Thank you for visiting our website. Protecting your personal data is a top priority for us and we want you to feel safe when visiting our website. We protect your privacy and your personal data. We process your personal data based on the content of this data privacy statement in accordance with the applicable data protection provisions set out in the General Data Protection Regulation (GDPR) or the national provisions set out in the German Federal Data Protection Act (BDSG).
Table of contents
- Name and contact details of the controller
- Contact the Data Protection Officer
- What is personal data?
- Purpose of data processing
- Legal basis for data processing
- Right to object
- Use of our website for information purposes
- Use of our website for further services
- Contact us
- Web analysis
- Social media
- Further functions and contents
- Recipients and data transmission
- Data transfer to third countries
- Erasure of your data
- Your rights
- Amendments to our data privacy statement
- Information for customers and suppliers according to Article 13/Article 14 GDPR
Name and contact details of the controller
PFISTERER Holding AG, Rosenstrasse 44 - 73650 Winterbach, Germany, as the operator of the website at https://www.pfisterer.com, is the controller within the meaning of the GDPR.
What is personal data?
The term “personal data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Purpose of data processing
The scope and nature of the collection, processing and use of your data varies depending on whether you visit our website merely to access generally available information or to make use of additional services. In general, we process your personal data within the context of our entrepreneurial activity for pre-contractual or contractual purposes. In addition, the exercise of our legitimate interest or compliance with statutory requirements may also be the substantive purpose of data processing by us. We provide you with information on the specific purposes of data processing in the following areas.
Legal basis for data processing
We process your personal data in accordance with the following legal bases:
- To fulfil pre-contractual or contractual obligations (Article 6(1b) GDPR)
- Based on your consent (Article 6(1a) GDPR)
- Based on the weighing up of interests (Article 6(1f) GDPR)
- Based on statutory requirements (Article 6(1c) GDPR)
Further legal bases can also apply according to country-specific provisions depending on the nature and scope of processing. We provide you with information on the specific legal basis for data processing in our individual processing operations.
Right to object
If we process your personal data as part of the weighing up of interests on the basis of our overriding legitimate interest (legal basis for data processing is Article 6(1f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to continue processing your data (with the exception of direct marketing; in this case, we will comply with your objection immediately) if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. This shall not affect any further-reaching rights of data subjects.
Use of our website for information purposes
We use an external service provider to host our website. Any personal data that is recorded on this website will be stored on the host’s servers. This mainly includes IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website access and other data generated via a website.
Use of a host is in the interest of the secure, fast and efficient provision of our website (Art. 6 (If) GDPR). Our host will only process your data to the extent required to fulfil his service obligation within the scope of contractual duties and directives. We are using Mittwald CM Service GmbH und Co.KG as the host. We have concluded a contract with the host for job processing in accordance with Art. 28 GDP
If you want to use our website for purely informational purposes, it is generally not necessary for you to provide personal data. Rather, in this case, when you access our website, we only record the data that your Internet browser transmits to us automatically, such as:
- your computer’s IP address
- date and time of access
- your browser type, browser version and browser settings
- the operating system used (Windows, iOS, Linux, etc.)
- the volume of data transferred and the status of transfers
- the website from which you accessed our website
- other similar data and information used to defend against attacks on our information technology systems.
This is usually done by using log files. The purpose of the processing is to ensure the functionality and compatibility of our website so that it can be used without any technical problems, including troubleshooting, as well as to protect against technical attacks and misuse. The legal basis for this processing is our legitimate interest according to Article 6(1f) GDPR. Our legitimate interest lies in the due and proper operation of our website. The log file data is erased when it is no longer necessary for the purpose of processing.
Use of our website for further services
If you make use of further services offered by our company via our website, it may be necessary for you to provide personal data for this purpose. The personal data required for the provision of the service is specified in the relevant input mask or application. You can enter further information voluntarily. You can see which information is required and which is voluntary by the fact that the mandatory information is marked with an asterisk (*) or with the note "Mandatory field". Your data will be processed solely for the purpose of providing the service you requested. You will find the legal basis for the processing of your personal data, as well as information on when your personal data will be erased, in the description of the specific services.
On our website, we offer you the option of contacting us using a contact form. The personal data that you provide as a result of contacting us via a contact form is only processed for the purpose of processing your contact enquiry made via the contact form. This data is only transmitted to third parties if this is necessary to process your contact enquiry. The legal basis for this processing is Article 6(1b) GDPR. Your personal data will be erased when it is no longer required to fulfil the purpose of your contact enquiry. We would like to point out that your messages may have to be stored in line with statutory retention obligations. In this case, the legal basis is Article 6(1c) GDPR.
Contact by e-mail
On our website, we offer you the option of contacting us by e-mail. Please note that unencrypted communication via e-mail is not secure. It is impossible to rule out a scenario in which data transmitted in this way may be read, copied, altered or erased by unauthorised individuals. The personal data that you provide as a result of contacting us by e-mail is only processed for the purpose of processing your e-mail enquiry. This data is only transmitted to third parties if this is necessary to process this contact enquiry. The legal basis for this processing is Article 6(1b) GDPR. Your personal data will be erased when it is no longer required to fulfil the purpose of your contact enquiry. We would like to point out that your messages may have to be stored in line with statutory retention obligations. In this case, the legal basis is Article 6(1c) GDPR.
If you wish to subscribe to our newsletter, we require, in addition to your e-mail address, confirmation that you are the owner of the e-mail address provided and that you agree to receive the newsletter. This data is only collected for the purpose of being able to send you the newsletter and to document our authorisation to do so. The following data will also be collected when you subscribe:
- IP address of the accessing computer
- Date and time of subscription
For the purposes of processing the data, your consent is obtained during the subscription process and reference is made to this data privacy statement. The legal basis for processing is Article 6(1a) GDPR. The logging of the subscription process is based on our legitimate interests pursuant to Article 6(1f) GDPR and serves as proof of your consent to receive the newsletter. You are free to unsubscribe from the newsletter with effect for the future at any time. Your personal data will be erased when it is no longer required to fulfil the purpose.
We have protected our website and other systems by taking technical and organisational measures to protect us against the loss, destruction, modification or distribution of, or access to, your data by unauthorised individuals. In particular, your personal data provided in the contact form will be transmitted in encrypted form. We use the TLS 1.3 (Transport Layer Security) coding system for this purpose.
You can find more information on the individual cookies and their purpose in our privacy settings.
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. ("Google"). Google Analytics uses “cookies” which are stored on your computer and allow your use of the website to be analysed. As a rule, the information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. This means that Google will first of all shorten your IP address in member states of the European Union or other signatory states to the European Economic Area (EEA) treaty. Only in exceptional cases will your full IP address be transferred to a Google server in the US and truncated there. On behalf of the website provider, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website provider. The IP address transmitted by your browser in connection with Google Analytics will not be merged with other Google data. You can set your browser software to prevent cookies from being saved. Please note that if you do so, however, you might not be able to use all of the functions offered by this website. You can also prevent Google from storing data relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in from the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser plug-in, you can prevent data being collected by Google Analytics by clicking on the following link. An opt-out cookie will be stored which prevents the collection of your data for future visits to this website:
Please note that the code “gat._anonymizeIp();” has been added to Google Analytics on this website so that IP addresses can be recorded anonymously.
The legal basis for the processing of personal data using cookies is Article 6(1a) GDPR.
We maintain publicly accessible profiles on social networks. Details on the social networks we use can be found below.
Social networks like Facebook, etc. can generally analyse your user behaviour extensively when you visit their website or a website with integrated social media content (e.g. “Like” buttons or advertising banners). Visiting our social media sites triggers numerous processing operations relevant to data protection. In detail:
If you are logged into your social media account and visit our social media site, the operator of the social media portal can assign this visit to your user account. Your personal data may, however, be collected even if you are not logged in or do not have an account with the social media portal concerned. In this case, the data is collected, for example, via cookies that are stored on your end device or by recording your IP address.
The data collected in this way allows the operators of the social media portals to create user profiles in which your preferences and interests are stored. This means that interest-based advertising can be displayed to you both on and outside of the social media site concerned. If you have an account with the social network in question, the interest-based advertising may be displayed on all devices on which you are, or were, logged in.
Our social media sites are intended to ensure that we have an informative presence on the Internet. This represents a legitimate interest within the meaning of Article 6(1f) GDPR. The analysis processes initiated by the social networks may be based on different legal grounds which must be specified by the operators of the social networks (e.g. consent within the meaning of Article 6(1a) GDPR).
Controller and assertion of rights
If you visit one of our social media sites, we are jointly responsible, together with the operator of the social media platform, for the data processing operations triggered during this visit. In principle, you can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the social media portal concerned.
Please note that despite our joint responsibility with the social media portal operators, we do not have full influence over the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the provider concerned.
The data collected directly by us via the social media site will be erased from our systems as soon as the purpose for storing it no longer applies, you request us to erase it, revoke your consent to its storage, or if the purpose for storing the data no longer applies. Cookies that have been saved remain on your end device until you delete them. Mandatory statutory provisions – in particular retention periods – remain unaffected.
Social networks in detail
Further functions and contents
If we use further functions and content (e.g. map or font services) on our website via which we, or the provider of the services, process(es) personal data concerning you, we inform you accordingly here.
External "Google Fonts" fonts are used on our website. Google Fonts is a service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland. Within this context, your browser also passes on personal data to Google LLC. in the US. The legal basis for the data processing is Article 6(1a) GDPR. You can find more information about data processing by Google here: https://www.google.com/policies/privacy/
Our website uses a service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter referred to as: ggpht). Within this context, your browser also passes on personal data to Google LLC. in the US. The legal basis for the data processing is Article 6(1a) GDPR. You can find more information about data processing by Google here: https://www.google.com/policies/privacy/
You can prevent the collection,as well as the processing, of your data by unpkg by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery.com).
Google Tag Manager
This website uses "Google Tag Manager". Google Tag Manager is a tool for managing website tags. The tool is a cookieless domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been applied at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager (http://www.google.de/tagmanager/use-policy.html ).
The legal basis for the data processing is Article 6(1a) GDPR.
Recipients and data transmission
We have bundled certain data processing operations within our company. They can be carried out centrally by our individual divisions, e.g. for processing enquiries. External contractors and service providers (e.g. logistics companies or IT service providers) may also be used to ensure our tasks and the fulfilment of contracts. In addition, data may be sent to recipients to whom we are obliged or entitled to disclose data due to contractual or statutory obligations or on the basis of your consent.
On our website, we use links to other interesting company sites that we maintain in order to inform you, for example, about current company events or attractive career opportunities within our company.
100 years of Pfisterer
At https://100years-pfisterer.com/en/, you can find information about current and future topics in the energy sector and about the solutions at PFISTERER based on our one hundred years of experience.
We operate an application portal at https://pfisterer.mhm.jobs/accounts/sign_in with the help of the service provider MHM HR GmbH, Presselstrasse 25 a, 70191 Stuttgart. We have concluded a contract data processing contract with the service provider in accordance with Article 28 GDPR. You can find more information on data processing in the context of your application via our application portal at https://pfisterer.mhm.jobs/privacy_policy/19
Data transfer to third countries
Data will only be transferred to third countries (countries outside the EU and the European Economic Area (EEA)) if this is necessary for the execution of a contract/order/business relationship, including the initiation thereof, or if it is permissible due to our legitimate interest or your consent, and only in compliance with the data protection requirements that apply for this purpose.
Note on data transfer to the US
Services from companies based in the US are integrated into our website. In the context of the use of these services, personal data may be transmitted to US servers of the service providers concerned. We would like to point out that the US is not a safe third country within the meaning of EU data protection law. US companies are obliged to surrender personal data to security authorities without you as a data subject being able to take sufficient legal action against this. As a result, it is impossible to completely rule out a scenario in which US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for surveillance purposes. We cannot exert any influence over these processing activities.
Erasure of your data
We only process your personal data for as long as is necessary to fulfil the purpose concerned or until there is no longer any legal basis for the processing (e.g. revocation of consent to data processing). We observe the existing statutory retention and storage deadlines in the process.
You have the right:
- to receive information free of charge about the personal data we have stored about you (right to information)
- to request confirmation as to whether we are processing personal data relating to you (right to confirmation)
- to demand that we erase the personal data relating to you without delay, provided that the processing is no longer necessary and the other requirements for erasure set out in the GDPR are also met (right to erasure)
- to demand the immediate densification and completion of inaccurate personal data concerning you (right to rectification)
- to request the restriction of the processing of your personal data (right to restriction of processing)
- to receive the personal data concerning you in a structured, commonly used and machine-readable format (right to data portability)
- to object to the processing of your personal data (right to object)
- You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you (right to individual decision-making).
- to revoke your consent to the processing of your personal data at any time with effect for the future.
- to lodge a complaint with the supervisory authority responsible for data protection if you believe that the processing of personal data concerning you violates the GDPR (right to lodge a complaint).
For further information on your rights, please contact our Data Protection Officer.
Amendments to our data privacy statement
In order to ensure that our data privacy statement always reflects the latest statutory requirements, we reserve the right to amend it at any time. This also applies in the event that the data privacy statement has to be adapted due to new or revised services. The new data privacy statement will then take effect the next time you visit our website.