Privacy Policy of centron GmbH

Protection of Your Privacy

We welcome you to our website and appreciate your interest in our company.

We take the protection of your personal data and privacy very seriously. We process your data in accordance with the applicable legal regulations on the protection of personal data, particularly the EU General Data Protection Regulation (EU-GDPR) and the country-specific implementation laws that apply to us.

With this privacy policy, we inform you comprehensively about the processing of your personal data by centron GmbH and your rights.

Personal data is information that can be used to identify a natural person. This includes, in particular, your name, date of birth, address, telephone number, email address, and also your IP address. Data is considered anonymous if no personal reference to the user can be established.

Responsible Entity

centron GmbH
Heganger 29
D-96103 Hallstadt
Germany

Phone: +49 (0) 951 / 96 83 40
Fax: +49 (0) 951 / 96 83 429
Email: info@centron.de

Contact for Data Protection

Email: datenschutz@centron.de

Your Rights as a Data Subject

First of all, we would like to inform you about your rights as a data subject. These rights are set out in Articles 15 – 22 EU-GDPR. This includes:

  • The right to access (Art. 15 EU-GDPR)
  • The right to rectification (Art. 16 EU-GDPR)
  • The right to erasure (Art. 17 EU-GDPR)
  • The right to restriction of processing (Art. 18 EU-GDPR)
  • The right to data portability (Art. 20 EU-GDPR)
  • The right to object to data processing (Art. 21 EU-GDPR)

To exercise these rights, please contact: datenschutz@centron.de.

The same applies if you have questions about data processing in our company or wish to revoke consent. You also have the right to lodge a complaint with a data protection supervisory authority.

Right to Object

Please note the following in connection with the rights to object:

If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without stating reasons. This also applies to profiling, insofar as it is associated with direct advertising.

If you object to processing for direct advertising purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made informally, preferably to: datenschutz@centron.de.

If we process your data to safeguard legitimate interests, you may object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.

We will then no longer process your personal data unless we can prove compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

Purposes and Legal Bases of Data Processing

When processing your personal data, the provisions of the EU-GDPR and all other applicable data protection regulations are observed. Legal bases for data processing arise in particular from Art. 6 EU-GDPR.

We use your data for business initiation, to fulfill contractual and legal obligations, to carry out the contractual relationship, to offer products and services, and to strengthen customer relationships, which may also include analyses for marketing purposes and direct advertising.

Your consent to data processing may also represent a legal basis for processing. Before granting consent, we will inform you about the purpose of the data processing and your right of revocation.

Transfer to Third Parties

We will only transfer your data to third parties within the framework of legal requirements or with your consent. Otherwise, data will not be transferred to third parties unless we are required to do so due to mandatory legal provisions (e.g., supervisory or law enforcement authorities).

Recipients of the Data / Categories of Recipients

Within our company, we ensure that only those persons receive your data who need it to fulfill contractual and legal obligations.

In certain cases, service providers support our departments in fulfilling their tasks. The necessary data protection agreements have been concluded with all service providers. These include, in particular, shipping service providers, payment service providers, and external consultants or employees.

Transfer to Third Countries / Intention to Transfer

Data transfer to third countries (outside the EU or EEA) only takes place if it is necessary for executing the contractual relationship, required by law, or you have given consent. In principle, we do not transfer your personal data to any service provider outside the EEA.

Storage Duration of the Data

We store your data as long as it is needed for the respective processing purpose. Numerous retention periods require continued storage, especially for commercial or tax obligations (e.g., German Commercial Code, Fiscal Code).

If no further retention obligations exist, the data will be routinely deleted after the purpose has been achieved.

Additionally, we may retain data if you have given us permission or if there are legal disputes and we use evidence within limitation periods, which can be up to thirty years (regular limitation: three years).

Secure Transmission of Your Data

To best protect the data stored with us against accidental or deliberate manipulation, loss, destruction, or unauthorized access, we use appropriate technical and organizational security measures. The security levels are continuously reviewed with experts and adjusted to new standards.

Data exchange from and to our website is always encrypted via HTTPS using the latest protocols. On request, we also offer PGP encryption for electronic communication. Alternatively, you can use other channels such as postal mail.

Obligation to Provide the Data

Various personal data are necessary for establishing, executing, and terminating contractual relationships and fulfilling the associated obligations. The same applies to the use of our website and its functions.

In certain cases, data must also be collected or provided due to legal provisions. Please note that processing your request or executing the underlying contractual relationship is not possible without providing this data.

Categories, Sources, and Origin of the Data

The data we process depends on the respective context — for example, whether you submit a contact form or an application.

We may also provide information for specific processing situations separately, e.g., when uploading application documents or making a contact inquiry.

When visiting our website, we may collect and process the following data:

  • Name of the internet service provider
  • Information about the website from which you visit us
  • Browser and operating system used
  • Your IP address
  • Requested files, transferred data volume, downloads/file exports
  • Information about the pages you access on our site, including date and time

For technical security reasons (especially to defend against attacks on our web server), this data is stored in accordance with Art. 6 (1) lit. f EU-GDPR. After a maximum of seven days, anonymization takes place by shortening the IP address.

As part of a contact request, we may collect and process the following data:

  • Company name
  • First and last name
  • Contact details (email, phone)
  • Information about wishes and interests

In the context of the ordering process, we may collect and process the following data:

  • Company
  • Salutation
  • First name
  • Last name
  • Street
  • Postal code
  • City
  • Country
  • VAT ID number
  • Phone
  • Fax
  • Email
  • Data processed from other sources

In online applications, we collect and process the following data:

  • First and last name
  • Place of residence
  • Contact details
  • Curriculum vitae
  • Work permit
  • Other voluntary information

Automated Individual Decisions

We do not use purely automated processing processes to make a decision.

Cookies (Art. 6 (1) S. 1 lit. a, f GDPR, § 25 (1), 2 TDDDG)

Our website uses so-called cookies. They make our offer more user-friendly, effective, and secure. Cookies are small text files stored on your device and saved by your browser.

Cookies contain only pseudonymous or anonymous data. Some persist for the duration of a browsing session (session cookies), others longer (persistent cookies, e.g., consent settings). The latter are automatically deleted after the specified time (usually six months).

In addition to our own cookies, those from third parties are also used. They use cookie information to display content or record visited pages.

Due to our legitimate interest (Art. 6 (1) S. 1 lit. f GDPR), we use technically necessary cookies essential for website operation and functionality. Cookies may also be used without consent if their sole purpose is message transmission or if they are strictly necessary to provide a service you requested (§ 25 (2) TDDDG).

Technically Necessary Cookies

Name Function Collected Data Storage Duration
Borlabs (Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg) Cookie-Consent (Obtaining and documenting consent to the use of certain cookies) Consents Until deletion or revocation (1 year)
Google reCAPTCHA (Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland) Protection against misuse and spam by checking whether entries are made by a human or an automated program IP address, time spent on the website, mouse movements 1 year
Polylang Storage of the language setting Selected language 1 year
Pipedrive (OÜ Mustamäe tee 3a, 10615 Tallinn, Estonia) Management of web forms and assignment of accounts 2 months

With your consent, additional cookies are used that enable us or third parties to evaluate how our services are used. This allows us to tailor content to user needs and measure ad effectiveness. Legal basis: explicit consent (Art. 6 (1) lit. a GDPR, § 25 (1) TDDDG).

You can withdraw your consent via our consent banner at any time. Changes must be made separately for each device. Click the symbol at the bottom left to change settings at any time.

If you have accounts with third parties we use and are logged in there, your data may be linked to the respective account. You can avoid this by not granting or withdrawing consent or logging out of third-party accounts beforehand.

Most browsers accept cookies automatically. You can disable, restrict, or delete cookies manually in your browser settings. If you disable cookies, full use of our website may not be possible.

Creation of User Profiles or Non-Functional Cookies (Art. 6 (1) lit. a GDPR)

Google Tag Manager (Art. 6 (1) lit. a GDPR, § 25 (1) TDDDG)

We organize our tags using Google Tag Manager (Google Ireland Limited, Dublin 4). It manages tools and tags on our website via one interface. Tags can collect and process personal data, but the Tag Manager itself does not set cookies.

Consent is required (Art. 6 (1) lit. a GDPR) and can be withdrawn anytime via the cookie banner. Anonymization occurs after seven days by shortening the IP address.

Your data is processed in the USA. Google participates in the US Data Privacy Framework.

Microsoft Clarity (Art. 6 (1) lit. a GDPR, § 25 (1) TDDDG)

This website uses “Microsoft Clarity” (Microsoft Ireland Operations Limited, Dublin) for statistical analysis of user behavior and optimization.

Clarity captures mouse movements, scroll behavior (heatmaps), time zone, OS, platform, origin, IP address, referrer, and visit duration. Sessions may be recorded as videos. Cookies enable recognition of browsers and users.

Pseudonymized usage profiles may be created and evaluated. Data is stored for 30 days, then deleted. Use only with your consent (Art. 6 (1) lit. a GDPR, § 25 (1) TDDDG). Consent can be withdrawn anytime via the cookie symbol.

Further information: https://clarity.microsoft.com/terms

Personal data may also be transferred to Microsoft Corp in the USA (certificate under EU-US Data Privacy Framework; processing agreement in place).

YouTube (Art. 6 (1) lit. a GDPR)

We use YouTube LLC (USA), represented by Google Ireland Ltd, to display embedded videos. No data is transmitted until you click the video and give consent (Art. 6 (1) lit. a GDPR).

If logged into Google, viewing a video may link to your account. To prevent this, log out before viewing. YouTube may process your data for advertising or analytics. Accessing videos may invoke Google Analytics 360 (DoubleClick) for ad personalization.

You can prevent tracking by blocking third-party or Google cookies in your browser (settings) or using the “About Ads” opt-out at aboutads.info/choices. For permanent disabling, browser add-ons are available at google.com/settings/ads/plugin.

Links to Social Media

Our website contains links to Facebook, X (formerly Twitter), YouTube, Pinterest, WhatsApp, Instagram, LinkedIn and Xing. You can recognize these by the company logos. Following a link opens centron GmbH’s profile on the platform.

When you click a social link, a connection is established with that service’s servers, transmitting that you visited our website. Additional data (page address, time, browser, OS, IP) is sent. If logged in, the provider can assign this to your account. Log out beforehand to prevent that.

Servers may be in the USA or other non-EU countries. Data protection there may be lower than in the EU. We have no influence on the type and extent of processing. See each provider’s privacy policy for details.

Contact Form / Email Contact (Art. 6 (1) lit. a, b GDPR)

Our site offers contact forms for electronic communication. Data you provide is processed to respond to your inquiries.

We follow data-minimization principles — only essential data is required. Your IP address is also processed for technical and legal reasons. Other fields are optional. Appropriate security measures protect the confidentiality of your data.

If you contact us via email, we process your information solely to handle your request. No additional data collection occurs.

Applicant Portal (Art. 6 (1) lit. a, b GDPR)

We value your interest in working with centron GmbH and process your personal data only for managing the application process and contacting you. No transfer to third parties occurs without consent.

Required fields are marked *, ensuring only necessary information (e.g., CV) is submitted. For technical and legal reasons, your IP address is also processed. Without this data, we cannot review your application.

Data is stored until the application process is completed and related deadlines expire — at the latest six months after a decision is received.

Registration / Customer Account (Art. 6 (1) lit. a, b EU-GDPR)

On our website, we offer users the opportunity to register by providing personal data. The advantage is that you can view the order history in particular and the data you provide will be saved for the order form. You do not have to enter this data again for a subsequent order.

Registration is therefore either necessary to fulfill a contract (via our online shop) with you or to carry out pre-contractual measures.

The principle of data economy and data avoidance is observed here, meaning that only the data necessary for registration are marked as mandatory fields with a star (*). This includes, for example, the email address and password, including password repetition.

For orders in our online shop, we also need information on the billing address (salutation, first name, last name, address, contact details, VAT ID). If the delivery address differs from the billing address, the above details for the delivery address must also be provided.

By registering on our website, the user’s IP address, the date, and the time of registration are also stored (technical background data). By pressing the “Register now” button, you consent to the processing of your data.

Please note: The password you choose is stored encrypted with us. Employees of our company cannot read this password. Therefore, they cannot give you information if you forget your password.

In this case, use the “Forgot password” function, which will send you an automatically generated new password by email. No employee is authorized to request your password from you by telephone or in writing. Therefore, please never provide your password if such requests are made to you.

Once the registration process is complete, your data will be stored with us for use in the protected customer area. Once you log in to our website with your email address as your username and password, this data will be provided for actions you carry out on our website (e.g., for orders in our online shop). Completed orders can be traced in the order history. Changes to the billing or delivery address can be specified here.

Registered persons are free to make changes/corrections to the billing or delivery address in the order history independently. Our customer service is also happy to make changes/corrections if you contact them. Of course, you can also dissolve or delete the registration or your customer account.

Advertising Purposes for Existing Customers (Art. 6 (1) lit. f EU-GDPR)

centron GmbH is interested in maintaining the customer relationship with you and sending you information and offers about our products/services. Therefore, we process your data to send you appropriate information and offers by email.

If you do not wish this, you can object to the use of your personal data for direct advertising purposes at any time; this also applies to profiling, insofar as it is associated with direct advertising. If you object, we will no longer process your data for this purpose.

The objection can be made without stating reasons, free of charge, and informally, preferably by email to datenschutz@centron.de or by mail to centron GmbH, Heganger 29, 96103 Hallstadt, Germany.

Online Offers for Children

Persons under the age of 16 are not permitted to transmit personal data to us or provide a declaration of consent without the consent of their parents or legal guardians. We encourage parents and guardians to participate actively in their children’s online activities and interests.

Links to Other Providers

Our website contains – clearly recognizable – links to the websites of other companies. Where links to websites of other providers are available, we have no influence on their content. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of the pages is always responsible for the contents of these pages.

The linked pages were checked for possible legal violations and recognizable legal infringements at the time of linking. Illegal content was not recognizable at the time of linking. However, a permanent content check of the linked pages is not reasonable without concrete indications of a violation of the law. If legal violations become known, such links will be removed immediately.

Privacy Policy / Information on Data Protection in Social Media

centron GmbH maintains profiles on social media platforms, specifically on Facebook, Instagram, X (formerly Twitter), YouTube, Xing, and LinkedIn. Where we have control over the processing of your data, we ensure compliance with applicable data protection regulations.

Below, you will find the most important information regarding data protection law in relation to our profiles.

Name and Address of the Responsible Parties for the Operation

In addition to centron GmbH, the responsible entities for the company profiles within the meaning of the EU General Data Protection Regulation (EU-GDPR) and other data protection regulations are:

  • Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  • Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  • LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
  • X (formerly Twitter) (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland)
  • Xing (New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany)
  • YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland)

However, you use these platforms and their functions at your own responsibility. This applies especially to the use of interactive functions (e.g., commenting, sharing, rating).

We further point out that your data may be processed outside the European Union.

Purpose and Legal Basis

We maintain the fan pages to communicate with visitors to these pages and to inform them about our offers.

We also collect data for statistical purposes to further develop and optimize content and make our offering more attractive. The necessary data (e.g., total number of page views, page activities, and data provided by visitors, interactions) are processed and provided to us by the social networks. We have no influence on their creation and presentation.

Furthermore, your personal data is processed by the providers of the social networks, but also by centron GmbH for market research and advertising purposes. For example, it is possible that usage profiles are created based on your usage behavior and the resulting interests. This allows advertisements to be displayed within and outside the platforms that correspond to your interests. Cookies are generally stored on your device for this purpose. Independent of this, data that is not directly collected on your end devices can also be stored in your usage profiles. Storage and analysis are also carried out across devices, especially, but not exclusively, if you are registered as a member and logged in to the respective platforms.

The processing of your personal data by centron GmbH is based on our legitimate interests in effective information and communication pursuant to Art. 6 (1) sentence 1 lit. f. EU-GDPR.

If you are asked for consent to data processing, i.e., if you give your consent by confirming a button or similar (opt-in), the legal basis of the processing is Art. 6 (1) sentence 1 lit. a., Art. 7 EU-GDPR.

Your Rights / Right to Object

If you are a member of a social network and do not want the network to collect data about you through our profile and link it to your member data stored with the respective network, you must:

  • log out of the respective network before visiting our fan page,
  • delete the cookies present on the device and
  • close and restart your browser.

However, after logging in again, you will be recognized by the network again as a specific user.

Provider Policies and Opt-Out

Facebook
Privacy policy: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

Instagram
Privacy policy: https://help.instagram.com/519522125107875
Opt-out: http://www.networkadvertising.org/managing/opt_out.asp and http://www.youronlinechoices.com

LinkedIn
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/legal/cookie-policy and http://www.youronlinechoices.com

X (formerly Twitter)
Privacy policy: https://twitter.com/de/privacy
Opt-out: http://www.youronlinechoices.com
Settings: https://twitter.com/settings/account/personalization

Xing
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
Opt-out: http://www.youronlinechoices.com

YouTube
Privacy policy: https://policies.google.com/privacy
Opt-out: https://tools.google.com/dlpage/

In total, you have the following rights regarding the processing of your personal data: Right of access; right to rectification; right to erasure; right to restriction of processing; right to object; right to data portability; right to complain about unlawful processing of your personal data to the competent data protection authority.

However, as centron GmbH does not have full access to your personal data, you should contact the providers of the social networks directly when asserting your rights, as they each have access to the personal data of their users and can take appropriate measures and provide information.

If you still need help, we will, of course, try to support you. Please contact datenschutz@centron.de.

Notes on Copyright and Artistic Copyright

If you wish to publish images, texts, plans, videos, music, etc., on our profile, you should be aware that you may be transferring all rights of use to the network, which could ultimately have legal consequences for you if you are not the author or rights holder yourself.

Transparency and Information Obligations for Customers, Suppliers, Contractual Partners, and Interested Parties of centron GmbH according to the EU General Data Protection Regulation (EU-GDPR)

Categories/Origin of the Data

Within the scope of the contractual relationship and for contract initiation, we process the following personal data:

  • Contact data (e.g., first/last names of current and, if applicable, previous contact persons as well as name suffixes, company name, and address of the customer (employer), telephone number with extension, business email address)
  • Job-related data (e.g., function in the company, department)
  • Payment data (account holder, IBAN, BIC, credit institution)

We generally receive your personal data from you in the course of contract initiation or during the ongoing contractual relationship.

Purposes and Legal Bases of Data Processing

When processing your personal data, the provisions of the EU-GDPR, the BDSG (new), and other relevant legal provisions are always observed.

Your personal data is processed solely to carry out pre-contractual measures (e.g., to create offers for products or services) and to fulfill contractual obligations (e.g., to carry out our service, the supplier contract, or to process orders/orders/payments) (Art. 6 (1) lit. b EU-GDPR) or if there is a legal obligation to process (e.g., due to tax requirements) (Art. 6 (1) lit. c EU-GDPR). The personal data was originally collected for these purposes.

A data protection permit requirement may also be your consent to data processing (Art. 6 (1) lit. a EU-GDPR). Before granting, we will inform you about the purpose of the data processing and your right of withdrawal according to Art. 7 (3) EU-GDPR.

centron GmbH is also interested in maintaining the customer relationship with you and sending you information and offers about our products/services via email. Therefore, we process your data to send you appropriate information and offers (Art. 6 (1) lit. f EU-GDPR).

To detect criminal offenses, your personal data will only be processed under the conditions of Art. 10 EU-GDPR.

Transparency and Information Obligations for Applicants of centron GmbH according to the EU General Data Protection Regulation (EU-GDPR)

Categories/Origin of the Data

As part of the application process, we process the following personal data:

  • Your master data (name, first name, name suffixes)
  • Contact data (address, telephone number, email address)
  • Qualification data (curriculum vitae, cover letter, degrees)
  • Possibly photo/work permit/residence permit/date of birth
  • Possibly previous convictions/certificate of good conduct
  • Possibly Schufa information

Your personal data is generally collected directly from you during the application process.

Purposes and Legal Bases of Data Processing

When processing your personal data, the provisions of the EU-GDPR, the BDSG, and all other (labor) legal provisions are always observed.

We are aware of the importance of your data. Your personal data will be processed solely for the purpose of effective and correct handling of the application process and for contacting you within the application process (Art. 6 (1) lit. b GDPR).

We also process your data if we have a legal obligation, particularly from labor law. For special categories of personal data under Art. 9 (1) EU-GDPR, a balance of interests is also carried out, meaning data processing only takes place if your protectable interests do not prevail (Art. 88 (1) EU-GDPR in conjunction with § 26 (1), 3 BDSG).

Your consent also represents a permit for data processing. If you have given us your consent (e.g., for longer storage of application documents in our applicant pool or for forwarding the application documents to other business units), we will also process your data for this purpose (Art. 88 (1) EU-GDPR in conjunction with § 26 (2) BDSG). If we obtain your consent, we will, of course, inform you in advance about the specific purpose of the data processing and your right of withdrawal. If the consent also relates to the processing of special categories of personal data under Art. 9 EU-GDPR, we will expressly point this out to you in advance.

Storage Duration of the Data

We store your applicant data until the application process is completed or we no longer need your data for the above purposes or you have withdrawn your consent. If we enter into an employment relationship with you, the relevant application data will be further stored with us if they remain relevant to the execution of the employment relationship.

If we unfortunately have to reject your application, we will delete your application documents at the latest 6 months afterward unless you have given us your consent for inclusion in our applicant pool and the associated longer storage of your application documents. In this case, we will delete your data after a maximum of 24 months or if you withdraw your consent.