Data privacy policy

1. Data Protection information

General Information

Swoboda Wiggensbach KG collects and uses your personal data exclusively within the scope of the provisions of data protection law of the Federal Republic of Germany. In the following, we inform you about the type, scope, and purposes of the collection and use of technical and personal data. You can access this information at any time on our website www.swoboda.com under Data Protection.
For carrying out the application process, we use the applicant management system of rexx systems GmbH as a processor.
 

Data Processing on Our Website

Data processing on this website is carried out by Swoboda Wiggensbach KG. You can find our contact details in the imprint of this website.
 

How Do We Collect Your Data?

Your data is collected, by you actively providing it to us, for example by email or via a contact form. Other data is automatically collected by our IT systems when you visit the website. This mainly includes technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter our website.
 

Which Cookies Do We Use?

Some of the data is collected directly by our server to ensure an error‑free provision of the website (necessary cookies). Other data may be used to analyze your user behavior (statistical cookies) or for marketing purposes (marketing cookies). For this purpose, we use Matomo. You may object to the storage of statistical and marketing cookies further below.
 

What Rights Do You Have Regarding Your Data?

You have the right at any time to obtain free information about the origin, recipients, and purpose of your personal data stored at Swoboda. You also have the right to demand the correction, blocking, or deletion of this data.
 

2. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this takes place. We also point out that data transmission over the Internet (e.g. communication by email) may have security gaps. Complete protection of data against access by third parties is not possible.
 

Information on the Responsible Entity and Data Protection Officer

Responsible entity:
Swoboda Wiggensbach KG
Max‑Swoboda‑Straße 1
87487 Wiggensbach / Allgäu

Our Data Protection Officer:
Sascha Dionisius
DIOMIKO UG (limited liability)
Frankenbacher Str. 32
74336 Brackenheim
Phone: +49 (0)151 505 907 36
Email: datenschutzbeauftragter@swoboda.com

 

Withdrawal of Your Consent to Data Processing

Many data processing operations at Swoboda are only possible with your express consent. You can revoke consent already given at any time. An informal notification by email to us is sufficient. The legality of the data processing carried out up to the point of revocation remains unaffected by the revocation.
 

Information, Blocking, Deletion

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients, and the purpose of data processing and, if applicable, a right to correct, block, or delete this data.
For this purpose, as well as for further questions about personal data, you may contact us at any time at the address stated in the imprint. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
 

Objection to Advertising Emails

The use of contact data published within the scope of the imprint obligation for the transmission of advertising and information materials not expressly requested is hereby objected to. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.
 

3. Website Analysis

For the purposes of analyzing and optimizing our websites, we use various services, which are presented below. This allows us, for example, to analyze how many users visit our site, which information is in greatest demand, or how users find the offering.
Among other things, we collect data on which website a data subject came from to an internet page (so‑called referrer), which sub‑pages of the website were accessed, or how often and for what duration a sub‑page was viewed. This helps us to design our offerings in a user‑friendly way and to improve them.
 

Server Log Files

The provider of the pages automatically collects and stores information in so‑called server log files, which your browser automatically transmits to us.
These are:
  • Operating system used
  • Referrer URL
  • Time of the server request
  • IP address
These data are not combined with other data sources.The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).
 

Matomo

Our website uses the open‑source web analytics service Matomo, a service of “InnoCraft Ltd”, a company based at 7 Waterloo Quay, PO625 Wellington, New Zealand. As InnoCraft is located outside the EU, InnoCraft has appointed a representative in the EU: ePrivacy Holding GmbH, Große Bleichen 21, 20354 Hamburg (privacy@innocraft.com).
We use the data collected by Matomo for statistical analysis of user behavior for the purpose of optimizing the functionality and stability of the website and for marketing purposes. Our interest and purpose of data processing lie in the optimization of our website, the adaptation of content, and the improvement of our offering.
Matomo uses cookies that enable an analysis of website usage. For this purpose, the usage information recorded in the cookie (including your shortened IP address) is transmitted to Matomo’s servers located in the EU and stored for usage analysis purposes. With Matomo, no data is transmitted to servers that are outside our control. Your IP address is anonymized immediately during this process, so that you cannot be identified as a user. The collected information about your use of this website is not passed on to third parties.
We store analysis data only for as long as required by the purpose of data processing, but for a maximum of 5 months and 28 days. Information on the duration of storage by Matomo can be obtained from the provider or here.
You can prevent the setting of (individual or all) cookies by adjusting your browser settings; however, in this case you may not be able to fully use all functions of this website.
If you do not agree with the storage and analysis of your usage data from your visit to our website, you can prevent your data from being collected by Matomo at any time below by clicking with the mouse. An opt‑out cookie will then be set via your browser, which has the effect that Matomo does not collect any session data. Please note: If you delete your cookies, the opt‑out cookie will also be deleted and must be set again by you.
The legal basis for this data processing is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may revoke your consent at any time with effect for the future by accessing the cookie settings in our consent management platform and changing your selection there.
 

Use and Integration of YouTube

We have integrated videos from YouTube on our pages. YouTube is an Internet video portal that enables the free uploading of video clips and allows other users to view, rate, and comment on them free of charge.
YouTube permits the publication of all types of videos, which is why complete film and television programs as well as music videos, trailers, or videos produced by users themselves can be accessed via the Internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043‑1351, USA.
Each time one of the individual pages on which a YouTube component (YouTube video) has been integrated is accessed, the Internet browser on the user’s IT system is automatically caused to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be accessed at www.youtube.com/yt/about.
As part of this technical process, YouTube and Google receive information about which specific sub‑page on www.swoboda.com is visited by the data subject. If the data subject is logged into YouTube at the same time, YouTube recognizes which specific page is visited when calling up a page that contains a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject. This takes place regardless of whether the data subject clicks on a YouTube video or not.
If such a transmission of this information to YouTube and Google is not desired, the transmission can be prevented by logging out of the YouTube account before accessing our website. The privacy policy at www.google.de/intl/en/policies/privacy/ provides further information on the collection, processing, and use of personal data.
 

Use and Integration of Social Media

Functions of the Instagram service are integrated on this website. These functions are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
If the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website.
If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. This enables Instagram to associate the visit to this website with your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or of its use by Instagram.
The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. The consent can be revoked at any time.
Insofar as personal data is collected on our website using the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing pursuant to Art. 26 GDPR.
The joint responsibility is limited exclusively to the collection of the data and its transmission to Facebook or Instagram. The processing carried out by Facebook or Instagram after the forwarding is not part of the joint responsibility. The obligations jointly incumbent upon us have been laid down in an agreement on joint processing. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum
According to this agreement, we are responsible for providing the data protection information when using the Facebook or Instagram tool and for the data‑protection‑compliant implementation of the tool on our website. Facebook is responsible for data security of the Facebook and Instagram products. Data subject rights (e.g. requests for information) regarding the data processed by Facebook or Instagram can be asserted directly with Facebook. If data subject rights are asserted with us, we are obliged to forward them to Facebook.
Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum
https://privacycenter.instagram.com/policy/
https://de-de.facebook.com/help/566994660333381
Further information can be found in Instagram’s privacy policy: https://privacycenter.instagram.com/policy/
The company is certified under the “EU‑US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active
 

4. Applications

Active Sourcing

To recruit, we carry out so‑called active sourcing measures. In doing so, we identify potential candidates on the external labor market and actively contact them in order to specifically inform them about career opportunities in our company. The processing of personal data is carried out exclusively for the purpose of recruitment, for identifying suitable profiles and for individually approaching potential applicants with regard to open or future job vacancies.
Within the scope of active sourcing, we process in particular the following categories of personal data, insofar as they are publicly accessible:
  • Master and contact data (e.g. last name, first name, if applicable gender, professional contact details)
  • Information on education and professional careers
  • Qualifications and professional skills
  • Information on professional interests and extracurricular experience
  • pplication‑ and career‑relevant information
  • Other information relating to professional careers that is publicly available
Processing is carried out exclusively based on personal data originating from generally accessible and publicly viewable sources. These include professional social networks (e.g. LinkedIn, XING) as well as other freely accessible internet sources.
The legal basis for the collection and processing of personal data within the scope of active sourcing is Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the effective identification, approach, and recruitment of qualified employees to ensure sustainable personnel planning.
 

Applications

You can apply to our company via our application portal at https://karriere.swoboda.com/. Please note that unencrypted emails are not transmitted with access protection.
Your details are used for processing your application and for deciding on the establishment of an employment relationship. The legal basis is Art. 6(1)(b) GDPR. Furthermore, your personal data may be processed insofar as this is necessary to defend against asserted legal claims arising from the application process against us. The legal basis for this is Art. 6(1)(f) GDPR. The stated purposes also constitute the legitimate interest in processing.
If an employment relationship is established between you and us, we may further process the personal data already received from you pursuant to Art. 6(1)(b) GDPR for purposes of the employment relationship if this is necessary for the performance or termination of the employment relationship. Processing of your application data beyond the use described does not take place.
Your personal data will be deleted after completion of the application procedure at the latest after 6 months, provided that no other legitimate interests on our part oppose deletion or you have not given us consent for longer storage. Other legitimate interests in this sense include, for example, an obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG).
 

Job Alert

With your consent pursuant to Art. 6(1)(a) GDPR, you may subscribe to our Job Alert, with which we inform you about suitable, current job postings.
For registration to our Job Alert, we use the so‑called single opt‑in procedure. In this procedure, you confirm the receipt of emails within the scope of the Job Alert by entering your email address.
The only mandatory information required for sending the newsletter is your email address. The provision of additional data marked separately is voluntary and is used to address you personally. After your confirmation, we store your email address for the purpose of sending the Job Alert. The legal basis is Art. 6(1)(a) GDPR.
You may revoke your consent to receive the newsletter at any time and unsubscribe. The revocation can be declared by clicking on the link provided in each newsletter email or by submitting a contact request to the data protection officer stated above.
 

Talent Pool

If individuals apply unsolicited without reference to a specific position or give consent during an application process for a specific position to longer storage of their application data, we store the personal data transmitted during the application in our talent pool. This is done in order to identify suitable and potentially interesting job offers in the future and, if applicable, to contact the data subjects.The legal basis for storing the data in the talent pool is the respective explicitly granted consent, which can be revoked at any time with effect for the future. 
 

Trade Fair Contacts and Recordings at Trade Fairs

Personal data provided to us during trade fair visits or other events (e.g. in the context of contact capture, conversations, business cards, or similar contacts) is processed exclusively for handling the matter discussed in each case. Contact may be made by post, telephone, or email.
In addition, in connection with our participation in trade fairs and events, we create photos and videos of our trade fair presence, on which visitors may also be depicted. When creating such recordings, metadata such as date, time, and location are regularly recorded. We process the recordings for public relations purposes, such as reporting on our trade fair appearances and for company presentation on our website, in social media, print media, or press releases. The legal basis is our legitimate interest in appropriate external presentation and reporting on our events. We ensure that no legitimate interests of the people depicted are impaired, for example by publishing disadvantageous representations.
Furthermore, the recordings may serve internal documentation and archiving purposes, for a long‑term company chronicle. Here too, the depiction of the event or trade fair appearance is the focus, even if individual visitors are recognizable. The legal basis is our legitimate interest in internal documentation of our activities.
If targeted individual or portrait photographs or interviews are to be created, this is carried out exclusively based on prior explicit consent of the affected person. In these cases, the recordings are used only for purposes previously agreed.
Recordings are stored only for as long as required for the respective purposes. Recordings for public relations and marketing purposes are stored for as long as they are used for these purposes. We reserve the right to archive them beyond this for documentation purposes. Individual and portrait recordings based on consent are generally stored only until consent is revoked or the respective purpose ceases to apply.
 

Recipients of Data

Within our organization, only those internal departments and organizational units receive access to personal data that require it to fulfill their respective tasks, for example for the performance of contractual relationships, for processing based on consent of the data subject, or for safeguarding overriding legitimate interests.
Personal data is only passed on to external third parties in accordance with statutory provisions and only if this is necessary for the fulfillment of contractual purposes or to safeguard our legitimate interests in proper and efficient business operations.
If we use external service providers or third‑party providers in the operation of our website or the provision of other services, we ensure through appropriate contractual arrangements and suitable technical and organizational measures that personal data is adequately protected.
Within the Swoboda Group of companies, personal data may also be transferred to or made accessible to affiliated companies insofar as this is necessary for the conduct of application procedures, group‑wide recruiting processes, administrative purposes, or operation of the applicant management system. This currently applies to companies within the European Union, including our location in Sibiu, Romania, within the scope of group‑wide recruiting processes.