Legal notice
Responsible for the content:
Isselburg Guß und Bearbeitung GmbH
Minervastrasse 1
46419 Isselburg
Telephone: 0 28 74 / 39-0
Email: sales@ihi.de
Managing directors:
Dirk Engels
Ralf Kaiser
Siegmund Rudigier
Commercial register: HR B 8510, Coesfeld Local Court
VAT identification number: DE 180 765 540
Design and implementation:
KRAUSE & SCHWARZ GmbH medienagentur
Gelderner Straße 58
47623 Kevelaer
Telephone: 0 28 32 / 93 39-0
Email: info@krause-schwarz.de
Web: www.krause-schwarz.de
Privacy policy
Thank you for visiting our website. Protecting and safeguarding your personal information when you use our website is very important to us. We would therefore like to explain which of your personal data we collect when you visit our website and the purposes for which those data are used.
This privacy policy applies to the online services of Isselburg Guß und Bearbeitung GmbH available under the domain www.ihi.de and its various subdomains (‘our website’).
Who is responsible and how can I contact you?
Controller
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)
Isselburg Guß und Bearbeitung GmbH
Minervastraße 1
46419 Isselburg
DE
+49 02874/39-221
sekretariat@ihi.de
Data protection officer
arbeitgeber ruhr GmbH
Königsallee 67
44789 Bochum
DE
Dirk Grützner
gruetzner@datenschutzbeauftragter.ruhr
What is this about?
This privacy policy fulfils the legal transparency requirements for the processing of personal data. Personal data are any information relating to an identified or identifiable natural person. Examples include your name, age, address, telephone number, date of birth, email address, IP address and your behaviour when visiting a website. Information that we cannot link to you, or can link to you only with disproportionate effort, for example because it has been anonymised, is not personal data. Processing personal data — such as collecting, retrieving, using, storing or transmitting them — always requires a legal basis and a defined purpose.
Stored personal data are deleted as soon as the purpose of the processing has been achieved and there are no lawful grounds for retaining them. For each processing activity, we explain the specific retention periods or the criteria used to determine them. Independently of this, we retain personal data in individual cases to establish, exercise or defend legal claims and where statutory retention duties apply.
Who receives my data?
We disclose personal data processed on our website to third parties only where this is necessary to fulfil the relevant purposes and is covered by a legal basis in the individual case, such as consent or the protection of legitimate interests. We may also disclose personal data to third parties in individual cases where this serves to establish, exercise or defend legal claims. Possible recipients may include law enforcement authorities, lawyers, auditors and courts.
Where we engage service providers to operate our website who process personal data on our behalf under Article 28 GDPR, those providers may receive your personal data. Further details about processors and web services are provided in the overview of individual processing activities.
Do you use cookies?
Cookies are small text files that we send to the browser on your device during your visit to our website and that are stored there. As an alternative to cookies, information can also be stored in your browser’s local storage. Some website functions cannot be provided without cookies or local storage; these are technically necessary cookies. Other cookies enable various analyses, for example recognising the browser you use when you return to our website and transmitting information to us; these are non-essential cookies. Cookies can help us make our online services easier to use and more effective, for example by understanding how you use our website and identifying your preferred settings, such as country and language. Where third parties process information using cookies, they collect that information directly through your browser. Cookies do not damage your device. They cannot run programmes or contain viruses.
The individual processing activities explain the services for which we use cookies. Detailed information about the cookies used is available in this website’s cookie settings or consent manager.
|
Domain |
Name |
Description |
Retention period |
|
www.ihi.de |
pll_language |
This cookie name is associated with the Polylang plugin for WordPress websites. It stores a visitor’s language preference to support multilingual websites. When set as a persistent cookie or with the default lifetime of one year, it should not necessarily be regarded as essential but as functional. |
Approximately 12 months |
|
www.ihi.de |
real_cookie_banner-v:3_blog:1_path:dcabd42 |
Not available |
Approximately 6 months |
What rights do I have?
Subject to the statutory requirements of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:
-
Access under Article 15 GDPR to the data stored about you, in the form of meaningful information about the details of processing and a copy of your data;
-
Rectification under Article 16 GDPR of inaccurate or incomplete data stored by us;
-
Erasure under Article 17 GDPR of data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, comply with a legal obligation, serve reasons of public interest, or establish, exercise or defend legal claims;
-
Restriction of processing under Article 18 GDPR where you contest the accuracy of the data, the processing is unlawful, we no longer need the data and you oppose their erasure because you need them to establish, exercise or defend legal claims, or you have objected to processing under Article 21 GDPR.
-
Data portability under Article 20 GDPR where you provided personal data to us on the basis of consent under Article 6(1)(a) GDPR or a contract under Article 6(1)(b) GDPR and we processed those data by automated means. You may receive your data in a structured, commonly used, machine-readable format, or we may transmit them directly to another controller where technically feasible.
-
Objection under Article 21 GDPR to processing of your personal data based on Article 6(1)(e) or (f) GDPR where grounds arise from your particular situation or your objection relates to direct marketing. The right to object does not apply where compelling legitimate grounds for processing are demonstrated or processing serves to establish, exercise or defend legal claims. Where no right to object applies to a particular processing activity, this is stated there.
-
Withdrawal of consent you have given under Article 7(3) GDPR, with effect for the future.
-
Complaint under Article 77 GDPR to a supervisory authority if you consider that the processing of your personal data infringes the GDPR. You can generally contact the supervisory authority for your habitual residence, your workplace or our registered office.
How are my data processed in detail?
The following sections explain each processing activity, the scope and purpose of processing, its legal basis, any obligation to provide your data and the relevant retention period. No automated individual decision-making, including profiling, takes place.
Provision of the website
Nature and scope of processing
When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is stored temporarily in a log file:
-
IP address of the requesting computer
-
Date and time of access
-
Name and URL of the requested file
-
Website from which access originated (referrer URL)
-
Browser used and, where applicable, your computer’s operating system and the name of your internet access provider
[Our website is hosted by a service provider rather than by us. The provider processes the data listed above on our behalf for the stated purposes under Article 28 GDPR.]
Purpose and legal basis
Processing serves our overriding legitimate interest in displaying our website and ensuring its security and stability, on the basis of Article 6(1)(f) GDPR. Collecting the data and storing them in log files is essential for operating the website. There is no right to object to processing because of the exception under Article 21(1) GDPR. Where continued storage of log files is required by law, processing is based on Article 6(1)(c) GDPR. There is no statutory or contractual obligation to provide the data; however, it is technically impossible to access our website without providing them.
Retention period
The data listed above are retained for the time during which the website is displayed [and, for technical reasons, for a maximum of [7 days] beyond that].
Contact form
Nature and scope of processing
Our website allows you to contact us using a form. Information collected through mandatory fields is required to process your enquiry. You may also voluntarily provide additional information that you consider necessary for dealing with your enquiry.
Your personal data are not disclosed to third parties when you use the contact form.
Purpose and legal basis
Data submitted through the contact form are processed to communicate with you and deal with your enquiry on the basis of your consent under Article 6(1)(a) GDPR. If your enquiry relates to an existing contractual relationship with us, processing serves to perform that contract under Article 6(1)(b) GDPR. There is no statutory or contractual duty to provide your data; however, we cannot process your enquiry without the information requested in mandatory fields. If you do not wish to provide these data, please contact us by another means.
Retention period
Where you use the contact form on the basis of consent, we retain the data collected for each enquiry for three years from completion of your enquiry or until you withdraw consent.
[If you use the contact form as part of a contractual relationship, we retain the data collected for each enquiry for [three years] after the contractual relationship ends.]
Applicant contact form
Nature and scope of processing
We collect and process applicants‘ personal data. This processing may take place electronically, for example when applicants send application documents by email or through a web form on our website. Our website allows you to apply for advertised vacancies by email.
Your data will be retained in an applicant database beyond the current application process only if you have expressly consented to this.
Purpose and legal basis
Data relating to your application are processed to handle the application and decide whether to establish an employment relationship, on the basis of section 26 of the German Federal Data Protection Act (BDSG). If your application documents are disclosed to third parties, in particular an affiliated company, or your data are retained beyond the current application process, processing is additionally based on Article 6(1), first sentence, point (a) GDPR. There is no statutory or contractual obligation to provide your data; however, your application cannot be processed without the necessary information.
Retention period
We retain the collected data for six months from the date on which the position is filled.
Our presence on social media platforms
We maintain fan pages, accounts or channels on the networks listed below to provide information and offers within social networks and to give you additional ways to contact us and learn about our services. The following sections explain which data we or the relevant social network process when you access and use our fan pages or accounts.
Data we process about you
If you contact us through a social network’s messenger or direct-message function, we generally process the username you use to contact us and may store other data you provide where necessary to handle and respond to your request.
The legal basis is Article 6(1), first sentence, point (f) GDPR: processing is necessary to protect the controller’s legitimate interests.
(Statistical) usage data we receive from social networks
Insights functions automatically provide us with statistics about our accounts. These include total page views, likes, page activity, post interactions, reach, video views and information about the proportion of men and women among our fans or followers.
These statistics contain only aggregated data that cannot be linked to individual people. We cannot identify you through them.
Which of your data social networks process
You do not need to be a member of the relevant social network or have an account there to view the contents of our fan pages or accounts.
Please note, however, that social networks also collect and store data about visitors without an account when they access the network, for example technical data needed to display the website. They also use cookies and similar technologies over which we have no control. Details are available in the relevant social network’s privacy policy; please see the corresponding links above.
To interact with content on our fan pages or accounts, for example to comment on, share or like our posts, or to contact us through messaging functions, you must first register with the relevant social network and provide personal data.
We have no influence over data processing by social networks when you use them. To our knowledge, your data are stored and processed in particular to provide the relevant network’s services and to analyse usage behaviour using cookies, pixels, web beacons and similar technologies. This analysis forms the basis for interest-based advertising within and outside the relevant network. We cannot rule out the possibility that social networks store your data outside the EU or EEA and disclose them to third parties.
The social networks‘ privacy policies and cookie policies explain the precise scope and purposes of processing, retention and deletion periods, and the use of cookies and similar technologies when registering with and using those networks. They also explain your rights and options for objecting.
LinkedIn page
LinkedIn is a social network operated by LinkedIn Inc., based in Sunnyvale, California, USA. It enables individuals to create private and professional profiles and companies to create company profiles. Users can maintain existing contacts and establish new ones. Companies and other organisations can create profiles containing photographs and other company information to present themselves as employers and recruit staff. Other LinkedIn users can access that information, write their own articles and share content with others. The network focuses on professional discussion of specialist topics among people with similar professional interests.
When users or visitors use or visit the network, LinkedIn automatically collects data such as usernames, job titles and IP addresses using various tracking technologies. LinkedIn uses the data collected in this way to provide information, offers and recommendations, among other purposes.
We collect your data through our company profile only to enable communication and interaction with us. This generally includes your name, message contents, comment contents and profile information that you have made public.
We process your personal data for the purposes described above on the basis of our legitimate business and communication interests in providing an information and communication channel under Article 6(1)(f) GDPR. If you have given the relevant social network provider consent to data processing, the legal basis also includes Article 6(1)(a) and Article 7 GDPR.
Because the actual data processing is performed by the social network provider, our access to your data is limited. Only the social network provider has full access to your data. Consequently, only the provider can directly take and implement the measures needed to fulfil your user rights, such as access, erasure and objection requests. Such rights are therefore most effectively exercised directly with the relevant provider.
We are jointly responsible with LinkedIn for the personal content on our company profile. Data subject rights may be exercised with LinkedIn Inc. and with us.
We make no decisions about the data collected on LinkedIn’s website through tracking technologies.
Further information about LinkedIn is available at: https://about.linkedin.com .
Further information about data protection at LinkedIn is available at: https://www.linkedin.com/legal/privacy-policy .
Further information about retention and deletion periods and the use of cookies and similar technologies when registering with and using LinkedIn is available at: https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie — policy .
CDNJS
Nature and scope of processing
We use CDNJS to provide our website content correctly. CDNJS is a Cloudflare, Inc. service that acts as a content delivery network (CDN) for our website.
A CDN helps deliver online content, particularly files such as graphics and scripts, more quickly through servers distributed regionally or internationally. When you access this content, a connection is established with Cloudflare, Inc. servers, transmitting your IP address and potentially browser data such as your user agent. These data are processed solely for the purposes described above and to maintain CDNJS security and functionality.
Purpose and legal basis
The content delivery network is used on the basis of our legitimate interests in providing our online services securely and efficiently and in optimising them, under Article 6(1)(f) GDPR.
We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. Transfers to the USA take place under Article 45(1) GDPR on the basis of the European Commission’s adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU–US Data Privacy Framework (EU–US DPF).
Where no European Commission adequacy decision exists, including for US companies not certified under the EU–US DPF, we have agreed other appropriate safeguards with recipients within the meaning of Articles 44 et seq. GDPR. Unless stated otherwise, these are the European Commission’s standard contractual clauses under Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of those clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE .
Before such a third-country transfer, we also obtain your consent under Article 49(1), first sentence, point (a) GDPR through the consent manager or other forms or registrations. Please note that transfers to third countries may involve risks whose details are unknown, for example processing by security authorities in that country whose precise scope and consequences we do not know, over which we have no influence and of which you may not become aware.
Retention period
We cannot influence the specific retention period for the data processed; this is determined by Cloudflare, Inc. Further information is available in the CDNJS privacy policy: https://www.cloudflare.com/privacypolicy/.
Google Fonts
Nature and scope of processing
We use Google Fonts, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to supply fonts for our online services. To obtain these fonts, a connection is established with Google Ireland Limited servers, transmitting your IP address.
Purpose and legal basis
Google Fonts is used on the basis of your consent under Article 6(1)(a) GDPR and section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. Transfers to the USA take place under Article 45(1) GDPR on the basis of the European Commission’s adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU–US Data Privacy Framework (EU–US DPF).
Where no European Commission adequacy decision exists, including for US companies not certified under the EU–US DPF, we have agreed other appropriate safeguards with recipients within the meaning of Articles 44 et seq. GDPR. Unless stated otherwise, these are the European Commission’s standard contractual clauses under Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of those clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE .
Before such a third-country transfer, we also obtain your consent under Article 49(1), first sentence, point (a) GDPR through the consent manager or other forms or registrations. Please note that transfers to third countries may involve risks whose details are unknown, for example processing by security authorities in that country whose precise scope and consequences we do not know, over which we have no influence and of which you may not become aware.
Retention period
We cannot influence the specific retention period for the data processed; this is determined by Google Ireland Limited. Further information is available in the Google Fonts privacy policy: https://policies.google.com/privacy.
YouTube video
Nature and scope of processing
We have integrated YouTube Video into our website. YouTube Video is a component of the video platform operated by YouTube, LLC, where users can upload content, share it online and receive detailed statistics.
YouTube Video allows us to integrate content from the platform into our website.
YouTube Video uses cookies and other browser technologies to analyse user behaviour, recognise users and create user profiles. This information is used, among other things, to analyse activity relating to viewed content and produce reports. If a user is registered with YouTube, LLC, YouTube Video can associate played videos with that user’s profile.
When you access this content, a connection is established with servers of YouTube, LLC and Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, transmitting your IP address and potentially browser data such as your user agent.
Purpose and legal basis
The service is used on the basis of your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG.
We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. Transfers to the USA take place under Article 45(1) GDPR on the basis of the European Commission’s adequacy decision. The US companies involved and/or their US subcontractors are certified under the EU–US Data Privacy Framework (EU–US DPF).
Where no European Commission adequacy decision exists, including for US companies not certified under the EU–US DPF, we have agreed other appropriate safeguards with recipients within the meaning of Articles 44 et seq. GDPR. Unless stated otherwise, these are the European Commission’s standard contractual clauses under Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of those clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE .
Before such a third-country transfer, we also obtain your consent under Article 49(1), first sentence, point (a) GDPR through the consent manager or other forms or registrations. Please note that transfers to third countries may involve risks whose details are unknown, for example processing by security authorities in that country whose precise scope and consequences we do not know, over which we have no influence and of which you may not become aware.
Retention period
We cannot influence the specific retention period for the data processed; this is determined by YouTube, LLC. Further information is available in the YouTube Video privacy policy: https://policies.google.com/privacy.
Last updated: November 2024