We are delighted that you have chosen to visit our website at KRONEN GmbH. Data protection and data security are very important to us when using our website. We therefore treat your personal data with absolute confidentiality in accordance with the statutory data protection regulations and on the basis of this Privacy Policy. The legal basis can be found in the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) in particular. In the following Privacy Policy, we would like to inform you about which of your personal data we collect when you use our website and for what purpose these data are used.
Section 1 – Scope of application
This Privacy Policy refers to the KRONEN GmbH website, which can be accessed via the domain www.kronen.eu (hereinafter referred to as “our website”).
Section 2 – Data controller
The data controller responsible for data processing is:
KRONEN GmbH
Römerstrasse 2a
77694 Kehl-Goldscheuer, Germany
Phone: +49 7854 96460
E-mail: info@kronen.eu
Section 3 – Data protection officer
We have appointed a data protection officer for our company. You can contact our data protection officer at:
KRONEN GmbH
Data Protection Officer
Römerstrasse 2a
77694 Kehl-Goldscheuer, Germany
Phone: +49 7854 96460
E-mail: dsb@kronen.eu
Section 4 – Personal data
When you use this website, various personal data are processed depending on the type and extent of use. The term “personal data” refers to information that relates to an identified or identifiable natural person (hereinafter referred to as the “data subject”). An identifiable natural person is someone who can be identified directly or indirectly (e.g. by means of an association with an online identifier). This includes information such as the person’s name, address, telephone number and date of birth.
Section 5 – Purposes and legal bases of data processing
1. Accessing and visiting our website – server log files
Nature and scope of data processing
For the purpose of facilitating the technical provision of the website, it is necessary that we process certain information that is automatically transmitted by your browser so that our website can be displayed in your browser and you can use the website. This information is automatically collected each time our website is accessed and automatically stored in so-called server log files. The information collected is as follows:
• Browser type and version
• Operating system used
• Website from which our website is accessed (referrer URL),
• Host name of the accessing computer
• Date and time of access
• IP address of the requesting computer
The storage of the aforementioned access data is necessary for technical reasons in order to provide a functional website and to ensure system security. This also applies to the storage of your IP address, which is necessary and which could, under further conditions, at least theoretically enable an assignment to your identity. In addition to the above-mentioned purposes, we use server log files solely for the purpose of designing and optimizing our website in line with demand, purely for statistical purposes and without any reference to your identity as a person. These data are not merged with other data sources or evaluated for marketing purposes.
Storage duration
The access data collected when you use our website will only be stored for the period of time for which these data are required to fulfill the above-mentioned purposes. Your IP address will be stored on our web server for a maximum of seven days for IT security purposes.
Legal basis
Insofar as you visit our website to obtain information about our range of products and services, or even to use them, the basis for the temporary storage and processing of access data is Art. 6 (1) sentence 1 lit. b GDPR, which permits the processing of data for the performance of a contract or for the implementation of pre-contractual measures. In addition, Art. 6 (1) sentence 1 lit. f GDPR serves as the legal basis for the temporary storage of technical access data. Our legitimate interest here is to be able to provide you with a technically flawless and user-friendly website and to ensure the security of our systems.
2. Contact and inquiry forms
Nature and scope of data processing
If you use a contact or inquiry form to send us an inquiry, we will store and accordingly further process your message/comment, including the contact details provided, for the purpose of processing and responding to your inquiry and in case any subsequent questions arise. We do not pass on this data to third parties unless this is necessary in the context of processing and answering your contact request or you have given us your corresponding consent.
Storage duration
The data you enter in the contact or inquiry form will remain with us until the purpose for storing/processing the data no longer applies (e.g. after the processing of your request has been completed). Mandatory legal provisions – retention periods in particular – remain unaffected.
Legal basis
The legal basis for this processing is, on the one hand, your explicit consent given when providing your contact details on the contact or inquiry form, pursuant to Art. 6 (1) lit. a GDPR. This consent can be revoked at any time. If you contact us within the framework of an existing contractual relationship or contact us in advance for information about our range of services or our other services, the data and information you provide will be processed for the purpose of processing and responding to your contact request in accordance with Art. 6 ( 1) sentence 1 lit. b GDPR. A further legal basis is the purpose of protecting our legitimate interests pursuant to Art. 6 ( 1) sentence 1 lit. f GDPR for proper responding to customer/contact inquiries.
3. Contact and inquiry form for supplier applications
Nature and scope of data processing
If you send us an application via the contact and inquiry form for a “supplier application”, your application and the contact details and messages you provide in your application will be processed for the purpose of processing and responding to your application and in case any subsequent questions arise. For this data processing, we use the application “Jotform” (www.jotform.com), provided by the company Jotform Inc., 4 Embarcadero Center, Suite 780, San Francisco CA 94111, USA as the processor, on our website to create and use online forms. The underlying IT/server infrastructure of the application on which your data are stored is located in the data centers of Amazon Web Services (AWS) in Frankfurt am Main (Germany) for European customers in accordance with the solution for so-called “EU Safe Forms” (for more information, please refer to the explanation at https://www.jotform.com/blog/178-EU-Safe-Forms-Our-Solution-to-the-EU-Safe-Harbor-Invalidation). We have concluded a corresponding data processing contract with Jotform as the data recipient. For more detailed information on Jotform’s data protection measures, please visit www.jotform.com/privacy. We do not share the data that you provide with third parties unless this is necessary for processing and responding to your contact request or you have given us your corresponding consent.
Storage duration
The data that you enter in the inquiry form will remain at our company until the purpose for the data storage/processing no longer applies (e.g. after your inquiry has been fully processed). Your data saved on the servers of the processor Jotform will be erased after six months. Mandatory legal provisions – especially retention periods – will remain unaffected.
Legal basis
The legal basis for this processing is, on the one hand, your explicit consent given when providing your contact details on the contact or inquiry form, pursuant to Article 6 (1) lit. a GDPR. This consent can be revoked at any time. If you contact us within the framework of an existing contractual relationship or contact us prior to the conclusion of a contract to apply for a role as a supplier, the data and information you provide will be processed for the purpose of processing and responding to your contact request pursuant to Article 6 (1) sentence 1 lit. b GDPR. A further legal basis is the purpose of protecting our legitimate interests pursuant to Article 6 (1) sentence 1 lit. f GDPR for properly responding to customer/contact inquiries.
4. Application Procedure: Use of HRworks
Nature and scope of data processing
When you send us an application, we use the software HRworks from the company HRworks GmbH, Waldkircher Straße 28, 79106 Freiburg im Breisgau, Germany, (hereinafter referred to as “HRworks”) to process and manage your personal and applicant data within the scope of the application procedure. You can find more information on data protection at HRworks (in German) in HRworks’ Privacy Policy at www.hrworks.de/unternehmen/datenschutzerklaerung/.
We have concluded a data processing contract pursuant to Art. 28 GDPR with HRworks. HRworks solely processes the data on our behalf and in accordance with our instructions. The data are encrypted and stored on servers of the subcontractor contracted by HRworks, the company Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter referred to as “AWS”), in data centers within the EU (in the AWS region in Dublin, Ireland). HRworks has also concluded a data processing contract pursuant to Art. 28 GDPR with AWS.
Storage duration
Your personal data collected within the scope of the application procedure will be stored for the duration of the selection procedure and for up to six additional months. Once this period has expired, your data will be erased unless we are required to store them due to legal storage obligations or you have expressly consented to longer storage of your data, especially in the so-called talent pool, for example by granting your corresponding consent on the application form.
Legal basis
Your personal data are processed for the purpose of carrying out the application procedures and deciding on the grounds for an employment relationship pursuant to Art. 6 (1) lit. b GDPR and Article 26 BDSG.
5. Newsletter
Nature and scope of data processing
When you register to receive our newsletter, we use your e-mail address for advertising purposes, especially to inform you about products from our range. For statistical purposes, we can evaluate which links are clicked in the newsletter. When doing so, we are unable to identify which specific person has clicked the links.
Storage duration
Your personal data, or at least your e-mail address, are stored by our newsletter provider Cleverreach, which we have contracted as a data processor and which has data processing locations in Germany and the EU, for the duration of your newsletter subscription. When you cancel your subscription, your personal data will be removed from the mailing system after one week. If you began the double-opt-in procedure when subscribing to our newsletter but did not complete it, your e-mail address will also be erased after one week.
Legal basis
The legal basis for this processing is your explicit consent given when registering for the newsletter, pursuant to Art. 6 (1) lit. a GDPR. This consent can be revoked at any time; you will find a corresponding link in each newsletter. You can also contact us using the contact details above.
6. Registration for events and simultaneously updating your contact details
Type and scope of data processing
When you register for one of our events, we process the personal data that you provide for the purpose of preparing, organizing and running the event, especially to enable you to participate in the event, to send you confirmation of participation, to produce a name badge, to create a list of participants and/or to pass on the data to third parties (e.g. to a hotel or another service provider contracted to organize and run an event).
At the same time, we also process the personal data that you provide during the registration process to update your personal data that we have saved for the purpose of general contact if we have saved data for this purpose and the new data provided deviate from these stored data.
Guests accompanying participants are registered by the main guest. When providing the personal data of an accompanying guest, the main guest guarantees us that he/she is authorized to register the accompanying guest for the event. The main guest will also provide the accompanying guest with access to this Privacy Policy.
Duration of storage
The data required for the organization of the event are usually erased one year after the implementation and completion of the event. This storage period begins at the end of the year in which the event took place.
Legal basis
The legal basis for the data processing is your consent pursuant to Article 6 paragraph 1 lit. a GDPR. If you have given us your consent, you can withdraw this consent at any time with effect for the future.
7. Photography and filming at events
Type and scope of data processing
Some events may be accompanied by media recordings in the form of photography and/or filming. These recordings are used in connection with reports on the event, normally on our website and in our newsletter, on our social media channels and in our printed advertising material. Please note that recordings that are published on our website or on our social media channels in particular may be transferred to countries outside of the European Union. We do not know who receives the recordings and whether they are further processed in such cases. Recordings may also be passed on to regional press outlets for reporting purposes. If you do not consent to this, please inform us before the event or inform the photographer.
Legal basis
The legal basis for the processing of photographs and film recordings is Article 6 paragraph 1 lit. f GDPR (processing for the purposes of legitimate interests based on our interest in documenting the event in photographic images for the purpose of marketing and public relations and using these for information and representation purposes). You can object to the data processing.