Data privacy

Data privacy

Privacy policy for the operation of this website

We are pleased that you are visiting our Tyczka Trading website. The protection and security of your personal information when using our website is very important to us. In the following, we inform you about the processing of your personal data by Tyczka Trading in connection with your visit to the websites. We also inform you about your rights and who you can contact if you have any questions about data protection or complaints.

1. contact details of the controller

This website is operated by:

Tyczka Trading GmbH & Co. KG
Managing Director: Frederick Tyczka-Christoph
Blumenstraße 5
82538 Geretsried
Phone 08171 / 627-0
E-mail: trading@tyczka.com

2. contact details of the data protection officer

The external data protection officer of the controller is
Digital Compliance Consulting GmbH
Mr Dipl.-Ing. Arnd Fackeldey
Karl-Arnold-Str. 44
52349 Düren
Telephone: 02421 / 5559333
E-mail: fackeldey@digital-compliance-consulting.com

3. What is it about?

This privacy policy serves to fulfil the legal requirements for transparency in the processing of personal data. For the purposes of data protection law, personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour when visiting websites. Information that we cannot link to your person is not personal data and is therefore generally not subject to data protection laws.

The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose. Below we inform you about the various processing activities as well as the purposes and legal bases assigned to the respective processing.

We regularly delete personal data as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise or defence of legal claims and in the event of statutory retention obligations.

4. recipient of your data

As a rule, your personal data will only be processed by Tyczka Trading. For certain services on the websites, we use resources from third-party providers who process your personal data on our behalf in the respective case. In each case, the respective service providers have been carefully selected, checked and obliged to comply with the requirements of the General Data Protection Regulation by means of an order processing contract.

In addition, in individual cases we pass on personal data to third parties if this serves the assertion, exercise or defence of legal claims. Possible recipients may then be, for example, law enforcement authorities, lawyers, auditors, courts, etc.

5. processing of your data in the context of our applicant portal

If you are interested in working for Tyczka Trading, you have the option of submitting an online application to us. In the course of your online application, you create a personal access to our applicant portal for yourself. The following data must be entered for this purpose:

Title, surname, first name, e-mail address

In addition, it is necessary to provide your CV or complete documents.

The provision of all other data (e.g. address, mobile phone number, salary expectations and earliest start date) is voluntary.

You will then receive an e-mail with a link to the applicant portal, a user ID and a password. When you log in for the first time, you will be asked to replace the initial password with your personal password. This access is only intended for you personally. You are responsible for keeping your password confidential.

Once the application process has been completed, the application documents will be deleted (described under ‘Application retention period’). Access to the portal will only be maintained if there are other applications, e.g. for other positions. As soon as there are no more applications in the portal, access is automatically deleted. For new applications, a new account must be created by the applicant. Irrespective of the procedure described above, the applicant has the option at any time of cancelling their application and deleting their access themselves.

Data security

We have taken technical and organisational measures to ensure that your data is handled in compliance with data protection regulations. Your online application is transmitted in accordance with the current encryption standard for data transmission (https) within websites.

Purpose of data processing and legal basis

Your application data is collected solely for the purpose of filling the advertised position. Access to your data is only granted to the internal departments of the company to which you have applied that are responsible for the specific application process.

The processing of your data as part of the application process is carried out for the implementation of pre-contractual measures within the meaning of Art. 6 (1) b GDPR. Recruiting is carried out centrally by Tyczka GmbH for Tyczka. This is done on the basis of our legitimate interest for internal administrative purposes (Article 6 (1) f GDPR, EC 48). Your interests worthy of protection are always safeguarded.

Retention period of the application data

Your application data will generally be deleted no later than six months after completion of the application process, unless you have expressly consented to longer storage. If statutory provisions prevent deletion or further storage is required for the purpose of providing evidence, the data will only be deleted once these purposes no longer apply.

The data of the applicant who is hired will be used for the recruitment process and stored in the system. If legal provisions prevent deletion or further storage is required for the purpose of providing evidence, the data will only be deleted once these purposes no longer apply.

6. collection and processing of personal data through the use of our website

Type and scope of processing

When you access and use our website, it is technically necessary to process the following data, which your browser automatically transmits to our server. This data is temporarily stored in log files:

  • Requesting host address (IP address)
  • Date and time of the request
  • Name and URL of the retrieved file
  • HTTP status code
  • Amount of data transferred
  • Website from which the file is requested
  • Browser/operating system/interface

Our websites are not hosted by us, but by a service provider who works on our behalf in accordance with Art. 28 GDPR.

Purpose and legal basis

The processing is carried out to safeguard our overriding legitimate interest in displaying our websites and ensuring security and stability on the basis of Art. 6 (1) f GDPR. The collection of data and storage in log files is absolutely necessary for the operation of the websites. There is no right to object to the processing due to the exception under Art. 21 (1) GDPR. Insofar as the further storage of log files is required by law, the processing is carried out on the basis of Art. 6 (1) c GDPR. There is no legal or contractual obligation to provide the data, but it is not technically possible to access our websites without providing the data.

Storage period

As soon as the aforementioned data is no longer required to display the website, it will be deleted.

7. contact form

On our website, we offer you the opportunity to contact us using a form provided. The information that is collected via mandatory fields is required in order to process the enquiry. You can also voluntarily provide additional information that you believe is necessary to process the contact enquiry.

The use of our contact form is exclusively on a voluntary basis. As a matter of principle, we do not pass on data entries / messages in the contact form to third parties. However, if you use the contact form for an order or enquiry at the same time, your data will only be passed on to any companies involved for the purpose of processing the order or preparing an offer. The following data must be entered for this purpose:

  • First name, surname
  • Subject

The provision of all other data (e.g. customer number, address, telephone number, e-mail address, content of the message) is voluntary.

Purpose and legal basis of the collection

The processing of your data through the use of our contact form is carried out for the purpose of communication and processing your enquiry on the basis of your consent in accordance with Art. 6 (1) a GDPR. Insofar as your enquiry relates to an existing contractual relationship with us, the processing is carried out for the purpose of contract fulfilment on the basis of Art. 6 (1) b GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your enquiry without providing the information. If you do not wish to provide this data, please contact us by other means.

Storage period

If you use the contact form on the basis of your consent, we will store the data collected for each enquiry for a period of three years, starting with the completion of your enquiry or until you withdraw your consent.

If you use the contact form as part of a contractual relationship, we will store the data collected for each enquiry for ten years from the end of the contractual relationship.

Declaration of consent

By entering my data and clicking the ‘Send message’ button, I declare my consent to the processing of my personal data provided for the purpose of responding to my contact enquiry. I am free at any time not to use the contact form and instead send an e-mail to Tyczka Trading or call them.

8. contact by e-mail

You also have the option of contacting us at the e-mail address trading(at)tyczka.com. In this case, your e-mail will be viewed by the IT department and forwarded from there to the relevant specialist department. Our data collection is limited to the e-mail address of the e-mail account you use to contact us and the personal data you voluntarily provide when contacting us.

Legal basis of the collection

The processing of your data following the sending of your e-mail is generally carried out for the purpose of communication and processing your enquiry for the purpose of (pre-)contract fulfilment on the basis of Art. 6 (1) b GDPR.

Storage period

The duration of storage of the above-mentioned data depends on the reason for your contact. Your data will be deleted as soon as the purpose of the communication no longer applies or, after your request has been processed, no further data storage is required by law or tax regulations.

9. cookies

Our Internet pages use so-called ‘cookies’. Cookies are small text files that are stored on the local computer of users when they visit websites and are sent back to the server when they visit the site again. These cookies do not cause any damage to your end device. They are either temporarily stored on your device for the duration of a session or for a specific period of time.

Cookies currently in use

We use cookies on our websites in connection with the functionality of the site and for statistical analysis of visitor access.

PIWIK Pro Core

Type and scope of processing

We use the services of Piwik PRO GmbH (https://piwikpro.de/) to analyse user behaviour on our websites. For this purpose, we use the ‘Anonymous tracking without cookies and session data’ function from Piwik PRO as standard. With this option, we do not identify any individual person and do not determine any individual session. Only events without personal data are recorded. We do not require consent for this form of data processing in accordance with either the GDPR or the TDDDG.

As part of the query of your consent preferences, you have the option of giving us your explicit consent to process further data from your user behaviour. If you give us this consent, this is done in accordance with Section 25 TDDDG and Art. 6 (1) a GDPR in conjunction with Art. 7 GDPR. Art. 7 GDPR.

Your consent enables us to carry out a statistical reach analysis of these websites, measure the success of our online marketing measures and test procedures, e.g. to test and optimise different versions of our online offering or its components.

The data generated with Piwik PRO is processed and stored by Piwik PRO exclusively in Germany on behalf of the provider of this website and is therefore subject to the strict German and European data protection laws and standards.

Further information on data protection at Piwik PRO can be found here.

The IP address processed as part of the Piwik PRO tool is anonymised as early as possible and login or device identifiers are converted by Piwik PRO into a unique key that is not assigned to a person. Piwik PRO GmbH does not use this data for any other purpose, merge it with other data or pass it on to third parties. The storage and further processing of the data is therefore anonymised and is exempt from the deletion obligation under Article 17 (1) GDPR.

10. integration of third-party services and content

LinkedIn

Tyczka Trading uses the technical platform ‘LinkedIn’ for marketing purposes. Together with LinkedIn Ireland Unlimited Company (‘LinkedIn’), we are ‘joint controllers’ within the meaning of Art. 26 GDPR for the processing of your personal data on this platform and we use the technical platform and services of LinkedIn Ireland Unlimited Company (‘LinkedIn’) for the information service offered here.

We process personal data ourselves via our LinkedIn account; at the same time, data processing by LinkedIn takes place.

Data processed by LinkedIn

We use the technical platform and services of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland for the short message service offered here.

We would like to point out that you use the LinkedIn service offered here and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating).

Information on what data is processed by LinkedIn and for what purposes can be found in LinkedIn's privacy policy: www.linkedin.com/legal/privacy-policy

We have no influence on the type and scope of the data processed by LinkedIn, the type of processing and use or the disclosure of this data to third parties. We also have no effective control options in this respect.

By using LinkedIn, your personal data will be collected, transferred, stored, disclosed and used by LinkedIn and transferred to, stored and used in the United States, Ireland and any other country in which LinkedIn does business, regardless of your place of residence.

LinkedIn processes your voluntarily entered data such as your name and user name, email address and telephone number.

On the other hand, LinkedIn also analyses the content you share to determine which topics you are interested in, stores and processes confidential messages that you send directly to other users and can determine your location using GPS data, wireless network information or your IP address in order to send you advertising or other content.

LinkedIn may use analysis tools for evaluation purposes. We have no influence on the use of such tools by LinkedIn. If tools of this type are used by LinkedIn for our account, we have neither commissioned this nor supported it in any other way. We are also not provided with the data obtained during the analysis. Only certain, non-personalised information about the activity, such as the number of profile or link clicks, can be viewed by us via our account. Furthermore, we have no way of preventing or switching off the use of such tools on our LinkedIn account.

Finally, LinkedIn also receives information when you view content, for example, even if you have not created an account. This so-called ‘log data’ may include the IP address, the browser type, the operating system, information about the previously accessed website and the pages you accessed, your location, your mobile phone provider, the device you are using (including device ID and application ID), the search terms you used and cookie information.

You have the option of restricting the processing of your data in the general settings of your LinkedIn account and under ‘Privacy and security’. On mobile devices (smartphones, tablet computers), you can also restrict LinkedIn's access to contact and calendar data, photos, location data, etc. in the settings options there. However, this depends on the operating system used.

Further information on these points is available on the following LinkedIn support pages: www.linkedin.com/psettings/

You can find out more about the possibility of viewing your own data on LinkedIn here: https://www.linkedin.com/help/linkedin/answer/a1339364/auf-ihre-kontodaten-%20zugreifen?lang=de

You also have the option of requesting information via the LinkedIn data protection form or the archive requests: https://www.linkedin.com/help/linkedin/ask/PPQ?1ang=de.

If you have any questions about our information offering, you can contact us using the contact details provided at the beginning of this statement.

Xing

Tyczka Trading maintains an online presence in the professional social network ‘XING’. XING is operated by New Work SE, Am Strandkai 1, 20457 Hamburg (phone: +49 40 419 131-0, fax: +49 40 419 131-11, e-mail: info@new-work.se).

This online presence is used for communication and exchange with interested parties, customers, potential employees and business contacts as well as for information about our company, our products and services.

When you visit our page on XING and during other interactions with our content and our page on XING, XING collects personal data from users, for example through the use of cookies. XING may also collect such data from users who are not logged in or registered with XING. Information about data collection and further processing by XING can be found in XING's privacy policy at https://privacy.xing.com/de/datenschutzerklaerung/druckversion.

You can find out which user data XING collects directly in the aforementioned data protection information. If you do not want XING to process your data, you should not visit the XING website or our company page there and should not use any other XING applications (such as apps). If you do wish to use XING, as a registered user you can decide for yourself what information you wish to provide to XING. However, we would like to point out that XING also processes data based on your usage behaviour on XING or your other usage behaviour on the Internet. XING offers registered users the opportunity to make various settings with regard to their privacy. An overview of this can be found at https://privacy.xing.com/de/ihre-privatsphaere.

We only have very limited access to the data collected by XING or your profile data. We can only see the public information in your profile. You decide what this is specifically in your XING settings. We also receive anonymous statistics about our page and our content from XING. The following information is provided, for example Statistics on visitors, interested parties and followers of our company page; analysis of the visitor structure by company, industry, career level and age group; traffic analysis showing how visitors became aware of our company page. We cannot draw any conclusions about individual users from these statistics, nor can we link the information to user profile data. We use the statistics to continuously improve our online offering on XING.

If you use the contact function on our XING page or communicate with us in comments on our content, we process the information that you provide to us as part of the communication in addition to your user name.

If you would like to obtain information about Tyczka Trading, our products and services, it is not necessary for you to visit our company page on XING. You can also find such information on our website, for example, or simply contact us in another way.

If you have any questions about our information offering, you can reach us using the contact details listed at the beginning of this statement.

Instagram

Tyczka Trading uses the technical platform ‘Instagram’ and the services of Meta Platforms Ireland Limited, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for marketing purposes. Instagram is an online service for sharing information, photos and videos.

We would like to point out that you use our Instagram page and its functions at your own risk. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). Our Instagram page offers you the opportunity to react to our posts, comment on them and send us private messages. Please check carefully what personal data you share with us via our Instagram page. If you wish to prevent Meta Platforms Ireland Limited from processing any personal data you submit to us, please contact us by other means.

We have set up our Instagram page as a business profile and use anonymised page statistics (‘Instagram Insights’) provided by Meta Platforms Ireland Limited, which provide us with insights about visitors to our Instagram page and their interactions with our Instagram page and its content. We do not contribute to the decision on the means and purposes of processing event data used to generate page statistics. The statistics include the following information:

  • Reach, page views, time spent on video posts
  • Interactions such as marking a post with ‘Like’, commenting or sharing posts
  • Demographic information on age, gender and location

We use this data to recognise trends. It is not possible for us to link back to the people who triggered these events. Meta Platforms Ireland Limited provides more information on this at the following link: https://privacycenter.instagram.com/policy

Die in diesem Zusammenhang über Sie erhobenen Daten werden von der Meta Platforms Ireland Limited verarbeitet und dabei gegebenenfalls in Länder außerhalb der Europäischen Union übertragen. Welche Informationen Meta Platforms Ireland Limited erhält und wie diese verwendet werden, beschreibt Meta Platforms Ireland Limited in allgemeiner Form in seinen Datenrichtlinie. Dort finden Sie auch Informationen über Kontaktmöglichkeiten zu Meta Platforms Ireland Limited sowie zu den Einstellmöglichkeiten für Werbeanzeigen. Die Datenverwendungsrichtlinien sind unter folgendem Link verfügbar: https://privacycenter.instagram.com/policy

Meta Platforms Ireland Limited does not conclusively and clearly state how Meta Platforms Ireland Limited uses the data from visits to Instagram pages for its own purposes, to what extent activities on the Instagram page are assigned to individual users, how long Meta Platforms Ireland Limited stores this data and whether data from a visit to the Instagram page is passed on to third parties, and we are not aware of this.

When you access an Instagram page, the IP address assigned to your end device is transmitted to Meta Platforms Ireland Limited. According to Meta Platforms Ireland Limited, this IP address is anonymised (for ‘German’ IP addresses). Meta Platforms Ireland Limited also stores information about the end devices of its users (e.g. as part of the ‘login notification’ function); Meta Platforms Ireland Limited may thus be able to assign IP addresses to individual users.

If you are currently logged in to Instagram as a user, a cookie with your Instagram ID is stored on your device. This enables Meta Platforms Ireland Limited to understand that you have visited this page and how you have used it. This also applies to all other Meta Platforms Ireland Limited pages. Buttons embedded in websites enable Meta Platforms Ireland Limited to record your visits to these websites and assign them to your profile. This data can be used to offer you customised content or advertising.

If you have any questions about our information offering, you can contact us using the contact details provided at the beginning of this statement.

Youtube

Tyczka Trading uses the technical platform and services of Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland for the information service youtube.

Tyczka Trading is responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) insofar as we process the data transmitted to us by you via YouTube exclusively ourselves. Insofar as the data you transmit to us via YouTube is also or exclusively processed by YouTube, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, is also responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) in addition to us.

We would like to point out that you use the YouTube channel offered by us and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, liking, liking, commenting).

We only process your data if you contact us via the YouTube platform. In this case, YouTube collects your data and makes it available to us.

This may also involve storage and further processing by us. Furthermore, we may collect data from visitors to our company website if the display as a visitor can be defined as processing. However, we do not store this data on our own systems, nor is it systematically processed beyond occasional awareness.

The legal basis for the processing of personal data is, depending on the case constellation, the processing for the initiation and execution of a contract with you in accordance with Art. 6 (1) b GDPR (e.g. for questions about our offers) or on the basis of our legitimate interest in communicating with users and our external presentation for the purpose of advertising in accordance with Art. 6 (1) f GDPR. If you have given your consent to the provider of the social network for the data processing described above with effect for us, the legal basis is Art. 6 (1) a GDPR.

Please note that for any further processing on our YouTube channel, the privacy policy of Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 applies. We have no lasting knowledge of and no influence on the type and scope of the data processed by Google, the type of processing and use or the transfer of this data to third parties. We also have no effective control options in this regard. Further information on the processing of personal data by YouTube can be found here:

Terms of use: https://www.youtube.com/t/terms?sjid=1200373725286685841-EU

Privacy policy: https://policies.google.com/privacy?hl=de

Data protection settings: https://support.google.com/youtube/topic/9257518?hl=de&ref_topic=9257107,3230811,3256124,&sjid=1200373725286685841-EU 

To the data protection and security centre: https://support.google.com/youtube/topic/2803240?hl=de&ref_topic=6151248,3230811,3256124,&sjid=1200373725286685841-EU

If you have any questions about our information offering, you can contact us using the contact details provided at the beginning of this statement.

Piwik consent solution

On our website we use the consent solution of Piwik PRO GmbH, Knesebeckstraße 62/63,

10719 Berlin, a technical consent solution with which we obtain and document consent to the storage of cookies and consent to the use of services. This consent solution uses cookies or other web technologies to recognise users and store the consent given or revoked. Piwik PRO GmbH does not receive any personal data as part of the use of this consent solution.

The service is used to fulfil legal obligations (Art. 6 (1) c GDPR and § 25 TDDDG) against the background of the legal obligation to provide evidence pursuant to Art. 7 (1) GDPR.

We store the visitor's settings and the additional IP address selected in the Piwik cookie box for one year.

Gregwar/CaptchaBundle

We have integrated components from Gregwar/CaptchaBundle on our websites. Gregwar/CaptchaBundle enables us to distinguish whether a contact request originates from a natural person or is automated by means of a programme. This tool displays captchas - small tasks that are easy for humans to solve but difficult for machines. These captchas help us to identify spam.

The service is used to ensure the availability of the websites, to protect against bots and on the basis of our legitimate interests in accordance with Art. 6 (1) f GDPR.

Mapbox map service

Our websites use interactive maps to display our dealers on a street map. The Mapbox product, a map service from Mapbox, Inc. in conjunction with OpenStreetMap, is used for this purpose. By using Mapbox, no personal data is processed and transferred to Mapbox or the OpenStreetMap Foundation.

11. Rights of data subjects

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

  • Information pursuant to Art. 15 GDPR about the personal data stored about you in the form of meaningful information on the details of the processing as well as a copy of your data;
  • Correction in accordance with Art. 16 GDPR of incorrect or incomplete data stored by us;
  • erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims
  • Restriction of processing pursuant to Art. 18 GDPR if the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you oppose the erasure of the data because you need it for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21 GDPR.
  • Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data on the basis of consent pursuant to Art. 6 (1) a GDPR or on the basis of a contract pursuant to Art. 6 (1) b GDPR and these have been processed by us using automated procedures. You will receive your data in a structured, commonly used and machine-readable format or we will transmit the data directly to another controller if this is technically feasible.
  • Objection pursuant to Art. 21 GDPR to the processing of your personal data, insofar as this is based on Art. 6 (1) e, f GDPR and there are reasons for this arising from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding, compelling legitimate grounds for the processing can be demonstrated or the processing is carried out for the establishment, exercise or defence of legal claims. If the right to object does not exist for individual processing operations, this is indicated there.
  • Revocation pursuant to Art. 7 (3) GDPR of your given consent with effect for the future.
  • Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.

12. contact details of the competent supervisory authority

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Telephone: +49 (0) 981 180093-0
Websites: https://www.lda.bayern.de/de/index.html