Privacy policy

Information on the handling of personal data

We are very pleased about your interest in our website - and thus in our company. The protection of your private rights and freedoms is very important to us; we only use your data for the purposes intended. Since it is important to us that you are aware at all times of the extent to which we collect, use and, if necessary, transfer your data to third parties, we will provide you with the following comprehensive information on the processing of your personal data collected by us or stored by us.

Visiting our website is generally possible without providing (personal) data; if there are exceptions to this for selected services, we will explain these in the following chapters. When processing personal data, we strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR) and any other data protection regulations.

Name and address of the controller

Goldschmidt Holding GmbH
Dr.-Ing. Georg Friberg (CEO), Sebastian Kanz (CFO)
Hugo-Licht-Straße 3
04109 Leipzig
Germany

E-mail: info@goldschmidt.com
Website: https://goldschmidt.com

Name and address of the data protection officer

Jörg ter Beek
Cortina Consult GmbH
Hafenweg24
48155 Münster
Germany


Data protection team for general data protection inquiries:
Team e-mail: dsb.goldschmidt@cortina-consult.de
Website: https://cortina-consult.de

Actuality of the privacy policy

To ensure that we always have up-to-date data protection information in connection with the services of our website, we use the CLOUD DSE service of Cortina Consult GmbH, Hafenweg 24 in 48155 Münster. In this process, the contents of our privacy policy are hosted on the servers at Cortina Consult and managed centrally. Necessary changes are implemented promptly by Cortina Consult and immediately displayed via direct integration on our website.

Rights of data subjects

The EU General Data Protection Regulation (GDPR) provides for extensive rights for data subjects in Chapter III, which we explain to you accordingly below with regard to the processing of your personal data:

Right to information

This requirement concerns in particular information on the following details of data processing:

  • Processing purposes
  • Data categories
  • Recipients or categories of recipients, if applicable
  • If applicable, the planned storage duration or the criteria for determining this duration.
  • Note on the respective right of correction, deletion, restriction or objection
  • Existence of the right to complain to a supervisory authority
  • If applicable, origin of the data (if not collected from you)
  • If applicable, existence of automated decision-making including profiling, including meaningful information about the logic involved, the scope and the effects to be expected
  • If applicable, (planned) transfer to a third country or international organization
Right to rectification

We will correct any erroneous data immediately, provided that you inform us of the circumstance accordingly.

Right to erasure (right to be forgotten)

Provided that the processing is no longer necessary and one of the following conditions is met:

  • Discontinuation of the purpose of processing
  • Withdrawal of their consent and absence of any other legal basis for processing
  • Objection to processing without an important reason to the contrary
  • Unlawful processing
  • Required to fulfill a legal obligation
  • Data collection was carried out in accordance with Art. 8 (1) GDPR
Right to restriction of processing

Provided that one of the following conditions is met:

  • You dispute the accuracy of your data (restriction can be made for the duration of the review on our side)
  • In the event of unlawful processing and if the data is not to be deleted, restriction of processing shall take the place of deletion
  • If the processing purposes cease to apply, at the same time you need your data for the assertion, exercise or defense of legal claims
  • After you have lodged an objection pursuant to Art. 21 (1) GDPR and for the duration of the examination as to whether our legitimate reasons outweigh yours.
Right to data portability

If it is technically possible and does not affect the rights and freedoms of other persons, we will - at your request - transfer your data to another recipient (responsible party).

Right to object

If we collect or have collected and process personal data from you (on the basis of Art. 6 (1) e or f or Art. 9 (2) a GDPR), you have the right to object to the data processing (including profiling) at any time (with effect for the future). In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling interests worthy of protection for the processing that outweigh your interests or processing serves the assertion, exercise or defense of legal claims. If we process your personal data for the purpose of direct marketing, you have the right to object to such processing at any time. This also applies to profiling, insofar as it is related to such direct advertising. You also have the right to object to processing of your data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

Automated decisions in individual cases including profiling

If we collect or have collected and process personal data from you, you have the right not to be subject to any decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. Exceptions to this requirement apply if the decision is necessary for the conclusion or performance of a contract between you and us or you have expressly consented to the processing. In any case, we will take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person on our part, to express our own point of view and to contest the decision.

Right to complain to a supervisory authority

A list of the supervisory authorities responsible in Germany can be found on the website of the Federal Commissioner for Data Protection or at the following link: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.

General information on data processing on the website

The following information applies to the data processing on our website in general. If there are exceptions or additions to this information, these are described in detail in the relevant sections.

Data security information

We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. In addition, we have implemented SSL encryption (SHA256) on our website to protect your data. However, despite regular checks, complete protection against all dangers is not possible.

Our legitimate interest

Our legitimate interest, as defined in Article 6 (1) f GDPR, is based on the performance of our business activities in order to maintain our ability to operate and secure the employment of our employees.

General deadlines for data deletion

After the purpose of storage has ceased, the retention periods are generally at least six or ten years. As a rule, data is deleted immediately in accordance with our deletion concept, provided that this does not conflict with any retention obligation, necessity for contract fulfillment or a legitimate interest.

Deletion or blocking of personal data

We store your personal data only for the period required to fulfill the specified purpose. After the purpose no longer applies and after expiration of any existing retention periods, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.

Collection of general data and information

As soon as you visit our website, our web server collects some general data and technical information - as shown in the table below:

Data collected

Purpose of the survey

browser types and versions usedcorrect display of the page content
Operating system used, visitor origin (referrer, e.g. Google), subpages clicked onOptimization of our website content as well as our advertising
Date and time of access to the website as well as IP address and internet service provider of the visitorEnsuring the permanent functionality of our IT systems (for the operation of the website) and prevention of misuse

Other data and information for security in the event of attacks

Providing relevant information to law enforcement agencies in the event of a cyberattack

Obligation to provide personal data

Under certain circumstances (e.g. due to legal or contractual regulations), an obligation arises for you to provide us with your personal data. Examples of such processing as follows:

Nature or purpose of the processing

Need

Conclusion of a sales contract (e.g. your address)Fulfillment of the contractual obligation (e.g. delivery of the goods to your address)
In the employee context (e.g. transmission of data to the tax office)Compliance with legal requirements (e.g. tax regulations)
Data security information

We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. In addition, we have implemented SSL encryption (SHA256) on our website to protect your data. However, despite regular checks, complete protection against all dangers is not possible.

Information about specific data processing on the website

If applicable, in deviation from or in addition to the above-mentioned general information, you will find details of the individual data processing on our website below.

Borlabs
Purpose of processingSaving the cookie settings of users, compliance with legal obligations.
Legal basisLegal obligation (Art. 6 para. 1 lit. c GDPR)
Recipient (if applicable)Borlabs; Operator: Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany
If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)A data transfer to a third country does not take place and is not planned.
If known: Duration of data storageSee General deadlines for data deletion
Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
Consequences of non-compliance (in case of failure to provide the required data)none
If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
If applicable, origin of the data (if not collected directly from the data subject)The data usually originates from the data subject, but may also originate from third parties.
Where applicable, categories of personal data (if not collected directly from the data subject).Opt-in and opt-out data, IP address, time and type of consent,
Change of purpose if necessarynone
Data protection officer of the providerdatenschutz@borlabs.io
Privacy policy of the providerhttps://de.borlabs.io/datenschutz/
Cookies

We use cookies on this website; these are small text files that are stored on your computer via your internet browser (e.g. Google Chrome, Safari, Firefox, Edge). These cookies are used for various purposes: Many cookies are technically necessary to provide you with certain website functions (e.g. shopping cart functions, saving your login information), other cookies are used for the security of your data or the website and some cookies can be used to analyze your user behavior. The latter cookies may contain a so-called cookie ID - a unique identifier consisting of a character string that enables websites and servers to be assigned to the storing browser.
Cookies that are necessary to carry out the transmission of a message via a public telecommunications network and cookies that are absolutely necessary to provide you with an expressly requested function are referred to as "technically necessary cookies" and may be set without your explicit consent (Section 25 (2) TDDDG). All other cookies are subject to consent (Section 25 (1) TDDDG); where applicable, this is regulated by our consent management platform.
We use cookies in part only for the duration of your visit to the website, in part for a predefined period and in part permanently. You can delete all these cookies manually or automatically at any time via your web browser.
It is possible to use our website (although possibly not to its full extent) without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent.

Contact form
Purpose of processingProcessing and, if necessary, answering the request of the form sender
Legal basis (according to Art. 6 / 9 GDPR)
  • Implementation of pre-contractual measures (Art. 6 para. 1 b)
  • Recipient (if applicable)The data will not be passed on to third parties and/or to a third country.
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityThere is no obligation.
    Consequences of non-compliance (in case of failure to provide the required data)none
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data originates from the person concerned.
    Where applicable, categories of personal data (if not collected directly from the data subject).Data and categories requested in the respective form.
    Change of purpose if necessarynone
    Matomo
    Purpose of processingThis is an open source web analytics service used to analyze user behavior and optimize the website.
    Legal basis (according to Art. 6 / 9 GDPR)
  • Informed consent (Art. 6 para. 1 a)
  • Recipient (if applicable)InnoCraft, 150 Wills St, 6011 Wellington, New Zealand
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)A data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
    Consequences of non-compliance (in case of failure to provide the required data)none
    If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually originates from the data subject, but may also originate from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).

    Browser language, Browser type, Device operating system, Device type, Geographic location, IP address, Number of visits, Referrer URL, Screen resolution, Usage data, Subpages visited.

    Change of purpose if necessarynone
    OptOut<a href="https://matomo.org/privacy-policy/
    Data protection officer of the providerprivacy@matomo.org
    Privacy policy of the providerhttps://matomo.org/privacy-policy/
    YouTube videos
    Purpose of processingThis is a video player service from Google.
    Legal basis (according to Art. 6 / 9 DSGVO)
  • Informed consent (Art. 6 para. 1 a)
  • Recipient (if applicable)Alphabet Inc, Google LLC, Google Ireland Limited
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)If applicable, transfer, storage and processing in the USA, Google LLC

    The data transfer is based on the EU-U.S. Data Privacy Framework via which Google LCC is certified.

    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
    Consequences of non-compliance (in case of failure to provide the required data)none
    If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually originates from the data subject, but may also originate from third parties.
    Change of purpose if necessarynone
    Applications and application procedure
    Purpose of processingApplicant data is collected, processed and used for the purpose of selecting potential employees.
    Legal basis (according to Art. 6 / 9 GDPR)
  • Implementation of pre-contractual measures (Art. 6 para. 1 b)
  • Recipient (if applicable)The data will not be passed on to third parties and/or to a third country.
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Forwarding does not take place and is not planned.
    If known: Duration of data storageThe personal data of applicants whom we do not hire will be stored for the period required for possible legal claims (e.g. under the General Equal Treatment Act (AGG)) (maximum 6 months) and then immediately destroyed or deleted.
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityFor a smooth application process, it is necessary that you provide us with the requested information truthfully.
    Consequences of non-compliance (in case of failure to provide the required data)Failure to do so (i.e. failure to provide the required data) may mean that an employment contract cannot be concluded with you.
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)As a rule, the data originates from the data subject themselves; however, it may also originate from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).Master data, contact data, application data
    Change of purpose if necessaryIf we take you on as an employee after the application process has been completed, the purpose for processing the relevant data will change: in this case, the data will be used in future to implement and maintain the employment relationship.

    Information about specific data processing on our mobile web applications

    In addition to our online offering, we provide you with mobile web applications (e.g., currently "Smartweld", "Smartweld Duo", "Railstraight" and "Goldschmidt Digital", "Dari®", together "Digital Products") that you can download to your mobile device. In doing so, you are also entitled to the rights described here. In addition to the data already mentioned in this data protection declaration, further, possibly also personal data is processed, about which we inform you in the following.

    When downloading the respective web application, the necessary information is transferred to the respective "App Store", i.e. in particular user name, e-mail address and customer number of your account, time of download, payment information and the individual device identification number. However, we have no influence on this data collection and are not responsible for it. We process this provided data insofar as this is necessary for downloading the web application to your smartphone. They are not stored further beyond that.

    The use of the web application "Dari®" is only possible for business customers. The provider releases the web application for the respective business customer, who then activates the use for the respective users.
    If a web application is intended for use with certain hardware, it can only be used in conjunction with a compatible product.

    Personal data may be collected when using the web applications. The recipient of the data and the scope of the data storage result from the respective customer contract. If you have any questions about data storage and use, please contact the department responsible for the web application.

    The mobile web applications does not use cookies.

    Supplementary notes on the digital products

    Goldschmidt Digital App

    Contains information on and ensures access to all digital applications of the Goldschmidt Group by forwarding to the corresponding page in the respective "Play Store".

    Smartweld or Smartweld Duo App

    The camera of your mobile end device is used to record consumables via barcodes (camera scans barcode and determines the material number concerned). To document the location of the weld for the weld log, we need your location. After installing the app, you will be asked if you want to share the location (opt-in). You can affirm or reject this. If you answer in the affirmative, your location will be determined automatically by means of a location service. You can deactivate the automatic location determination at any time. If you reject the access right for location determination, the app cannot be used. During the welding process, time recording data (time stamp) is recorded. Via the e-mail program of your mobile end device, data and logs are saved and exported if necessary. Via Bluetooth, data is transferred between the welding device and your mobile end device.

    Railstraight App

    Via the e-mail program of your mobile end device, data and logs are saved and exported if necessary. Via Bluetooth, data is transferred between the measuring device and your mobile end device. To document the location of the measurement for the measurement data log, we need your location. During the measurement process, data is collected for time recording (time stamp).

    Privacy policy for social media profiles

    Privacy policy for social media profiles

    We are delighted that you are interested in our social media profiles - and therefore in our company. The protection of your private rights and freedoms is important to us; we only use your data for the purposes intended. As it is important to us that you know at all times to what extent we collect, use and, if necessary, transfer your data to third parties, we will inform you in detail below about the processing of your personal data.

    When processing personal data, we strictly adhere to the provisions of the EU General Data Protection Regulation (GDPR) and, if applicable, other data protection-relevant provisions.

    Information about specific data processing on the individual social media profiles

    LinkedIn

    Scope of application

    This privacy policy applies exclusively to our LinkedIn profile. It expressly does not apply to other advertisements linked to our page by LinkedIn or profiles published on our Chronicle. It also does not apply to LinkedIn\'s own content; you can find more information on data protection at LinkedIn here https://www.linkedin.com/legal/privacy-policy.

    Operation of our LinkedIn page

    We may collect personal data for the operation of our LinkedIn page. As a rule, your data is collected and processed in pseudonymized form; this means that we cannot assign your data directly to your name or email address. In this respect, the processing takes place via a profile based on an ID or a cookie. You can have a significant influence on the processing of your data; to do this, simply click on the Settings menu item in your LinkedIn profile

    LinkedIn analytics

    LinkedIn provides us with statistical data about visitors to our LinkedIn page via the "LinkedIn Analytics" function. We cannot establish a personal reference through this. This information is purely functional and helps us to better analyze our site and adapt it to your needs and interests. LinkedIn itself processes this data in a more extensive manner; you can find more detailed information on this at the following link: https://www.linkedin.com/help/linkedin/answer/83597.

    Interaction with LinkedIn page

    As soon as you use a LinkedIn plugin on our website or rate or subscribe to our posts on our LinkedIn page, we can establish the corresponding personal reference. We can also see from which LinkedIn profile the comments on our LinkedIn page originate.

    Service provider for LinkedIn marketing

    If we use service providers for data processing on our LinkedIn page, we conclude corresponding data processing agreements (DPAs) with them. In the course of this, we regulate the scope and security conditions under which the data is processed and define the necessary powers of instruction in accordance with Art. 28 GDPR.

    Joint controllers within the meaning of Art. 26 GDPR

    LinkedIn Ireland Unlimited Company
    Wilton Place
    Dublin 2
    Ireland

    For the operation of our LinkedIn page, we are jointly responsible with LinkedIn for the processing of your personal data.

    Data protection officer of LinkedIn

    You can find LinkedIn\'s privacy policy here: https://www.linkedin.com/legal/privacy-policy.

    To contact LinkedIn\'s data protection officer, you can fill out a contact form at the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO

    Comment function on our LinkedIn page

    We regularly publish news on our LinkedIn page. We have activated the corresponding LinkedIn comment function so that we can enter into an active exchange with you. We reserve the right to remove inappropriate posts (e.g. with racist, illegal or similar content) immediately. For this purpose, all comments are checked for inappropriate content. In doing so, we can see from which LinkedIn profile the respective comment was posted. We have access to

    • the content of the comment
    • the time of creation
    • the user ID
    • the LinkedIn user name

    and can establish a relationship to previous posts and comments. As a rule, this data is not passed on to third parties; in exceptional cases, a legal regulation or a corresponding court order may force us to disclose such data.

    Contacting us

    You can contact us via various channels on our LinkedIn page. Personal data is only collected if you provide it to us voluntarily as part of your contact. We use the data you provide without your separate consent exclusively to fulfill and process your contact request. It will not be passed on to third parties or only on the basis of your request.

    YouTube

    Scope of application

    This privacy policy applies exclusively to our YouTube profile. It expressly does not apply to other advertisements linked to our site via YouTube or profiles published on our chronicle. It also does not apply to YouTube\'s own content; you can find further information on data protection on YouTube here <a target="_blank" rel="" href="https://policies.google.com/privacy?hl=de

    Operation of our YouTube page

    We may collect personal data for the operation of our YouTube page. As a rule, your data is collected and processed in pseudonymized form; this means that we cannot assign your data directly to your name or email address. In this respect, the processing takes place via a profile based on an ID or a cookie. You can significantly influence the processing of your data by simply clicking on this link while logged into your YouTube account: https://myaccount.google.com.

    CREATOR STUDIO: Analytics

    YouTube provides us with statistical data about visitors to our YouTube page via the "CREATOR STUDIO: Analytics" function. We are not able to establish a personal reference. This information is purely functional and helps us to better analyze our site and adapt it to your needs and interests. YouTube itself processes this data in a more extensive manner; you can find more detailed information on this under the following link: <a target="_blank" rel="" href="https://policies.google.com/privacy?hl=de

    As soon as you use a YouTube plugin on our website or rate or subscribe to our posts on our YouTube page, we can establish the corresponding personal reference. We can also see from which YouTube profile the comments on our YouTube page originate.

    Service provider for YouTube marketing

    If we use service providers for data processing on our YouTube page, we conclude corresponding data processing agreements (DPAs) with them. In the course of this, we regulate the scope and security conditions under which the data is processed and define the necessary powers of instruction in accordance with Art. 28 GDPR.

    Joint controllers within the meaning of Art. 26 GDPR

    YouTube LLC
    901 Cherry Ave.
    San Bruno, CA 94066
    USA

    For the operation of our YouTube page, we are jointly responsible with YouTube for the processing of your personal data.

    YouTube\'s data protection officer

    You can find YouTube\'s privacy policy here: <a target="_blank" rel="" href="https://policies.google.com/privacy?hl=de

    To contact YouTube\'s data protection officer, you can fill out a contact form at the following link: https://support.google.com/policies/contact/general_privacy_form

    Comment function on our YouTube page

    We regularly publish news on our YouTube page. We have activated the corresponding YouTube comment function so that we can enter into an active exchange with you. We reserve the right to remove inappropriate posts (e.g. with racist, illegal or similar content) immediately. For this purpose, all comments are checked for inappropriate content. In doing so, we can see from which YouTube profile the respective comment was posted. We have access to

    • the content of the comment
    • the time of creation

    and can establish a relationship to previous posts and comments. As a rule, this data is not passed on to third parties; in exceptional cases, a legal regulation or a corresponding court order may force us to disclose such data.

    Contacting us

    You can contact us via various channels on our YouTube page. Personal data is only collected if you provide it to us voluntarily as part of your contact. We use the data you provide without your separate consent exclusively to fulfill and process your contact request. It will not be passed on to third parties or only on the basis of your request.