This data protection notice informs you about the processing of your personal data by us and the rights to which you are entitled.

1. who is responsible for data protection?

Woco Industrietechnik GmbH is responsible for data processing

Phone: +49 6056 78-0, 
E-Mail: info@de.wocogroup.com

2. How can you contact our data protection officer?

You can reach our data protection officer by e-mail at: datenschutz@de.wocogroup.com

3. What data do we process and where does it come from?

We process personal data that we receive from you in connection with an application. In particular, the following data is processed: Master data (e.g. name, address and contact details, CV), correspondence data (e.g. correspondence with you) and other applicant data (certificates, training certificates, etc.).

4. What do we process your data for (purpose of processing) and on what legal basis?

To protect your personal data provided to us as part of the application process, we comply with the statutory provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). All data that you provide to us as part of your application will be processed solely for the purpose of carrying out the application and selection process and will be used solely to assess your professional suitability and to contact you. This includes your title, first name, surname, address, contact details, your CV and data on your education and qualifications (Art. 6 para. 1 lit. b GDPR; Section 26 BDSG). In the context of employment, you only have to provide the personal data that is necessary for the establishment, implementation and termination of employment. If you provide us with "special categories of personal data" in accordance with Art. 9 GDPR in the documents you submit as part of the application process (e.g. a photo that reveals ethnic origin, etc.), the processing also relates to this data.  However, we only wish to assess all applicants on the basis of their qualifications and therefore ask you to refrain from providing such information in your application if possible. All necessary technical and organizational security measures are taken to protect your data from loss and misuse. If and insofar as you have given us your consent to process personal data, the respective consent is the legal basis for the processing mentioned there (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time with effect for the future. We will obtain separate consent from you for the inclusion of your applicant data in our applicant pool.

5. Who do we pass the data on to?

Your application documents will only be passed on to the departments that need them to evaluate the application and for recruitment (HR department and the respective specialist department to which the application relates). In addition, external bodies will only receive your data without exception if they have been contractually obliged by us to fulfill their obligations as processors (Art. 28 GDPR) and guarantee that they will process your data in accordance with our instructions. To operate the career portal, we use the services of talentsconnect AG, with whom we have concluded a corresponding order processing contract. You can find the data protection information at www.talentsconnect-ag.de/docs/privacy-en.

6. Do we transmit data to third countries?

Your data will only be processed within the European Union and countries within the European Economic Area (EEA). Otherwise, you will always be informed separately in advance, including the right to object to such data transfer separately at any time.

7. How long do we store your data?

We only store your personal data for as long as is necessary for the provision of the associated contractual services. In addition to the duration of the actual application process, this also includes data processing as part of the initiation and execution of the employment relationship. In addition, we are subject to various retention and documentation obligations, including those arising from the General Equal Treatment Act (AGG) and the Code of Civil Procedure (ZPO).

8. Is there an obligation to provide data?

As part of the application process, you only need to provide the personal data that is required to start, carry out and complete the application process.

9. To what extent is there automated decision-making in individual cases?

In principle, we do not use automated decision-making in accordance with Art. 22 GDPR to justify and carry out the application. Should we use these procedures in individual cases, we will inform you of this individually.

10. To what extent do we use your data for profiling?

We do not process your data for so-called "profiling" in accordance with Art. 4 No. 4 GDPR.

11. What data protection rights do you have?

Under the respective legal requirements, you have the right to request confirmation at any time as to whether we process personal data and the right to information (Art. 15 GDPR, Section 34 BDSG) about this personal data. You also have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR, Section 35 BDSG) and restriction of data processing (Art. 18 GDPR), as well as the right to object to the processing (Art. 21 GDPR) of personal data at any time, or to withdraw your consent to data processing at any time or to request data portability (Art. 20 GDPR). You also have the right to lodge a complaint with a supervisory authority in the event of data protection violations (Art. 77 GDPR, Section 19 BDSG).

With this data protection notice, we inform you about the processing of your personal data by us and the rights to which you are entitled. The legal basis can be found in the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

1. Who is responsible for data protection?

Woco Industrietechnik GmbH is responsible for data processing

Phone: +49 6056 78-0, 
E-Mail: info@de.wocogroup.com

2. How can you contact our data protection officer?

You can reach our data protection officer by e-mail at: datenschutz@de.wocogroup.com

3. What data do we process and where does it come from?

We process personal data that we receive from you in connection with an application. In particular, the following data is processed: Master data (e.g. name, address and contact details, CV), correspondence data (e.g. correspondence with you) and other applicant data (certificates, training certificates, etc.).

4. What do we process your data for (purpose of processing) and on what legal basis?

a)    On the basis of your consent to data processing (Art. 6 para. 1 lit. a GDPR) 
If and insofar as you have given your consent to the processing of personal data, the respective consent is the legal basis for the processing specified therein. You can revoke your consent at any time with effect for the future. 
b)    For contractual purposes and purposes of the employment relationship (Art. 6 para. 1 lit. b GDPR, Section 26 BDSG)
Your data will be processed to initiate or execute our contracts with you. In addition, data is processed for the purposes of the employment relationship if this is necessary for the decision on the establishment of an employment relationship or, after the establishment of the employment relationship, for its implementation or termination. The specific purposes of data processing are determined in detail by the respective employment contracts. For the purposes of the employment relationship, processing is also carried out in part on the basis of collective agreements (in particular collective agreements and works agreements).
c)    In the context of the balancing of interests (Art. 6 para. 1 lit. f GDPR)
Your data may also be used on the basis of a balancing of interests to protect the legitimate interests of us or third parties. This is done, for example, for the purpose of ensuring IT security and IT operations, asserting legal claims and defending against legal disputes, preventing and investigating criminal offenses, risk management and fraud prevention. 
d)    Due to legal requirements (Art. 6 para. 1 lit. c GDPR)
We are subject to various legal obligations that entail data processing. These include, for example, tax laws, as well as statutory accounting, the fulfillment of inquiries and requirements of national or foreign supervisory or law enforcement authorities and the fulfillment of tax control and reporting obligations, as well as the Working Hours Act (ArbZG) or the Minimum Wage Act.

With this data protection notice, we inform you about the processing of your personal data by us and the rights to which you are entitled. The legal basis can be found in the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
 

1. Who is responsible for data protection?

Woco Industrietechnik GmbH is responsible for data processing
Phone: +49 6056 78-0, E-Mail: info@de.wocogroup.com
 

2. How can you contact our data protection officer?

You can reach our data protection officer at datenschutz@de.wocogroup.com.

 

3. What data do we process and where does it come from?

We process personal data that we receive from you in connection with an application. In particular, the following data is processed: Master data (e.g. name, address and contact details, CV), correspondence data (e.g. correspondence with you) and other applicant data (certificates, training certificates, etc.).
 

4. What do we process your data for (purpose of processing) and on what legal basis?

a)    On the basis of your consent to data processing (Art. 6 para. 1 lit. a GDPR)
If and insofar as you have given your consent to the processing of personal data, the respective consent is the legal basis for the processing specified therein. This applies, for example, to the receipt of electronic customer information. You can revoke your consent at any time with effect for the future.
b)    For the fulfillment of contractual obligations (Art. 6 para. 1 lit. b GDPR)
Your data will be processed to initiate or execute our contracts with you or our contractual partners, 
i.e. for the provision of our services, for example. The specific purposes of data processing depend in detail on the respective service and product descriptions and the associated contract documents.
c)    Due to legal requirements (Art. 6 para. 1 lit. c GDPR)
We are subject to various legal obligations that entail data processing. These include, for example, tax laws and statutory accounting, the fulfillment of inquiries and requirements of national or foreign supervisory or law enforcement authorities as well as the fulfillment of tax control and reporting obligations.
d)    In the context of the balancing of interests (Art. 6 para. 1 lit. f GDPR)
Your data may also be used on the basis of a balancing of interests to protect the legitimate interests of us or third parties. This is done, for example, for the purpose of further developing our services or systems and products, ensuring IT security and IT operations, advertising, market and opinion research, the assertion of legal claims and defense in legal disputes, the prevention and investigation of criminal offenses as well as risk management and fraud prevention.

5. Who do we pass the data on to?

Your data will only be passed on by us within the company to those of our departments that need it to fulfill their contractual and legal obligations or to fulfill their respective tasks (e.g. customer service, IT, sales and marketing). In addition, external bodies will only receive your data without exception if they have been contractually obliged by us to fulfill their obligations as processors (Art. 28 GDPR) and guarantee that they will process your data in accordance with our instructions. In addition, we only pass on data to persons who work on behalf of our contractual partners or to bodies or persons for whom you have given us your consent to transfer data.

6. Do we transmit data to third countries?

When using Microsoft 365, personal data is transferred to third countries. Further details on data protection and data security at Microsoft can be found at: 
https://privacy.microsoft.com/de-de/privacystatement

Otherwise, your data will only be processed within the European Union and countries within the European Economic Area (EEA). Otherwise, you will always be informed separately in advance, including the right to object to such data transfer separately at any time.
 

7. How long do we store your data?

We only store your personal data for as long as is necessary for the provision of the associated contractual services. In addition to the duration of the actual business relationship, this also includes data processing in the context of the initiation and execution of contracts. In addition, we are subject to various retention and documentation obligations arising from the German Commercial Code (HGB) and tax regulations (German Fiscal Code - AO), among others. The retention and documentation periods specified there are five to ten years. Finally, the storage period is also determined by the statutory limitation periods, which, for example, according to Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to 30 years.

8. Is there an obligation to provide data?

As part of our business relationship, you must only provide the personal data that is required for the establishment, execution and termination of a business relationship or that our contractual partners or we are legally obliged to collect. Otherwise, it will not be possible to conclude or execute the contract.
 

9. To what extent is there automated decision-making in individual cases?

In principle, we do not use automated decision-making in accordance with Art. 22 GDPR to establish and conduct the business relationship. Should we use these procedures in individual cases, we will inform you of this separately.
 

10. To what extent do we use your data for profiling? 

We process your data partly automatically with the aim of evaluating certain personal aspects (so-called "profiling" in accordance with Art. 4 No. 4 GDPR). Profiling is used, for example, to determine the potential interest of our contractual partners in our products and your services. This evaluation is carried out, for example, on the basis of statistical procedures using current and past customer data. We use the results to address you in a more needs-based and targeted manner.
 

11. What data protection rights do you have?

Under the respective legal requirements, you have the right to request confirmation at any time as to whether we process personal data and the right to information (Art. 15 GDPR, Section 34 BDSG) about this personal data. You also have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR, Section 35 BDSG) and restriction of data processing (Art. 18 GDPR), as well as the right to object to the processing (Art. 21 GDPR) of personal data at any time, or to withdraw your consent to data processing at any time or to request data portability (Art. 20 GDPR). You also have the right to lodge a complaint with a supervisory authority in the event of data protection violations (Art. 77 GDPR, Section 19 BDSG).
 

12. Separate reference to your right to object

1.    Right to object on a case-by-case basis
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests). This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR, which may be carried out, for example, for customer advice and customer support and for sales purposes. If you object, your personal data will no longer be processed unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

2.    Right to object to the processing of data for direct marketing purposes
We may also process your data for direct marketing purposes within the scope of the statutory provisions. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising, without incurring any costs other than the transmission costs according to the basic rates. This also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection can be made in any form. The contact details can be found in section 1 of this privacy policy.

With this data protection notice, we inform you about the processing of your personal data by us and the rights to which you are entitled. The legal basis can be found in the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
 

1. Who is responsible for data protection?

Responsible for data processing is Woco Industrietechnik GmbH
Phone: +49 6056 78-0, E-Mail: info@de.wocogroup.com
 

2. How can you contact our data protection officer?

You can reach our data protection officer at datenschutz@de.wocogroup.com.

 

3. What data do we process and where does it come from?

We process personal data that we receive from you in connection with the initiation of a business relationship (e.g. inquiry, quotation) or from the business relationship. In particular, the following data is processed: Master data (e.g. name, address and contact details of the legal representatives, bank details and tax number of the contractual partner; contact details of the individual contact persons ), correspondence data (e.g. correspondence with you, customer support) as well as advertising and sales data, contract data (type and content), order data, sales and receipt data, supplier history and consulting documents.
 

4. What do we process your data for (purpose of processing) and on what legal basis?

a)    For the fulfillment of contractual obligations (Art. 6 para. 1 lit. b GDPR)
The personal data is processed for the initiation and execution of the respective supplier contracts. The specific purposes of data processing are determined in detail by the respective service descriptions and the associated contract documents.
b)    Due to legal requirements (Art. 6 para. 1 lit. c GDPR)
We are subject to various legal obligations that entail data processing. These include, for example, tax laws and statutory accounting, the fulfillment of inquiries and requirements of national or foreign supervisory or law enforcement authorities as well as the fulfillment of tax control and reporting obligations.
c)    In the context of the balancing of interests (Art. 6 para. 1 lit. f GDPR)
The personal data may also be used on the basis of a balancing of interests to protect the legitimate interests of us or third parties. This is done, for example, for the purpose of ensuring IT security and IT operations, advertising, market and opinion research, the assertion of legal claims and defense in legal disputes, the prevention and investigation of criminal offenses as well as risk management and fraud prevention.
 

5. Who do we pass the data on to?

Your data will only be passed on by us within the company to those of our departments that need it to fulfill their contractual and legal obligations or to perform their respective tasks (e.g. financial accounting, purchasing, IT). In addition, external bodies will only receive your data without exception if they have been contractually obliged by us to fulfill their obligations as processors (Art. 28 GDPR) and guarantee that they will process your data in accordance with our instructions. In addition, we only pass on data to persons who work on behalf of our contractual partners or to bodies or persons for whom you have given us your consent to transfer data.

6. Do we transmit data to third countries?

Your data will only be processed within the European Union and countries within the European Economic Area (EEA). Otherwise, you will always be informed separately by us in advance, including the right to object to such data transfer separately at any time.
 

7. How long do we store your data?

We only store your personal data for as long as is necessary for the provision of the associated contractual services. In addition to the duration of the actual business relationship, this also includes data processing in the context of the initiation and execution of contracts. In addition, we are subject to various retention and documentation obligations arising from the German Commercial Code (HGB) and tax regulations (German Fiscal Code - AO), among others. The retention and documentation periods specified there are five to ten years. Finally, the storage period is also determined by the statutory limitation periods, which, for example, according to Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to 30 years. 
 

8. Is there an obligation to provide data?

As part of our business relationship, you must only provide the personal data that is necessary for the establishment, execution and termination of a business relationship or that our contractual partners or we are legally obliged to collect. Otherwise, it will not be possible to conclude or execute the contract.
 

9. To what extent is there automated decision-making in individual cases?

In principle, we do not use automated decision-making in accordance with Art. 22 GDPR to establish and conduct the business relationship. Should we use these procedures in individual cases, we will inform you of this separately.
 

10. To what extent do we use your data for profiling?

We do not process your data for so-called "profiling" in accordance with Art. 4 No. 4 GDPR.
 

11. What data protection rights do you have?

Under the respective legal requirements, you have the right to request confirmation at any time as to whether we process personal data and the right to information (Art. 15 GDPR, Section 34 BDSG) about this personal data. You also have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR, Section 35 BDSG) and restriction of data processing (Art. 18 GDPR), as well as the right to object to the processing (Art. 21 GDPR) of personal data at any time, or to withdraw your consent to data processing at any time or to request data portability (Art. 20 GDPR). You also have the right to lodge a complaint with a supervisory authority in the event of data protection violations (Art. 77 GDPR, Section 19 BDSG).
 

Kronach

Name and contact details of the person responsible and, if applicable, their representative:

Woco Kronacher Kunststoffwerk GmbH, Industriestraße 7, 96317 Kronach 

Phone: +49 9261 505-299, E-Mail: kronacher@de.wocogroup.com 
 

Contact details of the data protection officer:

You can contact our data protection officer (Claudia Albrecht, PRW Consulting GmbH) at the following e-mail address:

datenschutz@de.wocogroup.com 
 

Purposes and legal basis of data processing:

Video surveillance is carried out within the scope of domiciliary rights to safeguard Woco's legitimate interest in preventing and preserving evidence of criminal offenses. Surveillance is not used to monitor performance and behavior or to compare and measure the performance of employees.  

Legal basis: Art. 6 para. 1 lit. f) GDPR. 
 

Legitimate interests that are being pursued: 

The camera surveillance system serves exclusively a) to prevent or detect access by unauthorized persons, to prevent industrial espionage, theft, etc., b) to record damage to property, c) to prevent or detect theft on the company premises and to prevent or detect criminal offences, d) to comply with legal, regulatory or customer requirements and e) to detect violations that would justify extraordinary termination of employees without notice. 
 

Storage duration or criteria for determining the duration: 

The retention periods for the video streams vary and are defined per camera and recording purpose. Recordings from video surveillance are generally deleted after 14 days. If facts justify the assumption that actions can be identified that can be prosecuted as a criminal offence or used to assert claims under civil law, they are stored for a longer period of time, as there are specific reasons for this.
 

Recipients or categories of recipients of the data (if data transfer takes place):

The persons responsible for video surveillance have access to the recordings as part of their work. Data from recordings is only transferred to third parties (e.g. law enforcement authorities) if this is necessary to investigate criminal offenses.
 

Information on the rights of data subjects

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information specified in Art. 15 GDPR. 

The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).

The data subject has the right to obtain from the controller restriction of processing where one of the conditions listed in Art. 18 GDPR applies, e.g. if the data subject has objected to processing, for the duration of the controller's review.

The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims (Art. 21 GDPR).

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement.

Bad Soden-Salmünster

Name and contact details of the person responsible and, if applicable, their representative:

Woco Industrietechnik GmbH, Hanauer Landstraße 16, 63628 Bad Soden-Salmünster 

Phone: +49 6056 78-0
E-Mail: info@de.wocogroup.com 
 

Contact details of the data protection officer: 

You can contact our data protection officer (Claudia Albrecht, PRW Consulting GmbH) at the following e-mail address:  

datenschutz@de.wocogroup.com 
 

Purposes and legal basis of data processing:

Video surveillance is carried out within the scope of domiciliary rights to safeguard Woco's legitimate interest in preventing and preserving evidence of criminal offenses. Surveillance is not used to monitor performance and behavior or to compare and measure the performance of employees.  

Legal basis: Art. 6 para. 1 lit. f) GDPR. 
 

Legitimate interests that are being pursued:

The camera surveillance system serves exclusively a) to prevent or detect access by unauthorized persons, to prevent industrial espionage, theft, etc., b) to record damage to property, c) to prevent or detect theft on the company premises and to prevent or detect criminal offences, d) to comply with legal, regulatory or customer requirements and e) to detect violations that would justify extraordinary termination of employees without notice. 
 

Storage duration or criteria for determining the duration:

The retention periods for the video streams vary and are defined per camera and recording purpose. Recordings from video surveillance are generally deleted after 7 days. If facts justify the assumption that actions can be identified that can be prosecuted as a criminal offense or used to assert civil law claims, they are stored for a longer period of time, as this is based on a specific occasion.
 

Recipients or categories of recipients of the data (if data transfer takes place):

The persons responsible for video surveillance are given access to the recordings as part of their work. Data from recordings is only transferred to third parties (e.g. law enforcement authorities) if this is necessary to investigate criminal offenses. 
 

Information on the rights of data subjects 

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information specified in Art. 15 GDPR.

The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure). 

The data subject has the right to obtain from the controller restriction of processing where one of the conditions listed in Art. 18 GDPR applies, e.g. if the data subject has objected to processing, for the duration of the controller's review.

The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims (Art. 21 GDPR). 

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement.

This data protection notice informs you about the processing of your personal data by us and the rights to which you are entitled.

1.Who is responsible for data protection?

The following Woco Group companies are responsible for data processing:  

Woco GmbH & Co. KG, Woco Franz Josef Wolf Holding GmbH, Woco Industrietechnik GmbH, Woco IPS GmbH, Effbe GmbH, Woco Kronacher Kunststoffwerk GmbH, Woco Eisenacher Kunststofftechnik GmbH.

Phone: +49 6056 78-0, E-Mail: info@de.wocogroup.com 
 

2. How can you contact our data protection officer? 

You can reach our data protection officer by e-mail at: datenschutz@de.wocogroup.com 
 

3. What data do we process and where does it come from?

The WOCO AR app enables you to obtain detailed information on individual components and products of the Woco Group via QR codes. In order for the WOCO AR app to provide this service, you need authorization to access the following functions on your mobile device: 

• Camera (no recording or storage of image data takes place at any time);  
• Internet;
• Location (location data, e.g. for geolocalization, is not processed either by the Woco Group or by our external service provider).

Your contact details are not accessed. The app can be used without registration (e.g. via an e-mail address).  

In exceptional cases, people may also be in the camera's field of vision. However, such image data is not processed or used; no recordings are made (see above).
 

4. What do we process your data for (purpose of processing) and on what legal basis?

This process serves to inform and train the trainees and interns of the Woco Group and other interested parties.  

The legal basis for data processing is Art. 6 para. 1 lit. a) GDPR (consent to the release of authorizations) and Art. 6 para. 1 lit. f) GDPR (legitimate interest). The legitimate interest is to ensure the technical functionality of the app.  
 

5. Who do we pass the data on to?

Personal data is only passed on within the company to those departments that need it to fulfill contractual and legal obligations or to perform their respective tasks. In addition, external bodies only receive personal data if we have obligated them to fulfill their data protection obligations. The app is managed and maintained by our service provider, romeis Information Engineering GmbH. The WOCO AR app is hosted via Google Cloud.  
 

6. Do we transmit data to third countries?

We do not transfer personal data to recipients in so-called third countries, i.e. countries outside the European Economic Area (EEA) or to international organizations, as part of this process.
 

7. How long do we store your data?

We only store your personal data for as long as is necessary to provide the associated services (use of the app). Image data is not recorded or stored at any time.
 

8. Is there an obligation to provide data?

You only need to provide the personal data required to use the services.
 

9. To what extent is there automated decision-making in individual cases? 

We do not use automated decision-making in accordance with Art. 22 GDPR as part of this process.
 

10.To what extent do we use your data for profiling? 

We do not process your data automatically with the aim of evaluating certain personal aspects (so-called "profiling" in accordance with Art. 4 No. 4 GDPR).
 

11. Which data protection rights do you have?

Under the respective legal requirements, you have the right to request confirmation at any time as to whether we process personal data and the right to information (Art. 15 GDPR, Section 34 BDSG) about this personal data. You also have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR, Section 35 BDSG) and restriction of data processing (Art. 18 GDPR), as well as the right to object to the processing (Art. 21 GDPR) of personal data at any time, or to withdraw your consent to data processing at any time or to request data portability (Art. 20 GDPR). You also have the right to lodge a complaint with a supervisory authority in the event of data protection violations (Art. 77 GDPR, Section 19 BDSG).