Legal

Privacy

1. General information

For Pappen Olef GmbH, the protection of personal data is an essential part of responsible corporate management. We attach great importance to protecting the privacy of visitors to our website and processing personal data exclusively in accordance with applicable data protection regulations.

This privacy notice explains which personal data is processed when you visit our website, the purposes and legal bases of that processing, and your rights as a data subject.

This privacy notice applies only to the website operated by Pappen Olef GmbH. Third-party websites linked from this site are governed solely by their own privacy policies. We have no influence over their content or data processing.

2. Data controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Pappen Olef GmbH
Oleftal 83
53937 Schleiden, Germany
Phone: +49 (0) 2445 9507-0
Email: info@pappen-olef.de

If you have questions about the processing of your personal data or the exercise of your data protection rights, you may contact us at any time using the details above.

3. Data protection officer

If our company is required to appoint a data protection officer, or has appointed one voluntarily, you can contact them using the details provided in the legal notice or on our website.

4. Principles of data processing

We process personal data only to the extent necessary to provide a functional website, handle enquiries, conduct application procedures, or fulfil legal or contractual obligations.

We pay particular attention to the principles

  • lawfulness,
  • transparency,
  • purpose limitation,
  • data minimisation,
  • accuracy,
  • storage limitation,
  • integrity and confidentiality, and
  • accountability

in accordance with Art. 5 GDPR.

There is currently no automated decision-making or profiling within the meaning of Art. 22 GDPR in connection with visits to our website.

5. Provision of the website and hosting

Our website is hosted by IONOS SE in Germany. Where technically provided for, processing takes place on servers within the European Union.

To provide our website securely, our hosting provider processes the data technically required for its operation on our behalf. We have concluded a data processing agreement with the provider pursuant to Art. 28 GDPR.

When you access our website, information transmitted by your browser to our web server is processed automatically. This includes:

  • the IP address of the requesting device,
  • the date and time of access,
  • browser type and version,
  • operating system used,
  • pages and files accessed,
  • referrer URL (if transmitted by your browser),
  • the volume of data transferred, and
  • the HTTP status code.

This data is processed for the following purposes:

  • to technically provide the contents of our website,
  • to ensure system security and stability,
  • to detect and ward off attacks on our information technology systems,
  • to analyse errors, and
  • to ensure the proper operation of our website.

The legal basis is Art. 6(1), first sentence, point (f) GDPR.

Our legitimate interest lies in the secure, efficient and economical provision of our website.

6. Server log files

When you visit our website, the technical information generated as part of the hosting process is stored in so-called server log files.

Processing is carried out solely to ensure system security, support technical administration, and analyse and resolve faults or improper access.

This data will not be combined with other personal data or evaluated for marketing or profiling purposes.

Server log files are stored only for as long as necessary to fulfil the stated purposes. They are then deleted or anonymised unless legal retention obligations or legitimate interests require longer storage.

7. Technical functions and cookies

Our website is designed as a static HTML/CSS website and currently does not use any analysis or marketing services.

We currently use no cookies or comparable tracking technologies that require consent.

Where technically necessary functions are used to operate or secure the website, their use is based on our legitimate interest in providing a secure and functional website pursuant to Art. 6(1), first sentence, point (f) GDPR.

If our website is expanded in the future to include functions whose use requires consent in accordance with the General Data Protection Regulation or the Telecommunications Digital Services Data Protection Act (TDDDG), these services will only be activated after your express consent. In this case, this data protection information will be updated accordingly.

8. Contact us

You have the option of contacting us by telephone or email.

If you contact us, we will only process the personal data you provide to the extent that this is necessary to process your concern, answer your inquiry or carry out pre-contractual or contractual measures. The provision of personal data is voluntary.

The data processed here includes in particular:

  • your name,
  • your contact details,
  • the content of your message, and
  • where applicable, other information that you provide voluntarily.

The legal basis for processing is Art. 6(1), first sentence, point (b) GDPR where your enquiry concerns the conclusion or performance of a contract. In all other cases, processing is based on our legitimate interest in appropriate communication and handling your request pursuant to Art. 6(1), first sentence, point (f) GDPR.

Your personal data will be deleted once your request has been fully processed, provided no legal retention obligations or other legitimate interests prevent deletion.

9. Communication via email

Communication via email is one of the usual communication channels in our company.

Please note that despite appropriate technical security measures, the transmission of information over the Internet may involve risks. Complete confidentiality and integrity of data transmission cannot always be guaranteed, especially in the case of unencrypted email communication.

If you wish to send particularly confidential information, we recommend contacting us in advance so that an appropriate secure transmission method can be agreed where necessary.

10. Applications

You can submit applications electronically and upload application documents through our website. Please note that email may be transmitted without encryption.

During an application process, we process only the personal data you provide for that purpose.

This includes:

  • personal details,
  • contact details,
  • details of educational and professional qualifications,
  • CV,
  • school and employment certificates,
  • certificates,
  • references,
  • cover letter,
  • salary expectations,
  • your possible starting date, and
  • other information and documents voluntarily submitted by you.

Please only submit the personal data that is necessary for your application. Special categories of personal data within the meaning of Art. 9 GDPR (e.g. information on health, religious affiliation or trade union membership) should only be disclosed if this is necessary for the specific application process or if you expressly request such disclosure.

The data is processed solely to decide whether to establish an employment relationship.

The legal basis is Section 26(1) BDSG in conjunction with Art. 6(1), first sentence, point (b) GDPR.

Within our company, only those people who are entrusted with carrying out the application process have access to your application documents.

Your application documents will generally not be passed on to third parties unless

  • you have expressly consented to this,
  • there is a legal obligation or
  • the disclosure is necessary to safeguard legitimate interests and is permitted under data protection law.

If an employment relationship does not come about, your application documents will generally be deleted no later than six months after completion of the application process, unless there are legal retention obligations to the contrary or you have expressly agreed to longer storage.

If you are hired, the application documents required for the employment relationship will become part of your personnel file and will be processed in accordance with the applicable legal regulations.

11. External links

Our website contains links to services operated by other providers.

Hyperlinks are identifiable as such and take you to the relevant third-party website when clicked.

The relevant operator is solely responsible for the content, security, and processing of personal data on each external website.

We therefore recommend that you find out about the data protection regulations that apply when you visit external websites.

12. Location information and Google Maps

To illustrate our company location, we only use static map sections or screenshots on our website.

These image files are provided locally within our website. When you simply access our website, no data is transmitted to Google in connection with the display of these maps.

We also provide links to Google Maps, which you can use to directly access our company location or plan your own route.

You leave our website and access a service provided by Google Ireland Limited only when you deliberately click such a link.

From that point onwards, the provider processes personal data under its own privacy policy. We have no influence over this processing.

13. Integration of external content

We currently embed no content from external platforms that would transmit personal data to third parties merely when the website is accessed.

In particular, we currently use none of the following services or technologies:

  • interactive map services,
  • video platforms,
  • social media plugins,
  • analysis or tracking services,
  • advertising or remarketing services, or
  • comparable technologies

Should this change, the relevant processing operations will be described transparently in this privacy notice and — where legally required — activated only after you have given prior consent.

14. Recipients of personal data

Within our company, access to personal data is limited to those who need it to perform their duties. Access is granted on a need-to-know basis.

To the extent that this is necessary for the operation of our website or the provision of our services, we use carefully selected external service providers. These support us, for example, in the areas of hosting, IT infrastructure or the technical administration of our systems.

Where external service providers process personal data on our behalf, they do so solely under a data processing agreement pursuant to Art. 28 GDPR. Our service providers are contractually required to process personal data only in accordance with our instructions and to implement appropriate technical and organisational safeguards.

Personal data is disclosed to other third parties only in the following cases:

  • if you have expressly consented to this,
  • if this is necessary to carry out or process a contractual relationship,
  • if we are legally obliged to do so or
  • if the disclosure is necessary to assert, exercise or defend legal claims.

15. Data transfers to third countries

As a general rule, personal data is not transferred to recipients outside the European Union or the European Economic Area as part of the operation of our website.

An exception may arise if you follow an external link on our website to a third-party service whose provider processes personal data under its own responsibility. We have no influence over the nature or extent of that processing.

If services are used in the future in which personal data is transmitted to recipients in third countries, this will only be done in compliance with the applicable data protection requirements. This includes, in particular, adequacy decisions by the European Commission or suitable guarantees within the meaning of Article 44 ff. GDPR.

16. Duration of storage

As a rule, we store personal data only for as long as necessary to fulfil the relevant processing purpose.

We may also retain data in the following circumstances:

  • insofar as there are legal retention obligations,
  • where necessary to fulfil commercial or tax obligations,
  • as long as claims can be asserted, exercised or defended or
  • as long as there is effective consent to further storage.

Once the relevant processing purpose has ceased and statutory retention periods have expired, personal data is deleted or, where immediate deletion is not possible for legal or technical reasons, its processing is restricted.

17. Legal basis for processing

We process personal data solely on the basis of the applicable data protection laws.

Depending on the nature and purpose of the processing, the following legal bases may apply:

  • Art. 6(1), first sentence, point (a) GDPR, where you have given us your consent;
  • Art. 6(1), first sentence, point (b) GDPR, where processing is necessary for pre-contractual measures or the performance of a contract;
  • Art. 6(1), first sentence, point (c) GDPR, where we are legally required to process the data;
  • Art. 6(1), first sentence, point (f) GDPR, where processing is necessary to safeguard our legitimate interests or those of a third party and no overriding protected interests prevent it;
  • Section 26 BDSG also applies to applications.

18. Data security

The protection of personal data is very important to Pappen Olef GmbH. We use appropriate technical and organisational measures to protect personal data from loss, manipulation, unauthorised access and unauthorised disclosure.

We use appropriate technical and organisational measures (TOMs) pursuant to Art. 32 GDPR.

Our security measures are based on the state of the art, the scope of data processing and the existing risks to the rights and freedoms of data subjects. They are regularly checked and, if necessary, adapted to technical or legal developments.

The data transmission between your device and our website is encrypted using current TLS technology.

Despite these technical safeguards, transmitting data over the Internet may involve security risks. Complete protection against access by third parties cannot therefore be guaranteed.

19. Automated decision making

In connection with the operation of our website, there is no decision-making based solely on automated processing within the meaning of Art. 22 GDPR.

This applies in particular to the processing of contact requests and application procedures. Decisions that have legal effects or significantly affect you in a similar way are not made exclusively automatically.

20. Further development of our website

We are continually developing our website to improve content, functionality and user-friendliness.

If this results in new processing operations of personal data or if existing procedures are significantly changed, we will adapt this data protection information accordingly.

If we use services in future that require your prior consent under data protection law or the Telecommunications Digital Services Data Protection Act (TDDDG), we will activate them only after you have given express consent through an appropriate consent management system.

21. Your rights

Where we process your personal data, you have the following rights under data protection law.

Right of access

You have the right to ask whether we process personal data about you. If so, you may obtain information about the data, its source, the purposes of processing, the recipients, the intended storage period, and your rights. Upon request, we will provide you with a copy of the personal data processed.

Rectification

You may request the prompt correction of inaccurate personal data or the completion of incomplete personal data.

Erasure

Subject to the statutory requirements, you may request the erasure of your personal data, particularly where it is no longer needed for its original purpose, consent has been withdrawn, or the processing was unlawful.

The right to erasure does not apply where statutory retention obligations or other legal grounds prevent deletion.

Restriction of processing

Under the conditions of Art. 18 GDPR, you can request that the processing of your personal data be restricted.

Data portability

Where processing is automated and based on your consent or a contract, you may request that we provide the personal data you supplied in a structured, commonly used and machine-readable format or, where technically feasible, transmit it directly to another controller.

Withdrawal of consent

You can revoke your consent at any time with future effect. The lawfulness of the processing carried out until the revocation remains unaffected.

Right to object

Where personal data is processed on the basis of legitimate interests pursuant to Art. 6(1), first sentence, point (f) GDPR, you may object to that processing at any time on grounds relating to your particular situation.

If personal data is processed for direct marketing, you may object at any time without stating specific grounds.

22. Right to lodge a complaint

If you believe that the processing of your personal data infringes data protection law, you may lodge a complaint with a data protection supervisory authority at any time, for example with the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

You may contact the supervisory authority responsible for your place of residence or the authority responsible for our company.

The exercise of this right is without prejudice to other administrative or judicial remedies.

23. Contact for privacy questions

If you have any questions about the processing of your personal data or the exercise of your rights, you can contact us at any time.

Pappen Olef GmbH
Oleftal 83
53937 Schleiden
Phone: +49 (0) 2445 9507-0
Email: info@pappen-olef.de

If a data protection officer has been appointed, you may also contact them directly.

24. Status of this privacy notice

This privacy notice describes the current processing of personal data on our website.

We regularly review our data protection information and adapt it if legal framework conditions, technical circumstances or the procedures we use change.

The current version published on our website applies. Changes will come into effect upon publication on the website.

Last updated: July 2026