Data Privacy Statement

Thank you for visiting our website. In the following, we would like to inform you about the personal data we collect and what happens to this data when you visit our website. Personal data means any data which allows you to be personally identified. With regard to the processing of personal data of data subjects who are in the EU, we also comply with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR). We would also like to inform you about your rights as a data subject under the EU General Data Protection Regulation. With regard to the processing of personal data of data subjects who are in Asia by our subsidiary in China, we comply with the data protection laws applicable there.

URACA GmbH & Co. KG
Managing Director: Mr. Gunter Stöhr
Sirchinger Str. 15
72574 Bad Urach
Tel: +49 (0)7125 / 133 - 0
info@uraca.de

Our data protection officer can be contacted at datenschutz@uraca.de 

1. Scope of processing of personal data
We only process personal data of our users to the extent necessary to ensure the functioning of our website and as required for our contents and services, e.g. when an enquiry is submitted to us using the contact form, for job applications submitted by email, optimisation of the website to tailor it to users’ needs, and for the compilation of usage statistics for marketing purposes.

2. Encryption
To protect confidential contents such as, for example, enquiries that you submit to us as the website operator, this website uses SSL encryption. An encrypted connection can be recognised by the fact that the address bar in your browser changes from http:// to https:// and that a small padlock symbol is shown in the browser line. When this encryption is activated, the data that you submit to us cannot be read by third parties.

3. Provision of the website and creation of log files
Every time somebody visits our website our system automatically collects data and information from the visiting computer. The following data are collected when our website is visited:

The user’s IP address
Information about the browser type
Information about the version of the browser type used
The user’s operating system
The user’s internet service provider
The date and time of access
The website from which the user accessed our website
Websites accessed via our website by the user’s system

These data are stored in the log files of our system. These data are not stored together with other personal data of the user. This data processing is undertaken on the legal basis of our legitimate interests in the analysis of our website and its use in accordance with point (f) of Article 6 (1) of the GDPR, and, where applicable, on the basis of the legal consent to the storage of data within the framework of taking steps prior to entering a contract in accordance with point (b) of Article 6 of the GDPR.

IV. Cookies

Within the framework of our legitimate interests in ensuring that our website provides a trouble-free service in technical terms and in the optimisation of our website in accordance with point (f) of Article 6 (1) of the GDPR, we use cookies on our website to make our service better and more effective and secure. 

Cookies are small text files which are stored on your computer. These can take the form, firstly, of so-called session cookies which are deleted automatically when you leave our website. But there are also cookies which are stored permanently on your computer unless you delete them yourself. This makes it possible for us to recognise that you have already previously visited our website when you visit it again the next time, so that we can tailor our offers specifically to you. You can adjust the browser settings in your browser to prevent the installation of cookies either in general or when visiting specific websites only. However, this could mean that you may no longer be able to use all our website functions. 

We use cookies to make it easier for users to use our website. The cookies are used, for example, for applying language settings and for storing search terms.

1. Email contact

When you submit an enquiry to us by email, we will use your details solely for the purpose of processing your enquiry. These data are never disclosed to third parties. 

At the time of submission our system also saves the following data:
The user’s IP address
The date and time that the user contacts us
We process the data submitted to us in the email on the basis of your consent (point (a) of Article 6 (1) of the GDPR), which you give by submitting your email. You have the right to withdraw your consent at any time. To do so, all you have to do is send us a simple notification by email (no official form is required). The withdrawal of consent shall not affect the lawfulness of data processing activities based on consent before its withdrawal.
The data transferred to us by you remain with us until you request us to erase them, withdraw your consent to allow their storage, or the purpose of storage ceases to apply (e.g. upon completion of the processing of your enquiry). This does not affect mandatory statutory provisions, in particular retention periods.

2. Contact form

When you contact us using the online contact form, we process the details that you provide (such as the company, title, first name, surname, function, department, street, postcode, town/city, email address, telephone number, message) solely for the purpose of answering your enquiry and asking any possible questions in response. The data are transferred in encrypted form and with password protection.

In the carrier section we use the “Prescreen” e-recruiting system (Prescreen International GmbH, Mariahilfer Strasse 17, 1060 Vienna), which is operated under the domain *.jobbase.io, hereinafter referred to as ("jobbase.io"). This system is used by companies to place job adverts and to receive and manage job applications. Within the framework of these activities, Prescreen processes personal data on behalf of and for the purposes of the company with which you wish to make contact through your application. This company is the controller within the meaning of data protection law in accordance with Article 4 (7) of the General Data Protection Regulation (GDPR). In this relationship Prescreen acts as a processor within the meaning of Article 4 (8) of the GDPR. Prescreen takes the protection and confidentiality of your data very seriously. Your data will, as a matter of course, be processed in accordance with the applicable data protection regulations, in particular the Austrian Data Protection Act (DSG), the Austrian Telecommunications Act (TKG), the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG). This data privacy statement also complies with all statutory requirements becoming mandatory upon the entry into force of the European General Data Protection Regulation (GDPR). The GDPR applies since 25 May 2018. Under no circumstances will Prescreen pass on your personal data to any third parties for advertising, marketing or any other purposes without authorisation. If you have any questions about “Prescreen’s” data privacy statement, you can contact the responsible company, Prescreen International GmbH, by sending an email to support@prescreen.io.

If you submit a job application using the foregoing link to URACA GmbH & Co. KG, your data (such as your first name, surname, email address and also, if applicable, address and town/city, date of birth, title, telephone number, nationality; additional questions depending on the specific job advertisement (e.g. driving license); curriculum vitae, in particular details relating to professional experience and training; skills (e.g. Photoshop, MS Office); application photo; qualifications, distinctions and language skills; covering letters and files and documents which you might upload) will only be processed within the framework of the specific job advertisement (point (b) of Article 6 (1) of the GDPR, § 26 of the BDSG) or within the framework of consent that you have granted for use for other job vacancies (point (a) of Article 6 (1) of the GDPR). If you have given us your consent for the processing of your job application, you can withdraw such consent at any time.

Note about sensitive information: We wish to expressly point out that job applications, especially curriculum vitae, certificates and testimonials and other other data that you submit to us could contain highly sensitive information.

When you submit such information to us in your online job application, you thereby declare your express acceptance that we may process this data for the purpose of dealing with the application. These data will be processed in accordance with this data privacy statement and all other applicable statutory regulations.

The maximum storage period for personal data of applications that are turned down is a six months starting from the date on which the application is rejected. If, in the course of your job application, you would prefer your data to be kept for longer (to resume your application process at a later date, for example), please adjust the settings accordingly when you register.

Longer storage periods may also be possible if required for the establishment, exercise or defence of legal claims before an authority or for compliance with statutory retention periods. The data are only stored for as long as required for the fulfilment of the purpose.

1.  Personal data

If you have provided us with personal data, such data will not be transferred to any third parties. It will only be transferred 

• within the framework of consent that you have granted (see section 3.2). When the data are collected, you will be notified of the recipients or the categories of recipients.
• within the framework of the processing of your enquiries, your orders and the use of our services carried out by subcontractors contracted by us. These subcontractors will only receive the data necessary to carry out the contract and will use them for this purpose only.
• within the framework of contract data processing in accordance with Article 28 of the GDPR by external service providers. These have been carefully selected and contracted by us, are bound by our instructions and the provisions of the GDPR and are checked at regular intervals.
• within the framework of the fulfilment of legal obligations with respect to authorities which are entitled to receive such information. 

2. Data security

We take technical and organisational measures to protect your personal data against manipulation, loss or destruction and against unauthorised access, and to ensure the protection of your rights and compliance with applicable regulations under data protection law.

The measures taken are intended to ensure the ongoing protection of the confidentiality and integrity of your data and the availability and resilience of our systems and services in connection with the processing of your data. They are also intended to ensure the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.

Our data processing and our security measures are continuously improved in line with technological developments.

We also take our own internal company data protection very seriously. Our employees and service providers contracted by us have an obligation to commit themselves to confidentiality and compliance with data protection regulations. Furthermore, they are only granted access to personal data to the extent necessary.

3.  Telematic Systems

Remote Control at the service section is available to our customers, which provides access to the “URACA Remote Control” telematic system. With regard to the transfer of personal data to third parties, section VII. of this data privacy statement applies accordingly.

4.  Social plugins

Social plugins are used on this website. Social plugins are web applications which connect this website with selected social networks. However, the social plugins are not integrated directly but first have to be activated by clicking specially. Only when activated in this way will a connection with the social network be established, regardless of whether you actually click on the social plugins. The connection means that your IP address and the user data of the respective social network can be transferred to it. For further details about the social plugins used, please refer to section IX. Other plugins and tools.

1. Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer to help analyse your use of the website. The information generated by these cookies about your use of this website is normally transmitted to a server of Google in the USA and stored there.
Google Analytics cookies are stored on the basis of point (f) of Article 6 (1) of the GDPR. The website operator has a legitimate interest in the analysis of users’ behaviour in order to optimise both its website and its advertising.
We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within the Member States of the European Union or in other states which are party to the Agreement on the European Economic Area before transfer to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the website operator, Google will use this information to analyse how you use the website, to generate reports about your website activities and to provide further services to the website operator associated with the use of the website and of the internet. The IP address transferred from your browser in the context of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by selecting the applicable setting on your browser; however, we wish to point out that this may result in the fact that you may not be able to fully utilise all functions of this website. In addition, you can refuse the transmission of data relating to your usage of the website (including your IP address) by the cookie to Google and the processing of this data by Google by downloading and installing the browser plugin available from Google at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
In addition, you can refuse the collection of your data by Google Analytics by installing an opt-out cookie which prevents the collection of your data when you visit this website in future: Google Analytics deactivate
For more information about the way in which user data is used, please refer to Google’ privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
We have concluded a contract with Google covering contract processing and fully implement the strict requirements of the German data protection authorities with regard to the use of Google Analytics.
This website uses the “Demographics” function of Google Analytics. This enables reports to be compiled about the age, gender and interests of the visitors to the website. This data is derived from interest-based adverts from Google and from data relating to visits from third-party providers. These data cannot be attributed to a specific person. You can deactivate this function at any time in the display settings in your Google account or prevent the collection of your data generally by Google Analytics, as shown in the section “Objection to data collection”.

1. YouTube
We use plugins from the YouTube website of YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, operated by Google.
If you use any of our pages featuring a YouTube plugin component, a connection with YouTube’s servers will be established. This means that the YouTube server will receive notification about which of our pages you have visited.
When you are logged into your YouTube account, you make it possible for YouTube to attribute your surfing activity directly to your personal profile. To prevent this you need to log out of your YouTube account.
We use YouTube in the interests of the attractive presentation of our website. This represents a legitimate interest within the meaning of point (f) of Article 6 (1) of the GDPR.
For more information about the way in which user data is used, please refer to YouTube’s data privacy policy at: https://www.google.de/intl/de/policies/privacy.

2. Google Maps
We use an API to use the Google Maps map service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To be able to use the functions of Google Maps it is necessary for your IP address to be stored. This information is normally transmitted to a Google server in the USA, where it is stored. We have no influence over this data transmission.
Google Maps is used in the interests of the attractive presentation of our website and to make it easier to find the locations given on our website. This represents a legitimate interest within the meaning of point (f) of Article 6 (1) of the GDPR.
For more information about the way in which user data is used, please refer to Google’s data privacy policy at: https://www.google.de/intl/de/policies/privacy/.
For full details, please refer to the data protection centre of google.de: Transparency and options and data protection provisions.
https://www.google.com/intl/de_de/help/terms_maps.html
https://policies.google.com/privacy?hl=de&gl=de

3. Links to other websites

Our website may contain links to websites. URACA GmbH & Co. KG is not responsible for the data protection safeguards or the contents of websites outside URACA GmbH & Co. KG.

If we process any of your personal data, you are the data subject within the meaning of the GDPR. You are therefore entitled to the following rights with respect to us:

1. Right of access (Article 15 of the GDPR)
You have the right, at any time and at no cost to yourself, to request information about your personal data stored by us. To prevent abuse, you will need to provide identification. 

2. Right to rectification (Article 16 of the GDPR)
You have the right to obtain from us, at any time, the rectification and/or completion of your personal data processed by us if such personal data concerning you are inaccurate or incomplete. 

3. Right to erasure – right to be forgotten (Article 17 of the GDPR)
You have the right to obtain the erasure of your personal data processed by us. This specifically applies if the data are no longer necessary in relation to the purpose of processing, consent which was required has been withdrawn and where there is no other legal ground for the processing, or our data processing is unlawful. In this case we will erase your personal data without undue delay within the framework of the law.

4. Right to restriction of processing (Article 18 of the GDPR)
You have the right to obtain the restriction of processing of your data.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have obtained restriction of processing pursuant to the above, you must be informed by the controller before the restriction of processing is lifted.

5. Right to notification (Article 19 of the GDPR)
If you have exercised the right to obtain from the controller the rectification or erasure of personal data or restriction of processing, the controller is obliged to communicate this rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
The controller shall inform you about those recipients if you request it.

6. Right to data portability (Article 20 of the GDPR)
You have the right to obtain from us in a machine-readable format the personal data concerning you which is stored by us. 

7. Right to object (Article 21 of the GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6 (1) of the GDPR, including profiling based on those provisions. 
The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
In the event that we process your personal data for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.

8. right to lodge a complaint with a supervisory authority (Article 77 of the GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, if you consider that the processing of personal data relating to you infringes the GDPR. You can exercise this right with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement. In Baden-Württemberg the competent supervisory authority is:
Baden-Württemberg Commissioner for Data Protection and Freedom of Information
Königstrasse 10a
70173 Stuttgart
Tel.: 0711/61 55 41 – 0
Email: poststelle@lfdi.bwl.de 

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

If any changes to the data privacy statement are required for legal or practical reasons, we shall update this page accordingly. This shall not entail any changes to the consents granted to us by the user.

Version: 27/03/2023