Data protection information

1. Information on the collection of personal data

Below we would like to inform you about the processing of personal data when using our website.Personal data is all data that can be linked to you personally, e.g. name, address, email addresses, user behaviour.

The data controller within the meaning of Article 4 No. 7 of the RODO is

Polworks GmbH

Leher Landstraße 37

27607 Geestland

Phone: +49 (0) 4743 – 37 097 36

E-mail: info@polworks.de

If we use contracted service providers for specific functions of our offerings or wish to use your data for advertising purposes, we always carefully select these service providers. We carefully select and monitor these service providers and inform you in detail about the relevant processing operations. In doing so, we will determine the scope, purpose and legal basis of the data processing, as well as the defined criteria for the retention period.
Finally, we set out the options for cancelling or objecting to data processing.

2. Processing of personal data when visiting our website

When you use the website for information purposes, we process personal data that your browser sends to the server we use. Your browser sends to the server we use. The data described below is technically necessary for us to be able to display our website to you and to ensure its stability and security and must therefore be processed by us. The legal basis for the RODO is Article 6 (1) sentence 1

• IP address
• date and time of request
• time zone difference from Greenwich Mean Time (GMT)
• content of the request (page visited)
• access status/HTTP status code
• the amount of data transmitted in each case
• previously visited page
• browser
• operating system
• the language and software version of the browser.

This website is hosted by ID Hosting, Integra Design, Mariusz Barczyk, 48/40 Niepodległości Avenue, 42-216 Częstochowa (Poland). The service provider is used as a processor within the meaning of Article 4 No. RODO. Accordingly, an order processing agreement has been concluded with the service provider.

3. Contact form

A contact form is available on our website for you to use to contact us. If the user uses this option, the data entered in the input mask will be sent to us and processed. The data collected in this context, if the enquiry is assigned to a contract, will be deleted at the end of the contract period. Otherwise, the data will be deleted when storage is no longer necessary. This happens when a conversation with a user is terminated. The conversation is terminated when it is clear from the circumstances that the matter in question has been finally clarified. The legal basis for the processing of the data is Article 6(1) sentence 1 lit. b RODO or Article 6(1) sentence 1 lit. f RODO.

4. Cookies and similar technologies

Our websites use cookies and similar technologies. Cookies are small text files that are assigned to the browser used and stored on the user's hard drive with a characteristic string through which certain information flows to the organisation that sets the cookie. Cookies cannot execute programs or transmit viruses to the user's computer and therefore cannot cause any damage. They serve to make the website more user-friendly and generally effective. Cookies may contain data that makes it possible to recognise the device being used.In some cases, however, cookies only contain information about specific settings that do not identify the user. Cookies cannot directly identify the user. A distinction is made between session cookies, which are deleted as soon as the browser is closed, and persistent cookies, which are stored after the end of a session. In terms of function, a distinction is made between cookies:

• Technical cookies: these are absolutely necessary to navigate the website, use basic functions and ensure website security; they do not collect information about you for marketing purposes or store information about the websites you have visited;
• Performance cookies: these collect information about how you use our website, which pages you visit and, for example. For example, whether you experience errors when using the site; they do not collect any information that could identify you - all information collected is anonymous and is only used to improve our website and find out what interests our users;
• Advertising cookies, targeting cookies: These are used to provide website users with advertisements on the website or offers from third parties and to measure the effectiveness of these offers.
• Other technologies: These features are not based on cookies, but on similar technical mechanisms such as Flash cookies, pixels or HTML5 objects;

The legal basis for cookies that are necessary for the provision of services that the user has expressly requested is § 25 (2) No. 2 TTDSG. Any use of cookies or similar technologies that is not absolutely technically necessary for this purpose constitutes data processing that can only take place with your consent in accordance with § 25 (1) TTDSG in conjunction with Article 6 (1) sentence 1 lit. a RODO is permissible. Furthermore, we only pass on processed personal data to third parties if you have given your consent in accordance with Article 6(1) sentence 1 lit. a RODO. The applications we use, which you can individually select and revoke via the Consent Manager and revoke again, or whose use may be technically necessary, are described below.

5. CookieYes

This website uses the consent management tool "CookieYes", which is provided by Mozilor Limited, 3 Warren Yard, Wolverton Mill, Milton Keynes, MK12 5NW, UK, to validate users' consents to cookies and similar technologies and to document their consents. For this purpose, when a user visits our website, information such as the user's IP address is sent to the CookieYes operator and processed. The retention period of the cookie set by CookieYes can be found in the information in the Consent Manager (accessible by clicking on the toolbar or the cookie symbol at the bottom left of each subpage). We use CookieYes as a processor within the meaning of Article 4 No. 8 of the DPA. Accordingly, we have entered into an agreement with CookieYes regarding the processing of orders. The transfer of data to the UK is based on a decision establishing an adequate level of protection within the meaning of Article 45 RODO. The UK offers an adequate level of data protection from an EU perspective. The adequacy decision can be obtained via the following link: https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D1772. We have also agreed so-called standard contractual clauses with CookieYes, the purpose of which is to ensure compliance with an adequate level of data protection in a third country. The legal basis for data processing by CookieYes is Article 6 (1) sentence 1 lit. f RODO or § 25 (2) no. 2 TTDSG. For more information on CookieYes' data processing, please see the following documents - Privacy Policy: https://www.cookieyes.com/privacy-policy.

5. Applications for vacant posts

Oferujemy możliwość ubiegania się o pracę za pośrednictwem naszej strony internetowej. Informacje, których bezwzględnie potrzebujemy od Ciebie, są oznaczone gwiazdką w formularzu zgłoszeniowym (imię, nazwisko, adres e-mail i numer telefonu). Użytkownik ma również możliwość dobrowolnego dodatkowych informacji w formularzu zgłoszeniowym. Obejmuje to na przykład informacje o doświadczeniu zawodowym, referencje lub certyfikaty związane z pracą. Tam nie ma prawnego ani umownego obowiązku przekazywania danych. Bez informacji oznaczonych jako obowiązkowe w formularzu zgłoszeniowym, nie będziemy w stanie rozpatrzyć zgłoszenia. Twoje dane osobowe będą przetwarzane w celu podjęcia decyzji o nawiązaniu stosunku pracy. Podstawą prawną opisanego przetwarzania danych jest § 26 BDSG. Co do zasady dane osobowe będą przetwarzane przez okres trwania procesu aplikacyjnego. Jeśli nie będziemy w stanie nawiązać z Tobą stosunku pracy, dane osobowe będą przechowywane przez okres do sześciu miesięcy po zakończeniu procesu aplikacyjnego. Odbywa się to w celu udzielenia odpowiedzi na wszelkie pytania dotyczące odrzucenia podania i wypełnienia obowiązków dowodowych wynikających z przepisów prawa zgodnie z AGG.

6. Mapy Google

On this website we use Google Maps. This enables us to display interactive maps directly on the website and allows for convenient use of the map functions. The legal basis for the use of the maps is your consent in accordance with Article 6(1) sentence 1(a) of the DPA. When visiting the website, Google receives information that the user has visited the relevant subpage of our website. In addition to the basic data mentioned above, data such as IP address and time stamp are transmitted. This takes place regardless of whether Google provides a user account to which the user is logged in or whether the user account does not exist.
If the user is registered with Google, the user data will be assigned directly to his/her account. If the user does not wish to be assigned with a Google profile, they must log out before activating the button. Google stores user data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) in order to deliver needs-based advertising
and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. The information collected is stored on Google's servers, including in the USA.
Google has been certified under the Transatlantic Data Protection Framework and is therefore obliged to guarantee an adequate level of data protection. It is therefore obliged to guarantee an adequate level of data protection from an EU perspective. You can view the certificate by clicking on the following link:
www.dataprivacyframework.gov/list. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to ensure an adequate level of data protection in a third country. You may withdraw your consent at any time without affecting the permissibility of the processing until you withdraw it. The easiest way to revoke your consent is to use our Consent Manager (by clicking on the toolbar or the cookie symbol at the bottom left of each subpage). For more information on the purpose and scope of Google's data processing, please visit the following link: www.google.de/intl/de/policies/privacy.

7. Meta Pixel

Our website uses the advertising resources of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter "Meta"). By integrating the so-called "Meta pixel" on our website, we can show users of our website and social network
Facebook and to measure and evaluate the success of our advertising activities. This connection between Facebook and our website is technically made via the "Meta pixel". Due to the marketing tools used, when you visit our website, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the extent and further use of the data collected by Meta via this tool. However, we are aware that through the integration of the Meta pixel, Meta receives information that a user has accessed a website operated by us or clicked on an advertisement. If the user is registered with Facebook, Facebook can attribute the visit to the user's account. Even if the user is not registered with Facebook or has not
logged in, it is possible that Meta will collect your IP address and other identifying characteristics and use them to create a profile. The information collected is processed on Meta's servers, including in the USA. Meta has been certified under the Trans Atlantic Data Privacy Framework and is therefore obliged to guarantee an adequate level of data protection. and is therefore committed to guaranteeing an adequate level of data protection from an EU perspective. The certificate can be viewed by clicking on the following link: https://www.dataprivacyframework.gov/list. We have also agreed so-called standard data protection clauses with Meta, the purpose of which is to ensure an adequate level of data protection in a third country. The legal basis for the integration and processing of your data is your consent in accordance with section 25(1) TTDSG in conjunction with Article 6(1) sentence 1(a) RODO. The user can withdraw his/her consent at any time without affecting the admissibility of the processing. The easiest way to withdraw consent is to use our Consent Manager (by clicking on the toolbar or the cookie symbol used on each subpage ("bottom left")). In addition, (logged-in users only) can object via the provider function at the following link: www.facebook.com/settings/?tab=ads#_. For more information on data processing by Facebook, please click on the following link: www.facebook.com/about/privacy.

8. Cloudflare

We use the Content Delivery Network (hereinafter referred to as "CDN") of Cloudflare Inc, 101 Townsend St. San Francisco, CA 94107, USA , to enhance the security and loading speed of our website. In the context of the use of CDN, personal data may be stored in server log files by CDN. Furthermore, CDN uses cookies in order to provide the service. Information on the purpose and duration of cookies set by CDN can be found in our Consent Manager (accessible by clicking on the tool used on each subpage ("bottom left")). CDN is the recipient of your personal data and acts as a processor for us within the meaning of Article 4 No. 8
RODO. The use of the CDN involves the transfer of data to the US. With the Transatlantic Data Privacy Framework, the EU Commission has issued a decision finding an adequate level of protection for the US. European Commission. Cloudflare, Inc. has been certified under the Trans Atlantic Data Privacy Framework and is therefore obliged to provide an adequate level of data protection from an EU perspective. The certificate can be accessed at the following link: https://www.dataprivacyframework.gov/list. The legal basis for the processing of your data is your consent in accordance with Article 25(1) of the RODO in conjunction with Article 6(1), sentence 1(a) of the RODO.You may withdraw your consent at any time without affecting the lawfulness of the processing based on your consent prior to its withdrawal. The easiest way to withdraw your consent is to use our Consent Manager (by clicking on the toolbar or the cookie symbol used on each subpage ("in the bottom left corner")).

9. hCaptcha

We use hCaptcha to protect our contact forms from unwanted SPAM. The service is provided by Intuition Machines, Inc, 350 Alabama St,10, San Francisco, CA 94110, USA. To use the service, the user's IP address along with browser information. The browser information is sent to hCaptcha. A contract is concluded with the provider
data processing agreement within the meaning of Article 28 RODO. The data used by hCaptcha is transferred to the US and processed there. With the Trans Atlantic Data Privacy Framework, the European Commission has issued a decision finding an adequate level of protection for the USA. Intuition Machines, Inc. has been certified under the Trans Atlantic Data Privacy Framework and is therefore obliged to guarantee an adequate level of data protection from an EU perspective. The certificate can be viewed by clicking on the following link: https://www.dataprivacyframework.gov/list. We have also agreed so-called standard contractual clauses with Intuition Machines Inc, the purpose of which is to ensure an adequate level of data protection in a third country. The data processing is carried out on the basis of Article 6(1)(f) of the RODO. For more information on data processing using hCaptcha, please click the following link: https://www.hcaptcha.com/gdpr.

10. Google Analytics

Our website uses Google Analytics, a web tracking service provided by Google Ireland
Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google"). The purpose of using the app is to enable us to analyse your interaction on the websites and to use the statistics and reports obtained to improve our offering and make it more interesting for you.
We record interactions between the website user and our website primarily through cookies, device/browser data and website activity.
Your IP addresses are also recorded using Google Analytics in order to ensure the security of the service and to enable us to provide you, as the website operator, with information about the country, region or location from which you come (so-called "IP location determination"). For your protection, we use an anonymisation function ("IP masking"). This means that Google truncates IP addresses in the EU/EEA by the last octet. We use Google as a processor within the meaning of Article 4 No. 8 RODO. Accordingly, we have entered into a data processing agreement with Google. Information generated by cookies. The information generated by cookies and (usually abbreviated) IP addresses concerning your use of this website is generally transferred to a Google server in the USA and processed there. With the Trans Atlantic Data Privacy Framework, the European Commission has adopted a decision stating the appropriate level of protection for the USA. Google has been certified as compliant with the Trans Atlantic Data Privacy Framework and is therefore obliged to comply with what the EU considers to be an adequate level of data protection. The certificate can be viewed by clicking the following link: https://www.dataprivacyframework.gov/list. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to maintain an adequate level of data protection in the third country. The legal basis for the collection and further processing of the information is your consent in accordance with Section 25 (1) TTDSG in conjunction with Article 6 (1) sentence 1 lit. a RODO. The user may withdraw his or her consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal. The easiest way to withdraw consent is to use our
Consent Manager (by clicking on the toolbar or the cookie symbol on each subpage ("bottom left") cookie symbol) or by installing the Google browser add-on. This is available via the following link: tools.google.com/dlpage/gaoptout?hl=en/. Google provides information on data processing when using Google Analytics via the following link: support.google.com/analytics/answer/6004245?hl=en/.

11. User rights

You may exercise your rights as a data subject in relation to the personal data processed at any time by:

• request information about your data processed by us in accordance with Article 15 RODO. In particular, you may request information on the purposes of the processing, the categories of recipients to whom the data have been or will be disclosed, the intended period of storage, the existence of the right to rectification, erasure, restriction of processing or the
  erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of the data if it was not collected by us, the existence of automated decision-making, including profiling, and, where applicable, profiling and, where relevant, relevant information about its details;
  - in accordance with Article 16 of the DPA, to immediately request the rectification of inaccurate or supplementary data held by us;
  - in accordance with Article 17 of the DPA, to request the erasure of your data stored by us, unless the processing is necessary for the exercise of your right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise of a public interest or for the establishment, assertion or defence of legal claims;
  - pursuant to Article 18 of the RODO, to request the restriction of processing, where you contest the accuracy of the data or the processing is unlawful
  - in accordance with Article 20 RODO, to receive the data provided to us in a structured, commonly used machine-readable format,
  in a structured, commonly used and machine-readable format or to request its transfer to another controller ("data portability")
  - to object to the processing pursuant to Article 21 of the RODO, provided that the processing is carried out on the basis of Article 6(1) sentence 1(e) or (f) of the RODO. This applies in particular if the processing is not necessary for the performance of a contract with you. We should not process your data in the way we did. In the event of a justified objection, we will analyse the situation and stop or adjust the processing or indicate to you our compelling reasons deserving protection on the basis of which we will continue the processing;
  - in accordance with Article 7(3) of the RODO, once you have given your consent - i.e. freely given, knowingly and unambiguously by means of a statement or other clear and unambiguous act confirming that you consent to the processing of personal data for the duration of the processing of personal data for one or more specified purposes - at any time to us if you have given such consent. As a result, we will no longer be able to continue processing your data on the basis of this consent in the future.
  - in accordance with Article 77 of the DPA, complain to the data protection supervisory authority in connection with the processing of personal data in our company, for example to the data protection supervisory authority responsible for us. The data protection supervisory authority responsible for us: State Data Protection Commissioner Lower Saxony, Prinzenstraße 5, 30159 Hanover.