General information

Details of the data controller

Company: SPINNER automation GmbH

Legal representative(s): Dominik Jauch, Jörn Maier

Address: Elly-Beinhorn-Straße 4, 71706 Markgröningen

Data Protection Officer contact details: datenschutz(at)spinner-automation.de
 

General information on data processing

Data concerned:

Personal data is only collected if you provide it to us voluntarily. No other personal data is collected. Any processing of your personal data that goes beyond the scope of the legal grounds for processing will only take place on the basis of your explicit consent.

Purpose of processing: Performance of the contract.

Categories of recipients: 

• Public authorities where there are overriding legal provisions.
• External service providers or other contractors.
• Other external bodies, provided that the data subject has given their consent or that disclosure is permitted on grounds of overriding public interest.
   

Transfers to third countries: In the course of performing the contract, data processors located outside the European Union may also be used.

Duration of data storage: The duration of data retention is determined by statutory retention requirements and is generally 10 years. 
 

Specific information about the website

Usage data

When you visit our website, your web browser automatically sends data to our web server (for technical reasons). The following data is recorded during an active connection for communication between your web browser and our web server:

• Date and time of the request

• Name of the requested file

• The page from which the file was requested

• Access status (file transferred, file not found, etc.)

• Web browser and operating system used

• Full IP address of the requesting computer

• Amount of data transferred.

For technical security reasons, in particular to prevent attempts to attack our web server, we store this data temporarily. We are unable to identify individual persons on the basis of this data. After 30 days at the latest, the data is anonymised by truncating the IP address to the domain level, so that it is no longer possible to link it to an individual user. The data is also processed in anonymised form for statistical purposes; it is not cross-referenced with other databases or disclosed to third parties, even in part.

1. spinner-automation.com 
1.1. For each cookie 
1.1.1. Cookie 1 
Name _ga Value GA1.1.812999326.1764141458 Domain spinner automation com Expires 31 December 2026 
Purpose To identify the visitor using Google Analytics. The cookie stores a unique client ID and enables the user to be recognised across multiple page views. Legal basis Consent pursuant to Article 6 (1) (a) of the GDPR Retention period Per the browser, until 31 December 2026; usually two years 
1.1.2. Cookie 2 
Name _ga_5T1MMX8NR6 Value GS2.1.s1764141458$o1$g1$t1764141477$j41$l0$h0 Domain spinner automation com Expires 31 December 2026 
Purpose Session cookie for Google Analytics. It is used to store session information and link interactions within a session. Legal basis Consent pursuant to Article 6 (1 )(a) of the GDPR Retention period Per the browser, until 31 December 2026 
1.1.3. Cookie 3 
Name klaro Value {"youtubevimeo": true, "googleAnalytics": true, "coveto": true, "google maps": true, "robobox": true, "googleTagManager": true} Domain www spinner automation com Expires 26 November 2026 Purpose This value shows exactly which services the user has permitted via the consent banner. Each property in the JSON object represents a service. A value of 'true' means that the user has given their consent. 
Legal basis Technically necessary pursuant to Article 6 (1) (f) of the GDPR and Section 25 (2) of the TTDSG, as the cookie is essential for storing the consent selection. 
Retention period Per the browser, until 26 November 2026.
1.2. For every transmission of data relating to the website visitor (including their IP address) to recipients 
1.2.1. Google Analytics 
Name of the service provider 
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland 
Purpose of the transfer 
Measuring user behaviour on the website to analyse visits, sessions, devices and languages, and to improve the website. Among other things, the browser sends the client ID, language, screen resolution, browser information and the URL of the page visited to Google Analytics. 
Legal basis for the transfer 
Consent pursuant to Article 6 (1) (a) of the GDPR. As a collect request has been executed, this means that you have given your consent via the consent banner. 
1.2.2. Google Tag Manager 
Name of the service provider 
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland 
Purpose of the transfer 
Deployment and management of tags and scripts on the website. Google Tag Manager does not process measurement data itself, but forwards browser data to Google in order to deliver and control scripts and configurations. 
Legal basis for the transfer 
Consent under Article 6 (1) (a) of the GDPR: The GTM loads additional services such as gtag and Analytics on your site; therefore, consent is required as soon as it manages tags that are not strictly technically necessary.
 

2. robobox.de 

2.1. For each cookie 

2.1.1. Cookie 1 
Name __Secure ROLLOUT TOKEN Value CO Q5Kyz rbmQEQ8ZmlmqOPkQMY87LJmqOPkQM Domain youtube com Expires 25 May 2026 
Purpose This cookie is set by YouTube to enable and maintain the technical functionality of embedded videos. It is used for load balancing and to host the video platform. Legal basis Consent pursuant to Article 6 (1) (a) of the GDPR, as embedded YouTube content may only be loaded with the user’s consent. Retention period until 25 May 2026 
2.1.2. Cookie 2 
Name __Secure YEC Value empty Domain youtube.com Expires 2 March 2023 
Purpose Managing various YouTube settings. It supports the display and functionality of embedded YouTube content. Legal basis Consent pursuant to Article 6 (1) (a) of the GDPR Retention period Expired 
2.1.3. Cookie 3 
Name _ga Value GA1.1.291212249.1764141485 Domain robobox.de Expires 31 December 2026 
Purpose Standard Google Analytics cookie used to recognise a user. It stores a unique client ID. Legal basis Consent pursuant to Article 6 (1) (a) of the GDPR Retention period until 31 December 2026
2.1.4. Cookie 4 
Name _ga N51RER1H6L Value GS2.1.s1764145298 o2 g0 t1764145307 j51 l0 h0 Domain robobox de Expires 31 December 2026 
Purpose Stores session and interaction data for Google Analytics. Legal basis Consent pursuant to Article 6 (1) (a) of the GDPR Retention period until 31 December 2026 
2.1.5. Cookie 5 
Name _ga RLR005J0SL Value GS2.1.s1764145295 o2 g0 t1764145307 j48 l0 h0 Domain robobox de Expires 31 December 2026 
Purpose Session cookie for the Google Analytics property RLR005J0SL for session analysis. Legal basis Consent pursuant to Article 6 (1) (a) of the GDPR Retention period until 31 December 2026 
2.1.6. Cookie 6 
Name _ga V97XVNWGGJ Value GS2.1.s1764145295 o2 g0 t1764145295 j60 l0 h0 Domain robobox de Expires 31 December 2026 
Purpose Session cookie for Google Analytics property V97XVNWGGJ. Legal basis Consent pursuant to Article 6 (1) (a) of the GDPR Retention period until 31 December 2026
2.1.7. Cookie 7 
Name ARRAffinity Value cc8dfca5e2a9a3e5d992554b0bc8c3b81fbfa2ad6a1a0f36292c6c2efb8d8d3c Domain portal.combeenation.com Expires Session 
Purpose This cookie is set by Azure to ensure that the user remains connected to the same server throughout a session. It ensures technical stability. Legal basis Technically necessary: Article 6 (1) (f) of the GDPR and Section 25(2) of the TTDSG Retention period Until the end of the session 
2.1.8. Cookie 8 
Name ARRAffinitySameSite Value cc8dfca5e2a9a3e5d992554b0bc8c3b81fbfa2ad6a1a0f36292c6c2efb8d8d3c Domain portal.combeenation.com Expires Session 
Purpose Same functionality as ARRAffinity, with the SameSite extension for robust session management. Legal basis Technically necessary, Article 6 (1) (f) GDPR Retention period Until the end of the session 
2.1.9. Cookie 9 
Name bcookie Value v=2 and an ID Domain linkedin.com Expires 26 November 2026 
Purpose LinkedIn browser identification cookie used to display embedded social media features. Legal basis Consent, Article 6 (1) (a) of the GDPR Retention period until 26 November 2026
2.1.10. Cookie 10 
Name li gc Value long encoded value Domain linkedin com Expires 25 May 2026 
Purpose Stores the consent decision for LinkedIn services and ads. Legal basis Technically necessary for consent management: Article 6 (1) (f) of the GDPR and Section 25 (2) of the TTDSG Retention period Until 25 May 2026 
2.1.11. Cookie 11 
Name lidc Value encoded Domain linkedin.com Expires 27 November 2025 
Purpose Routing and performance management for embedded LinkedIn content. Legal basis Consent, Article 6 (1) (a) of the GDPR Retention period until 27 November 2025 
2.1.12. Cookie 12 
Name NID Value encoded Google identifier Domain google.com Expires 28 May 2026 
Purpose Saves various Google settings to ensure that embedded Google services are displayed correctly. Legal basis Consent, Article 6 (1) (a) of the GDPR Retention period until 28 May 2026
2.1.13. Cookie 13 
Name pll language Value de Domain robobox de Expires 26 November 2026 
Purpose Saves the user's language selection for the page. Legal basis Technically necessary, Article 6 (1) (f) GDPR Retention period Until 26 November 2026 
2.1.14. Cookie 14 
Name real cookie banner v3 Value encoded consent data Domain robobox de Expires 26 November 2026 
Purpose Saves the selection in the cookie banner. Legal basis Technically necessary: Article 6 (1) (f) of the GDPR and Section 25(2) of the TTDSG Retention period Until 26 November 2026 
2.1.15. Cookie 15 
Name real cookie banner v3 gcm Value consent values Domain robobox de Expires 26 November 2026 
Purpose Stores granular consent categories such as storage analytics, storage and others. Legal basis Technically necessary, Article 6 (1) (f) GDPR Retention period Until 26 November 2026
2.1.16. Cookie 16 
Name VISITOR INFO1 LIVE Value weHcOKZMQEs Domain youtube.com Expires 25 May 2026 
Purpose To measure YouTube user preferences and improve video performance. Legal basis Consent, Article 6 (1) (a) of the GDPR Retention period until 25 May 2026 
2.1.17. Cookie 17 
Name VISITOR PRIVACY METADATA Value encoded Domain youtube.com Expires 25 May 2026 
Purpose Stores privacy and consent settings for YouTube embeds. Legal basis Consent, Article 6 (1) (a) of the GDPR Retention period until 25 May 2026 
2.1.18. Cookie 18 
Name YSC Value _ab0jotn184 Domain youtube.com Expires Session 
Purpose YouTube session cookie used to store a user’s video interactions within a session. Legal basis Consent, Article 6 (1) (a) of the GDPR Retention period Until the end of the session

2.2. For every transmission of data relating to the website visitor (including their IP address) to recipients 

2.2.1. Google Analytics 
Name of the service provider 
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland 
Purpose of the transfer 
In a collect request, the browser sends information such as the client ID, the IP address (truncated if enabled), browser type, device information, screen resolution, language, referrer, the URL accessed, and event information such as page views or user interactions 
This data is used to carry out statistical analyses of user behaviour and to optimise the website. 
Legal basis for the transfer 
Consent pursuant to Article 6 (1) (a) of the GDPR. No collect requests will be sent without consent.

2.2.2. Google Tag Manager 
Name of the service provider 
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland 
Purpose of the transfer 
When the gtag.js file is loaded, technical browser data such as IP address, browser type, operating system, language, screen resolution and the page being viewed is sent to Google. The transmission is used solely to load and initialise the tracking library and to provide settings for Google Analytics or other Google services. 
Legal basis for the transfer 
Consent pursuant to Article 6 (1) (a) of the GDPR: The gtag file is only loaded if the user has given their consent via the cookie banner.
 

Information on other data processing procedures

Specific details regarding the application process

Data concerned: Application details

Purpose of processing: Conducting the recruitment process.

Categories of recipients: 

• Public authorities where there are overriding legal provisions.
• External service providers or other contractors, including for data processing and hosting.
• Other external bodies, provided that the data subject has given their consent or that disclosure is permitted on grounds of overriding public interest.

Transfers to third countries: In the course of performing the contract, data processors located outside the European Union may also be used, including email providers. 

Duration of data storage: Application data is usually deleted within four months of the decision being communicated, unless consent has been given for the data to be stored for a longer period as part of inclusion in the applicant pool.
 

Specific information regarding the processing of customer data/prospective customer data

Data concerned: Data provided for the purpose of fulfilling the contract; where applicable, additional data processed on the basis of your explicit consent.
Purpose of processing: Contract management, including quotations, orders, sales and invoicing, and quality assurance.

Categories of recipients:

• Public authorities where there are overriding legal provisions
• External service providers or other contractors, including those providing data processing and hosting services, as well as those responsible for dispatch, transport and logistics, and service providers for the printing and dispatch of information.
• Other external parties, provided that the data subject has given their consent or where disclosure is permitted on the grounds of an overriding legitimate interest, including for credit checks in the case of purchases on account, for the electronic dispatch of information, and for quality assurance purposes. 

Transfers to third countries: In the course of performing the contract, data processors located outside the European Union may also be used, including email providers. 

Duration of data storage: The duration of data retention is determined by statutory retention requirements and is generally 10 years. 
 

Specific information regarding the processing of employee data

Data concerned: Data provided for the purpose of fulfilling the contract; where applicable, additional data processed on the basis of your explicit consent.

Purpose of processing: Performance of the contract within the framework of the employment relationship. 

Categories of recipients: 

• Public authorities where applicable legislation takes precedence, including the tax office, social security authorities and the employers’ liability insurance association. 
• External service providers or other contractors, including those involved in data processing and hosting, payroll accounting, travel expense claims, insurance services and vehicle use. 
• Other external parties, provided that the data subject has given their consent or where disclosure is permitted on the grounds of an overriding legitimate interest, including for the purposes of business development and insurance benefits. 

Transfers to third countries: In the course of performing the contract, data processors located outside the European Union may also be used, including email providers. 

Duration of data storage: The duration of data retention is determined by statutory retention requirements and is generally 10 years. 
 

Specific details regarding the processing of supplier data

Data concerned: Data provided for the purpose of fulfilling the contract; where applicable, additional data processed on the basis of your explicit consent.

Purpose of processing: Contract execution, including enquiries, procurement and quality assurance.

Categories of recipients:

• Public authorities where there are overriding legal provisions, including the tax office and customs. 
• External service providers or other contractors, including for data processing and hosting, bookkeeping and payment processing. 
• Other external bodies, provided that the data subject has given their consent or that disclosure is permitted on grounds of overriding public interest.

Transfers to third countries: In the course of performing the contract, data processors located outside the European Union may also be used, including email providers. 

Duration of data storage: The duration of data retention is determined by statutory retention requirements and is generally 10 years.

Further information and contact details
In addition, you may at any time exercise your right to access, rectify or erase your data, or to restrict processing, or to object to processing, as well as your right to data portability. Here you can contact us by email or post. You also have the right to lodge a complaint with the data protection supervisory authority.