Privacy Policy
Information on the processing of personal data (data protection information)
Welcome to the data protection area Ariadne maps GmbH and legal form. We are very pleased about your interest in our company. We would like to use this data protection notice to inform you in detail about when we collect which data and how it is processed.
Responsible person
The person responsible according to Article 4 Paragraph 7 of the EU General Data Protection Regulation (GDPR) is:
Ariadne Maps GmbH
- Georgios Pipelidis
- Nikolaos Tsiamitros
Brecherspitzstr. 8, 81541 Munich, Germany
Phone: +49 174 4079675
Email: contact@ariadne.inc
Data Protection Officer
You can reach our data protection officer at:
Society for personnel services mbH
Pestalozzistrasse 27, 34119 Kassel
Phone: +49 561 78968-80
Email: datenschutz@gfp24.de
General information on the collection of personal data
With the following information we inform you transparently about the type and extent of processing of personal data,
- as part of your visit to our website,
- the use of our online platforms,
- external online presences on social media platforms
- as part of the application process
- as well as in business relationships with customers and service providers
be collected. The legal basis for our data protection is, in particular, the requirements of the General Data Protection Regulation (GDPR) as well as the supplementary regulations of the Federal Data Protection Act (BDSG) and the Telecommunications Telemedia Data Protection Act (TTDSG).
Purpose/legal basis of processing
In cases where we obtain your consent for processing personal data, Art. 6 Para. 1 lit. a GDPR serves as the legal basis.
- When processing personal data that is necessary to fulfill a contract concluded between you and us, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
- If processing of personal data is necessary to fulfill a legal obligation to which we are subject, Art. 6 Para. 1 lit. c GDPR serves as the legal basis.
- If the vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR is the legal basis.
- In the event that the processing of personal data is necessary to protect a legitimate interest of our company, or a third party and your interests, fundamental rights and freedoms do not outweigh the first-mentioned interest, Art. 6 Para. 1 lit. f GDPR is the legal basis for this the processing.
- If cookies or similar technologies are set during data processing, these are stored or accessed to information on a user's end device (e.g. device fingerprinting) in accordance with Section 25 Paragraph 1 TTDSG in conjunction with. V. m. Art. 6 Para. 1 lit. a GDPR.
- If the storage of information in the user's end device or access to information already stored in the end device is necessary, this is done on the basis of Section 25 Paragraph 2 Sentence 2 TTDSG.
Disclosure of personal data
If we transfer or disclose your personal data to other parties as part of our processing, this will only be done on the basis of one of the legal bases mentioned above. The recipients of this data may include, for example, payment service providers in the context of contract fulfillment. In cases where we are required to do so by law or court order, we must transmit your data to authorized bodies.
If external service providers support us in processing your data (e.g. data analysis, sending newsletters), this occurs as part of order processing in accordance with Art. 28 GDPR. We only conclude appropriate contracts with service providers who offer sufficient guarantees that suitable technical and organizational measures ensure the protection of your data.
Data transfer to third countries
Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is in accordance with the legal requirements. Subject to express consent or contractually or legally required transfer, we only process or have the data processed in third countries with a recognized level of data protection or in accordance with Art. 44 ff. GDPR on the basis of special guarantees, such as contractual obligations through so-called standard protection clauses of the EU Commission (information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).
Storage of data
As soon as the respective purpose for storage no longer applies, we will delete or block your personal data. Furthermore, your personal data will only be stored if special legal retention periods (in particular commercial and tax retention obligations) at national or European level prevent deletion.
Definitions
Our data protection information is based on terms used and defined in the GDPR. In order to ensure that our data protection regulations are easy to read and understand, we would like to explain the most important terms in advance.
Personal Data
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”). A natural person is considered to be identifiable if he or she can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
Processing
“Processing” is any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data, such as the collection, recording, organization, structuring, storage, adaptation or modification, reading, querying, etc Use, disclosure by transmission, distribution or other form of provision, alignment or combination, restriction, deletion or destruction.
Responsible person
“Controller” is the natural or legal person, public authority, institution or other body which, alone or jointly with others, decides on the purposes and means of processing personal data. If the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Pseudonymization
“Pseudonymization” is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures that ensure that the Personal data is not assigned to an identified or identifiable natural person.
Processor
“Processor” is a natural or legal person, public authority, institution or other body that processes personal data on behalf of the controller.
Recipient
“Recipient” means a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not it is a third party. However, public authorities which may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients.
Third Party
“Third party” means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.
Consent
“Consent” is any voluntary, informed and unambiguous expression of wishes given by the data subject for the specific case, in the form of a statement or other unambiguous confirmatory act, by which the data subject indicates that he or she consents to the processing of the personal data relating to him or her data is agreed.
Profiling
“Profiling” is any type of automated processing of personal data, which consists in using these personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health , analyze or predict that natural person's personal preferences, interests, reliability, behavior, location or movements.
Rights of those affected
The processing of personal data gives you rights as a data subject, which you can exercise against us at any time. These are:
- Right to revoke a declaration of consent under data protection law in accordance with Art. 7 Para. 3 GDPR
- Right to information about your personal data stored by us in accordance with Art. 15 GDPR
- Right to correct incorrect or complete incomplete data in accordance with Art. 16 GDPR
- Right to delete your data stored by us in accordance with Art. 17 GDPR
- Right to restrict the processing of your data in accordance with Art. 18 GDPR
- Right to data portability in accordance with Art. 20 GDPR
- Right to object in accordance with Art. 21 GDPR
- Automated decisions in individual cases including profiling in accordance with Art. 22 GDPR.
Right to information
You have the right to find out from us whether and – if so – which personal data we process about you and to request copies of your personal data from us. Please note that under certain circumstances your right to information may be restricted in accordance with legal regulations.
Right to rectification
If the information concerning you is no longer accurate, you have the right to immediately request that incorrect personal data concerning you be corrected and, if necessary, that incomplete personal data be completed.
Right to deletion
In accordance with legal requirements, you have the right to demand that data concerning you be deleted immediately, for example if the data is no longer needed for the purposes pursued and the legal storage and archiving regulations do not conflict with deletion.
Right to restriction of processing
Within the framework of the provisions of Art. 18 GDPR, you have the right to request a restriction on the processing of the data concerning you, e.g. if you have objected to the processing, for the duration of the review to see whether the objection can be upheld.
Right to data portability
You have the right to have data that you have provided to us delivered to you or to a third party in a common, machine-readable format. If you request the data to be transferred directly to another person responsible, this will only be done if it is technically feasible.
Right to revoke a declaration of consent under data protection law
If the processing of your personal data is based on your consent given to us, you have the right to withdraw this consent at any time. The revocation does not affect the lawfulness of the processing carried out based on the consent before the revocation.
You can send your revocation formally to Ariadne Maps GmbH, Brecherspitzstr. 8, 81541 Munich, Germany or at contact@ariadne.inc. We would like to point out that your objection can also be made in further procedures or must be made for technical reasons. Further information can be found in the services described in each case.
Right to object to processing
Under the conditions of Art. 21 Para. 1 GDPR, data processing based on Art. 6 Para. 1 lit. e or f GDPR can be objected to for reasons that arise from your particular situation. This also applies to profiling based on these provisions. If you exercise your right to object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or Defense of legal claims.
You can submit your objection formally Ariadne Maps GmbH, Brecherspitzstr. 8, 81541 Munich, Germany or at contact@ariadne.inc. We would like to point out that your objection can also be made in further procedures or must be made for technical reasons. Further information can be found in the services described in each case.
Right to complain to the data protection authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that your personal data is not being processed lawfully. The address of the supervisory authority responsible for our company is:
Bavarian State Office for Data Protection Supervision
PO Box 1349, 91504 Ansbach
Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
Email: poststelle@lda.bayern.de
Automatic decision-making in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Use of online platforms
Below we will inform you when and in what context data is processed when you use our online offerings.
Collection of personal data when you visit our website
If you use the website exclusively for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you view our website, we collect the data listed below. These are technically necessary to display our website to you and to ensure the stability and security of the display. The legal basis for storing information in the form of cookies or in the server log file on your device or accessing this information on your device is Section 25 Paragraph 2 No. 2 TTDSG. The associated data processing is based on Article 6 Paragraph 1 Letter f GDPR:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status / HTTP status code
- Amount of data transferred in each case
- Website from which the request comes
- Browser
- Operating system and its interface
The processing of the IP address is anonymized by shortening it or deleted after it is no longer technically necessary for accessing/using the website.
Use of cookies
In addition to the data mentioned above, cookies are stored on your device (e.g. PC, laptop, smartphone) when you use our website. Cookies are small text files that are stored on your device associated with the browser you are using and through which certain information flows to the place that sets the cookie (here, us). Cookies cannot run programs or transmit malicious programs to your devices. They serve to make the online offering more user-friendly and effective overall.
This website uses the following types of cookies, the scope and functionality of which are explained below:
Transient cookies
Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies
Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete cookies at any time in your browser's security settings.
We use cookies on our website that are generated by us as the website operator and are necessary for the full functionality and presentation of our offerings on the website. The legal basis for storing information in the form of cookies on your device or accessing this information on your device is Section 25 Paragraph 2 No. 2 TTDSG. We use these cookies out of a legitimate interest in accordance with Article 6 Paragraph 1 Letter f of the GDPR to ensure our online offering.
In addition to the cookies set by us as the controller, cookies offered by other providers are also used. We process these cookies based on your consent in accordance with Article 6 Paragraph 1 Letter a and Section 25 Paragraph 1 TTDSG (storage of cookies or access to information on a device (e.g. via device fingerprinting). Further information about the Use and cooperation with external service providers can be found in the data protection information of the respective online offerings.
You can configure your browser settings according to your wishes and, for example, accept cookies from external providers or reject all cookies. However, we would like to point out that you may not be able to use all of the functions of this website. If you have agreed to accept cookies and would like to object to this in the future, you can delete the stored cookies in the settings of the browser you are using.
You can find out more about these options for the most commonly used browsers using the following links:
If no restrictions have been made on the cookie settings, cookies that enable and ensure the necessary technical functions remain on your device until you close the browser; other cookies may remain on your device for longer. The exact cookie durations are shown in our consent banner.
SSL OR TLS encryption
Our website uses TLS encryption (formerly SSL) for security and protection when transmitting confidential content. Orders or contact requests that you send to us are therefore carried out via transport encryption. Depending on the browser type, you can recognize this either by the lock symbol and/or by the https protocol in the address line.
External hosting
We host our website externally. The personal data collected on this website is stored on the server(s) of the host(s). This may include all information relating to users of our online offering that arises during use and communication, such as content data (e.g. entries in online forms); Usage data (e.g. websites visited, access times); Meta/communication data (e.g. device information, IP addresses).
We have also concluded a contract for order data processing (AV). This contract regulates the scope, type and purpose of the access options of the above-mentioned provider(s) to the data. The access options are only limited to necessary access that is required to fulfill the hosting services and in compliance with the GDPR.
Contact
Contact form
When you contact us via a contact form, the data you provide (Your email address, your full name, your telephone number, the content of your message) stored by us to fulfill your request. The processing of the data entered in the contact form is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. If your contact request is related to the fulfillment of the contract or the implementation of pre-contractual measures, we process your data on the basis of Article 6 Paragraph 1 Letter b GDPR. We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention requirements. You can revoke this consent at any time. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation.
Inquiries by email, telephone, fax
When you contact us by email, telephone or fax, the personal data you provide (Your email address, if applicable your name, your telephone number, the content of your message) stored by us in order to process your request. We will not pass on this data without your consent. Data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR, provided that your request is related to the fulfillment of the contract or is necessary to carry out pre-contractual measures. In all other cases, we process your data based on your consent in accordance with Article 6 (1) (a) GDPR and/or based on our legitimate interests in accordance with Article 6 (1) (f) GDPR. Our legitimate interest lies in the effective processing of your request. The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.
Customer account / registration
You can voluntarily create a customer account. When you create an account, the data you provide will be stored in a revocable manner. At the same time, we then save the IP address as well as the date and time of your registration. This data is not passed on to third parties. If you have given your consent, the legal basis for processing the data is Article 6 (1) (a) GDPR. If the registration serves to fulfill a contract to which you are a party or to carry out pre-contractual measures, the additional legal basis for the processing of the data is Article 6 Paragraph 1 Letter b GDPR. In addition to the personal data requested during registration, you must provide a password of your choice to set up a customer account. This is used together with your email address to access your customer account. Please treat your personal access data confidentially and in particular do not make it accessible to unauthorized third parties. Your data will only be used for as long as it is necessary for the existing customer relationship. You can also view and change the data stored about you in your customer account at any time. You have the option to terminate your user account at any time. In this case, your data will be deleted unless we are obliged to retain it due to commercial and tax law requirements.
Data processing for advertising purposes
Direct mail
If your personal data is processed for the purpose of direct advertising, you have the right, in accordance with Article 21 Para. 2 GDPR, to object at any time to the processing of your personal data for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising. If you object, your personal data will no longer be used for direct advertising purposes.
Postal advertising
If you have concluded a contract with us, we will treat you as an existing customer. Based on our legitimate interest in personalized direct advertising, we reserve the right to save your first and last name, your postal contact details and - if we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your job, industry or business title and to send you interesting information To use offers and information about our products by post. The processing of existing customer data for our own advertising purposes or for the advertising purposes of third parties is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR (legitimate interest). You can object to data processing for the aforementioned purposes at any time, free of charge and with effect for the future. If you object, your data will be blocked for further commercial data processing. We would like to point out that in exceptional cases, advertising material may still be temporarily sent even after your objection has been received. This is technically due to the necessary lead time during the selection and does not mean that we have not implemented your objection.
Product recommendation via email
As a customer of ours, you will receive product recommendations by email, regardless of whether you have subscribed to our newsletter. We strictly adhere to the legal requirements. Unless you have given specific consent, we will only use the email address you provided when placing an order in accordance with Section 7 Para. 3 UWG for our own, similar products that are similar to those that you have purchased from us based on an order you have already placed. The legal basis for this is Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest is to introduce you to other products from our range through direct marketing. You can object to this form of product recommendation at any time, free of charge and with effect for the future, at the end of every product recommendation email. If you object to this advertising measure, your data will be deleted from the corresponding (email) distribution lists.
Newsletter
With your consent, you can subscribe to our newsletter, with which we will inform you about current, interesting offers. We report regularly on Product offers, events/trade fairs, special sales, tips on our product areas, and offers from our cooperation partners.
To register for our newsletter, we use the so-called double opt-in procedure. This means that after you register, we will send you an email to the email address you provided, in which we will ask you to confirm that you would like to receive the newsletter. If you do not complete your registration within 36 hours confirm, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
The only mandatory information for sending the newsletter is your email address. Providing further, separately marked data is voluntary and is used to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis is Article 6 Paragraph 1 Letter a GDPR (consent).
You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in every newsletter email (unsubscribe). On the bottom of every marketing email sent to you, you will have an option to unsubscribe from further sending emails.
HubSpot Ireland Limited
One Sir John Rogerson's Quay, Dublin 2, Ireland
We have concluded a contract for data processing with HubSpot Ireland. In this HubSpot Ireland committed to protecting our customers’ data and not passing it on to third parties.
We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files that are stored on our website. For the evaluations, we link data and the web beacons with your email address and an individual ID. Links received in the newsletter also contain this ID. The legal basis for storing cookies or similar technologies (web beacons) on your device or accessing this information is Section 25 (1) TTDSG. The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR.
You can object to this tracking at any time by clicking on the special link (unsubscribe) provided in every email. The information will be stored for as long as you have subscribed to the newsletter. After you unsubscribe, we store the data purely statistically and anonymously.
Such tracking is also not possible if you have deactivated the display of images in your email program by default. In this case, the newsletter will not be displayed to you in its entirety, and you may not be able to use all functions. If you display the images manually, the tracking mentioned above occurs.
Analysis tools
Google Analytics
This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to Google servers in the USA and stored there. However, if IP anonymization (AnonymizeIP) is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to Google servers in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.
This website uses Google Analytics with the “Anonymize IP” extension. This means that IP addresses are further processed in abbreviated form, meaning that any personal reference can be virtually ruled out. If the data collected about you is personally related, it will be deleted immediately.
We use Google Analytics to analyze the use of our website and to regularly improve it. We can use the statistics obtained to improve our offering and make it more interesting for you as a user. The legal basis for the use of Google Analytics is the consent you have given in accordance with Article 6 Paragraph 1 Letter a GDPR and Section 25 Paragraph 1 TTDSG. We also use Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “personal data”.
You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by using the browser plug-in available under the following link. Download and install: https://tools.google.com/dlpage/gaoptout?hl=de.
Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
Third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: https://www.google.com/analytics/terms/de.html, Overview of data protection: https://support.google.com/analytics/answer/6004245?hl=de as well as the data protection declaration: https://policies.google.com/privacy?hl=de&gl=de.
Tracking tools
Google Tag Manager
This website uses “Google Tag Manager”, a service provided by Google Ireland Limited. Google Tag Manager offers the ability to manage website tags via an interface. The Google Tag Manager tool that implements the tags is a cookie-less domain. However, Google Tag Manager collects your IP address, which can also be transferred to Google's parent company in the USA. Google Tag Manager triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this will remain in effect for all tracking tags implemented with Google Tag Manager.
The legal basis for the processing of your data is Article 6 Paragraph 1 Letter a GDPR (consent) and Section 25 Paragraph 1 TTDSG.
Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
Google Ads
This website uses “Google Ads” (formerly Google AdWords), a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). Google Ads offers the option of using advertising materials on external websites to draw attention to attractive offers from websites you have already visited. This determines how successful individual advertising measures are. These advertising materials are delivered by Google via so-called “AdServers”. For this purpose, so-called ad server cookies are used, through which certain parameters can be measured to measure success, such as display of ads or clicks by users. If you reach our website via a Google ad, Google Ads will store a cookie on your device. These cookies usually expire after 30 days. Cookies are not used to identify you personally. This cookie is usually used to store the following information as analysis values: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wants to be addressed). These cookies enable Google to recognize your web browser. If a user visits certain content or pages on a Google Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer is assigned a different cookie. Cookies cannot therefore be tracked via the website of Google Ads customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive anonymized, statistical evaluations from Google. Based on these evaluations, we can determine the effectiveness of the advertising measures used. We do not receive any further data from the use of advertising materials; in particular, we cannot identify users based on this information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google servers. We have no influence on the scope and further use of the data collected by Google through the use of Google Ads. As far as we know, Google receives the information that you have accessed the relevant part of our website or clicked on an advertisement from us. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or logged in, it is possible that Google will find out your IP address, store it and process it for other purposes.
We use Google Ads for marketing and optimization purposes, in particular to show you relevant and interesting advertisements, to improve evaluations of campaign performance and to achieve a fair calculation of advertising costs. The legal basis is the consent you have given in accordance with Article 6 Paragraph 1 Letter a GDPR and Section 25 Paragraph 1 TTDSG.
You can prevent cookies from functioning by deleting existing cookies and deactivating the storage of new cookies in the settings of your web browser. We would like to point out that in this case you may not be able to fully use all of the functions of our website. You can also prevent the storage of cookies by using your web browser https://www.google.de/settings/ads set so that cookies from the domain www.googleadservices.com be blocked. Please note that this setting will be deleted if you delete your cookies. You can also view interest-based ads via the link https://optout.aboutads.info deactivate. We would like to point out that this setting will also be deleted if you delete your cookies in the web browser.
Third party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland
Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
- Further information about Google's use of data
- settings and objection options
- and data protection can be found on the following Google websites:
HubSpot
We use the services of the software manufacturer HubSpot. HubSpot is a software company from the USA with a branch in Ireland (HubSpot Ireland Limited, One Sir John Rogerson's Quay, Dublin 2, Ireland). HubSpot is an integrated software solution that we use to cover various aspects of our online marketing. These include, among others:
- Email marketing (newsletters and automated mailings)
- Chat function
- Reporting (e.g. traffic sources, access, etc.)
- Contact management (e.g. user segmentation & CRM)
- Landing pages and contact forms
So-called “web beacons” are used and cookies are stored on the device you are using. The following personal data is collected: IP address, geographical location, type of browser, duration of the visit, pages accessed
The information collected and the content of our website are stored on servers of our software partner HubSpot Ireland.
We use HubSpot to analyze the use of our website. This allows us to continually optimize our website and make it more user-friendly. We also use information to determine which of our company's services are of interest to customers and newsletter subscribers and to contact them for advertising purposes.
The cookies have a usual storage period of 13 months. In addition, we delete the personal data collected via HubSpot as soon as the purpose for which it was collected has been achieved, unless deletion is contrary to statutory retention periods.
We have concluded an order processing contract in accordance with Art. 28 GDPR with HubSpot Ireland. Our data is also stored there. As part of processing via HubSpot, data can be transferred to the USA. The security of the transmission is secured via so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. Details can be found here: https://www.hubspot.de/data-privacy/privacy-shield.
Cookies are stored on the basis of Article 6 Paragraph 1 Letter a GDPR and Section 25 Paragraph 1 TTDSG. You can give your consent revoked at any time.
Embedded third party content
Google Maps
On this website we use Google Maps. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. Metadata is transmitted to the service provider, which may possibly be personal. Google also obtains your IP address. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, please log out before activating the function. The information collected by Google is also transmitted to Google servers (Google Inc.) in the USA. Google saves your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this you should preferably contact Google.
Only when the service is activated will the function be started and data transmitted to the service provider. The legal basis for the processing of your data is Article 6 Paragraph 1 Letter a GDPR (consent) and Section 25 Paragraph 1 TTDSG.
Third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
YouTube
We have integrated YouTube videos into our online offering, which are stored on https://www.youtube.com/ and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. This means that no data about you as a user is transferred to YouTube if you do not play the videos. According to YouTube, the data is only transmitted when you play the videos. We have no influence on this data transfer. By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, metadata is transmitted to the service provider, which may possibly be personal. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want to be associated with your YouTube profile, log out before activating the function. YouTube saves your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this you should preferably contact YouTube.
Only when the service is activated will the function be started and data transmitted to the service provider. The legal basis for the processing of your data is Article 6 Paragraph 1 Letter a GDPR (consent) and Section 25 Paragraph 1 TTDSG. Your consent can be revoked at any time in the future.
Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
Third party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.
Online video conferencing tools
Microsoft Teams
We use the “Microsoft Teams” tool Telephone and video conferences, online meetings, video consulting, digital coaching and/or webinars (hereinafter: “online meetings”). Microsoft Teams is a service from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
If you have access to the Microsoft Teams website (https://teams.microsoft.com/), Microsoft is responsible for data processing. Accessing this website is necessary to download the necessary software if it cannot or should not be used directly and without downloading via an Internet browser.
Data categories
When using Microsoft Teams, different types of data are processed. The total volume of data processing also depends on the information provided by the user before, during and after an “online meeting”.
- First name, last name, phone (optional), email address, password (if “single sign-on” is not used), profile picture (optional), department (optional)
- Topic, description (optional), date, time, duration, subscriber IP addresses, device/hardware information
- MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of online meeting chat.
- Information about the incoming and outgoing phone number, country name, start and end time. If necessary, additional connection data such as the IP address of the device can be saved.
- You may have the opportunity to use the chat, question or survey functions in an “online meeting”. The text entries you make will be processed in order to display them in the “online meeting” and, if necessary, to record them. In order to enable the display of video and the playback of audio, the data is processed during the meeting using a microphone and a possible video camera on the end device. The data transmission from the camera and microphone can be switched off or muted at any time and by each user independently via the Microsoft Teams applications.
Storage of data
The “online meetings” will not be recorded. If we want to record “online meetings,” we will notify you in advance and obtain consent. The fact of the recording will also be displayed to you in the Microsoft Teams app.
Legal basis for data processing
As far as personal data of employees the [company] are processed, Section 26 BDSG is the legal basis for data processing. If, in connection with the use of Microsoft Teams, personal data is not necessary for the establishment, implementation or termination of the employment relationship, but is nevertheless an elementary part of the use of Microsoft Teams, then Art. 6 Para. 1 lit. f GDPR is the legal basis for this data processing. In these cases, our interest is in the effective implementation of “online meetings”. Furthermore, the legal basis for data processing when conducting “online meetings” is Article 6 (1) (b) GDPR, as long as the meetings are carried out within the framework of contractual relationships.
Recipient/transfer of data
Personal data processed in connection with participation in “online meetings” will generally not be passed on to third parties unless they are specifically intended to be passed on. Apart from this, data will only be passed on to third parties if we are legally obliged to do so (e.g. by a court order) or if those affected have expressly consented to the transfer of their data. The Microsoft Teams provider who supports us in conducting “online meetings” necessarily receives knowledge of the above-mentioned data, insofar as this is provided for within the framework of our order processing agreement with Microsoft.
Data processing outside the European Union
In principle, data processing outside the European Union (EU) does not take place, as we have limited our storage location to data centers in the European Union. However, we cannot technically completely rule out routing or storage on servers outside the European Union at the processor Microsoft.
zoom
We use the “Zoom” tool Telephone and video conferences, online meetings, video consulting, digital coaching and/or webinars (hereinafter: “online meetings”). Zoom is a service of Zoom Video Communications, Inc. 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA.
If you visit the Zoom website (https://zoom.us), Zoom is responsible for data processing. Accessing this website is necessary to download the necessary software if it cannot or should not be used directly and without downloading via an Internet browser. You can also use Zoom if you enter the respective meeting ID and, if necessary, other access data for the online meeting directly in the Zoom app. Even without the app, basic functions can be used via a browser version.
Data categories
When using Zoom, different types of data are processed. The total volume of data processing also depends on the information provided by the user before, during and after an “online meeting”.
- First name, last name, phone (optional), email address, password (if “single sign-on” is not used), profile picture (optional), department (optional)
- Topic, description (optional), date, time, duration, subscriber IP addresses, device/hardware information
- MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of online meeting chat.
- Information about the incoming and outgoing phone number, country name, start and end time. If necessary, additional connection data such as the IP address of the device can be saved.
- You may have the opportunity to use the chat, question or survey functions in an “online meeting”. The text entries you make will be processed in order to display them in the “online meeting” and, if necessary, to record them. In order to enable the display of video and the playback of audio, the data is processed during the meeting using a microphone and a possible video camera on the end device. The data transmission from the camera and microphone can be switched off or muted at any time and by each user independently using the Zoom application.
Storage of data
The “online meetings” will not be recorded. If we want to record “online meetings,” we will notify you in advance and obtain consent. The fact of the recording will also be displayed to you in the Zoom app. The recordings stored on Zoom's cloud servers are automatically deleted after 30 days at the latest. If online meetings are not recorded, the provider says it does not save the meeting content after the online meeting has ended. If necessary for the purposes of logging the results of an online meeting, we will log the chat content. However, this will usually not be the case. In the case of webinars, we can also process the questions asked by webinar participants for the purposes of recording and following up on webinars If you are logged in with a Zoom account, reports about “online meetings” (meeting metadata, telephone dial-in data, questions and answers in webinars, poll function in webinars) can be stored on Zoom for up to one month. The “attention monitoring” available on Zoom is disabled. The text within the chat function is saved in a separate file and is not part of the video if it is recorded. Automated decision-making within the meaning of Art. 22 GDPR is not used.
Legal basis for data processing
As far as personal data of employees the [company] are processed, Section 26 BDSG is the legal basis for data processing. If, in connection with the use of Zoom, personal data is not necessary for the establishment, implementation or termination of the employment relationship, but is nevertheless an elementary part of the use of Zoom, then Art. 6 Para. 1 lit. f GDPR is the legal basis for data processing . In these cases, our interest is in the effective implementation of “online meetings”. Furthermore, the legal basis for data processing when conducting “online meetings” is Article 6 (1) (b) GDPR, as long as the meetings are carried out within the framework of contractual relationships.
Recipient/transfer of data
Personal data processed in connection with participation in “online meetings” will generally not be passed on to third parties unless they are specifically intended to be passed on. Apart from this, data will only be passed on to third parties if we are legally obliged to do so (e.g. by a court order) or if those affected have expressly consented to the transfer of their data. Zoom Video Communications Inc. supports us in processing your data as an external service provider and processor within the meaning of Art. 28 GDPR. As a processor, Zoom Video Communications Inc. processes your data strictly in accordance with instructions and on the basis of a separately concluded order processing agreement.
Data processing outside the European Union
Data processing can also take place outside the EU or EEA. The data collected directly during online meetings (such as images, sound, conversation content) is generally processed at the nearest Zoom server location, and therefore regularly within the EU, otherwise exclusively on US servers. The remaining metadata is processed on US servers. The data is transmitted on the basis of the EU Commission's standard data protection clauses as a suitable guarantee for an appropriate level of data protection in accordance with Article 46 (2) (c) GDPR as well as technical and organizational measures. The data is e.g. B. encrypted during transport over the Internet and thus generally protected from unauthorized access by third parties. Zoom also provides end-to-end encryption for online meetings as well as the use of the data routing function.
Social media presences
Information about social media
We operate publicly accessible profiles on social networks to draw attention to our services and products. There we would like to get in touch with you as a visitor and user of these pages and our website. User data can be processed outside the European Union. This may create risks for you as a user and may make it more difficult to enforce your rights. When selecting the social media platforms we use, we ensure that the operators are committed to complying with EU data protection standards. If you visit one of our social media sites (e.g. Facebook), we, company, address, are responsible together with the operator of the respective social media platform in accordance with the GDPR and other data protection regulations.
Data processing on social media platforms
We have no influence on the processing of personal data by the respective platform operator. For example, social networks such as Facebook use your data for market research and advertising purposes. Among other things User behavior can be analyzed and a usage profile can be created based on the user's resulting interests. The social media operators use cookies to store and further process this information. These are text files that are stored on the user's various devices. If you have a profile on the respective social media platform and are logged in, the storage and analysis even takes place across devices. In this way, interest-based advertising can be shown to you inside and outside of the respective social media presence. Data processing may also affect people who are not registered as users on the respective social media platform. Statistical data from different categories is available to us via social media platforms. These statistics are generated and provided by the social media operator. As the operator of the fan site, we have no influence on the creation and presentation. We use this data available in aggregated form (Total number of page views, likes, page activity, post interactions, reach, video views, post reach, comments, shared content, replies, proportion of men and women, origin based on country and city, language, views and clicks in the shop, clicks on Route planner, clicks on phone numbers) to make our posts and activities on our fan page more attractive to users. Due to the constant development of social media platforms, the availability and processing of data is changing, so we refer to the platforms' data protection declarations for further details.
Legal basis
The operation of these fan pages, including the processing of users' personal data, is based on our legitimate interests in providing timely and supportive information and interaction options for and with our users and visitors in accordance with Article 6 Paragraph 1 Letter f of the GDPR . You may also have given a platform operator your consent to data processing, in which case Art. 6 Para. 1 lit. a GDPR is the legal basis. For a comprehensive description of the respective data processing and the objection options (opt-out), we refer to the data protection declarations and information of the relevant platform operator.
Storage period
The data we collect directly via social media sites will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it or revoke your consent to storage. Saved cookies remain on your device until you delete them. Mandatory legal provisions – especially retention periods – remain unaffected. We have no influence on the storage period of your data, which is stored by social network providers for their own purposes. Further information can be found directly from the operator of the social network (e.g. in their data protection declaration, see below).
Our social networks
Provider: Meta Platforms, Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
YouTube
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data protection for applications
We offer you the opportunity to join Apply to us by email, post, online application form or via our career portal. Below we will inform you about the scope, purpose and use of your data personal data collected during the application process.
Scope and purpose of data collection
In order for us to consider you in the application process for a specific position, we require standard and meaningful application documents with which you can inform us about your personality profile and your qualifications. To those included in your application The personal data provided to you and transmitted to us usually includes: cover letter, CV with the usual personal information (first and last name, date of birth, address, telephone number, email address, photo) as well as supporting documents and certificates. Basically, we only take your application documents to decide whether to fill the position for which you have expressly applied. We only process the personal data provided to us to the extent that this is necessary for the purpose of deciding on the establishment of an employment relationship with us. The legal basis for this is Art. 6 Para. 1 lit. b GDPR, Art. 88 GDPR in conjunction with Section 26 Para. 1 Sentence 1 BDSG (new), insofar as it concerns information that we receive from you as part of the application process (name, Contact details, date of birth, information about your professional qualifications and school education or information about further professional development). If you voluntarily provide us with further information, we will process it based on your consent in accordance with Article 6 (1) (a) GDPR. During the application process, further personal data may be collected from you personally and from generally accessible sources for this information purpose. Your personal data will only be passed on within our company to people who are involved in processing your application. If we process personal data about you to defend against legal claims you have asserted against us from the application process, we will refer to Article 6 Paragraph 1 Letter f of the GDPR as the legal basis. The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). If you submit an unsolicited application to us that does not refer to a specific position, we will take your application documents into account when making filling decisions for all positions under consideration. We will share applicant data with selected decision makers of our company to provide a query so that they can find out about your personality profile and qualifications. The legal basis for data processing in this case is also Article 6 Paragraph 1 Letter b GDPR in conjunction with Article 28 GDPR, Section 26 Paragraph 1 BDSG (new).
Categories of recipients of personal data
Your personal data will only be transmitted to third parties for the purposes listed below. We will only pass on your personal data that we received as part of the application process to third parties if:
- You have given your express consent to this in accordance with Article 6 Paragraph 1 Letter a GDPR, Section 26 BDSG (new),
- the disclosure is necessary in accordance with Article 6 Paragraph 1 Letter f of the GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
- in the event that there is a legal obligation for the transfer in accordance with Art. 6 Para. 1 lit. c GDPR and
- this is legally permissible and is necessary for the establishment or processing of contractual relationships with you in accordance with Article 6 Paragraph 1 Letter b GDPR, Section 26 Paragraph 1 Sentence 1 BDSG (new).
Furthermore, on the basis of Art. 28 GDPR, your data will be passed on to technical service providers who will use your data exclusively on our behalf and under no circumstances for their own business purposes. These are IT service providers, hosting providers or providers of applicant management systems. There are no plans to transfer your data to third countries outside the EU or the European Economic Area. If you use the career portal on our website, your entries will be recorded in a cloud-based processing program from the provider Muster-Auftragbearbeiter GmbH, Musterstraße 20, 12345 Musterstadt (hereinafter “processor”). The processor only provides software and computing capacity and has no other influence on the application process. This is order processing within the meaning of Art. 28 GDPR. The processor is obliged by detailed contractual guarantees to use technical and organizational measures to ensure the protection of your personal data.
Data retention period
If we are unable to make you a job offer, you reject a job offer, withdraw your application, revoke your consent to data processing or ask us to delete the data, the data you provided, including any remaining physical application documents, will be stored for a maximum of 6 months after completion of the process The application process is stored or stored (retention period) in order to be able to understand the details of the application process in the event of any discrepancies (Art. 6 Para. 1 lit. f GDPR). You have the option of consenting to the use of your application documents to fill other positions. If you choose this option, we will include you in our talent pool in accordance with Article 6 (1) (a) GDPR. Your application will then be stored with us for a maximum of 12 months until revoked. You can revoke your consent at any time in the future. A justified revocation has no influence on data processing operations that have already taken place. Should an application process lead to a hire, we will include your application documents in your personnel file on the basis of Art. 6 Para. 1 lit. b GDPR, Section 26 Para the personality profile you have described and the qualifications you have mentioned.
Provision of data
The provision of your personal data is not required by law during the initiation phase of an employment relationship. However, the provision of personal data is necessary to conclude an employment contract with us. This means that if you do not provide us with personal data when applying, we cannot and will not enter an employment relationship with you.
Automated decision making
There is no automated decision in individual cases within the meaning of Art. 22 GDPR. This means that we evaluate your application personally and the decision about your application is not based exclusively on automated processing.
Business relationships
The following information shows you how we handle your data when you contact us, when contract negotiations take place with us and/or contractual agreements exist with us.
Processing purposes and legal basis
The data processing takes place Purpose of contract processing. The Processing of your data is necessary to initiate and fulfill contracts in accordance with Article 6 Paragraph 1 Letter b of the GDPR. Furthermore, the processing of your personal data can be based on Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests may be necessary. Our legitimate interests exist, for example: B. in asserting legal claims and avoiding legal disadvantages (e.g. in the event of insolvency), averting dangers and liability claims and avoiding legal risks.
Data category and data origin
We process the following categories of data:
- Master and contact details: Salutation, name (first and last name), department and function in the company, address, email, telephone, fax, date of birth, purchase history, contract data, billing data.
The data from the data categories mentioned was sent to us directly by our customers and interested parties.
Recipient
We do not share your personal information with third parties. Our service partners are excluded from this if this is necessary to fulfill the contract, such as parcel and letter deliverers, banks for direct debit collection, tax authorities, etc.
Duration of storage
The data stored about you will be stored after the contract has been fulfilled deleted unless there are further legal retention requirements. These include commercial law and financial law data. These will be deleted after ten years in accordance with legal regulations, unless longer retention periods are prescribed or necessary for legitimate reasons. If you revoke your consent to the use of your data, it will be deleted immediately unless the above reasons speak against it.
Right to object
You have the right to object to processing. You can object to the use of your data at any time in the future.
Provision of data
The provision of personal data is contractually required or necessary for the conclusion of a contract. Failure to provide the required personal data would result in us being unable to enter I nto a business relationship with you.