Data privacy policy for visitors of the homepage

A. Basic information according to Art. 13 / 14 DS-GVO

Responsibility for Data Processing

asap endoscopic products GmbH
Owner: Horst Baholzer
Stöckmatten 19, 79224 Umkirch, Germany
Tel.: +49 (0)7665 / 94 773-0
E-Mail: ba@asap-gmbh.de
In the following, asap endoscopic products GmbH is referred to as asap GmbH for short.

2. Data Protection Officer

Hopp + Flaig PartG mbB
Andreas Steinbach
Neue Weinsteige 69/71, 70180 Stuttgart
Telefon: +49 (0) 711 320657-0 (Zentrale)
Mobil: +49 (0) 160 90 41 74 72
E-Mail: Steinbach@hopp-flaig.de

3. Supervisory Authority

If you are of the opinion that asap GmbH is not processing your personal data lawfully, you can address your complaint to any data protection supervisory authority. T

he supervisory authority responsible in accordance with Art. 55 DS-GVO and their contact person is:
State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg:
Dr. Stefan Brink - Königstraße 10a - 70173 Stuttgart, 0711 / 61 55 41 – 0
poststelle@lfdi.bwl.de


4. Your Rights

According to the legal regulations, you have the right as a data subject to receive information free of charge at any time about your data stored by Asap GmbH. In addition, you have the right to rectification, deletion or restriction of processing as well as the right to object when it comes to the Asap GmbH. This also applies to the right to data portability. If you have provided us with your personal data on the basis of voluntary consent, you can revoke your consent at any time for the future.
 

B. Aims and Scope of Data Processing

1. Internet Presence

Processing of communication data
Every time a user accesses a page of the asap GmbH website and every time a file is called up, access data on this process is stored in a log file on our server.

Each record consists of:

• the page from which the file was requested (so-called referrer URL)
• the name of the file
• the date and time of the request (so-called "time stamp")
• the amount of data transferred
• the access status (file transferred, file not found etc.)
• a description of the type of browser used (e.g. Firefox, Chrome, Safari, etc.)
• one technical required cookie

Content Data Processing & Legal Basis

If the opportunity for the input of personal or business data (e-mail address, name, postal address) is given (e.g. via our contact form), the collection of data is based on a voluntary declaration of consent in accordance with Art. 6 para. 1 letter a DS-GVO. Here too, your data will be treated confidentially and not passed on to third parties without your consent. There is no linkage to the communication data. In general, Asap GmbH processes personal data on the following legal basis:  §26 BDSG (new) paragraph 1 and Article 6 of DSGVO paragraph 1.


Recipient of the Data

For the hosting and maintenance of our website, we rely on the use of service providers, whom we oblige to comply with the legal requirements via a contract pursuant to Art. 28 DS-GVO.


Cookies

We only use cookies that we consider necessary for our Internet presence: So-called session cookies are required during the registration process, as we use a so-called single-sign-in concept for reasons of user-friendliness, for authentication and to control access to the various areas of our portal.


Validity of cookies

The validity of cookies is limited to the duration of your visit (only for session cookies). These cookies are automatically deleted after closing the browser. There is no link to personal data and no conclusions can be drawn about the activities of a user.
Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set the browser to display a notification when cookies are set.


Cookies & Tracking

We don’t use any cookies on our home page for tracking purposes.

2. Application Procedure / Employee Data

How does asap GmbH process the data of employees/applicants (m/f)?

Your personal data is always collected directly from you - for example, as part of the application process - on the basis of § 26 paragraph 1 BDSG (new). In addition, we may also have received data from third parties (e.g. job exchanges such as Indeed, Stepstone etc. or job agencies).

The categories of personal data of employees/applicants (m/f) processed include in particular their master data such as first name, surname, name affixes, nationality, personnel number, contact data such as private address, (mobile) telephone number, e-mail address as well as the data of the entire application process such as cover letter, curriculum vitae, (employment) certificates, proof of qualifications.

If you have voluntarily provided special categories of personal data, such as health data, religious affiliation, degree of disability, in your letter of application or in the course of the application procedure, processing will only take place if you have given your consent.

asap GmbH processes personal employee and applicant data on the basis of and in compliance with the Basic Data Protection Ordinance (DS-GVO), the Federal Data Protection Act (BDSG), and all other relevant provisions of German labor law (e.g. SGB, AGG, BetrVG, etc.).

The processing of your personal data within the scope of the application process serves primarily to carry out the application procedure, in particular to determine the suitability for the advertised position. The processing of your applicant data is necessary for the decision on whether to establish an employment relationship.
The legal basis for this is Art. 88 DS-GVO in conjunction with § 26 Para. 1 BDSG.

Who receives your data?

Within asap GmbH, only those persons and bodies that need to know your personal data in order to decide on your employment and to fulfill our legal and contractual obligations will receive knowledge of your data. Notwithstanding this, we will only transfer your personal data - for example, to investigating authorities - if we are legally obliged to do so.


How long does asap GmbH store your data?

Personal applicant data transmitted to asap GmbH will be deleted as soon as it is no longer required for the above-mentioned purposes; after 6 months at the latest. This does not apply if you have agreed to a longer storage period, if storage is necessary for evidence purposes, or if legal regulations prevent deletion. For example, we store your applicant data for as long as there is a possibility that you could assert legal claims against asap GmbH, e.g. for violation of the General Equal Treatment Act (AGG). If your application leads to the establishment of an employment relationship, your data will continue to be stored and used for the purposes of the usual administrative and organizational processes and to carry out the employment relationship in compliance with the applicable legal regulations.

What rights can you assert as a data subject?

Applicants and employees (m/f) have - like all other data subjects - the following rights:

• Right to information in accordance with Art.15 DS-GVO
• Right of rectification according to Art.16 DS-GVO
• Right of deletion ("right to be forgotten") in accordance with Art. 17 DS-GVO
• Right to restrict processing in accordance with Art. 18 DS-GVO
• Right to data transferability according to Art. 20 DS-GVO
• Right of objection under Art. 21 DS-GVO

Furthermore, you have the right to address a complaint to the data protection officer mentioned above or to a data protection supervisory authority.

Data privacy policy for Applicants & Employees

A. Basic information according to Art. 13 / 14 DS-GVO

Responsibility for Data Processing

asap endoscopic products GmbH
Owner: Horst Baholzer
Stöckmatten 19, 79224 Umkirch, Germany
Tel.: +49 (0)7665 / 94 773-0
E-Mail: ba@asap-gmbh.de
In the following, asap endoscopic products GmbH is referred to as asap GmbH for short.

2. Data Protection Officer

Hopp + Flaig PartG mbB
Andreas Steinbach
Neue Weinsteige 69/71, 70180 Stuttgart
Telefon: +49 (0) 711 320657-0 (Zentrale)
Mobil: +49 (0) 160 90 41 74 72
E-Mail: Steinbach@hopp-flaig.de

3. Supervisory Authority

If you are of the opinion that asap GmbH is not processing your personal data lawfully, you can address your complaint to any data protection supervisory authority. T

he supervisory authority responsible in accordance with Art. 55 DS-GVO and their contact person is:
State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg:
Dr. Stefan Brink - Königstraße 10a - 70173 Stuttgart, 0711 / 61 55 41 – 0
poststelle@lfdi.bwl.de


4. Purpose of the data collection

We process your personal data for the following reasons:

• Evaluation and processing of incoming applications
• Conducting applicant interviews
• Selecting applicants
• Entering into an employment contract (establishing an employment relationship)
• Implementation of the employment relationship
• Termination of employment

5. Legal Foundation

We process your personal data on the following legal basis:
§26 BDSG (new) paragraph 1


6. More details about the intended use

In order to be able to recruit and hire new suitable personnel or to establish, implement and terminate an employment relationship, we require a minimum amount of personal data.
We always observe the principle of data economy and do not collect any personal data which we do not absolutely require in accordance with point 3 of this data protection declaration.
Should we wish to collect further personal data which does not fall under point 3 of this data protection declaration, we would ask you for a voluntary declaration of consent to this effect.


7. Internal and external transfer of your personal data

The internal transfer of your personal data is solely limited to the purposes stated in point number 3 of this data protection declaration in accordance with the principles of data minimization and other principles of data protection. An external transfer of your personal data can take place under the following circumstances:

• Passing on your personal data (contact data) to contractors, subcontractors or cooperation partners in the context of the execution of the employment relationship, may happen if necessary for the fulfilment of orders. A possible data transfer always takes place only to the extent necessary. Where possible, your personal data will not be passed on
• Collaboration with subcontractors for which access to your personal data is necessary or at least cannot be completely avoided. This includes, for example, IT support services, payroll services or the use of tax consulting services.
• Passing on your personal data (contact data) within the scope of supplier management, in case this is necessary for the fulfilment of orders (contracts). A possible data transfer always takes place only to the extent necessary. Wherever possible, your personal data will not be passed on to third parties
• Passing on your personal data to authorities and health insurance companies due to legal obligations

8. Transfer of your data to a third country (outside the European Union or an international organization)

As a matter of principle, we do not transfer your data to countries outside the scope of the GDPR (also applies to internationally active organizations).
Should a transfer take place despite everything (e.g. in the context of the use of software applications or other IT services whose manufacturers are based in a country outside the scope of the GDPR), this would only take place in the presence of a corresponding EU adequacy decision or other appropriate safeguards (e.g. EU standard contractual clauses).

You have the right to receive detailed information on this. You can request the information you require using the contact details of the data protection officer (see No. 2).

9. Storage period and deletion of your personal data

The legislator has issued a variety of retention options which we follow carefully including seeking expert advice in order to comply with these obligations. The following applies in general: We only store your personal data:
- for as long as permitted for the specified purpose,
- it is prescribed by law for verification purposes

In case we need to store your data for a longer period than referred to above, we would we would have this confirmed by you with a voluntary declaration of express consent.

10. Right to information, deletion, correction, objection and restriction of usage of your personal data

You have the right to demand confirmation from us if we were processing your personal data. If so, you have the right to information about this personal data and the following information:

• Purposes of processing
• The categories of personal data processed
• The recipients or category of recipients to whom we disclosed or intend to disclose your personal data, particularly if recipients are in non-EU countries or international organizations
• If possible, the planned duration for which your personal data are stored, or, if that is not possible, the criteria applied to the determination of the duration
• The right to have personal data relating to you corrected or deleted, or have personal data processed by us limited or object to such processing
• The existence of a right of appeal at a supervisory authority
• If personal data was not collected from the individual concerned, all information available with regards to the origin of the data
• The existence of an automated decision making, including profiling (meaningful information related to the logic applied, the scope of it as well as the intended effects of such processing on you)

In case your personal data is transmitted to a third country or an international organization, you have the right to be informed about the suitable guarantees that ensure an adequate level of data protection in the context of the transmission.

We provide you with a free of charge copy of your personal data which are subject to our processing. For any additional copies requested we may ask you to provide us with an appropriate payment which would allow us to cover our administration cost.

If you submit the application electronically, you will receive the information in a common electronic format, unless you specify otherwise. The right of obtaining a copy may be restricted in so far as it affects the rights or the freedom of other persons.

You have the right to request us to immediately correct any incorrect personal data concerning you. For the purposes of processing, you have the right to request the completion of incomplete personal data, also by means of an additional declaration. In order to exercise this right, you are welcome to contact our data protection officer.

You have the right to ask for the deletion of your personal data stored by us in case one of the following criteria is met: :

• The personal data is not needed anymore to fulfil the agreed purpose
• You withdraw the voluntary declaration of expressed consent that you provided us with (however, the legality of the processing carried out on the basis of the consent until revocation remains unaffected)
• Your personal data has so far been processed unlawfully
• A legal obligation related to the deletion does exist
• The personal data was collected in relation to services offered by the Information Society – refer to Art.1 Nr.1b of (EU) 2015/1535 (persons under 16 years of age)

Furthermore you have the right to demand from us the restriction of the processing in case one of the following conditions are met:

• In case you deny the correctness of the personal data we will stop the processing of them for a period of time that would allow us to verify their correctness
• The processing is unlawful and you refuse the deletion of your personal data and instead request that the use of your personal data be restricted.
• If we no longer need your personal data for the purposes of processing, but you do need it to assert, exercise or defend legal claims.
• If you have filed an objection against the processing, until it has been determined whether our justified reasons outweigh yours

11. Right to data transferability

You have the right to receive your personal data stored by us in a structured, common and machine-readable format, insofar as they are processed in an automated process.

You also have the right to transfer this data to another person in charge (“responsible”), without any hindrance by us, to whom the personal data was provided.

When exercising your right to data transferability, you have the right to have your personal data transferred directly by us to another responsible person, insofar as this is technically feasible.

The right to data transferability may be restricted in so far as the rights or freedoms of other persons are affected by the exercise of this right.

12. Right of revocation for consents and continuation of consents granted

In case as we process your personal data on the basis of a declaration of consent, you have the right to revoke the consent given. However, this does not affect the legality of the processing carried out on the basis of the consent until revocation. With regard to compliance with storage periods, point 8 of this data protection declaration must also be observed in this respect.


13. Right of appeal to the supervisory authority

If you are of the opinion that Asap GmbH is not processing your personal data lawfully, you can address your complaint to any data protection supervisory authority. The supervisory authority responsible in accordance with Art. 55 DS-GVO and their contact person is:

State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg:
Dr. Stefan Brink - Königstraße 10a - 70173 Stuttgart – Germany - 0711 / 61 55 41 – 0 - poststelle@lfdi.bwl.de


14. Mandatory submission of your personal data and possible consequences if the submission is refused.

On the one hand, we are required by law to process personal data relating to you (this also includes the disclosure to authorities or health insurance companies). On the other hand, we need the data collected from you for the decision, establishment, execution and termination of the employment relationship, implementation and termination of the employment relationship.

Without the collected data, a decision, establishment, implementation and termination of an employment relationship would not be possible.


15. Automatic decision making and profiling

There is no automated decision making regarding your person. No "profiling" is carried out based on the personal data collected from you..


16. Change of purpose

If we intend to change the purpose for which your personal data was originally collected, we will inform you in advance in detail and transparently. In this case, we will of course provide you with all the information required by law. If the change of purpose involves the processing of personal data based on contractual basis of a voluntary declaration of consent, we will inform you accordingly and ask you for your formal consent..


17. Open questions, complaints or suggestions

You are welcome to contact us with any questions, complaints or suggestions regarding data protection. If required, you are welcome to contact our data protection officer (see item no. 2 of this data protection declaration).

Data privacy policy for Customers & Interested Parties

A. Basic information according to Art. 13 / 14 DS-GVO

Responsibility for Data Processing

asap endoscopic products GmbH
Owner: Horst Baholzer
Stöckmatten 19, 79224 Umkirch, Germany
Tel.: +49 (0)7665 / 94 773-0
E-Mail: ba@asap-gmbh.de
In the following, asap endoscopic products GmbH is referred to as asap GmbH for short.

2. Data Protection Officer

Hopp + Flaig PartG mbB
Andreas Steinbach
Neue Weinsteige 69/71, 70180 Stuttgart
Telefon: +49 (0) 711 320657-0 (Zentrale)
Mobil: +49 (0) 160 90 41 74 72
E-Mail: Steinbach@hopp-flaig.de

3. Supervisory Authority

If you are of the opinion that asap GmbH is not processing your personal data lawfully, you can address your complaint to any data protection supervisory authority. T

he supervisory authority responsible in accordance with Art. 55 DS-GVO and their contact person is:
State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg:
Dr. Stefan Brink - Königstraße 10a - 70173 Stuttgart, 0711 / 61 55 41 – 0
poststelle@lfdi.bwl.de


4. Purpose of the data collection

We process your personal data for the following reasons:

• Evaluation and processing of incoming applications
• Conducting applicant interviews
• Selecting applicants
• Entering into an employment contract (establishing an employment relationship)
• Implementation of the employment relationship
• Termination of employment

5.  Legal Foundation

We process your personal data on the following legal basis:
Article 6 of data protection regulation (DSGVO) paragraph 1 lit. b


6. More details about the intended use

In order to provide our contractually agreed service or products, of course, to be able to make you an individual offer upon your request, we naturally require a minimum amount of personal data.

We always observe the principle of minimizing data and do not collect any personal data which we do not need for the fulfilment of our tasks. In this regard, please note points 3 and 4 of this data protection declaration.


7. Internal and external transfer of your personal data

The internal transfer of your personal data is solely limited to the purposes stated in point number 3 of this data protection declaration in accordance with the principles of data minimization and other principles of data protection. An external transfer of your personal data can take place under the following circumstances:

• Engaging a subcontractor to fulfil the contractual obligations which we have agreed with you
• Collaboration with subcontractors for which access to your personal data is necessary or at least cannot be completely avoided. This includes, for example, IT support services, payroll services or the use of tax consulting services
• Passing on your personal data to authorities and health insurance companies due to legal obligations
• Obtaining information from credit agencies
• Disclosure of personal data by means of an automated comparison with databases within the scope of export controls

8. Transfer of your data to a third country (outside the European Union or an international organization)

As a matter of principle, we do not transfer your data to countries outside the scope of the GDPR (also applies to internationally active organizations). Should a transfer take place despite everything (e.g. in the context of the use of software applications or other IT services whose manufacturers are based in a country outside the scope of the GDPR), this would only take place in the presence of a corresponding EU adequacy decision or other appropriate safeguards (e.g. EU standard contractual clauses).

You have the right to receive detailed information on this. You can request the information you require using the contact details of the data protection officer (see No. 2).


9. Storage period and deletion of your personal data
The legislator has issued a variety of retention options which we follow carefully including seeking expert advice in order to comply with these obligations. The following applies in general: We only store your personal data:
- for as long as permitted for the specified purpose,
- it is prescribed by law for verification purposes

In case we need to store your data for a longer period than referred to above, we would we would have this confirmed by you with a voluntary declaration of express consent.


10. Right to information, deletion, correction, objection and restriction of usage of your personal data   

You have the right to demand confirmation from us if we were processing your personal data. If so, you have the right to information about this personal data and the following information:

• Purposes of processing
• The categories of personal data processed
• The recipients or category of recipients to whom we disclosed or intend to disclose your personal data, particularly if recipients are in non-EU countries or international organizations
• If possible, the planned duration for which your personal data are stored, or, if that is not possible, the criteria applied to the determination of the duration
• The right to have personal data relating to you corrected or deleted, or have personal data processed by us limited or object to such processing
• The existence of a right of appeal at a supervisory authority
• If personal data was not collected from the individual concerned, all information available with regards to the origin of the data
• The existence of an automated decision making, including profiling (meaningful information related to the logic applied, the scope of it as well as the intended effects of such processing on you)

In case your personal data is transmitted to a third country or an international organization, you have the right to be informed about the suitable guarantees that ensure an adequate level of data protection in the context of the transmission

We provide you with a free of charge copy of your personal data which are subject to our processing. For any additional copies requested we may ask you to provide us with an appropriate payment which would allow us to cover our administration cost.

If you submit the application electronically, you will receive the information in a common electronic format, unless you specify otherwise. The right of obtaining a copy may be restricted in so far as it affects the rights or the freedom of other persons. You have the right to request us to immediately correct any incorrect personal data concerning you. For the purposes of processing, you have the right to request the completion of incomplete personal data, also by means of an additional declaration. In order to exercise this right, you are welcome to contact our data protection officer.

You have the right to ask for the deletion of your personal data stored by us in case one of the following criteria is met:

• The personal data is not needed anymore to fulfil the agreed purpose
• You withdraw the voluntary declaration of expressed consent that you provided us with (however, the legality of the processing carried out on the basis of the consent until revocation remains unaffected)
• Your personal data has so far been processed unlawfully
• A legal obligation related to the deletion does exist
• The personal data was collected in relation to services offered by the Information Society – refer to Art.1 Nr.1b of (EU) 2015/1535 (persons under 16 years of age)

Furthermore you have the right to demand from us the restriction of the processing in case one of the following conditions are met:

• In case you deny the correctness of the personal data we will stop the processing of them for a period of time that would allow us to verify their correctness
• The processing is unlawful and you refuse the deletion of your personal data and instead request that the use of your personal data be restricted.
• If we no longer need your personal data for the purposes of processing, but you do need it to assert, exercise or defend legal claims.
• If you have filed an objection against the processing, until it has been determined whether our justified reasons outweigh yours<

11. Right to data transferability

You have the right to receive your personal data stored by us in a structured, common and machine-readable format, insofar as they are processed in an automated process. You also have the right to transfer this data to another person in charge (“responsible”), without any hindrance by us, to whom the personal data was provided.

When exercising your right to data transferability, you have the right to have your personal data transferred directly by us to another responsible person, insofar as this is technically feasible.

The right to data transferability may be restricted in so far as the rights or freedoms of other persons are affected by the exercise of this right.


12. Right of revocation for consents and continuation of consents granted

In case as we process your personal data on the basis of a declaration of consent, you have the right to revoke the consent given. However, this does not affect the legality of the processing carried out on the basis of the consent until revocation. With regard to compliance with storage periods, point 8 of this data protection declaration must also be observed in this respect.


13. Right of appeal to the supervisory authority

If you are of the opinion that asap GmbH is not processing your personal data lawfully, you can address your complaint to any data protection supervisory authority. The supervisory authority responsible in accordance with Art. 55 DS-GVO and their contact person is:

State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg:
Dr. Stefan Brink - Königstraße 10a - 70173 Stuttgart – Germany - 0711 / 61 55 41 – 0 - poststelle@lfdi.bwl.de


14. Mandatory submission of your personal data and possible consequences if the submission is refused.

In order to fulfill our contractual service or to create an individual offer, we need the personal data collected from you. Without this personal data, the preparation of offers or the provisioning of the desired services and work would not be possible.


15. Automatic decision making and profiling

There is no automated decision making regarding your person. No "profiling" is carried out based on the personal data collected from you.


16. Change of purpose

If we intend to change the purpose for which your personal data was originally collected, we will inform you in advance in detail and transparently. In this case, we will of course provide you with all the information required by law. If the change of purpose involves the processing of personal data based on contractual basis of a voluntary declaration of consent, we will inform you accordingly and ask you for your formal consent.


17. Open questions, complaints or suggestions

You are welcome to contact us with any questions, complaints or suggestions regarding data protection. If required, you are welcome to contact our data protection officer (see item no. 2 of this data protection declaration).