Privacy Policy

This privacy policy explains to users of our offer the nature, scope and purpose of the collection and use of personal data by us. "Personal data" means any information relating to an identified or identifiable natural person.

We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Collection, processing and use of personal data takes place only if you have consented thereto or a law permits. We take appropriate technical and organisational measures to ensure data protection and data security and to collect as few personal data as possible.

This privacy policy can be accessed, saved and printed at any time at URL http://www.vsmabrasives.com/de-en/privacy-policy/

We emphasise that the transfer of data on the internet (e.g. e-mail communication) can never be totally secure. Preventing access by third parties to data cannot be totally guaranteed.

Name and Address of the Controller for the Data Processing
The Controller within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in European Union Member States and other data protection-related provisions is:

VSM · Vereinigte Schmirgel- und Maschinen-Fabriken AG
Siegmundstrasse 17
30165 Hannover
Tel. +49 (0) 511 3526 0
Fax. +49 (0) 511 3521 315
info@vsmabrasives.com
www.vsmabrasives.com

Name and Address of the Data Protection Officer
The Data Protection Officer of the Controller of the data processing is:

Thomas Spaeing
ds² Unternehmensberatung GmbH & Co. KG
Berliner Straße 1
49201 Dissen
Tel. +49 (0) 5421 30 89 518
datenschutzbeauftragter@vsmabrasives.com

For any questions and suggestions regarding data protection, any Data Subject can get in contact with our Data Protection Officer directly.

Collection, processing and use of personal data

Server log files

You can visit our website without needing to give any personal information. Every time you access our website, usage data is transmitted through your internet browser and stored in log data (server log files). This saved data includes IP address, date and time of download, name and URL of the downloaded file, web page from which the access takes place (referrer URL), browser information, operating system of the visiting computer, data volume transferred and the requesting provider. This data is used to ensure a smooth connection to the website, a convenient use of our website and for statistical, internal purposes. 

Data collection for contract performance

Further personal data are only recorded if the user agrees in accordance with the legal regulations for this data collection or if a legally-regulated permission allows this. We use this personal data to answer enquiries from the user, to process contracts concluded with the user, and for any technical administration. Only those personal data are used whose processing is not legally excluded, unless there is an exception.

Contact form

If you have any questions of any kind, you can contact us by using a form provided on the website for this purpose. It is necessary to provide a valid e-mail address so that we know from whom the request originates and in order to be able to respond to it. Further information can be provided voluntarily. The data processing for the purpose of contacting us is in accordance with Art. 6 para. 1 p. 1 item a of the GDPR based on your voluntarily consent given. The personal data collected by us for the use of the contact form will be automatically deleted after conclusion of the enquiry made by you.

Careers / Job Opportunities

In our career section, you have the opportunity to send us an unsolicited application or apply for advertised positions via a web form. For this purpose, we use the applicant platform rexx systems (https://www.rexx-systems.com/), which is operated by rexx systems GmbH, Süderstrasse 75-79, 20097 Hamburg, Germany. It is a platform through which job applications are made possible. When you call up the careers page of our website, the link included there establishes a connection to rexx systems to enable the technical transfer of the application documents. When the connection to rexx systems is established, data is transferred to rexx systems. When you visit the rexx systems website, rexx systems stores the IP address assigned to you by your Internet service provider as standard. Personal data that we need exclusively to process your application will only be stored if you provide it to us voluntarily as part of your application. The information you provide there is either voluntary or is marked with an asterisk (*) as mandatory. The mandatory information is absolutely necessary to process your application and to be able to contact you. The digital applicant file contains all the data entered by the candidate as well as the entire contact history. The data processing is carried out exclusively for the purpose of processing the application in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO on the basis of your voluntarily given consent or for the decision on the establishment of an employment relationship in accordance with § 26 para. 1 p. 1 BDSG. The personal data collected by us for the use of the form as well as the other files transmitted will be stored for 6 months after the application process has ended (rejection or recruitment) and then deleted.

Transfer of data

Transfer of your personal data to third parties for purposes other than those listed below will not take place. We only share your personal information with third parties if:

• you have expressly consented, according to Art. 6 para. 1 p. 1 item a of the GDPR to disclosure pursuant to Art. 6 para. 1 sentence 1 item f of the GDPR of that which is required in order to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data,
• in the event that disclosure pursuant to Art. 6 para. 1 p. 1 item c of the GDPR is a legal obligation, and
• this is legally permissible and is required, in accordance with Art. 6 para. 1 sentence 1 item b of the GDPR, for the fulfilment of contractual relationships with you.

Rights of the data subject

You have the right:

• in accordance with Art. 15 of the GDPR, to request information about the nature and extent of the personal data collected by us, in particular its processing, planned storage duration, retention and its transfer;
• in accordance with Art. 16 of the GDPR, to demand the immediate correction of incorrect personal data or completion of personal data stored by us;
• in accordance with Art. 17 of the GDPR, to demand the deletion of your personal data stored by us, except where the processing is required for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims; or alternatively, in accordance with Art. 18 of the GDPR, to demand a restriction of the processing of the data;
• in accordance with Art. 20 of the GDPR, to receive the personal data and to request its transfer to another data controller.
• in accordance with Art. 7 para. 3 of the GDPR, to revoke at any time the consent you have given us. As a result, we are not allowed to continue the data processing based on this consent in the future, and
• in accordance with Art. 77 of the GDPR, to complain to a supervisory authority. As a general rule, you can contact the supervisory authority for this.

Right of objection

If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 item f of the GDPR, you have the right in accordance with Art. 21 of the GDPR to file an objection against the processing of your personal data provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without having to specify any particular situation. If you would like to exercise your right of revocation or objection, please send an e-mail to info@vsmabrasives.com

Data security

We secure our website and other systems by means of technical and organisational measures against loss, destruction, access, modification or dissemination of your data by unauthorised persons. Despite regular checks, complete protection against all risks is not possible.

The site uses industry standard SSL (Secure Sockets Layer) encryption in several areas. This ensures the confidentiality of your personal information over the internet. If a single page of our website is encrypted, this will be indicated by the closed representation of the key or lock symbol in the lower status bar of your browser.

Cookies

Our website uses cookies. Cookies are small text files that are stored by the Internet browser on the end device (computer, tablet, smart phone, etc.) of the user. These are saved when the website is accessed. It receives information about the visit to the website and regularly accesses this information when the website is revisited. The use of cookies enables us and you to optimise our online offer. In addition, we use cookies to analyse the surfing behaviour of our site visitors as well as to enable targeted, interest-based advertising. Some features of our website cannot be provided without the use of cookies. For these, it is necessary that the browser is recognised even after a page transition.

Processing is based on Art. 6 (1) item a of the GDPR from the legitimate interest in the above-mentioned purposes. However, this does not mean that we will receive any direct knowledge of your identity as the data will not be stored with any of your specific personal data.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or that a notice always appears before a new cookie is created. However, disabling cookies completely may mean that you cannot use all the features of our website.

Social media services

YouTube

We have included YouTube videos in our online offering, which are stored on http://www.YouTube.com and are directly playable from our website. These are all integrated in the "enhanced privacy mode", which means that if you do not play the video, no data about you as a user will be transmitted to YouTube. Personal data is only transmitted when you play the videos. We have no influence on this data transfer.

When you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customised website design. Such evaluation is carried out particularly (even for users who are not logged in) in order to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact Google in order to exercise this right.

For more information on the purpose and scope of the data collection and its processing by YouTube, please refer to the data protection statement. There you will also find further information about your rights and settings options for the protection of your data privacy: https://www.google.de/intl/us/policies/privacy. Google also processes your personal data in the USA and has subscribed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.