Data protection

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

LEONHARD WEISS GmbH & Co. KG
BAUUNTERNEHMUNG
Leonhard-Weiss-Str. 2-3
74589 Satteldorf – Germany
P +49 7951 33-0
E-Mail bau-de(at)leonhard-weiss.com
HRA 530194

You can contact our Data Protection Officer at datenschutz(at)leonhard-weiss.com

As a data subject, you have the right:

• to obtain information about the data concerning you that we process (Art. 15 GDPR); 
• to request the rectification or completion of inaccurate or incomplete data (see also Art. 16 GDPR);
• to obtain the immediate erasure of data concerning you (see also Art. 17 GDPR) or, alternatively, where further processing is required pursuant to Art. 17(3) GDPR, to request restriction of processing in accordance with Art. 18 GDPR; 
• to request the portability of your personal data (Art. 20 GDPR).

You also have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you where we base such processing on Art. 6(1)(f) GDPR. We will then no longer process this data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (Art. 21 GDPR).

Pursuant to Art. 21(2) GDPR, you have the right to object at any time to the processing of personal data concerning you. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. Please note that your objection only takes effect for the future. Processing carried out before the objection remains unaffected.

You may withdraw any consent given for the processing of personal data at any time vis-à-vis the LEONHARD WEISS Group. Please note that the withdrawal only takes effect for the future. Processing carried out before the withdrawal remains unaffected.

Furthermore, you have the right to lodge a complaint with a competent data protection supervisory authority. The authority responsible is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Postfach 10 29 32
70025 Stuttgart
Email: poststelle@lfdi.bwl.de
Phone: +49 (0) 711 / 615541 – 0

As a rule, you can visit the website without us collecting personal data from you. However, when you access the website or retrieve a file stored on the website, data is collected and processed. This generally only takes place where it is necessary to provide a functional website and its content and services. Furthermore, personal data is generally only collected and used with the corresponding consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by statutory provisions.

When accessing the website, the following categories of data are logged:

• Browser type/version
• Operating system used
• IP address
• Date and time of the server request
• Other information such as server log data

Storage in log files ensures the proper functioning of the website and also serves to improve and secure our systems. No further analysis of this data (for example for marketing purposes) takes place in this context. The legal basis for storing the data/log files is Art. 6(1)(f) GDPR.

The data stored by the LEONHARD WEISS Group is deleted as soon as it is no longer required for achieving the purpose for which it was collected. This is the case after six weeks at the latest. Storage beyond this period is possible. In this case, users’ IP addresses are deleted or anonymised so that the calling client can no longer be assigned.

Have you seen a notice sign relating to drone operations? Here we explain why it has been put up.

Standardised, automated capture of aerial images and videos by means of drones for the documentation and measurement of construction progress on construction sites. Data subjects are not the target of the drone deployment, but may be captured incidentally, for example if they are on or near the construction site during drone operations. The data may be made available to the respective client. No transfer of data outside the EU or the EEA takes place.

In the context of drone operations, personal data may be captured temporarily. This is not the purpose of the drone deployment. Inadmissible recordings are deleted without delay.

Efficient and standardised documentation of construction progress, quality assurance, support in relation to variation claims and costing, as well as fulfilment of contractual obligations towards the client.

The legal basis is legitimate interests pursuant to Art. 6(1)(f) GDPR. We have a legitimate interest in documenting construction progress, quality assurance, fulfilling contractual obligations and providing evidence vis-à-vis clients.

The data is stored for as long as is necessary for the purpose of the processing. In addition, inadmissible recordings (e.g. of private property or persons outside the construction site area) are deleted without delay.

As part of your contact request, we process the personal data that you provide to us. No data is forwarded to third parties.

• Contact details such as company name, name, email address and telephone number
• Content entered into the form

The data is processed for handling and processing your contact request. We base the processing of your data on your consent pursuant to Art. 6(1)(a) GDPR.

The data will be deleted once storage is no longer required for ongoing contact.

As part of the application process, we process your application data in order to assess whether you have the suitability, aptitude and professional qualifications required for the advertised position. The processing is carried out exclusively for the purpose of deciding whether to establish an employment relationship.

Access to the personal data contained in your application documents is granted exclusively to the managers responsible for the application process and to the relevant HR officers within our organisation.

Your data are disclosed exclusively to affiliated companies and service providers that act on our behalf and support the LEONHARD WEISS Group in providing its services. The processing of your personal data by commissioned service providers is carried out within the framework of processing on behalf of a controller pursuant to Art. 28 GDPR. In this context, we have commissioned talentsconnect AG (Niehler Straße 104, Entrance B, 2nd Floor, 50733 Cologne, Germany) as a data processor.

Use of WhatsApp applications (PitchYou): If you use our careers portal, you may apply via WhatsApp, provided that the corresponding button is available. PitchYou was developed entirely in Germany. The data are stored exclusively on servers in Germany, and the content of the communication is end-to-end encrypted. Nevertheless, certain metadata may be transferred to the United States when an application is submitted via WhatsApp. In such cases, we ensure that appropriate measures are taken to protect your data.

The following categories of data may be processed as part of the application process:

• Contact details, such as first and last name, address and e-mail address
• Professional experience and education, as well as certifications and other relevant professional information contained in your application documents
• Salary expectations
• Other information that you provide to us voluntarily, such as information from your CV (e.g. date of birth, place of birth, hobbies and social media profiles), special categories of personal data (e.g. information about your religious beliefs or health data), and an application photograph

Your personal data are processed exclusively for the purpose of carrying out the application process. The legal basis for this is Section 26 (1) sentence 1 of the German Federal Data Protection Act (BDSG) in conjunction with Art. 6(1)(b) GDPR.

If your application is successful, your data will be transferred to your personnel file for the purpose of establishing and carrying out the employment relationship. Section 26 (1) sentence 1 BDSG also constitutes the legal basis for this processing.

WhatsApp applications: If you voluntarily apply via WhatsApp, we also process the data transmitted through this application channel for the purpose of carrying out the application process. The legal basis for processing your application data in this regard remains Section 26 (1) sentence 1 BDSG in conjunction with Art. 6 (1)(b) GDPR. To the extent that the use of WhatsApp may involve the transfer of personal data, in particular metadata, to third countries, especially the United States, such processing is based on your explicit consent pursuant to Section 26 (2) BDSG in conjunction with Art. 49(1)(a) GDPR. You may withdraw the explicit consent you have given above at any time with effect for the future.

Talent pool: With your consent, your applicant data will be stored and managed in an applicant management system so that we can contact you regarding future vacancies and consider you again for application processes. Processing within the talent pool is based on the applicant’s consent pursuant to Section 26 (2) BDSG in conjunction with Art. 6(1)(a) GDPR.

The data stored by the LEONHARD WEISS Group are deleted as soon as they are no longer required to achieve the purpose for which they were collected. If your application is unsuccessful, your personal data will be deleted no later than six months after the application process has been completed. The data will only be stored for a longer period if and to the extent that this is necessary for the assertion, exercise or defence of legal claims (Art. 17(3)(e) GDPR).

Talent pool: The data are stored in the talent pool for a period of up to 24 months. If you are not considered for any further opportunities during this period or if you withdraw your consent, the personal data will be deleted.

The data subjects’ contact details and areas of interest are collected and used to provide them with targeted information about news and updates relating to training and appren-ticeship opportunities at LEONHARD WEISS. Contact is made via the communication channels specified by the data subjects. The data are not disclosed to third parties. No data are transferred outside the European Union or the European Economic Area.

The purpose is to contact and attract pros-pective apprentices and to provide informati-on about news and updates relating to trai-ning and apprenticeship opportunities at LEONHARD WEISS.

The legal basis is the data subject’s consent pursuant to Art. 6(1)(a) GDPR.

The data are stored until consent is withdrawn, but for a maximum period of two years.

We process your personal data in order to inform you about news from our company (e.g. by newsletter), invite you to trade fairs or contact you for the purpose of surveying business partner satisfaction.

• Contact details such as name, email address and, where applicable, further contact information such as company, department or role of the recipient
• Communication data, such as newsletter dispatch history and subscription/unsubscription status (opt-in / opt-out)

We base the processing of your data on our legitimate interest – Article 6(1)(f) GDPR. This lies in particular in maintaining and further developing existing business relationships, initiating and establishing new partnerships, providing information on relevant news and offers to promote business exchange, and the continuous development of our portfolio.

No data is forwarded to third parties. We store personal data for as long as it is required for the stated purposes.

In the context of using the Energy Check Tool, we collect and process your personal data, company-related data and energy-related data in order to carry out the analysis, identify optimisation potential and further develop the software.

For the provision of the Energy Check Tool, you will be redirected to our processor, Grid-ty GmbH (Neue Weyerstraße 6, 50676 Cologne). You can view its data protection information there.

Your data is treated confidentially and used exclusively for the above-mentioned purposes. Data is only disclosed to third parties if this is necessary to carry out the energy check or if you have expressly consented.

• Company and contact person data: company name, industry sector, first name, last name, telephone number, email address
• Energy-related data: electricity demand, heat demand, existing technologies
• Location and usage information: postal code, number of employees, type of building use
• We use the email address to contact you and to send the analysis results

The processing of this data serves to carry out the energy check, identify optimisation potential and prepare individual analyses. In addition, we use anonymised data to further develop and improve the Energy Check Tool.

Your data is processed on the basis of Art. 6(1)(b) GDPR, as it is necessary for carrying out the energy check and for the performance of pre-contractual or contractual measures.

In addition, we base the processing on the legitimate interest of the tool provider pursuant to Art. 6(1)(f) GDPR. This legitimate interest lies in the further development of the software.

The data for the analysis is stored for up to 6 months after completion of the process. Data used to further develop the software may be anonymised or processed beyond this period on the basis of our legitimate interest. After expiry of the relevant periods, or at your request, the data will be deleted unless statutory retention obligations apply.

When visiting our corporate websites, your browsing behaviour may be statistically analysed. This is done by using the Matomo analytics program (InnoCraft Ltd, 7 Waterloo Quay, PO Box 625, 6140 Wellington, New Zealand).

Transfers of personal data outside the European Union (EU) or the European Economic Area (EEA) may take place. Where this is the case, we base such transfers on the principles set out in Art. 44 et seq. GDPR.

We process a masked IP address as well as browser and usage data, in particular information on how, when, for how long and which content visitors access on our corporate website. The processing is carried out for statistical purposes. Due to anonymisation, it is not possible to trace the data back to individual persons.

The processing serves to optimise our website content, improve user-friendliness and further develop our web offering both technically and in terms of content.

The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6(1)(f) GDPR. This legitimate interest lies in analysing and optimising our online presence.

You can object to this data processing:

The data is stored for as long as is necessary for the purpose of the processing. The data is deleted 18 months after it has been collected.

We maintain corporate pages on the following social media platforms:

• „Facebook / Instagram”: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
• „LinkedIn”: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
• „XING“: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany
• „TikTok“: TikTok Germany GmbH, Stralauer Allee 2, 10245 Berlin, Germany
• „YouTube“: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• „kununu“: kununu GmbH, Kurfürstenstr. 1, 80801 Munich, Germany

As the operator of an online presence on social media platforms, we process personal data if you con-tact us via the respective platform either directly by private message or publicly via the comment func-tion. The data processed in this context depends on the information you provide and on the contact details you have provided or made available. Insofar as the processing is necessary for the perfor-mance of a measure requested by you, it is carried out on the basis of Art. 6(1)(b) GDPR. In all other cases, we base the processing on our legitimate interest in efficiently handling inquiries addressed to us pursuant to Art. 6(1)(f) GDPR.

When visiting a corporate page, the respective platform provider also collects information that enables the recognition of users and a comprehensive analysis of user behavior. On the basis of these data, the provider may also create user profiles. If you are logged into your social media account during your visit, the provider may also associate the visit with your user account.

We ourselves receive only anonymized statistical evaluations from the respective provider regarding the use of our corporate page. This information helps us tailor our content even more specifically in the future. To this extent, we have a legitimate interest in the collection and processing of this information. In addition, we have a legitimate interest in using various communication channels in order to be able to reach as many interested persons as possible personally. The legal basis for operating our corporate pages is therefore Art. 6(1)(f) GDPR.

We do not ourselves disclose any personal data that we receive via our corporate pages to third par-ties. However, we can neither influence nor exclude the possibility that the providers mentioned may transfer the collected data to third parties, in particular to affiliated companies or partner companies that may also be located outside the European Union. Transfers of data to the USA are permissible in particular on the basis of an adequacy decision of the European Commission if the respective compa-ny is certified under the EU-US Data Privacy Framework, as is the case, for example, with Meta Plat-forms, Inc. and LinkedIn Corporation. 

In principle, you may assert your data subject rights (see also the section “Data Subject Rights”) with regard to data processing on our corporate pages both against us and against the respective platform provider. However, it should be noted that asserting such rights vis-à-vis the respective provider is generally the most effective approach, as only that provider has direct access to the user data.
 

Further information on data processing by the respective provider can be found at:

Facebook: https://en-gb.facebook.com/privacy/policy/

Instagram: https://privacycenter.instagram.com/policy/?section_id=0-WhatIsThePrivacy&hl=de

LinkedIn: https://www.linkedin.com/legal/privacy-policy

XING: https://privacy.xing.com/de/datenschutzerklaerung

TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/de

YouTube: https://www.youtube.com/intl/ALL_de/howyoutubeworks/privacy/

„kununu“: https://www.kununu.com/de/info/datenschutz

We have concluded an agreement pursuant to Art. 26 GDPR with Facebook, LinkedIn and TikTok respectively. These agreements govern how the data protection obligations arising from the operation of our corporate page are allocated between us and the respective provider. In this context, the providers assume a substantial part of the data protection obligations. These include, in particular, the handling of data subject rights pursuant to Art. 12 et seq. GDPR, the provision of appropriate technical and organizational measures to protect personal data, and the reporting and notification obligations in the event of a personal data breach. If you contact us in order to exercise your data subject rights, we will forward your request to the respective provider without undue delay. We are obliged to do so on the basis of the agreement concluded with the provider.

Information on the agreements with the respective providers can be found at:

Facebook / Instagram: https://www.facebook.com/legal/terms/page_controller_addendum

LinkedIn: https://www.linkedin.com/help/linkedin/answer/124838?lang=de

TikTok: https://www.tiktok.com/legal/page/global/tiktok-analytics-joint-controller-addendum/en

Information on the purpose, provider and storage duration of the cookies used can be found in the Usercentrics consent management tool.

Our websites contain references (links) to external sites; no social plug-ins are used in this context. We do not adopt the content of those sites as our own.

The data stored within the LEONHARD WEISS Group is protected against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. IT security experts review our security measures at regular intervals and adapt them to the latest standards.

Dear Business Partners, Please always carefully check the sender's address for orders and inquiries made in our name, and thoroughly review incoming emails, especially their attachments. In case of doubt, please contact your designated representative at LEONHARD WEISS. Thank you for your attention.