1. General information on data processing
This data protection declaration informs you as a user about the type, scope, and purposes of the processing of personal data by us, ALTANA AG, as the responsible party(hereinafter also referred to as “ALTANA” or “we”) on this website (hereinafter referred to as “offer”).
Our contact details are:
Tel +49 281/670-8E-Mail
E-mail: info@altana. com
The contact details of our data protection officer are:
Mr. Detlef Stürcken-
- Data Protection Officer -
Tel +49 281/670-8
E-mail: Datenschutz.Altana@altana. com
1.1 Scope of processing of personal data
We generally process your personal data only if you contact us via this website, if this is necessary for the provision of an operational website or for the presentation and use of our content, offers, and services. Without this processing, we could not provide our offer and usage would be impossible.
1.1.1. Provision of the website
As part of the provision of our website, we automatically collect and store information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data will not be merged with other data sources.
This data is collected on the basis of Art. 6 para. 1 bed. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose the server log files must be recorded.
1.1.2 Contact form
A contact form is available on our website, which can be used for making contact electronically. If you use this option, the data entered on the input screen will be transferred to and processed by us. The processing of personal data from the input screen serves the sole purpose of handling the contact and your concern.
The legal basis for the processing of data is Art. 6 para. 1 lit. f GDPR. Handling of contacting constitutes our legitimate interest in data processing. An additional legal basis for data processing is, in the case of your consent, Art. 6 para. 1 lit. a GDPR.
You may informally revoke any consent you give to us at any time. If the aim of the contacting is the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
1.2 Legal basis for the processing of personal data
Insofar as we obtain your consent to process your personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
When processing personal data that is necessary for the execution of a contract to which you are a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to implement pre-contractual measures.
Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which we are subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. This includes, among other things, the fulfillment of tax and commercial law obligations.
If processing is necessary to protect a legitimate interest of ours or that of a third party, and your interests, fundamental rights and freedoms do not override the first-mentioned interest. Art. 6 (1) lit. f GDPR serves as the legal basis for processing.
1.3 Transfer of personal data to third parties
We may transfer any personal data processed in connection with the provision of this website to our Group companies and providers of technical services and services that we use as processors in accordance with the provisions of the GDPR.
In individual cases, data may also be transferred to a third country outside the EU and the EEA. However, we transfer personal data only to third countries for which the EU Commission has determined by decision that there is an adequate level of data protection according to Art. 45 GDPR or if we and the recipient of the data have agreed on the standard data protection clauses adopted by the EU Commission according to Art. 46 para. 2 lit. c GDPR.
1.4 Data erasure and storage duration
If you have not consented to a specific storage period at the time of collection, we will store your personal data only for as long as is required to pursue the respective processing purpose and for as long as this does not conflict with any statutory retention or storage periods.
We use a consent management tool (CMT) to manage our cookies. You can use the CMT to consent to our cookies being set or reject consent. Consenting to cookies allows us and our partners to process personal information such as browsing behavior and unique IDs on this website. If you reject our cookies, you may only be able to use our website and our services to a limited extent. If you consent to cookies being set, we or our technical service providers will process your personal data in accordance with Art. 6 para. 1 lit. a GDPR.
The settings for essential technical cookies cannot be changed. Essential technical cookies are employed to ensure that our website and its contents run properly. These purposes also substantiate our legitimate interest in processing personal data. The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR.
You can of course configure your browser so that it does not store our cookies on your end device. The Help function in the menu found on most web browsers explains how you can prevent your browser from accepting new cookies, how you can have your browser notify you when you receive a new cookie, and even how you can delete all cookies you have already received and block them from further use. However, the CMT only works in the browser you use to set it, and only works properly if your browser accepts browser cookies. If you delete cookies or change browsers, computers, or operating systems, you will need to set it again.
2.1 Facebook retargeting (website custom audience)
A pixel owned by Facebook Ireland Limited (website custom audiences pixel) is integrated into our website. This pixel enables Facebook Ireland Limited to collect information about how this website is used (e.g. information about what articles users look at). With the aid of other data that Facebook Ireland Limited has stored about you, e.g. because you have an account on Facebook’s social network, such information can be assigned to you personally. The information collected via this pixel can be used to show you relevant advertisements in your Facebook account that pertain to our offerings (retargeting). The information collected via the pixel can also be aggregated by Facebook Ireland Limited, and this aggregated information can be used by Facebook Ireland Limited for its own advertising purposes and for the advertising purposes of third parties. For example, when you access pages on this website, Facebook Ireland Limited can conclude that you have certain interests and utilize this information to advertise third-party offerings. Furthermore, Facebook Ireland Limited can link information collected via the pixel with other information that Facebook Ireland Limited has collected about you via other websites and/or in connection with your usage of the social network Facebook and thus store a profile about you at Facebook Ireland Limited. This profile can be used for advertising purposes. You can find more information about data protection at Facebook Ireland Limited at: https://www.facebook.com/policy.php
Article 6, para. 1 f of the GDPR constitutes the legal grounds for this data processing.
2.2 Google services
On our website we use various services provided by Google LLC. We use a CMT to manage the cookies.
You can find more information about Google’s services at https://www.google.com/privacy/ads/.
2.2.1 Google remarketing function
Google’s remarketing function allows us to show ads to our users based on their interests on other websites within the Google ads network (so-called Google ads or ads on other websites). For this purpose, the interaction of users on our website is analyzed to be able to display targeted advertising to users on other sites even after they have visited our website. To this end, Google stores a number in the browsers of users who visit certain Google services or websites in the Google display network. This number, known as a “cookie,” tracks the visits of these users. This number is used to uniquely identify a web browser on a particular computer and not to identify a person; personal data is not stored. The legal basis for the data processing is Art. 6 para. 1 lit. f GDPR.
If you have given your consent via the Consent Manager, we use services of etracker GmbH from Hamburg, Germany (www.etracker.com) to analyze usage data.
2.2.2 Google reCAPTCHA
In order to ensure that here is sufficient data security when forms are submitted, in certain cases we use Google Inc.’s reCAPTCHA service. This main aim of this service is to distinguish whether the input is made by a natural person or abusively by machine and automated processing. The service includes the sending of the IP address, and possibly other data required by Google for the reCAPTCHA service, to Google. The different data protection regulations of Google Inc. apply here. Further information on Google Inc.’s data protection guidelines can be found at http://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy/.
The legal basis for this data processing is Art. 6 (1) c lit. f GDPR.
2.2.3 Google Maps
This site uses the map service Google Maps. Provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there.
The provider of this site has no influence on this data transmission. If Google Maps is enabled, Google may use Google Web Fonts for the purpose of uniform presentation of fonts. When you access Google Maps, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
The use of Google Maps is in the interest of an attractive presentation of our online offers and to make it easy to find the places indicated by us on the website. The provision of Google Maps takes place only if you give us a corresponding consent on the basis of Art. 6 para. 1 bed. a GDPR. and on the basis of § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG.[SD1] The consent is revocable at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
We use the YouTube.com platform to post our own videos and make them publicly accessible. YouTube is an offering from YouTube LLC, which is headquartered in 901 Cherry Avenue, San Bruno, CA 94066, USA. When you access a (sub)page of our internet offering on which YouTube videos have been integrated in this form, a connection is established to YouTube’s servers and the content is displayed on the website by means of a notification sent to your browser. YouTube content is only ever integrated in the “privacy-enhanced mode”. This mode is provided by YouTube itself to ensure that YouTube does not initially store any cookies on your device. Nonetheless, when you access the relevant pages, your IP address and the other data listed under No. 4 are transferred and, in particular, the information about which of our webpages you have visited is disclosed. This information, however, cannot be traced back to you unless you log into YouTube or another Google service (e.g. Google+) before accessing such pages or unless you are permanently logged in. The privacy-enhanced mode means that as soon as you click to start playing an integrated video, YouTube only stores cookies on your device that do not contain any personally identifiable data, unless you are currently logged into a Google service.
You can find information about how YouTube and Google process data and their privacy policies here: https://policies.google.com/privacy and https://support.google.com/youtube/answer/171780?hl=en
This website uses the etracker analysis service. The provider is etracker GmbH, Erste Brunnenstraße 1, 20 459 Hamburg, Germany.
The data can be used to create user profiles under a pseudonym. For this purpose, etracker uses technologies that enable the user to be recognised (e.g. cookies or device fingerprinting).
The data collected with etracker technologies will not be used to personally identify visitors to this website without the consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym.
Processing is carried out exclusively on the basis of Art. 6 para. 1 bed. a GDPR and §25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent is revocable at any time.
3. Social media buttons
You will find on our websites the “Share” button of Facebook, the “+1” button of Google, and a link to Twitter. If you activate a platform of this type, your browser will establish a short connection with the server of the relevant network, which serves primarily to display the content of the plugin. The cooperating party will learn your IP address, however, through this plugin. This will not identify you by name automatically. But if you are logged in to Facebook at the same time your visit to our website may be matched to your Facebook account.
Usually, social media buttons transfer user data with any page view to such sites as Facebook etc. To prevent the unwanted communication of your IP address, we have installed a data protection solution on our websites, which prevents immediate forwarding of your data. This means that user data – intended, say, for Facebook – is not sent when you connect to the site, but when you have clicked on the button for e.g. Facebook. Only an active click on the button in question will establish a connection to the server of the respective platform. If you do not click on the relevant button, there will be no exchange of data between you and the providers of the social media platforms. For further information regarding our Shariff solution, go to:
4. Career portal / Applicant data
You have the option of applying for advertised positions via our website or sending us an unsolicited application. During the online application process, you provide us with personal data that we will be process for the purpose of the application process. All personal data that you provide as part of the application process will be collected by us only for the purpose of carrying out the application process.
4.1 What information do we gather?
During the application process, we gather all the information that you provide to us in the context of your application, as well as, if applicable, information that we may obtain during an interview or online assessment, notably evaluations.
Of course, such evaluation does not contain any defamatory or deprecatory statements. We only record information which is directly associated with the evaluation and the recruitment process or your job profile.
4.2 Treatment of your application data
All personal data that you provide as part of the application process will only be collected by us to implement the application process. It is irrelevant whether you are applying for a specific position or sending us an unsolicited application.
Your application for a specific position or your unsolicited application for a certain location will go directly to the relevant personnel department.
If an unsolicited application is made for a certain region or for several locations, you provide us with your personal data for verification of your suitability for different, and, if applicable, interdisciplinary or group-wide positions. Therefore it is possible that, in addition to the handling by our HR department, your documents will be forwarded to several of our specialist departments or to HR and specialist departments within the ALTANA Group.
In both cases, your application may also be forwarded to the relevant specialist departments or to the works council.
Furthermore, the HR Corporate Systems & Recruitment department has access to the group-wide applicant management system and thus to your applicant data due to technical system requirements.
4.3 Transfer of data to third countries
Especially in the context of an application for a position in a country outside the EU and the EEA, your personal data will be transferred to our subsidiaries in the country in question. However, we transfer personal data only to countries for which the EU Commission has established an adequate level of data protection by decision according to Art. 45 GDPR or if we and the recipient of the data have agreed upon the standard data protection clauses issued by the EU Commission in accordance with Art. 46 para. 2 lit. c GDPR.
4.4 Storage of your data, applicants’ pool
After the application process is completed, your data will be deleted, in accordance with the applicable data protection regulations, particularly regarding retention periods.
In the context of the application process, you have the option of consenting to the storage of your data in our applicant pool. If you give your consent, your application data and documents will continue to be stored in our system and examined for suitability when vacancies arise. If you do not give or revoke your consent, we will delete your personal data according to the legal provisions, unless we are legally obliged to retain your data. You may at any given time informally revoke your consent.
4.5 Purpose of data processing, legal basis, storage duration
In the context of the application process, we collect and process your personal data for the purpose of initiating a possible employment relationship.
The legal basis for the processing of data is Art. 6 para. 1 lit. b GDPR, as well as Art. 6 para. 1 lit. a GDPR, if you have given us consent to process your data in a certain way.
Your applicant data will generally be deleted or blocked as soon as the purpose for storage, i. e. the execution of an application or an employment relationship, ceases to apply. However, a deletion does not take place if the European or national legislative body provides stipulates a retention obligation for a certain period of time after termination of the application process, or if you have voluntarily consented to your data being stored for a longer period. In these cases, the data will be deleted after the retention period expires or after your consent expires or is revoked. A revocation of consent is possible at any time.
5. Internet Purchasing Network Tool for suppliers
If, as a supplier, you have an interest in our company and inform us of this by using our Internet Purchasing Network Tool, you will be asked to enter the contact details of the decision-makers and information providers in your company. Please note that these entries are voluntary. Please do not provide information about staff within your company unless they have consented to the disclosure of this information.
The collection of this data supports preparation of supplier contracts. The legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR, as well as Art. 6 para. 1 lit. a, insofar as you have given us consent to your data being processed in a certain way. You may revoke your consent at any time. The personal data will only be stored as long is necessary for the preparation and execution of a contract.
6. Your rights
In general, i.e. subject to any legal restrictions, you have the rights listed below. To facilitate the exercise of these rights, we inform you that any corresponding request does not require a specific form and can therefore also be sent electronically (notably by e-mail).
You may request information about yourpersonal data from the controller,
You may request the rectification of your personal data which concerns you by the controller if the data is inaccurate,
You may request the erasure of your personal data by the controller,
You may request the restriction offurther processing of your personal data by the controller,
You have the right to object against further processing of your personal data by the controller, provided that you give reasons based on your particular situation. After you have exercised your right to object, we will stop processing your personal data unless we are able to demonstrate compelling legitimate grounds for this processing that override your interests, rights, and freedoms, or unless the processing is for the purpose of enforcing, exercising, or defending legal claims, and
You may obtain from the controller the personaldata concerning you, in a structured, commonly used and machine-readable format, and transmit this data to another person without hindrance from the controller to whom the personal data was provided.
Furthermore, you have the right tofile a complaint about the handling of your personal data by a controller with asupervisory authority responsible for data protection. To facilitate the exercise of this right, please note that the supervisory authority responsible for the registered office of the controller may be contacted at the following address:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4, 40213 Düsseldorf
7. Automated individual decision-making, including profiling
Automated decision-making in individual cases, including profiling in accordance with Art. 22 GDPR, do not take place in connection with the use of our website and our offer.
8. Data security
We apply the technical and organizational measures necessary to protect your personal data from manipulation, loss, destruction or unauthorized access, and to safeguard their integrity and availability. Our security measures are constantly being improved in line with technological developments.
9. Amendment of this data privacy statement
This data policy statement has the status of July 1, 2021. We reserve the right to carry out appropriate amendments at any time.