The combination of casting, forging, machining and assembly is the key to success

Data protection

 

The use of our website www.art-form.de is generally possible without providing personal
data. As far as on our sides personal data (for example name, address or email addresses) are
raised, this takes place, as far as possible, always on voluntary basis. This data will not be
passed on to third parties without your express consent.
We would like to point out that data transmission on the Internet (e.g. communication by e-
mail and WhatsApp) can be subject to security gaps. A complete protection of the data against
access by third parties is not possible.
The use of contact data published within the scope of the imprint obligation by third parties
for the purpose of sending unsolicited advertising and information material is hereby
expressly prohibited. The operators of this website expressly reserve the right to take legal
action against unsolicited mailing or e-mailing of spam and other similar advertising
materials.

Definitions
The privacy policy of a&f Großserien GmbH is based on the terms used by the European
Union in the adoption of the General Data Protection Regulation (GDPR). Detailed
definitions can be found in Art. 4 GDPR. Essentially, these are the following terms, described
here in simplified form:

Personel data:
means any information relating to an identified or identifiable natural person (‘data subject’);
an identifiable natural person is one who can be identified, directly or indirectly (e.g. name,
address, e-mail, telephone number, IP address).

Person affected:
That is you as a natural person, if we have identified you.

Processing:
means any operation or set of operations which is performed on personal data or on sets of
personal data, whether or not by automated means, such as collection, recording, organisation,
structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by
transmission, dissemination or otherwise making available, alignment or combination,
restriction, erasure or destruction;

Restriction of processing:
means the marking of stored personal data with the aim of limiting their processing in the
future;

Controller:
means the natural or legal person, public authority, agency or other body which, alone or
jointly with others, determines the purposes and means of the processing of personal data;
where the purposes and means of such processing are determined by Union or Member State
law, the controller or the specific criteria for its nomination may be provided for by Union or
Member State law;

Processor:
means a natural or legal person, public authority, agency or other body which processes
personal data on behalf of the controller;

Consent:
of the data subject means any freely given, specific, informed and unambiguous indication of
the data subject’s wishes by which he or she, by a statement or by a clear affirmative action,
signifies agreement to the processing of personal data relating to him or her;

Processor:
Responsible in the sense of the GDPR and other regulations with data protection character, for
this web page and the central services is the one:
a&f Großserien GmbH
Friedrich-Bergius-Ring 15
97076 Würzburg
Tel.: +49 931 – 329 305 0
Geschäftsführer: Stefan Stepputtis

Data protection officer:
An external data protection officer has been appointed for a&f Großserien GmbH. He is
available to answer your questions regarding data processing at any time.
EIKONA Systems GmbH
Hr. Holeschak
Am Alten Bahnhof 8
97332 Volkach
Tel.: +49 9381 – 71 77 8 59
Mail: afgro@datenschutz@eikona.de

Your rights as a data subject
In accordance with Chapter 3 of the GDPR, you as the party concerned have the rights listed
below. In order to fulfil our obligations in connection with your rights in accordance with the
law, please address the relevant enquiries to our data protection officer.

Art. 15 Right of access by the data subject
You have an unlimited right to demand information about the personal data processed by you.
This information must be provided to you free of charge.

Art. 16 Right to rectification
If we should process wrong data from you, you can have these corrected at any time with your
contact person.

Art. 17 Right to erasure
You have the right to demand the deletion of your personal data at any time. We may be
required by law to retain your data for a certain period of time (e.g. 6 years for business mail
or 10 years for tax-related documents). In such a case, we will block your record until the
retention period expires and then delete the record accordingly. Please address your request
for deletion to the data protection officer, who will exercise your rights in our company on
your behalf.

Art. 18 right to restriction of processing
If you dispute the accuracy of our personal data, or if you refuse the deletion of your data and
instead demand the restriction (e.g. in the case of advertising letters), you can demand the
restriction of processing from us. We will then set your data to “blocked”.

Art. 19 Notification obligation regarding rectification or erasure of personal data or restriction
of processing.
We are obliged to inform all recipients of your data of any correction, deletion or restriction
commissioned by you, insofar as this is possible and can be implemented with a reasonable
effort. We will inform you about the recipients of your data if you request this.

Art. 20 Right to data portability
You have the right at any time to ask our company to transfer your data to another responsible
person. This applies to all master data that we keep about you. If this is technically possible,
we will make the data record available in a common machine-readable format (e.g. .csv).

Art. 21 Right to object
If data processing is based on Art. 6 Para. I lit. f (so-called legitimate interest), you may object
to the processing in this context.

Art. 77 Right to lodge a compliant with a supervisory authority
You have the right at any time to complain to the data protection supervisory authority
responsible for our company if you are of the opinion that we are in any way violating the
provisions of the GDPR. The following authority is responsible for a&f Großserien GmbH:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach

You can access the website of the data protection supervisory authority via the following link:
https://www.lda.bayern.de/de/index.html

Processings
In this section we will describe the data processing operations that are related to our Internet
offering or that apply to a general business relationship between you and our company.
The following legal bases serve us for the processing of your data.
Art. 6 I lit. a GDPR serves our company as a legal basis for processing operations in which
we obtain consent for a specific processing purpose.

If the processing of your data is necessary for the fulfilment of a contract to which you are a
party, as is the case, for example, with processing operations which are necessary for the
delivery of goods or the provision of other services or consideration, the processing is based
on Art. 6 I lit. b GDPR. The same applies to such processing operations that are necessary for
the implementation of pre-contractual measures, such as in cases of inquiries regarding our
products or services.

If our company is subject to a legal obligation requiring the processing of personal data, such
as for the fulfilment of tax obligations, the processing is based on Art. 6 I lit. c GDPR.

In rare cases, the processing of personal data may become necessary in order to protect the
vital interests of the data subject or another natural person. This would be the case, for
example, if a visitor to our business were injured and his name, age, health insurance data or
other vital information would have to be passed on to a doctor, hospital or other third party.
Then the processing would be based on Art. 6 I lit. d GDPR.

Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing
operations that are not covered by any of the aforementioned legal bases are based on this
legal basis if the processing is necessary to safeguard a legitimate interest of our company,
provided that your interests, fundamental rights and fundamental freedoms do not prevail.

Websites
We operate this website and collect various data in this context.

Cookies
Some of the Internet pages use so-called cookies. Cookies do not damage your computer and
do not contain viruses. Cookies are used to make our website more user-friendly, effective
and secure. Cookies are small text files that are stored on your computer by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted at
the end of your visit. Other cookies remain stored on your end device until you delete them.
These cookies enable us to recognize your browser during your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow
cookies in individual cases, accept cookies for certain cases or generally exclude them and
activate the automatic deletion of cookies when closing the browser. If cookies are
deactivated, the functionality of our website may be restricted.

Collection of general information / server log data
When you access our website, information of a general nature is automatically collected. This
information (server log files) includes, for example, the type of web browser, the operating
system used, the domain name of your Internet service provider and the like. This is only
information that does not identify you personally. This information is technically necessary
for the correct delivery of content requested by you from websites and is mandatory when
using the Internet. Anonymous information of this kind is statistically evaluated by us in order
to optimize our Internet presence and the technology behind it.

Privacy policy for the use of Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc.
(“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to
help the website analyze how users use the site. The information generated by the cookie
about your use of the website will generally be transmitted to and stored by Google on servers
in the United States. However, due to the activation of IP anonymisation on these websites,
your IP address will be shortened by Google in advance within member states of the European
Union or in other contracting states of the Agreement on the European Economic Area. Only
in exceptional cases will the full IP address be transmitted to and truncated by Google on
servers in the United States. On behalf of the operator of this website, Google will use this
information for the purpose of evaluating your use of the website, compiling reports on
website activity and providing other services to website operators relating to website activity
and internet usage. The IP address transmitted by your browser as part of Google Analytics is
not combined with other data from Google. You may refuse the use of cookies by selecting
the appropriate settings on your browser, however please note that if you do this you may not
be able to use the full functionality of this website. You can also prevent Google from
collecting the data generated by the cookie and related to your use of the website (including
your IP address) and Google from processing this data by downloading and installing the
browser plug-in available under the following link:
Link: Browser Add On zur Deaktivierung von Google Analytics

Contact / Inquiries
In the following we describe the possibilities of establishing contact with the companies and
employees of our company.

Contact form
If you send us enquiries via the contact form, your details from the enquiry form including the
contact data you provided there will be stored by us for the purpose of processing the enquiry
and in the event of follow-up questions. These data will not be passed on without your
consent.

The processing of the data entered in the contact form thus takes place in the first step on the
basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time.
For this purpose, an informal e-mail notification to us is sufficient. The legality of the data
processing operations carried out until the revocation remains unaffected by the revocation. In
further correspondence, there may be a change of legality (e.g. if you request an offer), then
your data will be processed in accordance with Art. 6 para. 1 lit b GDPR.

The data entered by you in the contact form will remain with us until you request deletion,
revoke your consent to storage or the purpose for data storage no longer applies (e.g. after
your request has been processed). Mandatory legal provisions – in particular retention periods
– remain unaffected by this.

E-Mail / Phone inquiry
If you send us enquiries by e-mail or telephone, your details from the e-mail or from the
conversation, including the contact details you provided there, will be stored by us for the
purpose of processing the enquiry and in the event of follow-up questions. We do not pass on
this data without your consent.

The processing of the data provided in the mail or from the telephone call is therefore based
on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this
purpose, an informal e-mail notification to us is sufficient. The legality of the data processing
operations carried out until the revocation remains unaffected by the revocation. In further
correspondence, there may be a change of legality (e.g. if it is a matter of business
correspondence), then your data will be processed in accordance with Art. 6 para. 1 lit b
GDPR.
The data provided by you in the mail or from the telephone conversation will remain with us
until you request deletion, revoke your consent to storage or the purpose for data storage no
longer applies (e.g. after your request has been processed). Mandatory legal provisions – in
particular retention periods – remain unaffected by this.

Data processing for the fulfilment of contracts
If you have entered into a business relationship with our company, e.g. you have placed an
order with us, data processing will be carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
All data necessary to initiate, fulfil or complete this order, such as contact data, object data,
service providers involved, photo documentation, plans, orders for goods, etc., may be
collected and processed by us without separate consent.

Should it be necessary to call in a subcontractor (e.g. other IT service providers, special
suppliers) to fulfil the contract with you, we may also pass on your data to this subcontractor.
We guarantee that we have committed our subcontractors to the same strict data protection
requirements that you can expect from us.

In individual cases it may happen that we receive information about the credit reform in order
to initiate an order. Should any consequences for the order arise from the data obtained in this
way, we will clarify this separately with you.

The data in connection with orders are subject to different retention periods. For example,
general business letters must be verified for 6 years and tax documents for 10 years. We will
only pass on your data within our company to the extent necessary, insofar as this is justified
by the subject of the order.

Dealing with application documents
The legal basis for processing your personal data for application purposes is §26 of the
BDSG-neu.

Data will only be collected and processed to the extent required by law. Insofar as further data
may not be required directly for the establishment of the employment relationship, processing
is based on a legitimate interest of the company pursuant to Art. 6 Para. 1 lit. f GDPR.

A legitimate interest may arise, for example, from internal organisational and administrative
purposes, for the protection of the company’s facilities, installations and assets as well as data
processing installations and data. Processing of your data is permitted here unless the
protection of your interests, fundamental rights and fundamental freedoms prevails.

In individual cases, we may also obtain your consent to the processing or transmission of your
data. Your consent in these cases is voluntary and may be revoked by you at any time in the
future, unless otherwise agreed.

The application documents will be transmitted within the group of companies. In the
application process, the respective specialist department is involved. The specialist
departments are instructed to treat application documents as strictly confidential. The
documents will not be forwarded to a third country.
a&f Großserien GmbH in the Federal Republic of Germany is responsible for the collection,
processing and use of your personal data.

Your personal data will only be stored as long as knowledge of the data is necessary for the
above-mentioned purposes or as long as legal or contractual storage regulations exist. As a
rule, the application documents are deleted 6 months after completion of the application
procedure.

It is possible to store your data for a longer period if you give us your consent. During this
extended period, a&f Großserien GmbH will be happy to contact you about new job offers.

Changes to our privacy policy
We reserve the right to amend this data protection declaration from time to time so that it
always complies with current legal requirements or in order to implement changes to our
services in the data protection declaration, e.g. when introducing new services. Your renewed
visit will then be subject to the new data protection declaration.