header
Cookies make it easier for us to provide you with our services. With the usage of our services you permit us to use cookies. »»More information
Welcome you to our website. We appreciate your interest in our company. Protection of your personal data is important to us. We want you to feel safe when visiting our website. In the following, we explain which data are collected when you visit our website and how they are used.
Our Contact Details Our contact details can be found under Information for job applicants.
To contact our data protection officer, please write an e-mail to hfsab@hfsab.com.
Every time our website is called up, our system automatically records data and information of the access device (e.g. computer, mobile phone, tablet, etc.).
What personal data are collected and to which extent will they be processed?
(1) Information about the browser type and the version used;
(2) Operating system of the access device;
(3) Name of the accessing host;
(4) IP address of the access device;
(5) Date and time of access;
(6) Websites and resources (images, files, other site contents) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Confirmation whether retrieval was successful;
(9) Transferred data volume
These data are stored in our system's log files. These data are not stored together with the personal data of a specific user so that it is not possible to identify individual users of the website.
The legal basis for the processing of personal data
Article 6(1)(f) of the GDPR (legitimate interest). Our legitimate interest is to guarantee that the purpose described below is achieved.
Purpose of data processing
The temporary (automated) storage of data is only required during the website visit so that the website can be provided. Storage and processing of personal data is also required to maintain compatibility of our website for all visitors, as far as possible, and to combat misuse and eliminate faults. It is necessary to log technical data of the accessing computer to be able to react promptly to incorrect visualisation, attacks to our IT systems and/or lack of functionality of our website. Furthermore, this data is used to optimise the website and to generally safeguard the security of our IT systems.
Length of time in storage
The above-mentioned technical data are erased as soon as they are no longer needed to guarantee compatibility of the website for all visitors but at the latest 3 months after you have visited our website.
Right to object and to erasure
You may object to processing any time under Article 21 of the GDPR and request erasure of data pursuant to Article 17 of the GDPR. The rights you are entitled to and how to enforce them is described further below in this Privacy Policy.
Scope for processing personal data
We embed and use cookies at different pages to enable certain functions of our website and to embed external web services. So-called "cookies" are small text files your browser can store on your access device. These text files contain a characteristic string chain, which uniquely identifies your browser when you come back to our website. Storage of a cookie file is also called "setting a cookie". Cookies can be set both by our website and by external web services.
The legal basis for the processing of personal data
Art. 6 Abs. 1 lit. f DSGVO (berechtigtes Interesse) bzw. Art. 6 Abs. 1 lit. a bzw. Art. 9 Abs. 2 lit. a DSGVO (Einwilligung).
Article 6(1)(f) (legitimate interest) and/or Article 6(1)(a) and/or Article 9(2)(a) of the GDPR (consent).
The relevant legal basis can be seen in the cookie table further below.
In general, the legitimate interest for cookies set based on a legitimate interest is to guarantee functionality of our website and the embedded services (technically required cookies). It may also be possible that cookies increase user-friendliness and allow for a more individual addressing. We have weighed up your interests against our interests.
By using cookie technology, we can identify, analyse and track individual website users if the visitor has consented to the use of cookies as per Article 6(1)(a) of the GDPR.
Purpose of data processing
The cookies are set by our website and/or external web services to achieve full functionality of our website, to improve user-friendliness and to pursue the purpose stated with your consent. Cookie technology allows us to recognise individual visitors based on pseudonyms, such as an individual or random ID, so that we can offer more individualised services. Details are listed in the following table.
Length of time in storage
The cookies listed in the following are stored in your browser until they are deleted or, in case of a session cookie, until the session has expired. Details are listed in the following overview:
Right to object, withdrawal of consent and erasure
You can set your browser as you wish so that the setting of cookies is generally prevented. You may then decide on a case-by-case basis whether you accept a cookie or generally accept cookies. Cookies can be used for different purposes, e.g. to recognise whether your access device is already connected to our website (permanent cookies) or to save last viewed offers (session cookies). If you have given us your explicit consent to the processing of your personal data, you may withdraw this consent any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw your consent.
Your personal data will be protected by technical and organisational measures during collection, storage and processing so that third parties cannot access them. In case of unencrypted communication by e-mail, data security during transfer to our IT systems cannot be guaranteed in full by us so that we recommend to send information with a high need for confidentiality in encrypted form or by post.
We explicitly inform you that our mailing system uses an automated archiving process. All incoming and outgoing e-mails are digitally archived in tamper-proof form.
We process the data you sent us in connection with your job application to check whether you are suitable for a job (or open position in our company, if any) and to complete the application procedure. This concerns data such as contact details, communication details, personal data, application documents and availability. More information can be found at Information for job applicants.
Article 6(1)(c) of the GDPR (for compliance with a legal obligation). Our legal obligation is to comply with tax and commercial law (e.g. §§ 146 and 147 of the German Tax Code, §§ 238 and 257 of the German Commercial Code).
The purpose of archiving is to comply with tax law (e.g. §§ 146 and 147 of the German Tax Code – duty to archive e-mails of relevance under tax law) and commercial law (e.g. §§ 238 and 257 of the German Commercial Code – duty to archive commercial correspondence).
Our e-mail communication is stored until retention periods under tax and commercial law have expired. The retention period can be up to 10 years.
You may object to processing any time under Article 21 of the GDPR and request erasure of data pursuant to Article 17 of the GDPR. The rights you are entitled to and how to enforce them is described further below in this Privacy Policy.
Right to access
You are entitled to request a confirmation of whether we process your personal data. If this is the case, you have the right to access the information mentioned in Article 15(1) of the GDPR as long as the rights and freedoms of others are not adversely affected (see Article 15(4) of the GDPR). We are glad to provide you a copy of this data.
Right to rectification
Under Article 16 of the GDPR, you are entitled to obtain the rectification of inaccurate personal data (such as address, name, etc.) any time. You may also request any time to have incomplete personal data completed. A corresponding adjustment is made immediately.
Right to erasure
Pursuant to Article 17(3) of the GDPR, you do not have this right if
Right to restriction of processing
Under Article 18(1) of the GDPR, you have the right to restrict the processing of your personal data in certain cases.
This applies if
Right to withdraw your consent
If you have given us your explicit consent to the processing of your personal data [Article 6(1)(f) or Article 9(2)(a) of the GDPR], you may withdraw it any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw your consent.
Right to object
Pursuant to Article 21 of the GDPR, you have the right to object at any time to processing of your personal data, which were collected based on Article 6(1)(f) (on the grounds of a legitimate interest). You only have this right if particular circumstances speak against storage and processing.
How do you exercise your rights?
You may exercise your rights any time by contacting us as at Information for job applicants.
Under Article 20 of the GDPR, you have the right to have your personal data transferred to you. We provide your personal data in a structured, commonly used and machine-readable format. The data can either be transferred to you or a controller you specify.
On request, we provide you the following data acc. to Article 20(1) of the GDPR:
We will transfer the personal data directly to a controller specified by you insofar as this is technically feasible. Please note that we may not transfer data which adversely affect the rights and freedoms of others [Article 20(4)].
Insofar as you suspect that your data are being processed unlawfully on our website, you may, of course, bring about a judicial clarification of the issue at any time. In addition, any other legal option is open to you. Irrespective of that, you may contact a supervisory authority based on Article 77(1) of the GDPR. You have a right to lodge a complaint pursuant to Article 77 of the GDPR in the Member State of your habitual residence, place of work or place of the alleged infringement, i.e. you can choose the supervisory authority of one of the above-mentioned places. The supervisory authority with whom the complaint is lodged shall notify you of the status and outcomes of your complaint, including your right to an effective judicial remedy based on Article 78 of the GDPR.
Welcome you to our website. We appreciate your interest in our company. Protection of your personal data is important to us. We want you to feel safe when visiting our website. In the following, we explain which data are collected when you visit our website and how they are used.
Our Contact Details Our contact details can be found under Information for job applicants.
Every time our website is called up, our system automatically records data and information of the access device (e.g. computer, mobile phone, tablet, etc.).
What personal data are collected and to which extent will they be processed?
(1) Information about the browser type and the version used;
(2) Operating system of the access device;
(3) Name of the accessing host;
(4) IP address of the access device;
(5) Date and time of access;
(6) Websites and resources (images, files, other site contents) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Confirmation whether retrieval was successful;
(9) Transferred data volume
These data are stored in our system's log files. These data are not stored together with the personal data of a specific user so that it is not possible to identify individual users of the website.
The legal basis for the processing of personal data
Article 6(1)(f) of the GDPR (legitimate interest). Our legitimate interest is to guarantee that the purpose described below is achieved.
Purpose of data processing
The temporary (automated) storage of data is only required during the website visit so that the website can be provided. Storage and processing of personal data is also required to maintain compatibility of our website for all visitors, as far as possible, and to combat misuse and eliminate faults. It is necessary to log technical data of the accessing computer to be able to react promptly to incorrect visualisation, attacks to our IT systems and/or lack of functionality of our website. Furthermore, this data is used to optimise the website and to generally safeguard the security of our IT systems.
Length of time in storage
The above-mentioned technical data are erased as soon as they are no longer needed to guarantee compatibility of the website for all visitors but at the latest 3 months after you have visited our website.
Right to object and to erasure
You may object to processing any time under Article 21 of the GDPR and request erasure of data pursuant to Article 17 of the GDPR. The rights you are entitled to and how to enforce them is described further below in this Privacy Policy.
Scope for processing personal data
We embed and use cookies at different pages to enable certain functions of our website and to embed external web services. So-called "cookies" are small text files your browser can store on your access device. These text files contain a characteristic string chain, which uniquely identifies your browser when you come back to our website. Storage of a cookie file is also called "setting a cookie". Cookies can be set both by our website and by external web services.
The legal basis for the processing of personal data
Art. 6 Abs. 1 lit. f DSGVO (berechtigtes Interesse) bzw. Art. 6 Abs. 1 lit. a bzw. Art. 9 Abs. 2 lit. a DSGVO (Einwilligung).
Article 6(1)(f) (legitimate interest) and/or Article 6(1)(a) and/or Article 9(2)(a) of the GDPR (consent).
The relevant legal basis can be seen in the cookie table further below.
In general, the legitimate interest for cookies set based on a legitimate interest is to guarantee functionality of our website and the embedded services (technically required cookies). It may also be possible that cookies increase user-friendliness and allow for a more individual addressing. We have weighed up your interests against our interests.
By using cookie technology, we can identify, analyse and track individual website users if the visitor has consented to the use of cookies as per Article 6(1)(a) of the GDPR.
Purpose of data processing
The cookies are set by our website and/or external web services to achieve full functionality of our website, to improve user-friendliness and to pursue the purpose stated with your consent. Cookie technology allows us to recognise individual visitors based on pseudonyms, such as an individual or random ID, so that we can offer more individualised services. Details are listed in the following table.
Length of time in storage
The cookies listed in the following are stored in your browser until they are deleted or, in case of a session cookie, until the session has expired. Details are listed in the following overview:
Right to object, withdrawal of consent and erasure
You can set your browser as you wish so that the setting of cookies is generally prevented. You may then decide on a case-by-case basis whether you accept a cookie or generally accept cookies. Cookies can be used for different purposes, e.g. to recognise whether your access device is already connected to our website (permanent cookies) or to save last viewed offers (session cookies). If you have given us your explicit consent to the processing of your personal data, you may withdraw this consent any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw your consent.
Your personal data will be protected by technical and organisational measures during collection, storage and processing so that third parties cannot access them. In case of unencrypted communication by e-mail, data security during transfer to our IT systems cannot be guaranteed in full by us so that we recommend to send information with a high need for confidentiality in encrypted form or by post.
We explicitly inform you that our mailing system uses an automated archiving process. All incoming and outgoing e-mails are digitally archived in tamper-proof form.
We process the data you sent us in connection with your job application to check whether you are suitable for a job (or open position in our company, if any) and to complete the application procedure. This concerns data such as contact details, communication details, personal data, application documents and availability. More information can be found at Information for job applicants.
Article 6(1)(c) of the GDPR (for compliance with a legal obligation). Our legal obligation is to comply with tax and commercial law (e.g. §§ 146 and 147 of the German Tax Code, §§ 238 and 257 of the German Commercial Code).
The purpose of archiving is to comply with tax law (e.g. §§ 146 and 147 of the German Tax Code – duty to archive e-mails of relevance under tax law) and commercial law (e.g. §§ 238 and 257 of the German Commercial Code – duty to archive commercial correspondence).
Our e-mail communication is stored until retention periods under tax and commercial law have expired. The retention period can be up to 10 years.
You may object to processing any time under Article 21 of the GDPR and request erasure of data pursuant to Article 17 of the GDPR. The rights you are entitled to and how to enforce them is described further below in this Privacy Policy.
Right to access
You are entitled to request a confirmation of whether we process your personal data. If this is the case, you have the right to access the information mentioned in Article 15(1) of the GDPR as long as the rights and freedoms of others are not adversely affected (see Article 15(4) of the GDPR). We are glad to provide you a copy of this data.
Right to rectification
Under Article 16 of the GDPR, you are entitled to obtain the rectification of inaccurate personal data (such as address, name, etc.) any time. You may also request any time to have incomplete personal data completed. A corresponding adjustment is made immediately.
Right to erasure
Pursuant to Article 17(3) of the GDPR, you do not have this right if
Right to restriction of processing
Under Article 18(1) of the GDPR, you have the right to restrict the processing of your personal data in certain cases.
This applies if
Right to withdraw your consent
If you have given us your explicit consent to the processing of your personal data [Article 6(1)(f) or Article 9(2)(a) of the GDPR], you may withdraw it any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw your consent.
Right to object
Pursuant to Article 21 of the GDPR, you have the right to object at any time to processing of your personal data, which were collected based on Article 6(1)(f) (on the grounds of a legitimate interest). You only have this right if particular circumstances speak against storage and processing.
How do you exercise your rights?
You may exercise your rights any time by contacting us as at Information for job applicants.
Under Article 20 of the GDPR, you have the right to have your personal data transferred to you. We provide your personal data in a structured, commonly used and machine-readable format. The data can either be transferred to you or a controller you specify.
On request, we provide you the following data acc. to Article 20(1) of the GDPR:
We will transfer the personal data directly to a controller specified by you insofar as this is technically feasible. Please note that we may not transfer data which adversely affect the rights and freedoms of others [Article 20(4)].
Insofar as you suspect that your data are being processed unlawfully on our website, you may, of course, bring about a judicial clarification of the issue at any time. In addition, any other legal option is open to you. Irrespective of that, you may contact a supervisory authority based on Article 77(1) of the GDPR. You have a right to lodge a complaint pursuant to Article 77 of the GDPR in the Member State of your habitual residence, place of work or place of the alleged infringement, i.e. you can choose the supervisory authority of one of the above-mentioned places. The supervisory authority with whom the complaint is lodged shall notify you of the status and outcomes of your complaint, including your right to an effective judicial remedy based on Article 78 of the GDPR.
In the following, we want to inform you about how we process your personal data in the application process and what rights you have based on data protecton law.
1. Controller
H. Folke Sandelin AB
Box 4086
SE-591 04 Motala
Phone: +46 141 20 36 30
E-mail: hfsab@hfsab.com
2. Purpose of and legal basis for processing
We process your personal data to complete the application procedure. It is admissible to process your personal data required to decide about the start of an employment relationship. The legal basis is Article 6(1)(b) and Article 88 of the GDPR. If processing of your personal data is required for legal actions afer the applicaton procedure was completed, data processing is based on the legitmate interests pursuant to Article 6(1)(f) of the GDPR. In this case, our legitimate interest is to defend legal claims. Insofar as we have received your consent to processing of your personal data for certain purposes (e.g. to add you to an applicants pool for future consideraton), processing of your personal data is based on Article 6(1)(a) of the GDPR.
3. Recipient of your personal data
Within our group of companies, only the people who need access to your data to fulfil the above-mentioned purposes get access to your data. This may also include people in other societies of the NIEHOFF group. An overview of the companies can be found here.
4. Period for which the personal data will be stored
Your personal data will be processed for the first 8me when they are collected; and usually, they will be erased seven months after the application procedure was completed.
In case you have consented to further storage of your personal data, we shall erase your personal data a^er the agreed period has expired.
5. Rights of data subjects
If the legal requirements are met, you have the following rights:
To the extent permitted by law, you have the right to request access to (Article 15 of the GDPR), rectification (Article 16 of the GDPR) or erasure (Article 17 of the GDPR) of personal data as well as object to further processing (Article 18 of the GDPR). On request, we also provide your personal data in a structured, commonly used and machine- readable format (Article 20 of the GDPR). To exercise your rights, please contact the responsible person. If we process your personal data based on a legitimate interest, you are entitled to object to such processing. Furthermore, you are entitled to contact the competent supervisory authority (Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm) if you believe that processing of your personal data is illegal.
6. Right to withdraw your consent
If you have agreed to processing by means of your declaration of consent, you may withdraw your consent at any time with future effect. We shall then no longer process the personal data for the purpose they were collected for.
7. Transfer to third countries outside the EU
Your personal data shall only be transferred to third countries outside the EU if the specific position is open in this third country.
8. Automated decision-making and profiling
We do not use automated decision-making based on the collected personal data nor profiling in the sense of Article 22 paragraphs 1-4 of the GDPR.