General Data Protection Regulation

General For our interns For customers and suppliers For employees and applicants

Our handling of your data and your rights

Information on the collection of personal data according to Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)

1. Who is responsible for the data protection, and whom can I contact?

We are the responsible controller:

Our data protection officer:


2. What sources and data do we use?

We process personal data which we have received from you within the scope of employment and over the course of the existing employment relationship. The following personal data are essentially processed:

3. For what purpose do we process your data, and on what legal basis is this performed?

For the most part, your personal data are processed at Steinbeis Papier GmbH in our company for human resources administration in connection with your employment contract (Article 6, Paragraph 1, b) of the GDPR) and for the purposes of personnel administration, employment and management on the basis of Article 88 of the GDPR or Section 26 of the German Federal Data Protection Act (BDSG) and on agreements made with the company. This includes the processing of personal data to perform the application process.

To fulfil legal regulations such as the legally mandatory provision of data to the social security and pension insurance representatives, to guarantee occupational safety, to guarantee legal working hours, etc., your personal data is processed according to Article 6, Paragraph 1, c) of the GDPR.

Some personal data is processed, depending on the purpose of use within the required scope, for the handling of secure and proper business operations as part of our company and for the communication and processing of business relationships with our suppliers and customers in the legitimate interest of our company and in consideration of personal rights according to Article 6, Paragraph 1, f) of the GDPR.

To make our production processes demonstrably safe, to prevent property damage and theft and to allow these to be documented in the event of damage, we operate a labelled video surveillance system. This data collection is based on Article 6, Paragraph 1, f) of the GDPR.

Should your consent for the processing of your personal data according to Article 6, Paragraph 1, a) of the GDPR be necessary, your consent will be collected separately.

Our work agreements contain additional provisions on the secure handling of your personal data.

 4. Who receives your data?

We do not share your data with unauthorized third parties without your knowledge. However, within the scope personnel management, proper business operations and for the communication and processing of business relationships with our suppliers and customers to the required extent, we or you share data with the following entities:

5. Are your data transferred to a third country or international organisations?

The transfer of your data to a third country or international organisations is not planned.

6. How long do we store your data?

The personal data provided by you will be stored for the intended purposes listed under Clause 3 for as long as is needed for their fulfilment. The storage of your personal data is normally based on the regulations of the German Civil Code (BGB), the German Commercial Code (HGB) and the German Text Code (AO). These data will therefore be deleted after the legal retention periods expire. Insofar as data are not affected by these, they will be deleted when their intended purpose ceases to exist.

Application documents are deleted at the latest when the objection period as stated in the German General Equal Treatment Act has expired. Applications are only stored longer if you have agreed to this.

Video surveillance data are deleted after seven days.

7. What other data protection rights do you have?

The right to lodge a complaint with the competent data protection supervisory authority exists at all times. To do so, please contact the data protection officer for the Federal State of Schleswig-Holstein, Holstenstraße 98, 24103 Kiel

8. What rights of objection do you have?

Other consent to processing which is based on a legitimate interest in the meaning of Article 6, Paragraph 1, f) of the GDPR can be withdrawn, stating the reasons for your withdrawal, according to Article 21 of the GDPR at any time for reasons arising out of a special situation for you.

If you provide legitimate grounds for objection, your personal data will basically no longer be processed for the respective purposes and deleted, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

For such issues, please contact Steinbeis Papier GmbH at the address provided above.

9. Is the provision of personal data legally or contractually required or mandatory?

Your data is absolutely necessary for the performance of the labour contract, for the fulfilment of legal requirements and for the performance of the employment relationship. Without your data, the employment relationship cannot be properly processed, which can lead to a cancellation of the work contract or non-performance of payment.


As of November 2020

Leider verwenden Sie einen veralteten Browser.
Unser Internetauftritt wurde auf Basis zeitgemäßer und sicherer Technologien entwickelt. Daher kann es bei der Nutzung eines veralteten Browsers zu Problemen bei der Darstellung und den Funktionalitäten kommen. Wir empfehlen Ihnen, einen anderen aktuellen und kostenlosen Browser zu nutzen:
Mozilla Firefox
Google Chrome
Microsoft Edge