K+S Aktiengesellschaft welcomes you to our website www.kpluss.com. Thank you for your interest in our company, its products and services. The protection of your privacy in the processing of personal data is an important concern for us which we respect in all of our business relationships. Our data processing is based on the principles of lawfulness, purpose linkage, accuracy, data minimization and storage limitation, transparency and the protection of confidentiality and integrity.
This data privacy statement explains which of your personal data we record and store on this website as well as the purposes for which we do this and the legal basis. This website may include links not covered by this data privacy statement.
Logging of access to the website
What happens when you use our website?
If you use this website for informational purposes only, i.e. you do not register yourself on it or otherwise transfer information, we only collect the personal data your browser transfers to our server. When you choose to visit our website, we collect the following data:
- the IP address;
- Date and time you retrieve it;
- The region (not the address) from which the IP address accesses the website;
- Browser language, browser type (e. g. Chrome, Firefox, Safari) and version;
- Operating system;
- Device type (e.g. mobile device, desktop computer, tablet);
- Browsing behavior on the website (e.g. when was the website visited, which parts of the website were clicked, how much time was spent on the website);
- The website from which the request came.
We process and store this data to ensure the site works properly, to improve its content and to create statistical analyses, based on the aggregated data on surfing. We also process and store this data in order to analyse the technical operation of the site and ensure that our information technology systems are secure.
Our legitimate interest in data processing pursuant to Article 6(1) letter f GDPR is thus the necessity to display this website to you and ensure that it is stable and secure.
Cookies are only stored for as long as is needed for their respective purpose.
You have the opportunity to register on our website. Doing so involves providing us with personal data so that you can use content or services that, due to the nature of the matter, can only be offered to registered users. Which personal data is transferred to us depends on the respective form used for registration. The personal data you enter is collected and stored exclusively for our own purposes. You can amend the personal data you provided during registration at any time or have it removed in full from our database, unless this conflicts with statutory obligations to retain data. We can pass the personal data onto one or more contract processors, for example a parcel delivery service, which may also use that data solely for internal purposes associated with our operations.
When you register on our website, the IP address assigned to you by your Internet Service Provider (ISP) the date and the time of registration are stored. This data is stored simply to prevent any misuse of our services. If necessary, it may be used to investigate criminal offences that have been committed. Thus, we have to store this data to protect ourselves. Our legitimate interest in processing the data pursuant to Article 6(1) letter f GDPR, if you have not in any case consented to the storage of your data. We do not data pass this data onto third parties unless there exists a legal obligation to do so or doing so serves the purposes of law enforcement. Your user account and the data it contains are automatically deleted by us 3 years after your last login, unless this conflicts with statutory obligations to retain data.
On our website you have the opportunity to subscribe to a free newsletter. When you register for the newsletter, the data from the form is transferred to and stored by us.
When you register for the newsletter, we also store the IP address issued by your Internet Service Provider (ISP) of the computer system you are using when you register, as well as the time and data of registration. It is necessary to collect this data in order to be able to check the (possible) misuse of your email address at a later point in time and thus protect ourselves in law.As a double opt-in procedure, a confirmation mail is sent to the email address you initially enter to which the newsletter is to be sent. This confirmation email is used to check whether the owner of the email address has authorized receipt of the newsletter.
The personal data collection when you register for the newsletter is used exclusively for the dispatch of our newsletter. Additionally, subscribers to the newsletter may be sent information by email if this is necessary for the operation of the newsletter service or for registration for it. This might be the case if there were changes to the newsletter offering or technical modifications. No personal data collected in relation to the newsletter service is passed onto third parties.
You can cancel the subscription to our newsletter at any time. You can withdraw your consent to the storage of personal data, granted to use for dispatch of the newsletter, at any time. Each newsletter contains a link via which you can withdraw your consent. You can also communicate your withdrawal of consent to us in other ways.
The legal basis for the processing of data after your registration for the newsletter is your consent pursuant to Article 6(1) letter a GDPR.
The data is deleted as soon as it is no longer needed to achieve the purpose for which it was collected. Accordingly, your email address and your other information in the registration form are stored for as long as the newsletter subscription is active. The other personal data collected in connection with the registration process is normally deleted after a period of 7 days.
Our website includes email addresses and contact forms enabling you to contact our company quickly by electronic means and to communicate with us directly. If you contact us by email or using a contact form, the personal data you transfer to us is automatically stored. Such personal data transferred by you to us on a voluntary basis is used for the purposes of processing your enquiry or contacting you. You can see from the respective contact form which data is collected for that form. We also store the IP address issued by your Internet Service Provider (ISP) of the computer system you are using when you register, as well as the time and data of registration. It is necessary to collect this data in order to be able to check the (possible) misuse of your email address at a later point in time and thus protect ourselves in law.
This personal data is not passed onto third parties.
The legal basis for the processing of data is your consent pursuant to Article 6(1) letter a GDPR. If you contact us with the aim of concluding a contract, Article 6(1) letter b GDPR is an additional legal basis for the processing. Once your enquiry has been processed, your data is deleted. This is the case when it can be seen from the circumstances that the matter in hand has been fully dealt with, unless deletion of the data conflicts with statutory obligations to retain data.
Electronic application at K+S
To apply via our online portal, it is necessary to create a user profile, which requires personal data. The personal data you enter, is treated confidentially at all times and used for application procedures only and always compliant with the applicable data protection policies. Your data will only be used for application processes and future openings, if you additionally approve this during the application process.
Your application data is edited from HR employees only and if needed, from employee representatives, who are involved in the recruiting process, in compliance with the Works Constitution Act. These can be employees of the K+S Aktiengesellschaft, next to employees of the company you are applying to, to whom your data will be forwarded in order to process your application.
If your application is declined, we will delete your data, as soon as the application process is completed or if applicable, the retention period regulated by the country you are applying to is expired. If you give us your consent, we will store your data in our candidate pool for another year. Only then we can offer you another position at a later stage.
If your application is successful, your data is further processed in our personnel system.
In case you are no longer interested in a vacancy at the K+S, you can withdraw your application in your ‘’candidate profile’’ or reach out to the direct contact person. The creation of a candidate profile is optional. In case you chose to withdraw your application, we will delete your data after 6 months.
Confirmation of the data privacy statement
After choosing ‘Yes, I have read the data protection policy and I accept it.’, you confirm and agree to the data protection information and give your consent to the storage as well as usage of your personal data provided.
Other third-party plugins
Use of Friendly Captcha
Our website uses the service "Friendly Captcha". This service is an offer of Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany. The legal basis for this data processing is Art 6 (1) lit. f GDPR. Our legitimate interest and the purpose of the data processing is to protect ourselves from spam messages generated by bots (automated programs). The data transfer to Friendlycaptcha only starts when you click on the button to start the "anti-robot verification". For more information on how Friendly Captcha works, please visit https://friendlycaptcha.com.
Use of Google Maps
This website uses Google Maps API, a map service of Google Inc. (“Google”), to display an interactive map and to create route maps. Google Maps is operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
When you access Google Maps, information about your use of this website (including your IP address) may be sent to a Google server in the United States and stored there. We have no influence and therefore cannot assume any responsibility for the further processing and use of the data by Google.
Google Web Fonts
Our website uses the “web fonts” provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland for the uniform display of fonts. As soon as you visit a page, your browser will load the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, your browser must connect to the Google servers. This transmits the information that our website was accessed via your IP address to Google. We use Google Web Fonts so that our website is displayed consistently and appealingly on different devices. This is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If you use a browser that does not support web fonts, our website will be displayed with a standard font of your computer.
Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's data privacy statement: https://www.google.com/policies/privacy/
Pseudonymized usage profiles with Piwik PRO (without cookies)
We use the web analytics software PIWIK PRO Analytics Suite from Piwik PRO GmbH, Kurfürstendamm 21, 10719 Berlin ("Piwik PRO") on our website to analyze visitor flows and user behavior.
The information collected includes, for example, the visitor's IP address, operating system, browser ID, browsing activity and other information. You can find a detailed list in PIWIK's Help Center.
We calculate metrics such as bounce rate, page views, sessions and the like to understand how our website is used.
We host our solution on Microsoft Azure within the EU, and store the data for 25 months.
The legal basis for our data processing is our legitimate interest according to Art. 6 para 1 lit f DSGVO. Our legitimate interest is to analyze user flows and visitor behavior to improve our website, as described above.
You can object to our data processing at any time and thus prevent the actions you take on our website from being analyzed and linked. This will protect your privacy, but will also prevent us from learning from your actions and improving usability for you and other users.
Links to websites and third-party content
Our website includes links to other pages on the Internet. We have no influence on the form of the pages linked to from our website and are not responsible for their content. We recommend you read the data privacy policies of such third-party websites carefully.
Length of time for which your data is stored
We only store your data for as long as is necessary for the respective purposes, specifically either as described in the data privacy statement or required by law. After it has fulfilled the purpose, the data concerned is deleted in accordance with the applicable provisions of data protection law.
Measures for the security of your data
We implement technical and organizational security measures to protect your data managed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are constantly being improved as technology develops.
Contact details of the controller for data processing and of the data protection officer
34131 Kassel, Germany
Phone +49 561 9301 0
is the controller for data processing.
You can contract the data protection office of the K+S Aktiengesellschaft at
34131 Kassel, Deutschland
Telefon +49 561 9301 1991
Your rights with regard to the processing of your data
In respect of the processing of your personal data, the applicable data protection legislation grants you vis-à-vis us extensive rights of access and intervention. These are:
- Right to access: You have a right to access information about your personal data processed by us.
- Right to rectification: You have a right to rectification without undue delay of inaccurate data concerning you and/or completion of your incomplete data stored by us.
- Right to erasure: You have the right to demand your personal data be deleted if the prerequisites of Article 17(1) GDPR are fulfilled.
- Right to restriction of processing: You have the right to demand the restriction of processing of your personal data if the prerequisites of Article 18(1) GDPR are fulfilled.
- Right to notification: If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis us, we are obliged to inform all recipients to whom the relevant personal data was disclosed of this rectification, erasure or restriction of processing unless this proves impossible or involves disproportionate effort. You have the right to be notified about these recipients.
- Right to data portability: You have the right to receive in a structured, standard and machine-readable format your personal data, which you have provided to us, or demand it be transmitted to another controller insofar as that is technically feasible.
- Right to withdrawal of consent granted: At any time you have the right to withdraw consent that was once granted to the processing of data with effect for the future. If such consent is withdrawn, the data concerned is deleted without undue delay. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent before the withdrawal.
- Right to complain: You have the right to lodge a complaint with a supervisory authority, for example with the Data Protection Officer of the Federal State of Hesse, regarding our processing of your data.
- Right to object: if as part of the weighing of interests your personal data is processed on the basis of our overriding legitimate interest, you have the right at any time, on grounds relating to your particular situation, to object to this processing with effect for the future.
Amendments of the data privacy directive
We reserve the right to amend this data privacy statement at any time. We therefore recommend that you review the data privacy statement regularly.
Status: May 2018