Privacy Policy

We, Pfeifer & Langen GmbH & Co. KG, operate this website to inform you about our products and services. The protection of your personal data is important to us. Our company only ever collects and processes your personal data in compliance with data protection requirements. This privacy policy informs you about how we collect and process your personal data pursuant to Articles 13 and 14 of the EU General Data Protection Regulation (EU GDPR).

The entity responsible for data processing (“controller”) is

Pfeifer & Langen GmbH & Co. KG
Aachener Straße 1042 a
50858 Köln
Germany
Tel.: +49 (0)221 4980-0
Fax : +49 (0)221 4980-371
E-Mail: info@pfeifer-langen.de

Our data protection officer is:

Dr. Jan-Peter Ohrtmann (PwC)
External Data Protection Officer
jan-peter.ohrtmann@de.pwc.com

When you visit this website and use the website functions and services we process your personal data. The following sections explain in detail how and why we process it.

o operate the website and its various functions and services we collaborate with external service providers. All of them are meticulously selected and have concluded data processing agreements with us pursuant to Article 28 EU GDPR.

Server log files

Each time you access our website your browser transfers log files to our server which we process to maintain system security and analyze user statistics. The information that we receive in the server log files includes, in particular, time of access, referrer URL, subpages accessed, name of requested file, your IP address, volume of data transmitted, your browser type and version, and your provider. This data is necessary to maintain system security, e.g. if our website is attacked by a hacker it enables us to identify the hacker and block the attack. In processing this data our legitimate interest therefore prevails (Article 6 (1) f) EU GDPR).

Server log file data also allows us to perform a statistical analysis (scope of use and user behavior, e.g. total number of impressions or total page-specific impressions in any one month) which we use to optimize the website design. Our legitimate interest also prevails in this instance (Article 6 (1) f) EU GDPR).

We delete or anonymize the data records as soon as possible.

Cookies

We use session cookies that are saved on your computer until you close all browser windows whenever you visit our website. These session cookies are necessary to process any enquiries that you send us via our website and to direct you to the various subpages. It is in our legitimate interest to use session cookies because we could not otherwise provide our website service (Article 6 (1) f) EU GDPR). If you do not want cookies to be saved on your computer you can change your browser settings to block them. Although you can still visit our website if you block cookies, you may not be able to use all the website functions to their full extent.

Contact: e-mail form

We offer you the opportunity to contact us directly by e-mail. When you click on the e-mail address that is provided on our website your e-mail program opens with a pre-entered e-mail address so that you can send us an e-mail. We have no influence over your e-mail provider’s data processing practices; we merely provide a link to the e-mail program.

The information that you provide to us in e-mails is only used for the purpose of responding to your enquiry; we delete the data as soon as we finish corresponding with you unless legal obligations require us to save it. It is in our legitimate interest to process the information you provide to us (Article 6 (1) f) GDPR).

Data security

To ensure the best-possible protection of your personal data we implement technical and organizational security measures with SSL encryption (https standard) which are risk-appropriate and adapted when necessary to reflect the state of the art.

Data subject rights

You are accorded various rights by data protection legislation when we process personal data concerning you as a natural person. Under section 34 of the Federal Data Protection Act (BDSG) and Article 15 EU GDPR you have the right to obtain information about the personal data concerning you which is stored, the source of that personal data, the recipients or categories of recipients to whom the data is transferred and the purpose for which the data is stored.

Under section 35 BDSG and Articles 16 to 18 EU GDPR you have the right to rectification, erasure, and restriction of processing your personal data. You also have the right to request the transmission of your personal data to another controller pursuant to Article 20 EU GDPR.

You can object to the processing of your personal data if we process it for the purpose of a legitimate interest (Article 6 (1) f) EU GDPR. If we do not process your personal data for direct marketing purposes, you can object on grounds relating to your personal situation. As of the date on which you exercise this right to object we will stop processing your personal data until your objection has been reviewed. If the review reveals that your objection is justified, we will delete the data (section 36 BDSG, Article 21 EU GDPR).

You can withdraw your consent to the processing of your personal data (Article 6 (1) a) EU GDPR) at any time; in such case we will no longer process your personal data unless we are permitted by law to continue processing it.

Your objection or withdrawal of consent does not affect the lawfulness of processing up to the time of the objection or withdrawal of consent.

We comply with your rights without delay and without charge. Please contact us or our data protection officer to exercise your rights; our contact details are provided at the beginning of this privacy policy.

Under Article 77 EU GDPR you have the right to lodge a complaint with a supervisory authority.

Data protection information relating to the processing of job applicant data

If you send job application documents to us and provide other data in the course of the application process which can be used to identify you personally, these constitute personal data which are protected according to Article 4 (1) of the EU General Data Protection Regulation (GDPR). The information provided below explains how your applicant data is processed pursuant to Article 13 GDPR.

Our company only processes your personal data in accordance with data protection regulations, particularly the GDPR and the Federal Data Protection Act [Bundesdatenschutzgesetz, BDSG]. We only collect, store, transfer or use your personal data in accordance with effective data protection regulations (data processing, Article 4 (2) GDPR), if we are explicitly permitted or required to process it by law or if you have effectively consented to the processing of your data (Article 6 (1) a) in conjunction with Article 7 GDPR). The processing of your personal data is permitted, in particular, if this is necessary to any decision giving rise to an employment relationship or, once the employment relationship has been established, to execute or terminate the relationship (section 26, sub-section 1 BDSG, Article 6 (1) b) GDPR). The same applies if the data is processed by the controller for a purpose other than the employment relationship provided that a legitimate interest is pursued and there are no grounds for the assumption that such interest is overridden by your fundamental rights and freedoms as data subject to prevent the processing or use of your personal data (Article 6 (1) f) GDPR).

Controller and contact details

The controller (Article 4 (7) GDPR) responsible for the processing of your personal data in the employment relationship is: Pfeifer & Langen GmbH & Co. KG, Aachener Str. 1042 a, 50858 Köln, Germany. Please address any data protection-related enquiries to Marcel Hirt, HR Recruiting, e-mail: marcel.hirt@pfeifer-langen.com or contact our data protection officer directly: Dr. Jan-Peter Ohrtmann, PricewaterhouseCoopers, Moskauer Straße 19, 40227 Düsseldorf, Germany, phone: +49 (0)211 981-2572, e-mail: jan-peter.ohrtmann@de.pwc.com.

Personal data and purposes of processing

Application for a published job posting

If you wish us to include you in an application process for a specific position we require you to send us the customary application documents informing us of your personal profile and qualifications. We only use your application documents for the decision on filling the vacant position which you have explicitly applied for. The application documents are reviewed in the HR department and passed on to the potential future superior. Our senior management is additionally involved in decisions to fill management positions, so if you are applying for a management position they will also receive your application documents. We process your application documents electronically in our e-mail system and, if necessary, we additionally use printouts and copies (on paper). During the application process we may collect additional personal data from you, from generally accessible sources, or from former employers and trainers, for these information purposes. The legal bases for the processing of your personal data are Article 6 (1) b) GDPR and section 26, sub-section 1 BDSG. If you are not recruited at the end of the application process we will delete and destroy your application data six months after you have conclusively rejected our job offer or we have conclusively rejected your application.

If you are recruited at the end of the application process we will place your application documents in a personnel file since it contains information about your personal profile and qualifications which may be necessary for the purpose of executing the employment relationship. The legal bases are Article 6 (1) b) GDPR and section 26, sub-section 1 BDSG. In this case your application documents will be deleted and destroyed three years after the end of the year in which your employment relationship is terminated.

Unsolicited applications

If you send us an unsolicited application which makes no reference to a specific position we may use your application documents in recruitment decisions for all potentially suitable job vacancies. To make this possible we will send your application documents to the HR department for review and then involve colleagues in other departments where there may be a suitable job opening for you in the future by forwarding your documents to them. We process your application documents electronically in our e-mail system and, if necessary, we additionally use printouts and copies (on paper). As soon as your application documents are included in a recruitment process we may collect additional personal data from you, from generally accessible sources, or from former employers and trainers to obtain more detailed picture of your personal profile and qualifications. Your application data will be regularly deleted and destroyed one year after receipt if all recruitment processes involving your application documents have concluded. If you have conclusively rejected our job offer or we have conclusively rejected your application your data will be deleted and destroyed after six months.

If you are recruited at the end of the application process we may place your application documents in a personnel file since it contains information about your personal profile and qualifications which may be necessary for the purpose of executing the employment relationship. The legal bases are Article 6 (1) b) GDPR and section 26, sub-section 1 BDSG. In this case your application documents will be deleted and destroyed three years after the end of the year in which your employment relationship is terminated.

Transfer of your data within the Pfeifer & Langen Group

IT services are provided by our affiliate ISG Informatik Service Gesellschaft mbH under a contract processing arrangement pursuant to Article 28 GDPR.

Our cooperation with third party entities

We also benefit from the advantages of a society and business community that is based on the division of labor. In the area of data processing, this means that we do not implement all data processing activities on an in-house basis. Some activities are performed by external processors:

  • Career platforms: To find you we advertise our job vacancies on external career platforms. If you apply for a job via one of these platforms, the platform may send us your documents. No other collaboration takes place.
  • External (IT) service companies with which we have a contract processing arrangement conclude contracts with us in which they undertake to process data strictly in accordance with our specifications and instructions and to take comprehensive technical and organizational measures to protect the data.
  • External (IT) service companieswhich work for us at their own responsibility conclude contracts with us in which they undertake to take technical and organizational measures to protect data.

Transfer of data to other third parties, transfer of data outside the EU

We only transfer personal data to third parties if this is necessary for the stated purposes of data processing and if it is admissible under Article 6 GDPR and section 26, sub-section 1 BDSG. No data is transferred outside the EU.

Your data protection rights and remedies

If we process your personal data you have a number of rights under the GDPR and BDSG. You have the right

  • to obtain information about the personal data concerning you which we store, about the source of the data, about the purpose for which it is processed and about the recipients or categories of recipients (Article 15 GDPR, section 34 BDSG);
  • under certain circumstances to request the rectification, restriction of processing or erasure of your personal data by us (Article 16–18 GDPR, section 35 BDSG);
  • to request the transmission of your data to another controller (Article 20 GDPR) and
  • to lodge a complaint with us or the competent supervisory authority about the processing of your personal data (Article 77 GDPR).

You can also object to the further processing of your personal data if we process it for the purpose of a legitimate interest (Article 6 (1) f) GDPR). Since we do not process your data for direct marketing purposes, you can only object on grounds relating to your personal situation. As of the date on which you exercise this right to object we will stop processing your personal data until your objection has been reviewed. If the review reveals that your objection is justified, we will delete the data (section 36 BDSG, Article 21 GDPR).

You can withdraw your consent to the processing of your personal data (Article 6 (1) a) GDPR) at any time; in such case we will no longer process your personal data unless we are permitted by law to continue processing it.

A justified objection or withdrawal of consent does not affect the lawfulness of processing up to the time of the objection or withdrawal of consent.

We comply with your rights without delay and without charge. Please use the contact details provided to contact us or our data protection officer in order to exercise your rights or obtain clarification on any other issue.