Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Phone

+49 176 366 23030

Email

info@amalgroup.de

Website

https://amalgroup.de

2. General information

We process personal data only to the extent necessary to provide this website, to handle enquiries, to carry out pre-contractual measures, to perform a contract or to comply with legal obligations.

Personal data means any information relating to an identified or identifiable natural person. The relevant purposes, legal bases, recipients and retention periods are explained below.

3. Website access and server log files

When you access our website, your browser transmits technically necessary data to the server. The following data in particular may be processed:

• IP address of the requesting device,
• date and time of access,
• page or file accessed,
• volume of data transferred and access status,
• referrer URL,
• browser type and browser version,
• operating system and device type.

This processing serves to deliver the website, to ensure its stability and security, to detect technical faults and to defend against misuse or attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of our website.

Server log data is stored only for as long as necessary for the purposes stated above and is then deleted or anonymised. Longer storage may occur where a specific security incident has to be investigated or where legal obligations require it.

4. Hosting and technical service providers

We use hosting and IT service providers to operate and technically maintain the website. In the course of their services they may gain access to the data listed in section 3. Where they process data on our behalf, they are contractually bound in accordance with Art. 28 GDPR and may process the data only on our instructions.

The legal basis for engaging these providers is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely, reliably and economically.

5. Cookies and similar technologies

We currently do not use any cookies or comparable technologies on this website for analytics, marketing, advertising or profiling purposes. In particular, neither Google Analytics nor Google Tag Manager, Meta Pixel or comparable tracking services are currently integrated.

The language versions of the website are provided via separate, language-specific URLs. Should strictly necessary storage of, or access to, information on your device be used in future, this will take place on the basis of Section 25(2) no. 2 TDDDG. Any subsequent processing of personal data is based on Art. 6(1)(f) GDPR.

Should we use consent-based technologies in future, we will obtain consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR before activating them and will update this privacy policy accordingly.

6. Locally hosted fonts

The fonts used on this website are loaded locally from our own server. No connection to Google Fonts or any other external font provider is therefore established when the site is accessed.

7. Contacting us by email or telephone

If you contact us by email or telephone, we process the data you provide. This may include in particular your name, your contact details, the content of your enquiry, any documents sent with it, and communication and metadata.

Where contact is made to initiate or perform a contract, the legal basis is Art. 6(1)(b) GDPR. For general business enquiries, processing takes place on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in handling and answering your enquiry properly.

We delete the data once your enquiry has been conclusively dealt with, provided that no statutory retention obligations, contractual requirements or legitimate interests in further storage – for instance to assert, exercise or defend legal claims – stand in the way.

8. Contacting us via WhatsApp

Our website contains an external link to WhatsApp. A connection to WhatsApp is only established once you click the link or contact us via WhatsApp. Using WhatsApp is voluntary; you can alternatively reach us by email or telephone.

When communicating via WhatsApp, we process in particular your telephone number, your profile name, the content of your message, any files transmitted and communication metadata. Depending on the content of the enquiry, processing takes place on the basis of Art. 6(1)(b) or (f) GDPR.

The provider for users in the European Economic Area is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp also processes data as a controller in its own right and may process data within the Meta group of companies as well as in countries outside the European Economic Area. Further information can be found in WhatsApp's privacy policy at https://www.whatsapp.com/legal/privacy-policy-eea.

9. Job applications by email

If you apply to us by email, we process the application data you submit. This regularly includes master and contact data, CV, qualifications, references, career history, application photo, communication content and, where applicable, further voluntary information.

Processing takes place in order to decide on the establishment of an employment relationship on the basis of Section 26(1) BDSG in conjunction with Art. 88 GDPR. Where special categories of personal data within the meaning of Art. 9(1) GDPR are included, we process these only where legally permissible and necessary for the application procedure, or where you have expressly consented.

If no employment relationship comes about, we generally delete the application data no later than six months after the application procedure has been completed. Longer storage takes place only where you have expressly consented to inclusion in a talent pool, where legal obligations exist, or where storage is necessary to assert, exercise or defend legal claims. If an employment relationship does come about, the necessary data is transferred to the personnel file.

10. Forwarding enquiries to portfolio companies

This website presents various portfolio companies and brands. Where your enquiry clearly relates to a particular portfolio company, we may forward the contact details and content required for this purpose to the responsible legal entity. Forwarding does not happen automatically, but only where it is necessary to handle your enquiry or where you expressly request it.

The legal basis is Art. 6(1)(b) GDPR where forwarding is necessary for pre-contractual measures requested by you. In other cases it takes place on the basis of Art. 6(1)(f) GDPR or – where required – your consent under Art. 6(1)(a) GDPR. Our legitimate interest lies in handling your enquiry in a targeted manner within the group of companies.

Where the portfolio company acts as a controller in its own right, its own privacy information applies to its further processing. Any transfer to a recipient outside the European Economic Area takes place only under the conditions of Art. 44 et seq. GDPR. Where your enquiry concerns a company established outside the European Economic Area, we will inform you before any such forwarding – insofar as the information has not already been provided – of the recipient, the third country concerned and the applicable basis for the transfer. Where legally required, we will obtain your express consent in advance.

11. External links and social networks

Our website contains plain links to external websites and profiles, in particular to portfolio companies and to Facebook, Instagram, LinkedIn and WhatsApp. No social media plugins, feeds or embedded content from these providers are integrated into the website.

Merely visiting our website therefore does not transmit any data to these providers via those links. Only when you click an external link do you leave our website. The respective provider may then process in particular your IP address, device information, referrer data and – if you are logged in there – account information. The respective provider is solely responsible for that processing.

12. Recipients of personal data

We disclose personal data only where this is necessary to fulfil the purposes stated, where a legal obligation exists or where valid consent has been given. Recipients may in particular be:

• hosting, IT, email and telecommunications service providers,
• employees and agents bound to confidentiality,
• the portfolio company responsible for a specific enquiry,
• authorities, courts, legal or tax advisors, where a legal obligation or the safeguarding of legal claims requires it.

13. Transfers to third countries

Personal data is transferred to countries outside the European Union or the European Economic Area only where the conditions of Art. 44 et seq. GDPR are met. This may in particular be on the basis of an adequacy decision of the European Commission, appropriate safeguards under Art. 46 GDPR – such as EU standard contractual clauses – or, in individual cases provided for by law, on the basis of a derogation under Art. 49 GDPR.

Given the current technical setup, merely visiting this website involves no intended transfer to analytics, advertising or social media providers in third countries. Third-country transfers may nevertheless arise if you yourself use WhatsApp or an external link, or if forwarding your enquiry to a recipient established outside the European Economic Area becomes necessary.

14. Retention period

Unless a specific retention period is stated in this privacy policy, we store personal data only for as long as the respective processing purpose exists. The data is then deleted or anonymised, provided that no statutory retention obligations or legitimate grounds for further storage exist.

15. Your rights

Within the scope of the statutory requirements you have in particular the following rights:

• access to the personal data we process about you under Art. 15 GDPR,
• rectification of inaccurate data or completion of incomplete data under Art. 16 GDPR,
• erasure of your data under Art. 17 GDPR,
• restriction of processing under Art. 18 GDPR,
• data portability under Art. 20 GDPR,
• objection to processing under Art. 21 GDPR,
• withdrawal of consent given, with effect for the future, under Art. 7(3) GDPR.

A message to info@amalgroup.de is sufficient to exercise your rights. Before processing your request, we may require suitable proof of your identity where this is necessary to protect your data.

Special note on the right to object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds, or the processing serves to assert, exercise or defend legal claims.

16. Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is:

Phone

+49 385 59494 0

Email

info@datenschutz-mv.de

Website

https://www.datenschutz-mv.de

17. No automated decision-making

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

18. Data security

Our website uses TLS encryption. In addition, we take appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other unlawful processing.

19. Changes to this privacy policy

We adapt this privacy policy when the website, the services used or the legal situation change. The version published on this website at the relevant time applies.