Privacy policy

The following data protection information informs you about the nature and extent of our processing of so-called personal data in accordance with the information requirements of Art. 13 of the EU General Data Protection Regulation (hereinafter "GDPR"). Personal data is information that can be directly or indirectly attributed to you. If you have any questions or comments about this data protection information, you can send them at any time to the e-mail address given in section 2.

1. Person responsible according to Art. 4 No. 7 GDPR

Responsible for the processing within the framework of this website is

Carl Stahl ARC GmbH
Siemensstrasse 2
D - 73079 Süssen
Germany
Phone: +49 (0) 71 62 / 948150-200
E-mail: info@carlstahl-arc.com

2. Data protection officer of the responsible party

You can reach our data protection officer at datenschutz@carlstahl.com.

3. Legal basis

We may process your data on the basis of the following legal grounds:

your consent according to Art. 6(1)(a) GDPR
For the fulfillment of a contract (incl. pre-contractual measures) according to Art. 6(1)(b) GDPR
The fulfillment of a legal obligation according to Art. 6(1)(c) GDPR
A legitimate interest according to Art. 6(1)(f) GDPR
The establishment, implementation or termination of an employment relationship pursuant to Section 26 BDSG

4. Rights of the data subject

In the following, we will inform you about your data subject rights.

Right of access (Art. 15 GDPR)
You have the right to request information from us at any time as to whether and which of your personal data is being processed by us. This also includes information about the purposes of processing, if applicable, about recipients to whom we have disclosed your data, the planned storage period and, if applicable, information about the origin of this data if we have not collected it directly from you.
Right to rectification (Art. 16 GDPR)
You have the right to request us to correct any inaccurate data we have stored about you. This also includes the right to have incomplete personal data completed.
Right to erasure (Art. 17 GDPR)
You have the right to request us to delete data that we have stored about you. Provided that there are no reasons against further processing, we will comply with your request.
Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of personal data processed about you in any of the following circumstances:
- disputing the accuracy of your personal data stored by the data controller until verification,
- for proof of unlawful processing operations,
- for the establishment, exercise or defense of legal claims and
- when examining an objection.
Right to data portability (Art. 20 GDPR)
You have the right to receive from us personal data that you have provided to us in a structured, commonly used and machine-readable format for the purpose of transferring it to another controller, provided that the processing is based on your consent or on a contract.
Right to object to processing (Art. 21 GDPR)
Insofar as we base the processing of your personal data on our legitimate interest within the meaning of Art. 6(1)(f) GDPR, you may object to the processing.
Right to withdraw consent under data protection law (Art. 7 GDPR)
If you have given your consent to the processing of your data, you may withdraw this consent at any time pursuant to Art. 7(3) GDPR with effect for the future.
Right of appeal to a supervisory authority (Art. 77 GDPR)
You have the right to complain at any time to a data protection supervisory authority about our processing of data relating to you. The competent supervisory authority can be reached at: The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, P.O. Box 10 29 32, 70025 Stuttgart, Germany.

5. Data deletion and storage duration

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the processing ceases to apply.

Processing may also take place if we are required by law to retain the data.

Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.

6. Data transfer to the USA

There is no adequate level of data protection for the transfer of personal data to the USA based on a decision by the European Commission. Due to the powers of the US intelligence services and the legal situation in the USA, the requirements of the GDPR cannot be met:

Section 702 of the Foreign Intelligence Surveillance Act (FISA) provides no limits on the surveillance activities of the intelligence community and no safeguards for non-U.S. citizens,
Presidential Policy Directive 28 (PPD-28) does not give affected individuals effective remedies against actions taken by U.S. authorities and does not provide barriers to ensuring proportionate measures,
the Ombudsman provided for in the Privacy Shield does not have sufficient independence from the executive branch; he cannot issue binding orders to the intelligence services.

As a result, there are no effective remedies or independent privacy oversight available in the event of access to your personal data by U.S. authorities.

If your personal data is transferred to the USA, the loss of your own data sovereignty cannot be ruled out. As a result, the rights and freedoms of data subjects may be inadequately protected.

7. External hosting

This website is hosted on servers in Germany. These are provided by the service provider, IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A contract for order processing pursuant to Art. 28 GDPR has been concluded with this service provider.

8. Server log files

In the case of simple informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server.

We temporarily store data that is technically necessary for us, such as your IP address, in order to display our website to you and to ensure stability and security. The legal basis for this is our legitimate interest according to Art. 6(1)(f) GDPR.

9. Use of cookies

Cookies are small files that are stored on your hard drive associated with the browser you are using and through which certain information flows to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer.

The storage of technically unnecessary cookies or the use of comparable technical functions is based on the legal basis of consent pursuant to Section 25(1) TTDSG.

The possible further processing of your data with the help of a cookie is also based on your consent according to Art. 6(1)(a) GDPR.

The storage of technically necessary cookies takes place according to § 25(2)(2) TTDSG.

The settings you make using the cookie banner are stored in a cookie. The legal basis for this processing is the legal obligation pursuant to Art. 6(1)(c) GDPR for cookies and third-party services to obtain your consent

We use the consent management platform (CMP) Cookiebot on our website from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. We have concluded a commission processing agreement with this service provider in accordance with Art. 28 GDPR.

The following data are processed as part of the CMP:

Consent data (ID, status, date, time, location, language, country)

User agent
IP address

Detailed information about the cookies we use can be found in our cookie banner. Cookie Settings

10 Other forms of use of our website

10.1 Contact

We provide our contact details on the website, through which you can get in touch with us.

The personal data you provide will be processed by us in order to handle your request or the reason for your contact. The data will not be passed on to third parties. The data is used exclusively for the processing of the conversation.

The legal basis for the processing of your data in the context of your contact request is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by sending an e-mail to [E-MAIL ADDRESS FOR WITHDRAWAL].

10.2 Application

If you apply for a job offer or send us an unsolicited application, we process the data you provide in order to process your application. As a rule, your documents contain special categories of personal data (e.g. information on marital status; information on health; a photo that allows conclusions to be drawn about your ethnic origin and, if applicable, eyesight and/or religion; similarly sensitive data within the meaning of Art. 9 GDPR).

10.3 Legal basis

The legal basis for the processing of applicant data is Art. 88(1) GDPR in conjunction with Section 26 BDSG, as the processing is necessary for the decision on the establishment of an employment relationship.

10.4 Retention period

Your data will be deleted 6 months after the termination of an unsuccessful application process.

10.5 Receiver

We use recruiting service providers to process your application.

11 Third-party services

11.1 Google Tag Manager

We use the Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service provider processes the data on our behalf.

Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. However, the Google Tag Manager collects your IP address, which may also be transferred to Google's parent company in the United States.

The use of the Google Tag Manager is based on your consent. You can withdraw this at any time with effect for the future in the cookie banner.

For more information about Google's privacy practices, please visit: policies.google.com.

The recipient of the data is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

A transfer to a third country cannot be excluded. In this regard, standard contractual clauses have been concluded and your consent obtained. Please note the risks associated with the transfer of your data to the USA as described in section 6.

1. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. The service provider processes the data on our behalf.

Google Analytics uses cookies. You can find more information about the cookies used in the cookie banner.

No individual IP addresses are logged or stored. The IP addresses are only used to determine location information (country, city, latitude and longitude of the city). They are deleted before data is stored in a data center or on a server. This is done on servers in the EU.

This information is used to evaluate your use of the website and to compile reports on website activity.

We only use Google Analytics with your consent. You can withdraw this at any time with effect for the future in the cookie banner.

11.2 YouTube

We use YouTube of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, to show you video content. To protect your privacy, we have activated the extended privacy mode. YouTube also uses cookies to collect information about visitors to its website. YouTube uses these, among other things, to collect video statistics, to prevent fraud and to improve user-friendliness. In the process, calling up a video usually also leads to a connection being established with the Google Ads network. When you start the video, this could trigger further data processing operations, especially if you are already logged into YouTube. We have no influence on this.

We use YouTube only after your consent. You can withdraw this at any time with effect for the future in the cookie banner.

For more information about privacy at YouTube, please see their privacy policy: https://www.youtube.com/t/privacy_at_youtube.

11.4 Hotjar

We use Hotjar, Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St. Julian's STJ 3141 Malta to better understand the needs of our users and to optimize this service and experience. The service provider processes the data on our behalf.

Hotjar is a technology service that helps us better understand our users' experiences (e.g., how much time they spend on which pages, which links they click, what users like and don't like, etc.) and allows us to develop and maintain our service with user feedback.

Hotjar uses cookies and other technologies to collect data about the behavior of our users and their devices. This includes a device's IP address (processed during your session and stored in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language in which our website is displayed. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf. More information about the cookies used can be found in the cookie banner.

The legal basis for this processing is your consent. You can withdraw this at any time with effect for the future in the cookie banner.

11.5 Meta Pixel

We use the so-called "Meta Pixel" of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter "Meta") on our website. More information about the joint responsibility of Meta and us can be found here: www.facebook.com.

Through the use of the pixel, interest-based advertisements can be displayed to the users of our website when they visit Facebook or Instagram. Through the meta pixel, the user's browser automatically establishes a direct connection with Meta's server. We have no influence on the scope and further use of the data collected by Meta through the use of this tool.

By integrating the Meta pixel, Meta receives the information that you have clicked on one of our ads or called up the corresponding web page of our website. If you are registered with a Meta service, the visit can be assigned to your account.

With the use of the meta pixel, we pursue the purpose of displaying advertisements placed by us on Facebook and Instagram only to those users who have also shown an interest in our Internet offering. With the help of the meta pixel, we therefore want to ensure that our ads correspond to the potential interest of the users and do not have a harassing effect. Furthermore, with the help of the meta pixel, we can track the effectiveness of the ads for statistical purposes by seeing whether users were redirected to our website after clicking on our ad.

You can find more about cookies in the context of this tool in the cookie banner.

The legal basis is your consent. You can withdraw this at any time with effect for the future in the cookie banner.

More information on data protection at Meta can be found at www.facebook.com.