Privacy policy

Thank you for your interest in our company. The issue of data protection is taken very seriously at Magna Auriga GmbH & Co. KG. In order to use the website of Magna Auriga GmbH & Co. KG, you do not have to provide any personal data. If, on the other hand, you make use of a special service (e.g. newsletter registration) via the website, the processing of personal data is required. If there is no legal basis for this, consent will first be obtained from the data subject. The Magna Auriga GmbH & Co. KG generally processes personal data in line with the General Data Protection Regulation (GDPR) and the country-specific data protection regulations applicable to Magna Auriga GmbH & Co. KG country-specific data protection regulations. Personal data of a data subject are, for example: Name, address, telephone number or the e-mail address. Through this data protection declaration, the Magna Auriga GmbH & Co. KG would like to inform you about the type, scope and purpose of the use of the personal data used and processed by the company. Likewise, data subjects are fully clarified and informed about their rights through this data protection declaration. A number of organizational and technical measures have been arranged and implemented by the Magna Auriga GmbH & Co. KG to ensure that the company as the controller of personal data processed through the website provides complete protection. Contrary to our high security measures, data transmitted via the Internet may always represent a risk. Every person is free to transmit his or her personal data to us by telephone, among other means

1. explanation of terms

Some terms used in the data protection declaration of Magna Auriga GmbH & Co. KG are mandatory by law and therefore obligatory according to the European Directives. For this reason, these occur in the DS-GVO (Data Protection Regulation). Of course, the public, our customers and business partners should receive a simple and understandable privacy policy. For this reason, some terms are explained at the beginning, so that a fluid and thereby readable privacy policy can be ensured. For example, the following terms are used in this privacy policy, which we are happy to explain: (DS-GVO Art. 4 - Definitions).

I) Personal data + data subject

The European Union defines this in the Data Protection Directive 95/46/EC in Art. 2 lit. (littera=letter) a as information relating to an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity. The General Data Protection Regulation (GDPR) explains the concept of personal data as "any information relating to an identified or identifiable natural person (hereinafter 'data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person."

II) Processing

Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

III)Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.

IV) Profiling

Profiling is any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to the job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location of such natural person

V) Pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separate and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

VI) File system

Ein Dateisystem ist jede strukturierte Sammlung personenbezogener Daten, die nach bestimmten Kriterien zugänglich sind, unabhängig davon, ob diese Sammlung zentral, dezentral oder nach funktionalen oder geografischen Gesichtspunkten geordnet geführt wird.

VII) Controller

Controller means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.

VIII) Processor

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller

IX) Recipient

Recipient means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients. The processing of such data by the aforementioned authorities shall be carried out in accordance with the applicable data protection legislation, in accordance with the purposes of the processing.

X) Third Party

Third party means any natural or legal person, public authority, agency or other body, except the data subject, the controller, the processor and the persons who, under the direct responsibility of the controller or the processor, are authorized to process the personal data

XI) Consent

Consent of the data subject shall mean any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.

XII) Personal data breach

Personal data breach means a breach of security leading to the destruction, loss or alteration, whether accidental or unlawful, or to the unauthorized disclosure of or access to personal data transmitted, stored or otherwise processed.

2. Name and address of the controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature, the controller is:

Magna Auriga GmbH & Co. KG

Morschheimerstraße 15

67292 Kirchheimbolanden

GermanyTel.: +49 (0) 711 65550660

E-Mail: Contact@Magna-Auriga.com

Website: www.magna-auriga.com

3. cookies

Our website of Magna Auriga GmbH & Co. KG uses so-called cookies. Cookies are small text files that are stored on a computer system via an Internet browser. By means of a so-called cookie ID, the information and offers on our website can be optimized in the sense of the user. Cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. Some cookies remain stored on your terminal device until you delete them. You can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time using an Internet browser or other software programs. This is possible in all common Internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be fully usable. In order to be able to manage or delete cookies, we would like to provide you with the following external links to help you: Firefox - Block, delete, manage cookies Chrome - Delete, enable, manage cookies Safari - Manage cookies Internet Explorer - Delete and manage cookies

4. collection of general data and information (log data)

By calling up the website of Magna Auriga GmbH & Co. KG, some data and information is automatically collected whenever a data subject or automated system calls up the website. This is general data and information, which is stored in log files on the server. The following points can be recorded: a) Browser type and the associated version b) The operating system used c) The Internet page from which you have reached us. This is called referrer. This means your web browser sends us the information and refers to how you found our website. d) Date & time when accessing the website e) The IP address (Internet Protocol address) f) Other information or data that is used so that in the event of an attack on our system, we can detect and ward off necessary threats. This is general data that does not allow any conclusions to be drawn about you. Magna Auriga GmbH & Co. KG needs this information to be able to offer a smooth provision of the website. It is necessary to optimize content and possibly advertising, so that the function of the online presence can be used without restriction. It must also be ensured that cooperation with law enforcement authorities is guaranteed in the event of a cyber attack. All of the aforementioned data is anonymous and consequently serves to maintain the best possible protection of personal data. The anonymous server log files mentioned, are also stored completely separately from the other personal data.

5. subscription to our newsletter

On our website you have the opportunity to subscribe / register for a newsletter. The personal data required for this can be found in the input mask. At regular intervals, our business partners receive new offers, as well as information about the company via our newsletter. In order to receive this newsletter, certain requirements must be met. The basic requirement is a valid e-mail address and registration for the free newsletter delivery. Due to legal aspects, a confirmation email is sent in the so-called double opt-in procedure. This serves to verify that you have actually registered and are therefore authorized to receive the newsletter. Also at this point, we store the IP address assigned by the Internet service provider (ISP) during registration. In doing so, the time and date of registration by you is recorded. This serves only as a preventive measure for possible misuse, in order to be able to trace it later. It represents a legal safeguard for us. The personal data required for receiving the newsletter will not be passed on to third parties. If, for example, technical circumstances have changed, you will be informed immediately. Likewise, you can revoke your consent for the newsletter at any time. This is possible either directly via the website, or via the link at the end of each newsletter. Of course, you can also send us your revocation, for example, by e-mail or by post.

6. newsletter tracking

The newsletters of Magna Auriga GmbH & Co. KG are provided with a so-called tracking pixel. This enables us to carry out a log analysis. Through this process, online marketing campaigns can be measured. We use this information to further improve our offer. We will not share this data and information with third parties. You are entitled to revoke your consent at any time. Magna Auriga GmbH & Co. KG will delete all personal data. If you unsubscribe from the newsletter, this automatically counts as a revocation for us

7. contact possibility via the website

Due to legal regulations, you have the possibility on our website to get in touch with us by a quick electronic contact. The personal data you voluntarily send to us, for example via e-mail, will be stored for the processing of your request and used for the fulfillment of our activities. It will not be passed on to third parties.

8. storage of personal data and period

Magna Auriga GmbH & Co. KG processes and stores personal data of the data subject only for the period of time necessary to achieve the purpose of storage or insofar as this has been provided for by the European Directives and Regulations or another legislator in laws or regulations to which the controller is subject. If the storage purpose ceases to apply or if a storage period prescribed by the European Directive and Regulation Maker or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

9. rights of the data subject

I) Right to information

The controller shall provide data subjects, upon request, with information as to whether it is processing data relating to them. Data subjects also have the right to obtain information about 1. the personal data that are the subject of processing and the category to which they belong, 2. the available information about the origin of the data, 3. the purposes of the processing and its legal basis, 4. the recipients or categories of recipients to whom the data have been disclosed, in particular in the case of recipients in third countries or international organizations, 5. The storage period applicable to the data or, if this is not possible, the criteria for determining this period, 6. The existence of a right to rectification, erasure or restriction of processing of the data by the controller, 7. The right under Section 60 BDSG (new) to call upon the Federal Commissioner, and 8. Information on how to reach the Federal Commissioner

II) Right to rectification

The data subject has the right to request that the data controller correct any inaccurate data concerning him or her without undue delay. In particular, in the case of statements or assessments, the question of accuracy does not concern the content of the statement or assessment. If the accuracy or inaccuracy of the data cannot be established, the rectification shall be replaced by a restriction of processing. In this case, the controller shall inform the data subject before lifting the restriction. The data subject may also request the completion of incomplete personal data, if this is appropriate, taking into account the purposes of the processing. III) Right to erasure (right to be forgotten) Art. 17-EU-DS-GVO The data subject has the right to demand from Magna Auriga GmbH & Co. KG to erase personal data concerning him or her without delay, and the controller is obliged to erase personal data without delay, if one of the following reasons applies: - The personal data are no longer necessary for the purposes for which they were collected or otherwise processed. - The data subject revokes the consent on which the processing was based pursuant to Article 6(1) DS-GVO(a) or Article 9(2)(a) and there is no other legal basis for the processing. - The data subject objects to the processing pursuant to Article 21(1) DS-GVO and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) DS-GVO. - The personal data have been processed unlawfully. - The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject. - The personal data has been collected in relation to information society services offered in accordance with Article 8(1) DS-GVO. If one of the above reasons applies to you, you can contact our data protection officer or one of our employees. The request for deletion will be complied with immediately. If Magna Auriga GmbH & Co. KG has made the personal data public and is obligated to delete it in accordance with paragraph 1, Magna Auriga GmbH & Co. KG shall, taking into account the available technology and the cost of implementation, implement reasonable measures, including technical measures, to inform data controllers which process the personal data that a data subject has requested that they erase all links to or copies or replications of such personal data.

IV. Right to restriction of processing

The data subject has the right to obtain from the controller the restriction of processing if one of the following conditions is met: a. if the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data, b. if the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data; c. if the controller no longer needs the personal data for the purposes of the processing, but the data subject needs it for the establishment, exercise or defense of legal claims; or d. the data subject has objected to the processing pursuant to Article 21(1) of the GDPR, as long as it has not yet been determined whether the legitimate grounds of the controller override those of the data subject. If one of the aforementioned reasons applies to you, you may contact our data protection officer or one of our employees. The request will subsequently be complied with without delay

V. Right to data portability

The data subject has the right to receive the personal data concerning him or her that he or she has provided to a controller in a structured, commonly used and machine-readable format, and he or she has the right to transmit such data to another controller without hindrance from the controller to whom the personal data have been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out with the aid of automated procedures. When exercising their right to data portability pursuant to Article 20(1) DS-GVO, the data subject has the right to obtain that the personal data be transferred directly from one controller to another controller, where technically feasible. If you wish to assert the right to data portability, please contact our data protection officer, or one of our employees

VI. Right to object

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) or (f) of the DS-GVO; this also applies to profiling based on these provisions. The controller shall no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims. If personal data are processed for the purposes of direct marketing by Magna Auriga GmbH & Co. KG to engage in direct marketing, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing; this also applies to profiling, insofar as it is related to such direct marketing. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes by Magna Auriga GmbH & Co. KG will be processed. In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her which is carried out for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the Data Protection Regulation, unless the processing is necessary for the performance of a task carried out in the public interest. If you wish to exercise the right to object to Magna Auriga GmbH & Co. KG, please contact our data protection officer, or an employee. Likewise, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, you may exercise your right to object by means of automated procedures using technical specifications. VII. Right to revoke consent under data protection law You have the right to revoke consent to the processing of your personal data at any time. If you wish to revoke a given consent, you may contact our data protection officer or an employee.

10. data protection for applications and in the application process

Magna Auriga GmbH & Co. KG collects personal data in the course of the application process. This can also be done electronically in the form of, for example, an e-mail. The use, processing and storage will, without exception, be for a specific purpose. This is limited to very few persons who are entrusted with the application process. If the purpose is fulfilled, or if the application procedure is completed and no employment contract is concluded, Magna Auriga GmbH & Co. KG will delete the data after two months, unless there is an explicit agreement on the part of the applicant that a further storage of the application documents is desired and thus permitted. Likewise, due to justified interest on the part of Magna Auriga GmbH & Co. KG a longer storage can take place. This would be the case, for example, if there is a duty to provide evidence for a procedure according to the General Equal Treatment Act (AGG). We would also like to point out that for the purpose of your application, information such as place of birth, date of birth, parents' occupation and marital status, among other things, is not required.

11. privacy policy regarding the use and application of Facebook

Magna Auriga GmbH & Co. KG has integrated components, including Facebook plugins, on its website. What is Facebook? Facebook is a social network that allows you to connect with other people and communicate in an online community. In doing so, personal information and experiences are exchanged. We use this network to publish company-relevant opinions and information. Also to provide photos and to connect with people interested in our company. Therefore, plugins (example: "Like Button") of the operator Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our website. You can recognize the Facebook plugins by the Facebook logo or the "Like button" ("Like") on our page. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/. Likewise, we would like to explicitly point out Facebook's data policies. You can get an overview here: https://www.facebook.com/about/privacy. In addition, Facebook is working on a new version of these guidelines. You can view these in advance here: https://www.facebook.com/about/privacy/update Facebook Inc. ("Facebook") is certified to the EU-US Privacy Shield Framework Agreement and the U.S.-Switzerland Privacy Shield Framework Agreement (collectively, the "Privacy Shield Framework Agreements") by the U.S. Department of Commerce. Important information about them can be found here: https://www.facebook.com/about/privacyshield. We would like to point out that if you visit our site and are still logged into your Facebook account at the same time, Facebook recognizes this and is thus informed that you are on our site. If you do not wish to do this, please log out of your Facebook account beforehand and only visit our website afterwards.

12. privacy policy regarding the use and application of LinkedIn

Magna Auriga GmbH & Co. KG has installed components of LinkedIn on its website. Business contacts have a high value for us, so we have joined this social, worldwide network. The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For data protection issues outside the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible. How does the component work? We have a so-called LinkedIn plugin on various pages of our website in different subpages. The process is not new, as we have already explained this. If you are registered with LinkedIn at the same time as visiting our website, or logged into your account, LinkedIn receives all the information about your stay and on which sub-page you are on our website, for example. If you do not want this, we recommend that you log out of your LinkedIn account beforehand. Specific information about this plugin can be accessed via this link: https://developer.linkedin.com/plugins Likewise, you can make further settings via https://www.linkedin.com/psettings/guest-controls, so that you can, among other things, switch off targeted advertising, or receive electronic messages. It is also possible that cookies are set, but these can be easily rejected via https://www.linkedin.com/legal/cookie-policy. In addition, you can find out about LinkedIn's cookie policy. The privacy policy of LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy

13. privacy policy regarding the use and application of Xing

Magna Auriga GmbH & Co. KG has installed components from Xing on its website. Who is behind Xing? The operating company of Xing is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. What is Xing? Xing is a social network used to connect / build or maintain new or existing business contacts. We use Xing, for example, to post available job openings or to look for suitable personnel. If you are registered and logged in to Xing and visit our website, information about where you are on the website is sent to Xing. If you do not wish this, please log out of Xing first and then visit our website. You can view Xing's privacy policy here, which gives you a detailed overview of the collection, processing and use of personal data: https://privacy.xing.com/de/datenschutzerklaerung. You can also learn more about the so-called Xing Share button here: https://www.xing.com/app/share?op=data_protection

14. privacy policy regarding the use and application of YouTube

Magna Auriga GmbH & Co. KG has installed components from YouTube on its website. What is YouTube? YouTube is a video portal that allows users to publish videos free of charge. These can be viewed, rated and commented on free of charge. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. If you call up a sub-page of our website that is provided by us with a YouTube component, your Internet browser recognizes this component and automatically loads its representation. The video is offered to you for viewing. It is also possible that an automatic playback of the video takes place, provided that this setting has been made by the person responsible for the content. You can find out more information here: https://www.youtube.com/?hl=de&gl=DE. In the course of this procedure, YouTube and Google learn which sub-page you are visiting. If you yourself are registered with YouTube and logged in while visiting our website, YouTube and Google will receive information about which subpage you are currently visiting and it will be assigned to your account. If you do not want this, log out of YouTube before visiting our website. You can view YouTube's privacy policy here, which gives you a detailed overview of the collection, processing and use of personal data by Google and YouTube: https://www.google.de/intl/de/policies/privacy

15. legal basis of the processing

Through the Art. 6 I lit. a DS-GVO, our company receives the legal basis to carry out the processing of personal data, provided that consent has been given for one or more specific purposes. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, such as in the case of delivery of goods, other services, or for the performance of pre-contractual measures, such as it is in the case of inquiries about products or services, which are carried out at the request of the data subject, this processing is within the meaning of Art.6 I lit. b DS-GVO. If processing of personal data becomes necessary for compliance with a legal obligation to which the controller is subject, such as is the case with tax obligations, this is based on the legal basis of Art.6 I lit.c DS-GVO. It may happen that the processing of personal data is necessary to protect vital interests of the data subject or another natural person. An example of this would be the case if a visitor were to injure himself or herself on our premises and we were to inform the attending physician, the name, age and health insurance data of the person concerned, if he or she is no longer able to do so himself or herself. Also other vital information, such as an existing pregnancy or a known disease (eg diabetes) is present. This is based on the legal basis of Art. 6 I lit.d DS-GVO. Lastly, the processing may be based on the legal basis of Art. 6 lit. f DS-GVO. The processing is necessary to protect the legitimate interests of the controller (our company) or a third party (customer), unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data override these interests. The European legislator has emphasized this once again: (Recital 47, Sentence 2 DS-GVO) In this, it is considered that a legitimate interest is to be assumed if the data subject is a customer of the controller. In particular, we are permitted to process for the reason that we assume that the customer (data subject) has a legitimate interest.

16. legitimate interests in the processing pursued by the controller or a third party.

If the processing of personal data is based on Article 6 I lit. f DS-GVO, our legitimate interest is the conduct of our business for the benefit of the well-being of all our employees and our shareholders

17. Duration for which the personal data are stored

The criterion for the duration of the storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data will be routinely deleted, provided that they are no longer required for the performance of the contract or the initiation of the contract.

18. legal or contractual provisions for the provision of personal data

Necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of failure to provide We inform you that the provision of personal data is sometimes required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). Sometimes, in order to conclude a contract, it may be necessary for a data subject to provide us with personal data that must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with him or her. Failure to provide the personal data would mean that the contract with the data subject cannot be concluded. Before providing personal data by the data subject, the data subject must contact our data protection officer. Our data protection officer will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what the consequences of not providing the personal data would be.

19. existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

20. changes

Our data protection statement can always change on given occasions. Therefore, we advise you to regularly inform yourself about changes on our website.