Data security

Dear Visitor to our Internet portal,

In order to ensure that you feel secure and at ease, below we would like to inform you about how we handle your data. Data protection in the SALT AND PEPPER Group conforms to regulatory data protection rules and is therefore subject to change. That is why we kindly request that you consult this page again at regular intervals concerning the latest version.

1. Controller
The controller responsible for the described data collection and processing is named in the imprint.

2. Storage of Your IP address
We store the IP address transmitted by your web browser for a period of seven (7) days, strictly for the purpose of identifying, restricting and eliminating attacks on our website. After seven (7) days, we delete or anonymize your IP address. The legal basis for the processing of this personal data is provided for in Art. 6 para. 1 s. 1 lit. f GDPR.

3. Usage Data
When you visit our website, the data collected from the use of the website is temporarily stored on our web server for statistical purposes in order to improve the quality of our website. This data set contains:

  • the page, from which the data is requested
  • the name of the data file,
  • the date and time of the query,
  • the amount of data transferred,
  • the access status (file transmitted, file not found),
  • a description of the type of browser used,

the IP address of the requesting computer shortened to such an extent that no reidentification of any persona data is possible.

The listed usage data is stored anonymously.

4. Data Transfer to Third Parties
Your personal data is not disclosed to third parties other than for the purposes specified below. We only disclose your personal data to third parties if:

  • You have provided your express consent for this purpose (Art. 6 Sect. 1 Subsect. 1 a GDPR),
  • the disclosure is for establishing, exercising or defending legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data (Art. 6 Sect. 1 Subsect. 1 f GDPR),
  • in the event that a legal obligation exists for the disclosure according to Art. 6 Sect. 1 Subsect. 1 c GDPR or
  • this is legally permissible and required for the settlement of contractual relationships with you (Art. 6 Sect. 1 Subsect. 1 b GDPR).

5. Cookies
We use cookies on our website. Cookies are small pieces of data that are stored and read in your end-device. A distinction is made between session cookies, which are deleted when you close your browser, and permanent cookies, which are stored even after your visit has expired. Cookies may contain data that enables the recognition of the device being used. However, in some cases cookies only contain information on certain settings which are not personal data.

We use session cookies and permanent cookies on our website. The data is processed in accordance to Art. 6 para. 1 s. 1 lit. f GDPR and in the interest of optimizing or enabling user guidance and improving our website presence.

Please be aware that you can set your browser to inform you when cookies are being stored or used on the website you are visiting. Thus, any use of cookies is transparent to you. You have the possibility to delete your browser configuration at any time and prevent any use of new cookies.  In the event you refuse the use of cookies, please note that our web sites may not be displayed optimally and some functions are then no longer technically available.

Google Analytics

In order to structure our websites as needed, we use the web analysis tool, "Google Analytics". Google Analytics creates usage profiles on the basis of pseudonyms. For this purpose, permanent cookies are stored on your user device and read out by us. This enables us to identify recurring visitors and to count them as such.

Data processing occurs on the basis of your consent pursuant to Art. 6 Abs. 1 Subsect. 1 a GDPR, to the extent you have provided your consent via our banner.

You can withdraw your consent at any time. To do so, please follow this link and adjust the relevant settings via our banner.

Within the scope of Google Analytics, Google supports us as a processor according to Art. 28 GDPR. In this, the data processing may also occur outside the EU or the EEA. With respect to Google, one can assume a reasonable level of data protection pursuant to Art. 46 Sect. 2 lit c GDPR through the adoption of EU standard contractual clauses.

Google Ads

We use the Google advertising tool Google Ads conversion from Google, Inc. to advertise our website.

A cookie is placed on your computer if you accessed our website via a Google ad. These conversion cookie expires after 30 days and is not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, we and Google may recognize that you as a user have clicked one of our ads placed through Google and have been redirected to our page.

The information collected with conversion cookies is used by Google to generate statistics on traffic on our website. These statistics show us the total number of users who clicked our ad and also which pages of our website were then accessed by the respective user. However, we or other advertisers via Google Ads do not receive any information with which users can be personally identified. These purposes also represent a legitimate interest in accordance with Article 6(1)f of the General Data Protection Regulation.

You can learn how you can prevent the installation of Google conversion cookies at: https://policies.google.com/technologies/ads. Further explanations on cookies and Google’s privacy protection policy can also be found at: https://www.google.de/policies/privacy/.

Facebook Pixel

a. Facebook Custom Audiences (pixel method)

This website uses the "Facebook Custom Audience" by placing a pixel of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). If explicit consent is given, this can be used to track the behavior of users after they have viewed or clicked on a Facebook ad. This process is used to evaluate the effectiveness of  Facebook ads for statistical and market research purposes and may help optimize future advertising efforts.

The data collected is anonymous to us and does not provide us with any information about the identity of users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Guidelines ( https://www.facebook.com/about/privacy/ ). This enables Facebook and its partners to place advertisements outside Facebook. A cookie is stored on your computer for these purposes. These processing operations are carried out exclusively with the express consent of the user in accordance with Art. 6 Para. 1 lit. a DSGVO. Consent to the use of the Facebook pixel may only be given by users who are older than 13 years of age. If you are younger, we ask you to ask your legal guardian for permission. With respect to Facebook, one can assume a reasonable level of data protection pursuant to Art. 46 Sect. 2 lit c GDPR through the adoption of EU standard contractual clauses.

In order to deactivate the use of cookies on your computer, you can set your Internet browser so that cookies can no longer be stored on your computer in the future or cookies that have already been stored are deleted. Disabling all cookies may, however, mean that some functions on our Internet pages can no longer be executed. Please click here if you do not wish data to be collected via custom audiences: http://www.aboutads.info/choices/=ads#_=_You can also deactivate the use of cookies by third parties such as Facebook on the following website of the Digital Advertising Alliance:

http://www.aboutads.info/choices/

b. Facebook Conversion Pixel

We use the "conversion pixel" or visitor action pixel of Facebook Inc.,

1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). By accessing this pixel from your browser, Facebook can then recognize whether a Facebook ad was successful, e.g. whether it led to a contract being concluded. We only receive statistical data from Facebook for this purpose without reference to a specific person. This enables us to record the effectiveness of Facebook advertisements for statistical and market research purposes. These processing operations are carried out exclusively when express consent is granted in accordance with Art. 6 Para. 1 lit. a DSGVO. Consent to the use of the Facebook pixel may only be given by users who are older than 13 years of age. If you are younger, we ask you to ask your legal guardian for permission. With respect to Facebook, one can assume a reasonable level of data protection pursuant to Art. 46 Sect. 2 lit c GDPR through the adoption of EU standard contractual clauses.

In order to deactivate the use of cookies on your computer, you can set your Internet browser so that cookies can no longer be stored on your computer in the future or cookies that have already been stored are deleted. Disabling all cookies may, however, mean that some functions on our Internet pages can no longer be executed.

In particular, if you are logged on to Facebook, we refer you to their data protection information https://www.facebook.com/about/privacy/ Please click here if you wish to revoke your consent to Conversion Pixel: https://www.facebook.com/settings?tab=ads#_=_=ads#_=_ . Alternatively, you can deactivate Facebook Pixel on the Digital Advertising Alliance page at the following link: http://www.aboutads.info/choices/

6. Contact form

You have the opportunity to enter into contact with us via a web form. In order to use our contact form, we require your name and your e-mail address. You may provide us with addition details, but you are not required to do so.

The legal ground for processing is Art. 6 Sect. 1 lit. f GDPR. Your data are only processed in order to answer your enquiry and are erased upon completed handling. There is no forwarding to third parties.

7. Information for applicants

Compliance with data protection regulations is a high priority for our company. In the following we would like to inform you about the collection and processing of your personal data during the application process:

7.1 Responsible body
For data collection and processing of your application, the company within the SALT AND PEPPER Group where you have applied is the responsible body.

7.2 Purpose and nature of data
During the application, we process data from you that we require within the scope of the application. This may include contact data, all data in connection with the application (CV, certificates, qualifications, replies to queries etc.) as well as data concerning your banking coordinates (for the purpose of reimbursing travel costs).

7.3 Legal basis for data processing
The legal ground for this arises from Art. 26 Federal Data Protection Act.

7.4 Duration of data processing
To the extent that no statutory period of retention exists, the data will be erased as soon as storage is no longer necessary or if the legitimate interest in storage has expired. To the extent that no hiring occurs, this is normally the case no later than six months upon completion of the application process.

In individual cases, longer storage of individual data may occur (e.g. settlement of travel expenses). The duration of storage is then in accordance with statutory duties of retention, e.g. arising from the German Fiscal Code (6 years) or the German Commercial Code (10 years).

To the extent that hiring has not occurred, yet your application continues to be of interest to us, we will ask you whether we may keep your application for filling future positions.

7.5 Confidential treatment of your data
Naturally, we will treat your data confidentially. We only disclose data to third parties to the extent that this is absolutely necessary, and a legal basis exists, e.g. to companies of the SALT AND PEPPER Group for handling the application process. The individual companies have concluded agreements amongst themselves for the purpose of order processing.

Where necessary, we deploy service providers strictly bound to instructions, who assist us, i.e. in the areas of IT or in the archiving and destruction of documents and with whom separate agreements for order processing have in turn been concluded.

8. Information on recruiting
We also process personal data in the area of personnel recruiting. Below, we would like to inform you about the collection of data in this process.

8.1 Responsible body
For data collection and processing within the relevant job, the company within the SALT AND PEPPER Group which is carrying out the respective measure is the responsible body.

8.2 Purpose and nature of data
We participate in trade fairs, engage in active sourcing in social media and job exchanges and organise events and activities. The purpose for this is to recruit personnel. For the fulfilment of this purpose, it is necessary to process your data. The processing may include contact data and data required to substantiate an application process (CV, letters of reference, certificates, qualifications, replies to queries, etc.). To the extent that we have not obtained the data from you but rather from another source, we shall inform you about the data processing within a reasonable period, depending on the circumstances of the case.

8.3 Legal basis for data processing
In connection with our legitimate interest in implementing an application process, the legal basis arises from Art. 6 Sect. 1 Subsect. 1 f) GDPR. 

8.4 Duration of data processing
To the extent that no statutory period of retention exists, the data will be erased as soon as storage is no longer necessary or if the legitimate interest in storage has expired.

To the extent that you have no interest in initiating further contact, we will promptly erase any data we have received up to that time. In doing so, however, we assume that we are allowed to store your name further with a note stating that you no longer wish to be contacted by us in the future. This reduces the likelihood that we will contact you again in the course of recruiting. To the extent this is not your wish, please inform us accordingly. To the extent you are interested in working for our company, this is subject to regulations concerning the duration of data processing in the application process.

8.5 Confidential treatment of your data
Naturally, we will treat your data confidentially. We only disclose data to third parties to the extent that this is absolutely necessary, and a legal basis exists, e.g. to companies of the SALT AND PEPPER Group for handling the recruiting process. The individual companies have concluded agreements amongst themselves for the purpose of order processing.

Where necessary, we deploy service providers strictly bound to instructions, who assist us, i.e. in the areas of IT or in the archiving and destruction of documents and with whom separate agreements for order processing have in turn been concluded.

9. Information for contact persons of customers, prospects and suppliers
We wish to inform you below about the processing of your personal data in our company within the business relationship or the prospective business relationship with your employer.

9.1 Responsible body
The company within the SALT AND PEPPER Group is the responsible body with whom the contractual relationship or prospective contractual relationship exists.

9.2 Purpose and nature of data
We process the orders of our customers, enlist new customers, and solicit offers and information from suppliers. The purpose is to carry out and administer business. For the fulfilment of this purpose, it is necessary to process the personal data of you as the contact person. The data processed may include business contact data (organisation, position, name, business postal address, business e-mail address, business phone or cell phone number). To the extent that we have not obtained the data from you but rather from another source, we shall inform you about the data processing within a reasonable period, depending on the circumstances of the case.

9.3 Legal basis for data processing
In connection with our legitimate interest in implementing the contractual relationship, the legal basis arises from Art. 6 Sect. 1 Subsect. 1 b) and f) GDPR.

9.4 Data erasure
To the extent that no statutory period of retention exists, the data will be erased as soon as storage is no longer necessary or if the legitimate interest in storage has expired.

A legitimate interest exists hereby as long as a business relationship exists to your employer. Should we learn that you are not longer the contact person for the business relationship, we will also erase your data.

9.5 Confidential treatment of your data
Naturally, we will treat your data confidentially. We only disclose data to third parties to the extent that this is absolutely necessary, and a legal basis exists, e.g. to companies of the SALT AND PEPPER Group for processing of the agreement. The individual companies have concluded agreements amongst themselves for the purpose of order processing.

Where necessary, we deploy service providers strictly bound to instructions, who assist us, i.e. in the areas of IT or in the archiving and destruction of documents and with whom separate agreements for order processing have in turn been concluded.

10. Your Rights as a User
As a website user, the GDPR grants you certain rights when processing your personal data.

10.1 Right of access (Art. 15 GDPR):
You have the right to obtain confirmation at to whether or not personal data concerning you is being processed, and, where that is the case access to the personal data and the information specified in Art. 15 GDPR.

10.2 Right to rectification and erasure (Art. 16 and 17 GDPR):
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the right to have incomplete personal data completed.

You also have the right to obtain an erasure of the personal data concerning you without undue delay, if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer necessary for the intended purpose.

10.3 Right to restriction of processing (Art. 18 GDPR):
If one of the conditions set forth in Art. 18 GDPR applies, you shall have the right to restrict the processing of your data to mere storage, e.g. if you revoke consent, to the processing, for the duration of a possible examination.

10.4 Right to data portability (Art. 20 GDPR):
In certain situations, listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or demand a transmission of the data to another third party.

10.5 Right to object (Art. 21 GDPR):
If the data is processed pursuant to Art. 6 para. 1 s. 1 lit. f GDPR (data processing for the purposes of the legitimate interests), you have the right to object to the processing at any time for reasons arising out of your particular situation. We will then no longer process personal data, unless there are demonstrably compelling legitimate grounds for processing, which override the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising or defending legal claims. 

10.6 Right to lodge a complaint with a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider the processing of the data concerning you infringes data protection regulations. The right to lodge a complaint may be invoked in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

11. Questions about data protection
Please contact datenschutz@salt-and-pepper.eu if you have any further questions, suggestions or wishes regarding data protection.