Privacy Policy

Thank you for visiting our website. Compliance with data protection regulations is of particular importance to us. The purpose of this privacy policy is to inform you as a user of the website about the nature, scope, and purpose of the processing of personal data and the rights you have as a data subject in accordance with Article 4 No. 1 of the General Data Protection Regulation (GDPR).

1. Responsible Entity

This website and the services offered are operated by:

Schäfer Werkzeug- und Sondermaschinenbau GmbH
Dr.-Alfred-Weckesser-Straße 6
76669 Bad Schönborn

Phone: +49 (0)7253 9421 0
E-Mail: info@schaefer.biz

2. Data Protection Officer

We have appointed a data protection officer.

www.mein-datenschutzbeauftragter.de

Mr. Philipp Herold
Hafenstraße 1a
23568 Lübeck
E-Mail: privacy@schaefer.biz

General Information

We have designed the development of the website to collect as little data as possible from you. We always ensure that your personal data is processed only in accordance with a legal basis or with your consent. We comply with the regulations of the General Data Protection Regulation (GDPR) that has been in effect since May 25, 2018, and the applicable national regulations, such as the Federal Data Protection Act, the Telecommunications-Telemedia Data Protection Act, or other specific data protection laws.

3. Purpose of Use and Legal Basis for Processing Personal Data

We always process your personal data for specific purposes.

In summary, we process your personal data for the following purposes:

  • To address your inquiries when you contact us (e.g., email address, first name, last name);
  • To provide you with an offer based on your request (offer form);
  • For the technical implementation of our website and to provide you with our information on this website (e.g., IP address, cookies, browser information);
  • To send a newsletter with information about our services and news (e.g., name, email address);
  • To receive and process your application for one of our job offers.

Regarding the legal basis for processing your personal data:

Personal data that is necessary for the establishment, execution, or processing of our service offerings (contract processing) is processed on the legal basis of Article 6 (1) (b) GDPR. If we obtain your consent for the processing of your personal data, the consent according to Article 6 (1) (a) GDPR serves as the legal basis for data processing. Data processing is also permissible if we process your data to safeguard our legitimate interests and your interests or fundamental rights and freedoms regarding the processing of personal data do not outweigh those interests (Article 6 (1) (f) GDPR). If we use external service providers within the framework of order processing, the processing is based on Article 28 GDPR.

4. Collection of Personal Data When Visiting Our Website

When you use the website purely for informational purposes, meaning you do not register or provide us with any other information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data that is technically necessary for us to display our website and ensure stability and security (the legal basis is Article 6 (1) sentence 1 (f) GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transmitted
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the servers of the host.

We use the following host:

Broll IT & Media GmbH
Universitätsstraße 3
56070 Koblenz
Germany

For hosting, we have concluded a contract for order processing (AVV). This is a contract required by data protection law that ensures that the host processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

In addition to the data mentioned above, cookies are stored on your computer when you use our website. Further information can be found under the “Cookies” section of this privacy policy and in the consent management tool used.

5. Integration of Services from Other Providers

Our website uses content, services, and features from other providers. These include, for example, services for statistical evaluation of the use and visits to our website. To enable this data to be called up and displayed in the user’s browser, it is necessary to transmit the user’s IP address to the third-party providers used.

Even though we strive to use only third-party providers that require the IP address solely to deliver content or even work with anonymized IP addresses, we have no influence over whether the IP address may be stored. Information about the third-party providers used can be found in the following sections of this privacy policy.

Lamapoll

Type and Scope of Processing

To conduct surveys, we use the provider Lamano GmbH & Co. KG, Prenzlauer Allee 36G, 10405 Berlin (“Lamapoll”) as a processor. LamaPoll is a web-based service for creating and conducting surveys.

When you access a LamaPoll survey, the browser connection established to LamaPoll is encrypted. LamaPoll uses “cookies” for the surveys. The cookies are necessary to enable answering or interrupting and resuming surveys, to prevent multiple participations, and to display multilingual surveys in the correct language. When you participate in a survey, your IP address is transmitted to LamaPoll but is not linked to your responses. The IP address is not stored unless we have made settings to prevent multiple participations. For this purpose, the IP address is needed for technical reasons. However, the IP address is stored as a cryptographic hash along with the survey ID by LamaPoll. It is then used for matching to exclude future participants with the same IP address from the survey. Your IP address is no longer readable or decodable after encryption or conversion into a cryptographic hash. It is never linked to your responses (even in non-anonymous surveys). After the survey is deleted, your encrypted IP address is immediately deleted.

When answering a survey, the following general information is collected: date, start and end time, duration of the response, browser used, operating system and language in which the survey was answered. In anonymous surveys, it is ensured that this data is never linked in any way to your responses. In non-anonymous surveys, this data is linked to your responses for evaluation purposes. Our surveys are generally anonymous. If a survey is not anonymous, we explicitly point this out.

Purpose and Legal Basis

The purpose of our surveys is the regular evaluation of our services as well as surveying our customers, suppliers, and cooperation partners to assess general customer satisfaction or to conduct opinion polls for the improvement of our services. The legal basis for processing the data of a survey is your consent to conduct the survey in the case of non-anonymous surveys, Article 6 (1) (a) GDPR.

Storage Duration

If your personal data is no longer required for the above-mentioned purposes, it will be regularly deleted.

Microsoft Forms

Type and Scope of Processing

We use the tool “Microsoft Forms” to conduct surveys and polls in Forms or in online meetings, video conferences, and/or webinars. Microsoft Forms is a service of Microsoft Corporation (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland).

Purpose and Legal Basis

The legal basis for this processing depends on the specific context in which the survey is conducted. It may be necessary for the fulfillment of a contract (Article 6 (1) (b) GDPR) or to safeguard our legitimate interests or those of third parties (Article 6 (1) (f) GDPR).

Storage Duration

If your personal data is no longer required for the above-mentioned purposes, it will be regularly deleted.

Anonymized log data is stored for up to 30 days for access. Access is solely for the purpose of identifying system errors, troubleshooting, clarifying security issues, and checking for manipulations or other misuse. It is accessible only to administrators of the M365 platform.

Data collected in surveys is retained as long as necessary for the purpose. In individual cases, the retention period or deletion period is regulated by the specific survey. Participants are informed in the survey about the deletion and retention periods.

etracker

Type and Scope of Processing

We use etracker from etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany, as an analysis service for the statistical evaluation of our online offerings. This includes, for example, the number of views of our online offerings, visited subpages, and the duration of visitors’ stays.

Etracker uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on website activity.

Purpose and Legal Basis

We process data using etracker for the purpose of optimizing our website and for marketing purposes based on your consent according to Article 6 (1) (a) GDPR.

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by etracker GmbH. Further information can be found in the privacy policy for etracker: https://www.etracker.com/datenschutz/

Matterport

Type and Scope of Processing

For the virtual representation of the Digital Show Room, the platform my.matterport.com is integrated. The operator of this portal is Matterport, Inc., 352 E. Java Dr. Sunnyvale, CA 94089, USA. When you visit the Digital Showroom page, a connection to the Matterport servers is established. The Matterport server is informed about which of our pages you have visited. Additionally, Matterport transmits your IP address, browser version, and displaying device, as well as the ID of the 3D tour to the Matterport servers in the USA. This also applies if you are not logged into Matterport or do not have an account with Matterport. The information collected by Matterport is transmitted to the Matterport server in the USA and/or in the EEA. From the perspective of the European Court of Justice, the USA has an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for surveillance purposes without any legal remedies.

This data is deleted at the end of the session. You can prevent the storage of cookies by avoiding the Digital Showroom page or by making the appropriate settings in your browser software; however, we would like to point out that in this case, you may not be able to use the Digital Showroom.

Further information on how Matterport implements the GDPR and handles user data can be found in Matterport’s privacy policy at matterport.com/de/privacy-policy/.

Purpose and Legal Basis

The use of Matterport is in the interest of providing an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Article 6 (1) (f) GDPR.

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by Matterport. Further information can be found in the privacy policy for Matterport: https://matterport.com/de/privacy-policy

Complianz

Type and Scope of Processing

We have integrated Complianz on our website. Complianz is a consent solution from Complianz B.V., Kalmarweg 14-5, 9723JG Groningen, Netherlands, which allows for obtaining and documenting consent for the storage of cookies. Complianz uses cookies or other web technologies to recognize users and store the granted or revoked consent.

Purpose and Legal Basis

The use of the service is based on the legally required consent to use cookies in accordance with Article 6 (1) (c) GDPR and § 25 (2) No. 2 TDDDG.

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by Complianz B.V. Further information can be found in the privacy policy for Complianz: https://complianz.io/legal/privacy-statement/

Google Doubleclick

Type and Scope of Processing

We have integrated components of Google DoubleClick on our website. DoubleClick is a brand of Google, primarily marketing specific online marketing solutions to advertising agencies and publishers. DoubleClick by Google transmits data to the DoubleClick server with each impression as well as with clicks or other activities.

Each of these data transmissions triggers a cookie request to the browser of the affected person. If the browser accepts this request, DoubleClick sets a cookie in your browser.

DoubleClick uses a cookie ID that is necessary for processing the technical procedure. The cookie ID is needed, for example, to display an advertisement in a browser. DoubleClick can also capture which advertisements have already been displayed in a browser to avoid double displays. Furthermore, DoubleClick can use the cookie ID to capture conversions. Conversions are recorded, for example, when a user has previously seen a DoubleClick advertisement and subsequently makes a purchase on the advertiser’s website using the same internet browser.

A DoubleClick cookie does not contain any personal data but may contain additional campaign identifiers. A campaign identifier serves to identify the campaigns with which you have already interacted on other websites. In this context, Google becomes aware of data that also serves Google to create commission settlements. Among other things, Google can track that you have clicked on certain links on our website. In this case, your data is shared with the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable data protection regulations of DoubleClick by Google can be accessed at https://policies.google.com/privacy.

Purpose and Legal Basis

We process your data using the DoubleClick cookie for the purpose of optimizing and displaying advertisements based on your consent according to Article 6 (1) (a) GDPR and § 25 (1) TDDDG. The cookie is used, among other things, to display user-relevant advertising and to create or improve reports on advertising campaigns. Furthermore, the cookie serves to avoid multiple displays of the same advertisement. With each call to one of the individual pages of our website on which a DoubleClick component is integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data for the purpose of online advertising and commission settlement to Google. There is no legal or contractual obligation to provide your data. If you do not grant us your consent, a visit to our website is possible without restrictions, but not all functions may be fully available.

We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. The data transfer to the USA is carried out in accordance with Article 45 (1) GDPR based on the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision of the European Commission exists (including US companies that are not certified under the EU-U.S. DPF), we have agreed with the recipients of the data on other appropriate guarantees within the meaning of Articles 44 et seq. GDPR. These are – unless otherwise specified – standard contractual clauses of the EU Commission according to the implementing decision (EU) 2021/914 of June 4, 2021. A copy of these standard contractual clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, we obtain your consent in accordance with Article 49 (1) sentence 1 (a) GDPR before such a transfer to a third country, which you grant through the consent in the consent manager (or other forms, registrations, etc.). We would like to point out that there may be unknown risks in third country transfers (e.g., data processing by security authorities of the third country, the exact scope of which and the consequences for you are unknown to us, over which we have no influence and of which you may not be aware).

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google DoubleClick: https://policies.google.com/privacy.

Google Fonts

Type and Scope of Processing

We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offerings. To obtain these fonts, you establish a connection to the servers of Google Ireland Limited, during which your IP address is transmitted.

Purpose and Legal Basis

The use of Google Fonts is based on your consent according to Article 6 (1) (a) GDPR and § 25 (1) TDDDG.

We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. The data transfer to the USA is carried out in accordance with Article 45 (1) GDPR based on the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision of the European Commission exists (including US companies that are not certified under the EU-U.S. DPF), we have agreed with the recipients of the data on other appropriate guarantees within the meaning of Articles 44 et seq. GDPR. These are – unless otherwise specified – standard contractual clauses of the EU Commission according to the implementing decision (EU) 2021/914 of June 4, 2021. A copy of these standard contractual clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, we obtain your consent in accordance with Article 49 (1) sentence 1 (a) GDPR before such a transfer to a third country, which you grant through the consent in the consent manager (or other forms, registrations, etc.). We would like to point out that there may be unknown risks in third country transfers (e.g., data processing by security authorities of the third country, the exact scope of which and the consequences for you are unknown to us, over which we have no influence and of which you may not be aware).

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.

Google Photos

Type and Scope of Processing

We have integrated Google Photos on our website. The operator of Google Photos is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google Photos is a service that allows the loading of images into image galleries. When accessing the image galleries, the user’s browser loads the required images into the user’s browser cache. Personal data such as the user’s IP address may be transmitted. We process personal data only as long as necessary. Once the purpose of data processing is fulfilled, blocking and deletion occur according to the local deletion concept, unless legal regulations prevent deletion. If a cookie is set, it is automatically deleted after the storage period expires unless you have already deleted it yourself before the expiration.

Purpose and Legal Basis

Google Photos is suitable for us to provide you with a well-functioning experience on our website. This allows our website to load significantly faster with the help of Google Photos.

We require your consent to use the tool, which constitutes the legal basis according to § 25(1) TDDDG and Art. 6(1)(a) GDPR (consent). We obtain this consent through our consent tool and document it accordingly.

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Photos: https://policies.google.com/privacy.

Youtube

Type and Scope of Processing

We have integrated YouTube Video on our website. YouTube Video is a component of the video platform of YouTube, LLC, where users can upload, share content over the internet, and receive detailed statistics. YouTube Video allows us to integrate content from the platform into our website.

YouTube Video uses cookies and other browser technologies to analyze user behavior, recognize users, and create user profiles. This information is used, among other things, to analyze the activity of the viewed content and create reports. If a user is registered with YouTube, LLC, YouTube Video can associate the played videos with the profile.

When you access this content, you establish a connection to the servers of YouTube, LLC, transmitting your IP address and possibly browser data such as your user agent.

Purpose and Legal Basis

The use of the service is based on our legitimate interests, i.e., interest in a platform-independent provision of content according to Art. 6(1)(f) GDPR.

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video: https://policies.google.com/privacy.

Rapidmail

Type and Scope of Processing

We use rapidmail for sending newsletters. The provider is rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany. With rapidmail, the sending and analysis of newsletters are organized. The data you enter for the purpose of subscribing to the newsletter is stored on the servers of rapidmail in Germany. If you do not want rapidmail to analyze your data, you must unsubscribe from the newsletter. We provide a corresponding link in each newsletter message. For the purpose of analysis, the emails sent with rapidmail contain a so-called tracking pixel, which connects to the servers of rapidmail when the email is opened. This way, it can be determined whether a newsletter message has been opened. Furthermore, we can use rapidmail to determine whether and which links in the newsletter message are clicked. Optionally, links in the email can be set as tracking links, which can count your clicks.

Purpose and Legal Basis

Sending newsletters. The legal basis for data processing is Art. 6(1)(a) GDPR.

Storage Duration

The data you provide for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers and the servers of rapidmail after you unsubscribe. Data stored by us for other purposes (e.g., email addresses for the members’ area) remain unaffected. You have the option to revoke your consent to data processing at any time with effect for the future. The legality of the data processing carried out until the revocation remains unaffected.

6. Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the consent declaration.

For registration for our newsletter, we use the so-called double opt-in procedure. This means that we send you an email to the specified email address after your registration, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 72 hours, your information will be blocked and automatically deleted after one month. Additionally, we store your IP addresses and the times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

The only mandatory information for sending the newsletter is your email address. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6(1)(a) GDPR.

Your personal data may be processed on our behalf based on data processing agreements according to Art. 28 GDPR. In these cases, we ensure that the processing of personal data complies with the General Data Protection Regulation.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in each newsletter email or by emailing marketing@schaefer.biz.

We point out that we analyze your user behavior when sending the newsletter. For this analysis, the sent emails contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the analysis, we link the collected data and the web beacons with your email address and an individual ID.

The data is collected exclusively pseudonymized, the IDs are not linked to your other personal data, direct personal reference is excluded.

You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact method. The information is stored as long as you subscribe to the newsletter. After unsubscribing, we store the data purely statistically and anonymously.

7.  Cookies

Cookies are small text files that are stored on your data carrier and save certain settings and data for exchange with our system via your browser. A cookie typically contains the name of the domain from which the cookie data was sent, information about the age of the cookie, and an alphanumeric identifier.

Cookies enable our systems to recognize the user’s device and make any presettings immediately available. As soon as a user accesses the platform, a cookie is transmitted to the hard drive of the user’s computer. Cookies help us improve our website and offer you a better and more tailored service. They allow us to recognize your computer or (mobile) device when you return to our website and thereby:

  • Store information about your preferred activities on the website and thus tailor our website to your individual interests.
  • Speed up the processing of your requests.

We work with third-party services that help us make the internet offering and the website more interesting for you. Therefore, cookies from these partner companies (third-party providers) are also stored on your hard drive when you visit the website. These are cookies that automatically delete themselves after the specified time.

For more information about the individual third-party providers, please refer to the Cookie Consent Tool and the privacy notices contained therein.

If you do not wish to use browser cookies, you can set your browser to not accept the storage of cookies. Please note that in this case, you may only be able to use our website to a limited extent or not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can select the setting “Block third-party cookies” in your browser. We do not take responsibility for the use of third-party cookies.

8. Contact (Contact Forms, Quote Forms, etc.)

You can contact us via email or through our contact form. You can also upload images and specifications with your inquiry. In this case, we store the personal data you provide to process your request and to contact you for handling your request. If we request information through our contact form, we have marked the required fields for contact accordingly (asterisk). The voluntary information helps us to specify your request and to better handle your concern. The requested data is provided to us on a purely voluntary basis.

Depending on the type of inquiry, the legal basis for this processing is Art. 6(1)(b) GDPR for inquiries you make as part of pre-contractual measures or Art. 6(1)(f) GDPR if your inquiry is of another nature. The legitimate interest follows from the purposes mentioned in section 4 a.). If personal data is requested that we do not need for fulfilling a contract or safeguarding legitimate interests, the transmission to us is based on your consent according to Art. 6(1)(a) GDPR.

9. Application Process

We publish job offers on our website, which you can apply for via email. If you decide to apply for an open position, we process the personal data you provide and transmit to us solely for the purpose of conducting the application process. You can upload documents and images, among other things.

The legal basis for processing your personal data in the application process is § 26(1) in conjunction with § 26(2) BDSG.

In the event of a rejection, we delete your data as soon as a legally required retention period of 6 months has expired. The period begins with the dispatch of the rejection. If you have expressly consented to the further use of your data for future contact regarding potentially interesting positions, we will retain your data according to your consent.

If the application process results in an employment relationship, the data will be stored as necessary and permissible and then transferred to the personnel file.

Data transfer to recipients outside the company only occurs if legal provisions permit or require it, the transfer is necessary to fulfill legal obligations, or you have consented. A transfer to a third country is not intended.

The provision of personal data in the application process is neither legally nor contractually required. You are not obliged to provide personal data. However, the provision of personal data is necessary for the decision on an application or a contract conclusion for an employment relationship with us. You should only provide personal data that is necessary for the application and its execution. If you do not provide personal data in an application, we cannot make a decision on establishing an employment relationship.

Please note that applications sent to us via email are transmitted unencrypted. Therefore, there is a risk that unauthorized persons may intercept and use this data.

10. Social Icons

Social Plugins with Shariff Solution

Social plugins (“Plugins”) of the social network Facebook, operated by Meta Platforms Ireland, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), are used on our website. For better protection of your data when visiting our website, these buttons are not integrated as plugins but as HTML links. This type of integration ensures that no connection to Facebook’s servers is established when you access a page of our website that contains such buttons. When you click on such a button, the Facebook page opens in a new browser window. There you can interact with the plugins (possibly after logging in). The purpose and scope of data collection, further processing, and use of data by Facebook, as well as your rights and settings options for protecting your privacy, can be found in Facebook’s privacy notices: https://privacycenter.instagram.com/policy/.

11. Presence in Social Media

To best present our company and communicate with you as a user, customer, or interested party, and to inform you about our offered services, we use a presence in social networks. When using social networks, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection as in the EU cannot be guaranteed in all countries outside the EU. This may pose risks for you as a user if the transmitted data is processed in so-called third countries with inadequate data protection levels.

This makes it difficult to enforce known user rights. Additionally, your data may be processed by the provider in the third country in ways that are not in your interest. We only transfer personal data to third countries for which an adequate level of protection has been confirmed or if the transfer of personal data can be ensured through contractual agreements or other suitable safeguards.

In addition to the respective provider of a social network, we also collect and process personal user data on so-called “fan pages.” With this notice, we inform you about which data we collect from you on our social media presences, how we use it, and how you can object to the data usage. The respective data processing purposes and data categories can be found in the respective, detailed offer below. The activities we conduct in social media are based on a balance of interests according to Art. 6(1)(f) GDPR.

To achieve this, cookies are used to capture user behavior and enable user profiling. A detailed list of the processing purposes of user data can be found in the privacy notices of the respective providers. By making appropriate settings in your user account, you can limit profiling to some extent. For detailed instructions, please read the respective privacy notices of the provider.

The relevant platforms are:

Platform Responsible Entity Privacy Notices of the Platform Operators
Facebook Meta Platforms Ireland Ltd
4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland		 https://privacycenter.instagram.com/policy/
Instagram Meta Platforms Ireland Ltd
4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland		 https://privacycenter.instagram.com/policy/
YouTube Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Irland		 https://policies.google.com/privacy?hl=en
LinkedIn LinkedIn Ireland Unlimited Company
Wilton Place, Dublin 2, Ireland		 https://de.linkedin.com/legal/privacy-policy?

Schäfer Werkzeug- und Sondermaschinenbau GmbH operates profiles on the listed platforms to draw attention to products and service offerings and to interact with customers, interested parties, and other users of the platforms.

In this context, the platform operators use certain data collected from users of the platform (e.g., whether a photo on a profile has been liked or commented on) to create aggregated usage statistics and provide them to the respective profile operators (so-called “Insights” or “Analytics”). We, as profile operators, also receive such usage statistics. The information we receive as profile operators does not allow any conclusions to be drawn about individual users. The profile operator does not have access to personal data processed by the platform operators for the creation of usage statistics. Only the respective platform operator determines which data is processed for these purposes and in what manner. Schäfer Werkzeug- und Sondermaschinenbau GmbH, as a profile operator, cannot legally or factually influence the processing by the platform operators.

For processing related to the creation of usage statistics, Schäfer Werkzeug- und Sondermaschinenbau GmbH and the respective platform operator are considered joint controllers within the meaning of Art. 26 GDPR.

Furthermore, data processing by Schäfer Werkzeug- und Sondermaschinenbau GmbH as a profile operator only takes place to a very limited extent:

  • Processing of usernames and comments that are deleted due to violations of netiquette. These are retained for possible proof in legal disputes within the statute of limitations.
  • Processing of usernames and individual messages when you contact us via messenger services.
  • Processing of usernames when participating in contests. The relevant participation conditions apply.
  • Processing of usernames and postings in the context of inquiries and possibly obtaining consent for re-posting images.
  • Recruiting potential applicants on career platforms.

For these purposes, we generally only process your name, message content, comment content, and the profile information you have “publicly” provided.

12. Rights of the Data Subject

You have the right:

  • pursuant to Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed or will be disclosed, the planned storage duration, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, if not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • pursuant to Art. 16 GDPR to request the immediate correction of incorrect or completion of your personal data stored by us;
  • pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
  • pursuant to Art. 18 GDPR to request the restriction of processing of your personal data, if the accuracy of the data is contested by you, the processing is unlawful, but you oppose the erasure, and we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller (data portability);
  • pursuant to Art. 7(3) GDPR to withdraw your consent at any time. This means that we will no longer continue the data processing based on this consent for the future and
  • pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. You can usually contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
  • Right to Object

If your personal data is processed based on legitimate interests pursuant to Art. 6(1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided there are reasons arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.

If you wish to exercise your right to withdraw or object, an email to privacy@schaefer.biz is sufficient.

13. Disclosure of Your Personal Data

Your personal data will be disclosed as described below.

Disclosure also occurs if we are authorized or obligated to disclose data due to legal provisions and/or official or court orders. This may particularly involve providing information for law enforcement purposes, averting danger, or enforcing intellectual property rights.

f your data is disclosed to service providers to the necessary extent, they will only have access to your personal data as necessary to fulfill their tasks. These service providers are obligated to treat your personal data in accordance with applicable data protection laws, particularly the GDPR. If your personal data is processed on our behalf based on data processing agreements pursuant to Art. 28 GDPR, we ensure that the processing of personal data complies with the General Data Protection Regulation.

We prioritize processing your data within the EU/EEA. However, it may occur that we use service providers who process data outside the EU/EEA. In these cases, we ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient before transferring your personal data. This can be achieved, for example, through EU standard contracts or Binding Corporate Rules or special agreements to which the company can adhere.

14. Data Security

We secure our website through technical and organizational measures against loss, destruction, access, alteration, or dissemination of your data by unauthorized persons.

In particular, your personal data is transmitted to us in encrypted form. We use the SSL/TLS (Secure Sockets Layer/Transport Layer Security) encryption system. Our security measures are continuously improved in line with technological developments.

15. Storage Duration for Personal Data

Regarding the storage duration, we delete personal data as soon as its storage is no longer necessary for fulfilling the original purpose and no legal retention periods exist. The legal retention periods determine the final duration of the storage of personal data. After the period expires, the corresponding data is routinely deleted. If retention periods exist, processing is restricted in the form of data blocking.

16. References and Links

When accessing websites referred to within our website, you may be asked again for information such as name, address, email address, browser properties, etc. This privacy policy does not regulate the collection, disclosure, or handling of personal data by third parties.

Third-party service providers may have different and own provisions regarding the collection, processing, and use of personal data. Therefore, it is advisable to inform yourself about their practices for handling personal data on the websites of third parties before entering personal data.

Status: 03/2025