We are very pleased about your interest in our company. Data protection is of a particularly high priority for the management of Independesk GmbH. The use of the Internet pages of the Independesk GmbH is possible without any indication of personal data. However, if you want to use special services of our enterprise via our website, processing of personal data could become necessary. We would like to explain what this means in detail below.
Name and address of the company
The controller within the meaning of the General Data Protection Regulation (hereinafter "GDPR") and other national data protection laws of the member states as well as other data protection regulations is:
Further information about our company and the persons authorized to represent it can be found in our imprint.
Data Protection Officer
We have appointed a data protection officer. You can reach him under:
1.1 Scope and authorisation of the processing of personal data
As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide the functionality of our website and our contents and services. The collection and use of personal data of our users is regularly only carried out with the consent of the user.
An exception is made in those cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by legal regulations.
The legal basis for the processing of personal data with the prior consent of the person concerned is Art. 6 para. 1 lit. a GDPR. The legal basis for the processing of personal data which is necessary for the performance of a contract or the implementation of pre-contractual measures is Art. 6 para. 1 lit. b GDPR. For the processing of personal data to fulfil a legal obligation, the legal basis is Art. 6 para. 1 lit. c GDPR. If the vital interests of the data subject or another natural person make it necessary to process personal data, Article 6 para. 1 lit. d GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or of a third party and if these interests outweigh the interests of the data subject, taking into account the fundamental rights and freedoms of the data subject, Art. 6 para. 1 lit. f GDPR is the legal basis for processing the data.
1.2 Data deletion and storage period
The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage no longer applies. Furthermore, data may be stored if we are required to do so by law to process the data. In this case, the data will be blocked or deleted when the legally prescribed storage period expires, unless it is necessary to store the data further for the conclusion or fulfilment of a contract.
2.1 Visiting our website
When you call up our website, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted: IP address of the requesting computer, date and time of the access, name and URL of the accessed file, website from which the access takes place (referrer URL), used browser and if applicable the operating system of your computer as well as the name of your access provider.
The above-mentioned data is processed by us for the purposes of ensuring a smooth connection of the website, ensuring comfortable use of our website, evaluation of system security and stability as well as for other administrative purposes.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the above listed purposes for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.
2.2 Use of our contact form
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The legal basis for the processing of this data is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR on the basis of your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after the completion of your request.
You have the possibility to register on our website by providing personal data. Which personal data is transmitted to us in the process is determined by the respective input mask used for registration. The personal data entered by you will be processed exclusively for internal use for our own purposes. We may arrange for the transfer to one or more processors who will also use your personal data exclusively for internal use attributable to us.
When you register on our website, the IP address assigned to the person concerned by the Internet Service Provider (ISP), the date and time of registration are also stored. The storage of this data is carried out against the background that this is the only way to prevent the misuse of our services and, if necessary, to enable the clarification of criminal offences committed. In this respect, the storage of this data is necessary for security purposes. As a matter of principle, this data will not be passed on to third parties, unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.
Your registration with voluntary disclosure of personal data serves to offer you content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons are free to change the personal data provided during registration at any time or to have it completely deleted from our database.
On request, we will provide each person concerned with information at any time about what personal data is stored about the person concerned. In addition, we correct or delete personal data upon request or notification of the person concerned, provided that this does not conflict with any statutory storage obligations.
On our website we offer you the possibility to subscribe to our newsletter. With this newsletter we inform you about our offers at regular intervals. To receive our newsletter, you need a valid e-mail address. We will check the e-mail address you entered to make sure that you are the owner of the e-mail address you entered or that the owner of the e-mail address is authorized to receive the newsletter.
With your registration to our newsletter we will save your IP address and the date and time of your registration. This serves as a safeguard for us in the event that a third party misuses your e-mail address and subscribes to our newsletter without your knowledge. We do not collect any other data. The data collected in this way is used exclusively for the subscription to our newsletter. It will not be passed on to third parties. A comparison of the data collected in this way with data that may be collected by other components of our site is also not carried out. You can cancel your subscription to this newsletter at any time. Details can be found in the confirmation e-mail and in each individual newsletter.
2.5 Newsletter tracking
Our newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. By means of the embedded pixel-code, we can identify whether and when an e-mail was opened by a person concerned and which links in the e-mail were called up by the person concerned.
Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by us in order to optimise the newsletter dispatch and to adapt the content of future newsletters even better to the interests of the person concerned. This personal data is not passed on to third parties. Affected persons are entitled to revoke the separate declaration of consent submitted via the double opt-in procedure at any time. After revocation, these personal data will be deleted by the data controller. We always interpret a cancellation of the receipt of our newsletter as a revocation.
2.6 Transfer of data
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if you have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, if the transfer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims, and if there is no reason to assume that you have an overriding interest worthy of protection in not passing on your data, in the event that the transfer in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, as well as this is legally permissible and is necessary for the processing of contractual relationships with you according to Art. 6 para. 1 sentence 1 lit. b GDPR.
The user data collected in this way is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users.
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a GDPR if the user has given his consent to this.
Analysis cookies are used to improve the quality of our website and its contents. The analysis cookies enable us to find out how the website is used and thus to constantly optimise our offer.
These purposes also include our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.
No non-essential cookies are set without your consent. You can disable all non-essential cookies by using the following here.
You can also determine whether you want to allow cookies yourself via your browser settings. Please note that disabling cookies may result in limited or completely disabled functionality of the website.
We have integrated contents, services and performances of other providers on the website. These include, for example, maps provided by Google Maps, videos from YouTube and graphics and images from other websites. In order for this data to be called up and displayed in the user’s browser, it is absolutely necessary to transmit the IP address. The providers (hereinafter referred to as “third party providers”) thus perceive the IP address of the respective user.
Even though we make every effort to use only third-party providers who only need the IP address to deliver content, we have no influence on whether the IP address may be saved. In this case, this process serves statistical purposes, among other things. If we have knowledge that the IP address is stored, we will inform our users of this fact.
3.1 Application and use of AWS
We use the Amazon Web Services (“AWS”) service provided by Amazon Web Services, Inc. Box 81226, Seattle, WA 98108-1226, USA. The data is stored exclusively in a German data center (Frankfurt/Main), which is certified according to ISO 27001, 27017 and 2018 as well as PCI DSS Level 1. Of course, we have strictly limited access rights and the data is automatically encrypted. As a company, AWS has signed the so-called Privacy Shield Agreement. More information about AWS and data protection can be found at https://aws.amazon.com/de/compliance/eu-data-protection/ and https://aws.amazon.com/de/privacy/.
3.2 Use and application of HERE Maps
3.3 Application and use of Google Analytics (with anonymisation function)
The person responsible for processing has integrated the Google Analytics component (with anonymisation function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, collection and evaluation of data on the behaviour of visitors to websites. Among other things, a web analysis service collects data about which website a person concerned came to a website from (so-called referrers), which sub-pages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used to optimize an internet page and for cost-benefit analysis of internet advertising.
The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The data controller uses the addition “_gat._anonymizeIp” for web analysis via Google Analytics. By means of this addition, the IP address of the Internet connection of the person concerned is shortened by Google and made anonymous if the access to our Internet pages is from a member state of the European Union or from another state that is a party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Among other things, Google uses the data and information obtained to evaluate the use of our website in order to compile online reports for us which show the activities on our website and to provide further services in connection with the use of our website.
Google Analytics places a cookie on the information technology system of the person concerned. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyse the use of our website. Each time one of the individual pages of this website, which is operated by the person responsible for processing and on which a Google Analytics component has been integrated, is called up, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. In the course of this technical process, Google receives knowledge of personal data, such as the IP address of the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission settlements.
By means of the cookie, personal information such as the access time, the location from which an access originated and the frequency of visits to our website by the person concerned is stored. Each time our website is visited, this personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.
The person concerned can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
3.4 Application and use of Google Web Fonts
External fonts, Google Fonts, are used on these Internet pages. Google Fonts is a service of Google Inc. (“Google”). The integration of these Web Fonts is done by a server call, usually a Google server in the USA. This transfers to the server which of our Internet pages you have visited. The IP address of the browser of the end device of the visitor to these Internet pages is also stored by Google. You will find more detailed information in the Google data protection information, which you can download here:
3.5 Use and application of YouTube
We have integrated components from YouTube on our website. YouTube is an Internet video portal that allows video publishers to post video clips for free and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television broadcasts, but also music videos, trailers or videos created by users themselves can be accessed via the Internet portal.
YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time the data subject accesses one of the individual pages of this website, which is operated by the data controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted by the respective YouTube component to download a display of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google are informed which specific subpage of our website is visited by the data subject.
If the person concerned is logged in to YouTube at the same time, YouTube recognizes which specific page of our website the person concerned is visiting by calling up a page containing a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.
YouTube and Google receive information through the YouTube component that the data subject has visited our website whenever the data subject is logged on to YouTube at the same time as he or she visits our website, regardless of whether or not the data subject clicks on a YouTube video. If the data subject does not want this information to be sent to YouTube and Google, he or she can prevent it from being sent by logging out of his or her YouTube account before visiting our website.
3.6 Use and application of Vimeo
We use components from the provider Vimeo on our site. Vimeo is a service of Vimeo LCC, 555 West 18th Street, New York, New York 10011, USA. Each time you access our website that is equipped with such a component, this component causes the browser you are using to download a corresponding display of the component from Vimeo. If you visit our site while logged in to Vimeo, Vimeo recognizes which specific page you are visiting through the information collected by the component and associates this information with your personal account at Vimeo. For example, if you click on the “Play” button or make comments, this information is transmitted to and stored in your personal Vimeo account. In addition, the information that you have visited our site will be shared with Vimeo. This happens whether or not you click on the component or leave comments.
3.7 Deployment and use of Google Forms
This Internet offer uses Google Forms, a service within the G-Suite program package of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google is subject to and certified under the Privacy Shield Agreement between the European Union and the United States. This means that Google is committed to complying with the standards and regulations of European data protection law. For more information, please refer to the following linked entry:https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
With this service, input masks can be generated and processed. In doing so, Google records your IP address, the page visited and any other data required by Google for Google Forms. The data entered into the form will only be transferred to Google when you click on the corresponding submit button. Google stores the transferred data for us in a cloud memory, so that we can process them further within the scope of the respective processing purpose.
In order to fully comply with the legal data protection requirements, we have concluded a contract with Google for order processing.
3.8 Application and use of Google Ads
On our website, we use “Google Ads” (Google Ads Conversions and Google Ads Remarketing), a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland. If you reach our website via a Google advertisement (“Ad”), Google Ads will automatically set a “Coversion Cookie”. This cookie automatically expires after 30 days and is not being used to identify you personally, but only to enable an unequivocal identification of a web browser on a particular device.
The Conversion Cookie enables both Google and the individual Google Ads customer, including us, to recognize that (i) someone has clicked on a particular Ad and been redirected to a page with a conversion tracking tag, and (ii) how many times that person has clicked on that particular Ad within 30 days.
Furthermore, we also use Google Ads Remarketing on our website. After a visit to our website, our Ads may be displayed to you in your subsequent use. This is effected by means of a cookie, which records and evaluates your usage behavior when visiting various websites by Google. This enables Google to determine your previous visit to our website. According to Google’s statement, the data collected in the context of Google Ads Remarketing will not be merged with your personal data, which may be stored by Google. According to Google a pseudonymization is used in remarketing.
We do not collect and process any personal data ourselves, but are only provided with statistical evaluations by Google. This statistical analysis enables us to recognize and assess which of our advertising efforts are particularly effective. We do not receive any further information; in particular, it is not possible for us to identify a user personally.
Due to the marketing tools used, your web browser automatically establishes a direct connection with the Google server. We have no influence on the handling and further use of the data collected by Google through the use of Google Ads and therefore inform you according to our level of knowledge: By integrating Google Ads, Google receives the information that you have clicked on the corresponding area of our website or one of our Ads. If you are registered with a Google service, Google can allocate the visit to your account. Even if you are not registered with Google or have not logged in to a Google service, there is a possibility that Google will learn and save your IP address.
If you do not want to participate in conversion tracking, you have the option of preventing the setting of a cookie by means of a corresponding setting in your web browser, e.g. in such a way that the installation of cookies is generally prevented. You can also deactivate cookies for conversion tracking by setting your browser to block only cookies from the web address “googleadservices.com” (https://www.google.de/settings/ads), although this setting will be deleted if you delete your cookies.
Further information on the use of the data by Google, settings and option to object as well as on data protection can be viewed at Google at https://policies.google.com/privacy?hl=de&gl=de and https://www.google.de/settings/ads.
3.9 Application and use of Stripe
If you choose a payment method from the payment service provider Stripe, the payment will be processed via the payment service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provide during the ordering process together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information about the data protection of Stripe can be found under the URL https://stripe.com/de/privacy#translation .
3.10 Application and use of FACEBOOK CUSTOM AUDIENCES (FACEBOOK-PIXEL)
Within our online offer, the so-called “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used due to our legitimate interests in analysis, optimization and economic operation of our online offer and for these purposes.
Your IP address is also stored and used for the geographical distribution of advertising. Facebook Custom Audiences via the customer list is not used by us, nor is the function “extended matching”.
The transfer of data to the USA is permitted in accordance with Art. 45 GDPR, as Facebook is Privacy Shield certified and therefore an adequate level of data protection exists according to the implementing decision of the Commission (EU) 2016⁄1250(https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). The certification can be downloaded at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Further information about the Custom Audiences service from Facebook can be found here:
Further information on data processing and storage duration can be obtained from the provider or athttps://www.facebook.com/about/privacy.
Deactivation of the “Facebook Custom Audiences” function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#.
website (https://www.aboutads.info/choices) or the European
On this website, we use the HubSpot service for various purposes. HubSpot is a software company from the USA with a European branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.
Through Hubspot we cover various aspects of our online marketing. These include the following:
Social media publishing & reporting, email marketing, contact management (e.g. user segmentation & CRM), reporting, landing pages and contact forms.
By registering or signing up with us, we enable you to learn more about our business, download content and provide your contact information and other information (e.g. location). This information, as well as the content of our website, is stored on HubSpot servers. We may use this information to contact visitors to our website and to find out which independesk services are of interest to them.
For marketing purposes, the following data may be collected and processed via Hubspot:
- IP address
- Geographic location
- Device identifier
- Operating system
- Internet service provider
- Browsing information
- Browser- Type
- Referral URL
- Mobile Apps data
- Performance data
- Access times
- HubSpot subscription service credentials
- Files, viewed on site
- Domain names
- Pages viewed
- Aggregate usage
- Information about, how often the application is used
- Operating system version
- Where the application was downloaded from
- Events that occur within the application
- Clickstream data
- Duration of visit
- Device model and version.
In addition, we also use Hubspot to create contact forms.
We also use HubSpot's live chat service "Messages" (round icon at the bottom right of the screen with chat function) for better and faster communication with website users. If you agree to use this function, the following data will be transmitted to HubSpot's servers:
- Content of the chat messages sent and received
- Context information (e.g. page on which the chat was used)
- Optional: e-mail address of the user (if provided by the user via chat function).
The legal basis for the processing of your data is your consent pursuant to Art. 6 (1) lit. a GDPR. You can refuse your consent or revoke it at any time with effect for the future if you do not want the previously mentioned data to be collected and processed. We retain the personal data for as long as necessary to ensure fulfilment of the purpose of processing. Afterwards, the data will be deleted.
In the context of processing via HubSpot, data may be transferred to the USA. The security of the transfer of the data is ensured via so-called standard contractual clauses, so that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, your consent pursuant to Art. 49 (1) lit. a GDPR may serve as the legal basis for the transfer to third countries.
More information about the cookies used by HubSpot can be found here and here.
3.12 Google Maps
On this website, the "Google Maps" service is integrated via API to display the location of certain Spaces. This allows Google to collect, process and use data about your use of the service. By using Google Maps, information about your use of this website, including your IP address, may be transmitted to Google in the USA.
The following data is collected and processed by Google Maps: IP address, date and time of the visit, usage data, location information, URLs.
In the context of processing via Google Maps, data may be transferred to the USA. The security of the transfer of data is ensured via so-called standard contractual clauses, so that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, consent will be obtained from you in advance as part of the Usercentrics consent management system in accordance with Art. 49 (1) lit. a GDPR.
3.13 Google Tag Manager
We use the "Google Tag Manager" service to use so-called tags, which are used for tracking in marketing. The Tag Manager itself does not process any personal data, as it is purely used to manage other Google services.
You can find more information about the Google Tag Manager here: https://www.google.com/intl/de/tagmanager/use-policy.html
3.14 Google reCAPTCHA
Our website uses reCAPTCHA from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. reCAPTCHA is a service that protects against spam and misuse of the website by checking whether entries come from real people. In the process, the IP address and other browser data are recorded and evaluated by Google. The collection is carried out in accordance with Art. 6 (1f) DGPR to protect our legitimate interest in preventing misuse and spam. By using Google reCAPTCHA, personal data may also be sent to servers of Google LLC. in the USA.
independesk.com and the linked sites use the service Leadfeeder for statistical analysis of visitor traffic. The provider is Liidio Oy / Leadfeeder, Mikonkatu 17 C, 00100 Helsinki, Finland.
Leadfeeder analyses the IP addresses of the website visitors as they are provided in the evaluation list of Google Analytics and links them to information about companies that can be found on the internet under the respective IP addresses. Since Google Analytics performs IP anonymisation beforehand, a direct reference to an individual person or an individual website visitor is excluded. At most, it can be assumed by looking through linked public company information who might have been interested in independesk's offer.
Information about Leadfeeder and the data collected can be found at the following link: https://www.leadfeeder.com/privacy/.
Information on compliance with the European General Data Protection Regulation (GDPR) can be found here: https://www.leadfeeder.com/leadfeeder-and-gdpr/
You can object to the storage and use of data generated by Leadfeeder during your visit to our pages at any time by clicking on the following opt-out link: https://yourdata.leadfeeder.com/
independesk.com and the linked sites use the service "LinkedIn Insight Tag" to track site visits and conversions. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
Information on compliance with the European General Data Protection Regulation (GDPR) can be found here: https://www.linkedin.com/help/linkedin/answer/87150/linkedin-marketing-solutions-und-die-datenschutz-grundverordnung-dsgvo-?lang=en
You can object to the storage and use of data by LinkedIn that is generated when you visit our pages at any time using the following opt-out link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
If, in the course of our processing, we disclose data to other persons and companies (order processors, jointly responsible persons or third parties), transfer it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if a transfer of the data to third parties, such as payment service providers, is necessary for the performance of the contract), users have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we disclose or transfer data to other companies in our group of companies or otherwise grant them access, this is done in particular for administrative purposes as a legitimate interest and, in addition, on a basis that complies with the legal requirements.
If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or do so in the context of using third-party services or disclosing or transferring data to other persons or companies, this will only be done if it is done to fulfill our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we will only process or allow data to be processed in a third country if the legal requirements are met. This means, for example, that the processing is carried out on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognised special contractual obligations.
We collect and process the personal data of applicants for the purpose of processing the application procedure. The processing may also take place electronically. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by e-mail or via a web form on the website. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests on our part prevent deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the German General Equal Treatment Act (AGG).
You have the right:
(1) to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
(2) in accordance with Art. 16 GDPR, to demand without delay the correction of incorrect or completion of your personal data stored by us;
(3) pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
(4) in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
(5) pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller;
(6) in accordance with Art. 7 (3) GDPR, to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future; and
(7) complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.
7.1 Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the option, in connection with the use of services of the information society, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.
Automated decision-making in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and the controller,
(2) is authorised by Union or Member State legislation to which the controller is subject and that legislation contains adequate measures to safeguard your rights and freedoms and legitimate interests; or
(3) is done with your explicit consent.
However, these decisions must not be based on special categories of personal data pursuant to Art. 9(1) of the GDPR, unless Art. 9(2)(a) or (g) applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.
With regard to the cases referred to in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms of, and your legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.
As a responsible company, we do not use automatic decision-making or profiling.
7.2 Right of complaint to the supervisory authority
You have the right to lodge a complaint with the State Commissioner for Data Protection and Freedom of Information.
Details of the supervisory authority:
Berlin Commissioner for Data Protection and Freedom of Information
Visitor entrance: Puttkamerstr. 16-18 (5th floor)
Internet address: https://www.datenschutz-berlin.de
We use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser when visiting the website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time via this address.