Privacy policy according to the EU GDPR

 

We are pleased about your interest in our company. Data protection is very important to us. We only use personal data (hereinafter referred to as “data”) only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and what is offered there Services, processed.

According to Art. 4 Number 1. The Regulation (EU) 2016 / 679, the Basic Data Protection Regulation (hereinafter referred to as the "GDPR"), is considered to be the "processing" of any process or series of operations related to personal data, such as collection, carried out with or without the aid of automated procedures the collection, organization, ordering, storage, adaptation or modification, reading out, querying, use, disclosure by transmission, dissemination or any other form of providing, matching or linking, the restriction, the Erase or annihilation.

With the following privacy policy, we inform you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data, as far as we either alone or together with others decide on the purposes and means of processing. In addition, we will inform you below about the third-party components that we use for optimization purposes and to increase the quality of use, insofar as third parties process data in their own responsibility.

Our privacy policy is structured as follows:

I. Information about Us as Responsible
II. Rights of Users and Stakeholders
III. Information about Data Processing
IV. Linking to social media via graphics or text links
V. External Services


I. Information about Us as Responsible

The responsible provider of this website in terms of data protection is:

PHYTEC Messtechnik GmbH
Robert-Koch-Str. 39
55129 Mainz
Germany

Tel .: 06131 / 9221-0
E-mail: contact@phytec.de
Website: https: //www.phytec.de

The Data Protection Officer of the controller is:

E-mail: data protection officer@phytec.de
Phone: +49 6131 9221-333


II. Rights of Users and Stakeholders

With regard to the data processing described in more detail below, users and data subjects have the right

  • upon confirmation of the processing of the data in question, on information about the processed data, on further information on data processing and on copies of the data (see also Art. 15 DSGVO);
  • Correction or completion of incorrect or incomplete data (see also Art. 16 DSGVO);
  • for immediate deletion of their data (see also Art. 17 DSGVO), or, if further processing is required under Art. 17 para. 3 DSGVO, for limitation of processing in accordance with Art.
  • upon receipt of data concerning them and provided by them and on the transmission of these data to other providers / controllers (see also Art. 20 DSGVO);
  • on complaint to the supervisory authority, if they consider that the data concerning them are processed by the provider in breach of data protection provisions (see also Art. 77 DSGVO).

In addition, the Provider is obliged to notify any recipients to whom data has been disclosed by the Provider of any correction or deletion of data or restriction of processing that occurs under Articles 16, 17 para. 1, 18 DSGVO teaching. However, this obligation does not exist insofar as this notification is impossible or disproportionate. Notwithstanding, the user has a right to information about these recipients.

Likewise, according to Art. 21 DSGVO, users and data subjects have the right to object to the future processing of the data concerning them, provided that the data are provided by the provider in accordance with Art. 6 para. 1 lit. f) DSGVO be processed. In particular, an objection to the processing of data for the purpose of direct advertising is permitted.


III. Information about Data Processing

Your data processed on the use of our website will be deleted or blocked as soon as the purpose of the storage is omitted, the deletion of the data does not conflict with statutory retention requirements and subsequently no other information is given about individual processing methods.

Server Data

For technical reasons, in particular to ensure a secure and stable website, your Internet browser sends data to us or to our Webspace provider transmitted. These so-called server log files record, among other things, the type and version of your Internet browser, the operating system, the website from which you switched to our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access as well as the IP address of the Internet connection from which our website is used.

These data collected will be temporarily stored but will not be shared with other information about you.

This storage takes place on the legal basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

The data will be deleted at the latest after seven days, as long as no further storage for evidence is required. Otherwise, the data will be wholly or partially exempt from the cancellation until the final clarification of an incident.

Cookies

a) Session-Cookies

We use so-called cookies with our website. Cookies are small text files or other storage technologies that are stored and stored on your device by the Internet browser you use. These cookies process certain information about you, such as your browser or location data or your IP address, to an individual extent.  

This processing makes our website more user-friendly, more effective and more secure, since the processing bspw. enables the reproduction of our website in different languages ​​or the offer of a shopping cart function.

The legal basis for this processing is Art. 6 para. 1 lit b.) GDPR, insofar as these cookie data are processed to initiate a contract or to execute a contract.

If the processing does not serve to initiate the contract or to fulfill the contract, our legitimate interest lies in improving the functionality of our website. Legal basis is then Art. 6 para. 1 lit. f) GDPR.

Closing your internet browser deletes these session cookies.

b) Third-Party Cookies

If necessary, our website also uses cookies from partner companies with whom we cooperate for the purpose of advertising, analyzing or functionalizing our website.

For details, in particular for the purposes and legal basis of the processing of such third party cookies, please refer to the information below.

c) Disposal Option

You can prevent or restrict the installation of cookies by setting your Internet browser. You can also delete previously saved cookies at any time. However, the necessary steps and measures depend on your specific Internet browser. If you have questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. With so-called Flash cookies, however, the processing can not be prevented by the settings of the browser. Instead, you need to change the setting of your Flash Player. The necessary steps and measures depend on your specific Flash player. If you have any questions, please also use the help function or documentation of your Flash Player or contact the manufacturer or user support.

If you prevent or restrict the installation of cookies, however, this may result in not all functions of our website being fully usable.

Newsletter

If you subscribe to our free newsletter, the data requested by you, ie your e-mail address and - optionally - your name and address will be sent to us. At the same time, we store the IP address of the Internet access from which you access our website as well as the date and time of your registration. As part of the further registration process, we will seek your consent to the transmission of the newsletter, describe the content specifically and refer to this privacy policy. We use the data collected exclusively for the newsletter dispatch - they are therefore not passed on to third parties in particular.

The legal basis for this is Art. 6 para. 1 lit. a) GDPR.

The consent to the newsletter dispatch can be withdrawn at any time with effect for the future in accordance with Art. 7 para. 3 DSGVO. For this you only need to inform us about your withdrawal or press the unsubscribe link contained in each newsletter.

Contact Requests/Contact Possibilities

If you contact us via contact form or e-mail, the data provided by you will be used to process your request. The specification of the data is necessary for processing and answering your inquiry - without their provision we can not answer your inquiry or at best only to a limited extent.

The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.

Your data will be deleted if your request has been answered conclusively and the deletion does not conflict with any statutory retention requirements, such as bspw. in the event of any subsequent contract processing.

Online job applications / publication of job advertisements

We offer you the opportunity to apply with us on our website. In these digital applications, your application and application data will be electronically collected and processed by us to process the application process.

The legal basis for this processing is § 26 para. 1 S. 1 BDSG in conjunction with Art. 88 para. 1 DSGVO.

If an employment contract is concluded after the application process, we will save your data submitted in the application in your personal file for the purpose of the normal organizational and administrative process - of course, taking into account the further legal obligations.

The legal basis for this processing is also § 26 para. 1 S. 1 BDSG in conjunction with Art. 88 para. 1 DSGVO.

If an application is rejected, we automatically delete the data transmitted to us two months after notification of the rejection. However, the deletion does not take place if the data due to legal provisions, bspw. due to the burden of proof according to the AGG, require longer storage of up to four months or until the conclusion of legal proceedings.

The legal basis in this case is Art. 6 para. 1 lit. f) DSGVO and § 24 para. 1 No. 2 BDSG. Our legitimate interest lies in the legal defense and enforcement.

If you expressly consent to a longer storage of your data, bspw. for your inclusion in an applicant or interested party database, the data will be processed based on your consent. The legal basis is then Article 6 (1) (a) GDPR. However, you can of course revoke your consent at any time in accordance with Art. 7 Para. 3 GDPR by declaring this to us with effect for the future.


IV. Linking to social media via graphics or text links

We also advertise on our website presences on the social networks listed below. The integration takes place via a linked graphic of the respective network. The use of this linked graphic prevents a connection to the respective server of the social network from being automatically established when a website with a social media application is called up in order to display a graphic of the respective network itself. The user is only forwarded to the service of the respective social network by clicking on the corresponding graphic.

After the user has been forwarded, information about the user is recorded by the respective network. It cannot be ruled out that the data collected in this way will be processed in the USA.

First of all, this includes data such as IP address, date, time and page visited. If the user is logged into his user account of the respective network, the network operator may be able to assign the information collected from the specific visit of the user to the user's personal account. If the user interacts via a “Share” button on the respective network, this information can be saved in the user's personal user account and published if necessary. If the user wants to prevent the information collected from being directly assigned to his user account, he must log out before clicking on the graphic. There is also the option of configuring the respective user account accordingly.

The following social networks are linked to our website:

Facebook

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.

Data protection statement: https://www.facebook.com/policy.php

Twitter

Twitter Inc., 795 Folsom St., 600 Suite, San Francisco, CA 94107, USA

Data protection statement: https://twitter.com/privacy

YouTube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA

Data protection statement: https://policies.google.com/privacy

LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of the LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA.

Data protection statement: https://www.linkedin.com/legal/privacy-policy

Instagram

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.

Data protection statement: https://help.instagram.com/519522125107875

Xing

XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany

Data protection statement:  https://www.xing.com/privacy

 

V. External Services

We sit Services external providers in order to be able to offer you additional content, communication channels or improvements to our offering.

Google Analytics

We use Google Analytics on our website. This is a web analysis service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

The service Google Analytics is used to analyze the usage behavior of our website. Legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.

Usage and user-related information, such as bspw. IP address, location, time or frequency of visits to our website are transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. With this function, Google already shortens the IP address within the EU or the EEA.

The data collected in this way will again be used by Google to provide us with an evaluation of the visit to our website as well as about the usage activities there. This data may also be used to provide other services related to the use of our website and the use of the Internet.

Google states that you do not associate your IP address with other data. In addition, Google keeps under

https://www.google.com/intl/de/policies/privacy/partners

further data protection information ready for you, see above bspw. also about the possibilities of preventing the use of data.

In addition, Google offers below

https://tools.google.com/dlpage/gaoptout?hl=de

a so-called deactivation add-on together with further information. This add-on can be installed with the common Internet browsers and offers you further control over the data that Google collects when we visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information for visiting our website should not be transmitted to Google Analytics. But this does not prevent information from being passed to us or other web analytics services. Of course, you will also find out in this privacy policy whether and which other web analysis services we use.

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool with the help of which we can incorporate tracking or statistics tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not save cookies and does not carry out any independent analyzes. It is only used to manage and play out the tools integrated via it. However, the Google Tag Manager records your IP address, which can also be transferred to the parent company of Google in the United States.

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

Google offers below https://policies.google.com/privacy more information.

Google Maps

On our website we use Google Maps to show our location and to create a route description. It is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

In order to enable the representation of certain writings in our Internet appearance, a connection to the Google server in the USA is set up when calling our Internet appearance.

Insofar as you access the Google Maps component integrated in our website, Google will store a cookie on your device via your Internet browser. To view our location and provide directions, your user settings and data are processed. Here we can not rule out that Google uses servers in the United States.

Legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in optimizing the functionality of our website.

Google's connection to Google enables it to determine from which website your request has been sent and to which IP address the directions are to be transmitted.

If you do not agree with this processing, you have the option to prevent the installation of cookies through the corresponding settings in your Internet browser. You will find details on this under the heading "Cookies".

In addition, the use of Google Maps and the information obtained through Google Maps is based on the Google Terms of Service https://policies.google.com/terms?gl=DE&hl=de and Terms and Conditions for Google Mapswww.google.com/intl/de_de/help/terms_maps.html.

Moreover, Google offers below

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

further information.

Google Fonts

We use Google Fonts on our website to display external fonts. It is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

In order to enable the representation of certain writings in our Internet appearance, a connection to the Google server in the USA is set up when calling our Internet appearance.

Legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.

Google can determine from which website your request has been sent and to which IP address the presentation of the font is to be transmitted by the connection to Google established when our website is called up.

Google offers below

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

Further information, in particular on the possibilities of preventing the use of data.

GOOGLE search function ("CSE")

For full-text search on the website, we use the "Google Custom Search Engine" (Google Custom Search Engine "CSE"). "CSE" is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google".

"CSE" enables a full-text search for content on our website. This search function is accessed via a "Google Custom Search" search box.

The legal basis is here Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the user-friendliness of the website.

The function is still integrated as a software module by Google on our website.
If the search is activated by entering a search term, Google loads the searched information using a plugin. At the same time, the terms entered by the user and the user's IP address are transmitted to Google to carry out the search and display the search results.

If the user is logged into his or her existing Google account at the time of the search process, Google can assign the recorded information to the associated user profile.

Google offers further information, in particular on the options for preventing data use, under the following links:

https://policies.google.com/privacy
https://adssettings.google.com/authenticated

YouTube

In our website we use YouTube. This is a video portal of YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, hereinafter referred to as "YouTube".

YouTube is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

We use YouTube in conjunction with the Enhanced Privacy Mode feature to show you videos. Legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the quality improvement of our website. The Enhanced Privacy Mode feature, according to YouTube, means that the data specified below will only be transmitted to the YouTube server when you actually start a video.

Without this "Enhanced Privacy," you will be connected to the YouTube server in the United States as soon as you visit one of our websites that embed a YouTube video.

This connection is required in order to be able to display the respective video on our website via your Internet browser. In the course of this, YouTube will at least collect and process your IP address, the date and time as well as the website you are visiting. It also connects to Google's DoubleClick ad network.

If you're logged in to YouTube at the same time, YouTube will provide the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.

For the purpose of functionality as well as for the analysis of user behavior, YouTube permanently stores cookies via your Internet browser on your device. If you do not agree with this processing, you have the option to prevent the storage of cookies by a setting in your Internet browser. For more information, see "Cookies" above.

Further information about the collection and use of data and their rights and protections Google holds in the under

https://policies.google.com/privacy

Available data protection information.

MailChimp - Newsletter

We offer you the opportunity to register with us via our website for our free newsletter.

We use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, 404 Suite, Atlanta, GA 30318, USA, hereafter referred to as "The Rocket Science Group".

The Rocket Science Group also offers

http://mailchimp.com/legal/privacy/

for further privacy information.

If you subscribe to our newsletter shipping, the data requested during the registration process, such as your e-mail address and, optionally, your name and address, will be processed by The Rocket Science Group. In addition, your IP address as well as the date of your registration will be saved along with the time. As part of the further registration process, your consent to the sending of the newsletter will be obtained, the content specifically described and referred to this privacy policy.

The newsletter then sent via The Rocket Science Group also contains a so-called tracking pixel, also known as a web beacon. With the help of this tracking pixel, we can evaluate whether and when you read our newsletter and whether you followed any further links contained in the newsletter. In addition to other technical data, such as bspw. the data of your EDP system and your IP address, the data processed in this way are stored so that we can optimize our newsletter offer and respond to the wishes of the readers. The data is therefore used to increase the quality and attractiveness of our newsletter offer.

The legal basis for sending the newsletter and the analysis is Art. 6 para. 1 lit. a.) GDPR.

The consent to the newsletter dispatch can be withdrawn at any time with effect for the future in accordance with Art. 7 para. 3 DSGVO. For this you only need to inform us about your withdrawal or press the unsubscribe link contained in each newsletter.

FoxyCart and Mollie

This website uses FoxyCart.com (Foxy.io, 337 Garden Oaks Blvd, Houston, TX 77018, Ste. #56961). FoxyCart provides us with the online e-commerce platform with which we Products and sell services to you.

Your data is stored through FoxyCarts data storage, databases and the general FoxyCart application. This is done on a secure server behind a firewall.

For more information, see FoxyCart's privacy policy here: https://www.foxy.io/privacy-policy

Credit card payments are processed by our service provider Mollie BV, Keizersgracht 313, 1016 EE Amsterdam, Netherlands, which is why we transfer your data to this service provider. You can find Mollie's privacy policy at: https://www.mollie.com/de/privacy.

Your payment details are stored by the service provider. The payment service provider is responsible for your payment data. The legality of this data processing results from Article 6 Paragraph 1 Sentence 1 Letter b of the GDPR, as this data processing is used for payment processing Services necessary is.

Tawk.to Live Chat

The online offer offers the possibility of using Tawk.to. It is a live chat software. The chat is integrated in the source code. This is made possible via a script. By using the chat, you automatically use the services of Tawk.to. The data collected includes: chat history, IP address at the time of the chat and country of origin. These data are not passed on to third parties and are used exclusively for protection and internal statistics. The data are not used to identify you personally.

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

The purpose and scope of the data collection and the further processing and use of the data by Tawk.to as well as your related rights and setting options to protect your privacy can be found in the data protection information from Tawk.to: https://www.tawk.to/privacy-policy

CrazyEGG

We use CrazyEgg, a web analysis service from Crazy Egg, Inc. (“CrazyEgg”). CrazyEgg uses cookies that enable us to analyze your use of our website. In doing so, data is collected and stored, from which we create usage profiles using pseudonyms. These profiles are used to analyze visitor behavior and to adapt our range of offers and our design according to the requirements of our users. The pseudonymised usage profiles will not be merged with other personal data that we have received from you without your express, formal consent. The data generated by cookies about your use of our website (including your IP address) are transmitted to a CrazyEgg server in the USA and stored there. CrazyEgg uses this data to evaluate your use of the website, to compile reports on website activity for Avira and to provide other services related to website and internet usage.

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

You can object to the collection and storage of this data by CrazyEgg at any time by following the instructions under the following link: Disagree here

Further information on the software used and CrazyEgg's data protection guidelines can be found at https://www.crazyegg.com/privacy.

Heatclix

This website uses Heatclix, a web analysis and marketing tool from IMCode Design GmbH | Arnold-Zweig-Weg 4 | 08056 Zwickau | Germany to collect and store data for marketing and optimization purposes. Pseudonymised usage profiles can be created from the data. Randomly selected individual visits are recorded. This creates a log of mouse movements and clicks with the intention of randomly playing back individual website visits and deriving potential improvements for the website from them. The data collected with Heatclix will not be used to personally identify the visitor to this website and will not be combined with personal data about the bearer of the pseudonym without the separate consent of the person concerned. If you do not want a recording, you can make a recording on all websites that use Heatclix, global for the browser you are currently using under the following link: https://heatclix.net/opt-out/

You can find more data protection notices about Heatclix at https://heatclix.de/datenschutz/.

webinars

The Webinaris software from the provider Webinaris GmbH, Bussardstr. 5, 82166 Graefelfing. Registration for the webinar takes place via a registration form that is linked to Webinaris. You must use this to register with your e-mail address in order to receive the access data for the webinar. We use your data to automatically send you the access data for the webinar and other information emails via webinars. You can revoke your consent to receiving e-mails at any time by clicking on the link at the end of the e-mails. Alternatively, send us a message to have the deletion carried out.

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

You can find more information on data protection at Webinaris here: https://webinaris.com/datenschutzbestimmungen.html

Calenso

This website uses Calenso. The provider is Braincept AG, Neuenkirchstrasse 19, 6203 Sempach-Station, Switzerland, Europe (website: https://www.calenso.com).

We use Calenso to make appointments and group appointments bookable online. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR.

When booking an appointment, you will be asked for your name, email address and, in some cases, your telephone number. The information sent to us will remain with us until you ask us to delete it or the purpose for data storage no longer applies. Mandatory legal provisions - especially retention periods - remain unaffected. If you prefer not to make appointments with us via Calenso, you can alternatively contact us by email or phone.

In addition, we have concluded a data processing agreement (DPA) with Calenso. This ensures that Calenso only uses the user data within the framework of EU data protection standards for processing requests and does not pass them on to third parties.

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

For more information about Calenso and the data collected, please refer to the Calenso privacy policy under the following link: https://calenso.com/datenschutz/

gTranslate and Google Translate

This website uses gTranslate, which is based on Google Translate, to offer the option of translating the page into other languages.

For this purpose, the browser you are using must connect to the gTranslate.io and Google servers. This gives gTranslate.io and Google knowledge that our website has been accessed via your IP address. 

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

Further information about handling user data, can be found in the data protection declaration of Google at  https://www.google.de/intl/de/policies/privacy/, as well as in the privacy policy of gtranslate.io https://de.gtranslate.io/Bedingungen

Zoom

We use the "Zoom" tool to carry out online meetings, video conferences and webinars (hereinafter: "Online Meetings").

Depending on the type and scope of use of "Zoom", different types of data are collected or processed. This includes in particular:

  • Information about yourself (e.g. first and last name, email address, profile picture)
  • Meeting metadata (e.g. date, time and duration of communication, name of the meeting, participant IP address)
  • Device / hardware data
  • Text, audio and video data
  • Connection data (e.g. phone numbers, country names, start and end times, IP addresses)

In the following we would like to inform you in more detail about the scope of data processing.

If you take part in an online meeting as an external participant, you will receive an access link from the host by email. When registering for the online meeting, you must then provide your name and, if applicable, your e-mail address.

In addition, the tool collects user data that is required for the provision of the service. This includes in particular technical data about your devices, your network and your Internet connection, such as IP address, device type, operating system type and version, client version, camera type, microphone or loudspeaker, type of connection.

You can, but do not have to provide further information about yourself. You are also free to use the chat function during the online meeting. You can also switch your camera and microphone on, off or mute yourself. By default, the camera and microphone are disabled at the start of a meeting.

If you use the chat function, the text entries you have made are processed in order to display them in the "online meeting". The chat is not logged. If you switch on your camera or microphone, the data from the microphone of your device and any video camera on the device will be processed for the duration of the meeting.

Please note that any information that you or others upload, provide or create during an online meeting will be processed at least for the duration of the meeting. This includes in particular chat / instant messages, files, whiteboards and other information that is shared while using the service. There are no records.

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

Further information on the processing of your data when using "Zoom", a detailed list of the data collected and processed by "Zoom" and the "Zoom" data protection information can be found at: https://zoom.us/de-de/privacy.html.

connector

We use the recruiting tool Connectoor to receive and manage the application and thus for the purpose of (possibly) establishing an employment relationship. The provider of this application is the

job Economy GmbH
Meinekestr. 26
10719 Berlin / Germany
Germany

Telephone: +49 (0)30 / 555 78 77 20
Telephone: +49 (0)30 / 889 221 – 20
Email: info@connectoor.com

If you apply to us via the Connectoor, the following happens. The provider collects the following data from you on our behalf:
Your title, your first and last name, your availability data, your other data from the application.

We can then access an internal area of ​​this recruiting tool and view your applicant data. We then also have the following options: making notes that are linked to your application data; internal communication about your application (possibly with the relevant departments); Documentation of the decision on the further processing of the application, invitation to one or more job interviews, invitation to one or more trial days, transmission of an employment contract document, preparation of a rejection through to the implementation of onboarding measures. Further details on the possible areas of application can be found here: https://www.connectoor.com/funktionen/

The legal basis for this is Article 88 Paragraph 1 GDPR in conjunction with Section 26 Paragraph 1 BDSG2018, according to which the processing of application data is also permissible without the consent of the applicant if this is necessary for the decision on the establishment of an employment relationship. The fact that we use an external service provider, namely the provider of the connector, does not prevent the assertion of this legal basis. Because we have carefully selected this provider, contractually bound it in accordance with the law and check it regularly. These processes are always in accordance with Article 28 GDPR, which regulates the so-called order processing.

In the event that an employment relationship comes about between us, we will store your application data until the end of the statutory retention period, which usually ends no later than ten years after the end of the employment relationship. In the event that unfortunately no employment relationship comes about, the following applies: Of course, we don't like to turn down anyone and we don't like to be turned down either. In the cases in which this unfortunately happens, we store your application data for three months after receipt of the respective rejection. In doing so, we refer to Article 6 Paragraph 1 lit. f GDPR. According to this provision, processing is permitted to protect the legitimate interests of the person responsible or a third party, provided that the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, do not prevail. We derive our legitimate interest from § 15 paragraph 4 of the General Equal Treatment Act (AGG). According to this provision, a claim for compensation after discrimination must be asserted in writing within a period of two months. The period begins in the application process with the receipt of the rejection. In our opinion, if we are not aware of a complaint six months after the cancellation, it cannot be assumed that there is one, so that we may store the data until then to protect our legitimate interests (defense against a claim for compensation). If you assert a violation of the ban on discrimination, we may store data until the process is completed; this is also to safeguard our legitimate interests (defense against a claim for compensation). Here, in particular, we exercise our right to issue instructions to the provider of the connector.

There is no legal obligation to collect this data in the application phase. However, there is a possibility that the absence of some or all data may occasionally lead to inquiries or, in the case of permanent absence, to the impossibility of hiring.

The data protection declaration of this provider can be found here: https://www.connectoor.com/datenschutz/. We would like to point out that we remain responsible for the processing operations ourselves, despite the integration of the connector.

Microsoft Advertising

We use the Microsoft Advertising service from Microsoft Ireland Operations Limited (Ireland/EU) (formerly Bing Ads) on our website. Microsoft Advertising is an online marketing service that uses the Universal Event Tracking (UET) tool to help us display advertisements in a targeted manner via the Microsoft Bing search engine. Microsoft Advertising uses cookies to do this. Personal data is processed in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about device and browser settings.

Microsoft Advertising collects data via UET that allows us to track audiences thanks to remarketing lists. For this purpose, a cookie is stored on the end device used when you visit our website. Microsoft Advertising can be used to recognize that our website has been visited and that an advertisement can be displayed when Microsoft Bing or Yahoo is used later. The information is also used to create conversion statistics, ie to record how many users have reached our website after clicking on an ad. This tells us the total number of users who clicked on our ad and were redirected to our website. However, we do not receive any information with which users can be personally identified.

Further information on these processing activities, the technologies used, stored data and the storage period can be found in the settings of our consent management tool. The processing takes place only with your consent according to § 15 Abs. 3 TMG or Art. 6 Abs. 1 Letter a DSGVO. You can withdraw your consent via our consent management tool.

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

You can also opt out of personalized advertising at Microsoft at: https://about.ads.microsoft.com/de-de/ressourcen/richtlinien/personalisierte-anzeigen.

Visme

We use Visme to display interactive graphics on our website. This is a service of Visme, 9211 Corporate Blvd., Suite 308, Rockville, MD 20850.

In order to enable the display of interactive graphics on our website, a connection to the Visme server in the USA is established when our website is accessed.

Legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.

Through the connection to Visme established when you visit our website, Visme can determine from which website your request was sent and to which IP address the display of the graphic is to be sent.

Further information on security and data protection at Cloudflare can be found here:  https://www.visme.co/privacy/.

Cloudflare Insights

We have integrated Visme on our website. This service uses, among other things, Cloudflare Insights. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare Insights is a service of Cloudflare, Inc., which develops cloud-based software that allows website and application owners to track the performance of their services.

Cloudflare Insights offers the possibility of determining statistical evaluations of the technical performance of our services (e.g. the duration of a specific database query, the stability and availability of our servers, or the response time of our servers). For this purpose, application and browser data are collected and stored in the browser using cookies.

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. For more information about security and privacy at Cloudflare, see: https://www.cloudflare.com/privacypolicy/.

sentry.io

We have integrated Visme on our website. This service uses, among other things, Sentry, an error management tool. Service provider is the American company Sentry Inc., San Francisco, 132 Hawthorne St, San Francisco, USA.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. These clauses are based on an implementation decision of the EU Commission. You can find the decision and the relevant Standard Contractual Clauses here, among others: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de. For more information on Sentry's Standard Contractual Clauses, visit https://sentry.io/legal/dpa/

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

You can find out more about the data processed through the use of Sentry in the data protection declaration https://sentry.io/privacy/.

Facebook Pixel

We use Facebook Pixel from Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, to create so-called Custom Audiences, i.e. to segment visitor groups of our online offer, determine conversion rates and then optimize them. This happens in particular when you use advertisements that we have with Facebook Ireland Ltd. have switched, interact.

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

Further information can be found in the data protection declaration for Facebook Pixel: https://www.facebook.com/privacy/explanation.

Font Awesome

This page uses Font Awesome for the uniform display of symbols. The provider is Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, Massachusetts, USA.

When you call up a page, your browser loads the required fonts into your browser cache in order to display text, fonts and symbols correctly. For this purpose, the browser you are using must connect to the Font Awesome servers. This gives Font Awesome knowledge that this website was accessed via your IP address. 

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

Further information on Font Awesome can be found in the Font Awesome privacy policy at: https://fontawesome.com/privacy.

HubSpot

We use Hu on our websitebSpot, a digital marketing tool. Service provider is the American company HubSpot, Inc., 25 First St 2nd Floor Cambridge, MA, USA.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. These clauses are based on an implementation decision of the EU Commission. You can find the decision and the relevant Standard Contractual Clauses here, among others: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de The data processing condition can be found at https://legal.hubspot.com/dpa.

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

More about the data obtained by using HubSpot be processed, see on https://legal.hubspot.com/de/privacy-policy.

LinkedIn Insight Tag and LinkedIn Ads

This website uses LinkedIn's Insight Tag and LinkedIn Ads. The provider of these services is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

With the help of the LinkedIn Insight Tag we receive information about the visitors of our website. If a website visitor is registered with LinkedIn, we can, among other things, analyze the professional key data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus better align our site to the respective target groups. We can also use LinkedIn Insight Tags to measure whether visitors to our website make a purchase or take another action (conversion measurement).

LinkedIn Ads is a service provided by LinkedIn Corporation that displays targeted advertising to users. LinkedIn Ads uses cookies and other browser technologies to evaluate user behavior and to recognize users. LinkedIn Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, LinkedIn Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent will be transmitted to the provider. In this case, your data will be passed on to the operator of LinkedIn Ads, the LinkedIn Corporation, Sunnyvale, California, US.

LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted from LinkedIn after seven days. The remaining pseudonymised data will then be deleted within 180 days.

The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it for its own advertising purposes.

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

Details can be found in LinkedIn's privacy policy https://www.linkedin.com/legal/privacy-policy.

Microsoft Clarity

We use the web analysis software Microsoft Clarity for our website. Service provider is the American company Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. These clauses are based on an implementation decision of the EU Commission. You can find the decision and the relevant Standard Contractual Clauses here, among others: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de. More information about the standard contractual clauses at Microsoft can be found at https://learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

You can find out more about the data processed by using Microsoft in the data protection declaration https://privacy.microsoft.com/de-de/privacystatement.

PHYTEC America

We use content from our sister company PHYTEC America (wiki.phytec.com) for our website. Service provider is the American company PHYTEC America, 203 Parfitt Way SW, Bainbridge Island, WA 98110, USA.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. These clauses are based on an implementation decision of the EU Commission. You can find the decision and the relevant Standard Contractual Clauses here, among others: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

The legal basis is Art. 6 Paragraph 1 lit.f) GDPR.

You can find out more about the data that is processed through the use of PHYTEC America in the data protection declaration https://www.phytec.com/privacy-policy/.

 

Based on: Sample Privacy Policy of Law firm Weiß & Partner