When accessing our website, several technical data are logged. This general data and information are stored in the log files of the server. Your IP address, your browser ID and domain, the name of the retrieved file, the date and time of the retrieval, the amount of data transferred, and the successful retrieval are recorded in a log file. The processing of personal data takes place for the provision of the website, for detecting and defending against attacks, as well as for troubleshooting and clarifying acts of abuse or fraud based on a legitimate interest pursuant to Art. 6 (1) (f) GDPR. To detect attacks, we store non-anonymized IP addresses for a maximum of seven days. They are then irrevocably anonymized.
We use cookies on our website. By means of a cookie, the information and offers on our website can be optimized in the sense of the user. Cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. Use and use of cookies are governed by § 25 TDDDG.
This website uses Usercentrics' Consent technology to obtain your consent to store certain cookies on your terminal device or to use certain technologies and to document them in compliance with data protection regulations (hereinafter referred to as "Usercentrics").
Usercentrics stores a cookie in your browser in order to be able to assign the given consents or their revocation to you. Usercentrics are used to obtain the legally required consent for the use of certain technologies. Usercentrics are used in accordance with § 25 (2) no. 2 TDDDG. The legal basis for the subsequent data processing is Art. 6 para. 1 lit. c) GDPR. When you enter our website, the following personal data is transmitted to Usercentrics:
The data collected in this way will be stored until you ask us to delete it, delete the Usercentrics cookie itself or the purpose for data storage no longer applies. Mandatory statutory storage obligations remain unaffected.
The Usercentrics banner on this website has been configured using eRecht24. You can recognize this by the fact that the logo of eRecht24 appears in the banner. To display the eRecht24 logo in the banner, a connection to the eRecht24 image server is established. The IP address is also transmitted, but this is only stored in anonymous form in the server logs. The image server of eRecht24 is located in Germany with a German provider. The banner itself is provided exclusively by Usercentrics.
To check and avoid interactions on our website through automated access by means of so-called bots, we use Google reCaptcha, a captcha service of Google Ireland Limited ("Google"), in the version Google ReCaptchaV3, using European server locations. To achieve the described processing purpose, the service stores a cookie for the duration of the query, transmits your input to Google and reuses it there. By using the service, Google can therefore determine from which website a request is sent and from which IP address you use the so-called reCaptcha input box. In addition to your IP address, Google may also collect other information that is necessary to offer and guarantee this service.
Since on the basis of the information available to us it cannot be ruled out beyond doubt that Google merges the personal data processed with other data of Google and uses them, among other things, for advertising purposes, we bind Google reCaptcha exclusively on the basis of your consent pursuant to § 25 (1) TDDDG with regard to use and pursuant to Art. 6 (1) (a) GDPR with regard to data processing. In accordance with Art. 49 (1) (a) GDPR, your declaration of consent expressly includes the possible worldwide transfer and processing of data by other group companies of Google LLC. In this regard, we would like to expressly point out any risks, for example the difficult enforcement of data protection rights of data subjects. The storage takes place for a maximum of 365 days.
For the purpose and scope of data processing by Google, as well as your rights in this regard and setting options to protect your privacy, please refer to Google's privacy policy.
On our website there is a contact form, which can be used for electronic contact. Furthermore, it is possible to contact us by e-mail using the contact details provided in the imprint. When contacting us, we process the personal data provided by you to clarify your request, in particular the name, the e-mail address and your expressed request as well as the IP address and the time of use to prevent and clarify abuse cases. The processing of the listed personal data is carried out on the basis of the legitimate interest in satisfactorily responding to contact and inquiries in accordance with Art. 6 (1) (f) GDPR or in the case of requests for quotations and contractual matters on the basis of the contract or pre-contractual measures pursuant to Art. 6 (1) (b) GDPR.
The personal data provided by you will be treated confidentially by us, serve exclusively to process your request and will not be passed on to Ditte, unless this is necessary in individual cases due to the nature of your request. The deletion of the personal data takes place after final clarification of your request or based on an objection by you. The logged IP address and the time of contact are deleted after seven days. The deletion periods shown here only apply if no statutory retention periods preclude deletion.
If you apply to us, we process the information we receive from you during the application process, e.g. by letter of application, curriculum vitae, certificates, correspondence, telephone or oral information or you use our contact form provided on the website. In addition to your contact details, information about your training, your qualifications, your work experience and your skills are particularly relevant to us.
Your data will initially be processed exclusively for the purpose of carrying out the application process. If your application is successful, it will be used as part of your personnel file and for the execution and termination of the employment relationship and deleted in accordance with the regulations applicable to personnel files. If you withdraw your application, we will of course delete your data. Please note that any false statement or omission may lead to a cancellation or later contestation of the employment contract.
The legal basis for data processing in the application process and as part of the personal file are Article 88 (1) GDPR in conjunction with Section 26 (1) BDSG and, if you have given your consent, for example by sending information that is not necessary for the application process, your consent pursuant to Article 88 (1) GDPR in conjunction with Section 26 (2) BDSG, Art. 7 GDPR. Your consent can also be revoked by you at any time with effect for the future. The data in question will then be deleted immediately. In this case, please send your revocation stating your full name and your e-mail address to post@schmidtwp.de. The deletion may be replaced by a blocking of the data in the cases provided for by law.
Please note that, in particular, CVs, certificates or other data transmitted by you for the purposes of the application may also contain special categories of personal data within the meaning of Article 9 (1) GDPR. As a rule, we do not require any special categories of personal data for the application process. We ask that you do not provide us with any such information from the outset. If, exceptionally, such information is relevant to the application process, we will process it together with your other applicant data. This may, for example, concern information about a severe disability that you can voluntarily provide to us and which we will then have to process to fulfil our special obligations with regard to severely disabled persons. In these cases, the processing serves the exercise of rights or the fulfilment of legal obligations under labour law, social security law and social protection. The legal basis for data processing is Art. 9 (2) (b) GDPR in conjunction with § 26 (3) BDSG.
The data transmitted will be deleted if you withdraw your application (revocation must be sent to post@schmidtwp.de) or if we are unable to offer you a position to be filled, at the earliest three months after the end of the application process. This does not apply if statutory provisions preclude deletion or if further storage is necessary for the purpose of providing evidence or if you have consented to longer storage.
Our website contains links to other websites, so-called external links. We have no influence on the fact that the operators of other websites comply with the data protection regulations. Please note that by clicking on a link from another website, you are subject to other data protection regulations. We have no influence on the data processing there. External links are marked as such in accordance with § 19 (3) TDDDG.
In order to provide the website, we use service providers who process personal data on behalf of the responsible body or through whom access to personal data cannot be excluded. We have concluded contracts for order processing with all these service providers in accordance with Art. 28 GDPR. In addition to the service providers, these are Starto AG (hosting) and Acribit GmbH (technical support).
Data subjects can request information about their personal data as well as correction or deletion or restriction of processing or object to processing at any time. In addition, there is a right to data portability in their favour. In addition, if the data processing is carried out based on consent, it can be revoked at any time for the future. To exercise your rights, our data protection officer, the Dresden Institute for Data Protection, is available at Zentrale[at]dids.de (further contact details at www.dids.de). In addition, pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if it is suspected that the processing of personal data is unlawful.