For privacy-related concerns, feel free to reach out to: 
info@benntec.de

Otherwise, you can contact our Data Protection Officer at:

Rheinmetall AG
Corporate Data Protection Officer
Rheinmetall Platz 1
40476 Düsseldorf
 datenschutzbeauftragter@benntec.de

We process personal data that we receive from you in the course of our business relationship. In addition, we process personal data that is necessary for providing our services, such as data received to execute orders, fulfill contracts, or based on consent given by you. We may also process personal data legally obtained from publicly accessible sources (e.g., land registers, commercial and association registers, press, media, trade fairs) that we are allowed to process. Relevant personal data includes personal details (name, address, and other contact data, date of birth and place, and nationality), identification data (e.g., passport data), and authentication data (e.g., signature specimen). Additionally, this may include order data, data resulting from the fulfillment of our contractual obligations, marketing and sales data, register data, data regarding your use of the telemedia we offer, and other data comparable to the categories mentioned.

We process personal data when you visit our website and use the services offered on the site.

4.1. Logfiles / Log Data
When you visit our website, certain data is collected and stored in log files. This data includes:

• IP Address
• Date and time of your visit
• The browser you are using, including its version
• The operating system you are using, including its version
• Which resources (e.g., subpage, contact form) you access on our website (logged in the
  form of a URL)

The processing and storage of log files are done to protect our legitimate interests according to Article 6, Paragraph 1, Point (f) of the GDPR. We have a legitimate interest in processing and storing this data to enable communication with our website and ensure its stability, security, and convenient accessibility. Furthermore, log files are retained to retroactively examine any unlawful use of the website or attacks. Log files are typically deleted after a storage period of 14 days unless we have a legitimate interest in continued storage (e.g., assertion of legal claims).

4.2. Contact
You have the opportunity to contact us at any time. Specific contact persons are named for specific topics, whom you can reach via email or phone. When you contact us, the data and information
you provide, particularly your name and email address, are processed. The processing is based
on Article 6, Paragraph 1, Point (b) of the GDPR if the contact is made within the context of a pre-contractual or existing contractual relationship. Otherwise, processing is based on Article 6, Paragraph 1, Point (f) of the GDPR and our legitimate interest in properly handling inquiries. Your data will be deleted after your inquiry has been resolved, unless there are legal retention periods or other legitimate reasons for continuing to retain the data (e.g., assertion, exercise, or defense of legal claims). Your personal data is not forwarded to external parties or companies outside of our organization.

4.3. Applications
On our website, we offer the possibility to inform yourself about open positions, speculative applications, and apprenticeships with us, and also to apply directly by sending an email to
bewerbung@benntec.de

If you apply to us via email, your personal data will be processed. This generally includes your core and contact data (e.g., name, address, email, phone number) as well as all information related to the application, such as details about your professional career and other information from a resume (e.g., educational history, place of birth, nationality, marital status, qualifications).

Your personal data will be disclosed to the recruiting team and the hiring or appropriate departments. A transfer of your data to third parties (e.g., external companies) does not take place. The data is processed and stored as long as necessary for conducting the application process and the decision on establishing an employment relationship. If no employment relationship is established, your personal data will be deleted six (6) months after the procedure ends.

The processing of your personal data is carried out in a pre-contractual context and for establishing an employment relationship. The legal basis for this is Article 6, Paragraph 1, Point (b) of the GDPR. If you disclose special categories of personal data to us with your documents, processing is based on your voluntary disclosure and consent to the processing of this data according to Article 9, Paragraph 2, Point (a) of the GDPR. You can revoke your consent at any time, informally and without stating reasons.

5.1. Use of Cookies
This website uses "cookies" or similar technologies. Cookies are text files stored on your device that enable, for example, the customization of the website to your preferences, automatic recognition on your next visit, proper functioning of the website, or analysis of website use.

There are three different categories of cookies used on this website:

• Essential (necessary) cookies: These cookies are necessary to correctly display the website and ensure its basic functions. The setting and storage of essential cookies on your device is based on Section 25, Paragraph 2, Number 2 of the Telecommunication-Telemedia Data Protection Act (TTDDG).
• Non-essential (functional) cookies: These cookies facilitate the use of the website and our services. In particular, they enable certain functionalities that enhance the convenience of visiting the website. The setting and storage of functional cookies, as well as the processing of associated personal data, is based on your consent according to Section 25, Paragraph 1 TTDDG and Article 6, Paragraph 1, Point (a) of the GDPR.
• Marketing cookies: Cookies in this category allow us to analyze website visitors' interactions and measure the reach of our website. This helps us optimize our online presence.

To manage cookie settings and consents, we use a consent management tool (CCM19 by Papoo Software & Media GmbH, Bonn). Your preference settings are stored through a necessary cookie. The use of this cookie for "choice or consent management" is in accordance with Article 6, Paragraph 1, Point (c) of the GDPR to fulfill our data protection proof and accountability obligations.

5.2. Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; hereafter "Google"). We use Google Analytics to analyze and regularly improve the use of our website. The obtained statistics help us improve our offerings and make them more interesting for you as a user. Google will provide us with the relevant information to evaluate your use of the website, compile reports on website activities, and provide us with further services related to website and internet use.

Google Analytics uses "cookies," text files stored on your computer that enable analysis of your website use. The information generated by the cookie about your use of this website is typically transmitted to a server of Google LLC (parent company of Google Ireland Ltd: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in the USA and stored there.

This website uses IP anonymization with the "_anonymizeIp()" enhancement, so IP addresses are processed in truncated form and personal identification can be excluded. If a personal reference can be inferred from the collected data, it is immediately excluded, and the personal data is deleted without delay. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. However, despite IP anonymization, it cannot be ruled out that Google may draw conclusions about your identity in exceptional cases based on further information obtained through your use of other Google services (e.g., an Android smartphone, Google Chrome web browser).

In the event of data transmission to the US company Google LLC, it is based on the EU-US-Data Privacy Framework, under which Google LLC is certified. It is an adequacy decision under Article 45, Paragraph 1 of the GDPR.

This website also uses Google Tag Manager to utilize the full functionality of Google Analytics. This service allows website tags to be managed via an interface. Google Tag Manager only implements tags. This means no cookies are set, and no personal data is collected. Google Tag Manager activates other tags that may collect data. However, Google Tag Manager does not access this data. If deactivation has been carried out at the domain or cookie level, it remains effective for all tracking tags, provided they are implemented with Google Tag Manager.

The use of these cookies and the processing of your personal data are based on your consent according to Article 6, Paragraph 1, Point (a) of the GDPR or Section 25, Paragraph 1 TTDDG, granted via your explicit selection in the cookie banner.

You can revoke your given consent at any time with effect for the future by changing your cookie settings (via the cookie banner) or deleting the cookies on your device. You may need to restart your browser for these changes to take effect.

Additionally, you have the option to generally prevent the processing of your data by Google Analytics by installing the "Google Analytics Opt-out Browser Add-on." This add-on can be downloaded from the following Google site:
https://tools.google.com/dlpage/gaoptout?hl=de

Detailed information on data processing by Google can be found in Google's Privacy Center at:
https://policies.google.com/privacy

6.1. Google Maps
This site uses the Google Maps service via an API interface. The provider is Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). When using the functions of Google Maps, your IP address, location, and device data are transmitted. This information is typically transferred to a server of Google LLC (the parent company of Google Ireland Ltd: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in the USA and stored there.

Offering Google Maps is in the interest of providing an appealing presentation of our online offerings and ensuring easy findability of the places indicated on our website. Separate notice windows will be displayed to you for the maps, through which you can give your explicit consent for the data transmissions and cookie uses required for embedding (button "ACCEPT"). If you have already selected the use of functional cookies or all cookies in the cookie banner earlier, this separate notice window will not be shown to you again. The corresponding selection in the notice window or cookie banner will also be stored for future website visits.

The use of Google Maps and the processing of your personal data are based on your consent according to Article 6, Paragraph 1, Point (a) of the GDPR or Section 25, Paragraph 1 TTDDG, which you provide through your explicit selection in the cookie banner.

You can revoke your given consent at any time with future effect by changing your cookie settings (via the cookie banner) or deleting the cookies on your device. You may need to restart your browser for these changes to take effect.

A joint responsibility agreement between Google LLC and us according to Article 26 of the GDPR has been concluded, which is available here:
https://privacy.google.com/intl/de/businesses/mapscontrollerterms/

Further information on how Google handles user data can be found in Google's privacy policy:
https://www.google.de/intl/de/policies/privacy

6.2. YouTube
We embed content from the YouTube video platform on our website to enable the playback of selected YouTube videos directly on our website. This requires, among other things, establishing a connection to YouTube's servers and the use of YouTube cookies.

The service provider for YouTube is Google Ireland Limited (Gordon House, Barrow Street,
Dublin 4, Ireland), whose parent company is Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) based in the USA. The provider's privacy information is accessible via the following link:
 https://policies.google.com/privacy

The YouTube videos are embedded in YouTube's so-called enhanced privacy mode. This mode ensures that the connection to YouTube is only established when the video is actively played. Before that, no connection to and thus no data transfer to YouTube takes place.

When you click on an embedded YouTube video, a separate notice window will be displayed, through which you can give your explicit consent for the data transmissions and cookie uses required for playback (button "ACCEPT"). If you have already selected the use of functional cookies or all cookies in the cookie banner earlier, this separate notice window will not be shown to you again. The corresponding choice in the notice window or cookie banner will be stored for future website visits. Details on storage duration can be found in the cookie banner under YouTube.

When an embedded YouTube video is played, a connection to YouTube is established, during which your IP address is transmitted, among other things. YouTube cookies will also be set on your device, which could serve to analyze your usage behavior for market research and marketing purposes by YouTube. If you are logged into your YouTube account at the same time, you potentially allow YouTube to associate your browsing behavior with your personal profile. You can prevent this, among other things, by logging out of your YouTube account. Details on the cookies used can be taken from the cookie banner.

By playing the embedded YouTube video (after prior corresponding selection in the cookie banner or notice window), you give your explicit and voluntary consent according to Article 6, Paragraph 1, Point (a) of the GDPR or Section 25, Paragraph 1 TTDSG for this data processing and cookie use by YouTube. We have no influence on this data processing by YouTube.

Since YouTube is a service of the US company Google, it cannot be ruled out that your data may be transferred to the USA. The transfer of your data is based on the EU-US-Data Privacy Framework, under which Google LLC is certified. It is an adequacy decision within the meaning of Article 45, Paragraph 1 of the GDPR.

To the extent necessary, we process and store your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract. Note that our business relationship may be a long-term obligation that is set for years. Additionally, we are subject to various retention and documentation obligations deriving from, among other things, the German Commercial Code (Handelsgesetzbuch, HGB). The periods specified there for retention or documentation are 2 to 10 years. Furthermore, the storage duration is also determined by
statutory limitation periods, which are usually 3 years according to the German Civil Code (Bürgerliches Gesetzbuch, BGB) but can be up to 30 years in certain cases.

In Section 4, you will be informed, if necessary, about specific deletion periods for the processing operations mentioned, which occur within the scope of the visit to this website and the services offered within the web presence.

Data transfer to third countries (countries outside the European Economic Area, EEA) only occurs
to the extent necessary to fulfill our contractual obligations to you, is legally required, or you have given us your consent.

Section 4 of the Privacy Policy informs you about which processing operations may involve such data transfers to third countries. Further details are provided separately at that point, if legally required.

Every data subject has the following rights under the GDPR:

• Right of access according to Art. 15 GDPR
• Right to rectification according to Art. 16 GDPR
• Right to erasure according to Art. 17 GDPR
• Right to restriction of processing according to Art. 18 GDPR
• Right to data portability from Art. 20 GDPR
• Right to withdraw consent given under Art. 7(3) GDPR

Furthermore, there is a right to lodge a complaint with a supervisory authority under
Art. 77 GDPR.

You can exercise your rights within the framework of the applicable legal requirements
and limitations.

Within the scope of our business relationship and the provision of our services, you only need to provide those personal data that are required to establish, execute, and terminate a business relationship and to perform the service, or that we are legally obliged to collect. Without these data, we will generally have to refuse to conclude the contract, execute the order, or perform a service, or we may have to terminate an existing contract.

We generally do not use automated decision-making according to Article 22 of the GDPR to establish and conduct the business relationship. Should we apply this procedure in individual
cases, we will inform you separately, provided this is legally required.

You have the right to object to the processing of your personal data according to Article 21 of the GDPR – namely:

a. Right to object on a case-by-case basis:
You have the right to object, at any time for reasons arising from your particular situation, to the processing of personal data concerning you with effect for the future, if the data processing occurs to safeguard legitimate interests (see Article 6(1) Points (e) and (f) of the GDPR). In the event of your objection, we will check whether the legal requirements for the processing of your data are
met and will refrain from any further processing of your data if this is not the case.

b. Right to object to data processing for direct marketing purposes:
In individual cases, we process your personal data to conduct direct marketing. You have the right to object at any time to the processing of personal data concerning you for such advertising purposes. If you object to processing for direct marketing purposes, we will no longer process your data for this purpose.

Objections can be made informally and should preferably be directed to:

benntec Systemtechnik GmbH
Karl-Ferdinand-Braun-Str. 7
28359 Bremen
Phone: +49 421 43849 0
 datenschutzbeauftragter@benntec.de

To the cookie overview