Data protection

Salzgitter Mannesmann International GmbH appreciates your interest in our company and your visit to our website. The protection of your personal data is an important concern for us. We would therefore like to inform you below about the processing of personal data in the context of the use of our website and inform you about the rights to which you are entitled.

Responsible person, data protection officer

For Salzgitter Mannesmann Handel GmbH (hereinafter "we", "us" and "our"), the protection of your privacy and the legally compliant handling of your personal data is a high priority. This privacy policy sets out the principles according to which all personal data that we collect from you or that you provide to us is processed by us.

The controller within the meaning of Art. 4 (7) of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is the:

Salzgitter Mannesmann International GmbH
Wiesenstraße 36/ Building 397
45473 Mülheim an der Ruhr
kontakt-smid@szmh-group.com

Company data protection officer:

Salzgitter Mannesmann International GmbH
For the attention of the Data Protection Officer
Wiesenstraße 36/ Building 397
45473 Mülheim an der Ruhr
or by e-Mail to datenschutzbeauftragte@szmh-group.com erreichen.

Processing of personal data

During your visit to our website, we process personal data as part of the operation of the site.

1. Server-Log-Files

Every time a user accesses our website and every time a file is retrieved, data about this process is temporarily stored in a log file. The stored data is analyzed anonymously exclusively for internal statistical purposes in order to continuously improve the content of our website. No personal data is used.

In detail, a data record is stored for each access, which contains the following data in particular:

• IP address used
• Operating system used
• Browser used
• time of access
• the websites you visit on our site
• the website from which you visit us (if transmitted)
• the amount of data transmitted in each case

2. Career portal of Salzgitter AG

If you would like to apply for a job with us online, you will be redirected to the Salzgitter AG careers portal. Salzgitter AG operates the careers portal as an internal processor within the Group.

You can find the data protection information for the career portal here:
Data protection for applicants

3. Cookie settings

Our website uses cookies, small text files that are stored on your end device with the help of the browser. We use cookies to make our website user-friendly. These cookies remain on your device until they expire or you delete them and enable us to recognize you on your next visit.

You can specify in the browser settings that you wish to be informed about the setting of cookies and only allow them in individual cases. Please note that deactivating cookies may limit the functionality of our website.

4. Use of Google Fonts (locally integrated)

We use the Google Fonts font on our website, which is provided by Google Inc. Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for the European area. The Google fonts are integrated locally on our web server, which means that there is no connection to Google's servers and therefore no data transfer or storage takes place.

The integration of Google Fonts via the Google Font API is not data protection compliant according to current case law. In order to integrate Google Fonts in compliance with data protection regulations, the fonts should be hosted locally on the server. This can be done by downloading the desired font from the Google Fonts website and providing it on your own server. In this way, a connection to the Google servers is avoided and no data is transferred to Google Fonts. This enables GDPR-compliant use of the fonts.

If you would like to find out more about Google Fonts, please click on the following link:

Google Fonts FAQ

5. Links

Our website contains links to other websites. These links have been checked by us with reasonable care. The company is not responsible for the content and data protection on the sites we link to. Further information on the social media presences accessible via our website can be found here.

6. SSL encryption

SSL encryption is used on our website for security reasons and to protect the transmission of confidential content. An encrypted connection can be recognized by the address line of the browser, which changes from "http://" to "https://", and by a lock symbol in the browser line.

By activating SSL encryption, the data transmitted to us cannot be read by third parties.

7. Deletion and retention periods of data

If we have stored your personal data, we will only process it for the period required to achieve the purpose of storage or if this is required by law. If the storage purpose no longer applies or if a statutory storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

Log files are deleted in accordance with provider specifications:

• The access logs of the web servers record which pages were accessed at which time. They contain the following data: IP, directory protection user, date, time, pages accessed, logs, status code, data volume, referrer, user agent, host name accessed.
• The IP addresses are stored anonymously. For this purpose, the last three digits are removed, i.e. 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymized. The anonymized IP addresses are stored for 60 days. Details of the directory protection user used are anonymized after one day.
• Error logs, which record incorrect page views, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the website accessed.
• It is not possible to set an individual storage period. Storage beyond this period is possible in exceptional cases. In this case, however, the IP addresses of the users are deleted or distorted so that it is no longer possible to identify the accessing client.

Within Salzgitter Mannesmann International GmbH and its affiliated companies, access to your data is only granted to those departments that need it to perform their tasks within Salzgitter Mannesmann International GmbH, to safeguard our legitimate interests or to fulfill contractual and legal obligations.

So that we can offer you the best possible service and remain competitive, we also exchange data within the Salzgitter AG Group companies if this is necessary to safeguard our legitimate interests and your interests or fundamental rights and freedoms do not outweigh our interests. Whenever this is the case, we ensure that the transfer of data is carried out in accordance with data protection requirements and that your personal data is protected.

If you have provided us with personal data, this will not be passed on to third parties. It will only be passed on:

• as part of the fulfillment of legal obligations to bodies entitled to receive information;
• within the scope of a consent given by you;
• to IT service providers, e.g. for the administration and hosting of our website.

8. Transfer to third countries

Data will only be transferred to countries outside the EU or the EEA (so-called third countries) if this is listed in this privacy policy, is necessary for the execution of orders, is required by law or if you have given us your consent.

9. Rights of the data subjects

Every data subject has the right to information in accordance with Art. 15 GDPR. If we process your personal data, you have the right to rectification in accordance with Art. 16 GDPR, the right to erasure in accordance with Art. 17 GDPR, the right to restriction of processing in accordance with Art. 18 GDPR, the right to object in accordance with Art. 21 GDPR and the right to data portability in accordance with Art. 20 GDPR. The restrictions under Sections 34 and 35 BDSG apply to the right to information and the right to erasure. In addition, you have the right to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

If you have given us your consent to data processing, you can revoke this at any time in the same way in which you gave it. The revocation can be made informally, e.g. by e-mail to datenschutzbeauftragte@szmh-group.com or by sending a message to the contact details given above. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

10. Right to object to the processing

Pursuant to Art. 21 (1) GDPR, you have the right to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) (f) GDPR (data processing to safeguard legitimate interests).

If you file an objection, we will no longer process your personal data for the purposes covered by the objection, unless

• we can demonstrate compelling legitimate grounds which override the interests, rights and freedoms of the data subject, or
• the processing serves the establishment, exercise or defense of legal claims.

If the objection is also or only directed against data processing for direct advertising, we will no longer process your personal data for this purpose.

The objection can be made informally, e.g. by e-mail to datenschutzbeauftragte@szmh-group.com or by sending a message to the contact details given above.

11. Legal basis of the processing

The processing of personal data in connection with the use of contact forms is based on Art. 6 para. 1 lit. b) GDPR, provided that the purpose of the contact is to fulfill a contract or to carry out pre-contractual measures. If our company is subject to a legal obligation which requires the processing of personal data, the processing is based on Art. 6 para. 1 lit. c) GDPR.

Insofar as we obtain your consent for the processing of personal data, this serves as the legal basis in accordance with Article 6(1)(a) GDPR. In addition, processing operations may be based on Article 6(1)(f) GDPR, according to which processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

We use the server log files, cookies, web fonts, embedded YouTube videos and web analysis tools so that you can use all the functions of our website to their full extent and for the needs-based design and optimization of our website. When you contact us via our contact form and functions in our career blog, we use your data for the purpose of interacting with you and for corporate communication.

12. Obligation to provide personal data

In principle, there is no obligation to provide personal data when you visit our website. Something else may result from contractual regulations. If the aforementioned personal data is not provided, it may not be possible to achieve the individual purposes described.

13. No automated decision-making

We do not use fully automated decision-making within the meaning of Art. 22 GDPR.

14. Amendment of the privacy policy

In the course of the continuous development of the Internet, it is necessary to adapt the data protection declaration at intervals. Regularly calling up the data protection declaration gives you the opportunity to inform yourself about changes.

15. Supplement to the data protection declaration

Below you will find additional data protection information in accordance with the EU General Data Protection Regulation for business partners and interested parties of Salzgitter Mannesmann International GmbH. The information is available here.

Status: December 2023