Privacy policy

Thank you for visiting our website. The protection of your personal data is important to us and we want you to feel secure when visiting our website. We protect your privacy and your personal data. We process your personal data in accordance with the content of this privacy policy and in compliance with the applicable data protection provisions of the General Data Protection Regulation (GDPR) and other relevant data protection regulations.

Table of contents

1. name and contact details of the controller
2. contact to the data protection officer
3. what is personal data?
4. purposes of data processing
5. legal basis for data processing
6. right to object
7. use of our website for information purposes
8. job offers and use of our website for other services
9. Hosting
10. contact with us
11. Newsletter
12. Security
13. cookies and comparable technologies
14. web analysis
15. social media
16. other functions and content
17. links to other websites
18. recipients and data transmission
19. data transfer to third countries
20. deletion of your data
21. your rights
22. changes to our privacy policy

1. Name and contact details of the controller

SteelCo.Tech GmbH, Bahnhofstraße 25, 71723 Großbottwar, as the operator of the website https://steelco.tech/ is the controller within the meaning of the GDPR.

2. Kontakt zum Datenschutzbeauftragten

You can contact our data protection officer at any time with any data protection concerns at datenschutz@steelco.tech.

3. What is personal data?

Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

4. Purposes of data processing

The scope and type of collection, processing and use of your data differs depending on whether you visit our website merely to retrieve generally available information or to make use of additional services. In principle, we process your personal data as part of our business activities for pre-contractual or contractual purposes. In addition, the exercise of our legitimate interest, your consent or compliance with legal requirements may also be the purpose of data processing by us. We will inform you about the specific purposes of data processing in the following sections.

5. Legal basis for data processing

We process your personal data in accordance with the following legal bases

• for the fulfillment of pre-contractual or contractual obligations (Art. 6 para. 1 b) GDPR)
• on the basis of your consent (Art. 6 para. 1 a) GDPR)
• in the context of a balancing of interests (Art. 6 para. 1 f) GDPR)
• on the basis of legal requirements (Art. 6 para. 1 c) GDPR)

We will inform you about the specific legal basis for data processing in our respective processing operations.

6. Right of objection

If we process your personal data as part of a balancing of interests based on our overriding legitimate interest (legal basis for data processing is Art. 6 (1) f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to continue processing (with the exception of direct advertising; in this case, we will comply with your objection immediately) if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims. Further rights of data subjects remain unaffected by this.

7. Use of our website for information purposes

For purely informational use of our website, it is generally not necessary for you to provide personal data. Rather, in this case we only collect the data that your internet browser automatically transmits to us when you visit our website, such as

• IP address in anonymized form
• Date and time of access
• other similar data and information used for security purposes in the event of attacks on our information technology systems.

This is usually done through the use of log files. The purpose of the processing is to ensure the functionality and compatibility of our website for technically unproblematic use, including troubleshooting and protection against technical attacks and misuse. The legal basis for this processing is our legitimate interest pursuant to Art. 6 para. 1 f) GDPR. Our legitimate interest lies in the proper operation of our website. The log file data is deleted when it is no longer required for the purpose of processing.

8. Job offers and use of our website for further services

Job offers

On our website, you have the opportunity to send us an unsolicited application or to apply for a specific vacancy online using a form. The purpose of processing your personal data is to carry out an application process. Personal data that you enter in our form is securely encrypted according to the state of the art during transmission. The legal basis for the processing of your personal data is Art. 6 para. 1 b) GDPR in the context of a pre-contractual or contractual relationship.

We will delete your data in accordance with the relevant statutory provisions after completion of the respective recruitment process. The general statutory retention and deletion periods apply. If you have consented to your data being included in our applicant pool as part of an application, we will store your data for one year from the date of sending the application. The legal basis for the processing of your data in the applicant pool is your consent in accordance with Art. 6 Para. 1 a) GDPR.

We use the “onlyfy one” service to process your application. The service provider is New Work SE, Am Strandkai 1, 20457 Hamburg. The legal basis is Art. 6 para. 1 f) GDPR. Our legitimate interest lies in the organization of a smooth application process. We are jointly responsible for data processing with the service provider and have therefore concluded a contract in accordance with Art. 26 GDPR. You can find more information about data processing by New Work SE at https://onlyfy.com/de/datenschutz/

Applicants can also send us their applications by email. Please note, however, that e-mails are generally not sent encrypted on the Internet. As a rule, e-mails are encrypted in transit, but not on the servers from which they are sent and received. We can therefore accept no responsibility for the transmission path of the application between the sender and receipt on our server.

Further services

If you make use of further services of our company via our website, it may be necessary for you to provide personal data for this purpose. Which personal data is required for the provision of services can be seen from the respective input mask or application. You can provide further information voluntarily. You can recognize which information is required and which is voluntary by the fact that the mandatory information is marked with an asterisk (*) or with the note “mandatory field”. Your data is processed exclusively for the purpose of providing the service you have requested. The legal basis for the processing of your personal data and the information about when your personal data will be deleted can be found in the description of the specific services.

9. Hosting

We use an external service provider to host our website. The personal data collected on this website is stored on the hoster's servers. The host is used in the interest of secure, fast and efficient provision of our website (Art. 6 (I) (f) GDPR). Our hoster will only process your data to the extent necessary to fulfill its performance obligations under the contractual obligations and instructions from us. We use IONOS SE, Elgendorfer Str. 57, 56410 Montabaur as our hoster. We have concluded an order processing contract with the hoster in accordance with Art. 28 GDPR.

10. Contact with us

Contact form

You can contact us via a contact form on our website. We will only process the personal data you provide via this form for the purpose of processing and responding to your request. We operate within a group of companies that has set itself the goal of bringing together industry-leading metal processing companies and thus creating synergies and production capacities in order to manufacture high-quality metal parts cost-effectively. We fulfill these tasks in the following companies:

• Großbottwar (Germany, Baden-Württemberg)
• Bamberg (Germany, Bavaria)
• Wilnsdorf (Germany, North Rhine-Westphalia)
• Remscheid (Germany, North Rhine-Westphalia)
• Gevelsberg (Germany, North Rhine-Westphalia)
• Halver (Germany, North Rhine-Westphalia)
• Veszprém (Hungary)

Some processing therefore only takes place in certain companies within our group of companies Requests that you send to us will therefore be forwarded to one of these companies depending on the product or services requested. The legal basis for this is Art. 6 para. 1 f) GDPR. Our legitimate interest lies in the efficient processing of your request and the fastest possible feedback on your request from the relevant experts in our group of companies.

Your data will only be passed on to other third parties if this is necessary for the purpose of processing your contact. Your personal data will be deleted when it is no longer required to fulfill the purpose for which you contacted us. We would like to point out that your messages may have to be stored within the framework of statutory retention obligations. In this case, the legal basis is Art. 6 para. 1 c) GDPR.

Contact by mail

On our website, we offer you the option of contacting us by e-mail. Please note that unencrypted communication by e-mail is insecure. It cannot be ruled out that data transmitted in this way may be read, copied, changed or deleted by unauthorized persons. We will only process the personal data you provide via this form for the purpose of processing and responding to your request. It will only be passed on to third parties if this is necessary for the purpose of processing your contact. The legal basis for this is Art. 6 para. 1 b) GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. The legal basis in all other cases is our legitimate interest in the effective processing of the inquiries addressed to us in accordance with Art. 6 para. 1 f) GDPR. Your personal data will be deleted if it is no longer required to fulfill the purpose for which you contacted us. We would like to point out that your messages may have to be stored within the framework of statutory retention obligations. In this case, the legal basis is Art. 6 para. 1 c) GDPR.

11. Newsletter

Campaign.Plus

You can subscribe to our newsletter via our website. We use the Campaign.Plus service for this purpose. The provider is Campaign.Plus GmbH, Schulgasse 5, 84359 Simbach am Inn, Germany. We have concluded a contract with the provider for commissioned data processing and thus implement the data protection regulations. You can find more details in the CampaignPlus privacy policy here: https://www.campaign.plus/datenschutzinformationen/

When you visit our registration page, a direct connection to the service provider's servers is established and a cookie is set. Your IP address will be passed on to the service provider. The legal basis for the processing is Art. 6 para. 1 f) GDPR. Our legitimate interest lies in the professional and efficient organization of our newsletter.

If you subscribe to our newsletter, your e-mail address and your consent will be collected. This data is only collected for the purpose of sending you the newsletter and documenting our authorization to do so. The legal basis for the processing is Art. 6 para. 1 a) GDPR. You can revoke this consent at any time with effect for the future by unsubscribing from the newsletter; we provide a corresponding link for this in every newsletter message. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

The following data is also collected to log the registration process: Your IP address and the date and time of registration. The logging is carried out on the basis of our legitimate interests in accordance with Art. 6 para. 1 f) GDPR and serves as proof of consent to receive the newsletter.

Our newsletters also enable us to analyze your behavior. Among other things, we can analyze whether and when you have read our newsletter, which links you have clicked on and whether certain previously defined actions have been carried out after opening/clicking on the newsletter (conversion rate). For example, we can recognize whether you have made a purchase after clicking on the newsletter. Campaign.Plus also enables us to divide newsletter recipients into different categories (“clustering”). The newsletter recipients can be subdivided according to age, gender or place of residence, for example. In this way, the newsletters can be better adapted to the respective target groups.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter; after you unsubscribe, it will be deleted both from our servers and from the CampaignPlus servers (server location is Germany). After you unsubscribe, your e-mail address will be stored by us or the newsletter service in a blacklist to prevent future mailings to you. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest. Data stored by us for other purposes (e.g. e-mail address) remain unaffected by this.

12. Security

We have taken technical and organizational measures to protect our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorized persons. In particular, the personal data you provide in the contact form is transmitted in encrypted form. We use the TLS 1.2 (Transport Layer Security) coding system for this purpose.

13. Cookies and similar technologies

We only use cookies or comparable technologies where they are absolutely necessary to enable the functionality of our website (see Section 25 TDDDG). The legal basis for this is Art. 6 para. 1 f) GDPR.

Cookies are small text files that are stored on your computer when you visit our website. Comparable technologies are so-called web storage technologies (also called “local data” and “local storage”); data is stored locally in your browser's memory (“cache”). The data collected via web storage is stored until you close the browser window (session storage) or delete the cache via your internet browser (local storage).

We only use the technically necessary LOGSID cookie. This is deleted after 7 days.

14. Web analysis

1&1 IONOS WebAnalytics

We use the 1&1 IONOS WebAnalytics service from IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, on our website. With the help of this service, we can examine user behavior on our website in order to draw conclusions about the functionality of our website and thus optimize it. The following data is collected: referrer (previously visited website), requested website or file, browser type and version, operating system used, device type used, time of access and the IP address in anonymized form (only used to determine the location of access). Under no circumstances is the IP address associated with other data relating to the user. The information is only passed on to the service provider with whom we have concluded a contract for commissioned data processing.

The legal basis for data processing is Art. 6 para. 1 f) GDPR. Our legitimate interest lies in the needs-based design of our website and the evaluation of the use of the website. You can find more information about data processing by IONOS here: https://www.ionos.de/terms-gtc/datenschutzerklaerung/

Matomo

We use the open source software Matomo to analyze and statistically evaluate the use of the website. We have installed Matomo locally on our server. The information is not passed on to third parties. Only information that your browser automatically sends when you visit our website is processed; we do not use cookies or similar technologies. IP addresses are anonymized and usage data is not merged. Information obtained to recognize users is not used for any other purposes. The legal basis for the use of Matomo is Art. 6 para. 1 f) GDPR. The legitimate interest lies in the needs-based design of our website and the evaluation of the use of the website.

15. Social Media

We maintain publicly accessible profiles on social networks. The individual social networks we use are listed below.

Social networks such as Facebook etc. can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations.

In detail: If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are logged in or were logged in.
Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

Legal basis
Our social media presence is intended to ensure an informative presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 f) GDPR. In necessary cases, the legal basis is also Art. 6 para. 1 a) GDPR. The analysis processes initiated by the social networks themselves may be based on other legal bases that must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 a) GDPR).

Responsible party and assertion of rights
If you visit one of our social media sites, we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal.

Please note that, despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options depend largely on the company policy of the respective provider.

Storage duration
The data we collect directly via the social media presence is deleted from our systems as soon as the purpose for storing it no longer applies, you ask us to delete it or you revoke your consent to storage. Stored cookies remain on your device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social Networks in Detail

LinkedIn

We use LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. We link to this profile on our website. If you click on a corresponding link, this provider will store and use your data (IP address and other personal data) to provide the service and for its own business purposes. It cannot be ruled out that your personal data will also be transferred to LinkedIn Corporation, based in the USA. LinkedIn has certified itself as part of the EU-US Data Privacy Framework to comply with the data protection level applicable in the EU. The certificate can be viewed at https://www.dataprivacyframework.gov/s/. Further information on data protection by LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy

XING

We have a profile on XING. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Further information on data protection at XING can be found at: https://privacy.xing.com/de/datenschutzerklaerung

16. Additional functions and content

We do not use any additional functions and content (e.g. map or font services) on our website.

17 Links to other websites

If we provide links to websites of other organisations, this privacy statement does not apply to the processing of personal data by that organisation. We therefore recommend that you read the privacy notices on the other websites you visit.

18. Recipient and data transmission

We have bundled certain data processing operations in our company. These can be carried out centrally by our individual business areas, e.g. to process inquiries. External contractors and service providers (e.g. logistics companies or IT service providers) can also be used to ensure that we carry out our tasks and to fulfil the contract. In addition, data can be sent to recipients to whom we are obliged or authorized to pass it on due to contractual or legal obligations or due to your consent.

19. Data transfer to third countries

Data transfer to third countries

Data will only be transferred to third countries (countries outside the EU and the European Economic Area EEA) if this is necessary for the execution of a contract/order/business relationship, including the initiation of the transaction, or if it is permitted by our legitimate interest or based on your consent, and only in compliance with the data protection requirements stipulated for this purpose.

Note on data transfer to the USA

As part of the so-called "Data Privacy Framework" (DPF), the EU Commission has also recognized the level of data protection as secure for certain companies from the USA as part of the adequacy decision of July 10, 2023. The list of certified companies and further information on the DPF can be found on the website of the US Department of Commerce at https://www.dataprivacyframework.gov/ (in English). In this data protection declaration, we inform you for the respective service which of the service providers we use are certified under the DPF.

20. Deletion of your data

We only process your personal data for as long as is necessary to fulfil the respective purpose or until a legal basis for the processing (e.g. revocation of consent to data processing) no longer exists. In doing so, we observe the existing statutory retention and storage periods.

21. Your rights

• You have the right:
• to receive information about the personal data we have stored about you free of charge (right to information)
• to request confirmation as to whether we process personal data concerning you (right to confirmation)
• to request that we delete the personal data concerning you immediately if their processing is no longer necessary and the other requirements of the GDPR for deletion are met (right to deletion)
• to request the immediate correction and completion of incorrect personal data concerning you (right to rectification)
• to request the restriction of the processing of your personal data (right to restriction of processing)
• to receive the personal data concerning you in a structured, common and machine-readable format (right to data portability)
• to object to the processing of your personal data (right to object)
• You have the right not to be subjected to a decision based exclusively on automated processing - including profiling - that has legal consequences for you or significantly affects you in a similar way (right to a decision in individual cases).
• to withdraw your consent to the processing of your personal data at any time with effect for the future.
• to complain to the supervisory authority responsible for data protection if you believe that the processing of personal data concerning you violates the GDPR (right to complain).

For further information on your rights, please contact our data protection officer.

22. Change to our privacy policy

In order to ensure that our data protection declaration always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection declaration has to be adjusted due to new or revised services, for example new services.