Privacy

Responsible for this website is:

TIMBERTEC GMBH

Max-Planck-Strasse 15
23701 Eutin

Fon +49 (0) 45 21 76 00-0
Fax +49 (0) 45 21 76 00-40 00
E-Mail: Info@TimberTec.com

We have appointed a data protection officer for our company. You can reach him under:

Datenschutzbeauftragter@TimberTec.com

When you visit our website, we process the following data:

• IP address of the requesting computer
• Date and time of retrieval
• Browser type
• Language and version of the browser software
• Operating system of the requesting computer
• Name of the retrieved file
• Amount of data transferred
• Referring URL

The aforementioned data will be processed by us for the following purposes:

• Ensuring a smooth connection of the website,
• Ensuring a comfortable use of our website,
• Evaluation of system security and stability, and
•  for other administrative purposes.

The legal basis for the data processing is Art. 6 para. 1 f DSGVO. Our legitimate interest follows from the data collection purposes listed above.

After 7 days, the IP address is deleted from all systems. After that, a personal reference is no longer possible.

We use the personal data actively communicated by you only for the purpose agreed in each case and only to the extent necessary.
The aforementioned data is processed by us for the following purposes:

• Ensuring a smooth connection of the website,
• Ensuring a comfortable use of our website,
• Evaluation of system security and stability, and
• for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

• Data processing for the purpose of contacting us is based on a pre-contractual measure according to Art. 6 para. 1 p. 1 lit. b) DSGVO. If a contract is concluded, the data can be included in our customer care system. The data will not be processed for any other purposes.
• The data processing serves the purpose of establishing and implementing an employment relationship in accordance with Art. 88 DSGVO in conjunction with § 26 BDSG. In the event of a positive decision, the personal data will be included in our personnel file and pursue the purposes of the "employee management" procedure.
• If you have expressly consented in accordance with Art. 6 para. 1 p. 1 lit. a) DSGVO, we will use your e-mail address to send you our newsletter on a regular basis.
• If you have registered with us, we will use your data to manage your account and, in the event that a third party misuses your data and registers on our site with this data without your knowledge, as a safeguard on our part pursuant to Art. 6 para. 1 p. 1 lit. b) DSGVO.

When you visit our website, we process personal data on the basis of the following legal grounds:

• Consent (Art. 6 para. 1 a DSGVO)
• for the fulfillment of contracts ( 6 para. 1 b DSGVO)
• for the fulfillment of a legal obligation (Art. 6 para. 1 c DSGVO)
• on the basis of a balancing of interests ( 6 para. 1 f DSGVO)

The legal basis on which we rely in each individual case is indicated in the notice of the respective processing.

In the case of consent, you have the right to revoke it at any time with effect for the future.

If we process data on the basis of a balance of interests, you as the data subject have the right to object to the processing under the requirements of Art. 21 DSGVO.

We host the content of our website with the following provider:

RAIDBOXES

Provider is RAIDBOXES GmbH, Hafenstr. 32, 48151 Münster, Germany (hereinafter referred to as RAIDBOXES) When you visit our website, RAIDBOXES collects various log files including your IP addresses.

For details, please see the RAIDBOXES privacy policy: https://raidboxes.io/legal/privacy/.

The use of RAIDBOXES is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the most reliable presentation of our website. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. for device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

Job processing

We have concluded a contract on order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that this processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Your personal data will not be transferred to third parties for purposes other than those listed below.

We will only share your personal information with third parties if:

• you have given your express consent to this,
• the disclosure is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
• in the event that a legal obligation exists for the disclosure, and
• this is legally permissible and necessary for the processing of contractual relationships with you.

Exceptions to this rule (e.g.: by third-party providers) can be found in this privacy notice.

The responsible party does not actively transfer data to a third country or an international organization. Exceptions to this rule (e.g.: by third-party providers) can be found in this data protection notice.

We delete your data when there is no longer any need to store it. This is particularly the case if the data is required to fulfill contractual performance or to grant or defend against warranty or guarantee claims.

If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, the data will be deleted after these reasons no longer apply.

If personal data of a user is processed, he is a "data subject" within the meaning of the GDPR. He is entitled to the following rights against us as the responsible party:

• Right to information
• Right of rectification or erasure
• Right to restriction of processing
• Right to data portability
• Right to object to processing

To exercise the rights listed, please contact the privacy contact at: Datenschutzbeauftragter@TimberTec.com

If you have given us consent for data processing, you have the right to revoke this consent at any time. Please address the revocation of consent to: DATENSCHUTZBEAUFTRAGTER@TIMBERTEC.COM

If you are of the opinion that a processing of data concerning you violates data protection regulations, you have the right to complain to a supervisory authority.

E-MAIL

If you send us a message via our e-mail address, we use the data you provide to process your request. In the case of specific inquiries, the data processing takes place for the fulfillment of a contract or the initiation of a contract. For all other requests due to a legitimate interest in responding to your request.

Purpose of data processing: communication with visitors to the website

Legal basis: Art. 6 para. 1 b DSGVO, or Art. 6 para. 1 f DSGVO

Contact form

If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 para. 1 lit. f DSGVO) or on your consent (Art. 6 para. 1 lit. a DSGVO) if this has been requested; the consent can be revoked at any time.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected.

Request by e-mail, phone or fax

If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 para. 1 lit. f DSGVO) or on your consent (Art. 6 para. 1 lit. a DSGVO) if this has been requested; the consent can be revoked at any time.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular legal retention periods - remain unaffected.

When you visit our website, small text files (cookies) are stored on your computer. Some cookies are deleted after the end of your visit (session cookies). Other cookies remain on your terminal device until you delete them. This makes it possible to recognize the user in order to personalize the Internet offer. With the help of your web browser, you can adjust the use of cookies to your liking. Under certain circumstances, this may mean that our website can only be used to a limited extent.

The use of cookies is based on a consideration of interests (necessary cookies), or on the basis of consent. As the operator of our website, we have a legitimate interest in the use of cookies to ensure a user-friendly visit.

Purpose of data processing: proper and functional provision of our website

Legal basis: Art. 6 para. 1 f DSGVO

Consent with Borlabs Cookie

Our website uses the Borlabs Cookie Consent technology to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (hereinafter Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, which stores the consents you have given or the revocation of these consents. This data is not shared with the Borlabs cookie provider.

The collected data will be stored until you request us to delete it or delete the Borlabs cookie yourself, or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

The use of Borlabs cookie consent technology takes place in order to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO.

We use Pipedrive on this website. The provider is Pipedrive UK Ltd., located at 4 Kingdom Street, Paddington, W2 68D, London, UK.

Pipedrive is a web-based sales CRM that enables us, among other things, to manage existing and potential customers as well as customer contacts. With the help of Pipedrive, we can record, sort, and analyze customer interactions via e-mail, social media, or telephone across various channels. The personal data collected in this way can be evaluated and used for communication with potential customers or for marketing measures (e.g. newsletter dispatch). With Pipedrive, we are also able to record and evaluate the user behavior of our contacts on our website.

TimberTec has a legitimate interest in the most efficient customer management and customer communication possible. If a corresponding consent has been obtained, the processing is carried out exclusively insofar as the consent includes the storage of cookies or the access to information in the user's terminal device (e.g. device fingerprinting). Your consent can be revoked at any time.

For details, please refer to Pipedrive's Privacy Policy: Pipedrive Privacy Policy.

The data is hosted in Rackspace data centers in Europe. Details can be found here: Pipedrive's Commitment to Protect EU Data Transfers.

We have concluded an order processing contract for the use of the above service. This is a contract required by data protection law, which ensures that it only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

We use Hubspot CRM on this website. The provider is Hubspot Inc. 25 Street, Cambridge, MA 02141 USA (hereinafter referred to as Hubspot CRM).
Hubspot CRM enables us to manage existing and potential customers as well as customer contacts, among other things. With the help of Hubspot CRM, we are able to collect, sort and analyze customer interactions via email, social media or phone through various channels. The personal data collected in this way can be evaluated and used for communication with the potential customer or for marketing measures (e.g. newsletter dispatch). With Hubspot CRM, we are also able to record and analyze the user behavior of our contacts on our website.

The use of Hubspot CRM is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in the most efficient customer management and customer communication possible. Insofar as a corresponding consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, provided that the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. Consent can be revoked at any time.

Details can be found in Hubspot's privacy policy: https://legal.hubspot.com/de/privacy-policy.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.hubspot.de/data-privacy/privacy-shield.

Order processing
We have concluded an order processing agreement (AVV) for the use of the above service. This is a contract required under data protection law, which ensures that this processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to check whether the data entry on this website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.

The storage and analysis of the data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

For more information about Google reCAPTCHA, please see the Google Privacy Policy and the Google Terms of Service at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, dwell time, operating systems used and the origin of the user. This data is summarized in a user ID and assigned to the respective end device of the website visitor.

Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Furthermore, Google Analytics uses various modeling approaches to supplement the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this service is based on your consent according to Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. For details on data processing, please refer to the Microsoft Teams privacy policy: https://privacy.microsoft.com/de-de/privacystatement.

Youtube

We use YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit a page with the YouTube plugin, a connection to YouTube servers is established. Youtube is informed which of our pages you have visited. If you are logged into your Youtube account, Youtube can assign your surfing behavior to you personally. You can prevent this by logging out of your Youtube account beforehand.

When a Youtube video is started, the provider uses cookies that collect information about user behavior.

For more information about Youtube's data use, settings and opt-out options, please click here:: HTTPS://SUPPORT.GOOGLE.COM/YOUTUBE/TOPIC/2803240?HL=EN&REF_TOPIC=6151248

Purpose of data processing: integration of video content

Legal basis: Art. 6 para. 1 a DSGVO in conjunction with. Art. 49 para. 1a DSGVO

The integration of video content on Youtube is activated by 2-click procedure. You must therefore agree to the data processing described here before a video can be played. If you refuse this, the video content will not be available to you.

LinkedIn

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Each time a page of this website containing elements from LinkedIn is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited this website with your IP address. If you click the "Recommend Button" of LinkedIn and are logged into your account at LinkedIn, it is possible for LinkedIn to assign your visit to this website to you and your user account. We point out that we as the provider of the pages have no knowledge of the content of the transmitted data and its use by LinkedIn.

Insofar as consent has been obtained, the above-mentioned service is used on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 TTDSG. The consent can be revoked at any time. Insofar as no consent has been obtained, the use of the service is based on our legitimate interest in achieving the greatest possible visibility in social media.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de

For more information, please see LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.

This data protection notice will be updated regularly if necessary. You can find the current version on our website.

In order to fulfill our information obligations according to Art. 12 and13 of the General Data Protection Regulation (DSGVO) with regard to your application, we present our information on data protection below.

1. responsibility for data collection and processing

The responsible person in the sense of data protection law is

TimberTec GmbH, Max-Planck-Strasse 15, 23071 Eutin, Germany

represented by the management according to the imprint

Phone +49 452176000

info@TimberTec.com

2. legal basis

The legal basis for the processing of personal data is generally Art. 88 DSGVO in conjunction with Section 26 BDSG and the resulting employment contract pursuant to Art. 6 (1) (b) DSGVO and compliance with statutory provisions pursuant to Art. 6 (1) (c) DSGVO, for example the General Equal Treatment Act (AGG). Inclusion in the applicant pool and the associated transfer of data within the group of companies is based on consent pursuant to Art. 6 (1) a) DSGVO.

3. scope of data collection and processing

The personal data we receive from you either directly through our application management system "Teamtailor", by email, or through social media, a recruitment agency or a direct contact of our organization in the form of your application, resume or other documents will be processed exclusively for purposes within the application/hiring process.

These purposes are usually:

• Initiation, establishment and/or implementation of an employment relationship as a result of an application procedure carried out on your initiative or the advertisement of a position.
• Inclusion in our talent pool.

Your data is processed in our data processing system for the purpose of initiating and/or implementing an employment relationship. As a rule, the data collected are:

• First name/Surname
• Title
• Address
• Date of birth
• Gender
• E-mail address
• Phone number
• Earliest entry date
• (optional) pictures and videos
• (Optional) Information from Facebook, LinkedIn and Xing accounts or other social media provided by you.
• Answers to questions asked during the recruitment process
• Trainings
• Qualification Papers

Personal data that you also provide to us in connection with your application will also be considered by us. However, please do not provide us with sensitive data about, for example, religion, race, political views, trade union membership, sexual orientation or health. We are not allowed to process this type of information. If we receive such data, we may not be able to consider your application further. In this case, your data will be automatically deleted after 90 days.

4. duration of data storage and deletion

• In the event of a rejection for a minimum of three months and a maximum of six months after the end of the specific recruitment procedure. This storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will continue to be required in the aforementioned case after the expiry of the deadline, the data will only be deleted when the purpose for storing it no longer applies.
• If you have given your consent to be contacted at a later date for information about interesting positions from the group of companies (inclusion in our talent pool), we will store and use your data for up to 12 months. Inclusion in the talent pool is voluntary and your rejection will not affect the assessment of your application.
• In the case of hiring, our retention periods for employees apply.

5. disclosure of personal data to third parties

HR employees, recruiting specialists, personnel officers and managers of TimberTec GmbH may process your personal data as part of the application process.

Voluntary inclusion in the talent pool means that HR employees, recruiting specialists, HR officers and managers of TimberTec GmbH may process your personal data within the group of companies consisting of the Iptor Supply Chain Systems AB Group with e.g. Iptor SE, TimberTec GmbH and SRS Group GmbH as part of the application process.

Furthermore, we may disclose users' personal data to the following entities:

• Our contractors and subcontractors acting as our processors and subprocessors in accordance with our instructions for providing the Service.
• Authorities or legal counsel in the event of suspected criminal or inappropriate conduct.
• Government agencies, legal counsel or other stakeholders when required to do so by law or governmental order.

To ensure compliance with data protection laws, we have concluded order processing agreements with our contractors and thereby ensure that you can also exercise your rights against them.

We work with the following categories of personal data processors: Applicant Tracking System/Application Management System providers, server and hosting companies, email reference companies, video processing companies, information gathering companies, analytics service companies, and other companies with respect to the provision of the Service.

We will never share your personal information outside the Iptor Supply Chain Systems AB group. An exception to this is if you agree with us that we may obtain personal references about you. In this case, we will receive the relevant contact details directly from you. We will only obtain information from your contact about previous periods of employment. No sensitive data will be discussed.

6. location

Your personal data received in the application process will be stored and processed within the EU/EEA or in a third country which, in the opinion of the European Commission, offers an adequate level of protection.

7. data subject rights

You have the right to information about the personal data processed by us about you in accordance with Art. 15 DSGVO. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require evidence from you that proves that you are the person you claim to be. You are entitled to a copy of the personal data processed free of charge. For additional copies requested, we have the right to charge a reasonable fee based on the administrative costs of such request.

You have a right to rectification, erasure or restriction of the processing of your personal data to the extent that you are entitled to do so by law pursuant to Art. 16, 17 and 18 DSGVO.

You have a right to object to processing within the framework of the legal requirements. In particular, you have the right to object to the processing of your data in connection with the storage in the talent pool in accordance with Art. 21 (1) and (2) DSGVO.

In certain circumstances, you have a right to data portability, which means that you can request to receive your personal data and transfer it to another controller, provided that this does not affect the rights and freedoms of others.

Furthermore, you have the right to complain about the processing of personal data by us to a supervisory authority for data protection.

8. contact

To exercise your rights, for questions, further information about our handling of personal data, please contact our.

data protection officer. You can reach him at the following address: datenschutzbeauftragter@TimberTec.com

To contact us regarding the application process, please use the following contact information:

TimberTec GmbH, Max-Planck-Str. 15, 23701 Eutin, Germany

Phone +49 452176000 carina.geibel@timbertec.com