1. Processing of your personal data within the Deutsche Edelstahlwerke
The controller within the meaning of data protection law is Deutsche Edelstahlwerke Specialty Steel GmbH & Co. KG, Auestraße 4, 58452 Witten, Germany (hereinafter referred to as „DEW“. The controller is part of the Swiss Steel Group.
2. Data Protection Officer
The data protection officer is available to answer all your questions at dpo(at)swisssteelgroup.com.
3. Purpose and legal basis of the processing
We process your personal data only within the legally permitted purposes and in accordance with the legal requirements of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and national data protection laws.
3.1 Website Visitors
The purpose of the processing is the technical provision and optimization of the site, communication of information about our services and products and the protection of your interests. The legal basis for this is either Article 6 (1) (a) GDPR, if you have given your consent, or Article 6 (1) (f) GDPR. In this respect, our legitimate interest lies in the administration and operation of the website, our interest in optimizing the website and in informing you about products and services. This includes in detail:
a) Mailing list for media releases and newsletters
If you register with us for the mailing list for media releases or for the newsletter and give us your consent, we will store and process the contact data you provide there. The use of the media releases or the newsletter is completely voluntary and not a prerequisite for using the website. You can unsubscribe from the media releases or the newsletter at any time with effect for the future and thus revoke your consent. You will find the link to unsubscribe in every e-mail with which we send you your media releases or newsletter.
b) Contact form
We offer a contact form on our website so that you can contact us with questions about DEW, our website and other inquiries. You can also contact us by e-mail.
When you contact us, the data you provide us with (in particular your e-mail address, your first and last name and the text of your inquiry and any other details you may have provided in the contact form or by e-mail) will be stored by us in order to process your inquiry and answer your questions.
c) Customer login area
On our website, we offer you the possibility to register in the login area. As part of the registration process, we regularly process your data (in particular your e-mail address, first and last name, company, user name, debtor number) in order to identify you and contact you.
In our customer area, you can access our special alloy and scrap surcharges after login. We only allow this access to our customers, which is why you can only obtain your access data from your sales representative. For this purpose, your registration with the above-mentioned data is required. The processing of this data is based on Art. 6 (1) (f) GDPR. It is in our interest to provide this special service only to our customers, which is why we would like to be able to identify you in advance using this data. Use of the customer login area is completely voluntary and not a prerequisite for using the website. Of course, you cannot log in if you have not identified yourself to us as a customer and have not provided the requested contact details.
For more details about the cookies we use, please visit https://www.dew-stahl.com/en/cookie-policy/
e) Linking from Google Maps, YouTube and LinkedIn
On our websites, we offer you the opportunity to visit DEW content in social networks (YouTube and LinkedIn) and plan routes via Google Maps. Our website integrates these services only as external links. These companies will therefore only process your data when you click on the integrated graphics. You will then be forwarded to the page of the respective provider. If you do not want the named providers to receive your data, please do not click on the graphics.
3.2 Customers, suppliers and service providers
a) Management of the contractual relationship
The purpose of processing in this context is the management of contact data, communication, customer care and security, and logistics. The legal basis for the processing is Article 6 (1) (b) of the GDPR, insofar as a contractual relationship exists with you. In addition, Article 6 (1) (f) GDPR is the legal basis if and insofar as our legitimate interest is the management of the customer relationship, security and improvement of logistical processes.
We process your personal data in this context for marketing purposes, sending advertising, e-mails, newsletters, technical information or legal updates, as applicable. The legal basis for this is Article 6 (1) (a) GDPR, provided that consent has been expressly obtained. Consent is voluntary and can be revoked at any time with effect for the future.
For existing customers, we may send advertising and information material for similar products or services without consent. However, this will only be done within the framework of the applicable competition law regulations. In this respect, Article 6 (1) (f) of the GDPR is the legal basis and our legitimate interest is marketing and sales. Data subjects may object to this processing of their data at any time. For details of the right of objection, see below.
The purpose of processing your personal data is to evaluate your application for a position at DEW. Your personal data will only be processed if it is necessary in connection with your application during the application process. The legal basis for this processing is Article 6 (1) (b) GDPR, as the processing of your application constitutes the implementation of a pre-contractual measure.
We process personal data collected during registration on the basis of Article 6 (1) lit. f DSGVO, whereby our legitimate interests lie in access control, fire protection and improving plant security. In addition, parts of the site or building are video-monitored, and we regularly check vehicles entering and leaving our premises. The data collected in this context is also processed on the basis of Article 6 (1) lit. f DSGVO. Our legitimate interest is the protection of property and employees as well as the prevention and investigation of criminal offences. We may also be subject to legal obligations to provide security briefings. The associated data processing is carried out on the basis of Article 6 para. 1 lit. c DSGVO
3.5 As a company we are subject to various legal obligations. Such obligations may arise from provisions of commercial, tax and social law, for example in connection with regulations to prevent the financing of terrorism or the deployment of employees. Insofar as DEW processes or shares your personal data for this purpose, the legal basis is Article 6 (1) (c) GDPR. This may also result in specific obligations to secure, store, report and collect data, which generally serve control purposes of the respective authorities.
4. Recipient of your personal data
4.1 DEW will disclose your personal data to third parties only to the extent necessary. Your personal data will not be passed on to third parties for any reason and outside the purposes mentioned above. DEW may share your personal information with subsidiaries and affiliates in order to provide the services you have requested. These subsidiaries and affiliates process your personal information in accordance with the principles described above.
4.2 DEW may disclose your personal data to third parties who assist us in administrative, technical, application management or marketing matters.
4.3 We work together with service providers within and/or outside the DEW or the Swiss Steel Group to perform our tasks. This may be the case, for example, in connection with the operation of the IT infrastructure or in connection with an application. If we involve external service providers this will always be done in accordance with the statutory provisions and in compliance with the applicable data protection regulations.
4.4 DEW may be required by law or in the course of official or judicial proceedings to disclose your data to public authorities. This may include investigating violations, interacting with governments, protecting the security or integrity of our databases or this website, protecting and defending the rights or property of DEW, protecting the personal safety of DEW website users, making arrangements to avoid liability, or protecting your or our legal rights and interests or defending DEW in the event of a dispute. We reserve the right to contact the relevant authorities if we discover any activity on DEW websites, which is illegal or violates our guidelines.
5. Transfer to third countries
Even if you are in the European Union, personal data collected during your use of this website may be processed in a third country whose data protection laws have not been qualified as adequate by a decision of the EU Commission. When we transfer personal data to such countries, DEW will ensure that agreements relating to the processing of your personal data are in place so that your personal data is protected by appropriate safeguards, usually standard EU contractual clauses for data transfers. If you would like further information on how we protect your personal data under these circumstances, please contact our Data Protection Officer using the contact details above.
6. Storage of your personal data
DEW will process your personal data only for as long as it is necessary to fulfil the above-mentioned purposes and/or if storage is required by law or legally mandated. If you would like further information on our retention periods, please contact our Data Protection Officer using the contact details given above.
7. Profiling or automated decision making
Profiling or automated decision making is not used in any processing of personal data by DEW.
8. Your Rights
8.1 DEW tries to make it as easy as possible for you to exercise your rights. You generally have the following rights as set out below in relation to your personal data. Please always state in what form you wish to receive the information. If you do not indicate a wish, DEW will reply to your request in the same form as the request. You will normally receive a reply within one month. In the case of obviously unfounded or excessive requests, DEW is entitled to demand an appropriate fee or to reject the request.
Right of access - You have the right to request information about whether DEW processes personal data relating to you or not. If DEW processes your personal data, you will receive information about the specific data and other additional information.
Right to rectification - You have the right to ask DEW to rectify your data if it is incorrect, inaccurate and/or incomplete. The right of rectification includes the right to be completed by additional explanations or communications. If DEW should have disclosed any data concerned to other recipients, DEW will inform them of the rectification if this is reasonable and will inform you of these recipients upon request.
Right to erasure - You have the right to request DEW to delete your personal data if there is no longer any reason to keep it. Please note that DEW is subject to legal storage obligations. If DEW should have disclosed any data concerned to other recipients, DEW will inform them of the deletion if this is reasonable and will inform you of these recipients upon request.
Right to restriction of processing - You have the right to have the processing of your personal data restricted in certain cases for a specific purpose. If DEW has disclosed any data concerned to other recipients, you will be informed of the restriction if it is reasonable to do so and, upon request, informed of these recipients.
Right to data portability - You may be entitled to request that data concerning you be made available in a standard electronic, machine-readable data format. The right to transfer data includes the right to transfer the data to another responsible party; on request, DEW will therefore - as far as technically possible - transfer data directly to a responsible party named or to be named by you. The right to transfer data exists only for data provided by you and presupposes that the processing is based on consent or for the performance of a contract and is carried out with the aid of automated procedures.
Right to object - Data subjects also have the right to object at any time, for reasons arising from their particular situation, to the processing of personal data concerning them, which is carried out pursuant to Article 6 (1) (e) or (f) of the GDPR. In the case of data processing for direct marketing purposes, persons concerned may at any time object to the processing, even without the existence of the above-mentioned reasons.
8.2 You always have the right to lodge a complaint under Article 77 of GDPR with a competent supervisory authority regarding the processing of your personal data by DEW.