Principles of Data Processing at Büter Hebetechnik GmbH

We appreciate your interest in working for our company. Below, we inform you, in accordance with Art. 13 GDPR, about the processing of your personal data within the scope of the application process.

1. Controller

Büter Hebetechnik GmbH
Emmener Str. 9, 49716 Meppen
Email: [email protected]
Phone: +49 (0) 5935/7059-0

For data protection concerns, please contact our Data Protection Officer:

Carla Holterhus
Email: datenschutz[at]bueter.de

2. Purpose and Legal Basis of Data Processing

Contract Performance

We process personal data that you voluntarily provide to us in the context of initiating and performing a contractual relationship, based on Art. 6 para. 1 lit. b GDPR. This includes, in particular, contact data, contract master data, payment and billing information. Insofar as further processing takes place, it is based on your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. The storage period is determined by statutory retention periods, in particular § 147 AO and § 257 HGB, and is generally ten years after the end of the contract.

Application Process

Within the scope of the application process, we process your personal data (e.g., master data, communication data, application documents) for the purpose of deciding on the establishment of an employment relationship in accordance with § 26 para. 1 BDSG in conjunction with Art. 6 para. 1 lit. b GDPR. In the event of a rejection, we store your data for six months after the conclusion of the process to safeguard legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, particularly for defense against potential legal claims under the AGG. Longer storage only occurs with your consent for inclusion in our applicant pool (Art. 6 para. 1 lit. a GDPR).

Customer and Prospect Data

For the implementation of pre-contractual measures and for contract fulfillment, we process your contact data, offer, order, and billing information in accordance with Art. 6 para. 1 lit. b GDPR. Furthermore, we use your data for direct marketing of our own products and services based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. You can object to this processing at any time (Art. 21 GDPR). Any further use is exclusively based on your consent (Art. 6 para. 1 lit. a GDPR). The data is stored in accordance with statutory retention periods, generally ten years.

Employee Data

Within the scope of the employment relationship, we process your personal data for the performance of the employment contract in accordance with § 26 para. 1 BDSG in conjunction with Art. 6 para. 1 lit. b GDPR. Further processing takes place based on consent in accordance with Art. 6 para. 1 lit. a GDPR or for the fulfillment of legal obligations under Art. 6 para. 1 lit. c GDPR. The storage period is determined by statutory retention obligations, regularly ten years after the termination of the employment relationship.

Supplier Data

For the initiation and performance of contractual relationships, we process personal data of our business partners and suppliers, in particular contact data, order, and payment information. The processing takes place based on Art. 6 para. 1 lit. b GDPR. Supplementary data processing takes place based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. The storage period is generally ten years in accordance with § 147 AO and § 257 HGB.

3. Recipients of your Personal Data

Personal data is only passed on within our company to those departments that require it for the fulfillment of contractual and legal obligations or in the context of processing and implementing our legitimate interest. Furthermore, external recipients only receive your data insofar as this is permissible for contract fulfillment, based on legal regulations, consent, or a legitimate interest. This particularly concerns the following categories of recipients:

Public bodies (e.g., tax authorities, social security institutions, law enforcement agencies) in the presence of overriding legal obligations under Art. 6 para. 1 lit. c GDPR,
External service providers and processors in accordance with Art. 28 GDPR, who act on our instructions, particularly in the areas of IT services and hosting, accounting, payroll, payment processing, shipping and logistics, printing and mailing services, insurance, applicant management, and marketing,
Other third parties, provided that the data subject’s consent in accordance with Art. 6 para. 1 lit. a GDPR is available or a transfer in accordance with Art. 6 para. 1 lit. f GDPR is permissible due to an overriding legitimate interest.

4. Data Transfer to Third Countries

If personal data is transferred to processors or other recipients in third countries (outside the European Union or the European Economic Area), this is done exclusively in compliance with the requirements of Art. 44 et seq. GDPR. This includes, in particular, the conclusion of standard contractual clauses of the European Commission in accordance with Art. 46 para. 2 lit. c GDPR or the existence of an adequacy decision in accordance with Art. 45 GDPR. A transfer to service providers in the USA only takes place if they are certified under the EU-U.S. Data Privacy Framework or if equivalent safeguards exist.

5. Your Rights as a Data Subject

In accordance with Art. 12 et seq. GDPR, you have the following rights at any time with regard to the processing of your personal data:

Right of Access in accordance with Art. 15 GDPR: You have the right to obtain confirmation as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and to further information in accordance with Art. 15 para. 1 GDPR.
Right to Rectification in accordance with Art. 16 GDPR: You have the right to demand the immediate rectification of inaccurate or the completion of incomplete personal data.
Right to Erasure in accordance with Art. 17 GDPR (“Right to be Forgotten”): You have the right to demand the immediate erasure of your personal data, provided that the legal requirements are met, in particular if the data is no longer necessary for the purposes for which it was collected or otherwise processed.
Right to Restriction of Processing in accordance with Art. 18 GDPR: You have the right to demand the restriction of the processing of your personal data if one of the conditions mentioned in Art. 18 GDPR is met.
Right to Data Portability in accordance with Art. 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and to transmit this data to another controller.
Right to Object in accordance with Art. 21 GDPR: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR. In the case of processing for direct marketing purposes, you have a general right to object, which applies without the need to state a particular situation.
Withdrawal of Granted Consents in accordance with Art. 7 para. 3 GDPR: You have the right to withdraw a once-granted consent at any time with effect for the future. The lawfulness of processing carried out until the withdrawal remains unaffected.

To exercise your rights, please contact: datenschutz[at]bueter.de

Right to Lodge a Complaint with a Supervisory Authority: If you believe that the processing of your personal data violates data protection regulations, you have the right, in accordance with Art. 77 GDPR, to lodge a complaint with a competent data protection supervisory authority. This right exists without prejudice to any other administrative or judicial remedies.

6. No Automated Decision-Making

No automated decision-making or profiling as defined by Art. 22 GDPR takes place by us.

7. Changes to these Notices

We reserve the right to adapt these notices in the event of changes in data processing or legal requirements. The current version can always be found here or on our website.

As of: 2025-04-02