H.C. Starck Tungsten GmbH (hereinafter “we” or “data controller”) takes the protection of personal data seriously and complies with the relevant data protection provisions, in particular, the provisions of the EU General Data Protection Regulation (GDPR). In what follows, we would like to inform you about when we process what data when you use our website www.hcstarck.com.
I. Data controller
The data controller within the meaning of the GDPR and other national data protection laws of EU member states, as well as other data protection provisions is:
H.C. Starck Tungsten GmbH
Im Schleeke 78 – 91
38642 Goslar
Tel. +49/5321/751-0
Fax: +49/5321/751-56192
Email: info@hcstarck.com
You can find the full legal notice here:
https://www.hcstarck.com/en/legal-notice/
II. Contact information of the data protection organization
Our data protection organization can be contacted at datenschutz@hcstarck.com.
III. Contact data of the supervisory authority
The contact data for the supervisory authority responsible for our company’s head office is:
State representative for data protection in Lower Saxony
Prinzenstr. 5
30159 Hanover, Germany
Tel. +49/511/120-4500
Email: poststelle@lfd.niedersachsen.de
IV. General
1. Lawfulness of data processing
We only collect and use the personal data of our users on our website in cases where legal provisions allow it or the user has granted its consent. We provide the specific legal bases for the processing of personal data in the following description of individual data processing operations.
2. Storage period
The personal data of users is deleted or locked once the purpose for storing it no longer obtains. In addition, the data may be stored in cases provided for by European or national legislators in EU regulations, laws, or other provisions to which our company is subject. The data is also deleted or locked in situations where a retention period specified by the aforementioned standards expires, unless it is necessary to continue storing the data in order to conclude or fulfill a contract.
3. Transfer of personal data
When we transfer personal data, we do so, on the one hand, to service companies that help us fulfill the aforementioned objectives. These companies may only use your personal data as “data processors” to perform the tasks assigned to them in our contract and are obliged to comply with the relevant data protection regulations. The data processors we use, and with whom we have concluded a contract for data processing, are:
- OPUS Marketing GmbH, Am Pfaffenfleck 10, 95448 Bayreuth (hosting of the website)
On the other hand, there may be cases where, in order to answer queries you submit to us via the contact form (e.g. a request to send product information or brochures), we may forward your query to our affiliates and cooperation partners. Otherwise, we will only forward personal data to third parties within the scope specified in the below description of individual data processing operations.
4. Location of data processing
The personal data stored on your behalf is processed by us in the countries of the European Union (EU) or the European Economic Area (EEA). With regard to the processing of personal data by service providers or other third parties whose registered office is located outside the EU/EEA, we refer to the following descriptions of individual data processing operations.
V. Processing of personal data
1. Provisioning of the website and generation of log files
a) Description of data processing
Each time our website is accessed, our system automatically records data and information from the computer system of the accessing computer. The following data is recorded in the process:
- Browser type and browser version
- Operating system used
- IP address of the user
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
The data is also stored in our system’s logfiles. This data is not stored together with the user’s other personal data.
b) Legal basis for data processing
The legal basis for temporarily storing the data and the logfiles is Art. 6 Par. 1(f) of the GDPR.
c) Purpose of data processing
The data is stored in logfiles to ensure proper functioning of the website. Additionally, the data helps us optimize the website and ensure the security of our IT systems. The data is not evaluated for marketing purposes in this context. These purposes include our legitimate interest in data processing pursuant to Art. 6 Par. 1(f) GDPR.
d) Retention period
The data is deleted once it is no longer needed to achieve the purpose for which it was collected. In the case of data stored in logfiles, this occurs after no more than seven days. Extended storage is possible. In this case, the IP address of the user is deleted or distorted so that it can no longer be attributed to the accessing client.
e) Provision for objection and deletion
In order for the website to work properly, it is essential that data be recorded on the provisioning of the website and stored in logfiles. Consequently, there is no provision for objection on the part of the user.
2. Contact form/email contact
a) Description of data processing
Our website contains contact forms that can be used to contact us electronically. When a user makes use of this option, the data they input into the form (mandatory fields and optional entries) is sent to us and stored. This data includes:
- Name
- Email address
- Your message
- Other optional input, if any
Alternatively, it is also possible to contact us using the email address provided on the website. In this case, we store the personal data that the user sent with the email. The data is used solely to process the conversation.
b) Legal basis for data processing
The legal basis for processing the data is Art. 6 Par. 1(f) GDPR. If the purpose of the email is to conclude a contract or fulfill quasi-contractual obligations, Art. 6 Par. 1(b) GDPR shall serve as an additional legal basis.
c) Purpose of data processing
We process personal data for the sole purpose of processing the email or request. In the event of an email or request, the necessary legitimate interest in processing the data exists here as well.
d) Retention period
The data shall be deleted once it is no longer needed to achieve the purpose for which it was collected. For personal data sent via email, this is the case when the respective conversation with the user is ended. The conversation is considered ended when the circumstances show that the matter at hand has been conclusively clarified.
e) Provision for objection and deletion
If the user contacts us via email, they may request that their personal data be deleted at any time. The request for deletion can be sent to the contact information in Section II. of the Privacy Notice. In the event of such a request, the conversation with the user cannot be continued, and all personal data stored in the course of the conversation will be deleted by us.
3. Online applications
a) Description of data processing
When you use the forms on our website to submit your application, the following information is sent to us:
Mandatory fields:
- Salutation
- First and last name
- Date of birth
- Nationality
- Address (street, city, ZIP code, country)
- Email address
- Telephone/cell phone number
- Other optional input and attachments
Optional input:
- Reference
- Earliest possible start date
- Salary expectation
- Other (what else we should know about you)
There is also an option to upload documents with more information. The data is used solely to process the application.
b) Legal basis for data processing
The legal basis for processing the data after an applicant uses the form to submit an application is Art. 6 Par. 1(b) GDPR, § 26 Par. 1 BDSG (Initiation of a employment relationship).
c) Purpose of data processing
The data is collected for the purpose of processing the application with a view to contacting the applicant and possibly hiring them. The same goes for applications that you mail or email to us.
d) Retention period
The applicant’s data is only stored until the application process is completed and upon expiry of a six-month retention period following receipt of a rejection notice. The data may be stored for a longer period if you have consented to this (e.g. to have your data stored in a pool of applicants).
e) Provision for objection and deletion
As a rule, the applicant can withdraw consent at any time for the storage of their personal data. If the data is required for the fulfillment of a contract, early deletion of the data is only possible if there are no contractual or legal obligations preventing it.
VI. Use of cookies
1. Description of data processing
We use “cookies” to make visiting our website a pleasant experience and to enable the use of certain functions. These are small text files, which are stored in the browser or which the browser stores on the device. When a user accesses a website, a cookie can be stored by the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified the next time the website is accessed.
a) Technical cookies
On the one hand, we use technical cookies, which are necessary to ensure that our website runs smoothly. The following technical cookies are processed on our website:
- PHPSESSID/purpose: Identification of a session (website visit). No personal data can be recorded.
- Borlabs cookie/purpose: Management of the user’s settings in the cookie consent tool (Borlabs cookie)
b) Non-technical cookies
On the other hand, our website also uses the following non-technical cookies:
- NID/purpose: Is used for the implementation of Google maps content.
c) Consent tool
When our website is accessed, we inform the user that cookies are used and we obtain their consent for the use of non-technical cookies and external media. Our website uses consent technology from Borlabs Cookie to obtain your consent to store certain cookies in your browser and to document it in line with data privacy laws. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter “Borlabs”). When you visit our website, a Borlabs Cookie is stored in your browser. It contains the consent you granted or your refusal to grant consent. This data is not forwarded to the Borlabs Cookie provider. The recorded data is stored until you request its deletion or delete the Borlabs Cookie yourself or the reason for storing the data no longer applies. Mandatory legal retention periods remain unaffected. You can find out more about the processing of the Borlabs Cookie at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/
Change cookie settings
d) Reference for changing browser setting
Most browsers are configured to accept cookies automatically. However, the user can prevent cookies from being stored on their computer by applying certain browser settings, although this may limit the functionality of our website.
2. Legal basis for data processing
The legal basis for the processing of personal data in connection with non-technical cookies is the user’s consent pursuant to Art. 6 Par. 1(a) GDPR. Otherwise, the legal basis for the processing of personal data in connection with technical cookies is Art. 6 Par. 1(f) GDPR. Borlabs consent technology is used to obtain legally mandated consent for the use of non-technical cookies and/or tools from third parties. The legal basis for this is Art. 6 Par. 1(c) GDPR.
3. Purpose of data processing
The purpose of using technical cookies is to make the website easier for users to use. Several of our website’s functions cannot be offered without the use of cookies. These require the browser to be recognized even after a change of web page. These purposes include our legitimate interest in the processing of personal data pursuant to Art. 6 Par. 1(f) GDPR. The purpose of data processing in connection with non-technical cookies is described in Section VI. 1.b of the Privacy Notice as well as in the consent tool.
4. Retention period, Provision for objection and deletion
Cookies are stored on the user’s computer and sent from there to our website. Consequently, as a user you have full control of the use of cookies. You can deactivate or limit the transmission of cookies by changing settings in your browser. Cookies that have been stored can be deleted at any time. This can happen automatically. When cookies are deactivated on our website, it may not be possible to use our website’s full range of functions.
VII. Use of Google Services
1. General information
Our website uses services from Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Through the integration of Google Services, Google collects and processes information (including personal data) under certain circumstances. In the process, we cannot rule out the possibility that Google may send the information to a server in a third country, particularly the U.S. In light of this, we wish to make clear that there is no uniform, standardized privacy law in the U.S. and that the EU Commission currently views the U.S. as a country that does not ensure an adequate level of privacy protection. Because the transfer of data to the U.S. is not currently supported by an adequacy decision or any other guarantee pursuant to Art. 44 ff. GDPR which could prove that the privacy level is adequate, we require your consent for the use of Google Services pursuant to Art. 49 Par. 1(a) GDPR, which we obtain via the consent tool when you visit our website. Google claims that it may process, among other things, the following information (including personal data):
- Log data (especially IP address)
- Locational information
- Unique application numbers
- Cookies and similar technologies
When you are logged in to your Google account, Google can add the processed information to your account and treat it as personal data, depending on your account settings. For more information, visit https://www.google.de/policies/privacy/partners. You can prevent this data from being directly added by logging out of your Google account or configuring your Google account accordingly. You can also change your cookie settings (e.g. delete or block cookies, etc.). For more information, see Section VI. of the Privacy Notice. Detailed information can be found in Google’s privacy notice, which you can view here: https://policies.google.com/privacy You can learn more about Google privacy settings at https://safety.google/privacy/privacy-controls/.
You have a right of objection. The objection can be sent to the contact information in Section II. of the Privacy Notice. Other provisions for objection or revocation are described with the individual Google services, where applicable.
2. Use of Google Maps
This website uses the Google Maps cartographic service via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To enable the use of Google Maps functionality, Google collects and processes information (including personal data) under certain circumstances. In the process, we cannot rule out the possibility that Google may send the information to a server in the U.S. We ourselves have no influence over the processing of data via Google Maps. We use Google Maps to make it easier to find the locations indicated on our website. You can find out more about the handling of user data in Google’s privacy notice: https://policies.google.com/privacy When a user visits our website, we use Borlabs consent technology to inform them about the use of Google Maps and to obtain their consent for the use of this tool. The legal basis for the use of Google Maps upon receipt of consent from the user is Art. 6 Par. 1(a) and Art. 49 Par. 1(a) GDPR.
Revocation option:
You can revoke your consent here:
Change cookie settings
If you revoke your consent, you cannot use the Google Maps tool.
VIII. Data subject rights
When your personal data is processed, you are defined as a data subject within the meaning of the GDPR and have the following rights with respect to the data controller.
1. Right to information
You have the right to demand information about whether personal data concerning you is being processed; if so, you have the right to information about that personal data and about the information listed individually in Art. 15 GDPR.
2. Right to correction
You have the right to correction and/or completion vis-à-vis the data controller, insofar as the processed personal data affecting you is incorrect or incomplete. The data controller must make the correction immediately (Art. 16 GDPR).
3. Right to restriction of processing
You have the right to demand a restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. when you have submitted an objection to the processing of your data, the processing can be restricted while a check is run to determine whether the objection can be granted.
4. Right to deletion
You have the right to demand that personal data concerning you be deleted immediately, provided one of the conditions listed individually in Art. 17 GDPR is met, e.g. if the data is no longer required for the intended purposes and the legal retention regulations do not rule out deletion.
5. Right of data portability
Pursuant to Art. 20 GDPR, you have the right to obtain the personal data concerning you and made available by you in a structured, standard, machine-readable format so that it can be transferred to a third party by you or, where technically feasible, by us.
6. Right of objection
You have the right to submit an objection to the processing of personal data concerning you at any time under the conditions listed in Art. 21 GDPR for reasons relating to your particular situation.
7. Right to revoke declaration of data privacy consent
You have the right to revoke, at any time, a declaration of data privacy consent that you granted us. Revocation of consent does not affect the legality of any processing performed on the basis of consent prior to the revocation.
8. Automated decision on a case-by-case basis, including profiling
In exceptional cases where we implement individual decisions automatically, including profiling, we are legally obligated to make arrangements so that you can influence the decision (Art. 22 GDPR).
9. Right of appeal to a supervisory authority
Irrespective of any other administrative or legal remedy, you have the right to appeal to a supervisory authority, especially in the member state where you live or work, or in the place where the suspected violation occurred, if you believe that personal data concerning you is being processed in violation of privacy regulations. The contact data of the supervisory authority responsible for us can be found in Section III. of the Privacy Notice.
10. Miscellaneous
We wish to point out that the above-mentioned data subject rights may be restricted by EU law or applicable national law. To exercise these rights, please use the contact information provided in Section II. of the Privacy Notice. Questions sent to us electronically are generally answered electronically, unless you requested otherwise in your inquiry.
IX. Security information
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection from the fact that the address bar in the browser changes from “http://” to “https://” and a padlock symbol appears in your browser bar. When SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.
X. External links
Our website may contain links to third-party websites. Unless it is obvious, we indicate when a link is external. We have no influence over the content and design of websites by external providers. This Privacy Notice does not apply in this respect.
XI. Modification of this Privacy Notice
The Internet is constantly developing, and this process is often accompanied by changes to applicable legal standards. As a result, we may have to make changes to our Privacy Notice from time to time. We will inform you of any new developments on this page.
Status: August 2022
