Schwarz Production
Privacy Notice for Job Applicants
Last Updated: May 2026
This data protection information informs you about the processing of your personal data and your rights under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
Thank you for your interest in our website. Protection of your privacy is important to us. We consider it part of our corporate duty to ensure that information entrusted to us is protected in accordance with legal regulations.
Table of Contents
1. Controller
2. Conducting the application process
3. Consent to “Make my profile visible to”
4. Applicant Pool (Talent Pool)
5. Use of cookies and similar technologies
6. Your rights as a data subject
7. Contacting the Data Protection Officer
1. Controller
The controller (Art. 4 No. 7 UK GDPR) for data processing in connection with the application process is
Schwarz Produktion Stiftung & Co. KG
Langendorfer Str. 23
06667 Weißenfels
Germany
Email: info@schwarz-produktion.com
Telephone: +49 3443 8003 000
together with the company you are applying to:
MEG Derby
Dove Valley Park, 6000 Park Ave
Foston, Derby DE65 5BT
United Kingdom
Email: application-derby@meg-gruppe.com
Telephone: +44 121 815 1000
Your application relates to an advertised position at one of the above-mentioned companies. Before submitting your application, you can indicate whether you would like your application to be forwarded to the other companies listed (see “4. Consent to make your profile visible to”).
For applications for a position at Schwarz Produktion Stiftung & Co. KG, the company itself is the controller within the meaning of Art. 4(7) UK GDPR.
If you wish to be included in the applicant pool, all of the companies listed, including Schwarz Corporate Solutions KG, act as joint controllers for the processing of your personal data (see “5. Applicant pool”).
As Schwarz Produktion Stiftung & Co. KG and the companies jointly determine the purposes and means of the processing, they act as joint controllers within the meaning of Article 26 UK GDPR.
Within the scope of their joint controllership, the companies have agreed on the allocation of their respective obligations under the UK GDPR and the Data Protection Act 2018. This applies in particular to the handling of data subject rights and the provision of information pursuant to Articles 13 and 14 UK GDPR.
2. Conducting the application process
2.1. Purposes and legal basis
We process the data you provide to us during the application process for the purposes of selecting and hiring applicants. This is done on the basis of Art. 6 (1) (b) UK GDPR and Art.9 (2) (b) UK GDPR read together with Part 1 of Schedule 1 of the Data Protection Act 2018.
Furthermore, we process the data to the extent necessary to defend ourselves against any claims asserted under the Equality Act 2010. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in the aforementioned purpose.
If you participate in the conclusion of a contract offered by us using a digital signature (e.g. Adobe Sign), we process your data, such as your email address, IP address and the times at which you edited the respective contract document, e.g. approved, displayed or digitally signed it, including the time and date. Our legitimate interest in this data processing pursuant to Art. 6 (1) (f) UK GDPR consists in the efficient and rapid digital processing of the contract signing and the corresponding logging of the signature process for verification purposes.
2.2. Applications by post or email
We kindly ask you to refrain from sending applications by post or email. In order to be able to process all incoming applications as quickly as possible, it is necessary that you apply online via our online application system directly for an advertised position or on your own initiative. Unfortunately, we cannot consider applications received by post or email and will destroy or delete them.
2.3. Online application systems
If you would like to apply for a position at one of the above-mentioned companies, please use our online application system. Our online application system allows you to apply for positions at the above-mentioned companies in various ways. We offer you a number of different application channels, which we will explain in more detail below.
2.3.1. Application via jobs.schwarz-produktion.com
Our job portal offers you the opportunity to apply directly for your favourite position. During the registration process, you can create a personal applicant account with a personal access password (known as profile data). The data in your account can only be viewed by you. We use an encryption process for the online transmission of your applicant data in this system, so that your information is protected against unauthorised access.
2.3.2. Application via StepStone
If you find an interesting position with us on our service provider StepStone, you also have the option of applying directly for this position. You can apply via an existing account with StepStone or as a guest. StepStone will then provide an input mask on our behalf, in which all the information required for your application will be requested from us. You can fill in this information. By clicking on the “Apply” button, your data will be transferred to us by StepStone. A user profile and an application will then be created for you in our online application system. You then have the option of generating any number of applications from your user profile if you wish.
For more information on the “Quick Apply” function without creating a user profile with StepStone, please refer to “3.4 QuickApply”.
2.3.3. Uploading documents in the online application system
You can upload documents directly to your user profile or for a specific application from your computer or mobile device.
2.4. QuickApply
UWhen applying for jobs via the StepStone platform, you have the option of applying directly for the specific job advertised using the “Quick Apply” function. In this case, StepStone collects the data relating to your application (name, address, telephone number, date of birth and details of your education and professional experience) and sends it to us for further processing of your application. In this case, StepStone will inform you transparently about the data processing that will take place from the outset. StepStone provides you with all the necessary information about the StepStone Quick Apply function via the following link:
https://www.stepstone.de/ueber-stepstone/privacy-policy-applicants/
2.5. Recipients/categories of recipients
If you use StepStone (StepStone Deutschland GmbH, Völklinger Straße 1, 40219 Düsseldorf) for your application, StepStone will receive your application data in order to send it to us.
When you apply for one of our advertised positions, the HR department of Schwarz Produktion Stiftung & Co. KG, the company or department in which the advertised position is located, and recruiters will have access to your data to the extent necessary. With regard to the profile data collected, the right of access only applies to the fact that further applications for other positions are open. Application data can only be viewed in detail once you have actively released it. If a works council exists at the relevant company, works council members will also have access to your data to the extent necessary as part of the application process.
This applies accordingly if you send us a speculative application. If you do not limit your speculative application to a specific department or position, several companies or departments may also have access to your data in order to decide whether we can offer you a position (see “4. Consent to ‘Make your profile visible to’).
Your data may be accessible to SAP Deutschland SE & Co. KG, Hasso-Plattner-Ring 7, 69190 Walldorf, Germany, for support and maintenance purposes, as the applicant portal is operated on servers provided by SAP Deutschland SE & Co. KG.
In the case of contracts concluded using a digital signature, your data will also be accessible to all persons involved in the contract approval and signing process, as they will receive a log after the contract has been signed showing all processing steps, including email address, IP address, date and time. Furthermore, your data may be accessible to the respective service providers that we use for the corresponding digital signature process. For Adobe Sign, this is Adobe Systems Software Ireland Limited, 4-6 Riverwalk, City West, Business Campus, Saggart D24, Dublin, Ireland.
We generally exclude the transfer of data to other third parties. In exceptional cases, data is processed on our behalf by processors (e.g. processors who support us in the technical implementation of our online application system). These are carefully selected and contractually bound in accordance with Art. 28 UK GDPR.
2.6. Obligation to provide your data
You are not contractually or legally obliged to provide us with personal data. However, without this data, we cannot contact you or carry out an application process. The data is also required in the event of a contract being concluded in the context of recruitment.
2.7. Storage period/criteria for determining the storage period
If an active application has not been successful, your data from this application will be retained for six months after receipt of the rejection. After that, your data from this application will be deleted. The same applies if you withdraw your application(s) yourself.
Your user profile in our online application system (job portal) and the data stored therein will remain stored in the system regardless of whether you have submitted a specific active application. This gives you the opportunity to apply for other positions online or to receive relevant notifications once you have been accepted into our talent pool. If your profile has been inactive for 12 months and no applications are being processed, your profile will be automatically deleted. However, you can also delete your user profile yourself at any time or change or delete only certain data in your profile. If you delete your entire user profile and you have any current applications being processed at that time, these will be withdrawn and your user profile will be deleted. Your user profile will be deleted immediately, but the applications themselves will be deleted after six months, as described above.
3. Consent to “Make my profile visible to”
3.1. Purposes and legal basis
Your application relates to an advertised position at the company to which you have applied. Your application documents will therefore only ever be evaluated and considered for the specific position. Your profile, on the other hand, to which you can voluntarily upload documents, cannot be viewed by anyone other than yourself in this case.
If, regardless of the individual application, you are also interested in vacancies at other Schwarz Produktion companies, you can either create several individual applications from your profile or select in our application process whether your profile should be considered for other vacancies at other Schwarz Produktion companies.
You also have the option of sending us a speculative application. If you send us a speculative application for a specific area of work, we would like to give you the opportunity to have your speculative application viewed by other Schwarz companies as well as us, as not every company is always looking for someone in your chosen field of work. To do this, you must select the profile visibility option described below (worldwide or at least in the country where you wish to apply) when creating your candidate profile. Otherwise, we will not be able to consider your speculative application. You can also apply for a specific position at a specific company in the traditional way at any time.
Regardless of which application method you choose under “Online application system” (3.3. Online application systems), you always have the option of deciding at a later date under “Privacy settings and search options” in your candidate profile on our recruiting portal to keep the default settings, which means that your profile will remain invisible to everyone and your application(s) will only be visible to the company for whose specific position you are applying.
Furthermore, you have the option of deciding that your profile, including your name, email address, uploaded documents, currently active applications, and all future applications generated from your profile, may be considered for either
- vacant positions at the above-mentioned companies in the same country in which you are applying (see “2. Responsible party”)
- or for vacant positions at Schwarz Produktion worldwide.
When selecting access for Schwarz Produktion companies worldwide, in addition to the companies mentioned above, the following companies also have access to your profile:
Bonback GmbH & Co. KG
David-Hansemann-Straße 1-25
52531 Übach-Palenberg
Telephone: +49 (0) 2451 / 91592000
Email: info@bonback.de
Bon Gelati Übach-Palenberg GmbH & Co. KG
David-Hansemann-Straße 1-25
52531 Übach-Palenberg
Telephone: +49 (0) 2451 / 91593000
Email: info@bon-gelati.com
Bon Gelati Haaren GmbH & Co. KG
Entenpfuhl 6
52525 Waldfeucht-Haaren
Telephone: +49 (0) 2451 / 91593000
Email: info@bon-gelati.com
MEG Derby
Dove Valley Park, 6000 Park Ave
Foston, Derby DE65 5BT
United Kingdom
Telephone: 00441218151000
Email: application-derby@meg-gruppe.com
MEG Jessen GmbH
Rehainer Street 11
06917 Jessen / Elster
Telephone: + 49 (0) 3537 / 2010
Email: bewerbung-jessen@meg-gruppe.com
MEG Kirkel GmbH
Waldstraße 4
66459 Kirkel
Telephone: +49 (0) 6849 / 60030
Email: bewerbung-kirkel@meg-gruppe.com
MEG Leißling GmbH
Am Frauenholze 20
06667 Weißenfels OT Leißling
Telephone: +49 (0) 3443 8910
Email: bewerbung-leissling@meg-gruppe.com
MEG Logistik GmbH & Co. KG
Langendorfer Straße 23
06667 Weißenfels
Telephone: +49 (0) 3443 / 8003000
Email: bewerbung-weissenfels@meg-gruppe.com
MEG Löningen GmbH
Haselüner Street 45
49624 Löningen
Telephone: +49 (0) 5432 / 8090
Email: bewerbung-loeningen@meg-gruppe.com
MEG Neuensalz GmbH
Zum Plom 35
08541 Neuensalz
Tel:
Email: bewerbung-neuensalz@meg-gruppe.com>
MEG Roßbach GmbH
Südstraße 44
06242 Braunsbedra OT Roßbach
Telephone: +49 34633 / 3440
Email: bewerbung-rossbach@meg-gruppe.com
MEG Übach-Palenberg GmbH
Boschstraße 26
52531 Übach-Palenberg
Telephone: +49 (0) 2451 / 91501000
Email: bewerbung-uebach-palenberg@meg-gruppe.com
MEG Weißenfels GmbH & Co. KG
Langendorfer Street 23
06667 Weißenfels
Telephone: +49 (0) 3443 / 8003000
Email: bewerbung-weissenfels@meg-gruppe.com
MEG Wörth am Rhein GmbH
Am Oberwald 15
76744 Wörth am Rhein
Telephone: +49 7271 / 97981101
Email: bewerbung-woerth@meg-gruppe.com
Pro Projekte GmbH & Co. KG
Langendorfer Straße 23
06667 Weißenfels
Telephone: +49 (0) 211 / 440311000
Email: bewerbung@projekte-pro.com
Sindra Logistik & Services GmbH & Co. KG
David-Hansemann-Straße 1-25
52531 Übach-Palenberg
Telephone: +49 (0) 2451 / 91594040
Email: info@sindra-infra.com
Schwarz Produktion Stiftung & Co. KG
Langendorfer Street 23
06667 Weißenfels
Telephone: +49 (0) 3443 / 8003000
Email: bewerbung@schwarz-produktion.com
Solent Übach-Palenberg GmbH & Co. KG
David-Hansemann-Straße 1-25
52531 Übach-Palenberg
Telephone: +49 (0) 2451 / 91591000
Email: info@solent-schokolade.com
Bon Presso GmbH & Co. KG
Langendorfer Str. 23,
06667 Weißenfels
Telephone: +49 (0) 3443 / 800 3000
Email: info@bon-presso.com
Bon Pasta GmbH
Eugen-Richter-Straße 27
99085 Erfurt
Telephone: +49 (0) 0361 / 597330
Email: info@bon-pasta.com
Bonback Halle GmbH
Polarisstraße 1
06116 Halle
Telephone: +49 (0) 345 / 9772120
Email: info@bonback.de
Solent Rheine GmbH & Co. KG
Siemensstraße 12
48432 Rheine
Telephone: +49 (0) 5971 / 9143 2001
Email: info@solent-schokolade.com
Sindra Rheine GmbH & Co. KG
Siemensstraße 10
48432 Rheine
Telephone: +49 (0) 2451 / 91594040
Email: info@sindra-infra.com
Maxauer Papierfabrik GmbH
Mitscherlichstraße
76187 Karlsruhe
Telephone: +49 (0) 721 / 95660
Email: info@maxauer-papierfabrik.com
If you also make your profile available for other vacant positions and are considered as an applicant for these, we will forward your data to the responsible department of the advertising company as part of the application process. Please note that this decision affects your entire profile, including your name, email address, uploaded documents, currently active applications, and all future applications generated from your profile. Any active application you submit from your user profile may then also be considered by other Schwarz Produktion companies based on your decision.
Your consent is given voluntarily. You may withdraw your consent at any time by changing your settings directly in your profile or by sending an email to recruiting@schwarz-produktion.com. The withdrawal does not affect the lawfulness of any processing carried out prior to the withdrawal. In the event of withdrawal, only your original application will continue to be considered. If you change your visibility settings for a speculative application, we will no longer be able to consider your speculative application. However, if you already have an active application for a specific Schwarz company, this process will of course continue. Withdrawal therefore only means that you cannot be considered for any further new positions. Data processing is based on your consent in accordance with Art. 6 (1) (a) UK GDPR.
Insofar as your profile may be considered for vacant positions at Schwarz Produktion companies worldwide, the companies listed above are jointly responsible for data processing.
3.2. Recipients/categories of recipients
All information and attachments that you store in your account and send with an application will be processed by us exclusively for the purpose of processing the application you have submitted via your account.
Otherwise, we only use service providers to operate the job portal securely (see “3.5. Recipients/categories of recipients”).
3.3. International transfers
If you choose to allow all Schwarz Produktion companies worldwide to access your profile, the companies listed in section 4.1 may access your personal data. This may involve a transfer of personal data to countries outside the United Kingdom (UK).
The UK has recognised certain countries as ensuring an adequate level of data protection by means of an adequacy decision. An overview of the countries for which an adequacy decision exists is available here.
In the context of this processing, all recipients are located in countries for which an adequacy decision has been issued.
3.4. Storage period/criteria for determining the storage period
The storage period for the data is based on the general deletion criteria for your profile (details can be found in section 3.7.). If you withdraw your consent to “Make my profile visible to”, only the original application will continue to be considered.
We will retain your declaration of consent to “Make my profile visible to” for 3 years in order to comply with our accountability obligations within the meaning of Art. 5 (2) UK GDPR.
4. Applicant Pool (Talent Pool)
In addition to the candidate search described above for suitable candidates for currently open positions (see “4. Consent to make your profile visible to”), our recruiters also use so-called talent pools to consider specific target groups and stay in contact with them. For example, they form regional talent pools of suitable candidates for positions that need to be filled frequently or for special functions.
4.1. Purposes and legal basis
If you have given your consent to be included in our talent pool and already have a user profile from our online application system, your profile can also be assigned to our talent pool and we can consider you for future job vacancies in line with your qualifications, as well as contact you by telephone or email. This assignment is made after individual review by us.
This also applies if you decide that you would like to be included in our talent pool and do not yet have a user profile. In this case, a user profile will be created from the data you provide when registering for the talent pool.
Further information on visibility settings can be found under “4.1. Purposes and legal basis”.
If there is currently no suitable applicant pool to which we can add you, your visibility settings will remain unchanged after you have given your consent to “Make your profile visible to”.
If you are added to an applicant pool, the following data will be visible, depending on your settings: your name, your email address, your uploaded documents, your currently active applications, as well as all future applications generated from your profile.
The legal basis for data processing within the applicant pool is your consent in accordance with Art. 6 (1) (a) UK GDPR. The data you have provided in your profile will be processed.
Your consent is given voluntarily. You may withdraw your consent at any time by adjusting the settings in your profile or by sending an email to recruiting@schwarz-produktion.com. The withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal. In the event of withdrawal, only your original application will continue to be considered.
4.2. Registration for the applicant pool via data collection form
When visiting a career fair or after being approached and interviewed by an active sourcing recruiter, you have the option of registering via a data collection form in the application portal without having to apply for a specific position, with the aim of being included in a talent pool and being considered for future vacancies in line with your qualifications.
A candidate profile is automatically created in the background based on the information you provide. In this context, we would like to give you the opportunity to be considered for suitable positions in Schwarz production companies worldwide. For this reason, your candidate profile is automatically visible worldwide by default when you register for a talent pool via the data collection form. You can change this setting in your profile and restrict visibility to your country of residence. Further information on visibility settings (especially option 1) can be found under “4.1. Purposes and legal basis”.
4.3. Recipients/categories of recipients
Once you have been accepted into our national talent pool, all of the companies listed above (see “2. Controller”) will have access to your profile. Only the relevant companies have access to current applications.
4.4. Obligation to provide your data
Consent to be included in our talent pool is voluntary and refusal to give consent has no effect on other ongoing application procedures at the companies jointly responsible with Schwarz Produktion Stiftung & Co. KG or on ongoing application procedures at Schwarz Produktion Stiftung & Co. KG itself.
You may withdraw your consent at any time by sending an email to recruiting@schwarz-produktion.com. The withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
4.5. International transfers
If you choose to allow all Schwarz Produktion companies worldwide to access your profile, the companies listed in section 4.1 may access your data. This may involve the transfer of data outside the United Kingdom (UK).
The UK has recognised certain countries as ensuring an adequate level of data protection by means of an adequacy decision. An overview of the countries for which an adequacy decision exists is available here.
In the context of this processing, all recipients are located in countries for which an adequacy decision has been issued.
4.6. Storage period/criteria for determining the storage period
The storage period for the data is based on the general deletion criteria for your profile (details can be found under 3.7.). If you withdraw your consent to be included in the talent pool, your data and your user profile (provided there are no more open applications linked to it) will be deleted immediately.
We will retain your declaration of consent to be included in our talent pool for 3 years in order to comply with our accountability obligations within the meaning of Art. 5 (2) UK GDPR.
5. Use of cookies and similar technologies
5.1. Cookies
When cookies and similar technologies are used to process usage data (in particular local storage), files are stored locally on your device when you visit the job portal. These files contain information relating to the device you are using. However, this does not mean that we immediately obtain knowledge of your identity.
5.1.1. Controller
In addition to us, the respective operator of the social media platform acts as a joint controller for the processing of personal data in connection with social media cookies (see the cookies listed under the “Marketing” category in our Cookie Policy), within the meaning of Article 26 UK GDPR.
With your consent, we use specific technologies provided by these partners on our website in order to achieve the purposes described in the Cookie Policy for the relevant cookies. In this context, our partners may also compare the data collected via our website with their own datasets.
In exercising your rights as a data subject with regard to the data processing described in this paragraph, you can contact our partners listed below in addition to us.
Further information on data processing and the exercise of your rights as a data subject can also be found in the respective privacy policies of our partners:
- LinkedIn Ireland, Wilton Place, Dublin 2, Ireland; https://de.linkedin.com/legal/privacy-policy
5.1.2. Purposes, types of data and legal bases
The use of cookies and similar technologies to process usage data serves the following purposes, depending on the category of cookie or similar technology:
- Technically necessary: These are cookies and similar technologies without which you cannot use our services (e.g. to display our website correctly, including the language, font and colour, to provide the functions you require, to take your settings into account, such as your selection of cookies and similar technologies, to save your login in the login area, to fill your shopping basket when shopping online, etc.).
The use of technically necessary cookies and similar technologies in the “Technically necessary” category is based on Regulation 6 of the Privacy and Electronic Communications Regulations 2003 (PECR) read together with Schedule A1, paragraph 4 PECR. Subsequent data processing is based on legitimate interests pursuant to Art. 6 (1) (f) UK GDPR. The legitimate interests lie in using cookies and similar technologies on our websites in compliance with data protection regulations and enabling you to easily withdraw your declarations of consent.
Depending on the purpose, the following types of personal data in particular are processed and the following cookies and similar technologies are used:
- User entries to retain entries across multiple subpages (e.g. selection of your preferred branch in our branch finder);
- Authentication data for identifying a user after login in order to gain access to authorised content during subsequent visits (e.g. access to customer account);/li>
- Security-related events (e.g. detection of frequent failed login attempts);/li>
- Data for playing multimedia content (e.g. playing (product) videos selected by the user)/li>
- Consent to cookie preferences.
You can find an overview of the cookies and similar technologies used, the storage periods and any third-party providers involved in this category in our cookie policy.
The use of cookies and similar technologies in the convenience category is based on your consent under Regulation 6 PECR read together with Schedule A1, paragraph 2 PECR. Subsequent data processing is based on your consent in accordance with Art. 6 (1) (a) UK GDPR.
Depending on the purpose, the following types of personal data in particular are processed and the following cookies and similar technologies are used:
The use of cookies and similar technologies in the statistics category is based on Regulation 6 PECR read together with Schedule A1, paragraph 5 PECR.
Users are statistically recorded when they visit our website by means of an anonymous ID. It is not possible to collect personal or personally identifiable data via the ID. In particular, the following data is collected:
- Anonymised usage profiles with information about the use of our web pages. These include in particular:
- Browser type/version,
- Operating system used,
- Referrer URL (the previously visited page),
- Host name of the accessing computer (IP address, anonymised),
- Time of the server request,
- anonymised user ID and
- events triggered on the website (surfing behaviour).
You can find an overview of the cookies and similar technologies used, the storage periods and any third-party providers involved in this category in our cookie policy.
In addition, we analyse the use of our services (e.g. advertising banners viewed or clicked on) in order to optimise our advertisements and offers, and provide our advertising partners with pseudonymous data for billing purposes and to optimise marketing campaigns. Our advertising partners cannot trace this information back to you personally.
The use of cookies and similar technologies in the marketing category is based on your consent under Regulation 6 PECR read together with Schedule A1, paragraph 2 PECR. Subsequent data processing is based on your consent in accordance with Art. 6 (1) (a) UK GDPR.
Depending on the purpose, the following types of personal data in particular are processed and the following cookies and similar technologies are used:
- Pseudonymised usage profiles with information about the use of our websites. These include in particular:
- IP address,
- individual user ID;
- Potential product interests,
- events triggered on the website (surfing behaviour).
You can find an overview of the cookies and other technologies used, the storage periods and any third-party providers involved in this category in our cookie policy.
You may withdraw or adjust your consent at any time with effect for the future, without affecting the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal. To do so, simply click here and make your selection. You can withdraw your consent for the respective processing purposes by removing the relevant tick boxes.
5.1.3. Recipients/categories of recipients (optional)
Under certain circumstances, it may be necessary for us to transfer your personal data to other recipients.
In exceptional cases, your personal data may be accessible to IT service providers and service providers in the field of online marketing, depending on the respective cookie category.
5.1.4. International transfers
Under certain circumstances, it may be necessary for us to transfer your personal data to IT service providers in one or more countries outside the United Kingdom for support and maintenance purposes, as the website is operated on our behalf on servers belonging to IT service providers.
In this data processing, all recipients are located in a country with an adequacy decision or are subject to the UK Extension to the DPF if they are located in the USA.
5.1.5. Storage period/criteria for the storage period
The storage period for cookies can be found in our cookie policy.
If the column “Expiration” contains the word “persistent”, the cookie will be stored permanently until the corresponding consent is withdrawn.
If the column “Expiration” contains the entry “session”, the cookie will be stored for the duration of your visit to the site. As soon as you end the respective session or close your browser, the locally stored cookies will be deleted.
5.2. Consent management
5.2.1. Purposes and legal basis
We use a consent management tool on our website to manage your consent to the use of cookies and similar technologies.
Insofar as we use technically necessary cookies and similar technologies in connection with the integration of the tool, this is done in accordance with Regulation 6 of the PECR read together with Schedule A1, paragraph 4 PECR. Subsequent data processing is carried out on the basis of Art. 6 (1) (f) UK GDPR for the purpose and in our legitimate interest of using cookies and similar technologies on our website in compliance with data protection regulations and enabling you to easily withdraw your declaration of consent.
If you give your consent via our consent banner, we process the following data:
- IP address of the end device,
- Date and time of access,
- Name and URL of the file accessed,
- Date and time of consent,
- a pseudonymous, random and encrypted consent key (consent ID),
- Your consent status, which serves as proof of your consent.
This enables our website to check your consent status for all subsequent and future page views and, depending on your decision regarding the use of cookies and similar technologies, to activate or deactivate them when you visit the page again.
The check is carried out by comparing the consent ID and consent status from the “OptanonConsent” cookie with the values transmitted when you gave your consent to ensure that the status of your original consent has not changed.
5.2.2. International transfers
Under certain circumstances, it may be necessary for us to transfer your personal data to recipients in one or more countries outside the United Kingdom (UK).
The UK has recognised certain countries as ensuring an adequate level of data protection by means of an adequacy decision. An overview of the countries for which an adequacy decision exists is available here.
For service providers headquartered in the US, this only applies if they base the data transfer on the UK Extension EU-US Data Privacy Framework.
The processed data is accessible to OneTrust Technology Limited, 82 St. John Street, London, United Kingdom, as we use OneTrust Technology Limited as a service provider for our consent management.
5.2.3. Storage period/criteria for the storage period
Your consent ID and consent status are stored both in the browser of your device in the “OptanonConsent” cookie and on the OneTrust servers for a period of one year.
6. Your rights as a data subject
Where the processing of personal data is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) UK GDPR, you may withdraw your consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
Pursuant to Article 15(1) UK GDPR, you have the right to obtain confirmation as to whether personal data concerning you is being processed and, where that is the case, access to such personal data, free of charge.
Where the respective legal requirements are met, you also have the right to rectification (Article 16 UK GDPR), erasure (Article 17 UK GDPR) and restriction of processing (Article 18 UK GDPR) of your personal data.
Where you have provided the personal data yourself, you have the right to receive the data in a structured, commonly used and machine-readable format and to transmit those data to another controller, in accordance with Article 20 UK GDPR (right to data portability).
Where processing is based on Article 6(1)(e) or (f) UK GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 UK GDPR. Where you object, the processing will only continue if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.
To exercise your rights as a data subject, if you have any questions or in the event of complaints, please contact the Data Protection Officer in writing or by email.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). The ICO website for lodging complaints can be accessed here.
7. Contacting the Data Protection Officer
If you have any further questions about the processing of your data or the exercise of your rights, you can contact the responsible Data Protection Officer and the controller:
datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg
office@datenschutz-sued.de
Contact details of the controller
Schwarz Produktion GmbH & Co. KG
Langendorfer Straße 23
06667 Weißenfels
info@schwarz-produktion.com
Telephone: +49 (0) 34 43 / 800-3000