Data privacy

GAUFF GmbH & Co. Engineering KG (hereinafter "we", "us" or "GAUFF Engineering") consider the protection of personal data to be a high priority. We use personal data exclusively in order to answer your questions, process an order or to send you information per e-mail on condition that you have agreed to this. Please note, however, that data communications on the Internet (such as e-mail communication) have security gaps and cannot be fully protected against unauthorised access.

Responsible body

The responsible body within the meaning of the German Data Privacy Law [Bundesdatenschutzgesetzes (BDSG)] is GAUFF GmbH & Co. Engineering KG, Passauer Str. 7, 90480 Nürnberg, Germany.

In the event that personal data is captured, we will always inform you about the data stored if requested. Should you request that your personal data sent to us be deleted or changed, please send an e-mail to: Datenschutz(at)gauff.net.

Information rights manager

Christian Volkmer
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg, Germany
Phone: +49 941 2986930
E-mail: Datenschutz(at)gauff.net

Application form

Which data are recorded?
GAUFF Engineering is only recording the information required for an application procedure at our house.

When you are applying for a position in our company, you are going to be asked for specific personalized data (name, address, e-mail). In addition, you are going to be asked position related questions, if applicable. For an application in our company it is furthermore essential to enclose your work history.

Please note, that your data is not going to be recorded anonymously, but that it is accessible to our human resources department and all the departments that are relevant to the position.

Application InformationWith your application you ensure that the information you are providing are truthful. Please note, that every false statement or omission can constitute a reason for refusal or later on for dismissal.

We are looking for the best candidates, irrespective of race, ethnic origin, sex, religion, ideology, disability, age or sexual orientation. We do not need any information that is not exploitable according to the General Law on equal treatment. Please refrain from transmitting any confidential internal information or even company secrets from your former or actual employer. We also ask you to refrain from providing information about: diseases, pregnancy, ethnic origin, political opinion, philosophical or religious beliefs, membership in labor union, physical or mental health, sex life, defamatory or scurrilous information, as well as information not related to the job profile.

Who is processing the data?
All data we collect is exclusively processed internally or from contractually affiliated service companies. Personalized data is only transmitted to agencies, which for example operate our server or render specific services, for a specific purpose within the scope of the job processing according to the data protection regulation. Those agencies are located in Germany and in countries of the EU and are, by contractual obligations and instructions relating to data protection, required to treat personal data in compliance with data protection requirements.

The data and files you submitted are then going to be processed and used only for the purpose of processing your application. If your application is accepted, the data and files you provided will be further processed and used for working arrangements leading to an employment from our contracting entity. If the application to a job offer is not successful but you consented to the storage of your data during the upload, we will store the transmitted data and files for six months in an application database, to be able to answer future questions concerning the application. Upon the expiry of six months, the data and files are then going to be deleted. There is always the possibility to withdraw the application. The withdrawal of the application will lead to the immediate deleting of your data and files from the applicants database - with the restrictions mentioned below - .
Within the scope of the application, you are always entitled to request that individual data or files you submitted to GAUFF Engineering should be deleted. However, we reserve the right to store a restricted amount of your data for a limited period of three months in order to be able to comply with legal regulations, especially the obligation to produce supporting documents referring to the General Law on equal treatment.

Who do we share your personal data with?
Any information you provide to us will be treated in strict confidence and only forwarded to people involved in the specific application procedure. Your personal data is only going to be forwarded to other contracting entities with your separate and specific consent.

Access right, processing and deleting of your curriculum vitae
Of course, you will have the option to have your data and files deleted at any time.
Please contact us for more Details by email at Datenschutz(at)gauff.net.
We ask for your understanding for the fact that changes or deleting of data during an ongoing application procedure or about three months after completion of an application procedure is not possible for legal reasons.

Incorporation of third-party services and contents
Third-party contents, such as videos from YouTube, maps from Google Maps, RSS feeds or graphic material from other websites, can be incorporated into this online offering. This is always conditional upon the users' IP address being disclosed to the providers of such contents (hereinafter "third-party providers") because without the IP address these providers would not be able to send the contents to the browser of the respective user. The IP address is therefore necessary for the presentation of such contents. We only use those contents where the respective provider uses the IP address exclusively to deliver contents.

Usage data captured automatically
Each time this website is visited, so-called usage data is logged in server log files as a customary operation on the web. This usage data is automatically transmitted by your web browser. The following information is concerned:

  • IP (Internet protocol) address of the computer from where this website is accessed
  • Internet address of the website from where this website was called (so-called origin or referrer URL)
  • Name of the service provider via which access to this website takes place
  • Name of the files and/or information retrieved
  • Date, time and duration of retrieval
  • Data volume transmitted
  • Operating system and information regarding the web browser of the computer accessing this website
  • http status code (such as "request successful" or "file requested not found")

For security reasons (for instance, in order to identify attempted attacks), we store the above-mentioned usage data for a maximum period of seven days and then delete it. Data to be retained as evidence for a longer period of time is exempt from deletion until the underlying event has been finally clarified. Log file data can in some cases be forwarded to investigation authorities.

Otherwise usage data is used for web analysis purposes as described in the "Google Analytics" section below.

Use of Matomo (formerly Piwik)
(1) This website uses the web analysis service Matomo to analyze and regularly improve its use. The collected statistics allow us to improve our offering and make it more interesting to you as a user. The legal basis for using Matomo is Art. 6 para. 1 p. 1 lit. f GDPR.

(2) Cookies are stored on your computer for this data evaluation. The collected data is stored by the data controller exclusively on his server in [Germany]. You may stop the data evaluation by deleting existing cookies and preventing the storage of further cookies. If you prevent the storage of cookies, please note that you may not be able to use this website to its full extent. You may prevent cookies from being stored by configuring your browser settings accordingly. You may prevent the use of Matomo by unchecking the following option and thus disabling the opt-out plug-in:

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

 You are not opted out. Uncheck this box to opt-out.

(3) This website uses Matomo with the extension "AnonymizeIP." This allows for IP addresses to be processed truncated, which means they cannot be associated with any individual person. The IP address transmitted by your browser using Matomo will not be merged with other data collected by us.

(4) The Matomo program is an open source project. Data protection information from the third-party provider is available at matomo.org/privacy-policy/.

Use of the XING plugin
This offering uses a social plugin ("plugin") of the social network xing.com which is operated by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany ("XING"). The plugin can be identified by the XING logo (stylised "X" in white and yellow on a white tile).

When a user opens a website of this offering containing such a plugin, the user's browser establishes a direct connection to the XING servers. XING will send the contents of the plugin directly to your browser which will link it to the website. GAUFF thus has no control over the volume of data which XING captures through this plugin, and thus informs users according to GAUFF's state of knowledge.

By integrating the plugins, XING receives the information that a user has opened the corresponding page of the offering. If the user is logged in to XING, XING can assign the visit to the user's XING account. When users interact with plugins, your browser will directly send the corresponding information to XING where this information is then stored. According to XING, no IP address is stored.

Users can find out about the purpose and scope of data capture as well as the further processing and use of data by XING and the related rights and setting options in order to protect user privacy in XING's privacy policy at: https://www.xing.com/.

Use of the LinkedIn plugin
This offering uses a social plugin ("plugin") of the social network linkedin.com which is operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn"). The plugin can be identified by the LinkedIn logo (stylised "in" in white on a blue tile).

When a user opens a website of this offering containing such a plugin, the user's browser establishes a direct connection to the LinkedIn servers. LinkedIn will send the contents of the plugin directly to your browser which will link it to the website. GAUFF thus has no control over the volume of data which LinkedIn captures through this plugin, and thus informs users according to GAUFF's state of knowledge.

By integrating the plugins, LinkedIn receives the information that a user has opened the corresponding page of the offering. If the user is logged in to LinkedIn, LinkedIn can assign the visit to the user's LinkedIn account. When users interact with plugins, your browser will directly send the corresponding information to LinkedIn where this information is then stored. However, even if a user is not a LinkedIn member, it is nevertheless possible that LinkedIn will find out and store the user's IP address.

Users can find out about the purpose and scope of data capture as well as the further processing and use of data by LinkedIn and the related rights and setting options in order to protect user privacy in LinkedIn's privacy policy at: https://www.linkedin.com/.

Use of AddThis
We use the addthis.com bookmarking service on our website. AddThis is a service from Clearspring Technologies Inc., 8000 Westpark Drive, Suite 625, McLean, VA 2210, USA. Each time you visit a part of our website that features such an "AddThis" component, this component ensures that your browser downloads the right presentation of the addthis.com component. This means that addthis.com is informed about the specific pages of our website that you are currently visiting.  addthis.com also receives details of your IP address, the type of browser, the browser language, die website previously visited, the date as well as the time of your visit. This data is then used to create an anonymised user profile. The data allows AddThis and its partner companies to show personalised, interest-based advertising to visitors to our website. Advertising is displayed on the basis of the browser cookie set by addthis.com which analyses the visitor behaviour. You can permanently object to the addthis.com cookie from being set by downloading and installing the following opt-out cookie: www.addthis.com/.

You should note, however, that this may result in you not being able to fully use all of the functions of our website.  The following Internet address provides information about the AddThis protection policy and about how AddThis collects and uses data: http://www.addthis.com/.

Affected Rights
You have a right to information, rectification, erasure or restriction of the processing of your stored data, a right of objection to the processing as well as a right to data portability and a right to complain in accordance with the requirements of data protection law.

Right to information
You can request information from us concerning whether and to what extent we process your data.

Right to rectification
If we process your data that is incomplete or incorrect, you can request that we rectify or complete such data at any time.

Right to erasure
You can request that we erase your data if we process it unlawfully or if the processing interferes disproportionately with your legitimate protection interests. Please note that there may be reasons that prevent immediate erasure, e.g. in the case of legally regulated retention obligations.
Irrespective of the exercising of your right to erasure, we will erase your data immediately and completely, unless there is a contractual or legal obligation to retain it.

Right to restriction of the processing
You may request that we restrict the processing of your data if
- you dispute the accuracy of the data, namely for a period of time that enables us to verify the accuracy of the data.
- the processing of the data is unlawful, but you refuse to have it erased and instead request a restriction on the use of the data,
- we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or
- you have lodged an objection to the processing of the data.

Right to data portability
You may request us to provide you with the data you have made available to us in a structured, current and machine-readable format and to allow you to forward this data to another responsible party without our interference, provided that
- we process this data on the basis of an agreement which you have submitted and which is revocable or in order to fulfil a contract between us, and
- this processing is carried out using automated methods.
If it is technically feasible, you can ask us to transfer your data directly to another responsible party.

Right of objection
If we process your data on the basis of a legitimate interest, you can object to this data processing at any time; this would also apply to any profiling which is based on these provisions. We will then no longer process your data unless we can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. You can object to the processing of your data for the purposes of direct advertising at any time without stating any reasons.

Right of appeal
If you are of the opinion that we are infringing German or European data protection law when processing your data, please contact us so that we can clarify any questions. Of course you also have the right to contact the supervisory authority which is responsible for you, i.e. the respective State Office for Data Protection Supervision.
If you wish to assert any of the above rights against us, please contact our Data Protection Officer. In cases of doubt we may request additional information to confirm your identity.

Security
We have taken technical and administrative security precautions to protect your personal data against loss, destruction, manipulation and unauthorised access. All of our employees and service providers working for us are obliged to abide by the applicable data protection laws. 

Whenever we collect and process personal data, such data is encrypted before being transmitted. This means that misuse of your data by third parties is not possible. We are permanently working on enhancing our security precautions and updating our data privacy policies. Please ensure that you have the latest version.

Amendments to our data privacy policies
We reserve the right to amend our data privacy policies should this be needed in response to new technologies. Please ensure that you have the latest version. If this data privacy policy is to be fundamentally amended, you will be notified of such amendments on our website.