##Data protection declaration for visiting our website and other mandatory information according to Sect. 13, 14 EU General Data Protection Regulation (EU-GDPR)

Content:

I. General mandatory information according to Sect. 13, 14 EU-GDPR

II. Specific information regarding data collection on our website General mandatory information according to Sect. 13, 14 EU-GDPR

III. Further information on data processing in the context of application procedures

I. General mandatory information according to Sect. 13, 14 EU-GDPR

In connection with the provision of our services, we collect personal data to the extent that you provide it to us. In addition, we process personal data only in accordance with the applicable legal provisions or on the basis of your explicit consent. In doing so, we ensure compliance with the data protection regulations both technically and organizationally.

§ 1 Details of the responsible body:

Responsible for the data collection is:

OE Germany Handels GmbH
Fritz-Müller-Str. 100-104
73730 Esslingen am Neckar
Germany

Tel.: +49 (0) 711 627698-0
Fax: +49 (0) 711 627698-51
Mail: info@oe-germany.de
Internet address: http://www.oe-germany.de/
Legal representatives: Mario Jahn (CEO), Thomas Schechinger (CFO)

§ 2 Information regarding the data protection officer:

You can reach our external data protection officer at:

Creditreform Compliance Services GmbH
Hellersbergstr. 11
41460 Neuss
E-Mail: datenschutz@oe-germany.de

§ 3 Information on the supervisory authority

The competent supervisory authority for data protection is:

The state commissioner for data protection and freedom of information,

postal address:

Mailbox 10 29 32
70025 Stuttgart
Phone.: 0711/615541-0
FAX: 0711/615541-15
E-Mail: poststelle@lfdi.bwl.de
https://www.baden-wuerttemberg.datenschutz.de/

§ 4 Rights of the persons concerned

(1) For the collection of your personal data you are entitled to the following rights:

• Right of information, Sect. 15 GDPR: Under Sect. 15 Para. 1 GDPR, data subjects have the right to request confirmation as to whether personal data relating to them is being processed. If this is the case, they also have the right to be informed of this personal data and to receive further information in accordance with Sect. 15 Para. 1 Letters a to h of the GDPR.

• Right of rectification, Sect. 16 GDPR: If the personal data is incorrect or incomplete in view of the purposes of processing, Art. 16 GDPR provides the right to demand that the personal data will be corrected or completed.

• Right to deletion, Sect. 17 GDPR: According to Sect. 17 (1) GDPR, there is a right to request the deletion of personal data if the processing of personal data is not permitted for one of the reasons stated in this provision. However, deletion may not be requested if further processing is necessary in the cases set out in Sect. 17 (3) GDPR, e.g. to meet legal obligations.

• Right to limited processing, Sect. 18 GDPR: Under the conditions set out in Sect. 18 (1) Letters a to d GDPR, the data subject has the option of requesting that the processing will be restricted (blocked).

• Right to data transferability according to Sect. 20 GDPR: The persons concerned have the right to receive their personal data, which they themselves have provided to the OE Germany Handels GmbH and which are automatically processed by the OE Germany Handels GmbH based on a consent or a contract, in a common machine-readable format. This right is, among other things, subject to the reservation of technical feasibility.

As well as

• The right to object, Sect. 21 GDPR: Data subjects have the right to object to the processing of their personal data processed on the basis of a weighing of interests (Sect. 6 Para. 1 Letter f GDPR), taking into account the requirements of Sect. 21 GDPR.

If the objection is directed against direct advertising (possibly with associated profiling), you can object to the processing of your personal data for advertising purposes at any time. In this case, data processing will no longer take place. In other cases, processing may continue despite objection only if compelling reasons for processing worthy of protection outweigh the interests, rights and freedoms of the data subject or if the processing serves the assertion, exercise or defense of legal claims.

(2) You can contact us at any time to assert your rights. For contact details, please see below § 1.

§ 5 Right of withdrawal of a granted consent

In addition, a granted consent can be changed or revoked completely at any time and without giving reasons with effect for the future. Revocation does not affect the legality of the processing of your data that took place on the basis of your consent until any revocation.

You can revoke your consent either by mail (OE Germany Handels GmbH, Fritz-Müller-Str. 100-104, 73730 Esslingen am Neckar), by e-mail (to datenschutz@oe-germany.de) or by fax (+49 (0) 711 627698-51) to the OE Germany Handels GmbH. This will not incur any additional costs beyond the basic rates.

§ 6 Right of appeal to the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The contact details of the supervisory authority responsible for us can be found above, under § 3.

II. Specific information about data collection on our website

In the following we inform you about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail address, IP address.

§ 1 Which data are processed for which purpose?

(1) With each access to the contents of the website, data is temporarily stored. The following data is collected:

• Date and time of access
• IP address
• Hostname of the accessing computer
• Website from which the website was accessed
• Websites accessed via the website
• Visited page on our website
• Message whether the retrieval was successful
• Transferred data volume
• Information about the browser type and version used
• Operating system

(2) Temporary storage of data is necessary for the course of a website visit to enable delivery of the website. Further storage in log files takes place to ensure the functionality of the website and the security of the information technology systems. These purposes are also our legitimate interest in data processing.

(3) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in accordance with the browser you are using and through which certain information flows to the site that sets the cookie (in this case us). Cookies cannot execute programs or transfer viruses to your computer. They are basically used to make the internet offer more user-friendly and effective.

You can configure your browser settings according to your wishes and, for example, refuse to accept cookies. We would like to point out that you may not be able to use all functions of this website.

§ 2 On which legal basis these data are processed?

The data are processed on the basis of Sect. 6 Para. 1 Letter f GDPR.

§ 3 Are there other recipients of the personal data besides the person responsible?

The website is hosted at 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, info@ionos.de. The hoster receives the above mentioned data as a processor of orders.

Within the scope of contract implementation, order processors outside the European Union can also be used.

§ 4 How long is the data stored?

The data will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of the provision of the website, this is the case when the respective session has ended. The log files are kept directly and exclusively accessible to administrators for a maximum of 24 hours. After that they are only available indirectly via the reconstruction of backup tapes and are permanently deleted after a maximum of four weeks.

§ 5 Further functions and offers of our website

(1) In addition to the purely informative use of our website, we offer various services which you can use if interested. For this purpose, you will generally have to provide additional personal data which we use to provide the respective service and to which the aforementioned principles for data processing apply.

(2) In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.

§ 6 Use of our forms (contact form and catalogue order)

On our website there is a contact form which can be used for electronic contact. Furthermore, you can use the form for ordering catalogues to request the desired printed versions of our catalogues.

When you contact us by e-mail or by using a contact or catalogue order form, the data you provide will be stored by us in order to answer your questions or process your request. We will delete the data collected in this context after the storage is no longer necessary or restrict the processing if there are legal storage obligations.

In this context, the data will not be passed on to third parties. The data is used exclusively for processing and answering your request.

The legal basis for this is, depending on the request, Sect. 6 Para. 1 sentence 1 lit. b GDPR, i.e. a contract or its possible initiation, or Art. 6 para. 1 Cl. 1 Letter f GDPR and therefore both of us have a legitimate interest in processing and responding to your request.

§ 7 Your rights in connection with the data processing on our website

In principle, you are entitled to the rights to information, to objection, to correction, deletion and restriction of processing. You also have the right to data transferability and the right to complain to a data protection supervisory authority.

For further details on your rights as a data subject, please refer to Sect. I. §§ 4, 5 and 6.

III. Further information to Sect. 13, 14 GDPR on data processing in the context of application procedures

In the following we will inform you about the scope, purpose and use of your personal data collected during the application process.

§ 1 For what purposes do we process your data and on what legal basis?

We will only process your data within the scope of the application procedure if this is permitted by an applicable legal provision, i.e. on the basis of the provisions of the GDPR, the Federal Data Protection Act and other applicable legal provisions, such as the Works Constitution Act. In doing so, we will base the processing of your personal data on the following legal bases, among others:

• For the decision on the establishment of the employment relationship (Sect. 6 Para. 1 Letter b GDPR, § 26 Federal Data Protection Act) e.g. for the pre-selection and invitation of eligible applicants
• For the fulfilment of legal obligations, Sect. 6 Para. 1 Letter c GDPR, e.g. if we have to record the settlement of travel expenses for the job interview as invoice-relevant documents
• On the basis of your consent, Sect. 6 Para. 1 Letter a GDPRg. if you give us your consent that we may keep your application documents in order to be able to consider them directly in future job advertisements
• To safeguard legitimate interests, Sect. 6 Para. 1 Letter f GDPR, e.g. to be able to examine possible claims under the General Equal Treatment Act following the application procedure.

§ 2 Which data or categories of data will we process?

As part of the application process, we will process your personal data to the extent necessary to determine your suitability to fill the open positions. This data processing may involve the following data or data categories, among others:

• Personal data and contact information, such as name, e-mail address and telephone number, home address, date of birth, gender, nationality
• Training, performance and employment data, such as information on school and university degrees, professional experience, skills and performance appraisals
• Other application documents, that you make available to us, such as letters of application, certificates, resumes, driver’s license class, passport photos or other information, e.g. relating to hobbies or volunteer work
• Special categories of personal data: If you provide information in your application documents that contains special categories of personal data (e.g. information on marital status, which may allow conclusions to be drawn about your sexual orientation; information on your health; inclusion of a photograph that allows conclusions to be drawn about your ethnic origin and, if applicable, your eyesight and/or religion), we will also process this data only to the extent permitted by law.

§ 3 From which sources do we obtain your data?

We collect your personal data for the application relationship from various sources to determine their suitability.

• Data that you provide us with: First of all, we process personal data that you provide us with during the application process. This applies in particular to your application documents.
• Data collected by third parties: We also process – as far as necessary – personal data that we have received from third parties (e.g. a job agency) in a manner permitted by data protection law.
• Data from publicly available sources: We process personal data that we have permissibly obtained from publicly accessible sources (e.g. social or professional networks) to the extent that this is necessary to determine your suitability to fill the open positions in the application process.

§ 4 To which locations will my data be transmitted?

Within the OE Germany GmbH only those positions that are entrusted with the preparation and implementation of the application process will receive your data.

This includes employees of the human resources department and the departments in which an open position is to be filled.

If commissioned external service providers receive personal data for these purposes, we ensure that suitable technical and organizational measures are implemented and necessary agreements concluded in such a way that processing is carried out in accordance with the valid data protection regulations and guarantees the protection of the rights of the person concerned.

We may disclose personal data to third parties:

• Business partners for whom the data transfer is necessary to fulfill their tasks, e.g. payment service providers/banking institutions, postal/parcel services.
• IT service provider/computer center as service provider

§ 5 Is data transferred to a third country or to an international organization?

There is no transfer of data to third countries or international organizations.

§ 6 How long will we store your data?

We will store your personal data in accordance with the legal requirements, in particular Sect. 17 GDPR.

Storage during the application process: If necessary, we will store your data for the duration of the application process.

• When an employment relationship comes into existence: Should we establish an employment relationship with you following the application process, we will transfer your data to the personnel file and then store it for as long as legally required.

• If your application is rejected: If no employment relationship is established between you and us, the application process ends with the receipt of a rejection. Against the background of § 61 Para. 1 German Labour Court Law in conjunction with § 15 German Labour Court Law, we reserve the right to retain the data for up to six months after the rejection.

• Storage due to legitimate interests: Under certain circumstances, we may also use your data for the duration of the statutory limitation period in accordance with §§ 195 et seq. German Civil Code.

§ 7 Your rights

You are basically entitled to the rights of information, objection, correction, deletion, restriction of processing and the right to data transferability. Furthermore, you have the right to revoke a given consent at any time and the right to complain to a data protection supervisory authority.

For further details on your rights as a data subject, please refer to the above, to Sect. I. §§ 4, 5 and 6.

§ 8 Is there an obligation for me to provide data?

In order to be able to decide whether we want to establish an employment relationship with you, we need the above-mentioned personal data. Without this data we cannot carry out the application procedure. However, there is no legal obligation to provide this data during the application process.

§ 9 Automated decision making or profiling

An automated decision making in individual cases including profiling according to Sect. 22 GDPR does not take place within the application procedure.