Privacy Policy  

As of: Jan. 2024 


1. Scope of application 
  • Customer communication, quotes, and negotiations 
  • Job applications 
2. Controller 

Unless otherwise stated, 

Granulat GmbH 
Dachsweg 31-33 
53842 Troisdorf-Spich 

Tel.: 02241 96360 

– following „Granulat“, „we“,  „our“ –  

is the controller of personal data within the scope of this privacy policy.


3. Contact details of our data protection officer 

Hagen Consulting & Training GmbH 
Mr. Pascal Riske 
Luisenstraße 95 
53721 Siegburg 

Tel.: 02241 – 39747-0 

4. Processing on 

When you visit and use, we must temporarily process your IP address and other information (date and time of access, request method & requested files, data volume, status code, user agent [information about operating system, browser type and version]). Your web requests are stored in the log files of our web servers for security purposes. 

The legal basis for the processing of personal data for the technical delivery of & storage in the log files is Article 6(1)(f) GDPR. 

The log files are automatically deleted after 7 days. 


Hetzner Online GmbH 
Industrie Straße 25 
91710 Gunzenhausen 

5. Direct communication 

If you contact Granulat directly (e.g. by e-mail, telephone, web form), we will process the personal data you provide to the extent necessary to respond to your contact request and any requested action. The legal basis is Art. 6 (1)(b) GDPR. 

Insofar as your contact request is not necessary for the fulfillment of a contract with Granulat or for the implementation of pre-contractual measures, Art. 6 (1)(f) GDPR is the legal basis for the processing of your data. Our legitimate interest is to process the message received and answer your request. 

If we process the personal data transmitted by you as part of the contact request on the basis of your consent, Art. 6 (1)(a) GDPR is the legal basis. 

Your message will be stored until processing has been completed. It will only be stored for longer if we are entitled or obliged to do so in individual cases. 

If you contact Granulat via, the communication will necessarily take place via servers of the Google LLC / YouTube LLC: 

–        Google Ireland Limited, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland 

who is responsible for the processing of personal data of data subjects, as a recipient necessarily obtains knowledge of the content and processes data (including IP address, user agent, device information, browsing history, location, search queries, preferred times of use, last login, likes) under its own responsibility and for its own purposes. Confidential communication is not possible when using these services. Further information about handling user data can be found in the data protection declaration of Google under: 

6. Application process 

We process your application data to assess your suitability and qualifications for the position for which you are applying. The data we process depends on the data you provide. We will only use your contact details to keep you informed about the progress of the application process. We will only use all other information contained in the application documents to determine your suitability for the vacant position. The legal basis is Art. 6 (1)(b) in conjunction with Art. 88 GDPR, § 26 BDSG. 

If your application documents contain special categories of personal data, e.g. information on health or ethnic origin, we also base the processing on Art. 9 (2)(b) GDPR, Section 26 (3) sentence 1 BDSG. 

Your application data can be accessed by the assigned HR managers and the IT administration of Granulat. 

Storage duration 

Your application data will be deleted depending on the outcome of your application. If, following the application process, you are hired for a job, apprenticeship, internship or other employment relationship, the data will be retained for the time being and transferred to your personnel file. Otherwise, your application process will end when you receive a rejection. In the event of a rejection, we will store your data for a period of six months starting from the day of notification of the rejection decision, unless longer storage is required for the defense of legal claims. 

Application pool 

If you consent (Art. 6 (1)(a) GDPR), we may include you in a subsequent selection process after your application has been rejected. Your consent is voluntary and can be revoked at any time. 

7. Rights of the data subject 

In accordance with Art. 15 GDPR, you have the right to request information about your personal data that we process. 

If incorrect personal data is processed, you have the right to rectification in accordance with Art. 16 GDPR. 

If the legal requirements are met, you have the right to erasure or restriction of processing of the data concerned (Art. 17 and Art. 18 GDPR). 

Under the conditions of Art. 20 GDPR, you have a right to data portability. 

You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. 

In accordance with Art. 21 GDPR, you have the right to object to the processing of data concerning you at any time for reasons arising from your particular situation. 

In accordance with Art. 77 GDPR, you have the right to lodge a complaint. You can exercise this right with the competent supervisory authority: