Data privacy policy
I. Responsible body
Responsible Body according to GDPR
II. Data protection officer
Contact details of our data protection officer:
III. Purposes and legal basis of the data processing
1. Informational use of the website
You can visit our website without providing any personal information. If you use our website for informational purposes only, i.e. do not provide us with information about yourself, we do not collect any personal data, with the exception of the data that your browser transmits to enable you to visit the website as well as information that is transmitted to us through cookies used for statistical analysis of the use of our website.
a. Technical provision of the website
For the purpose of the technical provision of the website, it is necessary that we process cer-tain automatically transmitted information about you so that your browser can display our website and you can use the website. This information is automatically collected for each visit of our website and stored in our server log files. This information refers to the computer system of the requesting computer. The following information is collected thereby:
- IP-address
- Browser type / -version (e.g.: Firefox 59.0.2 (64 Bit));
- Browser language (e.g.: German);
- Operating system (e.g.: Windows 10);
- Internal resolution of the browser window;
- Screen resolution;
- Javascript activation;
- Java on / off;
- Cookies on / off;
- Color depth;
- Time of access.
- Session ID
- for the fulfilment of a contract or for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 letter b GDPR, provided you visit our website to obtain infor-mation about our products and our events; and
- to protect our legitimate interests pursuant to Art. 6 para. 1 letter f GDPR in order to make the website technically available to you. Our legitimate interest is to provide you with an attractive, technically functioning and user-friendly website and to take measures to protect our website from cyber risks and to prevent cyber risks for third parties from arising from our website.
b. Statistical and marketing analysis of website usage and range increase
For the purpose of statistical analysis of the use of our website, we use Google Analytics and thus cookies, which enable an analysis of your browsing behaviour. This enables us to im-prove the quality of our website and its content. We learn how the website is used and can thus continuously optimize our offer.
- Your consent pursuant to art. 6 para. 1 letter a GDPR.
- selecting the appropriate settings on your browser, however please note that in this case you may not be able to use the full scope of functions on our website.
- You can prevent the collection of data generated by the cookie and relating to your use of our website (including your IP address) and the transmission to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en
For more information on Google Analytics’ Terms of Use and Privacy Policy, please visit https://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/
c. Social links
The website includes links to services such as Facebook, Twitter, LinkedIn and Xing. After clicking on the link you will be redirected to the page of the respective provider, i.e. only then will user information be transferred to the respective provider. For information on the handling of your data when using the websites of other providers, please refer to the respective data privacy policies by these providers.
2. Active use of the website
In addition to the merely informational use of our website, you can also actively use our web-site to order one of our products, to register for an event, to register for our newsletter or to contact us. In addition to the above-mentioned processing of your personal data for merely informational purposes, we will also process other personal data that we require from you to process your order or to process and respond to your inquiry.
a. User requests
In order to process and answer your inquiries to us, e.g. via the contact form or our e-mail address, we process your personal data provided by you in this context. In any case, this includes your name and e-mail address in order to send you an answer, as well as the other information that you send us in the context of your message.
- to protect our legitimate interests pursuant to art. 6 para. 1 lit f GDPR; our legitimate interest is to answer customer inquiries appropriately.
b. Processing of personal data
The applicant data usually includes the following: First and last name, if applicable your aca-demic degree, date and place of birth, contact details (address, e-mail, telephone and/or mo-bile phone number), application documents (cover letter, CV, certificates), language skills, abilities. In addition, we process the data that you send us by e-mail as part of establishing contact.
We base our decisions in the application process on the personal data you provide within the framework of legal requirements. We use your professional qualifications, for example, to de-cide whether we consider you in the narrow selection process or a personal impression in an interview to decide whether we offer you the position for which you have applied.
We process your personal data on the basis of the following legal bases:
- For the decision on the establishment of an employment relationship, art. 88 para. 1 GDPR in connection with section 26 para. 1 sentence 1 BDSG. Processing of special categories of personal data
If, as part of your application documents, you voluntarily and against our express request, provide us with special categories of personal data pursuant to art. 9 para. 1 GDPR (e.g. your photo or details of your religious affiliation/denomination), we will store these on the basis of your consent pursuant to art. 88 para. 1 GDPR in connection with your application. section 26 para. 3 sentence 2 BDSG. This also applies if you provide us with further special personal data in the course of the application process. By voluntarily submitting this data, you agree to the storage of this special personal data within the application process.
We do not take this special personal data into account when making a selection decision, un-less it is required by law to take this special personal data into account. It is possible, for ex-ample, in some job advertisements that people with disabilities are given preferential treatment in accordance with the applicable laws. In these cases, the information is always voluntary and is provided with your express consent, which you provide by voluntarily submitting this data.
We process your special personal data on the basis of the following legal bases:
- pursuant to art. 9 para. 1 GDPR on the basis of your consent pursuant to art. 88 para. 1 GDPR in conjunction with section 26 para. 3 sentence 2 BDSG.
c. Enforcement of rights
We also process your personal data in order to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to defend against or prosecute criminal offences.
We process your data for the above purposes on the following legal basis:
- to protect our legitimate interests pursuant to art. 6 para 1 letter f GDPR, insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or clarify criminal offences.
d. Newsletters
With your consent we use your data for the transmission of our newsletter. We process man-datory information that you enter when registering for the newsletter, such as your e-mail ad-dress and your name:
- If you have given us your consent by double opt-in procedure, pursuant to art. 6 para. 1 letter a GDPR.
IV. Links
Some sections of our web pages contain links to the web pages of third parties. These web-sites are subject to their own data protection principles. We are not responsible for their oper-ation including the data handling. If you send information to or about such third party sites, you should review the privacy statements of those sites before you submit any information that may assigned to you.
V. Categories of recipients
Firstly, only our employees will be informed of your personal data. In addition, we share your personal data with other recipients who provide services to us in connection with our website, insofar as this is legally permitted or prescribed. We limit the transfer of your personal data to what is necessary, in particular to be able to complete your order. In some cases, our service providers receive your personal data as contract data processors and are then strictly bound by our instructions when handling your personal data. In some cases, the recipients act inde-pendently with your data, which we transmit to them.
Below, we describe the categories of recipients of your personal data:
- Payment service providers and banks, if applicable, during payment processing,
- Logistics service providers to be able to deliver the products to you,
- Logistics service providers to be able to deliver the products to you,
- IT service providers who administrate and host our website,
- Collection companies and legal advisors in asserting our claims.
VI. Transfer into third countries
As part of the use of Google tools, we transfer your IP address and your shortened IP address to the USA. The data transfer is based on the EU Commission implementing decision (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EG of the European Parliament and of the Council on the adequacy of the protection provided by the EU-US data privacy shield. Furthermore, we do not transfer your personal data to countries outside the EU or the EEA or to international organisations.
VII. Duration of storage
1. Informational use of the website
As part of the use of Google tools, we transfer your IP address and your shortened IP address to the USA. The data transfer is based on the EU Commission implementing decision (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EG of the European Parliament and of the Council on the adequacy of the protection provided by the EU-US data privacy shield. Furthermore, we do not transfer your personal data to countries outside the EU or the EEA or to international organisations.
2. Active use of the website
If you actively use our website, we initially store your personal data for the duration of re-sponding to your inquiry or for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract.
In addition, we will store your personal data until any legal claims arising from the relationship with you become time-barred, in order to use them as evidence if necessary. The limitation period is generally between 12 and 36 months, but can also be up to 30 years.
Upon expiry of the limitation period, we delete your personal data, unless there is a legal obli-gation to store such data, for example from the German Commercial Code (sec. 238, 257 pa-ra. 4 HGB) or from the Tax Code (sec. 147 para. 3, 4 AO). These retention obligations can last from two to ten years.
If you apply for a job with us, we store your application data for the duration of the application procedure. If we do not make you an offer, we will delete your data two months after you have received our negative decision. If we hire you, we will keep your application data for your employment.
VIII. Your rights as data subject
Under the legal provisions you are entitled to the following rights as data subject, which you can assert against us:
Right to information: You are entitled to request confirmation from us at any time within the scope of art. 15 GDPR as to whether we are processing personal data relating to you; If this is the case, you are also entitled under art. 15 GDPR to receive information about such per-sonal data as well as other specific information (inter alia, processing purposes, categories of personal data, categories of recipients, planned storage period, the origin of the data, the use of automated decision-making and, in the case of transfers to third countries, the appropriate guarantees) and a copy of the data.
Right to correction: According to art. 16 GDPR, you are entitled to demand correction of the personal data stored about you if it is inaccurate or incorrect.
Right to deletion: You are entitled, under the conditions of art. 17 GDPR, to request from us the deletion of personal data relating to you without delay. Among other things, there is no right of deletion if the processing of personal data is necessary for (i) the exercise of the right to freedom of expression and information, (ii) the fulfilment of a legal obligation to which we are subject (e.g. statutory retention obligations) or (iii) the assertion, exercise or defence of legal claims.
Right to limitation of processing: Under the conditions of art. 18 GDPR you are entitled to request from us the limitation of the processing of your personal data.
Right to data transferability: You are entitled, under the conditions of art. 20 GDPR, to re-quest from us the provision to you of the personal data relating to you that you have submitted to us in a structured, current and machine-readable format.
Right of revocation: You have the right to revoke your consent to the processing of per-sonal data at any time with effect for the future without incurring any costs other than the transmission costs according to the basic rates.
Right to objection: You are entitled to object to the processing of your personal data under the conditions of art. 21 GDPR, meaning that we have to terminate the processing of your personal data. The right of objection exists only within the limits provided for in art. 21 GDPR. In addition, our interests may prevent the processing from being terminated, so that we are entitled to process your personal data despite your objection.
Right of appeal to a supervisory authority: You are entitled to file a complaint with a su-pervisory authority, in particular in the Member State of your place of residence, work or sus-pected infringement, under the conditions laid down in Article 77 GDPR, if you believe that the processing of personal data concerning you infringes the GDPR. The right of appeal is not prejudicial to any other administrative or judicial remedy.
The supervisory authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Dusseldorf
Germany
Phone: 0211/38424-0
Fax: 0211/38424-10
Email: poststelle(at)ldi.nrw.de
However, we recommend that you always address a complaint to our data pro-tection officer first.
If possible, your applications for the execution of your rights should be addressed in writing to the above address or directly to our data protection officer.
IX. Scope of your obligations to provide data
Generally, you are not obliged to provide us with your personal data. However, if you do not provide this information, we will not be able to make our website available to you, answer your questions and enter into a contract with you. Personal data which we do not necessarily re-quire for the above-mentioned processing purposes are marked as voluntary information by a ”if applicable” or another symbol.