Data policy

1. Controller, Article 4(7) GDPR

The controller responsible for the processing of your data in accordance with Article 4(7) of the General Data Protection Regulation (GDPR) is

Freiberger Lebensmittel GmbH
Zerpenschleuser Ring 1
13439 Berlin
datenschutz@freiberger.de

You can find further information about our company in the legal notice.

2. What is "personal data"?

Personal data is information about you personally that allows your identity to be established, e.g. your name, your address or your telephone number. It does not include information that does not give any indications of an identified or identifiable person.

3. Scope of data collection, processing and use

You may visit our website and retrieve all content without us having to collect any personal data from you or you needing to disclose any personal data.

a) Server logs

When you visit our website solely for information purposes, we only collect the
data that your browser transmits to our server. When you wish to view our website, we collect the following data, which we require for technical purposes in order to display our website to you and to guarantee stability and security:

• The user’s IP address
• Useragent (browser type/browser version/operating system used)
• The client request
• The requested domain
• The status code
• Time of the server request (timestamp)

The data is stored by our provider for a maximum of 3 days and then deleted automatically.

b) Cookies

So-called cookies may be used on our website. These serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Cookies do not damage your computer and do not contain viruses.

When you visit our website for the first time, you can choose which cookies you would like to enable in the cookie banner displayed at the bottom of the page. Your selection will be saved. You can change your selection at any time. Technically necessary cookies are enabled by default. This includes, for example, a session cookie that saves your cookie selection. All other cookies are deactivated and only become active if you actively enable them. The mode of operation and scope of data processing by the respective cookie are explained in the cookie banner itself or in this data protection declaration. We would like to point out that if you deactivate cookies, you may not be able to use all the functions of our website.

c) Contacting us by email

When you contact us by email, your email, including any personal information it contains (such as your name and address), are stored on our inbox server. The email is then forwarded to the competent contact person within our company.

d) Online application

Via our menu option “Careers at Freiberger”, you can apply for specific job opportunities with the Freiberger Group or send us a speculative application. You can find further information on the processing of your applicant data on the application form.

e) Location map - Google Maps

The start menu displays a map showing our locations. The map is supplied by “Google Maps”, a service provided by Google Inc., USA. We do not collect any data via this map. You can find out about the potential scope of Google’s data processing in Google’s privacy policy, which you can find at https://policies.google.com/privacy?hl=de.

f) Links to social media 

On our Internet pages you will find buttons that will direct you to our social media accounts, e.g. LinkedIn ® and Instagram ®, by clicking on them. Personal data may be collected and processed there by the respective operators of the services. Please note the data protection regulations there.

4. Purpose of processing and legal basis

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).

1. To comply with our contractual obligations (Article 6(1b) GDPR
   Data is processed for the purpose of rendering our contractual services or to take steps prior to entering into a contract, on request.
2. In the balance of interests (Article 6(1f) GDPR)
   Besides using your data to actually perform a contract, it may also be necessary to process it to protect our legitimate interests or those of third parties, e.g. to guarantee the technical security of our system.
3. On the basis of your consent (Article 6(1a) GDPR)
   For certain purposes, we need your consent. Processing will only be carried out if you have expressly granted this consent. You can withdraw your consent at any time. Withdrawal does not affect the lawfulness of data processing prior to the receipt of said withdrawal.
4. Section 26 BDSG
   We process data that you share with us in an online application in accordance with Section 26 BDSG when deciding whether to enter into an employment contract.

5. Recipients of the data

We work with third parties that process data on our behalf in accordance with Article 28 GDPR. Besides this, we only share your personal data with third parties once we have informed you of this in advance in particular each case and obtained your consent.

6. Transfer of data to a third country

We only transfer data to recipients based outside the EU and the EEA with your consent or when this is permitted in accordance with Articles 44 et seq. GDPR.

7. Duration of storage

We will delete email requests as soon as we have responded to them and the reason for the request has been dealt with.

When you send us data that is required to fulfil contractual and legal obligations, we will only store it until said obligations have been fulfilled.

Once the data is no longer required for this purpose, it is deleted on a regular basis. It is not deleted if

• commercial and fiscal retention periods apply,
• data for proof of claims arising from a contractual relationship must be retained for the standard retention period (3 years, Section 195 of the German Civil Code (Bürgerliches Gesetzbuch, BGB)).

8. Security of your data

We take all reasonable technical and organisational measures to ensure the protection of your data. In order to protect your data during transfer, we use state-of-the-art encryption processes (e.g. SSL) via HTTPS.

9.Your privacy rights

As the “data subject”, you have a right of access in accordance with Article 15 GDPR, a right to rectification in accordance with Article 16 GDPR, a right to erasure in accordance with Article 17 GDPR, a right to restriction of processing in accordance with Article 18 GDPR and a right to data portability in accordance with Article 20 GDPR. The limitations laid down in Sections 34 and 35 BDSG apply for the right of access and the right to erasure. You also have the right to lodge a complaint with the competent data protection authority (Article 77 GDPR in conjunction with Section 19 BDSG).

Right to object (Article 21 GDPR)

If we are processing your data in order to protect legitimate interests (see above), you may object to this processing on grounds relating to your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. If we are processing personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing.

10. Obligation to provide data

You are neither legally nor contractually obligated to provide us with data when visiting our website. However, to use our services, you need to provide us with the data required to render the relevant service. For example, it is not possible to deal with your request if you do not provide any contact details or to process your application if you do not provide any application data.

11. Automated decision-making and profiling

No automated decision-making and/or profiling in accordance with Article 22(1) and (4) GDPR is carried out.

12. Data Protection Officer

If you have any questions or comments on the subject of data protection, send us an email at datenschutz@freiberger.de

13. Amendments to the privacy policy

We reserve the right to amend the terms of our privacy policy from time to time. You can request older versions of the privacy policy from us via the above email address.

V 1.1 Berlin, June 2019