Privacy policy urbify.com

and at the same time information of the data subjects according to Article 13 and Article 14 GDPR

I. General, responsible person, data protection officer

Preamble

Urbify Technologies GmbH (hereinafter referred to as »Urbify«, »we«, »us«, »our«) provides services in which data and in particular personal data are processed. This concerns in particular the areas of offer management, communication and marketing activities, the provision of this Internet presence and all related actions.

We who process your data on our behalf for the purposes specified below are the controller pursuant to Article 4 (7) of the General Data Protection Regulation (hereinafter: »GDPR«) in relation to the personal data processed in accordance with this statement.

Note on the responsible entity

The responsible person in the sense of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is the:

Urbify Technologies GmbH
Gotlandstraße 2
D-10439 Berlin
Email: ben(at)urbify.com

Data Protection Officer

We have appointed a data protection officer for our company:

horsten Schröers | SAFE-PORT Consulting GmbH
Hülshoff-Str. 7 | D-59469 Ense

Phone: +49 (0) 2938 977 978
Email: privacy(at)safe-port.de

Scope of the processing of personal data

We process personal data of our users only insofar as this is necessary for the provision of a functional website and our content and services. The processing of personal data of our users is regularly only carried out with the consent of the user. An exception applies in those cases where obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

When processing personal data that is necessary for the performance of a contract of which the data subject is a party, Article 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Article 6 (1) lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) d GDPR serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 6 (1) lit. f GDPR serves as the legal basis for the processing.

Data deletion and storage period

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract

Note on data transfer to the USA

Among other things, tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. We have concluded valid appropriate guarantees with the service providers for the transfer to these third countries in accordance with Article 46 (2) GDPR. If you have any further questions, please feel free to contact our data protection officer.

A data transfer to the USA for statistical or marketing purposes takes place exclusively on the basis of consent by the data subject (Article 6 (1) lit. a GDPR)

II. Use of our services and offers

Provision of the website and creation of log files

Informational use / description and scope of data processing

For the use of our website for information purposes only, it is generally not necessary for you to provide personal data. Rather, we collect and use in this case only those of your data that your Internet browser automatically transmits to us, such as:

  • Date and time of the retrieval of one of our Internet pages
  • Your browser type
  • the browser settings
  • the operating system used
  • the last page you visited
  • the amount of data transferred and the access status (file transferred, file not found, etc.)
  • Your IP address.

Purpose

We collect and use this data during an informational visit exclusively in non-personal form. This is done to enable the use of the Internet pages you have accessed, for statistical purposes and to improve our Internet offering. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Legal basis for data processing

he legal basis for the temporary storage of the data and the log files is Article 6 (1) lit. f GDPR.

Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's terminal device. For this purpose, the user's IP address must remain stored for the duration of the session.

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended. In the case of storage of data in log files, this is the case after fourteen days at the latest, a storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling user is no longer possible. Access to the log data is only possible directly and exclusively for administrators

Possibility of objection and removal

The collection of data for the provision of services and the storage of data in log files is mandatory for the operation of the services offered. Consequently, there is no possibility of objection on the part of the user.

Website hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

Our hoster will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

If we commission service providers with the processing of data, this is always done in accordance with Article 28 GDPR on the basis of a so-called contract for order processing to ensure data protection-compliant processing, we have concluded a contract for order processing with our hoster

Cookies use

Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

When calling up our website, the user is informed about the use of cookies by a Consent banner and his consent to the processing of personal data used in this context is obtained and documented in accordance with data protection law. In this context, there is also a reference to this privacy policy. In this context, there is also a reference to how the storage of cookies can be prevented in the browser settings

You can also determine whether cookies can be set and retrieved by changing the settings in your browser. You can, for example, completely deactivate the storage of cookies in your browser, restrict it to certain web pages or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback on this. For the full functionality of our website, however, it is necessary for technical reasons to allow the cookies we use.

Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) lit. f GDPR. The legal basis for the processing of personal data using cookies for analysis purposes and for ad control or evaluation is Article 6 (1) lit. a or lit. f GDPR

Purpose of data processing

If there is a use of technically necessary cookies:

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. We require cookies for the following applications: use of mobile applications

In these purposes also lies our legitimate interest in the processing of personal data according to Article 6 (1) lit. f GDPR.

The user data collected through technically necessary cookies are not used to create user profiles.

Duration of storage, possibility of objection and elimination

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full

You will be informed about the exact storage period in this data protection notice. If consents have been made in the Consent Tool, you can object there.

Cookie consent with a »Cookie Consent-Tool«

Our website uses cookie consent technology to obtain your consent to the storage of certain cookies on your terminal device and to document this in accordance with data protection law

Description and scope of data processing

When you enter our website, your consents and other declarations regarding cookie use are obtained via our Consent Tool. The Consent Tool then stores a cookie in your browser in order to be able to assign the consents granted to you or their revocation.

Legal basis for data processing

The Consent Tool is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 (1) p. 1 lit. c GDPR.

Purpose of data processing

The purpose of providing the Consent Tool is to comply with overriding legislation and to inform users in what context cookies are used on this website

Possibility of objection and removal

The data collected by the Consent tool remains stored until you delete the Consent cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

Plugins and tools

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (»Google«), Gordon House, Barrow Street, Dublin 4, Ireland

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, duration of visit, operating systems used and origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their end device.

Furthermore, we can record Google Analytics, among other things, your mouse and scroll movements and clicks. Furthermore, Google Analytics uses various modeling approaches to supplement the collected data sets and uses machine learning technologies in the data analysis

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this analysis tool is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Article 6 (1) lit. a GDPR; the consent can be revoked at any time

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://privacy.google.com/businesses/controllerterms/mccs/.

We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Facebook Pixel

This website uses the visitor action pixel from Facebook for conversion measurement. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data is also transferred to the USA and other third countries

In this way, the behavior of page visitors can be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The collected data is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, according to the Facebook data usage policy. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.

he use of Facebook Pixel is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Article 6 (1) lit. a GDPR; the consent can be revoked at any time

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Article 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Facebook. The processing by Facebook that takes place after the onward transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. You can find the text of the agreement at:
https://www.facebook.com/legal/controller_addendum..

According to this agreement, we are responsible for providing the privacy information when using the Facebook tool and for the privacy-secure implementation of the tool on our website. Facebook is responsible for the data security of the Facebook products. You can assert data subject rights (e.g. requests for information) regarding data processed by Facebook directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.

You can find more information about protecting your privacy in Facebook's privacy policy:
https://de-de.facebook.com/about/privacy/.

You can also use the Custom Audiences remarketing feature in the Ad Settings section under
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screendeactivate. To do this, you must be logged in to Facebook.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website:
http://www.youronlinechoices.com/de/praferenzmanagement/.

LinkedIn Insight Tag

This website uses the retargeting tool as well as the conversion tracking of LinkedIn. The provider of this service is LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (»LinkedIn«). However, according to LinkedIn, the collected data may also be transferred to the USA and Singapore (see also the section »Notice on data transfer to the USA«).

For this purpose, the LinkedIn Insight Tag is integrated on our website, which enables LinkedIn to collect statistical data about your visit and use of our website and to provide us with corresponding aggregated statistics on this basis. In addition, the service is used to be able to show you interest-specific and relevant offers and recommendations after you have found out about certain services, information and offers on the website. The information in this regard is stored in a cookie. For more information on data processing, please refer to LinkedIn's privacy policy at:https://de.linkedin.com/legal/privacy-policy.

The use of the LinkedIn Insight Tag is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Article 6 (1) lit. a GDPR; the consent can be revoked at any time.

The personal data are kept as long as they are necessary to fulfill the purpose of the processing. The data will be deleted as soon as they are no longer required to achieve the purpose.

The data transfer is based on the standard contractual clauses, which ensure that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, consent will be obtained from you in advance as part of our consent tool in accordance with Article 49 (1) lit. a GDPR

Hotjar

This website uses Hotjar. The provider is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).

Hotjar is a tool for analyzing your user behavior on this website. With Hotjar we can, among other things, record your mouse and scroll movements and clicks. Hotjar can also determine how long you have remained with the mouse pointer on a particular spot. From this information, Hotjar creates so-called heat maps, which can be used to determine which website areas are viewed preferentially by the website visitor

Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at which point you abandoned your entries in a contact form (so-called conversion funnels)

In addition, Hotjar can be used to obtain direct feedback from website visitors. This function serves to improve the website operator's web offerings.

Hotjar uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or use of device fingerprinting).

The use of this analysis tool is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Article 6 (1) lit. a GDPR; the consent can be revoked at any time.

If you want to disable data collection by Hotjar, click on the following link and follow the instructions there:https://www.hotjar.com/opt-out.

Please note that disabling Hotjar must be done separately for each browser or device.

For more information about Hotjar and the data it collects, please see Hotjar's privacy policy at the link below:https://www.hotjar.com/privacy.

We have entered into an order processing agreement with Hotjar to implement the strict European data protection regulations.

FullStory

This website uses functions of the web analytics service FullStory, of FullStory Inc, 120 Ottley Dr NE Ste 100, Atlanta, GA 30324, USA (»FullStory«).

FullStory enables the website operator to analyze the behavior of website visitors and thus improve the user experience on the website. Among other things, FullStory processes information on clicks, mouse movements, inputs (with the exception of sensitive information), scrolling movements, browser used, device type, IP address, pages visited and session duration.

The use of this analysis tool is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Article 6 (1) lit. a GDPR; the consent can be revoked at any time.

You can revoke your consent for data processing at any time with effect for the future by clicking on the following opt-out link at https://www.fullstory.com/optout or by calling up the Consent banner again.

Sentry.io

We use Sentry for the technical monitoring of our platforms. The provider is Functional Software, Inc, 1501 Mariposa St #408, San Francisco, CA 94107, USA

Sentry is a tool that helps us monitor system stability and identify code errors. Sentry itself does not create profiles, does not store cookies and does not perform any independent analyses. Data processing for marketing purposes also does not take place. The user data is processed for error analysis, monitoring and security purposes and does not allow any conclusions to be drawn about the individual.

The use of Sentry is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in the error-free and functional operation of its services. If a corresponding consent was requested, the processing is based exclusively on Article 6 (1) lit. a GDPR; the consent can be revoked at any time.

For more information, please see Sentry's privacy notice at: https://sentry.io/privacy/.

III. Use of offers

Newsletter

Description and scope of data processing

On our website there is the possibility to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us. In order to be able to register for our e-mail newsletter service, we require, in addition to your consent under data protection law, at least your e-mail address to which the newsletter is to be sent. In addition, the date and time of registration are collected

For the processing of data, your consent is obtained during the registration process and reference is made to this privacy policy.

For the newsletter dispatch we use the so-called double opt-in procedure, i.e. we will only send you the newsletter if you first confirm your registration via a confirmation e-mail sent to you for this purpose by means of a link contained therein. In this way, we want to ensure that only you yourself, as the owner of the e-mail address provided, can register for the newsletter. Your confirmation in this regard must be made within 5 working days after receipt of the confirmation e-mail, otherwise your newsletter registration will be automatically deleted from our database.

Legal basis for data processing

The legal basis for data processing for newsletter marketing is Article 6 (1) lit. a GDPR

Purpose of data processing

Any further information is voluntary and will be used to address you personally and to personalize the content of the newsletter as well as to clarify queries regarding the e-mail address. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user's e-mail address is stored as long as the subscription to the newsletter is active. The other personal data collected during the registration process is usually deleted after a period of seven days

Possibility of objection and removal

You can cancel a newsletter you have subscribed to with us at any time. To do so, you can either send us an informal e-mail to the above contact details or use the link at the end of the newsletter to cancel. The revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. This also enables the revocation of consent to the storage of personal data collected during the registration process.

Contact form and e-mail contact

Description and scope of data processing

Our website contains a contact form that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. These data are:

  • Your email address
  • IP address of the user
  • Date and time of the message
  • Other information you enter in the contact form

For the processing of the data, your consent is obtained during the submission process and reference is made to this privacy policy

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored.

In this context, the data will not be passed on to third parties. The data is used exclusively for the processing of the conversation

Legal basis for data processing

The processing of this data is based on Article 6 (1) lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Article 6 (1) lit. f GDPR) or on your consent (Article 6 (1) lit. a GDPR) if this was requested.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Article 6 (1) lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Article 6 (1) lit. b GDPR.

Purpose of data processing

The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the submission process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Possibility of objection and removal

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

You may exercise your right to object by contacting us at the above contact details.

All personal data stored in the course of contacting us will be deleted in this case.

More information

We use a marketing service of ActiveCampaign, Inc., 1 N Dearborn, 5th Floor, Chicago, Illinois 6060, USA (hereinafter referred to as »ActiveCampaign«) for the newsletter dispatch, to which we pass on your data provided during the newsletter registration. ActiveCampaign uses this information to send the newsletter on our behalf. ActiveCampaign does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties. This disclosure is made in accordance with Article 6 (1) lit. f GDPR and serves our legitimate interest in using a newsletter system that is effective in advertising, secure and user-friendly. Please note that your data is usually transferred to a server of ActiveCampaign in the USA and stored there.

To protect your data in the USA, we have concluded an order processing agreement (»Data Processing Agreement«) with ActiveCampaign, in which the provider undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties.

Insofar as we transfer data to third countries, we have taken appropriate guarantees in accordance with Article 46 of the GDPR in connection with the transfer. We would like to point out that the level of data protection in these countries may differ from that in the GDPR due to differing laws.

You can view ActiveCampaign's privacy policy here: https://www.activecampaign.com/privacy-policy.

Inquiries by phone or fax

Description and scope of data processing

If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass this data on to third parties without your consent.

Legal basis for data processing

The processing of this data is based on Article 6 (1) lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Article 6 (1) lit. f GDPR) or on your consent (Article 6 (1) lit. a GDPR) if this was requested.

Purpose of data processing

The processing of personal data serves us solely to process your request

Duration of storage

The data you send to us via inquiries will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g., after we have completed processing your request).

Possibility of objection and removal

The user has the possibility to revoke the processing of his personal data at any time. You can make use of your objection by contacting the above mentioned contact details.

All personal data stored in the course of contacting us will be deleted in this case. Mandatory legal provisions - in particular legal retention periods - remain unaffected.

IV. Own services

Handling of applicant data

We offer you the opportunity to apply to us (e.g. by e-mail, by post or via online application form). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing and use of your data will be carried out in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.

Scope and purpose of data collection

If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship.

Legal basis for data processing

The legal basis for data processing as part of the application process is § 26 BDSG under German law (initiation of an employment relationship), Article 6 (1) lit. b GDPR (general contract initiation) and - if you have given your consent - Article 6 (1) lit. a GDPR. The consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application.

If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of Section 26 BDSG and Article 6 (1) lit. b GDPR for the purpose of implementing the employment relationship.

Data retention period

If we are unable to make you a job offer, if you reject a job offer, or if you withdraw your application, we reserve the right to retain the data you have provided on the basis of our legitimate interests (Article 6 (1) lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). Subsequently, the data will be deleted and the physical application documents destroyed. This storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), it will not be deleted until the purpose for continued storage no longer applies.

A longer storage can also take place if you have given a corresponding consent (Article 6 (1) lit. a GDPR) or if legal storage obligations oppose the deletion. You will not be informed separately about the deletion of your data.

Inclusion in the applicant pool

If we do not make you a job offer, it may be possible to include you in our applicant pool. In the event of inclusion, all documents and details from the application will be transferred to the applicant pool in order to contact you in the event of suitable vacancies.

Inclusion in the applicant pool takes place exclusively on the basis of your express consent (Article 6 (1) lit. a GDPR). The provision of consent is voluntary and is not related to the current application process. The data subject may revoke his/her consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, unless there are legal reasons for retention.

The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given. You will not be informed separately about the deletion of your data.

Possibility of objection and removal

If personal data is processed by us as the controller, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and purpose of the processing. These can be found in the chapter »Rights of the data subject« of this privacy policy.

If the processing of personal data is based on your consent, you have the right to revoke this consent under data protection law in accordance with Article 7 (3) GDPR. To assert your data subject rights with regard to the data processed in this application procedure, please contact our data protection officer at the above contact details.

V. Social media

In principle, the legal basis for the processing of your personal data on our social media pages is Article 6 (1) lit. f GDPR. The data processing is necessary to provide the functions and information requested by you, in the interest of our public relations and communication with you.

By actively interacting with us through our social media sites (messages, comments, downloads, etc.), we may be informed about the actions. The functions of the social media sites allow us to view your public profile data. You determine which data is visible in your social media account settings

The use of our lead forms is voluntary, the legal basis is the Article 6 (1) lit. a GDPR, you can object to the data processing in whole or in part at any time without giving reasons. If you send us an inquiry via our social media channels, we may respond to you via other, secure communication channels to ensure confidentiality at all times.

Social media appearances

Facebook

We would like to point out that according to current case law, there is a joint responsibility between Facebook (Facebook Ireland Ltd. | 4 Grand Canal Square | Grand Canal Harbour | Dublin 2 Ireland) and the operator of the Facebook fan page (»Joint Controller«). You can find more information at: www.facebook.com/legal/terms/information_about_page_insights_data. For questions regarding data processing on the part of Facebook, you can contact Facebook's data protection officer (https://www.facebook.com/help/contact/540977946302970).

By interacting with our Facebook fan page (e.g. in the form of messages, comments, or »Like« votes), your specified data will be transmitted by Facebook to us as the operator of the fan page.

The legal basis for these data transfers is Article 6 (1) lit. f GDPR. You yourself can define which personal data is publicly accessible in the settings of your Facebook account. To do so, visit the settings of your Facebook account under the item »Privacy«. You can control and adjust these settings at https://www.facebook.com/settings?tab=privacy. You can also control the behavior of »likes« there (visibility to other users).

If you use Facebook forms for lead generation (legal basis is the consent according to Article 6 (1) lit. a GDPR), personal data (e.g. your name, specified company, email address or phone number) will be stored by Facebook and made available to us.

We use this contact data to provide you with further information about our services and products. The use of the lead forms within the framework of our Facebook fan page is carried out in accordance with Article 6 (1) lit. f GDPR. We have legitimate interests in the processing, which can be understood in point »Legitimate interest« in this section. You can object to the use of your data from the lead form at any time. The lead data is stored on Facebook for 90 days and then deleted. For more information on how Facebook uses your data, please refer to Facebook's further information at: https://www.facebook.com/business/m/lead-ads-form.

We store your personal data that Facebook makes available to us for as long as knowledge of the data is necessary for the purposes of the business relationship or the purposes for which it was collected, or for as long as legal or contractual retention requirements exist. In addition, you can object to the storage of data at any time (right to object).

Facebook offers Fan Page operators analysis functions (»Facebook Insights«). Via these functions, page operators of a fan page can analyze a summary of data in the form of page statistics within a tool.

We use this data to create anonymized statistics (»Like« votes, page views, regional distribution of users, post reach, etc.) and to examine the effectiveness of the fan page posts. The use of the »Facebook Insights function« takes place pursuant to Article 6 (1) lit. f GDPR. See »Legitimate interest« in this section.

Facebook is responsible for all processing related to Facebook Insights and the further processing of user data. For more information, please visit: https://www.facebook.com/legal/terms/page_controller_addendum. and here: https://www.facebook.com/privacy/explanation.

Instagram

By interacting with our Instagram presence actively (e.g. in the form of messages, comments, or »Like« votes), your specified data will be transmitted by Instagram to us as the operator of the Instagram account.

The legal basis for these data transfers is, among other things, also Article 6 (1) lit. f GDPR. You yourself can decide in the settings of your Instagram account under the item »Privacy and security« which personal data is publicly accessible. You can control and adjust these settings at https://www.instagram.com/accounts/privacy_and_security/.

If you use Instagram forms for lead generation (legal basis is the consent according to Article 6 (1) lit. a GDPR), personal data (e.g. your name, specified company, your email address or your phone number) will be stored by Instagram or Facebook and made available to us.

We use this contact data to provide you with further information about our services and products. The use of the lead forms within the framework of our Instagram presence takes place pursuant to Article 6 (1) lit. f GDPR. We have legitimate interests in the processing, which can be understood in point »Legitimate interest« in this section. You can object to the use of your data from the lead form at any time. The lead data is stored on Instagram/Facebook for 90 days and then deleted. For more information on how Facebook, as the operator of Instagram, uses your data, please refer to the additional information provided by Facebook at:https://www.facebook.com/business/help/563690893827148?id=735435806665862.

We store your personal data that Instagram/Facebook makes available to us for as long as knowledge of the data is necessary for the purposes of the business relationship or the purposes for which it was collected, or for as long as legal or contractual retention requirements exist. In addition, you can object to the storage of data at any time (right to object).

Instagram offers analytics features (»Instagram Insights«) to Fan Page operators. Through these features, account holders can analyze a summary of data in the form of page statistics within a tool.

We use this data to create anonymized statistics (»likes«, page views, regional distribution of users, post reach, etc.) and to examine the effectiveness of the Instagram presence. The use of the »Instagram Insights function« takes place pursuant to Article 6 (1) lit. f GDPR. See »Legitimate Interest« in this section.

The responsibility for all processing related to Instagram Insights and the further processing of user data lies with Instagram or Facebook (Instagram as a product of Facebook). For more information, please visit: https://www.facebook.com/help/instagram/155833707900388.

LinkedIn

By interacting with our LinkedIn presence (e.g. via a campaign), the data you provide will be transmitted by LinkedIn to us as the operator of the LinkedIn presence.

The legal basis for these data transfers can also be Article 6 (1) lit. f GDPR. You can decisively determine yourself which personal data is publicly accessible via the settings of your LinkedIn account under the item »Privacy«. You can check and adjust these settings at https://www.linkedin.com/psettings/privacy.

If you use LinkedIn forms for lead generation (legal basis is the consent according to Article 6 (1) lit a GDPR), personal data (e.g. your name, specified company, your email address or your phone number) will be stored by LinkedIn and made available to us. The data can then be transferred by us to our company-wide CRM software.

We use this contact data to provide you with further information about our services and products. The use of the lead forms within the framework of our LinkedIn presence takes place in accordance with Article 6 (1) lit. f GDPR. We have legitimate interests in the processing, which can be understood in the section »Legitimate interest«. You can object to the use of your data from the lead form at any time. The lead data is stored on LinkedIn for 90 days and then deleted. For more information on how LinkedIn uses your data, please see LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.

We store your personal data that LinkedIn makes available to us for as long as knowledge of the data is necessary for the purposes of the business relationship or the purposes for which it was collected, or for as long as legal or contractual retention requirements exist. In addition, you can object to the storage of data at any time (right to object).

LinkedIn offers analysis functions to the operators of the LinkedIn presence. Via this function, operators of the LinkedIn presence can analyze a summary of data in the form of page statistics within a tool.

We use this data to create anonymized statistics (page views, regional distribution, etc.) and to examine the effectiveness of the campaigns. Conclusions about individual users are not possible. The use of the LinkedIn analysis function is in accordance with Article 6 (1) lit. f GDPR. See also the point »Legitimate interest«.

Further information on the processing of user data on the part of LinkedIn as the controller can be viewed at https://www.linkedin.com/legal/privacy-policy.

Legitimate interest

In part, the use of our social media presences is based on Article 6 (1) lit. f GDPR (legitimate interests). Our interests lie in the analysis of trends, the interaction with our social media users and the improvement of our campaigns and services. If you require further information on the balancing of interests to be carried out pursuant to Article 6 (1) lit. f GDPR, please contact our data protection officer using the contact details provided in this privacy policy. If necessary, we will obtain your consent for the data processing (Article 6 (1) lit. a GDPR).

Data subject rights

Your rights as a data subject towards us can be found in the section: »VI. Your rights as a data subject«.

Social media appearances

Facebook - For more information on how you can assert or implement your data protection rights directly against Facebook, please visit: https://www.facebook.com/privacy/explanation.

Instagram - For more information on how you can assert or implement your data protection rights directly against Facebook (as the operator of Instagram), please visit:https://www.facebook.com/help/instagram/155833707900388.

LinkedIn - For more information on how you can assert or implement your data protection rights directly against LinkedIn, please visit:https://www.linkedin.com/help/linkedin/answer/50191?trk=microsites-frontend_legal_privacy-policy.

VI. Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

Right to information

You may request confirmation from the controller as to whether personal data concerning you is being processed by us.

If there is such processing, you can request information from the controller about the following:

  • the purposes for which the personal data are processed;
  • the categories of personal data which are processed;
  • the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
  • the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage duration;
  • the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
  • the existence of a right of appeal to a supervisory authority;
  • any available information on the origin of the data, if the personal data are not collected from the data subject;
  • the existence of automated decision-making, including profiling, pursuant to Article 22 (1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject

You have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.

Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller, insofar as the processed personal data concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.

Right to restriction of processing

Under the following conditions, you may request the restriction of the processing of personal data concerning you:

  • if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
  • the controller no longer needs the personal data for the purposes of processing, but you need them for the assertion, exercise or defense of legal claims, or
  • if you have objected to the processing pursuant to Article 21 (1) GDPR and it is not yet clear whether the legitimate grounds of the controller outweigh your grounds

Where the processing of personal data concerning you has been restricted, such data may be processed, with the exception of their storage, only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

Right to deletion

Obligation to delete

You may request the controller to delete the personal data concerning you without undue delay, and the controller is obliged to delete such data without undue delay, if one of the following reasons applies:

  • The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You revoke your consent on which the processing was based pursuant to Article 6 (1) a or Article 9 (2) a GDPR and there is no other legal basis for the processing.
  • You object to the processing pursuant to Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 (2) GDPR.
  • The personal data concerning you have been processed unlawfully.
  • The deletion of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
  • The personal data concerning you was collected in relation to information society services offered pursuant to Article 8 (1) GDPR.

Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17 (1) of the GDPR, it shall take reasonable measures, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.

Exceptions

The right to erasure does not exist insofar as the processing is necessary to

  • to exercise the right to freedom of expression and information;
  • for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for reasons of public interest in the area of public health pursuant to Article 9 (2) lit. h and lit. i and Article 9 (3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89 (1) of the GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or
  • for the assertion, exercise or defense of legal claims.

Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

  • the processing is based on consent pursuant to Article 6 (1) a GDPR or Article 9 (2) a GDPR or on a contract pursuant to Article 6 (1) b GDPR and
  • the processing is carried out with the help of automated procedures

In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - to exercise your right to object by means of automated procedures using technical specifications.

Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

  • is necessary for the conclusion or fulfillment of a contract between you and the responsible party,
  • is permitted by legislation of the Union or the Member States to which the controller is subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
  • is done with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Article 9 (1) of the GDPR, unless Article 9 (2) lit. a or lit. g of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

With regard to contract performance and consent, the controller shall take reasonable steps to safeguard the rights and freedoms of, and your legitimate interests, including at least the right to obtain the intervention of a person from the controller, to express your point of view and contest the decision.

Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

VII. Data Security, Third Party Websites, Changes

Data security

Unfortunately, the transmission of information via the Internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our Services via the Internet. However, we secure our services and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. In particular, we transmit your personal data in encrypted form. We use the SSL (Secure Socket Layer) [or TLS (Transport Layer Security)] coding system for this purpose.

We also use technical and organizational security measures to protect personal data that is generated or collected, in particular against accidental or intentional manipulation, loss, destruction or against attack by unauthorized persons. Our security measures are continuously improved in line with technological developments.

Privacy and third party websites

The website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or warranty for third-party content or data protection conditions. Please make sure you are aware of the applicable data protection conditions before submitting personal data to these websites.

Changes to this privacy policy

We reserve the right to change this privacy policy at any time with effect for the future. A current version is available on the website. Please visit the website regularly and inform yourself about the applicable data protection provisions.

Status: v1.0.6-220722-0917

Static and dynamic content editing

A rich text element can be used with static or dynamic content. For static content, just drop it into any page and begin editing. For dynamic content, add a rich text field to any collection and then connect a rich text element to that field in the settings panel. Voila!

How to customize formatting for each rich text

Headings, paragraphs, blockquotes, figures, images, and figure captions can all be styled after a class is added to the rich text element using the "When inside of" nested selector system.