Privacy statement

Contact details of the Controller and DPO

Controller of the processing of your personal data is Peter Cremer Holding GmbH & Co. KG, Glockengiesserwall 3, 20095 Hamburg, Telefon: +49 40 3 20 11-0, Fax +49 40 3 20 11-4 00, E-Mail: service(at)cremer.de.

You can reach our data protection officer at the above-mentioned postal address, with the addition "To the Data Protection Officer" or at the e-mail address: datenschutz(at)cremer.de. Our DPO will also be happy to hear your questions, suggestions or criticism regarding data protection.

Data processing for the provision of contractual services

You can use our website and the contact details provided there to send us inquiries about orders for contractual services. You can also use the contact form provided on our website for this purpose. If you send us personal data in this way or in any other way in the context of order inquiries, we will process your data to answer your inquieries, to execute the order/contract and to issue invoices. For this purpose, we require your name, your address data and your e-mail address. Without this data, we cannot process the contract with you. Depending on the order/contract, we may also require additional data; about which we will inform you on in each individuel case.

In the case of suppliers/service providers, we process the personal data provided by them in this way or in another way for our own ordering and retrieval of services and for invoicing the services provided. For this purpose we require the name, address data and billing data. Depending on the service / contract, we may also require additional data, which we clarify on a case-by-case basis.

The basis for data processing is Art. 6 para. 1 s.1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Data processing for communication with you

In addition to the contract data, we process your communication data (address, telephone number, e-mail address) in order to be able to contact you. Personal data that you provide to us by e-mail or via the contact form on this website will only be processed for correspondence with you or only for the purpose for which you have made the data available to us. To communicate via the contact form on our website, we require at least your full name and e-mail address. If you would like us to call you instead of sending you an e-mail, we need at least your name and telephone number. These data are necessary for us to contact you.

The basis for this data processing is also Art. 6 para. 1 s.1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Data processing for job applications

You can send us applications for jobs and apprenticeships in our company group via our website and the contact details provided there. You can also use the contact form on our website for this purpose. If you provide us with personal data this way or in any other way with this purpose, we will process your data to review, process and respond to your application and, if applicable, to prepare your employment relationship.

The basis for data processing is Art. 6 para. 1 lit. b DSGVO which permits the processing of data for deciding on the grounds for the establishment, the establishment and the performance of employment relationships.

Data processing for creditworthiness assessment

In order to prevent payment defaults, we may use your name and address data for a credit check in case purchase on account is to be agreed as method of payment for a contract. We use an external credit agency as processor for this purpose. Your data will be processed within the framework of the creditworthiness assessment on the basis of Art 6 para. 1 s.1 lit. b DSGVO or Art 6 para. 1 s.1 lit. f DSGVO. We have a legitimate interest in protecting ourselves against the occurrence of payment defaults and to obtain creditworthiness information from an external credit agency for this purpose, as we provide considerable services in advance on supply contracts.

Log files

Every time our website is accessed, usage data is transmitted through the respective internet browser and stored in log files, the so-called server log files. The data records stored in this way contain the following data: Date and time of access, name of the page accessed, IP address, referrer URL (originating URL from which you accessed the website), the amount of data transferred, as well as product and version information of the browser used and the operating system of your PC. The IP addresses of the users are deleted or made anonymous after the end of use. No evaluation or analysis of the data, except for statistical purposes and then only in anonymous form, take place. No personal "surf profiles" or similar are created or processed.

The basis for data processing is Art. 6 para. 1 s.1 lit. f GDPR, which permits the processing of data for purposes of the legitimate interests pursued by the controller, provided that the interests or fundamental rights and freedoms of the data subject do not override. We are interested in ensuring data security on our website and in optimizing our website.

Cookies

We use cookies and similar technologies only where they are needed for the website to function or where you have given your consent. Cookies are small text files stored on your device. Some of them are technically necessary to save your privacy choice. In addition, we use Matomo to understand how our website is used and LinkedIn Insight Tag to measure LinkedIn campaign performance.

Matomo is configured in two ways. First, we use a privacy-friendly, cookieless measurement to count page views, understand overall reach, and monitor whether the website is working reliably. This basic measurement does not identify you personally and does not use marketing cookies. The legal basis for this processing is Art. 6 para. 1 s. 1 lit. f GDPR. Our legitimate interest is to operate the website securely and understand its general use.

If you click "Accept All" in the cookie banner, Matomo may also store analytics cookies on your device, in particular `_pk_id*` and `_pk_ses*`. These cookies help us recognize repeat visits, understand which campaigns are working, and measure whether contact requests or other conversions take place. The legal basis for this processing is your consent pursuant to Art. 6 para. 1 s. 1 lit. a GDPR. You can refuse these cookies or withdraw your consent at any time via the cookie settings link in the footer of our website.

If you consent to the LinkedIn Insight Tag, we load a script from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. LinkedIn may receive information about your visit, including the URL visited, referrer URL, IP address, device and browser information, timestamp, and LinkedIn advertising identifiers. We use this information to measure LinkedIn advertising campaigns, understand website demographics, and create or measure campaign audiences.

LinkedIn may store or access cookies and similar identifiers, including `li_fat_id`, `UserMatchHistory`, `AnalyticsSyncHistory`, and `bcookie`. Some processing may involve LinkedIn group companies and service providers outside the European Economic Area, including in the United States. The legal basis for loading the LinkedIn Insight Tag and for the related storage or access to information on your device is your consent pursuant to Art. 6 para. 1 s. 1 lit. a GDPR and Section 25 para. 1 TDDDG. You can withdraw your consent at any time via the cookie settings link in the footer of our website. More information is available in LinkedIn's Privacy Policy and Cookie Policy.

Data processing for the fulfilment of legal obligations

In addition, we process your data to fulfil legal obligations (e.g. regulatory requirements, commercial and tax storage and proof obligations).

The basis for data processing is Art. 6 para. 1 s.1 lit. c DSGVO, which permits processing for the fulfilment of a legal obligation.

Categories of recipients of the personal data

Your contract and communication data will be forwarded to the responsible office and the responsible employees within our company for answering your inquiries, for communication, for the execution of the order or for the fulfilment of contractual obligations.

If necessary for the purpose of contract processing or for the dispatch and delivery of products or for the provision of our services, data is passed on to partner companies that have been commissioned to support the contract processing. Our partners commit themselves to comply with and observe the data protection regulations. Our partners are not permitted to use the data for any other purpose than the execution of the contract.

The basis for data processing is Art. 6 para. 1 s.1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

When transferring data to employees of our company in third countries, the basis is either Art. 49 para. 1 lit. a) GDPR (consent), or Art. 49 para. 1 lit. b) GDPR (performance of a contract or pre-contractual measures), or Art. 49 para. 1 lit. e) GDPR (assertion, exercise or defense of legal claims).

In the case of job/apprenticeship applications, the applicant's data will also be forwarded to the responsible office and the responsible employees within our company and, as far as the position concerns another company of our company group, to this company and the employees there.

The basis for data processing is Art. 6 para. 2 DSGVO, § 26 para. 1 BDSG (new) which permits the processing of data for deciding on the grounds for the establishment, the establishment and the performance of employment relationships.

The e-mails of all companies and employees of our company group are processed via the servers of Peter Cremer Holding GmbH & Co. KG, through which the e-mail addresses @cremer.de are hosted. We have concluded a company group wide order processing agreement.

Your personal data will only be passed on or otherwise transferred to third parties outside our company group if this is necessary for the purpose of contract processing or invoicing or if you have given your prior consent or if there is a legal basis or obligation for the transfer.

Insofar as we make use of the services of third parties to carry out our services, we process personal data according to the provisions of the GDPR. Service providers who support us in providing our services to you are hosting providers, e-mail service providers, IT service providers, HR service providers, financial service providers, tax service providers, CMS service providers, credit assessment service providers, marketing partners, cloud services and software (SaaS) providers.

Duration of data storage

In principle, we delete your data as soon as it is no longer required for the above-mentioned purposes, unless temporary storage is still necessary. We store your data on the basis of legal proof and storage obligations, which result among other things from the German Commercial Code and the German Tax Code, according to which the storage periods are up to ten full years. In addition, we keep your data for the period during which claims can be asserted against our company (statutory limitation period of three or up to thirty years).

Data integrity

Your personal data is transmitted securely by encryption. We use the SSL (Secure Socket Layer) coding system. Furthermore, we protect our website and other systems using technical and organizational measures against unauthorized access, modification, distribution, destruction or loss of your data. Our security measures are constantly revised an improved in accordance with technical developments. However, we would like to point out that e-mail traffic and the internet are insecure media. Compared with, for example, a telephone line, the transfer of data over the internet can be more easily tapped, recorded or even changed by unauthorized third parties. In your interest and to protect your data, we would therefore point out that special categories of personal data, in particular data covered by Art. 9 GDPR, should not be transmitted via ordinary e-mail or our contact form.

Rights of the data subject

You have the right to request information about your stored personal data, their origin and recipients and the purpose of data processing and, if necessary, a right to correction, blocking or deletion of this data at any time within the scope of the applicable legal provisions.

You may also have the right to restrict the processing of your data and to have the data you provided received back and also transmitted in a structured, common and machine-readable format.

If you have given us your consent to process personal data for specific purposes, you can revoke your consent at any time with effect for the future. If we process your data to protect legitimate interests, you may object to such processing for reasons arising from your particular situation.

You also have the right to contact a data protection supervisory authority and lodge a complaint. The authority responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 7. OG, 20459 Hamburg
Tel.: 040 / 428 54 - 4040
Fax: 040 / 428 54 - 4000

E-Mail: mailbox@datenschutz.hamburg.de