Website data protection declaration and at the same time information for data subjects in accordance with Article 13 and Article 14 of the EU General Data Protection Regulation

General Details

Details of the responsible organisation

Company:	BRAUN Engineering .shares-and-services GmbH
Legal representative:	Matthias Braun<
Address:	Roggensteiner Allee 226, 82223 Eichenau
Contact details Data Protection Officer:	aumiller@iitr.de

General information on data processing

Data concerned:

Personal data is only collected if you provide it to us voluntarily. No other personal data is collected. Any processing of your personal data that goes beyond the scope of legal authorisation will only take place on the basis of your express consent.

Purpose of processing:	Contract fulfilment.
Categories of recipients:	Public authorities in the event of overriding legal provisions. External service providers or other contractors. Other external bodies if the data subject has given their consent or a transfer is permitted due to overriding interests.
Third country transfers:	Processors outside the European Union may also be used in the context of contract fulfilment.
Duration of data storage:	The duration of data storage depends on the statutory retention obligations and is generally 10 years.

Specific information on the website

Utilisation data

When you visit our website, you transmit data to our web server via your Internet browser (for technical reasons). The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

Date and time of the request
Name of the requested file
Page from which the file was requested
Access status (file transferred, file not found, etc.)
Web browser and operating system used
Complete IP address of the requesting computer
amount of data transferred.

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period of time. It is not possible for us to identify individual persons from this data. After seven days at the latest, the data is anonymised by shortening the IP address at domain level so that it is no longer possible to establish a link to the individual user. The data is also processed in anonymised form for statistical purposes; it is not compared with other databases or passed on to third parties, even in excerpts.

External hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hoster(s). This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

External hosting is carried out for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Our host(s) will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions with regard to this data.

We use the following hoster(s):

united-domains AG
Gautinger Straße 10
82319 Starnberg
Deutschland

Use of own "cookies" required for the website display

This website uses its own "cookies" to save settings required for the website display ("cookies" are data records that are sent from the web server to the user's browser and stored there for later retrieval). No personal data is stored in our own "cookies". You can generally prevent the use of "cookies" by prohibiting the storage of "cookies" in your browser.

Business card handling

When handing over or exchanging business cards, you provide us with personal data such as your telephone number and e-mail address. We only use this information to stay in contact with you. We will also send you further information about our services. If you do not purchase any products or services from our range, we will delete your contact details after 5 years.

You have the right to information, deletion or correction at any time.

Information on further data processing procedures

Specific information on the application procedure

Data concerned:	Application details
Purpose of processing:	Carrying out the application procedure.
Categories of recipients:	Public authorities in the event of overriding legal provisions. External service providers or other contractors. Other external bodies if the data subject has given their consent or a transfer is permitted for reasons of overriding interest.
Third country transfers:	does not take place.
Duration of data storage:	Application data will generally be deleted within four months of notification of the decision, unless consent has been given for longer data storage in the context of inclusion in the applicant pool.

Specific information on the processing of customer data/prospect data

Data concerned:	Data provided for the performance of the contract; any additional data for processing on the basis of your express consent.
Purpose of processing:	Contract fulfilment, including offers, orders, sales and invoicing, quality assurance.
Categories of recipients:	Public authorities in the event of overriding legal provisions External service providers or other contractors, e.g. for data processing, dispatch, transport and logistics, service providers for printing and dispatch. Other external bodies if the data subject has given their consent or a transfer is permitted for reasons of overriding interest, for the electronic dispatch of information, for quality assurance purposes.
Third country transfers:	does not take place.
Duration of data storage:	The duration of data storage depends on the statutory retention obligations and is generally 10 years.

Specific information on the processing of employee data

Data concerned:	Data provided for the performance of the contract; any additional data for processing on the basis of your express consent.
Purpose of processing:	Performance of the contract in the context of the employment relationship.
Categories of recipients:	Public authorities in the event of overriding legal provisions, including the tax office, social insurance institutions, employers' liability insurance association. External service providers or other contractors, e.g. for data processing, payroll accounting, travel expense accounting, insurance benefits, vehicle use. Other external bodies insofar as the data subject has given their consent or a transfer is permitted for reasons of overriding interest, e.g. for order acquisition, insurance services.
Third country transfers:	does not take place.
Duration of data storage:	The duration of data storage depends on the statutory retention obligations and is generally 10 years.

Specific information on the processing of supplier data

Data concerned:	Data provided for the performance of the contract; any additional data for processing on the basis of your express consent.
Purpose of processing:	Contract fulfilment, including enquiries, purchasing, quality assurance.
Categories of recipients:	Public authorities in the event of overriding legal provisions, including the tax office, customs. External service providers or other contractors, e.g. for data processing, accounting, payment processing. Other external bodies if the data subject has given their consent or a transfer is permitted due to overriding interests.
Third country transfers:	does not take place.
Duration of data storage:	The duration of data storage depends on the statutory retention obligations and is generally 10 years.

Specific information on the use of video conferencing/webinar software

Data concerned:	Data provided for the use of the video conferencing software or webinar software (in particular first name, surname, email address; optional: audio transmission; optional: image transmission; optional: questions when using chat functions); to the extent technically necessary, processing of data from your system to establish the connection with the provider of the conferencing software
Purpose of processing:	Conducting video conferences or webinars.
Categories of recipients:	Public authorities in the event of overriding legal provisions. External service providers or other contractors, e.g. for data processing and hosting. Other external bodies if the data subject has given their consent or a transfer is permitted for reasons of overriding interest.
Third country transfers:	Processors outside the European Union are used (here: United States of America); standard contractual clauses have been concluded with the service provider accordingly.
Duration of data storage:	Video conferences are only recorded with the prior documented consent of the participants. The technical data is deleted as soon as it is no longer required. The duration of data storage is otherwise based on the statutory retention obligations and is generally 10 years.

Further information and contacts

In addition, you can assert your rights to information, correction or deletion or to restriction of processing or the exercise of your right to object to processing as well as the right to data portability at any time. You can contact us by e-mail or letter here. You also have the right to lodge a complaint with the data protection supervisory authority.