Data protection

With the following information, we would like to give you as a visitor to our website an overview of the processing of your personal data by us and your rights under data protection law. Which data is processed in detail depends largely on your specific usage behavior. Therefore, not all parts of this information may apply to you.

1. Responsible body and contact details of the data protection officer

Responsible for the data processing on this online offer is the

peicom GmbH
Am Schürholz 6
49078 Osnabrück

(hereinafter also “Company” called)

You can reach our external data protection officer at

Company GENA
Data Protection Officer
Böttgerstraße 6
65439 Flörsheim

datenschutz@peicom.com

2. Processing of personal data in connection with your use of our websites, applications and online platforms.

a. Data categories, purpose of processing and legal basis

In the context of the use of our websites, applications or online tools (hereinafter collectively referred to as “online offer”), we process the following personal data:

• Personal data that you enter yourself in the context of an online offer (e.g. when registering, contacting us or participating in surveys, etc.), such as first and last name, address, e-mail address, telephone number, information provided in the context of a support request, comments or forum posts;
• HTTP data: Information that is automatically sent to us by your web browser or end device, such as your IP address, device type, browser type, operating system used, previously visited websites, subpages visited or the date and time of each visitor request.

We process your personal data for the following purposes:

• Technical administration of the website (defense against and detection of fraudulent or similar acts, including attacks on our IT infrastructure, enabling user authentication)

The legal basis for the processing of personal data for these purposes is our legitimate interest in ensuring the security of the website in accordance with Art. 6 para. 1 lit. f GDPR, regardless of whether a contractual relationship exists with you.

• Online and other services (Enabling the use of the services and functions of our online offers, processing inquiries, sending marketing information on request)

The legal basis for the processing of personal data for the above-mentioned purpose is Art. 6 para. 1 lit. b and our legitimate interest in marketing pursuant to Art. 6 para. 1 lit. f GDPR. Visiting our online offer establishes a legal relationship similar to a contract within the meaning of Art. 6 para. 1 lit. b GDPR. Without the processing of personal data, we cannot offer our online services as intended. In particular, the transmission of personal data such as the IP address is required to establish a connection.

In some cases, we expressly request your consent to the processing of your personal data. In this case, the legal basis for the processing is the consent you have given in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Art. 7 GDPR. Art. 7 GDPR.

b. Cookies

We also use cookies as part of our online offering. Cookies are small text files that are stored on your device by your browser when you visit our website. Cookies contain information that is generated in connection with the context of use and your end device.

(1) Technically necessary cookies

The use of technically necessary cookies relates to cookies that are required to make our online offering available. The legal basis for the storage and retrieval of such cookies on your end device is Section 25 (2) No. 2 TTDDG. The legal basis for further data processing in these cases is Art. 6 para. 1 lit. f GDPR (legitimate interests in the provision of the online offer or IT security).

(a) Consent management with Usercentrics

We use the Consent Management Platform (CMP) of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. The tool allows you to conveniently manage your consent to the setting of technically unnecessary cookies and to make changes in this regard, such as revoking consent. For this purpose, Usercentrics also has access to the collected data as a processor.

The tool enables us to inform you about your consent and to obtain, manage and document it. For this purpose, we process http data and the consent, insofar as this has been granted.

The purpose of the processing is to obtain consent, to provide the option of revoking or adjusting consent, to provide evidence (accountability) with regard to consent given and to ensure the security of the application. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests in the purposes mentioned).

Information on consents given and on the withdrawal of consent is kept for one year for accounting purposes.

(2) Marketing cookies

With the help of so-called marketing cookies, we process information regarding the websites visited by users in order to improve our marketing and to adapt the use of our offer to your individual preferences. We also use marketing cookies to statistically record, optimize and evaluate the use of our online services. These cookies are only activated if you have given your consent in accordance with Section 25 (1) TTDDG and Art. 6 (1) (a) GDPR in conjunction with Art. 7 GDPR. Art. 7 GDPR have given. You give your consent in this regard when you access our online offer by displaying our “cookie banner”. Here you can give your consent to the use of cookies on this website by clicking a button.

You can revoke or change your decision to use cookies requiring consent on our website at any time with effect for the future. To do this, please use the fingerprint button, which you will find at the bottom left of our website. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

(3) Functional cookies

Furthermore, we use so-called functional cookies to make the use of our online services more appealing and user-friendly. The legal basis for the use of such functional cookies, the associated data processing and the processing of the data obtained from them is our legitimate interest in the design of the website in accordance with Art. 6 para. 1 lit. f GDPR. Your consent pursuant to Section 25 (1) TTDDG and Art. 6 (1) (a) GDPR in conjunction with Art. 7 GDPR. Art. 7 GDPR. You give your consent in this regard when you access our online offer by displaying our “cookie banner”. Here you can give your consent to the use of cookies on this website by clicking a button.

You can revoke or change your decision to use cookies requiring consent on our website at any time with effect for the future. To do this, please use the fingerprint button, which you will find at the bottom left of our website. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

(c) Google Fonts

Our online offer uses so-called fonts from Google Fonts of (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, (“Google”) (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)). These fonts are integrated locally by us so that no connection to Google’s servers is established. The processing of your personal data (e.g. IP address) takes place solely on our servers, so that the legal basis for the use of these fonts is our legitimate interest in a user-friendly presentation.

c. Making contact

Contact forms are available on our website which can be used to contact us electronically. If a user makes use of these options, the data entered in the input mask is transmitted to us and some of the data is stored.

In this context, no data is passed on to third parties outside the company. The data is used exclusively for the processing of correspondence.

The legal basis for the processing of data transmitted in the course of sending an email is our legitimate interest in communicating with you in accordance with Art. 6 (1) (f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, Art. 6 para. 1 lit. b GDPR is a further legal basis for the processing.

The processing of the personal data from the input mask serves us to process the contact and to prevent misuse of the contact form.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective correspondence has ended.

The user has the option to object to the processing of their personal data at any time. In such a case, correspondence cannot be continued. Please send us your request for deletion by email to datenschutz@peicom.com. All personal data stored in the course of contacting us will be deleted in this case.

3. Processing of personal data for customer satisfaction surveys and direct marketing

If you have given us your consent or if we are authorized to do so within the framework of existing customer relationships, your contact data will also be used for direct marketing purposes (such as trade fair invitations, newsletters) or to conduct customer satisfaction surveys. You have the right to object to the use of your contact data for these purposes at any time. If you wish to exercise your right to object in this regard, please send us an email to datenschutz@peicom.com or follow the corresponding instructions that you have received from us in any promotional email. The legal basis for processing your data for advertising purposes is our legitimate interest in marketing in accordance with Art. 6 para. 1 lit. f GDPR in the case of existing customer relationships or Art. 6 para. 1 lit. a GDPR if you have given us your consent.

4. Processing of personal data of business partners

a. Data categories

As part of the cooperation with business partners, the company processes personal data of contact persons at customers, suppliers, interested parties, sales partners and cooperation partners (hereinafter referred to as “business partners”). “business partners”):

• Contact information, such as first and last name, business address, business phone number, business cell phone number, business fax number and business email address,
• Payment data, such as information required for processing payment transactions or fraud prevention, if you have refund claims,
• other information whose processing is necessary in the context of a contractual relationship and which is provided voluntarily by business partners, such as orders, inquiries or details of projects,
• personal data collected from publicly available sources, information databases or credit agencies and
• where legally required as part of compliance screenings: date of birth, ID and ID numbers, information on relevant legal proceedings or other legal disputes involving business partners.

b. Purpose of processing and legal basis

The aforementioned personal data is processed for the following purposes:

• Communication with business partners about products, services and projects, for example to process inquiries from business partners or to provide technical information about products,
• Planning, execution and administration of the contractual business relationship, for example to process orders for products and services, to make payments, for accounting and billing purposes and to carry out deliveries, maintenance activities or repairs,
• Implementation of customer surveys, marketing campaigns, market analyses, competitions, etc.,
• Maintaining and protecting the security of our products and services and our websites, preventing and detecting security risks, fraudulent activity or other criminal or malicious acts,
• Comparison of personal data with US sanctions lists on the basis of European Regulations 2580/2001 and 881/2002,
• Compliance with (i) legal requirements (e.g. retention obligations under tax and commercial law), (ii) existing obligations to carry out compliance screenings (to prevent white-collar crime or money laundering) and (iii) guidelines and industry standards, and
• Settlement of legal disputes, enforcement of existing contracts and for the assertion, exercise and defense of legal claims.

The processing of personal data is necessary to achieve the aforementioned purposes. Unless expressly stated otherwise when the personal data is collected, the legal basis for data processing is

• the performance and fulfillment of a contract with you in accordance with Art. 6 para. 1 lit. b GDPR,
• the fulfillment of legal obligations to which the company is subject pursuant to Art. 6 para. 1 lit. c GDPR, or
• the protection of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the initiation, execution and processing of the business relationship in commercial transactions.

If you have expressly given your consent to the processing of your personal data in individual cases, this consent is the legal basis for the processing in accordance with Art. 6 para. 1 lit. a GDPR.

5. Processing of personal data of applicants

a. Data categories and purpose of data processing

As part of the application process, we generally process the following categories of personal data:

• Personal data (first and last name, date of birth, address, school-leaving qualification)
• Communication data (telephone number, mobile phone number, fax number, e-mail address)
• Data on the assessment and evaluation in the application process
• Education data (school, vocational training, civilian/ military service, studies, doctorate)
• Data on your professional career to date, training and job references
• Information on other qualifications (e.g. language skills, PC skills, voluntary work)
• Application photo
• Details of desired salary
• Application history
• Social media links (link to Xing or LinkedIn profile if data transfer from these profiles has been selected)

Personal data that you provide to us as part of your application will be stored and used exclusively for the purpose of processing the application and, if necessary, for the implementation of the subsequent employment relationship.

b. Legal basis for data processing

The processing of your personal data as part of the application process is based on Art. 6 para. 1 lit. b GDPR (establishment and performance of a contract) and Art. 6 para. 1 lit. f GDPR (legitimate interest in communication and processing of the application).

Any further processing of applicant data will only take place on the basis of an explicit declaration of consent. This is particularly the case if we are unable to offer you a current vacancy in the company, but we consider your application to be suitable for future positions. In this case, your data will be stored and processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

The storage and processing of your data for forwarding to other companies in the group of companies is also based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.

c. Information on shared responsibility

If you apply to peiker Holding GmbH and give your consent for inclusion in the applicant pool, we will also check whether you are suitable for another position with us or another of the above-mentioned Peiker family companies in accordance with your consent and contact you accordingly if necessary. Only in this case and if the application also relates to other companies of the Peiker family or is kept open for this purpose will the processing be carried out as joint controllers. In this respect, the HRworks applicant portal is operated by us together with the companies of the Peiker family [peiker Holding GmbH, peiker Immobilien GmbH, peiker CEE GmbH, FTI Engineering Network GmbH, peicom GmbH, Hofgut Liederbach Service GmbH] as joint controllers within the meaning of Art. 26 GDPR.
As joint controllers pursuant to Art. 26 GDPR, the companies have recorded the joint use of the application portal in an agreement and agreed which of them fulfills which data protection obligation. In the following, we would like to inform you about the main contents of the agreement between the joint controllers:

(i) Cooperation between the jointly responsible parties

The companies decide on the content of the application process and the specific processing of applicant data independently of each other. If you apply to peiker Holding GmbH and give your consent to this, we will include you in an applicant pool and, in accordance with your consent, also check whether you are suitable for another position with us or another of the Peiker family companies mentioned above and, if necessary, contact you accordingly. Only in this case and if the application also relates to other companies of the Peiker family or is kept open for this purpose will the processing be carried out as joint controllers. The comparison is always carried out by us, but also to fill the open vacancies of the other Peiker family companies mentioned above.
If you only apply for a vacancy at peiker Holding GmbH and do not give your consent for us to include your data in an applicant pool and to check whether you are suitable for a position at one of the other Peiker family companies mentioned above, the processing is not carried out under joint responsibility. In this case, only peiker Holding GmbH is the controller.
The companies have jointly determined the means and purposes of the technical operation and organizational use of the applicant portal.
The applicant portal itself is provided by an external service provider as part of order processing in accordance with Art. 28 GDPR. The processor pursuant to Art. 28 GDPR is HRworks GmbH, based in Freiburg.

(ii) Responsibility of the companies

The company for whose job advertisement you are applying is individually responsible for informing you about the use of your applicant data in accordance with Art. 13 and 14 GDPR and your rights in this context. You can find information on this in this data protection declaration.
You can request information about the processing of your personal data at any time. In addition, you can of course exercise all other rights to rectification, erasure, restriction of processing and data portability in accordance with Art. 15-21 GDPR at any time. In addition, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation in accordance with Art. 21 para. 1 GDPR. In accordance with the joint controllership agreement, only the company for whose job advertisement you have applied is responsible for your inquiries. If you address your request to a company other than this one, the request will be forwarded immediately to the responsible company, which will then process your request.
peiker Holding GmbH performs the administrator function of the applicant portal for all companies of the Peiker family. For this purpose, peiker Holding GmbH, in coordination with the other companies of the Peiker family, exercises the rights of instruction and control over the processor in accordance with Art. 28 GDPR.

d. Disclosure of data

Your data will be made available to the responsible employees of the HR department and the responsible employees or supervisors of the specialist department(s) for the position for which you have applied.

In the case of an unsolicited application, your documents will be made available to the responsible employees in the HR department and the responsible employees or superiors in the relevant specialist departments for whom your application may be of interest.

We do not forward your applicant data to affiliated subsidiaries or parent companies unless your application also relates to these companies or is kept open for this purpose. We also use processors (e.g. IT service providers). Your data will be passed on to them in strict compliance with the obligation of confidentiality and the requirements of the GDPR. The processors commissioned by us may only process the data for us and not for their own purposes. The responsibility for data processing remains with us in these cases.

Data will also be passed on if we are obliged to do so due to legal provisions and/or official or court orders.

e. Transfer of personal data to third countries

Our company is part of a group of companies in which personnel responsibilities may exist across national borders. For this reason, responsible superiors in other countries may also have access to your applicant data. This data processing is necessary to decide on the establishment of an employment relationship. In addition, data is also transferred to third countries when your data is included in the talent pool. This means that our affiliated foreign units also have access to your applicant data.

If data is transferred to a body in a third country, appropriate guarantees for the protection of your personal data will ensure that the level of data protection in the European Union is complied with.

f. Deletion periods for applicant data

If no employment relationship is established, the application documents will be deleted six months after rejection. The legal basis for the storage in this regard is Art. 6 para. 1 lit. f GDPR. Our legal interest in this regard is the defense against any claims arising from the General Equal Treatment Act (“AGG“). In all other respects, the general deletion periods and information under Section 9 apply.

6. Social Media

We place links to the social network LinkedIn on our website to draw attention to our services and products as well as career opportunities and to get in touch with you as a visitor and user of these social media pages and our website.

You can recognize the links by the logo of the respective social network. When you click on the logo, a direct connection is established between your browser and the server of the respective service and you are redirected to the website of the service provider.

Below you can find out how your data is processed on the respective social media sites.

We operate the following presences:

a. Data processing by us

We operate social media presences to draw attention to our products, services and career opportunities, to communicate with users and to achieve improvements.

The processing of personal data is generally carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our legitimate interests in public relations, communication and product improvement, unless otherwise stated.

It is possible for us to view your posts and similar interactions on our social media presences and – depending on your privacy settings – your public profile. We may use this data to improve our information and products, particularly on our social media sites.

If you contact us via our social media presence, we will process the personal data you provide in order to process your request, in particular to respond to inquiries. We may then answer your request via the respective social media presence. In many cases, the legal basis for the processing of personal data is Art. 6 para. 1 lit. b GDPR (fulfillment of contract or pre-contractual measures) or, if this legal basis is not relevant, Art. 6 para. 1 lit. f GDPR due to the legitimate interests arising from the purposes mentioned.

In addition, we may also process personal data in connection with the social media presences in accordance with the information in the other sections of the data protection information.

As a precaution, we would like to point out that communication via social media platforms may be insecure. You can contact us at any time via other communication channels and will then also receive a response via these other channels.

We also receive aggregated usage statistics from the platforms, which we use to evaluate usage behavior and to improve our information offering. The usage statistics may also be compiled by the platforms on the basis of personal usage data. Further information on this can be found in the data protection notices of the respective providers linked above. Special information on Facebook and Instagram can be found below.

b) Processing by the platform operators

We have no influence on the processing of your personal data by the respective providers. Rather, the platform operators have control over data processing in the context of the use of the respective service. This includes, for example, the storage and use of cookies on user devices and the analysis of your behavior on the social network.

c) Notes on the deletion of contributions

If you publish personal data on our social media presences in the form of posts, such as images, texts, videos, or interact in other ways, e.g. “liking” posts, your data will be processed and in many cases published. If this content is inappropriate, we may delete it in accordance with the usual procedures and policies of the respective platforms.

7.recipients and categories of recipients

Within our company, those departments that need your data to fulfill contractual and legal obligations will have access to it. Service providers and vicarious agents employed by us may also receive data for these purposes if they maintain confidentiality and integrity in particular. These are companies in the categories of IT services, telecommunications, sales and marketing.

With regard to the transfer of data to recipients outside our company, it should first be noted that we only pass on necessary personal data in compliance with the applicable data protection regulations. We may only pass on information about you if this is required by law, if you have given your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be

• public bodies and institutions (such as law enforcement authorities) in the event of a legal or official obligation,
• other Group companies for risk management due to legal or regulatory obligations,
• Service providers that we use in the context of order processing relationships and
• Service providers that are explicitly named as recipients in this data protection notice.

8. Transfer to third countries

Data is transferred to bodies in countries outside the European Union (so-called third countries) if

• it is necessary for the execution of your orders (e.g. delivery orders),
• it is required by law (e.g. reporting obligations under tax law) or
• you have given us your consent.

Furthermore, a transfer to bodies in third countries to maintain and ensure the IT operations and IT security of the company cannot be ruled out.

The use of our social media offering may also result in data transfers and subsequent processing of usage data of the respective services in the USA.

Any data transmission takes place exclusively automatically in connection with the use of our offer on social media with the help of cookies.

When transferring data to so-called third countries, we ensure that this is done in accordance with the law. As a rule, data transfers are permitted on the basis of an adequacy decision, particularly in the case of transfers to the USA. If this does not apply in individual cases, we will conclude the standard data protection clauses or obtain your explicit consent.

You can completely reject the use of cookies and other technologies or make individual settings. You can also withdraw your consent at any time with effect for the future. Previously carried out processing remains unaffected by a revocation.

In addition, personal data may be transferred to third countries by the companies to which we disclose personal data, as described in the other sections.

9. Storage duration

We process and store your personal data for as long as is necessary to fulfill our contractual obligations and exercise our rights.

The revocation of a previously given consent is kept for three years (accountability). The administration cookie is deleted 6 months after the last visit. Server log data is anonymized before storage. Data relating to newsletters and invitations will be deleted immediately after unsubscribing.

In individual cases, longer storage of data for the purpose of providing evidence may be justified in justified individual cases. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is 3 years.

10. Data security

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, our website uses an SSL-encrypted connection. TLS encryption implemented. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

Our employees and the service companies commissioned by us are also obliged to maintain confidentiality and to comply with the provisions of the applicable data protection laws. The company takes appropriate technical and organizational security measures to protect your personal data from loss, alteration, destruction and access by unauthorized persons or unauthorized disclosure. Our security measures are constantly being improved in line with technological developments.

11. Rights of data subjects

Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR.

The restrictions under Sections 34 and 35 BDSG apply to the right to information and the right to erasure. In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

You can revoke your consent to the processing of personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You also have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based in particular on Article 6 (1) GDPR. 1 lit. f GDPR takes place, to file an objection. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. In particular, this includes that the processing is necessary for the establishment, exercise or defense of legal claims.

You also have the right not to be subject to fully automated decision-making in accordance with Art. 22 GDPR. In principle, we do not use fully automated decision-making to establish, implement and terminate the business relationship. If we use these procedures in individual cases (e.g. to improve our products and services), we will inform you separately about this and about your rights in this regard, insofar as this is required by law.

Further information and explanations regarding the above-mentioned rights can be found on the website “Rights for citizens“ of the European Commission.

12. Obligation to provide data

As part of our online offering, we rely on the processing of such usage data as is necessary for the performance and termination of the service and for the fulfillment of the associated obligations. Without the collection of usage data, we and our service providers will not be able to provide you with our online services. However, the provision of personal data is neither legally nor contractually required.

13. Profiling

We do not process your personal data automatically in such a way that this has a legal effect or significantly impairs it in a similar way.

14. Up-to-dateness of and changes to this privacy policy
15. This English text has been generated by a translation program and is for a better user experience. This Privacy policy is only legally binding in the German version.

This privacy policy is currently valid and was last updated in January 2025.