Privacy Policy Nature’s Richness Holding GmbH
This privacy policy informs you in accordance with Art. 13, 14 EU Data Protection Regulation (EU-DSGVO) and ePrivacy Law (TTDSG) about the processing of your personal data. We collect and process your personal data in accordance with national and European laws, in particular the German Federal Data Protection Act (BDSG) and the EU Data Protection Regulation (EU-DSGVO) and the Telecommunications Telemedia Data Protection Act (TTDSG). If you have any further questions about data protection at suiteg, please feel free to contact us at any of the telephone numbers, fax numbers or e-mail addresses listed below.
Responsible for data processing is:
Nature’s Richness Holding GmbH
Aachener Street 1042 a
50858 Cologne
Germany
Phone +49 (0) 221 4980 303
contact@natures-richness.com
1. When visiting our website
In the following section, you will find information on data collection, data processing, data deletion, data security and the integration of third-party providers in connection with your visit to our website www.the-natures-richness-group.com.
1.1 Server Log Files
Your browser automatically transmits data (so-called server log files) to our servers each time you visit our website. The server log files contain the following information:
– The time of your visit
– the page from which you visit us (referrer URL),
– the sub-pages visited,
– the names of the requested files
– your IP address
– data volume
– the browser you use and
– the requesting provider.
We need this information to ensure system security and to compile usage statistics. These two purposes correspond to our legitimate interest according to Art. 6 para.1 p. 1 lit. f EU-DSGVO. The corresponding data is deleted as soon as it is no longer needed for the respective purpose, but no later than 90 days after it was collected….
1.2 Contact Form
Our website features a contact form. By sending a message over the contact form function, you provide us with all the data you have entered in the mandatory and non-mandatory fields and give your consent (Art. 6 I 1 a EU-GDPR) to our collecting and processing of such data. They will be processed exclusively for the purpose of handling your request and deleted if you withdraw your consent or if the enquiry is closed anyway, unless legal retention obligations require longer storage.
Please note: By clicking on e-mail addresses provided on our websites, you will enter your e-mail software and transmit your message as a conventional e-mail to the address pre-filled in the recipient line. Please be informed that we have no influence on the data collection and data processing by your e-mail provider.
If you would like to learn how we process the contents of messages submitted via the contact form, please continue reading at “When you contact us” section below.
1.3 Social Media
We use the social media platform YouTube, especially to integrate videos on our website. This allows us to present you with better content. We embed videos on our site in extended data protection mode, which means that your IP address and referral information are only transmitted to YouTube if you click on the embedded video to play it. Data is transmitted to YouTube also if you do not have an account with the relevant provider or are not logged in. If you have your own account, the provider will regularly link this information with your account. This is also possible even if you are not logged in.
We have no control over what personal data is collected by Google you provides YouTube or how Google processes your data. Please note that Google Headquarters are located outside of the EU (USA) and your data is therefore likely to be transmitted to third countries for which a suitable level of data privacy is not necessarily ensured.
More information on the use of your data can be obtained here:
YouTube: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, privacy policy: https://policies.google.com/privacy?hl=de&gl=de
If personal data transferred to the US, an adequate level of data protection is ensured as the EU-Commission has issued its adequacy decision for the US (EU-US-Data Privacy Framework) and Google is certified under this Framework.
1.4 External service providers
In the provision and operation of our websites, we work with external service providers that we have carefully selected, whose activities we monitor and with whom we have order data processing agreements in accordance with Art. 28 EU-DSGVO. These service providers are located in Germany or in the EU.
1.5 Data security
This site uses effective encryption for security reasons and to protect the transmission of confidential content that you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from „http://“ to „https://“ and by the lock symbol in your browser line. If encryption is activated, the data you transmit to us cannot be read by third parties.
2. Your application
Thank you for your interest in our company and your application. We collect and process personal data in the documents you submit on the basis of your consent (Art. 6 para.1 p.1 lit. a EU-DSGVO) and for the purpose of deciding whether to establish an employment relationship (Art. 6 para.1 p.1 lit. b EU-DSGVO, § 26 BDSG). If we contact you following an application, you can find out how we handle the contents of the communication in the section „When you contact us“.
2.1 In the case of unsolicited applications
Applications that do not relate to a specific job (unsolicited applications) are processed for the purpose of deciding whether your qualifications match a current job posting (Art. 6 para.1 p.1 lit. a, b EU-DSGVO, Section 26 BDSG). As part of the application process, other personal data may also be collected and processed from you personally, from generally accessible sources or from former employers (Art. 6 para.1 p.1 lit. b EU-DSGVO, § 26 BDSG). In addition, we are required by law to subject your person to a so-called „sanctions list check“ or a so-called „anti-terror screening“, in the context of which we check your personal data against the EU and US sanctions lists. These checks are carried out in fulfillment of our legal obligations (Art. 6 para.1 p.1 lit. c EU-DSGVO, § 26 BDSG; VO 2580/2001/EC and VO 881/2002/EC).
Your personal data will be deleted one year after your application, unless they are still the subject of ongoing application procedures. If no application procedure leads to your employment, your personal data will be deleted six months after the last position for which we considered you has been filled. If an application process leads to your employment, the data collected, including your application documents, will be included in your personnel file (Art. 6 para.1 p.1 lit. b EU-DSGVO, Section 26 BDSG) and will remain there for the duration of the employment relationship.
2.2 External career platforms and professional social networks
Insofar as we place job advertisements on external career platforms and you apply via functions provided there, we receive your documents from the operators of the respective platform. Once we have received your personal data, we process it in the manner described above. There is no further cooperation between the platform operators and us and we have no influence on the data collection and data processing by these operators. Please inform yourself about the handling of your personal data on the respective platform. We may also use platform accounts to search for and contact suitable candidates. In such cases, we use existing features and functions of the platforms and view the personal data you provide. If we export your personal data from a Platform (e.g., via a download feature offered on the Platform), we will process that data in the manner we have described here above with respect to unsolicited applications.
2.3 Transfer of transmitted data
Personal data that you provide to us in the course of an application and/or that we collect from generally accessible sources or from former employers is processed exclusively by us. Data will only be transferred to affiliated companies within the Pfeifer & Langen group of companies if and to the extent that you expressly state this in your application (Art. 6 para.1 p.1 lit. a EU-DSGVO). We may from time to time use external service providers or digital application portals to publish job advertisements or process applications. Providers of such services and software are located in Germany or in the EU, have been carefully selected, we monitor their activities and have order processing contracts with them in accordance with Art. 28 EU-DSGVO.
3. When you contact us or cooperate with us.
We appreciate you contacting us or working with us as a business partner. In this section you will find information on data collection, data processing, data deletion, data security and involvement of third-party providers in connection with a business contact.
3.1 Data collection, data processing and data deletion
In the context of a business contact, we regularly collect and process the following personal data:
– Full name
– Professional contact data (address, telephone, e-mail, position, position in the company).
In addition, we may ask you for further information in individual cases, e.g. private contact data or your date of birth. However, such requests are limited to the absolute minimum necessary. In particular, we ensure that there is a technical or organizational necessity behind the request for additional data.
When you communicate or collaborate with us via portals or software applications, our systems automatically collect the IP addresses of your devices. Information on the use of cookies in our portals or software applications is provided via cookie banners in the respective application.
We process your personal data in particular for the initiation of future business relationships or for the fulfillment of our mutual obligations from existing business relationships (Art. 6 para.1 p.1 lit. b EU-DSGVO) as well as for the implementation of anti-terror and sanctions checks of our customers, suppliers and service providers to the extent required by law (Art. 6 para.1 p.1 lit. c EU-DSGVO, VO 2580/2001/EC, VO 882/2002/EC, VO 2017/1420/EU). Other purposes may be added depending on the individual case.
Your personal data will be deleted immediately as soon as the purpose of the processing no longer applies. Insofar as data are subject to statutory retention obligations in individual cases, they remain stored until the expiry of the respective retention period and are then deleted.
3.2 Data transfer
The aforementioned data will only be transferred to companies of the Pfeifer & Langen Group if we use these companies to fulfill our contractual obligations (Art. 6 para.1 sentence 1 lit. b EU-DSGVO) or if the transfer is in our overriding legitimate interest (Art. 6 para.1 sentence 1 lit. f EU-DSGVO). Your personal data may be disclosed to public authorities and courts as well as to lawyers, auditors, tax consultants, management consultants and similar service providers bound to secrecy.
3.3 External service providers
Your personal data is stored in our IT systems. Insofar as we use external providers for IT infrastructure, IT applications and/or data processing, we select them carefully, monitor their activities and conclude order processing agreements with them in accordance with Art. 28 EU-DSGVO. We generally avoid the transfer of personal data to countries outside the EU. Should this occur in individual cases, we ensure an adequate level of data protection in accordance with Art. 44 et seq. EU-DSGVO at the recipient.
4. Data subject rights
In this section, you will learn what rights you have vis-à-vis us if and to the extent that we collect and process your personal data. Please note that we will comply with your legitimate requests as soon as possible and free of charge. Please assert your rights at the following address: info@natures-richness.com.
In accordance with Art. 15 EU-DSGVO, you can request information from us about your personal data stored by us, its origin, recipients or categories of recipients to whom we transfer your personal data, and the purpose of the processing.
According to Art. 16 – 18 EU-DSGVO, you may have a right to rectification, erasure or restriction of the processing of your personal data in individual cases. In addition, according to Art. 20 EU-DSGVO, you may request the transfer of your personal data to another controller. Furthermore, you may have the right to object to the processing of your personal data pursuant to Art. 21 EU-DSGVO if and to the extent that this processing is carried out exclusively on the basis of our overriding legitimate interest (Art. 6 para.1 sentence 1 lit. f EU-DSGVO) or to the extent that the processing is carried out for direct marketing purposes.
You can revoke your consent to data collection and data processing (Art. 6 para.1 p.1 lit. a EU-DSGVO) at any time. In this case, we will not further process your personal data, unless such further processing is permitted or required by law. The aforementioned objections or revocations only take effect for the future and do not render the past data collection and data processing inadmissible.
Finally, you have the right to lodge a complaint with any competent data protection supervisory authority pursuant to Art. 77 EU-DSGVO.