Data protection notice
for the Schultze & Braun website (www.schultze-braun.de)
Last updated: 30 June 2023
Who is responsible for the processing of your data?
Schultze & Braun GmbH & Co. KG
Together with the following companies, Schultze & Braun GmbH & Co. KG is responsible for processing of personal data:
The jointly responsible companies can be contacted at the business address
Eisenbahnstraße 19-23, 77855 Achern, Germany
(Telephone: +49 7841 7080, mail@schultze-braun.de).
All companies together are hereinafter referred to as “Schultze & Braun”.
How can you contact the data protection officer?
You can contact the data protection officer from Schultze & Braun Ms Manuela Becker-Schnurr, Rechtsanwältin (Lawyer in Germany), at the above address or by e-mail directly at: dsb@schultze-braun.de
What is your data needed for?
(A1) Provision of the website and creation of log files
Each time the website of Schultze & Braun is called up, data and information are automatically collected by the respective computer system of the calling computer.
The following data is collected:
The data is used to optimise the website and to ensure the security of information technology systems of Schultze & Braun. The data is also stored in the system's log files of Schultze & Braun. (more information see A2)
(B1) Use of cookies
Cookies are small text files that are stored in or by the internet browser on the respective user’s computer system and are sent back to the server when the page is visited again.
Users can object to the pseudonymised analysis on the website of Schultze & Braun. For this purpose, a cookie (piwik_ignore) will be created to prevent future tracking.
It is also necessary to set a cookie for the login to function (fe_typo_user) if the respective user has to log on to one of the pages of Schultze & Braun with a user ID and password, e.g. in connection with an event of Schultze & Braun or using the commentary function of the Blog.
(C1) Requesting newsletter/information/Registering for events
The website of Schultze & Braun offers the option to subscribe to a free newsletter and to register for an event. When you subscribe, data entered in the form will be transferred to Schultze & Braun.
This data is:
When the message is sent, the following data will in addition be stored:
The processing of personal data from the input mask is used by Schultze & Braun to analyse and process user requests. The personal data additionally processed during transmission helps to prevent misuse of the registration form and to ensure the security of the information technology systems of Schultze & Braun. (more information see C2)
(D1) Contact forms and e-mail contact
Contact forms on the website of Schultze & Braun can be used to get in touch electronically. If a user chooses to do so, the following data entered in the form will be transferred to Schultze Braun and stored:
When the message is sent, the following data will also be stored:
Alternatively, contact can be made via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
Schultze & Braun will process the personal data entered in the form in order to deal with the enquiry. The personal data additionally processed during transmission helps to prevent misuse of the registration form and to ensure the security of the information technology systems of Schultze & Braun. (more information see D2)
(E1) Podcasts
For podcasts of Schultze & Braun, the podcast hosting service Podigee provided by Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany (“Podigee”) is used. Podcasts are loaded by Podigee onto its website or broadcast by Podigee. When a podcast is accessed, Podigee will process the following data:
Such data will be anonymised or pseudonymised by Podigee prior to being stored in the database unless it is required in order to provide the podcasts. Data is processed in order to securely and efficiently provide the podcasts for downloading/playing and to carry out aggregate statistical reach analyses, e.g. to determine access numbers in order to optimise podcast offering of Schultze & Braun. You can find further information about data protection by Podigee and about ways to object at: https://www.podigee.com/de/about/privacy/. (more information see E2)
(F1) Matomo
On the website, Schultze & Braun isusing Matomo open source software (www.matomo.org), a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. When the website of Schultze & Braunis accessed, the following data is stored on the server of Schultze & Braun:
Schultze & Braun needs such data to carry out a statistical analysis of instances of visitor access so that the website can be optimised and made more user friendly. The data collected is stored only on the server of Schultze & Braun. It is not passed on to third parties. If you do not wish to participate in the pseudonymised analysis of the website of Schultze & Braun, you can object to the processing of your data for this purpose by deactivating (unticking) the check box below. Your visits to this website will then no longer be recorded by the website analysis.
Unticking the check box will store a cookie on the user’s browser to prevent future tracking. If the user has blocked cookies on his/her browser, he/she must actively permit this cookie to be installed. If cookies stored on the user’s browser are removed, this may cause the Matomo deactivation cookie for this website to be removed as well. In this case, the deactivation process must be repeated in order to opt out. (more information see F2)
(G1) YouTube
Schultze & Braun integrates videos from the YouTube platform of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA on the website. By activating the extended data protection mode, Schultze & Braun sets the YouTube function "no-cookies" (i.e. videos are not accessed via youtube.com, but via youtube-nocookie.com). YouTube itself provides this function and thus ensures that no cookies are initially stored on the device of the user. As soon as the user starts the playback of an embedded video by clicking on it, YouTube only saves cookies on the user’s device through the extended data protection mode, which do not contain any personally identifiable data, unless the user is currently logged in to a Google service. These cookies can be prevented by appropriate browser settings and extensions. YouTube's privacy policy can be viewed at: https://www.google.com/policies/privacy/. (more information see G2)
(H1) Comment function in the Blog
The website of Schultze & Braun contains a comment form that can be used to comment on website content. If users take advantage of this option, the data entered in the input mask is transmitted to Schultze & Braun using a cookie (tx_pwcomments_ahash), checked and posted on the website. These data are:
At the time the message is sent, the following data is also stored:
Only open comments are supported, which is why the personal data of the commenters is required.
(I1) Buttons integrated into the website
Career button/application:
Clicking on the career button on the website of Schultze & Braun will take to the career site, which among other things contains job offers. By clicking on the button “Unsolicited applications” or one of the job offers, the user will be directed to the applicant portal, which is operated on the server of the service provider (BITE GmbH, Magirus-Deutz-Strasse 12, 89077 Ulm). The browser of the user will establish a direct connection with BITE GmbH’s server. Information on the collection and use of data by BITE GmbH can be found in their data protection notices at www.b-ite.de/legal-notice.html. The user can then apply by clicking on one of the other buttons (E-mail application or Online application). Additional information on the collection and use of data for applicants to Schultze & Braun can be found here: https://www.schultze-braun.de/rechtliches/datenschutz-bewerber/.
Social media button:
On the website Schultze & Braun also refers to social networks on which maintain an online presence is maintained. By clicking on one of these social media buttons, the user’s browser will establish a direct connection with the servers of the relevant social media providers. Schultze & Braun has no influence over the scope of the data collected by the social media providers. Further notices about data protection for the use of social media at Schultze & Braun: https://www.schultze-braun.de/dssocialmedia/.
CIS button:
CIS (“GIS” in German) – the online creditor information system that can be reached via the website of Schultze & Braun – is operated by STP Business Information GmbH, Brauerstrasse 12, 76135 Karlsruhe, Germany. By clicking on the CIS button, the user’s browser will establish a direct connection with STP Business Information GmbH’s server. Information on the collection and use of data by STP Business Information GmbH can be found in their data protection notices at https://www.insolvenz-portal.de/datenschutz-datensicherheit. (more information see I2)
What is the legal basis for the data processing?
(A2) Data is stored in log files in order to ensure that the website functions properly. In addition, the data is used to optimise the Schultze & Braun website and to ensure the security of information technology systems of Schultze & Braun. These purposes constitute a legitimate interest of Schultze & Braun in the data processing (Article 6(1)(f) of the General Data Protection Regulation – GDPR). (more information see A3)
(B2) Legitimate interest in order to prevent misuse of proprietary forms (Article 6(1)(f) GDPR). ((more information see B3)
(C2) The data entered in the form will be processed with consent to receipt of the newsletter (Article 6(1)(a) GDPR). The data from event registration will be processed for performance of a contract (Article 6(1)(b) GDPR).
The processing of the personal data additionally transmitted helps to prevent misuse of the registration form and to ensure the security of information technology systems of Schultze & Braun (legitimate interest, Article 6(1)(f) GDPR). (more information see C3)
(D2) Depending on the type of message, the legal basis for processing the data entered in the form may be consent (Article 6(1)(a) GDPR), taking steps prior to entering into a contract or the performance of a contract (Article 6(1)(b) GDPR).
The processing of the additional personal data transmitted helps to prevent misuse of the registration form and to ensure the security of information technology systems of Schultze & Braun (legitimate interest, Article 6(1)(f) GDPR). (more information see D3)
(E2) The use of and data processing by Podigee as sub-provider of the processor Schultze & Braun GmbH & Co. KG, Eisenbahnstraße 19- 23, 77855 Achern, Germany (“Schultze & Braun”) takes place on the basis of legitimate interests of Schultze & Braun in the secure and efficient provision, analysis and optimisation of podcast offered by Schultze & Braun (legitimate interest, Article 6(1)(f) GDPR). (more information see F3)
(F2) Legitimate interest (Article 6(1)(f) GDPR). (more information see F3)
(G2) Consent given by clicking on the cookie-consent-tools (Article 6(1)(a) GDPR) (more information see G3)
Are your data passed on to other recipients?
(A3, B3, C3, D3)
No. (more information see A4, B4, C4, D4)
(E3) The data will be processed by Podigee as sub-provider of the processor Schultze & Braun in compliance with European data protection law. A processing contract is in place both with the processor Schultze & Braun and with Podigee that governs how personal data is processed. Schultze & Braun remains responsible for processing personal data even if Schultze & Braun tasks other companies to do this as sub-providers.
If podcast access and subscription takes place through third-party podcast providers to which Schultze & Braun refers on the website (e.g. Spotify, Apple or Amazon Music), usage data may be collected by these providers and in some cases stored by them in server logs. By clicking on one of these provider buttons, the browser of the user will establish a direct connection with the servers of the relevant podcast providers. Schultze & Braun has no influence over the scope of the data collected by the podcast providers. Further Information can be found in the data protection notices of these podcast platform providers. (more information see E4)
(F3) The data collected is stored only on the company-owned server of Schultze & Braun. It is not passed on to third parties. (more information see F4)
(G3) Further information on data protection, in particular on the forwarding of data, at YouTube can be found in the provider's data protection declaration at: https://www.google.de/intl/de/policies/privacy/. (more information see G4)
(I3) When clicking on one of the buttons of the platform providers, the user’s browser establishes a direct connection with the servers of the respective providers. Schultze & Braun has no influence on the scope of the data collected by the respective providers. Information on the data collected by the providers, their storage and use can be found in the data protection notices of the respective providers (as described above under (I1)). (more information see I4)
How long is your data stored?
(A4) Data stored in log files is deleted after seven days at the latest. A longer retention period is possible. In this case, the user's IP address will be erased or masked in order to ensure that it can no longer be associated with the contacting client. (More information see A5)
(B4) Cookies are only needed for the current session and are automatically deleted by the user’s browser when the session ends/when logging out.
The cookie to prevent future tracking created will remain active until the user actively deletes it from his/her local browser or until consent to tracking by ticking the box. (More information see B5)
The cookie (tx_pwcomments_ahash) for the comment function has a lifetime of one day and is then automatically deleted by the user's browser.
(C4) Requesting the newsletter/information:
The user's data is stored until consent to receiving the newsletter is revoked by the user. The e-mail address remains stored in order to keep a record of the revocation. Other personal data collected in the course of the subscription process will be erased, generally after seven days.
Registration for events:
Data is generally stored for 6 years. (More information see C5)
(D4) The date of erasing the data depends on the content of the message. If the content relates to a client relationship, for example, the data is stored for 6 years. If it involves tax matters, the retention period is 10 years. Personal data collected additionally in the course of data transfer will be erased, generally after seven days. (More information see D5)
(E4) All data processed in connection with providing the podcast will be erased once it is no longer needed for providing podcasts. The anonymised or pseudonymised data processed for statistical purposes will be erased once it is no longer needed for generating the statistics. You can find further information about data protection by Podigee and about ways to object at: www.podigee.com/de/about/privacy/.
Information about the storage duration for data collected in connection with the use of third-party podcast platform providers can be found in the privacy policies of these providers. (More information see F5)
(F4) Stored, anonymised data will be deleted after 24 months, at the latest. (More information see G5)
(G4) Further information on data protection concerning YouTube, in particular on the forwarding of data, at YouTube can be found in the provider's data protection declaration at https://www.google.de/intl/de/policies/privacy/ (more information see G5)
(H4) Name and comment will only be deleted when the blog post in question is shut down, at the latest when the website itself is shut down.
The additional personal data collected during transmission is usually deleted after seven days. (more information see H5)
(I4) See the data protection declarations of the respective platform providers (as described above under (I1)). (more information see I5)
Is your data forwarded to a non-EU state or an international organisation?
(A5, B5, C5, D5, F5, H5)
No.
(E5 G5, I5)
Yes. For details, see the data protection notices of the third-party platform providers.
What rights do you have?
There is a right to information about the personal data that Schultze & Braun processes. In the event of a request for information - of any kind - further proof of identification may be required. Furthermore, users have a right to rectification or erasure of personal data, or to restriction of processing, insofar as users are entitled to do so by law.
There is a right to object to the data processing within the scope of legal requirements. The same applies to a right to data portability.
If Schultze & Braun processes data of the user on the basis of consent given, the user may revoke this consent at any time. Processing up to the date of revocation remains lawful.
At which supervisory authority can you lodge a complaint?
A complaint can be lodged at a supervisory authority for data protection within the EU.
