Privacy Notice

 

Below, we inform you about the details of data protection when you visit our website.

Use of our website is generally possible without providing personal data.

To the extent that personal data is collected when you visit our websites, we process it exclusively in accordance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG).

The processing of personal data takes place exclusively in accordance with this privacy policy.

This privacy policy applies to the use of the website at www.contura-mtc.de. For linked content from other providers, the privacy policy stored on the linked website is authoritative.

We point out that in the context of data transmission via the Internet security gaps may occur, which can not be prevented even by the technical design of this website. Complete protection of personal data is not possible when using the Internet.

 

1 Definitions

This privacy policy is based on the terminology used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.

In this privacy policy, we use, among other things, the following terms:

 

Personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data subject

A data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.

Processing

Processing is any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting its processing in the future.

Profiling

Profiling is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

Pseudonymisation

Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

Controller or person responsible for processing

The controller or person responsible for processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its designation may be provided for by Union law or the law of the Member States.

Processor

A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Recipient

A recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union law or the law of the Member States shall not be regarded as recipients.

Third party

A third party is a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

Consent

Consent is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which the data subject, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to them.

 

2 Responsible entity, Art. 13 para. 1 lit. a GDPR

The entity responsible for processing personal data in connection with the use of this website is:

Represented by: Reiner Westhoff, Thorsten Müller-Schmetz

CONTURA MTC Ltd.

Hämmerstraße 6

D-58708 Menden

Phone: 02373 – 39646-50

E-mail: info@contura-mtc.de

 

4 Data Protection Officer

We have appointed as data protection officer:

Mr. Dipl.-Inform. Olaf Tenti

GDI Gesellschaft für Datenschutz und Informationssicherheit mbH

Körnerstrasse 45

58095 Hagen (NRW)

Phone: +49 (0)2331/356832-0

E-mail: datenschutz@gdi-mbh.eu

Website: www.gdi-mbh.eu

 

5 Hosting

Our website is operated on servers from domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, Germany

We have concluded an order processing agreement with domainfactory GmbH Dienstleister.

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address (in anonymized form)

The host uses the collected data to ensure the smooth operation of the website, to ensure IT security and to improve our services. If there are concrete indications, the log data may be analyzed subsequently. The temporary storage of the IP address by the host is necessary to enable the website to be delivered to the user’s computer. For this purpose, your IP address must remain stored for the duration of the session.

This data is not merged with other data sources.

The legal basis for data collection is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest in data collection arises from the purposes stated above.

The data is deleted by the host as soon as it is no longer necessary for achieving the purpose for which it was collected. In the case of data collection for providing the website, this is the case when the respective session has ended.

If the data is stored in log files, this technical information is deleted or anonymised no later than after three days.

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility for you to object.

 

6 Cookies

Cookies are used to provide our website. Cookies are text files that are stored on your end device (PC, laptop, tablet, smartphone, etc.). Furthermore, these cookies are used to make the use of our offer more pleasant and comfortable for you or for analytical purposes.

Most of the cookies we use are so-called “session cookies”. They are used to make the services of our website technically available to you. After your visit, these cookies are automatically deleted from your browser.

Other cookies remain on your computer and enable us to recognise your end device on your next visit (so-called persistent or permanent cookies). These cookies are automatically deleted from your system after a preset period of time, which varies depending on the cookie.

The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interests arise from the purposes stated above.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, e.g. third-party cookies (cookies that are set by a third party, i.e. not by the actual Internet site on which you are currently located), exclude the acceptance of cookies for certain cases or in general, as well as activate the automatic deletion of cookies when closing the browser. You can delete stored cookies at any time using your web browser.

If cookies are disabled, the functionality of this website may be limited

Managing cookies:

You can find out more about this option for the most commonly used browsers via the following links:

Desktop PC / Laptop

Microsoft Edge

Mozilla Firefox

Apple Safari

Google Chrome

Mobile devices

Google Chrome (Android)

Google Chrome (iOS)

Apple Safari (iOS)

Samsung Internet (Android)

Mozilla Firefox (Android)

 

If you have not made or do not make any deviating settings, cookies that enable or are intended to ensure the required technical functions remain on your terminal device until you close the browser; other cookies may remain on your terminal device for longer (maximum 6 months).

To safeguard your privacy, you should regularly check the cookies on your respective terminal device as well as your browsing history and delete them on your own.

 

7 Local storage cookies

In addition, we also use so-called local storage and session storage technology (also referred to as “local data” and “local storage” as well as “session storage”), i.e. we use your browser’s storage capacity.

With local storage, data is stored locally in your browser cache and remains available even after the browser window is closed or the program is terminated, and can be read unless you actively delete the cache.

Local storage enables your preferences when using our websites to be stored on your computer and used by you.

The function of session storage corresponds in content to the local storage described, except that the corresponding data is automatically removed from your browser cache immediately after the browser is closed (“session”).

Third parties cannot access the data stored in local storage or session storage. They will not be passed on to third parties and will not be used for advertising purposes. In particular, this technology is used to present our content to you in an appealing graphical format (e.g. pop-up windows, etc.) and to personalise our services and navigation on our pages for you.

The data is not combined with other data (e.g. information from tracking tools that is also stored separately in local storage).

In local storage, certain information and entries are also stored for transmission to and analysis by tracking tools. This data is only used to analyze and evaluate the surfing behavior of visitors. The data stored in local storage is not used for advertising purposes.

Insofar as the use of this technology is necessary for the operation of the website, the processing is carried out on the basis of our legitimate interest in being able to provide you with an attractive, fully functional offer, on the basis of Article 6 para 1 sentence 1 lit. f DSGVO, otherwise based on your consent pursuant to. Art. 6 par. 1 p. 1 lit. a GDPR.

8 SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses an SSL or SSL protocol. TLS encryption. You can recognize an encrypted connection by the fact that the browser address bar changes from “http://” to “https://” and by the lock symbol in your browser bar.

If SSL/TLS encryption is enabled, the data you transmit to us cannot be read by third parties (end-to-end encryption). The protocols authenticate the communication partner and ensure the integrity of the transmitted data.

 

9 Contact option

Our website offers you the option to contact us by email. In this context, the information you provide in the email, including the contact details you provide there, will be stored and processed by us for the purpose of handling your enquiry and in case of follow-up questions. This data (e.g. name, address, telephone number, e-mail address, IP address) will not be passed on to third parties without your consent.

The data is not merged with other data collected on this website.

The processing of this data is based on Art. 6 para. 1 lit. b DSGVO, provided that your request is related to the performance of a contract or is necessary for the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the inquiries addressed to us (Art. 6 para. 1 lit. f DSGVO).

The data you provide will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.

 

10 Applications

On our website, you have the option to apply for a position at our company.

For this purpose, we accept digital applications, regardless of whether you are applying for a position advertised by us or submitting an unsolicited application. You can find the separate privacy notice for applicants at this link:
https://contura-mtc.de/wp-content/uploads/2022/08/2021-09-29Datenschutzhinweise_Bewerber.pdf

11 LinkedIn (company profile)

For recruitment purposes, we use the professional and career network “LinkedIn” and maintain a company profile there. LinkedIn is operated by LinkedIn Corporation, 1000 W. Maude Ave, Sunnyvale, California 94085 USA, or if you have your registered office or place of residence in the EU, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

We have concluded a data processing agreement with LinkedIn, which can be accessed here: https://de.linkedin.com/legal/l/dpa?

When you visit our company profile on LinkedIn, your data may be automatically collected and stored by LinkedIn for market research and advertising purposes, as well as to provide job offers that are presumably of interest to you (so-called Page Insights). So-called usage and interest profiles are created from this data using pseudonyms. Cookies are generally used on your terminal device for this purpose.

You will be informed about the function of cookies as part of LinkedIn’s privacy policy and cookie policy, so please see the corresponding notes there. These cookies store visitor behavior and interests.

Furthermore, we obtain a statistical evaluation from the collected data as to which groups of people are interested in our company website. Here, the data is processed in such an anonymized form that it is not possible to draw conclusions about individual persons for statistical evaluations, which may contain information about the approximate geographical location or the age group and other summarizing characteristics.

The processing of personal data with Page Insights on LinkedIn is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR, which you can view here: https://legal.linkedin.com/pages-joint-controller-addendum

Regardless of the internal responsibilities agreed between us and LinkedIn, you can contact us or our data protection officer as well as LinkedIn with all data protection-related inquiries.

If you are asked by LinkedIn for consent (agreement) to data processing, e.g. by means of a checkbox, the legal basis for data processing is Art. 6 para. 1 p. 1 lit. a GDPR.

You can revoke your consent at any time with effect for the future, whereby you must contact LinkedIn for this purpose. Data processing carried out up to the time of revocation shall remain lawful.

If you would like to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

For detailed information on the processing and use of data by LinkedIn, as well as a contact option and your rights and settings options in this regard to protect your privacy, please refer to LinkedIn’s privacy notice, which you can find at the following link: https://www.linkedin.com/legal/privacy-policy?src=li-other&veh=de.linkedin.com%7Cli-other

You can find LinkedIn’s cookie policy at the following link: https://www.linkedin.com/legal/cookie-policy

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

 

12 XING / Kununu – profile

We operate websites on XING and Kununu to present our company. The provider of XING and Kununu is New Work SE, Dammtorstraße 30, 20354 Hamburg.

Our XING profile serves an active and contemporary approach to potential employees in a professional environment. On this page we also share information about our company, and in this way we present ourselves to the outside world. There, we provide information about our services, products, interesting special offers, and employment opportunities at our company.

If you are asked by Xing for consent (agreement) to data processing, e.g. by means of a checkbox, the legal basis for data processing is Art. 6 para. 1 p. 1 lit. a GDPR.

For detailed information on the processing and use of data by the providers on their pages, as well as a contact option and your rights and settings options in this regard to protect your privacy, please refer to XING’s privacy notice, which you can find at the following link: https://privacy.xing.com/de/datenschutzerklaerung

Kununu primarily offers users the opportunity to make and view ratings of employers. At the same time, we use the online presence at kununu to provide information about our company, career opportunities, products and services.

When visiting our site at kununu and during other interactions with our site at kununu, kununu collects personal data of the users, for example through the use of cookies. Such data collection by kununu may also occur for users who are not logged in or registered with kununu. Information about data collection and further processing by kununu can be found in kununu’s privacy notice at https://privacy.xing.com/de/datenschutzerklaerung/druckversion.

Data processing takes place as joint processing. For content that they provide directly on the platform, i.e. comments, private messages or similar, New Work SE and we act as joint controllers pursuant to Art. 26 DSGVO.

The legal basis for the processing of data is your consent according to. Art. 6 par. 1 p. 1 lit. a Data Protection Regulation (DSGVO), insofar as you have granted it, and furthermore the protection of legitimate interests pursuant to §§ 3 and 4 of the Data Protection Act (DSGVO). Art. 6 par. 1 p. 1 lit. f GDPR. If you contact us, the legal basis may also be Art. 6 para. 1 p. 1 lit. b DSGVO (necessity for the implementation of pre-contractual measures).

The aforementioned legitimate interest is that we would like to communicate with you via our kununu page and inform you about our company, career opportunities and jobs, our products and services.

You can find out how XING and Kununu process your data in XING’s privacy policy, which is valid for all services of New Work SE: https://privacy.xing.com/de/datenschutzerklaerung/allgemeine-hinweise.

Since only New Work SE has information about the data actually collected and how it is used on the respective platforms, requests for information and the assertion of other data subject rights should be made directly there. Of course, you can also send us requests in this regard, we will forward them to the operator for further processing.

We only process data via the XING and Kununu platforms that you provide to us directly. These are comments, requests, your user profile, ratings and similar information. These remain for the duration of the existence of the performance.

Processing of the data we use takes place only in the territory of the EU or the EEA. A data transmission to third countries by us does not take place.

 

Potential and ROI calculator
On our website, we provide a potential and ROI calculator. When using it, personal data (e.g. email address) may be processed to enable the user to access results individually and, if applicable, to enable contact to be made.

 

13 Your rights and how to assert them

You are entitled to the rights set out below. You can assert these against us. To assert your rights, please use the details provided above or contact us by email at: info@contura-mtc.de

 

Information:

In accordance with Art. 15 DSGVO, you have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

Correction:

Pursuant to Art. 16 DSGVO, you have the right to request the correction of inaccurate or incomplete personal data stored by us without delay;

Deletion:

In accordance with Art. 17 DSGVO, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise or defense of legal claims;

Restriction of processing:

In accordance with Art. 18 DSGVO, you have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;

Data portability:

In accordance with Art. 20 DSGVO, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;

Revocation of your consent:

Pursuant to Art. 7 para. 3 DSGVO, you have the right to revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future.

Please address your withdrawal to the details provided above or by email to: info@contura-mtc.de

 

Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1. p. 1 lit. e) or f) DSGVO; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

 

Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and the controller, is permissible under Union or Member State law to which the controller is subject, and that law contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or is made with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 DSGVO, unless Art. 9 para. 2 lit. a) or g) DSGVO applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

 

Complaint to a supervisory authority:

You have the right to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

 

Status of the privacy policy

The constant development of the Internet makes adjustments to our privacy policy necessary from time to time. We reserve the right to make appropriate changes at any time.

Last updated: October 2024