We emphasise that the transfer of data on the internet (e.g. e-mail communication) can never be totally secure. Preventing access by third parties to data cannot be totally guaranteed.
Name and Address of the Controller for the Data Processing
The Controller within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in European Union Member States and other data protection-related provisions is:
VSM · Vereinigte Schmirgel- und Maschinen-Fabriken AG
Tel. +49 (0) 511 3526 0
Fax. +49 (0) 511 3521 315
Name and Address of the Data Protection Officer
The Data Protection Officer of the Controller of the data processing is:
ds² Unternehmensberatung GmbH & Co. KG
Berliner Straße 1
Tel. +49 (0) 5421 30 89 518
For any questions and suggestions regarding data protection, any Data Subject can get in contact with our Data Protection Officer directly.
Collection, processing and use of personal data
Server log files
You can visit our website without needing to give any personal information. Every time you access our website, usage data is transmitted through your internet browser and stored in log data (server log files). This saved data includes IP address, date and time of download, name and URL of the downloaded file, web page from which the access takes place (referrer URL), browser information, operating system of the visiting computer, data volume transferred and the requesting provider. This data is used to ensure a smooth connection to the website, a convenient use of our website and for statistical, internal purposes.
Data collection for contract performance
Further personal data are only recorded if the user agrees in accordance with the legal regulations for this data collection or if a legally-regulated permission allows this. We use this personal data to answer enquiries from the user, to process contracts concluded with the user, and for any technical administration. Only those personal data are used whose processing is not legally excluded, unless there is an exception.
If you have any questions of any kind, you can contact us by using a form provided on the website for this purpose. It is necessary to provide a valid e-mail address so that we know from whom the request originates and in order to be able to respond to it. Further information can be provided voluntarily. The data processing for the purpose of contacting us is in accordance with Art. 6 para. 1 p. 1 item a of the GDPR based on your voluntarily consent given. The personal data collected by us for the use of the contact form will be automatically deleted after conclusion of the enquiry made by you.
Careers / Job Opportunities
In our career section, you have the opportunity to send us an unsolicited application or apply for advertised positions via a web form. For this purpose, we use the applicant platform rexx systems (https://www.rexx-systems.com/), which is operated by rexx systems GmbH, Süderstrasse 75-79, 20097 Hamburg, Germany. It is a platform through which job applications are made possible. When you call up the careers page of our website, the link included there establishes a connection to rexx systems to enable the technical transfer of the application documents. When the connection to rexx systems is established, data is transferred to rexx systems. When you visit the rexx systems website, rexx systems stores the IP address assigned to you by your Internet service provider as standard. Personal data that we need exclusively to process your application will only be stored if you provide it to us voluntarily as part of your application. The information you provide there is either voluntary or is marked with an asterisk (*) as mandatory. The mandatory information is absolutely necessary to process your application and to be able to contact you. The digital applicant file contains all the data entered by the candidate as well as the entire contact history. The data processing is carried out exclusively for the purpose of processing the application in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO on the basis of your voluntarily given consent or for the decision on the establishment of an employment relationship in accordance with § 26 para. 1 p. 1 BDSG. The personal data collected by us for the use of the form as well as the other files transmitted will be stored for 6 months after the application process has ended (rejection or recruitment) and then deleted.
Transfer of data
Transfer of your personal data to third parties for purposes other than those listed below will not take place. We only share your personal information with third parties if:
- you have expressly consented, according to Art. 6 para. 1 p. 1 item a of the GDPR to disclosure pursuant to Art. 6 para. 1 sentence 1 item f of the GDPR of that which is required in order to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data,
- in the event that disclosure pursuant to Art. 6 para. 1 p. 1 item c of the GDPR is a legal obligation, and
- this is legally permissible and is required, in accordance with Art. 6 para. 1 sentence 1 item b of the GDPR, for the fulfilment of contractual relationships with you.
Rights of the data subject
You have the right:
- in accordance with Art. 15 of the GDPR, to request information about the nature and extent of the personal data collected by us, in particular its processing, planned storage duration, retention and its transfer;
- in accordance with Art. 16 of the GDPR, to demand the immediate correction of incorrect personal data or completion of personal data stored by us;
- in accordance with Art. 17 of the GDPR, to demand the deletion of your personal data stored by us, except where the processing is required for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims; or alternatively, in accordance with Art. 18 of the GDPR, to demand a restriction of the processing of the data;
- in accordance with Art. 20 of the GDPR, to receive the personal data and to request its transfer to another data controller.
- in accordance with Art. 7 para. 3 of the GDPR, to revoke at any time the consent you have given us. As a result, we are not allowed to continue the data processing based on this consent in the future, and
- in accordance with Art. 77 of the GDPR, to complain to a supervisory authority. As a general rule, you can contact the supervisory authority for this.
Right of objection
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 item f of the GDPR, you have the right in accordance with Art. 21 of the GDPR to file an objection against the processing of your personal data provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without having to specify any particular situation. If you would like to exercise your right of revocation or objection, please send an e-mail to info@
We secure our website and other systems by means of technical and organisational measures against loss, destruction, access, modification or dissemination of your data by unauthorised persons. Despite regular checks, complete protection against all risks is not possible.
The site uses industry standard SSL (Secure Sockets Layer) encryption in several areas. This ensures the confidentiality of your personal information over the internet. If a single page of our website is encrypted, this will be indicated by the closed representation of the key or lock symbol in the lower status bar of your browser.
Processing is based on Art. 6 (1) item a of the GDPR from the legitimate interest in the above-mentioned purposes. However, this does not mean that we will receive any direct knowledge of your identity as the data will not be stored with any of your specific personal data.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or that a notice always appears before a new cookie is created. However, disabling cookies completely may mean that you cannot use all the features of our website.
Alternatively, you can click on the following link to prevent the processing of data by Google: Click here to be excluded from the Google Analytics evaluation process. Google is certified for the EU-US Privacy Shield data protection framework.
Social media services
On our website we use components of the XING network of Xing AG (hereinafter referred to as "Xing"), Dammtorstr. 29-32, 20354 Hamburg, Germany. This may include content such as images, videos, or text and function buttons that users use to notify their ‘like’ in regard to content to content creators, or subscribe to our posts. If the users are members of the Xing platform, Xing can assign the aforementioned contents and functions to the profiles of the users there.
We have included YouTube videos in our online offering, which are stored on http://www.YouTube.com and are directly playable from our website. These are all integrated in the "enhanced privacy mode", which means that if you do not play the video, no data about you as a user will be transmitted to YouTube. Personal data is only transmitted when you play the videos. We have no influence on this data transfer.
When you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customised website design. Such evaluation is carried out particularly (even for users who are not logged in) in order to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact Google in order to exercise this right.
For more information on the purpose and scope of the data collection and its processing by YouTube, please refer to the data protection statement. There you will also find further information about your rights and settings options for the protection of your data privacy: https://www.google.de/intl/us/policies/privacy. Google also processes your personal data in the USA and has subscribed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.