Data protection


Art. 12 DSGVO Transparent information

Thank you for visiting our website and for your interest in our company. We understand data protection as a customer-oriented quality feature. The protection of your personal data and the protection of your personal rights are important to us.

With this data protection declaration, we would like to inform all visitors to our website transparently about the type, scope and purpose of the personal data collected, used and processed by us and inform you about the rights to which you are entitled. In principle, it is possible to use our website without providing personal data. However, should you use services of our company via our website, the processing of your personal data may become necessary. The data automatically collected when you visit our website or the personal data entered by you when using our services will be processed in accordance with the current legal provisions on the protection of personal data. If processing of your personal data is necessary and there is no legal basis for such processing, we generally obtain consent for the required purpose of the processing. As the company responsible for processing, we have established technical and organizational measures to ensure the highest possible level of protection for your personal data.

However, we would like to point out that data transmission via the World Wide Web can generally have security gaps.

If you would like to use the services of our company and do not want to use the method of data transmission via the World Wide Web, you also have the option of contacting us by telephone.

1. Contact details of the data controller

The controller within the meaning of the General Data Protection Regulation, is:

EXPERT Transformatorenbau GmbH
Industriestr. 6a
64653 Lorsch
Managing Director:
Dipl.- Betriebswirt (FH) Dirk Matzner
Dipl.- Ing. (TU) Steffen Otto

The following person has been appointed as data protection officer

Mr. Volker Ahlers
ASUMED®Arbeitsschutz GmbH & Co. KG
Von-Hausen-Strasse 35
64653 Lorsch
Phone: +49 6251 175290

2. Collection of general access information

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

These are:

browser type and browser version
Operating system used
referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not merged with other data sources. We further point out that this data cannot be assigned to a specific person. We use this technical access information exclusively for the following purposes:

to improve the attractiveness and usability of our website,
to detect technical problems on our website at an early stage,
to deliver the contents of our website correctly,
and to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

This data is stored for a maximum of 7 days as a technical precaution to protect data processing systems against unauthorized access.

3. collection and disclosure of personal data

We use your personal data only for the purposes stated on this information page on data protection. The following input masks for the collection of personal data exist on our website:

3.1 Transmission of application documents

In the course of your application (online application or by mail), we collect and process various personal application data. This includes, in particular, your contact information (name, address, telephone number and e-mail), application documents (letter of application, CV, certificates or other proof of education and qualifications). In the context of an online application via the application form, the transmission is carried out exclusively via an encrypted page in accordance with the currently recognized state of the art, so that your personal data and your application documents are protected against manipulation and unauthorized access. After sending, you will receive an e-mail confirming receipt of the documents. Your personal application data is collected and processed exclusively for the purpose of filling vacancies within our company. Your data will only be forwarded to the internal departments and specialist departments of our company responsible for the specific application procedure. Your personal application data will not be passed on to other companies without your prior express consent. Your application data will not be used for any other purpose or passed on to third parties.
Your personal application data will be deleted automatically three months after completion of the application process. This does not apply if legal regulations prevent deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly consented to longer storage, e.g. for future job advertisements. If an employment contract is concluded with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.

3.2 Contact via contact form

If you send us inquiries via the contact form, your data from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent. The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected. Such personal data transmitted to us by you on a voluntary basis will be stored for the purpose of processing your inquiry or contacting the data subject. This personal data will not be passed on to third parties.

3.3 Processing of data (customer/supplier and contract data)

We collect, process and use personal data only to the extent that they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 (1) lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

We collect, process and use personal data about the use of our Internet pages (usage data) only to the extent necessary to enable the user to use the service or to bill the user.
Collection and storage of personal data and type and purpose of use
When you enter into a contract with us, we collect the following information:

Salutation, first name, last name,
a valid e-mail address,
telephone number (landline and/or mobile)
other information that is absolutely necessary for the preparation, execution and fulfillment of the contract you have concluded.

The collection of this data is done,

in order to be able to identify you as a contractual partner
to be able to fulfill the contract appropriately
for correspondence with you;
for invoicing purposes;
for the settlement of any existing claims and the enforcement of the contract concluded with you.

The data processing is carried out in response to your request and is necessary for the appropriate processing of the contract in accordance with Art. 6 (1) p. lit. b DSGVO for the aforementioned purposes.

The data collected by us will be stored until the expiry of the legal obligation to retain data (10 years after the end of the calendar year in which the customer relationship was terminated) and then deleted, unless we are obliged to store the data for a longer period due to tax and commercial law retention and documentation periods (from HGB, StGB or AO) or you have consented to longer storage.

3.4 Transfer to third parties

Your personal data will not be transferred to third parties for purposes other than those mentioned below.
Insofar as this is necessary for the processing of the contract according to Art. 6 para. 1 p. 1 lit. b DSGVO, your personal data will be passed on to third parties. This includes in particular the transfer to service providers such as transport companies and logisticians. The data passed on may be used by the service providers exclusively for the purposes stated.

4.plugins and tools

4.1 YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
Further information on the handling of user data can be found in YouTube's privacy policy at:

4.2 Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. If your browser does not support web fonts, a standard font will be used by your computer.
You can find more information about Google Web Fonts at and in Google's privacy policy:

4.3 Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
More information on the handling of user data can be found in Google's privacy policy:

5. SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

6. Objection against advertising mails

The use of contact data published within the framework of the imprint obligation for the purpose of sending unsolicited advertising and information materials is hereby prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

7. Deletion, blocking and duration of storage of personal data

We process and store your personal data only for the period of time required to achieve the respective purpose of storage or as provided for by the various retention periods stipulated by law.
After the end of a storage purpose or after the expiration of the retention period provided by law, the personal data will be routinely blocked or deleted for further processing in accordance with the statutory provisions.

8. Data protection rights of the data subject

If you have questions about your personal data, you can contact us in writing at any time. According to the DS-GVO, you have the following rights:

8.1 The right to information (sub-item Art. 15 DS-GVO)

You have the right to receive information at any time about which categories and information about your personal data are processed by us for which purpose and how long and according to which criteria these data are stored and whether automated decision-making including profiling is used in this context. In addition, you have the right to know which recipients or categories of recipients your data have been or will be disclosed to; in particular in the case of recipients in third countries or international organizations. In this case, you also have the right to be informed about appropriate safeguards in connection with the transfer of your personal data.
In addition to the right to complain to the supervisory authority and the right to information about the origin of your data, you have the right to erasure, rectification, as well as the right to restriction for or the right to object to processing of your personal data. In all the above cases, you have the right to request from the data processor a free copy of your personal data processed by us. For any additional copies that you request or that go beyond the data subject's right to information, we are entitled to charge a reasonable administrative fee.

8.2 The right to rectification (Art. 16 DS-GVO)

You have the right to request the immediate rectification of your inaccurate personal data and, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary declaration.
If you wish to exercise the right to rectification, you may contact our data protection officer or the controller at any time.

8.3 The right to erasure (Art. 17 DS-GVO)

You have the right to request the immediate deletion of your data ("right to be forgotten") in particular if the storage of the data is no longer necessary, you revoke your consent to data processing, your data has been processed unlawfully or has been collected unlawfully and there is a legal obligation to delete it under EU or national law.
However, the right to be forgotten does not apply if there is an overriding right to freedom of expression or freedom of information, the data storage is necessary for the fulfillment of a legal obligation (e.g. retention obligations), archiving purposes conflict with the deletion or the storage serves to assert, exercise or defend legal claims.

8.4 The right to restriction (Art. 18 DS-GVO)

You have the right to request restriction of the processing of your data by the controller if the accuracy of the data is disputed by you, the processing is unlawful, you refuse the erasure of your personal data and instead request restriction of the processing, if the necessity for the purpose of processing ceases to apply or you have objected to the processing pursuant to Article 21(1), as long as it has not yet been determined whether legitimate grounds on our part override yours.

8.5 The right to data portability (Article 20 DS-GVO)

You have the right to portability of your personal data, which you have provided to our company in a common format, so that you can have your personal data forwarded to another responsible party without hindrance, provided, for example, that consent has been given on your part and the processing is carried out by means of an automated procedure.

8.6 The right to object (Art. 21 DS-GVO)

You have the right to object at any time to the collection, processing or use of your personal data for purposes of direct marketing or market and opinion research, as well as general business-like data processing, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms. In addition, you cannot exercise your right to object if a legal regulation provides for the collection, processing or use of the data or obliges the collection, processing or use.

8.7 Right of complaint to the data protection supervisory authority (Art. 77 DS-GVO in conjunction with § 19 BDSG)

You may submit a complaint to a supervisory authority at any time, e.g. to the competent supervisory authority in the federal state of your residence or to the authority responsible for us as the controller.
The address of the supervisory authority responsible for us is

The Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 3163
65021 Wiesbaden
Telephone: +49 611 1408 - 0
Fax: +49 611 1408 - 611
8.8 Right to revoke consent granted under data protection law (Art. 7 (3) DS-GVO)

You can revoke a given consent for the processing of your personal data at any time and without giving reasons. This also applies to the revocation of declarations of consent given to us before the EU General Data Protection Regulation came into force.

9. Legal basis of the processing

When processing personal data for which we obtain the consent of the data subject, Art. 6 para. 1, sentence 1 a) of the General Data Protection Regulation (DSGVO) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1, sentence 1 b) (DSGVO) serves as the legal basis.  This regulation also covers processing operations that are necessary for the performance of pre-contractual measures.
If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 Ab. 1, Sentence 1 c) (DSGVO) serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) sentence 1 f) (DSGVO) serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities as well as in the analysis, optimization and maintenance of the security of our online offer.

10. Transfer of data to third parties

We generally do not sell or lend user data. A transfer to third parties beyond the scope described in this privacy policy only takes place if this is necessary for the processing of the respective requested service.
We only transfer data if there is a legal obligation to do so. This is the case if government institutions (e.g. law enforcement agencies) request information in writing or if a court order exists.
A transfer of personal data to so-called third countries outside the EU / EEA area does not take place.

11. Legal or contractual requirements for the provision of personal data and possible consequences of failure to provide such data

We hereby point out that the provision of personal data in certain cases (e.g. tax regulations) is required by law or may result from contractual provisions (e.g. information on/of the contractual partner). For example, it may be necessary for the conclusion of a contract that the data subject/contractual partner must provide his/her personal data so that his/her request (e.g. order) can be processed by us at all. An obligation to provide personal data arises primarily when a contract is concluded. If in this case no personal data is provided, the contract with the person concerned cannot be concluded. Before providing personal data by the data subject, the data subject may contact our data protection officer or the controller. The data protection officer or the controller will then inform the data subject whether the provision of the required personal data is required by law or contract or necessary for the conclusion of the contract and whether an obligation arises from the concerns of the data subject to provide the personal data or what the consequences are for the data subject of not providing the requested data.

12. Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling in our business relationships.