en de
+49 (0)2153-7372-2

Privacy Policy

1. An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject of data protection, please consult our Data Protection Declaration, which we have included beneath this text.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e. the “controller”)?

The data on this website is processed by the operator of the website, whose contact information is available under the section “Information about the responsible party” in this Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance, be information you enter into our contact form. Other data is recorded automatically or after your consent is obtained when you visit the website. This data comprises primarily technical information (e.g. web browser, operating system or time the site was accessed). This information is recorded automatically when you access this website.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error-free provision of the website. Other data may be used to analyse your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data be rectified or eradicated. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to demand that the processing of your personal data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervisory authority.

Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.

Analysis tools and tools provided by third parties

There is a possibility that your browsing patterns will be statistically analysed when you visit this website. Such analyses are performed primarily with what we refer to as analysis programmes. For detailed information about these analysis programmes please consult our Data Protection Declaration below.

2. Hosting

We host the content of our website with the following provider:

1&1 IONOS

The provider is 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter IONOS). When you visit our website, IONOS records various log files including your IP addresses. For details, please refer to the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy/.

The personal data recorded on this website (in particular IP addresses, contact requests, metadata and communications, contact information, names, web page access and other data generated through a website) is stored on the servers of the host.

The use of IONOS occurs on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most reliable depiction of our website possible. If appropriate consent has been obtained, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG, to the extent the consent covers the storage of cookies or access to information in the user’s end device within the meaning of the TDDDG. Consent may be revoked at any time.

Data processing agreement

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data protection law that guarantees that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose, the information is collected.

We herewith advise you that the transmission of data via the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data processing controller on this website is:

Gerlach Maschinenbau GmbH
Berger Feld 3–5
41334 Nettetal, Germany
Phone: +49 (0) 2153 7372-2
E-mail: info@gerlach-machinery.com
Website: www.gerlach-machinery.com

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g. names, e-mail addresses, etc.).

Data protection officer mandated by law

We have appointed a data protection officer for our company.

Dipl.-Inform. Frank Allwicher
Mölleberg 26
41836 Hückelhoven, Germany
Phone: 02433 9399943
E-mail: datenschutz@allwicher.de

You can contact our data protection officer directly at any time with any questions regarding data protection.

Storage period

Unless a more specific storage period has been stated within this Privacy Policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons cease to apply.

General information on the legal basis for data processing on this website

If you have consented to the processing of data, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, where special categories of data are processed in accordance with Art. 9 para. 1 GDPR. In the event of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or to the access to information in your end device (e.g. via device fingerprinting), the data processing is additionally based on Section 25 para. 1 TDDDG. Consent may be revoked at any time. If your data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data where this is necessary for compliance with a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. Data processing may also be based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this Privacy Policy.

Information on data transfers to the USA and other third countries

Among other things, we use tools of companies based in the USA. When these tools are active, your personal data may be transferred to the USA and processed there. We point out that the USA is classified as a safe third country on the basis of the adequacy decision of the EU Commission concerning the “EU-US Data Privacy Framework” (DPF) of 10 July 2023, to the extent the respective recipient is certified under the DPF. Data transfers to DPF-certified US companies are therefore permitted. For recipients that are not certified, we base transfers on the standard contractual clauses of the EU Commission (Art. 46 para. 2 lit. c GDPR). Information on transfers to third countries, including the data recipients, can be found in this Privacy Policy.

Recipients of personal data

In the course of our business activities, we work together with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only share personal data with external parties if this is required within the framework of the fulfilment of a contract, if we are legally obligated to do so (e.g. transfer of data to tax authorities), if we have a legitimate interest in the transfer in accordance with Art. 6 para. 1 lit. f GDPR, or if another legal basis permits the data transfer. When using processors, we share personal data of our customers only on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Records of processing activities (Art. 30 GDPR)

We maintain an internal record of all processing activities, which is made available to the supervisory authorities upon request.

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke any consent you have already given us at any time, informally by e-mail to info@gerlach-machinery.com or via the cookie settings on our website. This shall be without prejudice to the lawfulness of any data processing that occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS PRIVACY POLICY. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION-WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).

Right to log a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory authority, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

The supervisory authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Postfach 20 04 44, 40102 Düsseldorf, Germany
Phone: 0211 38424-0
E-mail: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de

Right to data portability

You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract to you or a third party in a commonly used, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated. If you have questions about this subject or any other questions about personal data, please do not hesitate to contact us at any time.

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption programme. You can recognise an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line. If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Rejection of unsolicited e-mails

We herewith object to the use of contact information published in conjunction with the mandatory information to be provided in the legal notice to send us promotional and information material that we have not expressly requested. The operators of this website and its pages reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages.

4. Recording of data on this website

Cookies

Our websites use what the industry refers to as “cookies.” Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them or they are automatically eradicated by your web browser.

Cookies can be issued by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies within websites.

Cookies that are required for the performance of the electronic communications transaction, to provide certain functions you want to use or to optimise the website (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless a different legal basis is cited. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimised provision of the operator’s services. If consent to the storage of cookies and comparable recognition technologies has been requested, the processing takes place exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG); the consent can be revoked at any time.

Information on which cookies and services are used on this website can be found in this Privacy Policy.

Consent with Borlabs Cookie

Our website uses the Borlabs cookie consent technology to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies, and to document this in a data protection compliant manner. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter Borlabs).

Whenever you visit our website, a Borlabs cookie will be stored in your browser, which archives any declarations or revocations of consent you have entered. These data are not shared with the provider of the Borlabs technology.

The recorded data shall remain archived until you ask us to eradicate them, delete the Borlabs cookie on your own, or the purpose of storing the data no longer exists. This shall be without prejudice to any retention obligations mandated by law. To review the details of Borlabs’ data processing, please visit https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

We use the Borlabs cookie consent technology to obtain the declarations of consent mandated by law for the use of certain technologies. The legal basis for this is Art. 6 para. 1 lit. c GDPR. You can change your cookie settings at any time via the corresponding link in the footer of this website.

Server log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:

This data is not merged with other data sources. This data is recorded on the basis of Art. 6 para. 1 lit. f GDPR. The operator of the website has a legitimate interest in the technically error-free depiction and the optimisation of the operator’s website; in order to achieve this, server log files must be recorded. This data is deleted no later than 7 days.

Contact form

If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.

The processing of these data is based on Art. 6 para. 1 lit. b GDPR if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; the consent can be revoked at any time.

The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data, or the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions, in particular retention periods.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request), will be stored and processed by us for the purpose of handling your request. We do not pass these data on without your consent.

The processing of these data is based on Art. 6 para. 1 lit. b GDPR if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; the consent can be revoked at any time.

The data sent to us via contact requests remain with us until you request us to delete them, revoke your consent to their storage, or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to determine whether data entered on this website (e.g. in a contact form) is being entered by a human being or by an automated programme. To determine this, reCAPTCHA analyses the behaviour of website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the website. For this analysis, reCAPTCHA evaluates a variety of data (e.g. IP address, the time the website visitor spent on the website or cursor movements initiated by the user). The data tracked during such analyses is forwarded to Google.

The storage and analysis of the data occurs on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the protection of the operator’s web content against misuse by automated industrial espionage systems and against SPAM. If appropriate consent has been obtained, the processing occurs exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG, to the extent the consent covers the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

For more information about Google reCAPTCHA, please consult the Google Data Privacy Declaration and Terms of Use under the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

The company holds a certification under the “EU-US Data Privacy Framework” (DPF). Further information is available at https://www.dataprivacyframework.gov/participant/5780.

5. Analysis tools and advertising

Google Analytics 4

This website uses functions of the web analysis service Google Analytics 4 (GA4). The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. As a result, the website operator receives various usage data, such as page views, length of stay, operating systems used and the origin of the user. This data is assigned to a User ID. Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information recorded by Google about the use of this website is usually transferred to a Google server in the USA, where it is stored.

The use of this service occurs on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Consent may be revoked at any time; you can revoke it via the cookie settings.

The data transfer to the USA is based on the adequacy decision concerning the “EU-US Data Privacy Framework” (DPF) and, additionally, on the standard contractual clauses of the EU Commission. The company is DPF-certified; further information is available at https://www.dataprivacyframework.gov/participant/5780.

IP anonymisation

In Google Analytics 4, IP anonymisation is activated by default. Your IP address is not stored by Google in its full form. On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activity.

Browser plug-in

You can prevent the recording and processing of your data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more information about the handling of user data by Google Analytics, please consult Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Storage period

The storage period of the data stored by Google at the user and event level is determined by the retention period configured in Google Analytics. Once this period expires, the relevant data is automatically deleted. In addition, aggregated, non-personal evaluations may continue to be stored.

Data processing agreement

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

6. Newsletter

Newsletter data

If you would like to subscribe to the newsletter offered on this website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. For this purpose we use the double opt-in procedure: after registering, you receive a confirmation e-mail with which you confirm your registration. Only afterwards do we send the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties. The newsletter is sent in-house via our own systems.

The processing of the data entered into the newsletter registration form occurs exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for instance via the “unsubscribe” link in the newsletter or by e-mail to info@gerlach-machinery.com. This shall be without prejudice to the lawfulness of any data processing transactions that have already taken place.

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you cancel the newsletter. After you unsubscribe from the distribution list, your e-mail address may be stored in a block list to prevent future mailings. The data from the block list is used only for this purpose and is not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the block list is not subject to a time limit. You may object to the storage if your interests outweigh our legitimate interest.

7. Plug-ins and tools

YouTube

This website embeds videos of the website YouTube. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Embedded YouTube videos are loaded only after you have given your express consent. When you start a YouTube video on this website, a connection to YouTube’s servers will be established. As a result, the YouTube server will be notified as to which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to allocate your browsing patterns directly to your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, after you start a video, YouTube may store various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting).

The use of YouTube occurs on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Consent may be revoked at any time. The data transfer to the USA is based on the adequacy decision concerning the “EU-US Data Privacy Framework” (DPF) and, additionally, on the standard contractual clauses of the EU Commission. The company is DPF-certified: https://www.dataprivacyframework.gov/participant/5780.

For more information on how YouTube handles user data, please consult their privacy policy at: https://policies.google.com/privacy?hl=en.

Google Maps

This website uses the mapping service Google Maps via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To ensure data protection on this website, Google Maps is deactivated when you first enter this website. A direct connection to Google’s servers is established only once you activate Google Maps yourself (consent in accordance with Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG). This prevents your data from being transferred to Google as soon as you enter the website for the first time. Consent may be revoked at any time.

After activation, Google Maps will store your IP address. This information is generally transferred to a Google server in the USA, where it is stored. The data transfer to the USA is based on the adequacy decision concerning the “EU-US Data Privacy Framework” (DPF) and, additionally, on the standard contractual clauses of the EU Commission. The company is DPF-certified: https://www.dataprivacyframework.gov/participant/5780.

For more information on the handling of user data, please consult Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Google Fonts (local hosting)

This page uses so-called Google Fonts, which are provided by Google, to ensure the uniform display of fonts. The Google Fonts are installed locally. A connection to Google’s servers does not take place in this process. For more information about Google Fonts, please visit https://developers.google.com/fonts/faq and consult Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Font Awesome (local hosting)

This page uses Font Awesome to ensure the uniform display of icons. Font Awesome is installed locally. A connection to servers of Fonticons, Inc. does not take place in this process. For more information about Font Awesome, please consult the privacy policy for Font Awesome at: https://fontawesome.com/privacy.

8. Own services

Handling of applicant data

We offer you the opportunity to apply for jobs with us (e.g. via e-mail, the postal service or by submitting an online job application form). In the following, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential.

Scope and purpose of the collection of data

If you submit a job application to us, we will process any affiliated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) to the extent this is required to make a decision concerning the establishment of an employment relationship. The legal basis for this is Section 26 BDSG under German law (negotiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract negotiations) and, provided you have given your consent, Art. 6 para. 1 lit. a GDPR. Consent may be revoked at any time. Within our company, your personal data will be shared only with individuals who are involved in the processing of your job application.

If your application should result in your recruitment, the data you have submitted will be archived on the basis of Section 26 BDSG and Art. 6 para. 1 lit. b GDPR for the purpose of implementing the employment relationship in our data processing systems.

Data retention period

If we are unable to make you a job offer, if you decline a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months following the conclusion of the application procedure (rejection or withdrawal of the application). Afterwards, the data will be deleted and the physical application documents destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will take place only once the purpose for further retention no longer applies.

Longer storage may also take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations prevent deletion.

Admission to the applicant pool

If we do not make you a job offer, it may be possible to admit you to our applicant pool. In the event of admission, all documents and information from the application will be transferred to the applicant pool so that we can contact you in the event of suitable vacancies.

Admission to the applicant pool occurs exclusively on the basis of your express consent (Art. 6 para. 1 lit. a GDPR). Giving consent is voluntary and has no bearing on the ongoing application procedure. The data subject can revoke their consent at any time. In this case, the data from the applicant pool will be irrevocably deleted, unless there are statutory grounds for retention. The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.

2026 Gerlach Maschinenbau GmbH

Imprint | Privacy policy| Accessibility Statement