Privacy Policy

Controller for Data Processing

The controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) and the applicable state-specific data protection provisions is:

Franz H. Bruder GmbH, Neuensteiner Straße 5, 77728 Oppenau

Tel.: +49 7804 97 55 - 0, info@bruder-gmbh.de

Managing Director: Maximilian Bruder, Data Protection Officer: datenschutz@bruder-gmbh.de

Your Rights as a Data Subject

You may request information about the personal data stored about you at the address stated above (Art. 15 GDPR). Furthermore, you may request rectification if we have stored inaccurate data about you (Art. 16 GDPR). You may also, under certain conditions, request the deletion of your data (Art. 17 GDPR) or exercise your right to object (Art. 21 GDPR). You are equally entitled to the right to restriction of processing of your personal data (Art. 18 GDPR) as well as the right to receive the data you have provided in a portable format (Art. 20 GDPR). The right to information and the right to deletion are subject to the limitations set out in §§ 34 and 35 BDSG (German Federal Data Protection Act). In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG). If you believe that the processing of your personal data violates the provisions of the General Data Protection Regulation, you have the right to contact the competent supervisory authority for data protection. In the case of Baden-Württemberg, this is:

The State Commissioner for Data Protection and Freedom of Information: Office address: Königstraße 10a, 70173 Stuttgart. Postal address: Postfach 10 29 32, 70025 Stuttgart. Telephone: +49 711/615541-0, Fax: 0711/615541-15. Email: poststelle@lfdi.bwl.de

If you have given consent to the processing of your data, you may withdraw this consent at any time. Such withdrawal shall affect the permissibility of the processing of your personal data after you have communicated it to us.

Insofar as we base the processing of your personal data on the balancing of interests, you may object to the processing. This applies where the processing is not necessary, in particular, for the performance of a contract with you, which is explained in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data in the manner we have carried out. In the event of your justified objection, we will review the situation and will either cease or adjust the data processing, or demonstrate our compelling legitimate grounds on the basis of which we will continue the processing.

Retention Period

Unless otherwise specified in the detailed descriptions of the offers or procedures, we process and store your personal data for as long as necessary to fulfill our contractual and legal obligations. Your personal data will be regularly deleted or blocked if it is no longer necessary for the fulfillment of contractual or legal obligations, you have exercised your right to erasure, all mutual claims have been settled, and there are no other legal retention obligations or legal grounds for storage.

Automated Decision-Making

We do not use automated processing that results in automated decision-making or profiling regarding you.

Data Transfer to Third Countries

Data is transferred to countries outside the EU/EEA (so-called third countries) only to the extent that this is necessary or required by law, you have given us your consent, or within the scope of data processing on our behalf. If service providers in third countries are used, they are obligated, in addition to written instructions, to comply with the data protection standards in Europe through the EU Standard Contractual Clauses.

General Information

We appreciate your interest in our website. The protection of your personal data when visiting our homepage is of particularly high importance to the management of Franz H. Bruder GmbH. With the following information, we provide you with an overview of the processing of your personal data by us and your rights under data protection law. Personal data is any data that can be personally attributed to you, e.g. name, address, email addresses, user behavior. If a data subject wishes to make use of special services offered by our company via our website, such as our contact form, the processing of personal data may become necessary. Where the processing of personal data is required and there is no legal basis for such processing, we generally obtain the consent of the data subject. Processing is always carried out in accordance with the EU General Data Protection Regulation (GDPR) and in compliance with the state-specific data protection provisions applicable to Franz H. Bruder GmbH.

Franz H. Bruder GmbH, as the controller responsible for processing, has implemented technical and organizational measures to ensure the most comprehensive protection possible of personal data processed via this website against loss, destruction, access, modification, or distribution by unauthorized persons. This also includes the secure transmission of your personal data to us through encryption. We use the TLS (Transport Layer Security) encryption system for this purpose. Nevertheless, absolute protection cannot be guaranteed due to inherent security vulnerabilities in internet-based data transmissions.

We collect and use personal data of our users only insofar as this is necessary for the provision of a functional website and for the display of our content and the delivery of services. The collection and use of personal data of our users is generally carried out only with the user's consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of data is permitted by statutory provisions. The following legal bases for the processing of your personal data may apply:

• Processing based on your consent (Art. 6(1)(a) GDPR)
• Processing for the performance of a contract to which the data subject is party. This also applies to processing operations necessary for the implementation of pre-contractual measures (Art. 6(1)(b) GDPR)
• Processing for compliance with a legal obligation to which our company is subject (Art. 6(1)(c) GDPR)
• Processing where vital interests of the data subject or of another natural person require the processing of personal data (Art. 6(1)(d) GDPR)
• Processing for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests, fundamental rights, and freedoms of the data subject (Art. 6(1)(f) GDPR). Legitimate interests may include, in particular:
  • delivering the content of our website correctly;
  • statistical analysis for the review and optimization of the website;
  • providing law enforcement authorities with the information necessary for criminal prosecution in the event of a cyberattack;
  • responding to inquiries and providing services and/or information intended for you;
  • processing and transferring personal data for internal or administrative purposes;
  • preventing and detecting cases of fraud and criminal offenses;
  • ensuring the continued functionality of our information technology systems and the technology of our website, with the aim of enhancing data protection and data security within our company.

Who receives your data?

Unless otherwise specified in the detailed descriptions of the offerings, those departments within our company that require your data to fulfill our contractual and legal obligations will have access to it. We will only disclose information about you if statutory notification obligations require it, you have given your consent, and/or another legal basis legitimizes such disclosure. Where we engage commissioned service providers for individual functions of our offering, these have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.

What happens in the background, and which tools and techniques do we use to process your data?

Use of server log files
Each time the website is accessed by a data subject or an automated system, a range of general data and information is recorded in log files. This includes the IP address, the browser types and versions used, the website from which an accessing system reaches our website (referrer), the subpages accessed, the date and time of access, and other similar data and information used to avert danger in the event of attacks on our information technology systems. Temporary storage of the IP address by the system is necessary to deliver the website to the user’s computer. Log files are stored to ensure the functionality and security of the website. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and stable operation of the website. The data is deleted as soon as it is no longer required for the purpose for which it was collected. If there are concrete indications of unlawful use or an attack, the log files may be analysed to investigate and prosecute such incidents.

Use of cookies and consent management
Our website uses cookies and similar technologies (e.g. local storage). We use technically necessary cookies on the basis of Section 25(2) No. 2 TDDDG and Art. 6(1)(f) GDPR; they are required to operate the website. All other cookies and services are only used if you have given your consent via our cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your selection at any time via the cookie settings. To document consents given, we store your selection together with a timestamp (Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR).

The following cookies and services are used:

Essential

• Contao CSRF token / Contao HTTPS CSRF token: protects the website against cross-site request forgery. Deleted when the browser is closed.
• PHP SESSION ID: reference to the current session, e.g. so that form entries are retained in the event of an input error. Deleted when the browser is closed.
• Cookie settings (local storage “ccb_contao_token”): stores your selection in the cookie banner.

Statistics / Marketing

• Google Analytics: statistics on the use of the website (see below).

Functional

• Job videos (jobsaround.tv): display of job and apprenticeship videos (see below).

Google Analytics
Our website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics is loaded via the Google tag (googletagmanager.com) only if you have given your consent via our cookie banner.
Google Analytics uses cookies (_ga, _ga_TLR80M2BP6, stored for up to 13 months) to analyse your use of our website, e.g. pages visited, time on site, device used and approximate location. Google Analytics 4 does not store IP addresses. Google Signals and links to Google advertising services are deactivated. We have concluded a data processing agreement with Google.
Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the cookie settings.
Further information: https://policies.google.com/privacy

Job videos from jobsaround.tv
On our careers and apprenticeship pages we embed videos from jobsaround.tv, provided by DER PUNKT GmbH, Kaiserstr. 142-144, 76133 Karlsruhe, Germany. The videos are only loaded once you click “Watch video” or have consented to the “Functional” category in our cookie settings. Only then is a connection to the provider’s servers established.
In particular, your IP address, browser and device information, the referring page and information about your use of the video are transmitted to the provider. The provider uses its own analytics and marketing services, including Matomo, Microsoft Clarity (Microsoft Corporation, USA) and HubSpot (HubSpot Inc., USA), and may store cookies or similar technologies on your device. Data may be transferred to the USA. Microsoft and HubSpot are certified under the EU-US Data Privacy Framework.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the cookie settings.
Provider’s privacy policy: https://jobsaround.tv/de/datenschutz

Google Maps
On our directions page we link to Google Maps. No map is embedded in our website; a connection to Google is only established when you click the link and thereby visit Google’s website. Google is responsible for the data processing there: https://policies.google.com/privacy

Facebook and Instagram
We maintain company profiles on Facebook and Instagram, provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). On our website these services are only linked; data is only transmitted when you click the link.
When you visit our pages on Facebook and Instagram, Meta provides us with statistical analyses (“Insights”), e.g. page views, likes, reach and interactions of posts, video views and aggregated information on visitors’ origin, language and gender. We use this data to optimise our posts and their publication times. The legal basis is our legitimate interest in effective corporate communication (Art. 6(1)(f) GDPR).
We are jointly responsible with Meta for the processing of Insights data (Art. 26 GDPR). The corresponding agreement is available at https://www.facebook.com/legal/terms/page_controller_addendum. Meta assumes primary responsibility for the processing and for fulfilling data subject rights. Data may be transferred to the USA; Meta Platforms Inc. is certified under the EU-US Data Privacy Framework.
Meta privacy policy: https://www.facebook.com/privacy/policy, Instagram privacy policy: https://privacycenter.instagram.com/policy

Additional functions and services on our website
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you generally need to provide further personal data, which we use to provide the respective service and to which the aforementioned data protection principles apply.

For what purposes and on what legal basis do we process your data?
 
On the basis of your consent (Art. 6(1)(a) GDPR)
Our website provides a contact and enquiry form which can be used to get in touch with us electronically. The data entered by the user is transmitted to us and processed in order to handle your enquiry. This includes in particular details of your enquiry, contact details such as first name, last name, company, telephone number and e-mail address, as well as any further information provided voluntarily and any uploaded files. Mandatory fields are marked as such. The legal basis for processing the data submitted via the contact form is Art. 6(1)(b) GDPR, insofar as the enquiry is aimed at initiating or performing a business relationship. In all other cases, the processing is based on our legitimate interest in handling and responding to enquiries pursuant to Art. 6(1)(f) GDPR.
Alternatively, you can contact us via the e-mail address provided. In this case, the personal data transmitted with the e-mail is processed and stored. The data is used exclusively for further correspondence with you. The legal basis for processing data transmitted by e-mail is our legitimate interest pursuant to Art. 6(1)(f) GDPR. If the contact is aimed at concluding a contract, Art. 6(1)(b) GDPR additionally applies as the legal basis for pre-contractual measures and any subsequent processing for the performance of a contract. Personal data processed in the context of a general enquiry via the contact form or by e-mail is stored only until the respective correspondence has ended. The correspondence is deemed to have ended when the circumstances indicate that the matter in question has been conclusively resolved. If you contact us by e-mail, you may of course object to the storage of your personal data at any time. In this case, the correspondence cannot be continued. Insofar as you have given us consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. Consent given may be withdrawn at any time. Please note that withdrawal only takes effect for the future. Processing carried out before the withdrawal is not affected.
 
For the performance of contractual obligations (Art. 6(1)(b) GDPR)
Processing takes place in the context of performing contracts to which you are a party, or at your request in order to take pre-contractual measures. The purposes of the data processing depend on the respective contractual documents and the subject matter of the contract, i.e. in this case on the customer (framework) agreement in place with you.
 
In the context of balancing interests (Art. 6(1)(f) GDPR)
Where necessary, we process your data to safeguard our legitimate interests or those of third parties. Our legitimate interests include, in particular, marketing purposes, improving our business relationship, asserting legal claims and defending ourselves in legal disputes.
 

Links to other websites

Our website contains links to external websites of third parties, over whose content we have no influence. Therefore, we cannot assume any liability for these external contents. The respective provider or operator of the pages is always responsible for the contents of the linked pages. The linked pages were checked for possible legal violations at the time the link was created. Illegal contents were not recognizable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of a legal violation. Upon becoming aware of legal violations, we will remove such links immediately. Please note the privacy policies of the third parties to whose pages the links lead. In particular, our website uses links to our company presentation, images, and our latest information on the social networks facebook.com and Instagram.com, which are operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. These links are marked with a Facebook or Instagram logo.