1. CONTACT DETAILS OF THE CONTROLLER AND DATA PROTECTION OFFICER
1.2 DATA PROTECTION OFFICER:
The data protection officer can be contacted via the address above or by email at firstname.lastname@example.org
2. PURPOSES OF THE PROCESSING
2.1 CONSENT (ARTICLE 6 PARAGRAPH 1A GDPR)
Processing of personal data for certain purposes (for example sending our newsletter by email after clicking the confirmation link which is sent to you, passing on of the personal data to other third parties, evaluation of data for marketing purposes) takes place if you have issued us with your consent.
2.2 CONTRACTUAL OR PRE-CONTRACTUAL OBLIGATIONS (ARTICLE 6 PARAGRAPH 1B GDPR)
We process personal data which is required in order to fulfill a contract where you are a contracting party or in order to carry out pre-contractual measures which take place following the initiation of contact by you, for example via our website contact form. The purpose of the data processing depends on the concrete contract (for example, sales, work, delivery or employment contract) and can, amongst others, include evaluations, advice or the carrying out of other measures. Personal data of employees is processed by us for the purposes of the employment relationship, should this be necessary in order to take a decision about whether to enter into an employment relationship or, once an employment relationship has been entered into, in order to perform it or to exercise or fulfill the rights and obligations which arise in accordance with the law. Within the framework of the consideration of interests, data is passed on within the corporate group (you can find a current overview of the group here).
2.3 LEGAL REGULATIONS (ARTICLE 6 PARAGRAPH 1C GDPR)
Due to legal obligations, data processing can take place for purposes connected to the prevention of fraud and money laundering, in order to fulfill monitoring and reporting obligations under tax laws and in order to provide information to the authorities as examples.
2.4 CONSIDERATION OF INTERESTS (ARTICLE 6 PARAGRAPH 1F GDPR)
In order to safeguard our legitimate interests or those of third parties, data processing also takes place for certain purposes after a consideration of interests, for example in order to ensure compliance with the house rules, to bring legal claims, to clarify criminal offenses, to calculate risks of non-payment, for optimal product development, to address customers for marketing purposes in an optimal manner, such as getting in touch with other companies by telephone, creation of picture and sound recordings for publication as adverts, creation and publication of participant directories, sending of advertising information by post (for example invitations to events, showcasing new products and services), optimal requirements planning or in order to ensure data security.
3. FURTHER DATA PROCESSING WITHIN THE FRAMEWORK OF THE USE OF THE WEBSITES
3.1 CONTACT FORM:
The email address which was recorded via our contact form will only be used by us in order to process queries which are received via this channel. Further information can be provided voluntarily. This data is then processed with your consent. Once the query has been processed, the data which has been gathered will be deleted.
3.3 GOOGLE ANALYTICS
This website uses Google Analytics, a web analysis service of Google LLC (hereinafter referred to as: Google). Google Analytics uses so-called “cookies”, text files which are saved on your computer and which enable an analysis of the use of the website by you. The information concerning your use of the website which is generated by the cookie is generally sent to a Google server in the USA and saved there. Google provides an undertaking that in case of the activation of IP anonymization on this website, your IP address will however be shortened first in Member States of the European Union or other Member States of the European Economic Area. Only in exceptional cases is the full IP address transmitted to and abbreviated on one of Google’s servers in the USA. On behalf of the operator of this website, Google will use this information in order to evaluate your use of the website, to compile reports concerning the website activities and to provide other services connected to the use of the website and the use of the internet for the website operator. Google ensures that the IP address which is transmitted by your browser within the framework of Google Analytics is not combined with other data from Google. You can prevent the saving of cookies by setting your browser software accordingly; however, we wish to point out that in such a case, you may not be able to use all of the functions of this website. In addition, you can prevent the recording of the data generated by the cookie which relates to your use of the website (including your IP address) by Google, as well as the processing of this data by Google. Please download and install the browser add-on which can be obtained via the following link: http://tools.google.com/dlpage/gaoptout?hl=de
Further information can be obtained via the following link (general information concerning Google Analytics and data protection): http://www.google.com/intl/de/analytics/privacyoverview.html
We wish to inform you that Google Analytics has been extended by the gat._anonymizeIp() code on this website, in order to ensure anonymized recording of IP addresses (so-called IP masking).
For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
3.5 ANONYMIZED OR PSEUDONYMIZED USE OPTIONS
You can generally visit our website without providing us with personal data. Pseudonymized user data is not combined with data of the holder of the pseudonym. No pseudonymized user profiles are created.
3.6 STATISTICAL EVALUATION OF THE VISITS TO THIS INTERNET SITE
We gather, process and save the following data when this internet site or individual files of the internet site are accessed: IP address, website from which the file was accessed, name of the file, date and time of the access, transferred data quantity, referrer and user agent and report concerning the success of the access (so-called web log). This access data is only used by us in non-personalized form in order to constantly improve our internet service and for statistical purposes.
3.7 USE OF SOCIAL BUTTONS FOR LINKEDIN AND YOUTUBE
Social media buttons of social networks and video platforms are used on our website. In order to increase the protection of your data when you visit our website, the buttons are not integrated into the site without restriction, rather only by using an HTML link (so-called “Shariff solution”). This integration ensures that when accessing a site of our web presence which contains such buttons, no connection is yet made to the servers of the provider of the respective social network of video platform. Should you click on one of the buttons, a new window is opened in the browser and the site establishes a connection to the respective provider, on which you can click the tweet or play button (if applicable following the entry of your login data).
The purpose and scope of the data gathering and further processing and use of the data by the providers on their sites, as well as your rights and settings options in this respect in order to protect your private sphere can be found in the data protection notices of the providers.
3.8 USE OF YOUTUBE PLUGINS
Our website uses so-called social plugins ("plugins") of the video portal YouTube, which is operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA ("YouTube").
When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the YouTube servers. The content of the plugin is transmitted by YouTube directly to your browser and integrated into the page. Through the integration, YouTube receives the information that your browser has called up the corresponding page of our website, even if you do not have a profile on YouTube or are not currently logged in to YouTube. This information (including your IP address) is transmitted by your browser directly to a YouTube server in the USA and stored there. If you are logged in to YouTube, YouTube can directly assign your visit to our website to your YouTube account. If you interact with the plugins, for example by pressing the "Play" button, the corresponding information is also transmitted directly to a YouTube server and stored there. The information is also published on your YouTube account and displayed there to your contacts. The purpose and scope of the data collection and the further processing and use of the data by YouTube, as well as your rights in this regard and setting options for protecting your privacy, can be found in YouTube's data protection information:
If you do not want YouTube to assign the data collected via our website directly to your YouTube account, you must log out of YouTube before visiting our website. You can also completely prevent the loading of YouTube plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (https://noscript.net/).
3.9 LinkedIn Insight Tag
Our website uses the conversion tool "LinkedIn Insight Tag" from LinkedIn Ireland Unlimited Company. This tool creates a cookie in your web browser, which enables the collection of the following data, among others:
- IP address
- Device and browser properties
- Page events (e.g. page views).
4. RECIPIENT CATEGORIES
In order to fulfill the intended purposes, the necessary data may be accessed by various departments and locations across our company, as well as within our corporate group. Order processors engaged by us may also receive data for certain purposes, such as IT services, file disposal and marketing. Additional recipients of personal data can include public bodies, credit and financial services providers, lawyers and tax advisors or information agencies.
5. TRANSFER TO A THIRD COUNTRY OR INTERNATIONAL ORGANIZATION
A data transfer to third countries only takes place if this is necessary or legally required, for instance for the fulfillment of a contract, if you have issued us with your consent or if this is connected to a collective agreement or works council agreement, for example in the scope of a group data transfer. Within the framework of the maintenance of IT components, it is also possible that an IT service provider from a third country (for example the USA) may view personal data in rare cases. Otherwise, no personal data is transferred to third countries or international organizations.
6. DURATION OF THE SAVING OF DATA
For the duration of the contractual relationship, the personal data will be saved by us. In addition, the statutory limitation periods are generally for three years. Following the completion of the recruitment process, we will generally delete your data within three months, should we decide not to appoint you to a position within our company. Various retention and documentation obligations exist, for example under the German Commercial Code (HGB) and the German Tax Code (AO), which can last for up to ten years.
7. RIGHT OF INFORMATION, RECTIFICATION, ERASURE, RESTRICTION, DATA PORTABILITY
You have the right of information in accordance with Article 15 GDPR, the right of rectification in accordance with Article 16 GDPR, the right of erasure in accordance with Article 17 GDPR, the right to have the processing restricted in accordance with Article 18 GDPR and the right of data portability in accordance with Article 20 GDPR. Please contact us should you wish to claim these rights.
8. REVOCATION OF CONSENT
You can revoke any consent which you have issued to us at any time. You can object to the sending of the newsletter by clicking on the unsubscribe link in the newsletter. Please bear in mind that your revocation will only be applicable in the future.
9. EXISTENCE OF A RIGHT TO COMPLAIN
In addition, you have the right to complain to a data protection supervisory authority (Article 77 GDPR).
10. OBLIGATION TO PROVIDE DATA
You are only required to provide the personal data which is necessary in order to enter into, perform and terminate a contract or in cases where we are legally obliged to gather the data. Should you not provide the necessary information and documents to us, we cannot enter into or continue the business relationship which you are requesting.
11. AUTOMATED DECISION MAKING IN INDIVIDUAL CASES
We do not generally use any fully automated decision making in order to enter into and perform a business relationship. Should we use such a process in an individual case, we will inform you of such separately if we are required to do so by law.
In part, we process your data using automated procedures in order to assess certain personal aspects (profiling), for example in order to contact you in a targeted manner and for advertising which is tailored to your needs, including market and opinion research, as well as scoring and rating. The evaluation can include data concerning payment behavior (for example account sales, balances), as well as criteria such as sector membership and experiences under the business relationship so far.
13. CATEGORIES OF PERSONAL DATA
As examples, we process the following categories of personal data: Core personal data, contractual core data, contractual performance and termination data, order data, data in order to fulfill legal obligations, creditworthiness data, scoring and rating data, advertising and sales data, data concerning your use of the telemedia provided by us (for example the time of accessing our websites, apps or newsletter, clicked pages and entries), as well as other data which is comparable with the named categories.
14. DATA SOURCES
We process data which we have received from you within the framework of our business relationship in the same way as data which is lawfully transferred to us by other third parties. We also gather data from publicly accessible sources (for example branch and debtor directories, the commercial register, the press).
Information concerning your right of objection in accordance with Article 21 GDPR
Right of objection in an individual case
For reasons connected to your specific situation, you have the right to raise an objection at any time against the processing of personal data relating to you which takes place in accordance with Article 6 Paragraph 1e GDPR (data processing in the public interest) and Article 6 Paragraph 1f GDPR (data processing in accordance with a consideration of interests); this also applies to any profiling based on this provision. Should you raise an objection, we will no longer process your personal data, unless we can provide proof of mandatory protective reasons for the processing which outweigh your interests, rights and freedoms or if the processing is necessary to assert, exercise or defend legal claims.
Right to objection against the processing of data for purposes connected to direct advertising
We process your personal data in order to carry out direct advertising. You have the right to object to the processing of personal data relating to you for the purposes of such advertising at any time; this also applies to the profiling, should it be connected to such direct advertising. Should you object to the processing for purposes connected to direct advertising, we will no longer process your personal data for these purposes. The objection can be made informally and should be sent to the following address where possible:
73207 Plochingen, Germany
Version dated: 09/2019