Home » Privacy policy

Privacy policy

Riscreen values your privacy. We therefore believe in handling personal information with due care.
Our company processes this data on the basis of the provisions of the European Data Protection Regulation (DSGVO) and the German Data Protection Act (BDSG). See below for a description of data processed during your stay on our website and during the course of a potential business relationship.

Please note: What data is collected during the use of our website and, if applicable, processed by us or third parties depends on the services you request or use.

Controller

Controller for the processing of your data within the meaning of the General Data Protection Regulation pursuant to Art. 4 (7) DSGVO (GDPR) and other national data protection laws of the Member States, including other data protection provisions, is RISCREEN GMBH.

RISCREEN GMBH
Türltorstr. 4
85276 Pfaffenhofen

Phone: +49 8441 47706-0
Fax: +49 8441 47706-20

e-mail: contact (a) riscreen.de

Contact details data protection officer

If you have any questions regarding the processing of your personal data, or if you have any suggestions or complaints, you can contact our data protection officer. We recommend that you send confidential information by post only.

For example, you can send questions to our data protection officer via the following e-mail address: datenschutz (a) riscreen.de.

What happens to your data and what data is collected?

We enable you to visit our website without revealing your identity. During your visit to our website, data is only processed to the extent technically necessary. This is necessary to be able to display the website. This involves the following information:

  • IP address
  • Server log data

This information is not associated with any other information.

We process your data for the following purposes and legal grounds.

Due to a contractual basis according to Art. 6 (1) lit. b DSGVO

As part of the contract creation process, various processes are run through that require data processing operations. This also applies to processing operations that are required to carry out pre-contractual measures. Here, Art. 6 (1) lit. b) DSGVO serves as the legal basis. This includes, for example

  • Preparing, negotiating and fulfilling a contract with you
  • Answering enquiries and carrying out pre-contractual measures

Based on consent according to Art. 6 (1) lit. a DSGVO

Insofar as consent has been given by the data subject for specific purposes for processing operations of personal data, Art. 6 (1) lit. a) DSGVO serves as the legal basis. This requires the lawfulness of this processing on the basis of consent. The consent given can be revoked at any time with effect for the future. Your revocation only takes effect for the future. Processing that took place before the revocation remains unaffected by this.

Within the framework of a balancing of interests according to Art. 6 (1) lit. f DSGVO

The processing of your personal data takes place exclusively in order to be able to guarantee the operation of our website. In addition, the processing could be necessary to protect a legitimate interest of RISCREEN GMBH or of third parties and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest. The following legitimate interests are possible:

  • Prevention and investigation of criminal offences
  • Trouble-free provision of our website
  • Analysis of website visitors (anonymised web audience analysis by WP Statistics)
  • Ensuring IT security, if necessary defence against cyberattacks
  • Enforcement of legal claims
  • Investigation of legal offences

Disclosure of data to third parties

Your personal data, if collected (for technically necessary reasons), will only be processed within the scope of the possible legal grounds described above. Our website is not hosted on our own servers. We use European web hosts for this purpose. Data transfers of your personal data do not take place without your consent. Exceptions to the transfer of data to external recipients are legal reasons or obligations (e.g. by law/judgment) or for the prosecution of illegal, in particular fraudulent, actions by users, as well as data required for the operation of the website.

Retention period of data

Your data will generally be stored for the duration of the contractual relationship existing with you or with your employer, or as required for the provision of our offer and the associated services.

Your data will be deleted after expiry of the statutory or contractual periods – for example, retention periods under tax or commercial law or periods resulting from other statutory or legal reasons. Other data that is not subject to the retention obligation will be deleted once the described purpose and/or justified retention periods no longer apply.

Our website contains links to websites of third parties or to other websites.


Our website contains links to third-party websites or to other websites under the responsibility of these companies. When you follow a link to a website outside Riscreen’s responsibility, please be aware that these third party websites have their own privacy policies and that Riscreen does not accept any responsibility or liability for these policies. Please check their privacy policies carefully before submitting any personal information to them.

External links are clearly marked for you with the following symbol:

As soon as you proactively click on this link, data will be transferred to the websites of third parties.

No need to provide data

In order to use our website, you only need to provide those personal data (for details of the data, see: What happens to your data or what data we collect) which is necessary for the operation of the website and which Riscreen GmbH is legally obliged to collect.

Any further provision of personal data is voluntary on your part. If further (personal) data is collected from you, this data is not collected by us because it is not necessary for the use and provision of our website. As soon as third-party providers want to collect or process further data from you, we have no influence on this. We refer you to the operators of the external links and their data protection declarations. Riscreen assumes no responsibility or liability for the websites of third parties.

Appearances in social media

To increase our reach, we operate publicly accessible profiles in social networks. Social networks such as LinkedIn or Xing can generally analyse your user behaviour comprehensively as soon as you visit their website. Visiting our social media presences also triggers numerous processing operations relevant to data protection.

In this context, we process your data in order to be able to contact you in response to your enquiries or posts. This is a legitimate interest (Art. 6 para. 1 lit. f) DSGVO). The analysis processes initiated by the social networks may be based on different legal grounds, which are to be stated by the operators of the social networks.

If you are logged into your account of a social media and visit our social media site, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective network portal. In this case, this data collection takes place, for example, through the collection of your IP address by the social media portal and/or through cookies, which are not set by us but by the social network, which are stored on your terminal device. With the help of the data collected in this way by the social media providers, the operators of the network portals can create user profiles in which your preferences and interests are stored.

Please note that we are not able to track all processing procedures on the network portals. Depending on the provider, further processing operations may be carried out by the operators of the social network portals. For example, you may be shown interest-related advertising on the social network portal but also on other sites. Details on this can be found in the terms of use and data protection declarations of the respective social network portals.

When visiting our social media presences, both we and the platform operator are jointly responsible for certain processing operations relating to our specific presence. You can therefore assert your data subject rights against both our company and the platform operator (e.g. LinkedIn, Xing, …). Please note that despite the joint responsibility in some cases, we do not have full influence on the data processing operations of the network portals. Our options are largely determined by the corporate policy of the respective provider. This also applies, for example, to the retention of personal data. While we delete this collected data after the purpose of the processing no longer applies, the revocation of consent, a request to delete data or the legal basis for the data storage no longer applies, we have no influence on the storage of your data that platform operators have collected and process for their own purposes. In this regard, we refer you to the operators of the social networks.

Recruiting and applicant management


On the basis of Art. 88 DSGVO in conjunction with. §26 BDSG, we process your personal data in order to check your suitability for a position (or, if applicable, for other open positions in our company) and to carry out the application procedure. This check is only carried out insofar as it is necessary for the decision on the establishment of an employment relationship with us. For the sole purpose of processing the application, your personal data will always be treated confidentially, i.e. it will only be used for the purpose of recruiting, recruiting and drawing up an employment contract as well as to support the internal allocation of positions. In the course of this, it is imperative that employees of the personnel department of the respective department have access to your personal data. Should the data be required for legal prosecution after completion of the application process, data processing may be carried out on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO. Our interest then consists in asserting or defending claims. The data of your application to a job advertisement will be deleted after 6 months at the latest in the event of rejection.

In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted at the latest two (2) years after the last contact. You have the right to revoke this consent at any time with effect for the future.

If you are awarded a position during the application process, your data will be transferred to a personnel file.

As a matter of principle, we do not pass on any of your applicant data to external (personnel) service providers. However, there may be a legal obligation to pass on the data in accordance with Art. 6 para. 1 sentence 1 lit. c) DSGVO.

In exceptional cases (e.g. reimbursement of costs within the application process), we will only pass on your data on the basis of your consent (e.g. to our bank).

After receipt of your application, your applicant data will be viewed by the responsible personnel officer. Suitable applications are then forwarded internally to the person responsible for the respective open position. The further procedure is then coordinated. Within RISCREEN GMBH, your data will only be accessed by those persons who require it for the proper conduct of our application process.

Rights of the persons concerned

Right to information, correction or deletion of data

The General Data Protection Regulation grants the right to obtain written information about which data about your person (e.g. name, address, …) is stored at any time upon request and free of charge (pursuant to Article 15 DSGVO). Likewise, the GDPR grants a correction (according to Article 16 GDPR) or deletion (according to Article 17 GDPR) of the corresponding data within the framework of the legal requirements.

In the case of stored data on business processes, for example, the right to deletion expires and this data is subject to the legal obligation to retain it.

Right to restriction of data processing

You have the right to restrict the processing of your personal data (in accordance with Art. 18 DSGVO).

Right to object

Furthermore, for reasons of a special situation, you may have the right to object at any time to data processing that we carry out to protect a legitimate interest.

Further processing of your data will then cease, unless there is evidence of legally regulated compelling reasons worthy of protection for further processing.

Right to data portability

Upon request, we also guarantee the portability of the personal data transmitted by you by providing it in a common and machine-readable data format (in accordance with Article 20 DSGVO).

Withdrawal of consent

The GDPR also grants you the right to revoke your consent to the processing of your personal data, which you have given us for one or more specific purposes, at any time with future effect.

Due to the explicit effect exclusively in the future, the permission and thus the lawfulness of the processing of your data remains unaffected until the revocation.

Complaint

You have the right to contact us or the competent supervisory authorities in the event of complaints regarding the processing of your personal data. It is up to you to decide whether to contact the data protection authority responsible for your place of residence or your federal state or the data protection authority responsible for us:

Bavarian State Office for Data Protection Supervision
PO Box 1349
91504 Ansbach
Telephone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
E-mail: poststelle (a) lda.bayern.de