PRIVACY POLICY

Information on the processing of your data according to Art. 13 of the General Data Protection Regulation (GDPR)
Status: 03.03.2026

1. General

Scope and Changes

Scope

This privacy policy applies to the following processing activities of Schechtl Maschinenbau GmbH:

The online offering at the address: https://schechtl.de/
Contact via our contact form
Contact via our email address, by telephone, or fax
Handling of applicant data

In this privacy policy, we inform you about:

The data processing for which we are solely responsible,
The data processing for which we are jointly responsible with others, and
The external service providers used who process data on their own responsibility.

For data processing by other providers, for example via links, the respective privacy notices of those providers apply.

Changes to the Privacy Policy

This privacy policy may be adjusted or updated by us as needed. The version currently in effect applies.

Contact Persons and Responsible Parties
Name and contact details of the controller

Schechtl Maschinenbau GmbH
Viehhauser Straße 4, D-83533 Edling
Tel.: +49 8071 5995-0
Fax: +49 8071 5995-99
E-Mail:
Managing Director: Maria Schechtl

Name and contact details of the Data Protection Officer
Monika Kefer-Spieleder
Kefer IT-Beratung
Blumenstr. 9A
83569 Vogtareuth
E-Mail:
Website: https://www.kefer-it.de

Additional Controllers
Other parties are also responsible for the processing of your personal data. In this context, there is joint responsibility according to Art. 26 GDPR. The jointly responsible parties have established in an agreement which controller fulfills which obligations under the GDPR. Information about the other jointly responsible parties as well as the essential content of the agreements can be found in connection with the respective data processing activities.

Questions About Data Protection
If you have any questions regarding the handling of your personal data or the exercise of your rights as a data subject, you can at any time contact our Data Protection Officer using the contact details provided above.

2. Our Handling of Your Data

Provision of the Website and Creation of Log Files

a) Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the requesting device.
The data is also stored in the log files of our system. The following data is collected:

Visited website
Date and time at the moment of access
Time zone difference to Greenwich Mean Time (GMT)
Amount of data transmitted in bytes
Source/referrer from which you reached the site
Browser used
Language and version of the browser software
Operating system and its interface
IP address used
Access status/HTTP status code

Third-Party Provider:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen, Germany
Phone: +49 (0)9831 505-0
E-Mail:

Web Designer (as Processor):
codeculture GmbH
Kaßbergstraße 26
09112 Chemnitz, Germany

b) Legal Basis and Purpose of Data Processing

The data processing described above is technically necessary to correctly deliver the requested website content and occurs automatically when using the internet.
The legal basis for the temporary storage of the data and log files is Art. 6(1)(f) GDPR. The legitimate interests lie in analyzing errors on the website and enabling the blocking of IP addresses and, if necessary, legal prosecution in the event of misuse of the website, such as DOS attacks.

The temporary storage of the IP address by the system is necessary to deliver the website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.

The collected data also serves statistical evaluations and the improvement of the website. We reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

c) Retention Period and Possibility of Objection

The data is deleted after 7 days.
The collection of data for providing the website and the storage of data in log files is essential for the operation of the website. Therefore, users have no possibility to object.
Log files are deleted at the latest according to § 15(7) of the German Telemedia Act (TMG), i.e., within 6 months.

3. Consent Management with Borlabs

a) Description and Scope of Data Processing

This website uses the consent management (consent banner) Borlabs Cookie, Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, to obtain your consent for storing certain cookies on your device or for the use of certain technologies and to document this in compliance with data protection regulations. Hereinafter referred to as Borlabs Cookie. To record your consents and other statements regarding cookie usage, a Borlabs Cookie is stored in your browser when you enter our website. This cookie stores the consents you have given or withdrawn. No data is passed on to Borlabs Cookie.

b) Legal Basis and Purpose of Data Processing

We use Borlabs Cookie to transparently display the use of our cookies and to comply with the legally required consents for the use of cookies.
The legal basis for using Borlabs Cookie is Art. 6(1)(c) GDPR.

We have concluded a data processing agreement (DPA) for the use of this service. This is a legally required contract that ensures Borlabs Cookie processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

c) Retention Period and Possibility of Objection

The collection of data for the consent banner is mandatory. Therefore, users have no possibility to object.
You can delete the cookie yourself and request us to delete it. Once the purpose of data storage ceases, the cookie is also deleted. Mandatory statutory retention obligations remain unaffected.
For details on data processing by Borlabs Cookie, see: https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

4. Cookies

Cookies are text files that are stored by the web browser on the user’s device.

a) Description and Scope of Data Processing

We use various cookies, including so-called “session cookies.” Session cookies store information about the current session. They are used to assign a user’s settings to that session on a website. For example, if you visit the homepage in two browser windows, the session cookie recognizes that both requests belong to your session.

b) Legal Basis and Purpose of Data Processing

Technically necessary cookies are not strictly required to display the website.

The legal basis for the temporary storage of the data is:
Art. 6(1)(f) GDPR – legitimate interest, in all other cases

c) Retention Period and Possibility of Objection

Session cookies are automatically deleted at the end of your website visit
Users have no option to object; however, these cookies can be disabled by adjusting the settings of the respective browser

5. Other Cookies

5.1. Google Maps

a) Description and Scope of Data Processing

On our site, we use the online map service Google Maps, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For users whose usual residence is within the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, EU is the responsible entity for Google services. Google Ireland Limited is therefore the EU-affiliated company whose services are embedded and which must also comply with the GDPR.

To display the map, the processing of the IP address by Google Maps is technically necessary. The following information is transmitted to a Google server in the USA and stored there:

IP address
Latitude and longitude coordinates
Entered search terms
For route planner usage: the entered starting address

Google sets at least one cookie. This data storage occurs on the Google Maps servers. We have no influence on the data collection and further processing by Google. This applies regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged into a Google account, your data is directly associated with that account.

b) Legal Basis and Purpose of Data Processing

The legal basis for data processing is:
Art. 6(1)(a) GDPR – consent
Art. 6(1)(f) GDPR – legitimate interest in all other cases

Data transfer to the USA is based on the Standard Contractual Clauses of the European Commission.

Details:
https://privacy.google.com/businesses/gdprcontrollerterms/
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

More information on how Google handles user data can be found in Google’s privacy policy:
https://policies.google.com/privacy?hl=de

c) Retention Period and Possibility of Objection

You can prevent participation in this tracking procedure in several ways:

By adjusting your browser settings, in particular, blocking third-party cookies prevents you from receiving ads from third-party providers; or by installing the Google-provided plugin at: http://www.google.com/settings/ads/plugin
By permanently disabling it in your browsers Firefox, Edge, or Google Chrome via: http://www.google.com/settings/ads/plugin
Through the appropriate cookie settings on this website. Please note that in this case, you may not be able to use all functions of this website fully.

Further information on data protection at Google can be found here:
http://www.google.com/intl/de/policies/privacy
https://services.google.com/sitestats/de.html

Google is a member of the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA. The agreement certifies that participating U.S. companies provide an adequate level of data protection: https://www.dataprivacyframework.gov/participant/5780.

You can revoke your consent to cookies on our website at any time. The corresponding button to change cookie settings is represented by an icon on the right-hand side of our website
Google states that the cookie used for personalizing Google services (such as Maps) expires 6 months after the last use

6. Contact via Our Contact Form

a. Description and Scope of Data Processing

Through the contact form provided on our website, it is possible to submit an inquiry to us. In this case, the personal data transmitted by the user during contact is stored. For us to respond, only the email address is required. In this context, no data is passed on to third parties.

b. Legal Basis and Purpose of Data Processing

Art. 6(1)(b) GDPR: performance of a contract, if the inquiry relates to the conclusion or execution of a contract with us
Art. 6(1)(f) GDPR: legitimate interest, in all other cases

The data is processed exclusively for responding to your inquiry.

c. Retention Period and Possibility of Objection

The data is deleted immediately after your inquiry has been processed, provided there are no statutory retention obligations.
For personal data sent by email, this applies once the respective conversation with the user is concluded. A conversation is considered concluded when it is apparent from the circumstances that the relevant matter has been finally resolved. Data for which there is a statutory retention obligation is kept for the legally required period (6 years according to § 257(1) No. 2, (4) of the German Commercial Code – HGB).

7. Contact via Our Email Address, Telephone, or Fax

a. Description and Scope of Data Processing
Through the contact details provided on our website (telephone number, fax number, and email address), it is possible to contact us. In this case, the personal data transmitted by the user is stored. No data is passed on to third parties.

b. Legal Basis and Purpose of Data Processing

Art. 6(1)(b) GDPR: performance of a contract, if the inquiry relates to the conclusion or execution of a contract with us
Art. 6(1)(f) GDPR: legitimate interest, in all other cases

The data is processed exclusively for responding to your inquiry.

c. Retention Period and Possibility of Objection

8. Our Social Media Presence and Links on Our Website

8.1. Facebook

We maintain a presence on Facebook. When you visit our Facebook fan page, a direct connection is established with Facebook’s servers.
https://www.facebook.com/people/Schechtl-Maschinenbau-GmbH/100063754502277/#

Facebook is part of Meta Platforms Inc., One Hacker Way, Menlo Park, CA 94025, USA, and processes your data in the USA. For Europe, Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland is the responsible entity for Google services.

We have no influence on the collection and further processing of data by Meta.
Information on Facebook’s data protection can be found here:
https://de-de.facebook.com/privacy/policy/

The Facebook data processing terms, which refer to the Standard Contractual Clauses, can be found here:
https://www.facebook.com/legal/terms/dataprocessing

Meta is a member of the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA. This agreement certifies that participating U.S. companies provide an adequate level of data protection:
https://www.dataprivacyframework.gov/list

8.2. Instagram

We link to our Instagram profile on our website (Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA). Instagram is part of Meta Platforms Inc. in the USA. For Europe, the responsible entity is: c/o Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The link is displayed in the footer via the Instagram logo. Clicking the Instagram logo establishes a direct connection with Instagram’s servers:
https://www.instagram.com/schechtlmachines/?hl=de

We have no influence on the collection and further processing of data by Meta.
Information on Instagram’s data protection can be found here:
https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

8.3. Linkedin

We link to our LinkedIn profile on our website (LinkedIn Inc., 2029 Stierlin Court, Mountain View, CA 94043, USA). For Europe, the responsible entity is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

The link is displayed in the footer via the LinkedIn logo. Clicking the LinkedIn logo establishes a direct connection with LinkedIn’s servers:
https://de.linkedin.com/company/schechtl-maschinenbau-gmbh

We have no influence on the collection and further processing of data by LinkedIn.
Information on LinkedIn’s data protection can be found here:
https://de.linkedin.com/legal/privacy-policy

LinkedIn is a member of the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA:
https://www.dataprivacyframework.gov/list

8.4. Youtube

We operate a YouTube channel. The platform is provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

When you visit our YouTube channel:
https://www.youtube.com/channel/UCYjncwfG2AXRAqojpueDcPA?view_as=subscriber

we process personal data exclusively for analyzing user behavior through the statistics provided by YouTube and for communication with users who contact us via the public comment function. YouTube provides the following user data in aggregated and anonymized form:

Followers
Reach
User demographics

These statistics do not allow conclusions to be drawn about individual users.
Other contact options on YouTube can be found here:
https://www.youtube.com/t/contact_us

YouTube’s terms of service can be viewed here:
https://www.youtube.com/static?gl=DE&template=terms&hl=de

Google is a member of the EU–U.S. Data Privacy Framework, a data protection agreement between the EU and the USA:
https://www.dataprivacyframework.gov/list

We have no influence on the collection and further processing of data by Google.

9. Other Technologies

Encrypted Transmission
We use encryption (SSL/TLS) to securely transmit content. You can identify whether a website is transmitted securely by the lock symbol in your browser’s address bar.

IP Address Shortening
By shortening IP addresses, identifying users is made more difficult. Whenever possible, we implement this measure.

Data Security
We employ appropriate technical and organizational security measures to protect data against manipulation, loss, destruction, or unauthorized access. Our security measures are continuously updated in line with technological developments.

Links to Other Websites via Graphics or Text
Links provided by us generally lead directly to the specified target without additional information. External links leading to websites outside our offer are marked accordingly if this is not already clearly recognizable.

Redirected or Intermediary Links
A link may automatically redirect to a different website than requested or lead via another page without the user noticing. This is usually used to process visitor data or trigger actions without explicit notice.

Active Content
Active content on websites runs directly on the user’s device after loading and generally carries a security risk. Frequently used active content includes Java and JavaScript.
This website uses the JavaScript library jQuery to improve loading speed. Our website also uses active JavaScript content from external providers (web services). By accessing our website, these external providers may receive personal information about your visit. This may involve processing data outside the EU.
You can protect yourself by using browser extensions such as NoScript or uBlock Origin, or by disabling JavaScript in your browser. Note that this may limit functionality on visited websites.
More information on JavaScript: https://de.wikipedia.org/wiki/JavaScript#Verwendung

10. Embedded Fonts

Fonts are provided by external providers but are embedded locally. No connection to external servers is made, and no personal data (e.g., IP address) is transmitted.

11. Plugins

11.1 WordPress Plugins

We use various WordPress plugins for our website. Plugins are carefully selected to ensure GDPR compliance. No personal data is collected by the plugins we use.

12. Handling of Applicant Data

a) Description and Scope of Data Processing

Through the contact details provided on our website (address, phone, fax, and email), it is possible to send unsolicited applications or applications for advertised positions. You can also submit an application directly via our online application form linked in each job posting, including all required personal data and relevant documents.

b) Legal Basis and Purpose of Data Processing

Providing personal data in connection with an application is voluntary.
Processing of personal data and special categories of personal data is based on your consent.

The data is used for:

Contacting you regarding your application or unsolicited application
Initiating and establishing an employment relationship
Sending you personalized information about open positions according to your consent
Fulfilling legal obligations or defending against claims (proof obligations under the General Equal Treatment Act – AGG)

Legal basis for data processing:

Art. 6(1)(a) GDPR: consent, through voluntary submission of application documents
Art. 6(1)(b) GDPR and § 26 BDSG: processing for the recruitment process
Art. 6(1)(f) GDPR: legitimate interest for temporary storage of data in other cases

c) Disclosure to Third Parties

Within our company, only individuals and departments (e.g., functional departments, disabled employee representatives) that need your data to fulfill contractual and legal obligations have access.

d) Retention Period and Possibility of Objection

Your data is stored as long as necessary to fulfill the respective purpose or statutory retention obligations.

Data is retained for six months after the recruitment process ends (e.g., after notification of rejection).
With your consent, your data may be stored in our applicant pool for up to 24 months and then deleted.
Supporting documents (e.g., expense reimbursement) are archived according to tax regulations.
If an employment relationship results, relevant information is transferred to the personnel file.
You may withdraw your consent at any time.

Automated Individual Decision
We do not use purely automated processing to make decisions.

13. Data Processing in Third Countries

Data may be transferred to countries outside the European Economic Area (EEA) in connection with the cookies and social media services described above.

14. Links in Graphics or Text

Links provided by us generally lead directly to the target website without additional information. External links are marked accordingly if not already clearly recognizable.

15. Deletion of Data

Your data is stored as long as necessary to fulfill the purpose or statutory retention obligations, unless otherwise specified.

You withdraw your consent under Art. 6(1)(a) or Art. 9(2)(a) GDPR.
You object to processing under Art. 21(1) GDPR, and no overriding legitimate reasons exist, or under Art. 21(2) GDPR.
Data subject to statutory retention is kept for the legally required period (10 years according to § 257 HGB and § 146(2) AO).
Log files are deleted no later than six months, according to § 15(7) Telemedia Act (TMG).

16. Your Rights

As a user of our website, you have various rights under the GDPR (especially Arts. 15–18, 21):

Right of Access
You can request information under Art. 15 GDPR about your personal data processed by us. Please clarify your request to facilitate data collection. Note that your access rights may be restricted in certain circumstances under the law, e.g., § 34 BDSG.

Right to Rectification
If your data is inaccurate or incomplete, you can request correction under Art. 16 GDPR.

Right to Erasure
You may request deletion under Art. 17 GDPR, depending on whether the data is still necessary for legal obligations.

Right to Restriction of Processing
You may request restriction of processing under Art. 18 GDPR.

Right to Object
Under Art. 21 GDPR, you can object to the processing of your data for reasons related to your specific situation. Exceptions apply if processing is legally required.

Right not to be subject to automated decisions
Under Art. 22 GDPR, you have the right not to be subject to decisions based solely on automated processing, including profiling, which has legal or similarly significant effects.

Right to Lodge a Complaint
You can lodge a complaint with us if you believe your data protection rights were violated.

Right to Lodge a Complaint with a Supervisory Authority
You can also complain to a supervisory authority, especially in your EU residence, workplace, or the location of the alleged infringement, if you believe GDPR has been violated. The authority will inform you about the status and outcome of the complaint, including legal remedies under Art. 78 GDPR.

Responsible Supervisory Authority:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
PO Box 606
91511 Ansbach, Germany
Phone: +49 981 53 1300
Fax: +49 981 53 98 1300
Email:

SCHECHTL

LIVE

EXPERIENCE

OUR TRADE SHOWS

Schechtl Maschinenbau GmbH

Viehhauser Str. 4

D-83533 Edling

(Switchboard) +49 8071 5995-0

(Sales) +49 8071 5995-111

GET IN TOUCH