Privacy Policy of centron GmbH:
Protection of Your Privacy
We welcome you to our website and appreciate your interest in our company.
We take the protection of your personal data and privacy very seriously. We process your data in accordance with the applicable legal regulations on the protection of personal data, particularly the EU General Data Protection Regulation (EU-GDPR) and the country-specific implementation laws that apply to us. With this privacy policy, we inform you comprehensively about the processing of your personal data by centron GmbH and your rights.
Personal data is information that can be used to identify a natural person. This includes, in particular, your name, date of birth, address, telephone number, email address, and also your IP address.
Data is considered anonymous if no personal reference to the user can be established.
Responsible Entity
centron GmbH
Heganger 29
D-96103 Hallstadt
Germany
Phone: +49 (0) 951 / 96 83 40
Fax: +49 (0) 951 / 96 83 429
Email: info@centron.de
Contact for Data Protection
Email: datenschutz@centron.de
Your Rights as a Data Subject
First of all, we would like to inform you about your rights as a data subject. These rights are set out in Articles 15 – 22 EU-GDPR. This includes:
- The right to access (Art. 15 EU-GDPR),
- The right to erasure (Art. 17 EU-GDPR),
- The right to rectification (Art. 16 EU-GDPR),
- The right to data portability (Art. 20 EU-GDPR),
- The right to restriction of processing (Art. 18 EU-GDPR),
- The right to object to data processing (Art. 21 EU-GDPR).
To exercise these rights, please contact: datenschutz@centron.de. The same applies if you have questions about data processing in our company or if you wish to revoke a given consent. You also have the right to lodge a complaint with a data protection supervisory authority.
Right to Object
Please note the following in connection with the rights to object:
If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without stating reasons. This also applies to profiling, insofar as it is associated with direct advertising.
If you object to processing for direct advertising purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made informally, preferably to: datenschutz@centron.de.
If we process your data to safeguard legitimate interests, you may object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.
We will then no longer process your personal data unless we can prove compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.
Purposes and Legal Bases of Data Processing
When processing your personal data, the provisions of the EU-GDPR and all other applicable data protection regulations are observed. Legal bases for data processing arise in particular from Art. 6 EU-GDPR.
We use your data for business initiation, to fulfill contractual and legal obligations, to carry out the contractual relationship, to offer products and services, and to strengthen customer relationships, which may also include analyses for marketing purposes and direct advertising.
Your consent to data processing may also represent a legal basis for processing. Before granting consent, we will inform you about the purpose of the data processing and your right of revocation.
Transfer to Third Parties
We will only transfer your data to third parties within the framework of legal requirements or with your consent. Otherwise, data will not be transferred to third parties unless we are required to do so due to mandatory legal provisions (transfer to external bodies such as supervisory authorities or law enforcement authorities).
Recipients of the Data / Categories of Recipients
Within our company, we ensure that only those persons receive your data who need it to fulfill contractual and legal obligations.
In certain cases, service providers support our departments in fulfilling their tasks. The necessary data protection agreements have been concluded with all service providers. These include in particular shipping service providers, payment service providers, as well as external consultants and employees.
Transfer to Third Countries / Intention to Transfer to Third Countries
Data transfer to third countries (outside the European Union or the European Economic Area) only takes place if it is necessary for the execution of the contractual relationship, is required by law, or if you have given us your consent to do so. In principle, we do not transfer your personal data to any service provider outside the European Economic Area.
Storage Duration of the Data
We store your data as long as it is needed for the respective processing purpose. Please note that numerous retention periods require data to continue to be stored (must). This particularly concerns commercial or tax retention obligations (e.g., German Commercial Code, Fiscal Code, etc.). If no further retention obligations exist, the data will be routinely deleted after the purpose has been achieved.
Additionally, we may retain data if you have given us your permission to do so or if there are legal disputes, and we use evidence within the framework of statutory limitation periods, which can be up to thirty years; the regular limitation period is three years.
Secure Transmission of Your Data
To best protect the data stored with us against accidental or deliberate manipulation, loss, destruction, or unauthorized access, we use appropriate technical and organizational security measures. The security levels are continuously reviewed in cooperation with security experts and adjusted to new security standards.
Data exchange from and to our website is always encrypted. As a transmission protocol, we offer HTTPS for our web presence, each using the latest encryption protocols. In addition, we offer our customers PGP encryption for electronic communication upon request. Only we can decrypt this data. There is also the option of using alternative communication channels (e.g., postal mail).
Obligation to Provide the Data
Various personal data are necessary for the establishment, execution, and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.
We have summarized the details for you in the above point. In certain cases, data must also be collected or provided due to legal provisions. Please note that processing your request or the execution of the underlying contractual relationship is not possible without providing this data.
Categories, Sources, and Origin of the Data
The data we process depends on the respective context: This depends on whether you, for example, enter an inquiry in our contact form or send us an application.
Please note that we may also provide information for specific processing situations separately at the appropriate place, e.g., when uploading application documents or making a contact inquiry.
When visiting our website, we may collect and process the following data:
- Name of the internet service provider
- Information about the website from which you visit us
- Browser used and operating system used
- The IP address assigned to you by your internet service provider
- Requested files, transferred data volume, downloads/file exports
- Information about the websites you access on our site, including date and time
For technical security reasons (in particular, to defend against attempts to attack our web server), this data is stored in accordance with Art. 6 (1) lit. f EU-GDPR. After a maximum of 7 days, anonymization takes place by shortening the IP address, so that no reference to the user is made.
As part of a contact request, we may collect and process the following data:
- Company name
- First name, last name
- Contact details (email, phone)
- Information about wishes and interests
In the context of the ordering process, we may collect and process the following data:
- Company
- Salutation
- First name
- Last name
- Street
- Postal code
- City
- Country
- VAT ID number
- Phone
- Fax
- Data that may be processed from other sources
In online applications, we collect and process the following data:
- First name, last name
- Place of residence
- Contact details
- Curriculum vitae
- Work permit
- Other data that you can voluntarily provide
Automated Individual Decisions
We do not use purely automated processing processes to make a decision.
Cookies (Art. 6 (1) S. 1 lit. a, f GDPR, § 25 (1), 2 TDDDG)
Our website uses so-called cookies. They are used to make our offer more user-friendly, effective, and secure. Cookies are small text files that are stored on your end device and saved by your browser (locally). Cookies contain only pseudonymous, mostly even anonymous data. Some cookies persist for the duration of a browsing session (so-called session cookies), others are stored longer-term (so-called persistent cookies, e.g., consent settings). The latter are automatically deleted after the specified time (usually 6 months). In addition to our own cookies, those controlled by third parties are also used. They use the information contained in the cookies to display content or record the pages you visit.
Due to our legitimate interest (Art. 6 (1) S. 1 lit. f GDPR), we use technically necessary cookies that are essential for the operation of the website and to ensure functionality. Furthermore, we use cookies without your consent if their sole purpose is to store or access information stored in the device for the transmission of messages or if they are strictly necessary to provide the service you explicitly requested, § 25 (2) TDDDG.
We use the following technically necessary cookies:
| Name | Function | Collected Data | Storage Duration |
| Borlabs (Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg) | Cookie-Consent (Obtaining and documenting consent to the use of certain cookies) | Consents | The collected data will be stored until you ask us to delete it or delete the BorlabsCookie yourself, or the purpose for storing the data ceases to apply. (1 year) |
| Google reCAPTCHA (Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland) | Protection against misuse and spam by checking whether specific entries are made by a human or an automated program. | IP address, time spent on the website, mouse movements | 1 year |
| Polylang | Storage of the language setting | Selected language of the website | 1 year |
| Pipedrive (Pipedrive OÜ (Mustamäe tee 3a, 10615 Tallinn, Estonia) | Management of web forms and assignment of accounts | 2 months |
With your consent, additional cookies are used that enable us or third parties, for example, to evaluate how our services are used. This allows us to tailor the content to user needs. In addition, we can measure the effectiveness of a particular ad and, for example, place it depending on thematic user interests. The legal basis for this is your explicit consent (Art. 6 (1) S. 1 lit. a GDPR, § 25 (1) TDDDG).
You can withdraw your consent via our consent banner at any time with effect for the future and change the cookie settings. Note that changes must be made separately for each device.
You can withdraw your consent by clicking on the symbol at the bottom left at any time.
If you have accounts with the third parties we use and are logged in there, your data may be linked to the respective account. You can avoid such linking by not granting or withdrawing your consent to the relevant cookies or logging out of the respective third parties beforehand.
Most browsers accept cookies automatically. You can also manually disable, restrict, or delete cookies on your device through your browser settings or supported software. If you disable the setting of cookies, the full use of our websites is not or only partially possible.
Creation of User Profiles or Use of Non-Purely Functional Cookies (Art. 6 (1) lit. a EU-GDPR)
Google Tag Manager (Art, 6 (1) lit. a GDPR, § 25 (1) TDDDG)
We organize our tags with the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland). This means that tools are managed on our website. This allows us to embed and manage website tags centrally via an interface. These tags can also collect and process personal data. The Tag Manager itself does not set cookies. The Google Tag Manager requires your consent (Art. 6 (1) lit. a GDPR), which you can give via our cookie banner and can withdraw at any time. Anonymization occurs after a maximum of 7 days by shortening the IP address, so that no reference to the user is made.
By clicking on the symbol at the bottom left, you can change your settings at any time.
Your data is processed in the USA. Google is an active participant in the US Data Privacy Framework.
Microsoft Clarity (Art. 6 (1) lit. a GDPR, § 25 (1) TDDDG)
Various user information is collected and stored on this website via the “Microsoft Clarity” service of Microsoft Ireland Operations Limited, South County Business Park, Leopardstown, Dublin for the statistical analysis of user behavior and for optimization and marketing purposes.
Clarity particularly captures mouse movements and creates a graphical representation of which parts of the website users scroll on frequently (heatmaps). Time zone settings, operating system and platform, geographic origin of the page visit, IP address, referrer, and the duration of visits to certain pages are also recorded. Clarity can also record sessions, so we can view the page usage in the form of videos. Clarity uses technologies that allow recognizing the user for the purpose of analyzing user behavior.
Pseudonymized usage profiles can be created and evaluated from this data. Cookies are used to collect and evaluate them. Cookies are small text files that are stored locally in the temporary storage of the internet browser of the site visitor. Cookies enable the recognition of the internet browser, among other things.
The personal data collected by Microsoft Clarity is stored with us for 30 days and then automatically deleted.
The service is used only with your consent. (Legal basis Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. Consent can be withdrawn at any time. To do this, you can call up the cookie banner by clicking on the symbol at the bottom left.
Further information on the data protection provisions of Microsoft Clarity can be found at https://clarity.microsoft.com/terms
Personal data may also be transferred from the provider to the parent company Microsoft in the USA. The company is certified under the EU-US Data Privacy Framework, so there is an adequacy decision. A corresponding contract for order processing has been concluded.
YouTube (Art. 6 (1) lit. a EU-GDPR)
We use an offer from YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display the videos included on our website.
YouTube videos are linked on our website. As long as you do not click on the respective button for YouTube, no data about you as a user will be transmitted to YouTube. Data will only be transferred once you have given your consent (Art. 6 (1) lit. a GDPR).
If you consent to the processing, YouTube will receive information that you have accessed the corresponding content on our website. If you have a Google account and are logged in to Google while playing the video, this can be directly assigned to your account. If you do not want this, you must log out before opening the video sequence. YouTube can store your data and process it, especially for advertising and market research purposes. Such an evaluation to play out customized advertising may also occur if you have a Google account but are not currently logged in.
When you access the YouTube videos linked on our website through a button, the functions of the Google Analytics 360 Suite (formerly “DoubleClick by Google”, here “DoubleClick”) are used to show you advertising that might interest you. The use of DoubleClick is by YouTube, so we cannot influence or know it in full. To our knowledge, the following processing takes place: the DoubleClick cookie assigns your browser an identification number (ID) to verify which ads were shown to you and which you accessed. This allows ads to be displayed that directly respond to your interests, and, for example, you may see products that you have seen on our pages. At the same time, Google receives information that you viewed these contents on our pages. A reference to your IP address or your Google account, as well as possibly even creating a user profile about you, can also happen if you have such an account but are not logged in. Please note that your data can also be processed by Google outside the EU or the European Economic Area. More details can be found in Google’s privacy policy at https://www.google.de/intl/en/policies/privacy.
You can prevent this tracking process by setting your browser to suppress third-party cookies. Then you will not receive third-party ads, but this setting is usually deleted when you delete the cookies on your device. Alternatively, you can delete the cookies for conversion tracking by setting your browser to block Google cookies. You can do this at https://www.google.de/settings/ads, but this setting will also be deleted if you delete the cookies on your device. However, you can also delete the cookies of all providers that are part of the self-regulation campaign “About Ads” via http://www.aboutads.info/choices. However, this setting will also be deleted if you delete the cookies on your device. In addition, depending on which browser you use, you can permanently disable cookies via a browser add-on. You can find these add-ons at http://www.google.com/settings/ads/plugin for all common internet browsers.
Links to Social Media
On our website, you will find links to social media services such as Facebook, X (formerly Twitter), YouTube, Pinterest, WhatsApp, Instagram, LinkedIn, and Xing. You can recognize links to the social media services’ websites by the respective company logo. When you follow these links, you will reach centron GmbH’s company profile on the respective social media service. When clicking on a link to a social media service, a connection to the social media service’s servers is established. This transmits to the servers of the social media service that you have visited our website. Additional data is also transmitted to the provider of the social media service. This includes, for example:
- Address of the website where the activated link is located
- Date and time of accessing the website or activating the link
- Information about the browser used and the operating system used
- IP address
If you are already logged into the respective social media service at the time of activating the link, the social media service provider may be able to determine your username and, if applicable, even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can exclude this possibility of assigning your account by logging out of your user account beforehand.
The servers of the social media services are located in the USA and other countries outside the European Union. Therefore, data may also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to a data protection law that generally does not protect personal data to the same extent as in the member states of the European Union.
Please note that we have no influence on the extent, type, and purpose of the data processing by the provider of the social media service. For more information on the use of your data by the social media services embedded on our website, please refer to the privacy policy of the respective social media service.
Contact Form / Contact by Email (Art. 6 (1) lit. a, b EU-GDPR)
Various contact forms are available on our website for electronic contact. If you write to us via a contact form, we will process the data you provide in the contact form to contact you and respond to your questions and requests.
The principle of data economy and data avoidance is observed here, meaning that you only provide the data we absolutely need to contact you. In addition, your IP address is processed for technical necessity and legal protection. All other data are optional fields and can be provided optionally (e.g., to answer your questions more individually).
To best protect the security and confidentiality of your data, we implement appropriate security measures.
If you contact us by email, we will process the personal data you provide in the email solely to process your request. If you do not use the forms provided for contacting us, no further data collection will take place.
Applicant Portal (Art. 6 (1) lit. a, b GDPR)
We appreciate your interest in working with centron GmbH. We are aware of the importance of your data and process the personal data you provide as part of the application form only for the purpose of effective and correct handling of the application process and for contacting you within the application process. No data is passed on to third parties without your consent.
In the application form, you will be asked to provide personal data. Here, we observe the principle of data economy and data avoidance, meaning that you only provide us with the data we need to fully review your application documents, such as your CV, or which we are legally obliged to collect. These mandatory details are marked with a *(star). For technical necessity and legal protection, your IP address is also processed.
Without this data, we cannot review your application documents; therefore, our application system does not allow you to upload the application documents in this case. Of course, you have the option of voluntarily providing information in the application form.
We store your data for the purposes mentioned above until the application process is completed and relevant deadlines have expired – at the latest six months after a decision is received.
Registration / Customer Account (Art. 6 (1) lit. a, b EU-GDPR)
On our website, we offer users the opportunity to register by providing personal data. The advantage is that you can view the order history in particular and the data you provide will be saved for the order form. You do not have to enter this data again for a subsequent order.
Registration is therefore either necessary to fulfill a contract (via our online shop) with you or to carry out pre-contractual measures.
The principle of data economy and data avoidance is observed here, meaning that only the data necessary for registration are marked as mandatory fields with a star (*). This includes, for example, the email address and password, including password repetition.
For orders in our online shop, we also need information on the billing address (salutation, first name, last name, address, contact details, VAT ID). If the delivery address differs from the billing address, the above details for the delivery address must also be provided.
By registering on our website, the user’s IP address, the date, and the time of registration are also stored (technical background data). By pressing the “Register now” button, you consent to the processing of your data.
Please note: The password you choose is stored encrypted with us. Employees of our company cannot read this password. Therefore, they cannot give you information if you forget your password.
In this case, use the “Forgot password” function, which will send you an automatically generated new password by email. No employee is authorized to request your password from you by telephone or in writing. Therefore, please never provide your password if such requests are made to you.
Once the registration process is complete, your data will be stored with us for use in the protected customer area. Once you log in to our website with your email address as your username and password, this data will be provided for actions you carry out on our website (e.g., for orders in our online shop). Completed orders can be traced in the order history. Changes to the billing or delivery address can be specified here.
Registered persons are free to make changes/corrections to the billing or delivery address in the order history independently. Our customer service is also happy to make changes/corrections if you contact them. Of course, you can also dissolve or delete the registration or your customer account.
Advertising Purposes for Existing Customers (Art. 6 (1) lit. f EU-GDPR)
centron GmbH is interested in maintaining the customer relationship with you and sending you information and offers about our products/services. Therefore, we process your data to send you appropriate information and offers by email.
If you do not wish this, you can object to the use of your personal data for direct advertising purposes at any time; this also applies to profiling, insofar as it is associated with direct advertising. If you object, we will no longer process your data for this purpose.
The objection can be made without stating reasons, free of charge, and informally, preferably by email to datenschutz@centron.de or by mail to centron GmbH, Heganger 29, 96103 Hallstadt, Germany.
Online Offers for Children
Persons under the age of 16 are not permitted to transmit personal data to us or provide a declaration of consent without the consent of their parents or legal guardians. We encourage parents and guardians to participate actively in their children’s online activities and interests.
Links to Other Providers
Our website contains – clearly recognizable – links to the websites of other companies. Where links to websites of other providers are available, we have no influence on their content. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of the pages is always responsible for the contents of these pages.
The linked pages were checked for possible legal violations and recognizable legal infringements at the time of linking. Illegal content was not recognizable at the time of linking. However, a permanent content check of the linked pages is not reasonable without concrete indications of a violation of the law. If legal violations become known, such links will be removed immediately.
Privacy Policy / Information on Data Protection in Social Media
centron GmbH maintains profiles on social media platforms, specifically on Facebook, Instagram, X (formerly Twitter), YouTube, Xing, and LinkedIn. Where we have control over the processing of your data, we ensure compliance with applicable data protection regulations.
Below, you will find the most important information regarding data protection law in relation to our profiles.
Name and Address of the Responsible Parties for the Operation
In addition to centron GmbH, the responsible entities for the company profiles within the meaning of the EU General Data Protection Regulation (EU-GDPR) and other data protection regulations are:
- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
- Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
- LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
- X (formerly Twitter) (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland)
- Xing (New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany)
- YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland)
However, you use these platforms and their functions at your own responsibility. This applies especially to the use of interactive functions (e.g., commenting, sharing, rating).
We further point out that your data may be processed outside the European Union.
Purpose and Legal Basis
We maintain the fan pages to communicate with visitors to these pages and to inform them about our offers.
We also collect data for statistical purposes to further develop and optimize content and make our offering more attractive. The necessary data (e.g., total number of page views, page activities, and data provided by visitors, interactions) are processed and provided to us by the social networks. We have no influence on their creation and presentation.
Furthermore, your personal data is processed by the providers of the social networks, but also by centron GmbH for market research and advertising purposes. For example, it is possible that usage profiles are created based on your usage behavior and the resulting interests. This allows advertisements to be displayed within and outside the platforms that correspond to your interests. Cookies are generally stored on your device for this purpose. Independent of this, data that is not directly collected on your end devices can also be stored in your usage profiles. Storage and analysis are also carried out across devices, especially, but not exclusively, if you are registered as a member and logged in to the respective platforms.
The processing of your personal data by centron GmbH is based on our legitimate interests in effective information and communication pursuant to Art. 6 (1) sentence 1 lit. f. EU-GDPR.
If you are asked for consent to data processing, i.e., if you give your consent by confirming a button or similar (opt-in), the legal basis of the processing is Art. 6 (1) sentence 1 lit. a., Art. 7 EU-GDPR.
Your Rights / Right to Object
If you are a member of a social network and do not want the network to collect data about you through our profile and link it to your member data stored with the respective network, you must:
- log out of the respective network before visiting our fan page,
- delete the cookies present on the device and
- close and restart your browser.
However, after logging in again, you will be recognized by the network again as a specific user.
For a detailed presentation of the respective processing and the opt-out options, please refer to the following linked information:
Privacy policy: https://www.facebook.com/about/privacy/;
Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com;
Privacy policy: https://help.instagram.com/519522125107875;
Opt-out: http://www.networkadvertising.org/managing/opt_out.asp and http://www.youronlinechoices.com;
Privacy policy: https://www.linkedin.com/legal/privacy-policy;
Opt-out: https://www.linkedin.com/legal/cookie-policy and http://www.youronlinechoices.com;
X (formerly Twitter)
Privacy policy: https://twitter.com/de/privacy;
Opt-out: http://www.youronlinechoices.com;
Settings: https://twitter.com/settings/account/personalization;
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung;
Opt-out: http://www.youronlinechoices.com;
YouTube
Privacy policy: https://policies.google.com/privacy;
Opt-out: https://tools.google.com/dlpage/
In total, you have the following rights regarding the processing of your personal data:
Right of access; right to rectification; right to erasure; right to restriction of processing; right to object; right to data portability; right to complain about unlawful processing of your personal data to the competent data protection authority.
However, as centron GmbH does not have full access to your personal data, you should contact the providers of the social networks directly when asserting your rights, as they each have access to the personal data of their users and can take appropriate measures and provide information.
If you still need help, we will, of course, try to support you. Please contact datenschutz@centron.de.
Notes on Copyright and Artistic Copyright
If you wish to publish images, texts, plans, videos, music, etc., on our profile, you should be aware that you may be transferring all rights of use to the network, which could ultimately have legal consequences for you if you are not the author or rights holder yourself.
Transparency and Information Obligations for Customers, Suppliers, Contractual Partners, and Interested Parties of centron GmbH according to the EU General Data Protection Regulation (EU-GDPR)
Categories/Origin of the Data
Within the scope of the contractual relationship and for contract initiation, we process the following personal data:
- Contact data (e.g., first/last names of current and, if applicable, previous contact persons as well as name suffixes, company name, and address of the customer (employer), telephone number with extension, business email address)
- Job-related data (e.g., function in the company, department)
- Payment data (account holder, IBAN, BIC, credit institution)
We generally receive your personal data from you in the course of contract initiation or during the ongoing contractual relationship.
Purposes and Legal Bases of Data Processing
When processing your personal data, the provisions of the EU-GDPR, the BDSG (new), and other relevant legal provisions are always observed.
Your personal data is processed solely to carry out pre-contractual measures (e.g., to create offers for products or services) and to fulfill contractual obligations (e.g., to carry out our service, the supplier contract, or to process orders/orders/payments) (Art. 6 (1) lit. b EU-GDPR) or if there is a legal obligation to process (e.g., due to tax requirements) (Art. 6 (1) lit. c EU-GDPR). The personal data was originally collected for these purposes.
A data protection permit requirement may also be your consent to data processing (Art. 6 (1) lit. a EU-GDPR). Before granting, we will inform you about the purpose of the data processing and your right of withdrawal according to Art. 7 (3) EU-GDPR.
centron GmbH is also interested in maintaining the customer relationship with you and sending you information and offers about our products/services via email. Therefore, we process your data to send you appropriate information and offers (Art. 6 (1) lit. f EU-GDPR).
To detect criminal offenses, your personal data will only be processed under the conditions of Art. 10 EU-GDPR.
Transparency and Information Obligations for Applicants of centron GmbH according to the EU General Data Protection Regulation (EU-GDPR)
Categories/Origin of the Data
As part of the application process, we process the following personal data:
- Your master data (name, first name, name suffixes)
- Contact data (address, telephone number, email address)
- Qualification data (curriculum vitae, cover letter, degrees)
- Possibly photo/work permit/residence permit/date of birth
- Possibly previous convictions/certificate of good conduct
- Possibly Schufa information
Your personal data is generally collected directly from you during the application process.
Purposes and Legal Bases of Data Processing
When processing your personal data, the provisions of the EU-GDPR, the BDSG, and all other (labor) legal provisions are always observed.
We are aware of the importance of your data. Your personal data will be processed solely for the purpose of effective and correct handling of the application process and for contacting you within the application process (Art. 6 (1) lit. b GDPR).
We also process your data if we have a legal obligation, particularly from labor law. For special categories of personal data under Art. 9 (1) EU-GDPR, a balance of interests is also carried out, meaning data processing only takes place if your protectable interests do not prevail (Art. 88 (1) EU-GDPR in conjunction with § 26 (1), 3 BDSG).
Your consent also represents a permit for data processing. If you have given us your consent (e.g., for longer storage of application documents in our applicant pool or for forwarding the application documents to other business units), we will also process your data for this purpose (Art. 88 (1) EU-GDPR in conjunction with § 26 (2) BDSG). If we obtain your consent, we will, of course, inform you in advance about the specific purpose of the data processing and your right of withdrawal. If the consent also relates to the processing of special categories of personal data under Art. 9 EU-GDPR, we will expressly point this out to you in advance.
Storage Duration of the Data
We store your applicant data until the application process is completed or we no longer need your data for the above purposes or you have withdrawn your consent. If we enter into an employment relationship with you, the relevant application data will be further stored with us if they remain relevant to the execution of the employment relationship.
If we unfortunately have to reject your application, we will delete your application documents at the latest 6 months afterward unless you have given us your consent for inclusion in our applicant pool and the associated longer storage of your application documents. In this case, we will delete your data after a maximum of 24 months or if you withdraw your consent.