Privacy policy

Thank you for your interest in our online presence. The protection of your personal data is a vital concern of Schuler AG (hereinafter referred to as “Schuler”, “we” or “us”). With this data protection declaration, we would like to inform you about the processing of your personal data within the scope of use of the website available under https://www.schulergroup.com/ and other websites if and to the extent they are referred to below (hereinafter jointly referred to as “websites”) according to the requirements of the EU General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016 – called "GDPR" hereinafter).

This data protection declaration does not apply to our websites via which you can apply directly to us electronically. The special data protection declaration, can be accessed here. In the event of a contradiction with this data protection declaration, the special data protection declaration takes precedence.

1. Name and contact data of the responsible body

Data controller for the data processing explained in this data protection declaration is the following body:

Schuler Group GmbH
Schuler-Platz 1
D-73033 Göppingen
Germany
Tel: +49 (71 61) 66-0
Fax: +49 (71 61) 66-233
E-mail: info@schulergroup.com

Schuler Group GmbH is represented by its Managment Board, which comprises the following persons:

Martin Drasch, CEO
Dr. Peter Jost, COO
Thomas Kamphausen, CFO

2. Contact details of the data protection officer

The data protection officer of Schuler is:

RA Dr. Thorsten B. Behling
WTS Legal Rechtsanwaltsgesellschaft mbH
Sachsenring 83
50677 Cologne
Germany
E-mail: datenschutz.web@schulergroup.com

3. Categories of personal data we process

When using our website, we process the following categories of personal data, depending on the services you use:

a.     The use of our website as a whole (so-called surfing):

• Information about the type of browser you are using and the browser version
• Your device’s operating system
• Your Internet service provider 
• Your IP address 
• Date and time of the access
• Websites from which your system accessed our website 
• Websites that your system accesses from our website
• Cookie data (e.g., pseudonym cookie ID, length of stay on our websites, pages called, movement of the user through links, IP address) insofar as you do no prohibit the col-lection of this information as explained under Section 8

b.     Use of the option to register for events:

• Personal master data (form of address, first name, last name)
• Contact data (telephone number, fax number, e-mail address)
• Company
• Address data (street, postal code, city, country) [invoice may vary]
• Position and role of the contact person
• Possibly a message

c.      Use of the application form:

You can find out more about this under Section 3 c of our application pages.

d.     Use of our contact form:

• Personal master data (form of address, first name, last name)
• Company
• Contact data (telephone number, e-mail address and possibly fax number)
• Address data (street, postal code, city, country)
• Content of your message

e.      Use of our contact e-mail address or telephone number: 

• Sender e-mail address
• Content of the message/your concern
• Telephone number (when contacting us by telephone)

f.      Use of electronic invoice processing:

• Company address data (e.g., street, house number, postal code, city, country)
• Contact data for contact person (e.g., telephone number, e-mail address)
• Invoice sender data (e.g., e-mail address, domain)
• Company customer number
• Company bank data (e.g., account number, bank code or IBAN and BIC as well as ac-count holder)
• Invoice data (e.g., invoice number, items, prices)

g.      Social media channels:

In the context of our social media sites on Facebook (available via the following Link), YouTube (available via the following Link), Xing (available via the following Link), Twitter (available via the following Link), LinkedIn (available via the following Link), Kununu (available via the following Link), and Instagram (available via the following Link) (hereinafter jointly referred to as “social media site(s)”), we also process the following categories of personal data on our social media sites:

4. Origin of personal data not collected directly from you

We generally only collect personal data about you from you personally. However, if this is not the case in exceptional cases, we will specifically point this out to you. Within the scope of the processing of the data collected through our online forms and systems, we obtain the data of the person who enters it into the respective form or system. 

If you send us the personal data of third parties through our abovementioned services, you must observe all data protection requirements, especially Art. 5 through 9 and 12 ff. GDPR. Otherwise we have no intention to collect such data and reserve the right to take legal action against you.

5. Storage period

The personal data we have collected is stored only as long as required for the fulfillment of the purpose connected with the storage. If this purpose no longer applies, we fundamentally delete or anonymize the data again insofar as no legitimate grounds or obligations to obtain the data (e.g., according to tax-law regulations) exist. In the latter case, the data is processed only with limitations, i.e., to fulfill the grounds or obligation to retain the data and in all other cases only with consent for the assertion, exercise or defense of legal claims, for the protection of the rights of other natural or legal person or for reasons of an important public interest of the European Union(EU) or an EU member state. In case an obligation to retain data or a legitimate reasons for storage exists, we delete or anonymize the data after the certain expiration of the legitimate grounds and/or obligation to retain the data.

In the event of data processing on our social media site, we delete or anonymize the data processed by us (for further details, please refer in particular to Section 12) generally after two years, provided that and insofar as there are no legitimate reasons or obligations for storage.

6. Purposes for which the personal data is processed

We observe the basic principle of the specific use of personal data and process your personal data fundamentally only for the purposes explained in this data protection declaration.

8. Use of cookies

We use cookies on our website. Cookies are small data packets generated by our web server and stored on the hard disk of your computer during the communication of your computer with the web server. Session cookies that the mere functionality of our websites and that are deleted again immediately when the browser closes and cross-session cookies (so-called persistent cookies) that are saved and used beyond a session are differentiated; we use both types of cookies. By using our website, you grant your consent for us to process your data through cookies as described in the following in combination with the displayed cookie banner. The legal basis for the processing of your data in this context is Art. 6 Sect. 1 Clause 1 a) GDPR accordingly. If you want to assert your pertinent right to revocation or objection, proceed as follows, irrespective of the descriptions in Sections 11 g) and i):

a.     Prevention of session cookies

You can assert your right to reject cookies at any time. Irrespective of the other possibilities for preventing cookies described in the following, you can set your browser so that it does not accept cookies or so that you receive a prompt to consent before the setting of a cookie. The details can be found in the help function of your browser. If you do not accept cookies, you will possibly not be able to utilize the full range of website functions.

b.     Prevention of persistent cookies for range analysis

For us, it is important to understand how our websites are used to improve them and design them more attractively for users. For this reason, we analyze how you use our websites whereby we process cookie data using external service provider as described in the following. These descriptions also contain information on how to prevent such processing.

aa.   Google Analytics cookies

This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called cookies, text files that are stored on your computer and that allow an analysis of your use of the website. The data generated by the cookie regarding your use of this website is usually sent to a Google server in the United States and stored there. In case of an activation of IP anonymization on this website, your IP address is previously shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is sent to a Google server in the United States and stored there only in exceptional cases. On behalf of the website operator, Google uses this information to evaluate your use of the website, compile reports on the website activities and render other services for the website operator connected with the use of the website and the Internet itself. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other data by Google. You can prevent the storage of cookies by a corresponding setting in your browser software; please note, however, that you might not be able to use the full scope of functions of this website in this case. In addition, you can prevent the sending of the data generated by the cookie and related to your use of the website (including your IP address) to Google and prevent the processing of this data by Google by downloading and installing the browser plugin available under the following link. Please note that you will leave the Schuler website in this case. Schuler does not process the affected data.

More detailed information on the conditions for use and data protection can be found under the following links: http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/. Please note that Google Analytics has been expanded by the code “anonymizeIp” on this website to guarantee an anonymized collection of IP addresses (so-called IP masking).

c.      Important information on the saving of your cookie settings

Please note that you must repeat the abovementioned cookie settings if you or your browser deletes cookies. The same applies if your visit our websites with another browser or terminal device.

9. Recipient or categories of recipients of personal data

The personal data is passed on to the following recipients:

• Public bodies to which the data must be sent based on legal regulations (e.g., tax authorities, supervisory bodies, social security agencies, law enforcement agencies, if pertinent)
• Internal departments involved in the performance of the connected tasks (essentially: Marketing, Human Resources, IT & Security)
• Contractors (service providers, such as IT service providers and forwarding agents that may or may not belong to the Schuler and/or Andritz Group)
• Our external data protection officer
• Other group companies and departments (e.g., Auditing or Information Security department or the General Management of the Schuler and/or Andritz Group)
• Providers of our social media sites

10. Sending of personal data to third-party countries

We fundamentally do not send personal data collected on these websites to countries outside of the European Union or European Economic Area (third-party countries).

It is possible, however, that data collected on these website will be sent to third-party countries if required for the fulfillment of the control, for internal communication, customer care and/or customer management or due to the use of a service provider or the involvement of a group company in a third-party country as an intermediary. We involve our data protection officer in such cases. The data is sent only if the receiving body has an appropriate data protection level based on a decision on adequacy or using suitable guarantees (Art. 45 ff. GDPR) or if neither a decision on adequacy nor suitable guarantees are required in exceptional cases (Art. 49 Sect. 1 Clause 2 GDPR). In general, we apply the EU Standard Contractual Clauses to guarantee an appropriate degree of data protection on the part of the pertinent recipient. The guarantees we use can be obtained from our data protection officer. If you would like to obtain more information on the guarantees in individual cases, please contact our data protection officer under the contact data listed under Section 2.

11. Rights with respect to data processing

In regard to our use of your data, you have the following rights arising from Art. 15 through 21 GDPR, as well as the right of the revocation of your consent at any time and the right to complain to a supervisory body as described in the following. You can assert your rights to us informally, either directly using the contact data specified under Section 1 or by involving our data protection officer as an intermediary; the contact information of the data protection officer can be found under Section 2. With the exception of any transmission or connection fees, the assertion of these rights does not entail any costs.

a.     Right of information (Art. 15 GDPR)

You have the right to request a confirmation from us as to whether and which personal data on your person are process and to obtain information regarding this data, especially in regard to the purposes and legal bases of the processing (refer to Sections 6, 7 and 8), the categories of the data we process (Section 3), the categories of recipients (Section 9) and our intention to transfer to data to recipients in a third-party country (Section 10). This also comprises information on the origin of the data insofar as it was not collected from you personally. You also have the right to obtain a copy of the personal data being processed insofar as the rights and freedoms of other people are not infringed in regard to their own personal data. Right to correction (Art. 16 GDPR)

b.     Right to correction (Art. 16 GDPR)

You also have a right to demand the correction of any incorrect personal data we have on you immediately. You also have the right to demand the completion of incomplete personal data, even by means of a supplementary declaration, under consideration of the purpose for processing.

c.      Right to deletion (Art. 17 GDPR)

You have to right to request the immediate deletion of your personal data if one of the following reasons applies and none of the exceptions explained in the following comes into play:

• The data you processed are no longer required for the purposes described in this data protection declaration.
• You have revoked your granted consent (for more information, refer to Section 11. i)) and we have no other legal basis for the processing of your data.
• The data was unlawfully processed.
• The deletion is required for the fulfillment of a legal obligation according to the law of the European Union or the member states to which we are subject. 
• You have objected our processing of your data (for more information, refer to Section 11. g)) and we have no overriding grounds for the processing your data.

We must not and/or may not implement your wish for deletion if one of the following reasons applies:

• The processing is required for the exercising of the right to freedom of expression and information.
• The processing is required to fulfill a legal requirement to which we are obliged according to the law of the European Union or a member state (e.g., legal storage obligations).
• The processing is required for the assertion, exercise or defense of legal claims.
• The processing is required for reasons of public interest within the scope of public health.

d.     Right to the limitation of processing  (Art. 18 GDPR)

You also have a right to demand the limitation of the processing of your personal data. You particularly have this right if one of the following reasons applies:

• You dispute the correctness of your data.
• The processing of the data is unlawful and you reject the deletion of the data.
• We no longer require your data, but you require it for the assertion, exercise or defense of legal claims.
• You have objected to the process (for more information, see Section 11 g)) and we are still checking whether our legitimate grounds for processing have priority over your legitimate grounds for objection.

e.       Right to notification (Art. 19 GDPR)

If you have asserted your right to correction, deletion or limitation of processing to Schuler, we are obliged to inform all recipients to which your personal data has been disclosed of the correction or deletion of your data or the limitation of its processing unless such an undertaking proves impossible or is associated with undue effort. You have the right to be notified of such measures by the recipient.

f.      Right to data transferability (Art. 20 GDPR)

You have the right to obtain the pertinent personal data in a structured, common, machine-readable format and send it or have us send it to another responsible party insofar as you have provided this data to use on the basis of consent or a contract and the data is processed in an automated manner. You have the right to have us send the data directly to the new responsible part if technically feasible and the rights and freedoms of other people are not violated.

g.     Right to objection (Art. 21 GDPR)

For reasons arising from your particular situation, you have the right to object to the processing of your personal data at any time insofar as the processing of this data is required for the safeguarding of the legitimate interests of Schuler or a third party or for the performance of a task that lies in the public interest.

You can object to the processing of your data for advertising purposes with future effect at any time. We will always comply with such a request. Please note, however, that we cannot exclude that we may not be able to recall an advertising material in individual cases if we receive your objection after the publication of the advertising material has already been unstoppably initiated. In such cases, we will naturally remove you before the publication of any future advertising materials.

h.     Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

In addition, you can lodge a complaint at any time with the responsible data protection authority, for example at your place of residence or at the place of the alleged infringement.

The following data protection authority is responsible for us:

State Officer for Data Privacy and Freedom of Information
Lautenschlagerstraße 20
70173 Stuttgart
https://www.baden-wuerttemberg.datenschutz.de/

i.       Right to the revocation consent

Insofar as you have provided us with a declaration of consent for the processing of your data, you have the right to revoke this consent with future effect at any time. Through such a revocation, the legality of any processing based on the provided consent up to the point in time of the revocation, the revocation affects only the legality of future processing.

12. Information on social media sites and relationships with Schuler

Please note that Schuler is only the data controller and service provider with respect to the social media sites referred to in Section 3 g) to the extent that Schuler itself processes data in accordance with the explanations in this Section 12. Schuler is neither responsible for nor can Schuler influence telemedia and related data processing that can be accessed via the social media sites named below. For this reason, Schuler has no control over whether and, if so, to what extent your personal data is transferred to recipients in third countries by other service providers who provide telemedia via the social media sites. Other service providers may also process technical information concerning you when you visit our social media sites. Irrespective of the data that we process in accordance with Section 3 f), the following information can be retrieved from these providers in particular:

• The IP address of your device and/or your Internet connection
• Date and time of access to our social media sites
• Your browser type
• The browser settings and the operating system
• The last page you visited and the amount of data transferred.

This information applies to all social media sites mentioned below, unless and to the extent that we state otherwise with respect to the respective social media sites.

a. Facebook

For example, as the service provider of the Facebook fan page referred to in Section 3 g), we can see who has called up our fan page and/or posted, commented on and/or shared posts. We process your posts in order to be able to process your inquiry and, for example, to answer a question you have asked. In addition, we process all information that you provide when you contact us via the contact options provided on our Facebook fan page, e.g., your user name, e-mail address and your inquiry. We process the data based on the legal basis set out in Section 7 b) hh).

Furthermore, Facebook Inc, 1601 Willow Road Menlo Park, CA 94025, USA (hereinafter re-ferred to as “Facebook USA”) and/or Facebook Ireland Ltd, 4 Grad Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as “Facebook Ireland”) may provide us with anonymized – i.e. non-personal – statistical information that we cannot assign to you without further additional information (e.g., through so-called Facebook Insights).

Further information on the processing of your data by Facebook USA and/or Facebook Ire-land can be found in the data protection declaration which can be accessed via https://www.facebook.com/about/privacy.

b. YouTube

For example, as the service provider of the YouTube site referred to in Section 3 g), we can see who has viewed and liked our videos. We can also see comments under ours. We process your posts and your user names in order to be able to process your inquiry and, for example, to answer a question you have asked. We process the data based on the legal basis set out in Section 7 b) hh).

Furthermore, YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter re-ferred to as “YouTube”) may provide us with anonymized – i.e. non-personal – statistical information that we cannot assign to you without further additional information (e.g. through YouTube Analytics).

Further information on the processing of your data by YouTube can be found in the data protection declaration which can be accessed via https://policies.google.com/privacy?hl=en&gl=en.

c. Xing

As a service provider of the Xing site referred to in Section 3 g), we can, for example, see when and with what content ratings were submitted for our company. The corresponding ratings are displayed pseudonymously on our Xing page and we have no way of referring them to a specific person. We can also see which employees have posted on their own Xing profiles, worked at Schuler and allowed an ad on our Xing page. Furthermore, we can see who “follows” our Xing page, i.e., wants news to be displayed in their profile, which we publish on our Xing page. We process the data based on the legal basis set out in Section 7 b) hh).

Further information on the processing of your data by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany (hereinafter referred to as “Xing”) can be found in the data protection declaration which can be accessed via https://privacy.xing.com/en/privacy-policy.

d. Twitter

As a service provider of our Twitter page we can, for example, see who follows our Twitter page, i.e., wants to see our contributions (“tweets”) regularly, who likes our tweets, who responds to them by publishing them again (“retweets”). If you reply to one of our tweets, we will process your data in order to respond to your inquiry. If you follow us on Twitter, you also have the option to send us a private message. In this case we use your data to answer your inquiry. We process the data based on the legal basis set out in Section 7 b) hh).

Further information on the processing of your data by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter referred to as “Twitter”) can be found in the data protection declaration which can be accessed via https://twitter.com/en/privacy.

e. LinkedIn

For example, as the provider of our LinkedIn page, we can see who follows our LinkedIn page and which employees with their own LinkedIn profiles have indicated that they want to work for Schuler. Furthermore we can see who liked our posts, shared them or wrote a comment. In the case of comments, we process your data to be able to answer your inquiry.

Furthermore, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”) may provide us anonymized – i.e. non-personal – statistical information that we cannot assign to you without further additional information (e.g. analysis for company pages).

Further information on the processing of your data by LinkedIn can be found in the data protection declaration which can be accessed via https://www.linkedin.com/legal/privacy-policy.

f. Kununu

As a provider of our Kununu site, we can, for example, see when and with what content ratings were submitted for our company. The corresponding ratings are specified pseudonymously on our Kununu page and we have no way of referring them to a specific person. You also have the option to make an inquiry about Schuler to the Kununu community via the Kununu page. Corresponding inquiries are also pseudonymized. If we respond to such an inquiry, we will process the data, in particular the content of the inquiry, in order to process your inquiry. We process the data based on the legal basis set out in Section 7 b) hh).

Kununu also displays anonymized – i.e. non-personal – data on the profile visits to our Kununu site without being asked and also graphically evaluates the ratings given on our Kununu site. It is not possible for us to assign the relevant information to you without additional information.

Further information on the processing of your data by Xing, which operates the website of kununu GmbH, Neutorgasse 4-8, Top 3.02, A - 1010 Vienna (hereinafter referred to as “Kununu”), can be found in the data protection declaration which can be accessed via https://privacy.xing.com/en/privacy-policy.

g. Instagram

For example, as the provider of our Instagram page, we can see who has subscribed to our Instagram page and regularly see our new posts. Furthermore, we can see who has liked or commented on our posts. In the case of comments on our posts, we process the data in order to answer your inquiry. If we publish a video on our Instagram page, we can also see how many people have seen the video, but we cannot see who has seen the video. If you send us a message via our Instagram page, we will process your data, such as your user name and the content of your message, in order to respond to your request. If we create a story post on our Instagram page, we can see who viewed our story post for the duration of the story post. Story posts are temporary posts that can be viewed via the profile picture on our Instagram page and are visible for 24 hours from the time they are published.

Further information on the processing of your data by Facebook Ireland, which operates the website of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA (hereinafter referred to as “Instagram”), can be found in the data protection declaration which can be accessed via https://help.instagram.com/519522125107875.

13. No obligation for the provision of data by you

No legal or contractual obligation exists that would require you to provide us with your data as described in Section 3. It is possible, however, that we will not be able to fulfil existing contractual obligations (e.g., the delivery of a product) or to perform precontractual measures (e.g., the provision of a quotation, answering of a machine/product inquiry, booking of an event) towards you or your employer/client if you do not provide us with the required data.

If you technically prevent us from collecting data that is required for the use of our website, it is possible that you will not be able to use the services listed under Section 3 or you will be able to use them only in a restricted manner.

The provision of personal data (according to Section 3 c)) within the scope of a job application at Schuler is required for the decision on the establishment of an employment relationship with you. A non-provision of this data can lead to us not making a (positive) decision on your hiring.

The provision of your data within the scope of our contact form is also voluntary. Without the specification of a contact possibility, however, we will not be able to answer your query. The same applies to contacting us by other means (e.g., by e-mail or telephone).

You are not obliged to provide us with your personal data when using our social media sites. However, if you do not provide us with your information, it may not be possible for you to leave comments, send us messages, share posts or like them.

The processing of your personal data for the use of electronic invoice processing is also not prescribed by law or contract. However, if you do not provide us with the required data, you cannot use our electronic invoice processing.

14. Automated decisions, including profiling, in the sense of Article 22 GDPR

Your personal data will not be used for automated decision-making, including profiling, pursuant to Article 22 Para. 1 and 4 GDPR. 

15. Data security

We take technical and organizational security measures to protect your personal data against unintentional or unlawful deletion, editing or loss, as well as any unauthorized passing on to third parties or unauthorized access.

16. Validity of this privacy policy for other Schuler companies

This If and to the extent that you should enter into or are already in correspondence with a company of the Schuler Group other than Schuler Group GmbH (hereinafter referred to as “other Schuler company”; a current list of all Group companies is available here), this other Schuler company will, as a general rule, process your data as a separate data controller. Should the other Schuler company reference this privacy policy (e.g., in an e-mail signature), the statements contained in this privacy policy shall also apply to the other Schuler company accordingly, insofar as the statements contained in this privacy policy do not solely concern the provision and functions of this website and of our social media pages. Therefore, in particular that privacy policy information which can be found in the following Sections shall apply accordingly in relation to other Schuler companies who reference this privacy policy: Section 2, Section 3 (not including letters a, d and g), Sections 4 through 7 (not including Section 7 (b) letters aa, dd and hh), Sections 9 through 11, and Sections 13 through 17. You can find the name of and contact information for the company in the relevant e-mail signature or, for correspondence by mail (such as information about an event), in the sender information contained in the relevant document.

17. Status and modifications of this data protection declaration 

This data protection declaration corresponds with the status named below. We reserve the right to modify this data protection declaration. We therefore request that you regularly check the data protection declaration in order to remained informed of any changes.

Status: May 2019