Data protection information

Status: April 2024

With the following information, we would like to give you as a visitor to our website an overview of the processing of your personal data by us and your rights under data protection law. Which data is processed in detail depends largely on your specific usage behaviour. Therefore, not all parts of this information may apply to you.

 

1. Controller and contact details of the data protection officer

Responsible for the data processing on this online offer is the

FTI Engineering Network GmbH
Ludwig-Witthöft-Straße 14
DE-15745 Wildau
(hereinafter also referred to as the "Company")

You can reach our external data protection officer at

Company GENA
Data Protection Officer
Böttgerstrasse 6
65439 Flörsheim

datenschutz@ftigroup.net

2. Processing of personal data in connection with your use of our websites, applications and online platforms

a.    Data categories, purpose of processing and legal basis

We process the following personal data when you use our websites, applications or online tools (hereinafter collectively referred to as "online services"):

• Personal data that you voluntarily enter yourself in the context of an online offer (e.g. when registering, contacting us or participating in surveys, etc.), such as first and last name, e-mail address, telephone number, information provided in the context of a support request, comments or forum posts, and
• http data: Information that is automatically sent to us by your web browser or end device, such as your IP address, device type, browser type, previously visited websites, visited subpages or the date and time of the respective visitor request.

We process your personal data for the following purposes:

• Technical administration of the website (defence against and detection of fraudulent or similar activities, including attacks on our IT infrastructure, enabling user authentication)

The legal basis for the processing of personal data for these purposes is Art. 6 para. 1 lit. f GDPR, regardless of whether a contractual relationship exists with you. The transmission of personal data (e.g. the IP address) is necessary to establish the connection and to display the content of the website.

• Online and other services (enabling the use of the services and functions of our online offers, processing enquiries, sending marketing information on request)

The legal basis for the processing of personal data for the above-mentioned purpose is Art. 6 para. 1 lit. b and lit. f GDPR. Visiting our website establishes a legal relationship similar to a contract within the meaning of Art. 6 para. 1 lit. b GDPR. Without the processing of personal data, we cannot offer our online services as intended. In particular, the transmission of personal data such as the IP address is required to establish a connection.

In some cases, we expressly request your consent to the processing of your personal data. In this case, the legal basis for the processing is the consent you have given in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Art. 7 GDPR. Art. 7 GDPR.

b.    Cookies

We also use cookies as part of our online offering. Cookies are small text files that are stored on your end device by your browser when you visit our website. Cookies contain information that is related to the context of use and your end device.

1. Technically necessary cookies

The use of technically necessary cookies relates in particular to cookies that are required to make our online offering available. The legal basis for the storage and retrieval of such cookies on your end device is § 25 para. 2 no. 2 TTDSG. The legal basis for data processing in these cases is Art. 6 para. 1 lit. f GDPR (legitimate interests in the provision of the online offer or IT security‑).

Consent management with klaro

We use the consent management options of KIProtect GmbH, Bismarkstarße 10-12, 10525 Berlin, Germany. You can use the tool to conveniently manage your consent to the setting of cookies that are not technically necessary and to make changes in this regard, such as revoking consent that has been granted. For this purpose, KIProtect also has access to the collected data as a processor.

The tool enables us to inform you about your consent and to obtain, manage and document it. For this purpose, we process http data and the consent, insofar as this has been granted.

The purpose of the processing is to obtain consent, to provide the option to revoke or adjust consent, to provide evidence (accountability) with regard to consent given and to ensure the security of the application. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests in the purposes mentioned).

Information on consents granted and on the revocation of consent is retained for one year for accounting purposes.

2. Functional cookies

We also use so-called functional cookies to statistically record, optimise and evaluate the use of our online services. This data includes page views, length of visit, origin, country and more. This statistical data is analysed by us in order to optimise our offering

The legal basis for data processing for cookies requiring consent or the data obtained from them is your consent in accordance with § 25 para. 1 TTDSG and Art. 6 para. 1 lit. a DS-GVO in conjunction with Art. 7 DS-GVO. Art. 7 GDPR. You give your consent in this regard when you call up our online offer by displaying our "cookie banner". Here you can give your consent to the use of cookies on this website by clicking a button.

You can change your decision on the use of cookies at any time by clicking on the button below. You can also withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Matomo

If you have given your consent, we use the open source software Matomo to analyse and statistically evaluate the use of our website. Matomo uses cookies that are stored on your end device. The information generated by the cookie about your use of our website is stored on our server and not passed on to third parties.

The IP addresses are anonymised so that it is not possible to assign them to individual users.

The processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. You can withdraw your consent at any time with effect for the future in the manner described above. The revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

c. Contact forms

Contact forms are available on our website which can be used to contact us electronically. If a user makes use of these options, the data entered in the input mask is transmitted to us and some of the data is stored.

In this context, no data is passed on to third parties outside the company. The data is used exclusively for the processing of correspondence.

The legal basis for the processing of data transmitted in the course of sending an email is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, Art. 6 para. 1 lit. b GDPR is a further legal basis for the processing.

The processing of the personal data from the input mask serves us to process the contact and to prevent misuse of the contact form.

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by e-mail, this is the case when the respective correspondence has ended.

The user has the option to object to the processing of their personal data at any time. In such a case, correspondence cannot be continued. Please send us your deletion request via email to datenschutz@peiker-holding.de. All personal data stored in the course of contacting us will be deleted in this case.

3. Processing of personal data for customer satisfaction surveys and direct marketing

If you have given us your consent or we are authorised to do so as part of existing customer relationships, your contact details will also be used for direct marketing purposes (such as trade fair invitations, newsletters) or to conduct customer satisfaction surveys. You have the right to object to the use of your contact data for these purposes at any time. If you wish to exercise your right to object in this regard, please send us an email to datenschutz@ftigroup.net or follow the corresponding instructions that you have received from us in any promotional email. The legal basis for processing your data for advertising purposes is Art. 6 para. 1 lit. f GDPR in the case of existing customer relationships or Art. 6 para. 1 lit. a GDPR if you have given us your consent.

4. Processing of personal data of business partners

a. Data categories, purpose of processing and legal basis

As part of the cooperation with business partners, the company processes personal data of contact persons at customers, suppliers, interested parties, sales partners and cooperation partners (hereinafter referred to as "business partners"):

• Contact information, such as first and last name, business address, business telephone number, business mobile phone number, business fax number and business e-mail address,
• Payment data, such as information required to process payment transactions or prevent fraud, including credit card information and card verification numbers,
• other information whose processing is necessary in the context of a contractual relationship and which is provided voluntarily by business partners, such as orders, enquiries or details of projects,
• When you register for a customer account, we also store your IP address and the date of your registration,
• personal data collected from publicly available sources, information databases or credit agencies, and
• Where legally required as part of compliance screenings: date of birth, ID and ID numbers, information on relevant legal proceedings or other legal disputes in which business partners are involved.

The aforementioned personal data is processed for the following purposes:

• Communication with business partners about products, services and projects, for example to process enquiries from business partners or to provide technical information about products,
• Contract processing,
• Planning, execution and administration of the contractual business relationship, for example to process orders for products and services, to collect payments, for accounting and billing purposes and to carry out deliveries, maintenance activities or repairs,
• Processing the registration for a customer account,
• Management of a customer account for pre-contractual services, for the fulfilment of the contract or for the purpose of customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you the so-called notepad function),
• Implementation of customer surveys, marketing campaigns, market analyses, competitions, etc.,
• Maintaining and protecting the security of our products and services and our websites, preventing and detecting security risks, fraudulent behaviour or other criminal or malicious acts,
• Comparison of personal data with US sanctions lists on the basis of European Regulations 2580/2001 and 881/2002,
• Compliance with (i) legal requirements (e.g. retention obligations under tax and commercial law), (ii) existing obligations to carry out compliance screenings (to prevent white-collar crime or money laundering) and (iii) guidelines and industry standards, and
• Settlement of legal disputes, enforcement of existing contracts and for the assertion, exercise and defence of legal claims.

The processing of personal data is necessary to achieve the aforementioned purposes. Unless expressly stated otherwise when the personal data is collected, the legal basis for data processing is

• the execution and fulfilment of a contract with you or for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR,
• the fulfilment of legal obligations to which the company is subject pursuant to Art. 6 para. 1 lit. c GDPR, or
• the protection of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the initiation, implementation and processing of the business relationship in commercial transactions.

If you have expressly given your consent to the processing of your personal data in individual cases, this consent is the legal basis for the processing in accordance with Art. 6 para. 1 lit. a GDPR.

5. Processing of personal data of applicants

a. Data categories and purpose of data processing

We generally process the following categories of personal data as part of the application process:

• Personal data (first and last name, date of birth, address, school-leaving qualification)
• Communication data (telephone number, mobile phone number, fax number, e-mail address)
• Data on the assessment and evaluation in the application process
• Education data (school, vocational training, civil/military service, studies, doctorate)
• Data on your professional career to date, training and job references
• Information on other qualifications (e.g. language skills, PC skills, voluntary work)
• Application photo
• Details of desired salary
• Application history
• Social media links (link to Xing or LinkedIn profile if data transfer from these profiles has been selected)

Personal data that you provide to us as part of your application will be stored and used exclusively for the purpose of processing the application and, if necessary, for the subsequent employment relationship.

b. Legal basis for data processing

Your personal data is processed as part of the application process on the basis of Art. 6 para. 1 lit. b GDPR (establishment and performance of a contract) and Section 26 para. 1 sentence 1 BDSG.

Any further processing of applicant data will only take place on the basis of an explicit declaration of consent. This is particularly the case if we are unable to offer you a current vacancy in the company, but we consider your application to be suitable for future positions. Your data will then be stored and processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

The storage and processing of your data for forwarding to other companies in the group of companies is also based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.

c. Information on joint controllership

If you apply to us and give your consent for inclusion in the applicant pool, we will also check whether you are suitable for another position with us or other Peiker family companies in accordance with your consent and contact you accordingly if necessary. Only in this case and if the application also relates to other Peiker family companies or is kept open for this purpose will the processing be carried out as joint controllers. In this respect, the HRworks applicant portal is operated by us together with the companies of the Peiker family [peiker Holding GmbH, peiker Immobilien GmbH, peiker CEE GmbH, FTI Engineering Network GmbH, peicom GmbH, Hofgut Liederbach Service GmbH] as joint controllers within the meaning of Art. 26 GDPR.

As joint controllers in accordance with Art. 26 GDPR, the companies have recorded the joint use of the application portal in an agreement and agreed which of them fulfils which data protection obligations. In the following, we would like to inform you about the main contents of the agreement between the joint controllers:

(1) Cooperation between the joint controllers

The companies have jointly determined the means and purposes of the technical operation and organisational use of the applicant portal.

The applicant portal itself is provided by an external service provider as part of order processing in accordance with Art. 28 GDPR. The processor in accordance with Art. 28 GDPR is HRworks GmbH, based in Freiburg.

(2) Responsibility of the companies

The company for whose job advertisement you are applying is individually responsible for informing you about the use of your applicant data in accordance with Art. 13 and 14 GDPR and your rights in this context. The information can be found in this privacy policy.

You can request information about the processing of your personal data at any time. You can of course also exercise all other rights to rectification, erasure, restriction of processing and data portability in accordance with Art. 15-21 GDPR at any time. In addition, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation in accordance with Art. 21 para. 1 GDPR. In accordance with the joint controllership agreement, only the company for whose job advertisement you have applied is responsible for your enquiry. If you address your enquiry to a company other than this one, the enquiry will be forwarded immediately to the responsible company, which will then process your enquiry.

peiker Holding GmbH performs the administrator function of the applicant portal for all companies of the Peiker family. For this purpose, peiker Holding GmbH, in coordination with the other companies of the Peiker family, exercises the rights of instruction and control over the processor in accordance with Art. 28 GDPR.

d. Disclosure of data

Your data will be made available to the responsible employees of the HR department and the responsible employees or supervisors of the specialised department(s) for the position for which you have applied.

In the case of a speculative application, your documents will be made available to the responsible employees in the HR department and the responsible employees or supervisors in the relevant specialist departments for whom your application may be of interest.

We do not forward your applicant data to affiliated subsidiaries or parent companies unless your application also relates to these companies or is kept open for this purpose. We also use processors (e.g. IT service providers). Your data will be passed on to them in strict compliance with the obligation of confidentiality and the requirements of the GDPR. The processors commissioned by us may only process the data for us and not for their own purposes. The responsibility for data processing remains with us in these cases.

Data will also be passed on if we are obliged to do so due to legal provisions and/or official or court orders.

e. Transfer of personal data to third countries

Our company is part of a group of companies in which personnel responsibilities may exist across national borders. For this reason, responsible superiors in other countries may also have access to your applicant data. This data processing is necessary to decide on the establishment of an employment relationship. In addition, data is also transferred to third countries when your data is included in the talent pool. This means that our affiliated foreign units also have access to your applicant data.

If data is transferred to an organisation in a third country, appropriate guarantees for the protection of your personal data will ensure that the level of data protection in the European Union is complied with.

f. Deletion periods for applicant data

If no employment relationship is established, the application documents will be deleted six months after rejection. The legal basis for the storage in this regard is Art. 6 para. 1 lit. f GDPR. Our legal interest in this regard is the defence against any claims arising from the General Equal Treatment Act ("AGG"). In all other respects, the general deletion periods and information under Section 9 apply.

If you give your consent to be included in the applicant pool, we will delete your data after 12 months unless you give your consent again.

6. Social media

We place links to some social networks on our website to draw attention to our services and products as well as career opportunities and to get in touch with you as a visitor and user of these social media sites and our website.

You can recognise the links by the logo of the respective social network. When you click on the logo, a direct connection is established between your browser and the server of the respective service and you are redirected to the website of the service provider.

Below you can find out how your data is processed on the respective social media sites. We operate the following sites:

LinkedIn	www.linkedin.com/company/fti-engineering-network-gmbh/	LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland	https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_join-form-privacy-policy
Xing	FTI Engineering Network GmbH: Information and news | XING	New Work SE, Am Strandkai 1, 20457 Hamburg, Germany	https://privacy.xing.com/de/datenschutzerklaerung

 

a. Data processing by us

We operate social media presences to draw attention to our products, services and career opportunities, to communicate with users and to achieve improvements.

The processing of personal data is generally carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our legitimate interests in public relations, communication and product improvement, unless otherwise stated.

It is possible for us to view your posts and similar interactions on our social media presences and - depending on your privacy settings - your public profile. We may use this data to improve our information and products, particularly on our social media sites.

If you contact us via our social media presence, we will process the personal data you provide in order to process your request, in particular to respond to enquiries. We may then answer your enquiry via the respective social media presence. In many cases, the legal basis for the processing of personal data is Art. 6 para. 1 lit. b GDPR (fulfilment of contract or pre-contractual measures) or, if this legal basis is not relevant, Art. 6 para. 1 lit. f GDPR due to the legitimate interests arising from the purposes mentioned.

In addition, we may also process personal data in connection with the social media presences in accordance with the information in the other sections of the data protection information.

As a precaution, we would like to point out that communication via social media platforms may be insecure. You can contact us at any time via other communication channels and will then also receive a response via these other channels.

We also receive aggregated usage statistics from the platforms, which we use to evaluate user behaviour and improve our information offering. The usage statistics may also be compiled by the platforms on the basis of personal usage data. Further information on this can be found in the data protection notices of the respective providers linked above. Special information on Facebook and Instagram can be found below.

b. Processing by the platform operators

We have no influence on the processing of your personal data by the respective providers. Rather, the platform operators have control over data processing in the context of the use of the respective service. This includes, for example, the storage and use of cookies on user devices and the analysis of your behaviour on the social network.

c. Notes on the deletion of contributions

If you publish personal data on our social media presences in the form of posts, such as images, texts, videos, or interact in other ways, e.g. "liking" posts, your data will be processed and, in many cases, published. If this involves inappropriate content, we may delete it in accordance with the usual procedures and policies of the respective platforms.

7. Recipients and categories of recipients

Within our company, access to your data is granted to those departments that need it to fulfil contractual and legal obligations. Service providers and vicarious agents employed by us may also receive data for these purposes if they maintain confidentiality and integrity in particular. These are companies in the categories of IT services, telecommunications, sales and marketing.

With regard to the transfer of data to recipients outside our company, it should first be noted that we only pass on necessary personal data in compliance with the applicable data protection regulations. We may only pass on information about you if this is required by law, if you have given your consent or if we are authorised to provide information. Under these conditions, recipients of personal data may be

• public bodies and institutions (such as law enforcement authorities) in the event of a legal or official obligation,
• other Group companies for risk management due to legal or regulatory obligations and
• Service providers that we use within the framework of order processing relationships and
• Service providers that are explicitly named as recipients in this data protection notice.

As part of the contract processing, we pass on your data to the transport company commissioned with the delivery of goods or to the financial service provider on the basis of Art. 6 para. 1 lit. b) GDPR, insofar as the transfer is necessary for the delivery of goods or for payment purposes.

Otherwise, the data transfers listed in the other sections apply.

8. Transfer to third countries

Data is transferred to bodies in countries outside the European Union (so-called third countries) if

• it is necessary for the execution of your orders (e.g. delivery orders),
• it is required by law (e.g. reporting obligations under tax law) or
• you have given us your consent.

Furthermore, the transfer of data to organisations in third countries to maintain and ensure the company's IT operations and IT security cannot be ruled out. The use of our social media services may also result in data transfers and subsequent processing of usage data of the respective services in the US.

Any data transfers are exclusively automated in connection with the use of our social media offering and with the help of cookies.

When transferring data to so-called third countries, we ensure that this is done in accordance with the law. As a rule, data transfers are permitted on the basis of an adequacy decision, particularly in the case of transfers to the US. If this does not apply in individual cases, we will conclude the standard data protection clauses or obtain your explicit consent.

You can completely reject the use of cookies and other technologies or make individual settings. You can also withdraw your consent at any time with effect for the future. Previously carried out processing remains unaffected by a cancellation.

In addition, personal data may be transferred to third countries by the companies to which we disclose personal data, as described in the other sections.

9. Storage period

We process and store your personal data for as long as is necessary to fulfil our contractual obligations and exercise our rights.

The cancellation of a previously given consent is kept for three years (accountability). The administration cookie is deleted 6 months after the last visit. Server log data is deleted or anonymised after seven days at the latest, unless further storage is required for evidence purposes. Data relating to newsletters and invitations are deleted immediately after cancellation.

In individual cases, longer storage of data for the purpose of providing evidence may be justified in justified individual cases. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is 3 years.

10. Data security

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, SSL or TLS encryption is implemented on our website. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

Our employees and the service companies commissioned by us are also obliged to maintain confidentiality and to comply with the provisions of the applicable data protection laws. The company takes appropriate technical and organisational security measures to protect your personal data from loss, alteration, destruction and access by unauthorised persons or unauthorised disclosure. Our security measures are constantly being improved in line with technological developments.

11. Rights of data subjects

Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR.

The restrictions under Sections 34 and 35 BDSG apply to the right to information and the right to erasure. In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

You can withdraw your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the GDPR came into force, i.e. before 25 May 2018. Please note that the revocation is only effective for the future.

You also have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based in particular on point (f) of Article 6(1) GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. In particular, this includes that the processing is necessary for the establishment, exercise or defence of legal claims.

You also have the right not to be subject to fully automated decision-making in accordance with Art. 22 GDPR. In principle, we do not use fully automated decision-making to establish, implement and terminate the business relationship. If we use these procedures in individual cases (e.g. to improve our products and services), we will inform you separately about this and about your rights in this regard, insofar as this is required by law.

12. Obligation to provide data

As part of our online offering, we rely on the processing of such usage data as is necessary for the performance and termination of the service and for the fulfilment of the associated obligations. Without the collection of usage data, we and our service providers will not be able to provide you with our online services. If processing is based on consent, the provision of data is also voluntary.

13. Profiling

We do not process your personal data automatically in such a way that it has a legal effect on you or significantly affects you in a similar way.

14. Topicality and changes to this privacy policy

This privacy policy is currently valid and was last updated in April 2024.