The responsible body within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is
Gebrüder Dorfner GmbH & Co. KG
Scharhof 1
D-92242 Hirschau
Telephone: + 49 (0)96 22/82-0
E-mail: info@dorfner.com
Your rights as a data subject
You can exercise the following rights at any time using the contact details provided for our data protection officer:
If you have given us your consent, you can revoke it at any time with effect for the future.
You can contact a supervisory authority at any time with a complaint, e.g. the competent supervisory authority in the federal state of your place of residence or the authority responsible for us as the controller.
A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collection of general information when visiting our website
Type and purpose of processing:
When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.
They are processed for the following purposes in particular:
We do not use your data to draw conclusions about your person. Information of this kind may be statistically evaluated by us in order to optimize our website and the technology behind it.
Legal basis:
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage duration:
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.
Provision prescribed or required:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, an objection is excluded.
Contact form
Nature and purpose of the processing:
Legal basis:
The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).
By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your request and for possible follow-up questions.
If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
Recipient:
Recipients of the data may be processors.
Storage duration:
Data will be deleted no later than 6 months after the request has been processed.
If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.
Provision prescribed or required:
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.
Use of Matomo
Nature and purpose of the processing:
This website uses Matomo (formerly Piwik), an open source software for the statistical analysis of visitor access. The provider of the Matomo software is InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand.
Matomo uses cookies, which are text files placed on your computer, to help the website analyze how users use the site.
The information generated by the cookie about your use of the website is stored on a server in Germany.
The IP address is anonymized immediately after processing and before it is stored. You have the option of preventing the installation of cookies by changing the settings of your browser software. We would like to point out that if you do so, you may no longer be able to use all the functions of this website.
You can decide whether a unique web analysis cookie may be stored in your browser to enable the operator of the website to collect and analyze various statistical data.
Further information on the privacy settings of the Matomo software can be found at the following link: https://matomo.org/docs/privacy/.
Legal basis:
The data is processed on the basis of the user’s consent (Art. 6 para. 1 lit. a GDPR).
Recipient:
Recipients of the data may be processors.
Storage duration:
The data will be deleted as soon as it is no longer required for our recording purposes.
In our case, this occurs after the following period: _pk_ses.47.15e5 (storage period: 30 seconds)
_pk_id.47.15e5 (storage period: 13 months).
Provision prescribed or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.
Withdrawal of consent:
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
Profiling:
With the help of the tracking tool Matomo, the behavior of visitors to the website can be evaluated and their interests analyzed. We create a pseudonymous user profile for this purpose.
Use of script libraries (Google Webfonts)
Nature and purpose of the processing:
In order to display our content correctly and graphically appealing across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) to display fonts on this website.
The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/
Legal basis:
The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Recipient:
Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – although it is currently unclear whether and for what purposes – that the operator collects Google data in this case.
Storage duration:
We do not collect any personal data through the integration of Google Web Fonts.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision prescribed or required:
The provision of personal data is neither legally nor contractually required. However, it is not possible to display the content of standard fonts correctly without it.
Withdrawal of consent:
The programming language JavaScript is regularly used to display the content. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.
Embedded YouTube videos
Nature and purpose of the processing:
We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video is started, the provider uses cookies that collect information about user behavior.
Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider’s privacy policy, where you will also find further information on your rights in this regard and setting options to protect your privacy(https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework
Legal basis:
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Recipient:
Accessing YouTube automatically triggers a connection to Google.
Storage period and withdrawal of consent:
If you have deactivated the storage of cookies for the Google Ad program, you will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.
Further information on data protection at “YouTube” can be found in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision prescribed or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.
Google AdWords
Nature and purpose of the processing:
Our website uses Google Conversion Tracking. The company operating the Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via an advertisement placed by Google, Google AdWords will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an ad placed by Google.
If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
Legal basis:
The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Recipient:
Each time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties.
Our company does not contain any information from Google that could be used to identify the data subject.
Storage duration:
These cookies lose their validity after 30 days and are not used for personal identification.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Withdrawal of consent:
If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this – for example, by setting your browser to generally deactivate the automatic setting of cookies or to set your browser so that cookies from the domain “googleleadservices.com” are blocked.
Please note that you may not delete the opt-out cookies as long as you do not wish measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.
Provision prescribed or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Processors used
Changes to our privacy policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Questions for the data protection officer
If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organization directly:
ITAGO-Systems GmbH
Stefan Michl
Johann-Vaillant-Str. 5
93426 Roding
Phone: +49 (0) 9461 9131 94
E-mail: stefan.michl@itago.de
Sources: Our privacy policy was created using various data protection generators, including AdSimple and ActiveMind.
Privacy policy for applicants (m/f/d)
Thank you for your interest in working for the Dorfner Group. We take the protection of your private data very seriously and treat the data entrusted to us in strict confidence in accordance with the applicable data protection regulations and handle it responsibly. We would therefore like to take this opportunity to inform you how we implement the provisions of data protection and what information we collect during your application and how it is used.
With this data protection information for applications to us, we would like to inform you, in addition to our general data protection declaration, which personal data we collect, store and process as part of the application process. Please note that e-mail communication is currently unencrypted.
Collection and processing of your personal data in the application process
We require some personal data for your application, such as your name and e-mail address. We will use your data in accordance with the following provisions as part of the application process and pass your data on to the employees involved in the selection process, insofar as this is necessary for the specific application process or you have given your separate consent, e.g. for inclusion in the applicant pool.
Intended use
The personal data and documents you provide during the application process will be collected, processed and used by us exclusively for the purpose of processing your application and in the recruitment process. Your data will be stored and processed by the Dorfner Group in accordance with the applicable data protection regulations and will not be passed on to third parties. Your data will be processed to fill vacancies in the Group at its locations in Hirschau and Amberg. The legal basis for this data processing is Art. 6 Para. 1 b) GDPR.
Recruitment process
Vacancies are filled at the Dorfner Group in cooperation with the responsible employee in our HR department and with the local employee managers. The selection and exclusion of applications is not automated by individual decision. If we have other vacancies to fill at the same time as the position you have chosen, which clearly match your applicant profile, we may also forward your application to these responsible employees. We would like to offer you the best possible opportunities for your application, even for positions that may not yet have been published or have only just been published. The legal basis for this forwarding is Art. 6 para. 1 f) GDPR, based on our interest in finding the most suitable applicants for our positions.
If you do not agree to your application being forwarded, please let us know when you submit your application. All employees involved in our recruitment process are obliged to maintain confidentiality in accordance with the GDPR.
Your data will be used exclusively for internal job matching.
Applicant pool
If you cannot currently be offered a vacant position and we come to the conclusion on the basis of your profile that your application could also be of interest for other areas of application, your application data can be stored in our applicant pool for up to 12 months in order to offer you other interesting positions if necessary.
Your consent is required for inclusion in our applicant pool. The legal basis for this data processing is Art. 6 para. 1 a) GDPR.
You can revoke this declaration of consent at any time with effect for the future. The legality of the processing carried out on the basis of this declaration of consent until revocation remains unaffected. The submission of this declaration of consent is on a voluntary basis. If you do not wish to be included in the applicant pool, you will not suffer any disadvantages as a result.
Retention periods
If your application is successful, the data you provide may be used for the employment relationship. In the event of an unsuccessful application, we will store your personal data and documents in our applicant database for 6 months. After these 6 months, we will delete your data from our applicant database. Candidate profiles that have been included in our applicant pool will be deleted from the applicant pool after 12 months.
Withdrawal of the application
You can withdraw your application at any time. To do so, please send an email to karriere@dorfner.com. Please note that for legal reasons it is not possible for us to delete all data relating to your application immediately, as we must retain certain data for the aforementioned period in order to comply with legal requirements.
Your rights
You have the right to information about the processing of personal data concerning you, a right to data portability and, if applicable, rights to erasure, rectification, restriction of processing and/or objection to processing as well as a right to lodge a complaint with a supervisory authority in your place of residence (see Art. 77 GDPR). Further information can be found in the general data protection declaration above; for specific questions on the subject of data protection, please contact the Dorfner Group’s data protection officer:
Data security
It is important to the Dorfner Group to ensure the highest possible level of protection for your personal data. All personal data collected and processed by us as part of an application is protected by technical and organizational measures against unauthorized access, loss, destruction and manipulation. The transmission of your online application between your local browser and our applicant portal is encrypted via https. Our security measures are continuously revised in line with technological developments.
Supplementary regulations/ General provisions
In addition to this privacy policy for our applicant portal, our general privacy policy applies. This can be found at the top of this page. The constant development of the Internet makes it necessary to adapt our data protection principles from time to time. We therefore reserve the right to make corresponding changes at any time. If you have any questions or suggestions regarding our application process, please contact our HR department by email (karriere@dorfner.com).
Gebrüder Dorfner GmbH & Co. KG
A company of the Dorfner Group
Scharhof 1, D-92242 Hirschau
© Germany 2025
