Information on the processing of personal data (data protection information)

As of 15 April 2025

Welcome to the data protection section of New Pionier Berufsbekleidung GmbH. We are delighted that you are interested in our company. This data protection information is intended to provide you with detailed information about when we collect which data and how it is processed.

Responsible

The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is:

New PIONIER Berufsbekleidung GmbH

Elverdisser Str. 313

32052 Herford

Company headquarters: Daimlerstraße 71, 74545 Michelfeld

Telephone: +49 5221 - 979-400

Fax

Email: pionierworkwear@rbrand.group

Data protection

You can contact our data protection officer at:

Gesellschaft für Personaldienstleistungen mbH

Pestalozzistraße 27

34119 Kassel

Phone:

Email: datenschutz@gfp24.de

Website: https://www.gfp24.de

General information on the collection of personal data

The following information provides you with transparent details about the nature and scope of the processing of personal data

that we collect and process when you visit our website,
the use of our online offers,
external online presences on social media platforms
in the context of application procedures
and in business relationships with customers and service providers

The legal basis for our data protection is provided in particular by the provisions of the General Data Protection Regulation (GDPR) and the supplementary provisions of the Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG).

Purpose/legal basis of processing

In cases where we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

When processing personal data that is necessary for the performance of a contract concluded between you and us, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

In the event that the processing of personal data is necessary for the fulfilment of a legal obligation to which we are subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR is the legal basis.

In the event that the processing of personal data is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not override the aforementioned interest, Art. 6 para. 1 lit. f GDPR shall serve as the legal basis for the processing.

If cookies or similar technologies are used during data processing, these are stored or access to information on a user's end device (e.g. device fingerprinting) is carried out in accordance with Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR.

If the use of cookies is absolutely necessary, this is done on the basis of Section 25(2) sentence 2 TDDDG.

Transfer of personal data

If, in the course of our processing, we transfer your personal data to other parties or disclose it to them, this will only be done on the basis of one of the aforementioned legal bases. The recipients of this data may include, for example, payment service providers in the context of contract fulfilment. In such cases where we are required to do so by law or by court order, we must transfer your data to authorities entitled to receive it.

If external service providers support us in processing your data (e.g. data analysis, newsletter dispatch), this is done within the scope of order processing in accordance with Art. 28 GDPR. In doing so, we only conclude contracts with service providers who offer sufficient guarantees that appropriate technical and organisational measures are in place to ensure the protection of your data.

Data transfer to third countries

Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is in accordance with the legal requirements. Subject to express consent or contractually or legally required transfer, we only process or allow the data to be processed in third countries with a recognised level of data protection (e.g. adequacy decision of the European Commission pursuant to Art. 45 (1) sentence 3 GDPR for the "EU-US Data Privacy Framework" https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60- be03fcb0fddf_en) or in accordance with Art. 44 ff. GDPR on the basis of special guarantees, such as contractual obligations through so-called standard protection clauses of the EU Commission (information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/dataprotection/international-dimension-data-protection_de).

Storage of data

As soon as the respective purpose for storage no longer applies, we will delete or block your personal data. Furthermore, your personal data will only be stored if special statutory retention periods (in particular commercial and tax retention obligations) at national or European level prevent deletion.

Definitions

Our privacy policy is based on terms used in the GDPR and defined therein. To ensure that our privacy policy is easy to read and understand, we would like to explain the most important terms in advance.

Personal data

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing

"Processing" means any operation or set of operations which is performed on personal data or on sets thereof, whether or not by automated means, such as collection, recording, organisation, structuring, organisation, storage, adaptation or alteration, reading, consultation, use, disclosure by transmission, distribution or any other form of provision, alignment or combination, restriction, erasure or destruction.

Controller

"Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or the law of Member States, the controller or the specific criteria for its nomination may be provided for by Union law or the law of Member States.

Pseudonymisation

"Pseudonymisation" means the processing of personal data in such a manner that the personal data cannot be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

Processor

A "processor" is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

Recipient

"Recipient" means a natural or legal person, public authority, agency or other body to which personal data are disclosed, regardless of whether it is a third party or not. However, public authorities that may receive personal data in the course of a specific investigative task under Union law or the law of Member States are not considered recipients.

Third

"Third party" means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and persons who, under the direct authority of the controller or the processor, are authorised to process personal data.

Consent

"Consent" means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Profiling

"Profiling" means any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

Rights of data subjects

The processing of personal data gives you, as the natural person concerned, rights that you can exercise against us at any time. These are:

Right to withdraw a declaration of consent under data protection law in accordance with Art. 7 para. 3 GDPR
Right to information about your personal data stored by us in accordance with Art. 15 GDPR
Right to rectification of inaccurate data or completion of incomplete data in accordance with Art. 16 GDPR
Right to erasure of your data stored by us in accordance with Art. 17 GDPR
Right to restriction of processing of your data in accordance with Art. 18 GDPR
Right to data portability in accordance with Art. 20 GDPR
Right to object in accordance with Art. 21 GDPR
Automated individual decision-making, including profiling, in accordance with Art. 22 GDPR.

Right to information

You have the right to obtain from us confirmation as to whether or not we are processing your personal data and, if so, which personal data we are processing, as well as to request copies of your personal data from us. Please note that your right to information may be restricted under certain circumstances in accordance with legal provisions.

Right to rectification

If the information concerning you is no longer accurate, you have the right to request the immediate rectification of inaccurate personal data concerning you and, if necessary, the completion of incomplete personal data.

Right to erasure

In accordance with legal requirements, you have the right to request that data concerning you be deleted immediately, e.g. if the data is no longer required for the purposes for which it was collected and there are no legal retention or archiving requirements that prevent deletion.

Right to restriction of processing ( )

Within the scope of the provisions of Art. 18 GDPR, you have the right to request a restriction on the processing of data concerning you, e.g. if you have objected to the processing, for the duration of the review of whether the objection can be upheld.

Right to data portability

You have the right to have data that you have provided to us handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if it is technically feasible.

Right to withdraw a declaration of consent under data protection law

If the processing of your personal data is based on consent given by you, you have the right to withdraw this consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You can send your revocation in any form to New Pionier Berufsbekleidung GmbH, Elverdisser Straße 313, 32052 Herford, email:pionierworkwear@rbrand.group . We would like to point out that your objection may also be made in further proceedings or must be made for technical reasons. Further information on this can be found in the services described.

Right to object to processing

Under the conditions of Art. 21 para. 1 GDPR, data processing based on Art. 6 para. 1 lit. e or f GDPR may be objected to for reasons arising from your particular situation. This also applies to profiling based on these provisions. If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Please send your objection in writing to New Pionier Berufsbekleidung GmbH, Elverdisser Straße 313, 32052 Herford, email: pionierworkwear@rbrand.group. We would like to point out that your objection may also be made in further proceedings or must be made for technical reasons. Further information on this can be found in the services described.

Right to lodge a complaint with the data protection authority

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful. The address of the supervisory authority responsible for our company is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

Postal address:

Postfach 10 29 32

70025 Stuttgart

Tel.:

Fax

Email: poststelle@lfdi.bwl.de

Automatic decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.

Use of online services

Below, we inform you when and in what context data is processed when you use our online services.

Collection of personal data when you visit our website

When you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you view our website, we collect the data listed below. This data is technically necessary to display our website to you and to ensure the stability and security of the display. The legal basis for storing information in the form of cookies or in the server log file on your end device or for accessing this information on your end device is Section 25(2)(2) of the German Telemedia Act (TDDG). The associated data processing is based on Article 6(1)(f) of the GDPR:

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status / HTTP status code
Amount of data transferred
Website from which the request originates
Browser
Operating system and its interface

This data is temporarily stored in our system's log files. Further storage is possible, but in this case the IP addresses are partially deleted or anonymised so that the calling client can no longer be identified.

Use of cookies

In addition to the aforementioned data, cookies are stored on your device (e.g. PC, laptop, smartphone) when you use our website. Cookies are small text files that are stored on your device and assigned to the browser you are using. They enable the entity that sets the cookie (in this case, us) to receive certain information from your device, such as . Cookies cannot execute programs or transfer malware to your device. They serve to make the online offering more user-friendly and effective overall.

This website uses the following types of cookies, the scope and functionality of which are explained below:

Transient cookies

Transient cookies are automatically deleted when you close your browser. These include session cookies in particular. These store a so-called session ID, which can be used to assign various requests from your browser to the same session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.

Persistent cookies

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings.

We use cookies on our website that are generated by us as the website operator and are necessary for the full functionality and presentation of our website. The legal basis for storing information in the form of cookies on your end device or accessing this information on your end device is Section 25 (2) No. 2 TDDDG. We use these cookies on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR to ensure our online offering.

In addition to the cookies set by us as the controller, cookies offered by other providers are also used. We process these cookies on the basis of your consent in accordance with Art. 6 para. 1 lit. a and § 25 para. 1 TDDDG (storage of cookies or access to information in an end device (e.g. via device fingerprinting). Further information on the use of and cooperation with external service providers can be found in the data protection information of the respective online offers.

You can configure your browser settings according to your preferences and, for example, refuse to accept cookies from external providers or all cookies. However, we would like to point out that this may mean that you will not be able to use all the functions of this website. If you have agreed to the use of cookies and wish to revoke your consent in the future, you can delete the stored cookies in the settings of your browser.

Cookie settings in web browsers

Web browsers can be set to notify you when cookies are set or to reject or disable cookies in general or in part. By deactivating and deleting all cookies, you can also revoke any consent you have previously given. If you deactivate or restrict cookies using your browser, various functions on our website may not be available to you. You can delete stored cookies at any time using your web browser, including automatically.

You can find out about these options for the most commonly used browsers via the following links:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen

Google Chrome: https://support.google.com/chrome/?hl=de&an-swer=95647#topic=7439538

Apple Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Microsoft Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Microsoft Edge: https://support.microsoft.com/de-de/help/4027947/microsoft-edge-deletecookies

Opera: https://help.opera.com/de/latest/web-preferences/

If no restrictions have been made to the cookie settings, cookies that enable and ensure the necessary technical functions will remain on your device until you close your browser; other cookies may remain on your device for longer. The exact cookie durations are displayed in the cookie settings for the respective services used.

SSL or TLS encryption

Our website uses TLS encryption (formerly SSL) for security and protection during the transmission of confidential content. Orders or contact requests that you send to us are therefore encrypted during transmission. Depending on your browser type, you can recognise this either by the lock symbol and/or the https protocol in the address bar.

Contact

Enquiries by email, telephone or fax

When you contact us by email, telephone or fax, the personal data you provide (your email address, your name, your telephone number, the content of your message) will be stored by us in order to process your enquiry. We will not pass on this data without your consent.

Data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR, provided that your enquiry is related to the fulfilment of the contract or is necessary for the implementation of precontractual measures. In all other cases, we process your data on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and/or on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in particular in the effective processing of your request.

The data you send us via contact enquiries will remain with us until you request its deletion, revoke your consent to its storage or the purpose for which it was collected no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

Contact

When you contact us via a contact form, the data you provide (your email address, your name, your telephone number, the content of your message) will be stored by us in order to respond to your enquiry. The processing of the data entered in the contact form is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. If your contact request is related to the fulfilment of a contract or the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. We will delete the data collected in this context after it is no longer necessary for storage or restrict processing if there are legal retention obligations. You can revoke this consent at any time. The legality of the data processing operations carried out until revocation remains unaffected by the revocation.

Newsletter

With your consent, you can subscribe to our newsletter, which will inform you about current interesting offers. We regularly report on product offers from the Pionier Workwear and Pionier Corporate Fashion ranges, events and trade fairs, sales promotions, price information, news and information from our company, tips on our products and information from our cooperation partners.

We use the double opt-in procedure to register you for our newsletter. This means that after you register, we will send an email to the email address you provided asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 48 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP address and the time of registration and confirmation at . The purpose of this procedure is to verify your registration and, if necessary, to investigate any misuse of your personal data.

The only mandatory information required for sending the newsletter is your email address. The provision of additional, separately marked data is voluntary and is used to address you personally. After your confirmation, we will store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 lit. a GDPR (consent).

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter email.

We work with the following email marketing provider:

Sendinblue GmbH (Brevo, formerly Newsletter2Go), Köpenicker Straße 126, 10179 Berlin, Germany

Conclusion of a contract for order data processing

We have concluded a contract with the provider for order data processing. In this contract, the provider is obliged to protect our customers' data and not to pass it on to third parties.

The data is collected exclusively in pseudonymised form, meaning that the IDs are not linked to your other personal data and cannot be traced back to you.

You can object to this tracking at any time by clicking on the separate link (unsubscribe) provided in every email. The information will be stored for as long as you are subscribed to the newsletter. After you unsubscribe, we will store the data purely for statistical purposes and anonymously.

Such tracking is also not possible if you have disabled the display of images in your email programme by default. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you display the images manually, the above-mentioned tracking will take place.

Analytics tools

Matomo

Our website uses the open source software tool Matomo. Matomo uses "cookies" to enable analysis of website usage. For this purpose, the usage information collected in the cookie (including your abbreviated IP address) is transferred to our server (local host) and stored for usage analysis purposes. Matomo does not transfer any data to servers outside our control. Your IP address is immediately anonymised during this process, so that you as a user cannot be identified by us. The information collected about your use of this website will not be passed on to third parties. Our interest in and purpose of data processing lies in optimising our website, adapting its content and improving our offering.

The processing of users' personal data enables us to analyse the surfing behaviour of visitors to our website. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness.

The processing of data is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TDDDG. You can prevent the setting of (individual or all) cookies by adjusting your browser settings accordingly. However, this may mean that you will not be able to use all the functions of this website to their full extent.

Further information on Matomo's terms of use and data protection regulations can be found at: https://matomo.org/privacy/

Integrated third-party content

Vimeo

We have integrated videos from the provider Vimeo Inc. into our online offering. When you visit such a page on our website, a connection to the Vimeo servers is established. This transmits to the Vimeo server which of our web pages you have visited. If you are logged in as a member of Vimeo, Vimeo will assign this information to your personal user account. When you click on the start button of a video, this information may also be assigned to an existing user account. If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website and delete the corresponding cookies from Vimeo.

Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

The function is only activated and data is only transmitted to the service provider once the service has been activated. The legal basis for the processing of your data is Art. 6 (1) lit. a GDPR (consent) and § 25 (1) TDDDG. Your consent can be revoked at any time with future effect.

The company is certified under the EU-US Data Privacy Framework (DPF). Further information can be found at https://www.dataprivacyframework.gov/list.

Information from the third-party provider: Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA.

Further information on data protection can be found in Vimeo's privacy policy: https://vimeo.com/privacy.

Social media presence

Information about social media

We operate publicly accessible profiles on social networks to draw attention to our services and products. There, we would like to get in touch with you as a visitor and user of these pages and our website.

In doing so, user data may be processed outside the European Union. This may result in risks for you as a user and may make it more difficult to enforce your rights. When selecting the social media platforms we use, we ensure that the operators undertake to comply with EU data protection standards.

When you visit one of our social media sites (e.g. Facebook), we are New PIONIER Berufsbekleidung GmbH, Elverdisser Straße 313, 32052 Herford, registered office: Daimlerstraße 71, 74545 Michelfeld, jointly responsible with the operator of the respective social media platform in accordance with the GDPR and other data protection regulations.

Data processing on social media platforms

We have no influence on the processing of personal data by the respective platform operator. For example, social networks such as Facebook use your data for market research and advertising purposes. Among other things, user behaviour can be analysed and a usage profile can be created from the resulting interests of the user. Social media operators use cookies to store and further process this information. These are text files that are stored on the user's various end devices. If you have a profile on the respective social media platform and are logged in, the storage and analysis even takes place across devices. This allows interest-based advertising to be displayed to you both within and outside the respective social media presence. Data processing may also affect persons who are not registered as users of the respective social media platform ( ).

Statistical data of various categories are available to us via social media platforms. These statistics are generated and provided by the social media operator. As the operator of the fan page, we have no influence on their generation and presentation. We use this data, which is available in aggregated form (total number of page views, "likes", page activity, post interactions, reach, video views, post reach, comments, shared content, replies, proportion of men and women, origin in terms of country and city, language, views and clicks in the shop, clicks on route planners, clicks on telephone numbers) to make our posts and activities on our fan page more attractive to users. Due to the constant development of social media platforms, the availability and processing of data is subject to change, so we refer you to the privacy policies of the platforms for further details.

Legal basis

The operation of these fan pages, including the processing of users' personal data, is based on our legitimate interests in providing a modern and supportive means of information and interaction for and with our users and visitors in accordance with Art. 6 para. 1 lit. f. GDPR. You may also have given a platform operator your consent to data processing, in which case Art. 6 para. 1 lit. a GDPR is the legal basis.

For a comprehensive description of the respective data processing and the options for objection (opt-out), we refer to the privacy policies and information provided by the respective platform operator.

Storage period

The data collected directly by us via social media will be deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it or you revoke your consent to its storage. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence on the storage period of your data stored by social network providers for their own purposes. You can find more information on this directly from the social network operator (e.g. in their privacy policy, see below).

Exercising your rights

You can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective portal (e.g. Facebook).

Despite joint responsibility, we would like to point out that we do not have complete access to your personal data. For this reason, you should contact the providers of the social media platforms directly if you have any requests for information or wish to assert your rights as a data subject. Only the providers have access to the user data and can take direct action and provide information. If you require assistance, please contact us: New PIONIER Berufsbekleidung GmbH, email: pionierworkwear@rbrand.group

Our social networks

Instagram:

Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland Privacy policy: http://instagram.com/about/legal/privacy

Opt-out option: http://instagram.com/about/legal/privacy

Certification under the EU-US Data Privacy Framework (DPF) at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000GnywAAC&status=Active.

LinkedIn:

Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Opt-out option: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Vimeo:

Provider: Vimeo Inc., Legal Department, 555 West 18th Street New York, New York 10011, USA

Opt-out option: We would like to point out that Vimeo may use Google Analytics and refer you to the privacy policy https://policies.google.com/privacy and the opt-out options for Google Analytics http://tools.google.com/dlpage/gaoptout?hl=de or Google's settings for data use for marketing purposes https://adssettings.google.com/.

Online video conferencing tools

Microsoft Teams

We use the "Microsoft Teams" tool to conduct telephone and video conferences, online meetings, video consultations, digital coaching and/or webinars (hereinafter: "online meetings"). Microsoft Teams is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

If you visit the Microsoft Teams website (https://teams.microsoft.com/), Microsoft is responsible for data processing. You need to visit this website to download the necessary software if you don't want to or can't use it directly without downloading it via an internet browser.

Data categories

Various types of data are processed when using Microsoft Teams. The total volume of data processing also depends on the information provided by the user before, during and after an "online meeting".

The following personal data may generally be subject to processing:

User information: first name, last name, telephone number (optional), email address, password (if "single sign-on" is not used), profile picture (optional), department (optional)

Meeting metadata: subject, description (optional), date, time, duration, participant IP addresses, device/hardware information

For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.

For dial-in calls: Information about the incoming and outgoing phone number, country name, start and end time. Additional connection data, such as the IP address of the device, may be stored.

Text, audio and video data: You may have the option of using chat, question or survey functions in an "online meeting". The text you enter will be processed in order to display it in the "online meeting" and, if necessary, to log it. To enable video display and audio playback, data from a microphone and any video camera on the end device will be processed during the meeting. Data transmission from the camera and microphone can be switched off or muted at any time and by any user independently via the Microsoft Teams applications.

To participate in an "online meeting" or enter the "meeting room", you must at least provide your name.

Storage of data

The online meetings are not recorded. If we wish to record online meetings, we will inform you in advance and obtain your consent. The fact that the meeting is being recorded will also be displayed in the Microsoft Teams app.

The content of chats is logged by Microsoft when using Microsoft Teams. If necessary for the purpose of logging the results of an online meeting, chat content may also be logged by us.

In the case of webinars, we may also process questions asked by webinar participants for the purposes of recording and following up on webinars.

Automated decision-making within the meaning of Art. 22 GDPR is not used.

Legal basis for data processing

Insofar as personal data of employees is processed, Section 26 of the German Federal Data Protection Act (BDSG) is the legal basis for data processing.

If, in connection with the use of Microsoft Teams, personal data is not required for the establishment, execution or termination of the employment relationship, but is nevertheless an elementary component of the use of Microsoft Teams, Art. 6 para. 1 lit. f GDPR is the legal basis for data processing. In these cases, our interest lies in the effective execution of "online meetings".

In all other respects, the legal basis for data processing when conducting "online meetings" is Art. 6 (1) lit. b GDPR, insofar as the meetings are conducted within the framework of contractual relationships.

Recipients/disclosure of data

Personal data processed in connection with participation in "online meetings" will not be passed on to third parties unless it is intended for disclosure. Apart from this, data will only be passed on to third parties if we are legally obliged to do so (e.g. by court order) or if the data subjects have expressly consented to the disclosure of their data.

The provider of Microsoft Teams, which supports us in conducting "online meetings", necessarily obtains knowledge of the above-mentioned data to the extent that this is provided for in our data processing agreement with Microsoft.

Microsoft is obliged to comply with the legal requirements of the applicable data protection law through the order processing agreement concluded with Microsoft Teams on the basis of EU standard contractual clauses. A currently valid version can be viewed at the following link: Licensing Documents (microsoft.com)

Data processing outside the European Union

Data processing outside the European Union (EU) does not take place as a matter of principle, as we have restricted our storage location to data centres in the European Union. However, we cannot completely rule out routing or storage on servers outside the European Union by the processor Microsoft.

A secure level of data protection is ensured by the conclusion of supplementary EU standard data protection clauses and technical and organisational measures. The data is encrypted during transport via the Internet, for example, and is therefore generally protected against unauthorised access by third parties.

The company is certified under the EU-US Data Privacy Framework (DPF). Further information can be found at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000KzNaAAK&status=Active

Further information on data protection in Microsoft Teams

Further information on data protection at Microsoft can be found at https://privacy.microsoft.com/de-de/privacystatement (section "Online services for businesses") and at: https://www.microsoft.com/de-de/trust-center/privacy/customer-data-definitions.

Data protection for job applications

We offer you the opportunity to apply to us by email, post or using our online application form. Below, we provide information about the scope, purpose and use of your personal data collected during the application process.

Scope and purpose of data collection

In order for us to consider you for a specific position, we require standard and meaningful application documents that provide us with information about your personal profile and qualifications.

The personal data you provide and send to us as part of your application usually includes: a cover letter, a CV with the usual personal details (first name and surname, date of birth, address, telephone number, email address, photo) as well as references and certificates.

As a matter of principle, we only use your application documents to decide on the filling of the position for which you have expressly applied. We only process the personal data provided to us to the extent necessary for the purpose of deciding whether to establish an employment relationship with you. The legal basis for this is Art. 6 (1) lit. b GDPR, Art. 88 GDPR in conjunction with Section 26 (1) sentence 1 BDSG (new), insofar as this concerns information that we receive from you during the application process (name, contact details, date of birth, information about your professional qualifications and school education or information about further professional training). If you voluntarily provide us with further information, we will process this on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. During the application process, further personal data may be collected from you personally and from publicly accessible sources for this information purpose. Your personal data will only be passed on within our company to persons involved in processing your application.

If we process personal data about you to defend against legal claims asserted against us by you arising from the application process, we refer to Art. 6 para. 1 lit. f GDPR as the legal basis. The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

If you submit an unsolicited application that does not refer to a specific position, we will consider your application documents for all relevant positions with your consent. In this case, the legal basis for data processing is also Art. 6 para. 1 lit. a GDPR in conjunction with Art. 28 GDPR, § 26 para. 2 BDSG (new).

The following companies belong to the group of companies:

R.Brand Group GmbH

Elverdisser Straße 313, 32052 Herford

Company headquarters: Daimlerstraße 71, 74545 Michelfeld

New P.C. GmbH

Elverdisser Straße 313, 32052 Herford

Company headquarters: Daimlerstraße 71, 74545 Michelfeld

New Baldessarini GmbH

Elverdisser Straße 313, 32052 Herford

Company headquarters: Daimlerstraße 71, 74545 Michelfeld

New Pioneer GmbH

Elverdisser Straße 313, 32052 Herford

Company headquarters: Daimlerstraße 71, 74545 Michelfeld

New Pionier Berufsbekleidung GmbH

Elverdisser Straße 313, 32052 Herford

Company headquarters: Daimlerstraße 71, 74545 Michelfeld

Otto Kern GmbH

Elverdisser Straße 313, 32052 Herford

Company headquarters: Daimlerstraße 71, 74545 Michelfeld

Categories of recipients of personal data

Your personal data will only be transferred to third parties for the purposes listed below. We will only pass on your personal data that we have received during the application process to third parties if:

You have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR, § 26 BDSG (new)
the transfer is necessary for the assertion, exercise or defence of legal claims pursuant to Art. 6 para. 1 lit. f GDPR and there is no reason to assume that you have an overriding interest in the non-transfer of your data,
in the event that there is a legal obligation to transfer the data in accordance with Art. 6 (1) (c) GDPR, and
this is legally permissible and necessary for the establishment or performance of contractual relationships with you in accordance with Art. 6 para. 1 lit. b GDPR, § 26 para. 1 sentence 1 BDSG (new).

Furthermore, your data will be passed on to technical service providers on the basis of Art. 28 GDPR, who will use your data exclusively on our behalf and under no circumstances for their own business purposes. These are IT service providers and hosting providers.

Your data will not be transferred to third countries outside the EU or the European Economic Area.

Data retention period

If we are unable to offer you a position, you decline a job offer, withdraw your application, revoke your consent to data processing or request that we delete your data, the data you have provided, including any remaining physical application documents, will be stored or retained for a maximum of 6 months after the application process has been completed (retention period) in order to be able to trace the details of the application process in the event of discrepancies (Art. 6 para. 1 lit. f GDPR).

You have the option of consenting to the use of your application documents for other positions. If you choose this option, we will include you in our talent pool in accordance with Art. 6 para. 1 lit. a GDPR. Your application will then be stored by us for a maximum of 12 months until you revoke your consent. You can revoke your consent at any time with future effect. A valid revocation does not affect data processing operations that have already taken place.

If an application process leads to employment, we will include your application documents in your personnel file on the basis of Art. 6 para. 1 lit. b GDPR, § 26 para. 1 BDSG-neu for the purpose of establishing the employment relationship and the personality profile you described and your qualifications as the basis for your employment.

Provision of data

The provision of your personal data is not required by law in the initial phase of an employment relationship. However, the provision of personal data is necessary for the conclusion of an employment contract with us. This means that if you do not provide us with personal data in your application, we cannot and will not enter into an employment relationship with you.

Automated decision-making

No automated decision-making takes place in individual cases within the meaning of Art. 22 GDPR. This means that we evaluate your application personally and the decision on your application is not based solely on automated processing.

Whistleblower portal

We use the information you provide in the whistleblower system for purposes including reviewing and documenting reports, conducting internal investigations (including disclosure to external lawyers, auditors or other professionals who are bound by professional confidentiality, as well as to affected group companies) and, if necessary, disclosure to government authorities (such as the police, public prosecutors or courts).. We guarantee all whistleblowers confidential treatment.

The legal basis is the fulfilment of legal obligations pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR.

Business relationships

The following information shows you how we handle your data when you contact us, when contract negotiations take place with us and/or when contractual agreements exist with us.

Purposes of processing and legal basis

Data processing is carried out for the purpose of contract processing. The processing of your data is necessary for the initiation and fulfilment of contracts in accordance with Art. 6 para. 1 lit. b GDPR.

Furthermore, the processing of your personal data may be necessary on the basis of Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests. Our legitimate interests consist, among other things, in asserting legal claims and avoiding legal disadvantages (e.g. in the event of insolvency), defending against dangers and liability claims and avoiding legal risks, preventing criminal offences and inviting you to events.

Data category and data origin

We process the following categories of data:

Master and contact data: Title, name (first and last name), department and position in the company, address, email, telephone, fax, date of birth, purchase history, contract data, billing data.

The data from the aforementioned data categories has been provided to us directly by our customers and interested parties.

Recipients

We do not pass on your personal data to third parties. This does not include our service partners if this is necessary for the fulfilment of the contract, such as parcel and letter delivery services, banks for direct debit collection, tax authorities, etc.

Duration of storage

The data stored about you will be deleted after fulfilment of the contract, unless further legal storage obligations prevent this. These include commercial and financial data. These will be deleted in accordance with legal requirements after ten years, unless longer storage periods are prescribed or necessary for legitimate reasons. If you revoke your consent to the use of your data, it will be deleted immediately, unless the above reasons prevent this.

Right to object

You have the right to object to the processing of your data. You can object to the use of your data at any time with future effect.

Provision of data

The provision of personal data is required by contract or necessary for the conclusion of a contract. If the required personal data is not provided, we will not be able to enter into a business relationship with you.