Skip to content

You are here:

Privacy policy

1. Who is the controller of this website?

The controller within the meaning of the General Data Protection Regulation is:

Hermann Paus Maschinenfabrik GmbH
Siemensstrasse 1-9
D-48488 Emsbüren, Germany
e-mail: datenschutz@remove-this.paus.de
Publication details: https://www.paus.de/en/publication-details.html 

(hereinafter referred to as "Hermann Paus Maschinenfabrik GmbH" or as "we")

If you have any questions about this privacy policy or about the protection of your data by Hermann Paus Maschinenfabrik GmbH, you may contact our data protection officer at any time:

Carla Holterhus
E‑Mail: datenschutz@remove-this.paus.de

2. What is it about?

When we process personal data, this means that we collect, store, transmit or erase it or use it in another way. Personal data refers to information about natural persons who use this website to obtain information about the offers and services of Hermann Paus Maschinenfabrik GmbH.

If you are a customer, prospective customer, employee, supplier or applicant of Hermann Paus Maschinenfabrik GmbH, your data will also be processed by us as part of your business relationship with us or within your legitimate interest of receiving a response. You can find information on this in the following page: Information about how your personal data is handled

In this section, you will find an overview of which data Hermann Paus Maschinenfabrik GmbH processes when you visit this website and for what purpose. Information on the handling of your data on the social media channels of Hermann Paus Maschinenfabrik GmbH can be found in the Privacy policy for social media

3. How is my data processed when I visit this website?

3.1 Data required to display the website and ensure its stability and security.

When the website is used purely for informational purposes, the following technically necessary data is processed:

  • IP address of the user
  • Browser used (type, version, language)
  • Operating system used
  • Internet service provider of the user
  • Date and time of access to our websites
  • Files retrieved from our websites
  • Website from which the user accessed our website
  • Website that the user accesses via our website.

The processing of the aforementioned data is carried out for the performance of pre-contractual measures or for the fulfilment of the contract in accordance with Article 6(1b) GDPR. In addition, the data may also be processed to protect the legitimate interests of Hermann Paus Maschinenfabrik GmbH on the basis of a balancing of interests in accordance with Article 6(1f) GDPR. In the event of unlawful use of this website, this data is also used to clarify possible infringements of the law.

Hermann Paus Maschinenfabrik GmbH also analyses this information for statistical purposes and to improve this website, without creating personal user profiles in the process.

3.2 Use of cookies?

This website uses cookies. Cookies are small information units which are stored on your device. These serve to make it easier for visitors to navigate through the website and use certain functions and, above all, to be able to use this information again at a later date. In addition to these technically and functionally necessary cookies, cookies may also be used for other purposes, such as targeted advertising. You will find more detailed explanations in the notes below.

If you do not want cookies to be stored on your end device, you can prevent this by changing the settings in your browser software accordingly. Cookies that have already been saved can also be erased via these settings. However, if strictly necessary cookies are deactivated, it will no longer be possible to use the full functionality of this website.

Strictly necessary cookies:

We use cookies that are necessary for the operation and utilisation of functions in order to make the use of this website secure and user-friendly. This is the only way users can navigate the website and make use of the website's modules and functions. Without these cookies, the use of the website may not be possible or only possible to a limited extent. Some functions require the browser to be recognised even after changing websites.

The data collected using these strictly necessary cookies is not used to create user profiles. The following data is stored and transmitted in the cookies:

  • Current session ID
  • Utilisation of certain website content, for example frequency or scope of use
  • Information relating to certain website content, such as product information

As websites have no memory, cookies inform the server which pages should be displayed to the visitor. The benefit of this is that the visitor does not have to remember everything or navigate through the entire page again. 

Almost all of the technically and functionally necessary cookies used are "session cookies". The data stored in these is automatically erased at the end of your visit.

To see which cookies we use on our website, see our cookie banner:

Data is processed using technically and functionally necessary cookies on the basis of Section 25(2) of the German Telecommunications Telemedia Data Protection Act (TTDSG).

3.3 Contact form and e-mail contact

When contacting us (e.g. by contact form, e-mail, telephone or via social media) as well as in the context of existing user relationships and business relationships, the data submitted by the persons making the enquiry is processed to the extent necessary to answer the contact enquiries and perform any measures requested. As part of our contractual or pre-contractual relationships, we respond to contact enquiries and manage contact and enquiry data in order to fulfil our contractual obligations or to respond to (pre-)contractual enquiries and otherwise on the basis of legitimate interests in responding to enquiries and maintaining user relationships or business relationships. In this process, we collect the following data from our communication partners:

  • Contact details (e-mail addresses, telephone numbers)
  • Content data (entries in online forms)
  • Usage data (websites visited, interest in content, access times)
  • Meta/communication data (device information, IP addresses).

Our processing is undertaken for the purposes of the contact enquiry and communication, as well as the provision of contractual services and customer service. In addition, the processing of this data serves to manage and respond to enquiries and to provide our online offering and ensure user-friendliness.

If users contact us via our contact form, e-mail or other communication channels, we process the data provided to us in this context in order to complete the communicated request. For this purpose, we process personal data in the context of pre-contractual and contractual business relationships, to the extent necessary to fulfil these and otherwise on the basis of our legitimate interests and the interests of the communication partners in receiving a response to the requests and our statutory retention obligations. We use the e-mail dispatch and automation services of Salesforce (salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany) for this purpose. The legal basis for this data processing is Article 6(1f) GDPR. If the purpose of contact initiation is to form a contract, Article 6(1b) GDPR is the legal basis.

We have formed a data processing agreement (DPA) for the use of the above-mentioned service. This is an agreement prescribed by data protection law, which ensures that Salesforce processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. Data processing agreement: https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/scc-amendment.pdf 

Data transfer impact assessment for Salesforce Services can be found at: www.salesforce.com/content/dam/web/en_us/www/documents/legal/Privacy/dpia-and-salesforce-services.pdf.

You can find more information about how Salesforce handles user data by viewing Salesforce's privacy policy: https://www.salesforce.com/company/privacy.

3.4 Information applications by other providers

Consent with consent management tool

The TYPO3 extension "Cookieman" is used on our website as a cookie banner and consent tool. This creates a GDPR-compliant cookie notice for our website visitors. The legal basis for this data processing is Article 6(1c) GDPR in conjunction with Section 13 German Telemedia Act (TMG) – our duty to provide information on the processing of cookies and storage of consent or rejection of technically non-essential cookies (Article 6(1a) GDPR). You can withdraw your consent at any time, e.g. by closing the browser and then calling up our site again. Our cookie consent tool saves your cookie settings in a session cookie called "CookieConsent". The cookie is automatically erased when the browser is closed. 

Google Ads

Google Ads is an online advertising service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google acts as controller.

We use Google Ads to show you online advertising that corresponds to your interests. Google uses DoubleClick cookies to measure the success of our advertising campaigns by recording parameters such as the display of adverts or clicks by users. For example, we receive statistical analyses from Google about which advertisements were clicked on how often and at what prices. However, we do not receive any information about the use of the advertising material that would allow us to draw conclusions about individual users.

Using the statistics generated by Google Analytics, we can create target groups (e.g. for end devices via which a specific product page was accessed) and transmit these to Google via Google Ads. These target groups consist of a list of advertising IDs filtered according to certain criteria within Google Analytics (which is also stored in the "DoubleClick cookie", for example). Google uses the target groups so that you are primarily addressed in online marketing for those products in which you are interested (e.g. because you have already accessed information about this on our website). For more information on how Google processes your data for advertisements, see Google's Privacy Policy and Google Ads Help.

The legal basis for this data processing is your consent in accordance with Article 6(1a) GDPR or Section 25(1) TTDSG.

Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF) and the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

For more information on how Google Analytics handles user data, see Google's privacy policy: https://policies.google.com/privacy.

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that we can use to integrate tracking or statistics tools and other technologies on our website. Google Tag Manager does not itself create any user profiles, nor store any cookies nor carry out any independent analyses. It serves solely to manage and utilise the tools integrated through it. Google Tag Manager does, however, record your IP address, which may also be transmitted to Google's parent company in the United States.

The use of this service is based on your consent in accordance with Article 6(1a) GDPR and Section 25(1) TTDSG. Consent can be withdrawn at any time.

Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF) and the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

For more information on how Google Analytics handles user data, see Google's privacy policy: https://policies.google.com/privacy.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google Analytics to measure and analyse the use of our website on the basis of a pseudonymised user identification number. This identification number does not contain any unique data, such as names or e-mail addresses. It is used to assign analysis information to an end device in order to recognise which content users have called up within one or more usage processes, which search terms they have used and called up again or how they have interacted with our website. The time of use and duration of use are also stored, as well as the sources of the users who refer to our website and technical aspects of their end devices and browsers. Pseudonymised user profiles are created with information from the use of different devices, whereby cookies can be used. Google Analytics does not log or store individual IP addresses for EU users. Google Analytics does, however, provide rough geographic location data by deriving the following metadata from IP addresses: City (and the city's derived latitude and longitude), continent, country, region, subcontinent (and ID-based equivalents). In the case of EU data traffic, the IP address data is used exclusively for this derivation of geolocalisation data before it is immediately erased. It is not logged, is not accessible and is not used for other purposes. When Google Analytics collects measurement data, all IP queries are performed on EU-based servers before the traffic is forwarded to the Analytics servers for processing. The use of this service is based on your consent in accordance with Article 6(1a) GDPR and Section 25(1) TTDSG. Consent can be withdrawn at any time.

Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF) and the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

For more information on how Google Analytics handles user data, see Google's privacy policy: https://policies.google.com/privacy.

You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout.

reCAPTCHA

We integrate the "reCAPTCHA" function of the service provider Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) in order to be able to recognise whether entries (e.g. in online forms) are made by humans or by automatically acting machines (known as "bots"). The processed data may include IP addresses, information on operating systems, devices or browsers used, language settings, location, mouse movements, keyboard strokes, time spent on websites, previously visited websites, interactions with reCaptcha on other websites, in some cases it may include cookies and results of manual recognition processes (e.g. answering questions asked or selecting objects in images). Data processing is carried out on the basis of our legitimate interest in protecting our online offering from fraudulent automated crawling and spam. The legal basis for this data processing is Article 6(1f) GDPR.

Further information on data protection at Google can be found here (https://policies.google.com/privacy). Of course, you have the option to object to processing at any time via the opt-out plug-in (https://tools.google.com/dlpage/gaoptout).

3.5 Plugins and embedded content from LinkedIn

We have embedded content elements on our website that are obtained from the servers of the provider LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter ‘third-party provider’). This content elements could be for example Textelements with pictures or videos (hereinafter referred to as ‘content’).

The integration always requires that the third-party provider process the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is required to display this content. Third-party providers may also use so-called pixel tags (web beacons) for statistical or marketing purposes. Pixel tags can be used to analyse information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our website, as well as being linked to such information from other sources.

Your personal data is processed on the basis of your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). You have the option to withdraw your consent at any time. This is possible in the cookie settings. You can find another opt-out option here: www.linkedin.com/psettings/guest-controls/retargeting-opt-out. We have concluded a data processing agreement with LinkedIn ( https://legal.linkedin.com/dpa ). Data is transferred to a third country (countries outside the EU or the European Economic Area - EEA) in accordance with suitable guarantees in form of standard contractual clauses ( https://legal.linkedin.com/dpa ). Further information on data protection at LinkedIn can be found here: www.linkedin.com/legal/privacy-policy.

4. Who receives my data?

Data will only be passed on to third parties if you have given your consent or if there is a legal obligation to pass on the data.

Under these circumstances, recipients of personal data may include but are not limited to:

  • Law enforcement agencies
  • Other companies of the Paus Group

Contracted service providers may also receive such data if they fulfil the special confidentiality requirements of Hermann Paus Maschinenfabrik GmbH. This may include but is not limited to companies in the IT services, consulting and sales and marketing categories. Appropriate data protection agreements are then concluded with these service providers.

5. When will my data be erased?

Once the data specified in this privacy policy is no longer required for the original purpose, it will be erased. Deviations from this only apply if the data is – temporarily – required for further processing for other purposes.

If a different storage period is defined for certain services, you will find this in the description of the respective service.

6. Will my personal data be transmitted to a third country or an international organization?

Data that Hermann Paus Maschinenfabrik GmbH receives when you visit this website will not in principle be transferred to international organisations or to third countries (countries outside the European Economic Area – EEA). Insofar as Hermann Paus Maschinenfabrik GmbH uses analysis services, this is outlined above in item 3.

7. Is my data used for automated decision-making or profiling?

Data from visits to this website are not used for automated decision-making as defined in Article 22 GDPR.

8. Privacy policy for the application process

We process the data of applicants only for the purpose and in the context of the application process in accordance with the legal requirements. Applicant data is processed to fulfil our (pre-)contractual obligations in the context of the application process within the meaning of Article 6(1b) GDPR and Article 6(1f) GDPR if the data processing is necessary to us, e.g. in the context of legal proceedings.

The application process requires applicants to provide us with their applicant data. The applicant data we require is indicated if we offer an online form, otherwise it can be found in the job descriptions and essentially includes personal details, postal and contact addresses and the documents belonging to the application, such as cover letter, CV and certificates. Applicants can also voluntarily provide us with additional information.

By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the nature and scope set out in this privacy policy. If special categories of personal data as defined in Article 9(1) GDPR are voluntarily shared during the application process, such data is processed in accordance with Article 9(2b) GDPR as well (e.g., health data, such as severely disabled status, or ethnic origin). If special categories of personal data as defined in Article 9(1) GDPR are requested from applicants during the application process, such data is processed in accordance with Article 9(2a) GDPR as well (e.g., health data if this is necessary for the performance of the job).

If applicants send us their applications by e-mail, it must be noted that e-mails are generally not sent in encrypted form and applicants are themselves responsible for ensuring that e-mails are encrypted. We can therefore accept no responsibility for the transmission path of the application between the sender and our server.

If we do not make you a job offer, you may have the opportunity to enter our applicant pool. If you are entered in the applicant pool, all documents and details from your application will be transferred to the applicant pool so that you can be contacted in the event of suitable vacancies. Entry in the applicant pool is based exclusively on your express consent (Article 6(1a) GDPR). The declaration of consent is voluntary and is not related to the current application process. The data subject is entitled to withdraw their consent at any time. In this case, the data will be irrevocably erased from the applicant pool, provided there are no legal grounds for retention. The data from the applicant pool will be irrevocably erased no later than two years after consent has been granted.

In the event of a successful application, the data provided by applicants may be further processed by us for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the general statutory retention and erasure periods apply. We erase the data within the scope of the application procedure, subject to a justified withdrawal by the applicants, in accordance with the applicable legal provisions after completion of the recruitment process in question. It will then no longer be possible for our company to access and use the personal data.

9. What rights do I have relating to the processing of my data?

You have the following rights vis-à-vis Hermann Paus Maschinenfabrik GmbH with regard to your personal data:

Right of access by the data subject
Right to rectification or erasure
Right to restriction of processing
Right to data portability
Right to withdraw consents granted

9.1 Information regarding your right to object in accordance with Article 21 GDPR

Right to object on a case-by-case basis

On grounds relating to your particular situation, you shall have the right to object at any time to the processing of personal data concerning you which is based on Article 6(1e) GDPR (data processing in the public interest) and Article 6(1f) GDPR (data processing on the basis of a balancing of interests); this shall also apply to profiling as defined in Article 4(4) GDPR based on this provision.

If you file an objection, your personal data will no longer be processed by Hermann Paus Maschinenfabrik GmbH, unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the assertion, exercise or defence of legal claims.

Objecting to the processing of your data for direct marketing purposes

In individual cases, Hermann Paus Maschinenfabrik GmbH processes your personal data for direct marketing. You have the right to submit an objection to the processing of your personal data for the purposes of direct marketing at any time; this also applies to profiling insofar as this is linked to such direct marketing.

If you object to your data being processed for the purposes of direct marketing, Hermann Paus Maschinenfabrik GmbH shall cease using your personal data for these purposes.

Your objection can be submitted in any form and should be addressed to the following where possible:

Hermann Paus Maschinenfabrik GmbH
Siemensstrasse 1–9
D-48488 Emsbüren, Germany
e-mail: datenschutz@remove-this.paus.de

You also have the right to lodge a complaint with a data protection supervisory authority in connection with the processing of your personal data.

10. Changes and updates to the privacy policy

We ask you to regularly check the content of our privacy policy. We will adapt the privacy policy as soon as changes to the data processing we carry out make such adaptations necessary. We will inform you as soon as the changes require an act of co-operation on your part (e.g. consent) or other individual notification.

If we provide addresses and contact information of companies and organisations in this privacy policy, note that the addresses may change over time. Please check the information is correct before making contact.

Last updated: 11th December 2023

Back to top of page