Data Protection

Personal data is information relating to you as an individual. This includes, for example, your name, address and email address. You do not need to provide any personal data in order to visit our website.

If you contact us with enquiries or requests, we will collect the information you provide to us. Please therefore note that you should only provide us with the personal data we need to respond to your enquiry or request, or which you provide to us voluntarily. When you contact us, we will keep a copy of the correspondence on our records.

If we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the GDPR serves as the legal basis.

Where we process personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to the processing of personal data necessary for the implementation of pre-contractual measures.

Where personal data is necessary for compliance with a legal obligation, the processing is carried out on the basis of Article 6(1)(c) of the GDPR.

Where the processing of personal data is necessary to protect the vital interests of the data subject or of another natural person, the processing of personal data is carried out on the basis of Article 6(1)(d) of the GDPR.

Where processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

If you have provided us with personal data, we will delete the data once the purpose for which it was collected has been fulfilled, provided that this does not conflict with any commercial or tax law requirements.

When you visit our website, we store certain information for administrative and technical reasons. This includes: the type and version of the browser used, the date and time of access, and the IP address.

This data is anonymised and used solely for statistical purposes or to improve our website and online services.

This anonymised data is stored – separately from personal data – on secure systems and cannot be linked to any individual. This means that your personal data remains protected at all times.

Please refer to the privacy notice for candidates for details on the processing of personal data as part of the recruitment process.

When you visit our website, information may be stored in your browser history in the form of cookies. Cookies are small files that are sent from a web server to your browser and stored on your hard drive. Only your IP address is stored in this process – no personal data. The information stored in the cookies enables us to automatically recognise you the next time you visit our website, making it easier for you to use the site.

Of course, you can also visit our website without accepting cookies. If you do not wish your computer to be recognised on your next visit, you can refuse the use of cookies by changing the settings in your browser to ‘Reject cookies’. You can find the relevant instructions in your browser’s user guide. However, if you refuse to accept cookies, this may result in restrictions on the use of certain areas of our website.

On this website, we use the ‘Matomo’ software (www.matomo.org), a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. The software places a cookie (a text file) on your computer, which enables your browser to be recognised. When our website is accessed, the following data is stored: 1.) the user’s IP address, truncated by the last two bytes (anonymised), 2.) the subpage accessed and the time of access, 3.) the page from which the user arrived at our website (referrer), 4.) the browser used, along with any plugins, the operating system and the screen resolution, 5.) the duration of the visit to the website and its subpages.

The data collected via Matomo is stored on our own servers. It is not passed on to third parties.

We use the data to analyse users’ browsing behaviour and to obtain information about the use of the individual components of the website. This enables us to continuously optimise the website and its user-friendliness. These purposes constitute our legitimate interest pursuant to Article 6(1)(f) of the GDPR. By anonymising the IP address, we take account of users’ interest in the protection of personal data. The data is never used to personally identify the website user and is not combined with other data. The data is deleted once it is no longer required for our purposes.

You may object to the recording of data in the manner described above: with a single click, you can set a so-called opt-out cookie (reset cookies), which is valid indefinitely. As a result, Matomo will not record your future visits. Please note, however, that the opt-out cookie will be deleted if you clear all cookies.

We use YouTube to embed videos. The videos have been embedded in enhanced privacy mode. However, like most websites, YouTube also uses cookies to collect information about visitors to its website. YouTube uses these, amongst other things, to compile video statistics, prevent fraud and improve user-friendliness. This also establishes a connection to the Google DoubleClick network. When you play the video, this may trigger further data processing operations. We have no control over this. Further information on data protection at YouTube can be found in their privacy policy at: http://www.youtube.com/t/privacy_at_youtube

To make it easier for you to find your way to our locations, we have included a link to Google Maps on our website. Clicking on these maps will redirect you to Google Maps. Further information regarding data protection on Google Maps can be found here: https://policies.google.com/privacy?hl=de

We have put in place technical and administrative security measures to protect your personal data against loss, destruction, tampering and unauthorised access. All our employees and service providers working on our behalf are obliged to comply with the applicable data protection laws. Whenever we collect and process personal data, it is encrypted before being transmitted. This means that your data cannot be misused by third parties. Our security measures are subject to a continuous improvement process, and our privacy policies are regularly updated. Please ensure that you have the most recent version.

You have the right at any time to access, rectify, erase or restrict the processing of your stored data, the right to object to the processing, as well as the right to data portability and the right to lodge a complaint in accordance with the provisions of data protection law.

Right of access

Subject to the conditions set out in Article 15 of the General Data Protection Regulation (GDPR), you may request information from us as to whether and to what extent we process your data. In particular, this means that you have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have the right to access this personal data and to receive the information set out in Article 15 of the GDPR.

This information covers, for example, the purpose of the processing, the categories of personal data being processed, and the recipients or categories of recipients to whom the personal data have been or will be disclosed (Article 15(1)(a), (b) and (c) of the GDPR).

You can find the full scope of your right of access in Article 15 of the GDPR.

Right to rectification

If we process your data and it is incomplete or inaccurate, you may request that we rectify or complete it at any time.

You can find the full scope of your right to rectification in Article 16 of the GDPR.

Right to erasure

You may request that we erase your data if we are processing it unlawfully or if the processing disproportionately infringes upon your legitimate interests. Please note that there may be reasons preventing immediate erasure, for example in the case of statutory retention obligations. Data that we require to establish, exercise or defend legal claims is also excluded from your right to erasure.

Irrespective of whether you exercise your right to erasure, we will erase your data promptly and in full, provided that no contractual or statutory retention obligations prevent us from doing so.

You can find the full scope of your right to erasure (‘right to be forgotten’) in Article 17 of the GDPR.

Right to restriction of processing

You may request that we restrict the processing of your data if…

a) you contest the accuracy of the data, for a period enabling us to verify the accuracy of the data.

b) the processing of the data is unlawful, but you object to erasure and instead request a restriction on the use of the data, …

c) we no longer need the data for the intended purpose, but you still need it to establish, exercise or defend legal claims, or …

d) you have objected to the processing of the data.

You can find the full scope of your right to restriction of processing in Article 18 of the GDPR.

Right to data portability

You may request that we provide you with the data you have supplied to us in a structured, commonly used and machine-readable format, and that you may transmit this data to another data controller without hindrance from us, provided that…

a) we process this data on the basis of consent given by you, which is revocable, or for the performance of a contract between us, and …

b) this processing is carried out by automated means.

Where technically feasible, you may request that we transfer your data directly to another controller.

You can find the full scope of your right to data portability in Article 20 of the GDPR.

Right to object

If we process your data on the basis of a legitimate interest, you may object to this data processing at any time; this would also apply to profiling based on these provisions. We will then no longer process your data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. You may object at any time, without giving reasons, to the processing of your data for the purposes of direct marketing.

You can find the full scope of your right to object in Article 21 of the GDPR.

Right to withdraw consent

If you have given us your consent to process your personal data, you may withdraw this consent at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of that consent prior to its withdrawal.

You may withdraw your consent at any time with future effect, e.g. by emailing compliance@psw-engineering.de or by writing to the company address given above.

Right to lodge a complaint

If you believe that we are breaching German or European data protection law in the processing of your data, please contact us so that we can clarify any issues. You also, of course, have the right to contact a data protection supervisory authority. The address of the data protection authority responsible for PSW is:

Bavarian State Office for Data Protection Supervision

Promenade 27 (Schloss)

91522 Ansbach

Germany

If you wish to exercise any of the rights mentioned above, please contact our Data Protection Officer. In case of doubt, we may request additional information to verify your identity.

We reserve the right to amend our privacy policies should this become necessary due to new technologies. Please ensure that you have the most up-to-date version. Should any fundamental changes be made to this Privacy Policy, we will announce them on our website.

Anyone interested in our website or visiting it can contact us regarding data protection matters at:

Mr Christian Volkmer

Projekt 29 GmbH & Co. KG

Ostengasse 14

93047 Regensburg

T +49 (0)941 29 86 93-0

F +49 (0)941 29 86 93-16

Email: anfragen@projekt29.de

www.projekt29.de

Should our Data Protection Officer be unable to resolve your enquiry to your satisfaction, you retain the right to lodge a complaint with the data protection supervisory authority responsible for your federal state.