed in the case of postal applications. Due to the long application and selection periods for trainees, we store their data in Germany for up to 18 months.
You have the following rights if the respective legal requirements are met: the right to information about your data stored by us; correction, deletion, restriction of the processing of your data or objection to the processing, as well as the right to data portability. Furthermore, you can of course request the deletion or destruction of all your application documents at any time by sending us an e-mail to info@werning.com.
Events and workshops (on-site, in-house and virtual)
Purpose of the processing
Registration for events and workshops can be made via a registration form. When using our registration form, we collect and store the first and last name, the company and the e-mail address. If registration is made by e-mail, we collect and store the e-mail address and the data contained in the e-mail.
We use this personal data exclusively for event and workshop purposes. This enables us to confirm participation, to exchange information in advance, to answer questions, if necessary to create name tags and lists of participants or to subsequently send documentation.
When using video conferencing systems in the context of online workshops or video consultations, we use service providers in the context of commissioned data processing.
To join an online workshop or video consultation, you must provide a name. You can also enter a pseudonym. It is not necessary to enter an e-mail address. Your details will be stored in our administration area.
If you activate access to your microphone or video camera, sound and video data will be processed and played back. You can deactivate access at any time using the buttons with the respective symbols. Participation is also possible if you deactivate access. It is also possible to exchange text messages in a group chat. These messages may be visible to all participants.
If you select the function "Transfer screen", your displayed screen content will be shown to all other participants. You should therefore ensure that no sensitive data is displayed on your screen before using the function. You can deactivate the function at any time using the corresponding button.
If the online workshop or video counselling is being recorded, you will recognise this by a red symbol in the screen area and will be informed of this beforehand. In this case, all video and audio data will be stored by us.
Note: If you visit the websites of the respective provider or install the provider's application on your device, the processing of personal data is governed exclusively by the provider's data protection provisions.
The legal basis for the processing is Art. 6 para. 1 (f) GDPR. Our legitimate interest is the effective implementation of online workshop and video consultations. In the context of an existing or prospective contractual relationship, Art. 6 (1) (b) GDPR is also the legal basis for the processing. A recording is only made if we have informed you of this in advance and you have consented to the recording. In this case, the legal basis is Art. 6 para. 1 (a) GDPR.
The deletion of the data takes place after expiry of the applicable statutory retention obligations. If this is not the case, the data will be deleted when the purpose of the storage no longer applies.
Information on the right to deletion and information can be found under "Data subject rights".
Collection and processing of personal data when participating in surveys with Microsoft Forms
Purpose of processing
c-trace uses the tool "Microsoft Forms" to conduct surveys in forms, e.g. as part of the customer satisfaction analysis for ISO 9001.
Microsoft Forms is a service of Microsoft Corporation. The processing is carried out on behalf of c-trace by
Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
D18 P521
Ireland
Please note that this privacy policy only informs you about the processing of your personal data by c-trace when you use a Microsoft Forms survey. If you require information about the processing of your personal data by Microsoft, please view the corresponding declaration at Microsoft. You can find further information from Microsoft on this topic here:
Microsoft Privacy Policy - Microsoft Privacy
Microsoft Service Agreement
Security and data protection in Microsoft Forms
When using Microsoft Forms, various types of data are processed. The scope of the data also depends on the information you provide when participating in a vote or survey in Forms, especially if questions are formulated "openly".
The following personal data is subject to processing:
- IP address
- User name, display name, email address,
- Profile picture (optional if stored in Microsoft 365)
- Preferred language
- Status (optional if stored in Microsoft 365)
- Date and time the questionnaire was opened
- Date and time the answer was sent
Information in the survey: This information is survey-specific. The user decides which personal data is transmitted when entering free text in answer fields.
Legal basis: The legal basis for this processing depends on the respective context in which the survey is conducted. It may be necessary to fulfill the contract (Art. 6 Para. 1 lit. b) GDPR) or to protect the legitimate interests of us or third parties (Art. 6 Para. 1 lit. f) GDPR). For example, to ensure IT security and IT operations.
If personal data of employees is processed, Art. 88 Para. 1 GDPR in conjunction with Section 26 Para. 1 Sentence 1 BDSG trace provides a legal basis for the implementation, exercise and fulfillment of the employment relationship. In all other cases, the legal basis for the implementation to protect legitimate interests is Art. 6 Para. 1 lit. f) GDPR.
c-trace's interest lies in providing information on service, offer and product improvements as well as improving customer and employee satisfaction.
Participation in surveys and/or votes is generally voluntary.
Information on the right to erasure and information can be found under “Data Subject Rights”.
