Information on data protection

With the following information, we would like to give you as a visitor to our website an overview of the processing of your personal data by us and your rights under data protection law. Which data is processed in detail depends largely on your specific usage behavior. Therefore, not all parts of this information may apply to you.

1. responsible body and contact details of the data protection officer

The controller responsible for data processing on this website is

peicom GmbH

Gartenstraße 25

61325 Bad Homburg

(hereinafter also referred to as the “company” )

You can reach our external data protection officer at

Company GENA

Data Protection Officer

Böttgerstraße 6

65439 Flörsheim

datenschutz@peicom.com

2. processing of personal data in connection with your use of our websites, applications and online platforms

a. Data categories, purpose of processing and legal basis

We process the following personal data when you use our websites, applications or online tools (hereinafter collectively referred to as “online offer”):

Personal data that you yourself voluntarily enter as part of an online offering (such as when registering, making contact requests or participating in surveys, etc.), such as first and last name, email address, telephone number, information provided as part of a support request, comments or forum posts;
HTTP data: Information that is automatically sent to us by your web browser or end device, such as your IP address, device type, browser type, operating system used, previously visited websites, subpages visited or the date and times of the respective visitor request.

We process your personal data for the following purposes

Technical administration of the website (defense against and detection of fraudulent or similar acts, including attacks on our IT infrastructure, enabling user authentication)

The legal basis for the processing of personal data for these purposes is Art. 6 para. 1 lit. f GDPR, regardless of whether a contractual relationship exists with you.

Online and other services (enabling you to use the services and functions of our online offerings, processing inquiries, sending marketing information on request)

The legal basis for the processing of personal data for the above-mentioned purpose is Art. 6 para. 1 lit. b and lit. f GDPR. The visit to our online offer establishes a legal relationship similar to a contract within the meaning of Art. 6 para. 1 lit. b GDPR. Without the processing of personal data, we cannot offer our online services as intended. In particular, the transmission of personal data such as the IP address is required to establish a connection.

In some cases, we expressly request your consent to the processing of your personal data. In this case, the legal basis for processing is the consent you have given in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Art. 7 GDPR. Art. 7 GDPR.

b. Cookies

We also use so-called cookies as part of our online offering. Cookies are small text files that are stored by your browser on your end device when you visit our website. Cookies contain information that is generated in connection with the context of use and your end device.

(1) Technically necessary cookies

The use of technically necessary cookies relates to cookies that are required to make our online offering available. The legal basis for the storage and retrieval of such cookies on your end device is Section 25 (2) No. 2 TTDSG. The legal basis for further data processing in these cases is Art. 6 para. 1 lit. f GDPR (legitimate interests in the provision of the online offer or IT security).

(a) Consent management with Usercentrics

We use the Consent Management Platform (CMP) of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. The tool allows you to conveniently manage your consent to the setting of cookies that are not technically necessary and to make changes in this regard, such as revoking consent that has been granted. For this purpose, Usercentrics also has access to the collected data as a processor.

The tool enables us to inform you about your consent and to obtain, manage and document it. For this purpose, we process http data and the consent, insofar as this has been granted.

The purpose of the processing is to obtain consent, to enable you to revoke or adjust your consent, to provide evidence (accountability) with regard to the consent given and to ensure the security of the application. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests in the purposes mentioned).

Information on consent given and on the withdrawal of consent is stored for one year for accounting purposes.

(2) Marketing cookies

We use marketing cookies to process information about the websites visited by users in order to improve our marketing and customize the use of our website to your individual preferences. These cookies are only activated if you have given your consent in accordance with Section 25 (1) TTDSG and Art. 6 (1) (a) GDPR in conjunction with Art. 7 GDPR. Art. 7 GDPR have given your consent. You give your consent in this regard when you call up our online offer by displaying our “cookie banner”. Here you can give your consent to the use of cookies on this website by clicking a button.

You can revoke or change your decision to use cookies requiring consent on our website at any time with effect for the future. To do this, please use the fingerprint button, which you will find at the bottom left of our website. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

(b) Analysis with Leadinfo

If you have given your consent, we use the lead generation service of Leadinfo B.V., Rotterdam, Netherlands. This recognizes visits to our website based on IP addresses and shows us publicly available information, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g. “leadinfo.com”) in order to correlate IP addresses with companies and improve services.

As an alternative to revoking your consent via the fingerprint button on our website, you have an opt-out option on the page: www.leadinfo.com/en/opt-out. If you opt out, your data will also no longer be collected by Leadinfo.

Further information can be found at www.leadinfo.com.

(3) Functional cookies

We also use so-called functional cookies to statistically record, optimize and evaluate the use of our online services. This data includes page views, length of visit, origin, country and more. This statistical data is analyzed by us in order to optimize our offer. The legal basis for data processing is your consent in accordance with Section 25 (1) TTDSG and Art. 6 (1) (a) GDPR in conjunction with Art. 7 GDPR. You give your consent in this regard when you access our online offer by displaying our “cookie banner”. Here you can give your consent to the use of cookies on this website by clicking a button.

(c) Google Fonts

Our online offer uses so-called fonts from Google Fonts of (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, (“Google”) (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)). These fonts are integrated locally by us so that no connection to Google’s servers is established. The processing of your personal data (e.g. IP address) takes place solely on our servers.

c. Making contact

There are contact forms on our website that can be used to contact us electronically. If a user makes use of these options, the data entered in the input mask is transmitted to us and part of the data is stored.

In this context, the data is not passed on to third parties outside the company. The data is used exclusively for the processing of correspondence.

The legal basis for the processing of data transmitted in the course of sending an email is our legitimate interest in accordance with Art. 6 (1) (f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, Art. 6 para. 1 lit. b GDPR is a further legal basis for the processing.

The processing of the personal data from the input mask serves us to process the contact and to prevent misuse of the contact form.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective correspondence has ended.

The user has the option to object to the processing of their personal data at any time. In such a case, the correspondence cannot be continued. Please send us your deletion request via e-mail to datenschutz@peicom.com. All personal data stored in the course of contacting us will be deleted in this case.

3. processing of personal data for customer satisfaction surveys and direct marketing

If you have given us your consent or if we are authorized to do so within the framework of existing customer relationships, your contact data will also be used for direct marketing purposes (such as trade fair invitations, newsletters) or to conduct customer satisfaction surveys. You have the right to object to the use of your contact data for these purposes at any time. If you wish to exercise your right to object in this regard, please send us an email to datenschutz@peicom.com or follow the corresponding instructions that you have received from us in any promotional email. The legal basis for the processing of your data for advertising purposes is Art. 6 para. 1 lit. f GDPR in the case of existing customer relationships or Art. 6 para. 1 lit. a GDPR if you have given us your consent.

4. processing of personal data of business partners

a. Categories of data

As part of the cooperation with business partners, the company processes personal data of contact persons at customers, suppliers, interested parties, sales partners and cooperation partners (hereinafter referred to as “business partners”):

Contact information, such as first and last name, business address, business telephone number, business mobile number, business fax number and business e-mail address,
payment data, such as information required for processing payment transactions or fraud prevention, if you have refund claims,
other information whose processing is necessary in the context of a contractual relationship and which is provided voluntarily by business partners, such as orders, inquiries or details of projects,
personal data collected from publicly available sources, information databases or credit agencies and
where legally required in the context of compliance screenings: date of birth, ID and ID numbers, information on relevant legal proceedings or other legal disputes involving business partners.

b. Purpose of processing and legal basis

The aforementioned personal data is processed for the following purposes

Communication with business partners about products, services and projects, for example to process inquiries from the business partner or to provide technical information about products,
Planning, implementation and administration of the contractual business relationship, for example to process orders for products and services (including via our online store), to make payments, for accounting and billing purposes and to carry out deliveries, maintenance activities or repairs,
Carrying out customer surveys, marketing campaigns, market analyses, competitions, etc,
Maintaining and protecting the security of our products and services and our websites, preventing and detecting security risks, fraudulent activity or other criminal or malicious activity,
Comparing personal data with US sanctions lists based on European Regulations 2580/2001 and 881/2002,
Compliance with (i) legal requirements (e.g. tax and commercial law retention obligations), (ii) existing obligations to conduct compliance screenings (to prevent white-collar crime or money laundering) and (iii) guidelines and industry standards, and
Settlement of legal disputes, enforcement of existing contracts and for the assertion, exercise and defense of legal claims.

The processing of personal data is necessary to achieve the aforementioned purposes. Unless expressly stated otherwise when the personal data is collected, the legal basis for data processing is

the performance and fulfillment of a contract with you pursuant to Art. 6 para. 1 lit. b GDPR,
the fulfillment of legal obligations to which the company is subject pursuant to Art. 6 para. 1 lit. c GDPR, or
the protection of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the initiation, implementation and processing of the business relationship in commercial transactions.

If you have expressly given your consent to the processing of your personal data in individual cases, this consent is the legal basis for processing in accordance with Art. 6 para. 1 lit. a GDPR.

5. processing of personal data of applicants

a. Data categories and purpose of data processing

As part of the application process, we generally process the following categories of personal data

Personal data (first and last name, date of birth, address, school-leaving qualification)
Communication data (telephone number, mobile phone number, fax number, e-mail address)
Data on the assessment and evaluation in the application process
Education data (school, vocational training, civil/military service, studies, doctorate)
Data on previous professional career, training and job references
Information on other qualifications (e.g. language skills, PC skills, voluntary work)
Application photo
Information on desired salary
Application history
Social media links (link to Xing or LinkedIn profile if data transfer from these profiles has been selected)

Personal data that you provide to us as part of your application will be stored and used exclusively for the purpose of processing the application and, if necessary, for the implementation of the subsequent employment relationship.

b. Legal basis for data processing

The processing of your personal data as part of the application process is based on Art. 6 para. 1 lit. b GDPR (establishment and performance of a contract) and Art. 6 para. 1 lit. f GDPR (legitimate interest).

Any further processing of applicant data is only carried out on the basis of an explicit declaration of consent. This is particularly the case if we are unable to offer you a current vacancy in the company, but we consider your application to be suitable for future positions. In this case, your data will be stored and processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

The storage and processing of your data for forwarding to other companies in the group of companies is also based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.

c. Information on joint responsibility

If you apply to peiker Holding GmbH and give your consent for inclusion in the applicant pool, we will also check whether you are suitable for another position with us or another of the Peiker family companies mentioned above in accordance with your consent and contact you accordingly if necessary. Only in this case and if the application also relates to other companies of the Peiker family or is kept open for this purpose will the processing be carried out as joint controllers. In this respect, the HRworks applicant portal is operated by us together with the companies of the Peiker family [peiker Holding GmbH, peiker Immobilien GmbH, peiker CEE GmbH, FTI Engineering Network GmbH, peicom GmbH, Hofgut Liederbach Service GmbH] as joint controllers within the meaning of Art. 26 GDPR.

As joint controllers in accordance with Art. 26 GDPR, the companies have recorded the joint use of the application portal in an agreement and agreed which of them fulfills which data protection obligations. In the following, we would like to inform you about the main contents of the agreement between the joint controllers:

(i) Cooperation between the joint controllers

The companies decide on the content of the application process and the specific processing of applicant data independently of each other. If you apply to peiker Holding GmbH and give your consent to this, we will include you in an applicant pool and, in accordance with your consent, also check whether you are suitable for another position with us or another of the above-mentioned companies in the Peiker family and, if necessary, contact you accordingly. Only in this case and if the application also relates to other companies of the Peiker family or is kept open for this purpose will the processing be carried out as joint controllers. The comparison is always carried out by us, but also to fill the vacancies of the other Peiker family companies mentioned above.

If you only apply for a vacancy at peiker Holding GmbH and do not give your consent for us to include your data in an applicant pool and to check whether you are suitable for a position at one of the other Peiker family companies mentioned above, the processing is not carried out as joint controllers. In this case, only peiker Holding GmbH is the controller.

The companies have jointly determined the means and purposes of the technical operation and organizational use of the applicant portal.

The applicant portal itself is provided by an external service provider as part of order processing in accordance with Art. 28 GDPR. The processor pursuant to Art. 28 GDPR is HRworks GmbH, based in Freiburg.

(ii) Responsibility of the companies

The company for whose job advertisement you are applying is individually responsible for informing you about the use of your applicant data in accordance with Art. 13 and 14 GDPR and your rights in this context. You will find the relevant information in this privacy policy.

You can request information about the processing of your personal data at any time. In addition, you can of course exercise all other rights to rectification, erasure, restriction of processing and data portability in accordance with Art. 15-21 GDPR at any time. In addition, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation in accordance with Art. 21 para. 1 GDPR. In accordance with the joint controllership agreement, only the company for whose job advertisement you have applied is responsible for your inquiries. If you address your request to a company other than this one, the request will be forwarded immediately to the responsible company, which will then process your request.

peiker Holding GmbH is the administrator of the applicant portal for all companies in the Peiker family. For this purpose, peiker Holding GmbH, in coordination with the other companies of the Peiker family, exercises the rights of instruction and control over the processor in accordance with Art. 28 GDPR.

d. Forwarding of data

Your data will be made accessible to the responsible employees of the HR department and the responsible employees or superiors of the specialist department(s) for the position for which you have applied.

In the case of an unsolicited application, your documents will be made available to the responsible employees of the HR department and the responsible employees or supervisors of the relevant specialist departments for whom your application may be of interest.

We do not forward your applicant data to affiliated subsidiaries or parent companies unless your application also relates to these companies or is kept open for this purpose. We also use processors (e.g. IT service providers). Your data will be passed on to them in strict compliance with the obligation of confidentiality and the requirements of the GDPR. The processors commissioned by us may only process the data for us and not for their own purposes. The responsibility for data processing remains with us in these cases.

Data will also be passed on if we are obliged to do so due to legal provisions and/or official or court orders.

e. Transfer of personal data to third countries

Our company is part of a group of companies in which personnel responsibilities may exist across national borders. For this reason, responsible supervisors in other countries may also have access to your applicant data. This data processing is necessary to decide on the establishment of an employment relationship. In addition, data is also transferred to third countries when your data is included in the talent pool. This means that our affiliated foreign units also have access to your applicant data.

If data is transferred to an entity in a third country, appropriate guarantees for the protection of your personal data ensure that the level of data protection in the European Union is complied with.

f. Deletion periods for applicant data

If no employment relationship is established, the application documents will be deleted six months after rejection. The legal basis for the storage in this regard is Art. 6 para. 1 lit. f GDPR. Our legal interest in this regard is the defense against any claims arising from the General Equal Treatment Act (“AGG“). In all other respects, the general deletion periods and information under Section 9 apply.

6. social media

We place links to the social network LinkedIn on our website to draw attention to our services and products as well as career opportunities and to get in touch with you as a visitor and user of these social media pages and our website.

You can recognize the links by the logo of the respective social network. When you click on the logo, a direct connection is established between your browser and the server of the respective service and you are redirected to the website of the service provider.

Below you can find out how your data is processed on the respective social media sites.

We operate the following sites:

LinkedIn https://www.linkedin.com/company/peiker-holding-gmbh/ LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_join-form-privacy-policy

a. Data processing by us

We operate the social media presences to draw attention to our products, services and career opportunities and to communicate with users for this purpose and to achieve improvements.

The processing of personal data is generally carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our legitimate interests in public relations, communication and product improvement, unless otherwise stated.

It is possible for us to view your posts and similar interactions on our social media presences and – depending on your privacy settings – your public profile. We may use this data to improve our information and products, particularly on our social media sites.

If you contact us via our social media sites, we will process the personal data you provide in order to process your request, in particular to respond to inquiries. We may then answer your request via the respective social media presence. In many cases, the legal basis for the processing of personal data is Art. 6 para. 1 lit. b GDPR (contract fulfillment or pre-contractual measures) or, if this legal basis is not relevant, Art. 6 para. 1 lit. f GDPR due to the legitimate interests arising from the purposes mentioned.

In addition, we may also process personal data in connection with the social media presences in accordance with the information in the other sections of the data protection information.

As a precaution, we would like to point out that communication via social media platforms may be insecure. You can contact us at any time via other communication channels and will then also receive a response via these other channels.

We also receive aggregated usage statistics from the platforms, which we use to evaluate usage behavior and improve our information offering. The usage statistics may also be compiled by the platforms on the basis of personal usage data. Further information on this can be found in the data protection notices of the respective providers linked above. Special information on Facebook and Instagram can be found below.

b) Processing by the platform operators

We have no influence on the processing of your personal data by the respective providers. Rather, the platform operators have control over data processing in the context of the use of the respective service. This includes, for example, the storage and use of cookies on user devices and the analysis of your behavior on the social network.

c) Information on the deletion of posts

If you publish personal data on our social media presences in the form of posts, e.g. images, texts, videos, or interact in other ways, e.g. “liking” posts, your data will be processed and in many cases published. If this is inappropriate content, we may delete it in accordance with the usual procedures and policies of the respective platforms.

7. Recipients and categories of recipients

Within our company, those departments that need your data to fulfill contractual and legal obligations will have access to it. Service providers and vicarious agents employed by us may also receive data for these purposes if they maintain confidentiality and integrity in particular. These are companies in the categories of IT services, telecommunications and sales and marketing.

With regard to the transfer of data to recipients outside our company, it should first be noted that we only pass on necessary personal data in compliance with the applicable data protection regulations. We may only pass on information about you if this is required by law, if you have given your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be

public bodies and institutions (such as law enforcement authorities) in the event of a legal or official obligation,
other affiliated companies for risk management due to legal or official obligations,
service providers that we use in the context of order processing relationships and
Service providers that are explicitly named as recipients in this data protection notice.

8. transfer to third countries

Data is transferred to bodies in countries outside the European Union (so-called third countries) insofar as

it is necessary for the execution of your orders (e.g. delivery orders)
it is required by law (e.g. reporting obligations under tax law) or
you have given us your consent.

Furthermore, transmission to bodies in third countries to maintain and ensure the company’s IT operations and IT security cannot be ruled out.

The use of our social media services may also result in data transfers and subsequent processing of usage data of the respective services in the USA.

Any data transfers take place exclusively automatically in connection with the use of our social media offering with the help of cookies.

When transferring data to so-called third countries, we ensure that this is done in accordance with the law. As a rule, data transfers are permitted on the basis of an adequacy decision, particularly in the case of transfers to the USA. If this does not apply in individual cases, we will conclude the standard data protection clauses or obtain your explicit consent.

You can completely reject the use of cookies and other technologies or make individual settings. You can also withdraw your consent at any time with effect for the future. Previously carried out processing remains unaffected by a revocation.

In addition, personal data may be transferred to third countries by the companies to which we pass on personal data in accordance with the explanations in the other sections.

9. Storage period

We process and store your personal data for as long as is necessary to fulfill our contractual obligations and exercise our rights.

The revocation of a previously given consent will be kept for three years (accountability). The administration cookie is deleted 6 months after the last visit. Server log data is anonymized before storage. Data relating to newsletters and invitations are deleted immediately after unsubscribing.

In individual cases, longer storage of data may be justified for the purpose of providing evidence in justified individual cases. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is 3 years.

10. Data security

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, SSL or TLS encryption is implemented on our website. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

Our employees and the service companies commissioned by us are also obliged to maintain confidentiality and to comply with the provisions of the applicable data protection laws. The company takes appropriate technical and organizational security measures to protect your personal data from loss, alteration, destruction and access by unauthorized persons or unauthorized disclosure. Our security measures are constantly being improved in line with technological developments.

11. Rights of data subjects

Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR.

The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure. In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

You can withdraw your consent to the processing of personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You also have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based in particular on point (f) of Article 6(1) GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. In particular, this includes that the processing is necessary for the establishment, exercise or defense of legal claims.

You also have the right not to be subject to fully automated decision-making in accordance with Art. 22 GDPR. In principle, we do not use fully automated decision-making to establish, conduct and terminate the business relationship. Should we use these procedures in individual cases (e.g. to improve our products and services), we will inform you separately about this and about your rights in this regard, insofar as this is required by law.

Further information and explanations regarding the above-mentioned rights can be found on the European Commission’s “Rights for Citizens“ website.

12. obligation to provide data

As part of our online offering, we rely on the processing of such usage data as is necessary for the performance and termination of the service and for the fulfillment of the associated obligations. Without the collection of usage data, we and our service providers will not be able to provide you with our online service. However, the provision of personal data is neither legally nor contractually required.

13. Profiling

We do not process your personal data automatically in such a way that it has a legal effect on you or significantly affects you in a similar way.

14. topicality and changes to this privacy policy

This privacy policy is currently valid and was last updated in March 2024.

Information on data protection

Contact us!

Support requests