DATA PROTECTION DECLARATION
1. About us
We, the AUNDE Group SE, are responsible for the collection, processing and storage of your data. Details about us can be found in our imprint at any time.
The careful handling of your personal data is our highest priority. We adhere to the legal provisions in processing, for example, the General Data Protection Regulation (GDPR) and the associated national regulations.
This data protection declaration applies to all of our company's websites that can be accessed under our domains (www.aunde-group.de, www.aunde-group.com, www.aunde-group.net, www.aunde.de, www.aunde.com, www.aunde.info, www.aircraft.aunde.com) as well as our pages in the social networks (Xing, LinkedIn, Instagram). If you switch to websites of other operators within the scope of our offer, their own data protection provisions apply in each case, for the content of which the respective operators of these websites are responsible.
Since we would like to give you a comprehensive overview of the processing of personal data in our group of companies, you will find below an overview of all our services in the context of which we collect and process personal data.
If separate or additional conditions apply to individual services or if we ask you for your consent, we will inform you separately before you use the respective service (e.g. for the newsletter subscription).
We also take various security measures to protect your personal data. For example, the transmission between your web browser and our servers is always encrypted; in addition, we maintain a variety of technical and organizational measures to protect your data at all times.
2. Why we process your data
You can generally use our website without disclosing your identity. If you register for our newsletter or want to contact us, we will ask you for your name and other personal information. It is your free decision whether you enter this (extended) data. Data that we absolutely need from you in order to provide our services are marked as such.
Your personal data is collected and processed for the following purposes on the basis of the following legal grounds:
- Contract initiation according to Art. 6 para. 1 lit. a) and b) GDPR
- Contract execution according to Art. 6 para. 1 lit. b) GDPR
- Customer management according to Art. 6 para. 1 lit. b) and c), f) GDPR
- Communication and data exchange according to Art. 6 para. 1 lit. a), b), c), f) GDPR
- External presentation and advertising pursuant to Art. 6 para. 1 lit. a), f) GDPR
- Implementation of declarations of consent pursuant to Art. 6 para. 1 lit. a) GDPR
- Ensuring proper operation of a data processing system in accordance with
Art. 6 para. 1 lit. c) and f) GDPR
- Applicant selection procedures in the context of personnel and resource management based on Art. 6 para. 1 lit. a), b) GDPR in conjunction with. § SECTION 26 BDSG
3. Which data we collect and process from you
We collect different categories of personal data from you. Personal data is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name. Personal information includes, for example, information such as your name, address, telephone number and date of birth (if provided). Statistical information that cannot be directly or indirectly linked to you - such as the popularity of individual pages of our website or the number of users of a page - is not personal data. There are directly and indirectly collected data. In both cases, data is only collected to the extent necessary; the data is processed exclusively for the purposes stated in point 2. It is up to you to decide whether you want to provide us data that optimizes the use of our services for you, but is not necessary for this purpose. Corresponding data fields are marked as "optional".
The directly collected data includes:
- Data that you actively and consciously transmit to us in the course of using our services, e.g. via the contact form.
- Applicant data, for the execution of our online application procedure
- Other data that you provide to us voluntarily, e.g. data fields filled in by you and marked as 'voluntary'.
In addition, data about you is collected indirectly when you use our services:
Technical connection data, e.g. the page of our web offer called up, your IP address, date and time of the call, end device used. This is done to check the authorization of actions and the authentication of the requesting user of our services. The legal bases are Art. 6 para. 1 lit. c) in conjunction with. Art. 32 and Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to secure our web server, for example to defend against attacks, and to ensure the functionality of our services.
Minors:
Our website is not directed at minors and we do not knowingly collect personal data from minors.
If persons under the age of 16 transmit personal data to us, this is only permitted if the parent or guardian has given their own consent or has agreed to the consent of the young person. For this purpose, we must be informed of the contact details of the legal guardian in accordance with Art. 8 (2) GDPR in order to convince ourselves of the consent or approval of the legal guardian. This data and the data of the minor will then be processed in accordance with this privacy policy.
If we determine that a minor under the age of 16 has sent personal data to us without the consent of the parent or guardian himself or herself or without the consent of the minor, we will delete the data immediately.
4. Who has access to your data and to whom we transfer your data
a) Access
Access to your personal data stored by us is restricted to our employees and the service providers commissioned by us, who have to deal with this personal data due to their tasks.
Insofar as third parties have access to your data, we have obtained your permission for this or there is a legal basis for this.
We also use service providers to provide services and process your data (including for hosting as well as database maintenance and analysis, securing our web servers). Insofar as special provisions apply to these, we have detailed these for you below in the respective service. The service providers process the data exclusively on our instructions and have been obligated to comply with the applicable data protection regulations. All service processors have been carefully selected and will only be given access to your data to the extent and for the period required to provide the services or to the extent that you have consented to the processing and use of the data.
b) Data exchange within the group of companies
Data exchange within the group of companies to which we belong takes place exclusively within the EU/EEA and serves only internal administrative purposes. By group of companies, we mean affiliated companies within the meaning of Art. 4 No. 19 GDPR.
c) Transfer to third countries and legal basis
The servers of some of the service providers we use are located in the USA and other countries outside the European Union. Companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as they do in the member states of the European Union. To the extent that your data is processed in a country that does not have a recognized high level of data protection like the European Union, we will ensure that your personal data is adequately protected through contractual arrangements or other recognized instruments. We expressly point this out to you again in the context of the individual services.
Insofar as a transfer of personal data to third countries takes place, this is based on the conclusion of the EU Standard Agreement 2010 in accordance with Article 46 (2) c GDPR in conjunction with the decision of the EU Commission of 05.02.2010 (2010/87/EU) or your explicit consent. Additional measures to ensure a higher level of protection of personal data and effective legal protection for data subjects are currently in preparation.
d) Transfer to law enforcement and criminal investigation authorities.
In exceptional cases, we transmit personal data to law enforcement and criminal investigation authorities. This is done on the basis of corresponding legal obligations, e.g. from the Code of Criminal Procedure, the Tax Code, the Money Laundering Act or state police laws.
5. Storage periods
We store personal data within the scope of legal regulations or your consent.
We use the following criteria to determine the specific storage period:
We store personal data until the purposes for which they were collected no longer apply (e.g., upon termination of a contractual relationship or through the last activity if there is no continuing obligation, or in the event of a revocation of your consent for the specific data processing).
Data is only stored for longer periods if
- legal obligations to retain data exist (e.g. according to AO and HGB);
- the data is still required for the assertion and exercise of legal claims or for the defense against legal claims, e.g. due to technological and forensic requirements for the defense against attacks on our web servers and their prosecution;
- deletion would be contrary to the legitimate interests of the data subjects;
or
- another exception pursuant to Art. 17 (3) GDPR applies.
6. Your rights
You are entitled to a number of statutory rights, which we would like to inform you of below. In addition, our data protection officer is, of course, also available to answer any questions you may have about the data we have collected and processed about you at the contact details provided below.
a) Right to information and data portability
You have the right to obtain information about the personal data we process concerning you at any time.
If the data processing is based on your consent or, pursuant to Art. 6 (1) (b) GDPR, on a contract, you may also request, pursuant to Art. 20 (1) GDPR, to receive the personal data stored about you in a structured, common and machine-readable format. At your request, we will also forward the data directly to the recipient you have specified.
b) Right to rectification, restriction and deletion
Furthermore, in accordance with Art. 16 to 18 GDPR, you can demand that we correct, restrict (block) or delete your personal data if the data has been processed incorrectly by us, if there is a reason for restricting further data processing, or if the data processing has become unlawful for various reasons, or if its storage is inadmissible for other legal reasons. We would like to point out that your right to
Deletion may be restricted by statutory retention periods.
c) Right of objection
If our data processing is based exclusively on our legitimate interest pursuant to Art 6 (1) f) GDPR, you may object to this processing pursuant to Art 21 (1) GDPR. We will then stop processing your data unless we can demonstrate legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend a legal claim. Furthermore, you always have the right to object to the use of your data for the purpose of direct marketing with effect for the future in accordance with Article 21 (2) GDPR.
d) Right of revocation
If you have allowed us to process your personal data by giving your consent, you have a right of revocation with effect for the future pursuant to Art. 7 (3) GDPR.
e) Right to complain to the supervisory authority
You are free to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates the European General Data Protection Regulation or other national and international data protection laws.
The contact details of the supervisory authority responsible for us are:
State Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
PO Box 20 04 44
D-40102 Düsseldorf
Telephone: +49 211 38424 0
Fax: +49 211 38424 10
E-mail: poststelle@ldi.nrw.de
f) Contact details
To make use of your rights, you can send us an informal message to the following contact details. Likewise, please address the revocation of your consent, indicating which consent form you wish to revoke, to the following contact details:
Responsible | DPO |
AUNDE Group SE Waldnieler Street 151 41068 Mönchengladbach Phone: +49 21 61935-0 E-mail: info@aunde.de | it.sec GmbH – Data Protection Officer – Einsteinstraße 55 89077 Ulm E-mail: dataprotection-aunde@aunde.com |
7. Use of our website – cookies
We use so-called cookies in some areas of our website, e.g. to recognize visitors' preferences and to be able to design the website optimally accordingly. This facilitates navigation and a high degree of user-friendliness of a website. Cookies also help us to identify particularly popular areas of our website. Cookies are small files that are stored on a visitor's hard disk. They allow us to retain information for a certain period of time and to identify the visitor's computer. We use permanent cookies for better user guidance and individual performance presentation.
Furthermore, we use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. This is done to verify the authorization of actions and authentication of the requesting user of our services. The legal bases are Art. 6 para. 1 lit. c) in conjunction with. Art. 32 and Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to secure our web server, for example to defend against attacks, and to ensure the functionality of our services.
We only set cookies that are not technically necessary after your express consent, which you can of course revoke at any time.
In the context of our cookie information on our website, you have agreed to the following statement in this regard:
We use cookies to personalize content and ads, to offer social media features, and to analyze traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected in the course of your use of the Services.
[Only necessary cookies] [Allow selection] [Allow cookies].
If you completely exclude the use of cookies, you will not be able to use certain features of our website. If necessary, please allow the opt-out cookies of those services for which you wish to prevent tracking.
Please also bear in mind that deleting all cookies will also delete opt-out cookies. You may therefore have to set them again. Cookies are also browser-bound, i.e. they must be set separately for each browser you use on each device you use. You will find the necessary links below in the description of the respective service.
The following cookies are used by us - if you allow this and have not set one or more opt-out cookies - for the purpose described in more detail:
Name of the cookie | Usage | Memory - permanently | Technically necessary | Type of cookie |
cookieconsent_status | Checks whether cookies are activated. This is a session cookie. | End of session | Yes | Required cookie This cookie is required to save your input in the cookie consent. |
_gid | Used to distinguish users. | 24 hours | No | Functional cookie These cookies allow us to analyze your site usage in order to improve our services and provide you with a better user experience. Data is only collected anonymously. |
_gat | Used to throttle the request speed. | 1 minute | No | Functional cookie These cookies allow us to analyze your site usage in order to improve our services and provide you with a better user experience. Data is only collected anonymously. |
_ga | Used to distinguish users. | 2 years | No | Functional cookie These cookies allow us to analyze your site usage in order to improve our services and provide you with a better user experience. Data is only collected anonymously. |
a) Google Maps
Our website uses the 'Google Maps' service from Google, for example to enable you to search for a location or plan a route.
Application: | When you call up Google Maps on this website, data is transmitted to Google LLC. As part of the provision of Google Maps, a joint control agreement was concluded with Google LLC. We provide you with the following information on this basis. |
Responsible person with whom Google Maps is operated jointly on our website ('Google'): | Google LLC Mountain View CA, 94043 USA
Responsible for the data processing of persons living within the European Union / EEA and Switzerland: Google Ireland Ltd. Gordon House, Barrow Street, Dublin 4 |
In an agreement pursuant to Art. 26 para. 1 GDPR were between established the jointly responsible one who does that obligation according to the GDPR | The agreement within the meaning of Article 26 (1) of the GDPR with Google can be found at the following link:https://privacy.google.com/intl/de/businesses/mapscontrollerterms/ |
Data protection contact details: | Google's data protection officer can be contacted using the following web form: support.google.com/policies/contact/general_privacy_form |
Categories of data subjects: | Visitors to our website who use Google Maps |
Categories of personal data: | Data that Google processes about our website visitors can be found at the following link: https://policies.google.com/privacy/update?hl=de&gl=de, supplemented by the separate data protection provisions for Google Maps: https://www.google.com/intl/de_de/help/terms_maps.html |
Origin of the data | Google receives the data from the data subjects directly via our website. |
Legal basis for data processing | We only use Google Maps with your consent, Art. 6 Para. 1 lit. a) GDPR. You can prevent the execution of Google Maps by selectively preventing the execution of the JavaScript code used by using a JavaScript blocker; Alternatively, you can also completely deactivate the execution of Java Script in your browser settings.
|
The legal basis on which Google bases data processing can be found at the following link: https://policies.google.com/privacy/update?hl=de&gl=de, supplemented by the separate data protection provisions for Google Maps: https://www.google.com/intl/de_de/help/terms_maps.html | |
Purposes of data processing | We use Google Maps to enable you to search for a location or plan a route and pursue the following purposes: - External presentation and advertising - Communication and data exchange - Event management - If necessary, contract initiation and processing The purposes that Google is pursuing with the data processing can be found at the following link: https://policies.google.com/privacy/update?hl=de&gl=de , supplemented by the separate data protection provisions for Google Maps: https: // www .google.com / intl / de_de / help / terms_maps.html |
Storage period | We do not save any data. The retention and deletion of data is the obligation of Google. The information about this can be found in the following link: https://policies.google.com/privacy/update?hl=de&gl=de, supplemented by the separate data protection provisions for Google Maps: https://www.google.com/intl/de_de/help/terms_maps.html |
Categories of recipients | We or our employees and service providers have no access to the data processed by Google. |
The categories of recipients to which Google discloses the data, as well as information on internal data exchange can be found in the following link: https://policies.google.com/privacy/update?hl=de&gl=de, supplemented by the separate data protection provisions for Google Maps: https://www.google.com/intl/de_de/help/terms_maps.html | |
Data transfers to third countries
| When using Google Maps, the data is also processed by Google LLC. The legal basis for the transfer is the EU standard contract 2010 in accordance with Article 46 (2) (c) GDPR in conjunction with the decision of the EU Commission of February 5, 2010 (2010/87 / EU). Additional measures to ensure higher protection of personal data and effective legal protection for data subjects are currently in preparation. |
Google will transfer the data, regardless of the place of residence of the data subjects, to the United States, Ireland and any other country in which Google does business, where it will be stored and otherwise processed. Associated data transfers to third countries are secured by an adequacy decision of the EU Commission in accordance with Art. 45 GDPR or by suitable guarantees in accordance with Art. 46 GDPR : policies.google.com/privacy/update | |
Involved logic and scope of a profiling or an automated individual decision based on the collected data | If the data subjects are tracked through the collection of their data, be it through the use of cookies or comparable techniques or through the storage of the IP address, Google is obliged to inform about this. The information on this can be found at the following link: https://policies.google.com/privacy/update?hl=de&gl=de, supplemented by the separate data protection provisions for Google Maps: https://www.google.com/intl/de_de/help/terms_maps.html |
Rights of data subjects | Joint controllers must provide data subjects with various rights regarding the processing of their data.The rights to which data subjects are entitled can be found in our privacy policy. These can be asserted directly against Google.The supervisory authority responsible for Google is that of the member state in which Google has its main office (Google Ireland Ltd.) within the European Union:Data Protection Commission Translated with www.DeepL.com/Translator (free version)21 Fitzwilliam Square, Dublin 2 Web address: http://gdprandyou.ie/contact-us/ |
You can disable the execution of Google Maps at any time. To do this, you must change the settings in your browser by either selectively or completely disabling the execution of Java scripts.
b) Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. One way to object to web analysis by Google Analytics is to set an opt-out cookie, which instructs Google not to store or use your data for web analysis purposes. Please note that with this solution, web analytics will only not take place as long as the opt-out cookie is stored by the browser. If you would like to set the opt-out cookie now, please click developers.google.com/analytics/devguides/collection/gajs/.
However, you can also prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link. The current link is: tools.google.com/dlpage/gaoptout.
Recipient of the data: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The legal basis for the transfer is the EU Standard Contract 2010 pursuant to Art. 46 (2) lit. c GDPR in conjunction with the decision of the EU Commission of 05.02.2010 (2010/87/EU). Additional measures to ensure a higher level of protection of personal data and effective legal protection for data subjects are currently in preparation.
c) Google Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally on our server. A connection to Google servers does not take place.
d) Google Tag Manager
Google Tag Manager is a product from Google that allows us to manage website tags from applications such as Google Analytics via an interface. The Tag Manager is a cookie-less domain and does not collect any personal data.
8. Additional notes and provisions for individual services
a) Newsletter
At your express request, we will send you our newsletter on the topics you have selected as well as information about our company. Please note that delivery can only take place once you have expressly confirmed your wish to receive the newsletter again as part of our double opt-in procedure.
The personal data collected as part of the newsletter registration will be used exclusively for sending and personalizing the newsletter (e.g. to address you by name). You can revoke your consent to the storage of personal data that you have given us for newsletter dispatch at any time with effect for the future. For the purpose of revoking consent, each newsletter contains a corresponding link; alternatively, you are also welcome to contact us directly so that we can implement your revocation. We have provided you with details of the consent given to us in the double opt-in email.
b) Contact form
Data that you send us via our contact form is processed for the purpose of communication and data exchange, i.e. to respond to your specific request. This data is stored for as long as its processing is necessary for these purposes or until the expiry of any subsequent retention periods.
c) Online application procedure
We offer you the opportunity to apply to us online. The data you enter and the file attachments you send are transmitted via a transport-secured connection. Your electronic application data will be received by the relevant HR department and forwarded only to the specialist department responsible for the position in question or to the persons entrusted with processing the application. All parties involved will treat your application documents with due care and absolute confidentiality.
After completion of the applicant selection process, we will keep your application documents for a further 3 months and then delete them or destroy any copies, unless we have concluded an employment contract with you. Should we wish to include your application documents in our pool of applicants, we will contact you to this effect. In the notification, you can actively consent to the further storage of your documents. Your applicant account and the data stored in it will remain stored regardless of a concrete active application as long as you do not deactivate it, so that you have the opportunity to apply for further positions with us.
Please note that applications sent to us by e-mail are transmitted to us unencrypted. We therefore recommend that you use the online application portal.
9. E-mail communication with business partners
We would like to inform you accordingly about the handling of your personal data (contact data, etc.) received in the course of our business relationship in accordance with Art. 13, 14 GDPR. The legal basis for the processing of this personal data can be found in Art. 6 para. 1 lit. b) and f) GDPR. The purpose of the data processing as well as our legitimate interest is the implementation and maintenance of the business relationship existing between our company and yours or your group of companies. In order to maintain our business relationship, we take the liberty of sending you seasonal greetings (Christmas/New Year greetings) or also to inform you explicitly about references to our presence at selected trade fairs. This type of contact will not take place more than five times a year and you can of course object to it at any time (see below). If you have consented to any other use, we will delete the data as soon as you revoke your consent.
10. Company presences in social networks
LinkedIn
Social network: | LinkedIn: https://de.linkedin.com/ We would like to point out that LinkedIn is just one more of various options for contacting us or receiving information from us. Alternatively, the information offered via our LinkedIn account can also be accessed on our website, for example. |
Person responsible with whom our LinkedIn account is jointly operated ('Platform Operator'): | LinkedIn Corporation, 1000 W. Maude Avenue Sunnyvale, CA 94085 USA
Responsible for the data processing of persons living in the European Union (EU) and in the European Economic Area (EEA) as well as in Switzerland: LinkedIn Ireland Unlimited Company Wilton Place Dublin 2 Ireland |
In an agreement pursuant to Art. 26 para. 1 GDPR were between established the jointly responsible one who does that obligation according to the GDPR | The platform operator makes the essential contents of this agreement available to the data subjects: https://legal.linkedin.com/pages-joint-controller-addendum
|
Data protection contact details: | The contact details for data protection can be found in our privacy policy linked here. |
The platform operator's data protection officer can be contacted using the following web form https://www.linkedin.com/help/linkedin/ask/TSO-DPO or at the following address: Jonathan Adams LinkedIn Corporation Legal Department - Privacy 1000 W. Maude Ave. | |
Categories of data subjects: | Visitors to our fan page both registered and unregistered in the social network We point out to the data subjects that they use LinkedIn and its functions on their own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating). |
Categories of personal data: | Data that we process from registered visitors to our fan page: User ID or username under which the persons concerned registered, released profile data (name, email address, telephone number), ProFinder profile data, training, professional experience, salary expectations , photo, location data, knowledge and confirmation of knowledge, professional performance (e.g. Granting of patents, professional recognition, projects), possibly also special categories of personal data such as religious affiliation, health data, etc., data that arise when sharing content, exchanging messages and communicating, data that arise in the context of contract initiation and processing Requests from registered visitors are required, other data and content freely published, made available, disseminated, posted or uploaded by the data subjects on LinkedIn or via their LinkedIn account. Otherwise, we only process pseudonymised data such as statistics and insights into how our fan page, the articles, pages, videos and other content provided through it are interacted with (page activities, page views, "likes", reach, general demographic, location and interest-related) Information on age, gender, country, city, language), evaluations of the success and background of our advertisements, other analyzes and measurements. The pseudonymized data cannot be merged by us with the corresponding attribute (e.g. name details). This means that it is not possible for us to identify individual visitors who therefore remain anonymous to us. |
Data that we process from non-registered visitors to our fan page: Pseudonymized data such as statistics and insights into how our fan page, the posts, pages, videos and other content that is provided via it is interacted with (page activities, page views, "likes", reach, general demographic, location and interest-related information on age, Gender, country, city, language), evaluations of the success and background of our advertisements, other analyzes and measurements. The pseudonymized data cannot be merged by us with the corresponding attribute (e.g. name details). This means that it is not possible for us to identify individual visitors who therefore remain anonymous to us. | |
Data that we process from our website visitors : By integrating the LinkedIn button (pure link) on our website, no IP addresses of our website visitors are transmitted to the platform operator. | |
Data that the platform operator processes about registered and non-registered visitors to our fan page can be found at the following link: https://www.linkedin.com/legal/privacy-policy The platform operator may use various analysis tools for evaluation. We have no influence on the use of such tools by the platform operator and have not been informed of such potential use. Should tools of this kind be used by the platform operator for our fan page, we have neither commissioned nor approved or otherwise supported this in any way. The data obtained during the analysis are also not made available to us. In addition, we have no way of preventing or turning off the use of such tools on our fan page and also no other effective control options. | |
Origin of the data | We receive the data from the data subjects directly or from the platform operator. |
The following link shows where the platform operator receives the data of the data subjects: https://www.linkedin.com/legal/privacy-policy We have no influence or effective control options as to whether the data acquisition by the platform operator is permitted. | |
Legal basis for data processing | We process the data on the following legal bases: - Art. 6 para. 1 lit. a) GDPR: Consent of the data subjects - If applicable, Art. 6 Paragraph 1 lit. b) GDPR: fulfillment of a contract with the data subject or implementation of pre-contractual measures at the request of the data subject - Art. 6 para. 1 lit.f) GDPR legitimate interest
We process special categories of personal data, if at all, only on the basis of the following legal bases: - Art. 9 para. 2 lit. a) GDPR: Consent of the data subject - Art. 9 para. 2 lit. e) GDPR: The person concerned has clearly made the personal data public |
The legal bases on which the platform operator bases data processing can be found at the following link: https://www.linkedin.com/legal/privacy-policy We have no influence or effective control options as to whether data processing by the platform operator is permitted. | |
Purposes of data processing | We process the data for the following purposes: - External presentation and advertising - Communication and data exchange - Event management - possibly contract and in - settlement |
Information about the purposes for which the platform operator processes the data can be found at the following link: https://www.linkedin.com/legal/privacy-policy We have no influence on the purposes for which the platform operator actually uses the data. We also have no effective control options in this regard. | |
Storage period | It is the obligation of the platform operator to store and delete the data. The information on this can be found at the following link: https://www.linkedin.com/legal/privacy-policy We have no influence on how the platform operator determines the standard deletion periods and how the data is deleted. We also have no effective control options in this regard. |
Categories of recipients | Only our employees and service providers who maintain our fan page and who need the data for the above-mentioned purposes have access to the data processed by us. If the data subjects post their data publicly on our fan page, they can be accessed by other registered and possibly non-registered visitors. |
The recipient categories to which the platform operator discloses the data or enables the registered visitors to disclose their data, as well as information on the group-internal data exchange, can be found at the following link: https://www.linkedin.com/legal/privacy-policy We have no influence on the disclosure of the data to the individual recipients (categories) by the platform operator. We also have no effective control options in this regard. | |
Data transfers to third countries
| If the data subjects post their data publicly on our fan page, they can be accessed by other registered and possibly non-registered visitors worldwide.
The legal basis for the transfer is the EU standard contract 2010 in accordance with Article 46 (2) (c) GDPR in conjunction with the decision of the EU Commission of February 5, 2010 (2010/87 / EU). Additional measures to ensure a higher level of protection of personal data and effective legal protection for data subjects are currently in preparation. |
The platform operator will transfer the data, regardless of the place of residence of the data subjects, to the United States, Ireland and any other country in which the platform operator does business, and store it there and process it in other ways. Associated data transfers to third countries are secured by an adequacy decision of the EU Commission in accordance with Art. 45 GDPR or by suitable guarantees in accordance with Art. 46 GDPR: https://www.linkedin.com/legal/privacy-policy https://privacy.linkedin.com/de-de/dsgvo We have no influence on the data transfers made by the platform operator to third countries. We also have no effective control options in this regard. | |
Involved logic and scope of a profiling or an automated individual decision based on the collected data | If the data subjects are tracked by collecting their data, be it through the use of cookies or comparable techniques or through the storage of the IP address, the platform operator is obliged to inform about this. The information can d s following links are taken: https://www.linkedin.com/legal/privacy-policy www.linkedin.com/legal/cookie-policy The platform operator may use various analysis tools for evaluation. We have no influence on the use of such tools by the platform operator and have not been informed of such potential use. Should tools of this kind be used by the platform operator for our fan page, we have neither commissioned nor approved or otherwise supported this in any way. The data obtained during the analysis are also not made available to us. In addition, we have no way of preventing or turning off the use of such tools on our fan page and also no other effective control options. |
Rights of data subjects | The jointly responsible must grant the data subjects various rights with regard to the processing of their data, which they can assert directly against the platform operator: Subject to certain conditions in accordance with Art. 15 to Art. 18 GDPR, data subjects have a right to information, correction or deletion of the personal data concerning them or a right to restrict data processing by the person responsible. Affected persons also have the right to revoke their consent to the processing of their personal data at any time with effect for the future (Art. 7 Para. 3 GDPR). You can also object to the further processing of your data, which is based exclusively on the legitimate interest of the person responsible in accordance with Art. 6 Paragraph 1 lit. f) GDPR (Art. 21 Paragraph 1 GDPR), provided this is based on your particular personal situation There are legitimate interests in the exclusion of data processing and there are no longer any compelling legitimate reasons for further data processing for the person responsible. If personal data is processed for the purpose of direct marketing, data subjects have the right to object to this processing at any time with effect for the future (Art. 21 Paragraph 2 GDPR). If the data processing is based on the consent of the data subject in accordance with Art. 6 Paragraph 1 lit. a), Art. 9 Paragraph 1 lit. a) GDPR or in accordance with Art. 6 Paragraph 1 b) GDPR on a contract with the data subject and is carried out with the help of automated procedures, the data subjects can request, in accordance with Art. 20 Paragraph 1 DGVO, to receive the personal data stored about them in a structured, common and machine-readable format, or to a third party designated by the data subject to be transmitted. In principle, data subjects have the right not to be subjected to any automated individual decision in accordance with Art. 22 Paragraph 1 GDPR. ... Unless such automated decision in accordance with Article 22 paragraph 2 letter a) to c) GDPR permissible subjects 22 paragraph 3 GDPR are the following rights under Article granted. Law for submitting his own point of view, right to object to the obtaining of Intervention by a person on the part of the person responsible, right to be able to contest the automated individual decision (right of contestation). è Information on the available personalization and data protection setting options can be found here (with further references): https://privacy.linkedin.com/de-de/faq https://privacy.linkedin.com/de-de/ Settings è Further information on this social network and other social networks and how data subjects can protect their data can also be found here: https://www.youngdata.de/ .
Furthermore, data subjects have the right to lodge a complaint with a supervisory authority if they are of the opinion that the processing of their personal data violates the General Data Protection Regulation, Art. 77 GDPR . The supervisory authority responsible for the platform operator is:
Data Protection Commission 21 Fitzwilliam Square, Dublin 2 Web address: https://www.dataprotection.ie/docs/Contact-us/b/11.htm Web address: http://gdprandyou.ie/contact-us/ |
b) Xing
Social network: | Xing: https://www.xing.com We would like to point out that Xing is just one more of various options for contacting us or receiving information from us. Alternatively, the information offered via our Xing account can also be called up on our website, for example. |
Responsible person with whom our Xing account ('fan page') is jointly operated ('platform operator'): | XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany |
Data protection contact details: | The contact details for data protection can be found in our data protection declaration. |
The platform operator's data protection officer can be contacted using the following web form https://www.xing.com/support/contact or at the following address: Xing SE Dammtorstrasse 30 20354 Hamburg Germany Tel .: +49 40 419 131-0 Fax: +49 40 419 131-11 Email: Datenschutzbeauftragter@xing.com | |
Categories of data subjects: | Visitors to our fan page both registered and unregistered in the social network. We point out to the persons concerned that they use Xing and its functions on their own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating). |
Categories of personal data: | Data that we process from registered visitors to our fan page: User ID or username under which the persons concerned registered, released profile data (name, email address, telephone number), ProFinder profile data, training, professional experience, salary expectations , photo, location data, knowledge and confirmation of knowledge, professional performance (e.g. Granting of patents, professional recognition, projects), possibly also special categories of personal data such as religious affiliation, health data, etc., data that arise when sharing content, exchanging messages and communicating, data that arise in the context of contract initiation and processing Requests from registered visitors are required, other data and content freely published, made available, disseminated, posted or uploaded by the data subjects on Xing or via their Xing account. Otherwise, we only process pseudonymized data such as statistics and insights into how our fan page, the articles, pages, videos and other content provided via it are interacted with (page activities, page views, "likes", reach, general demographic, location and interest-related) Information on age, gender, country, city, language), evaluations of the success and background of our advertisements, other analyzes and measurements. The pseudonymized data cannot be merged by us with the corresponding attribute (e.g. name details). This means that it is not possible for us to identify individual visitors who therefore remain anonymous to us. |
Data that we process from non-registered visitors to our fan page: Pseudonymized data such as statistics and insights into how our fan page, the posts, pages, videos and other content that is provided via it is interacted with (page activities, page views, "likes", reach, general demographic, location and interest-related information on age, Gender, country, city, language), evaluations of the success and background of our advertisements, other analyzes and measurements. The pseudonymized data cannot be merged by us with the corresponding attribute (e.g. name details). This means that it is not possible for us to identify individual visitors who therefore remain anonymous to us. | |
Data that we process from our website visitors : By integrating the Xing button (pure link) on our website, no IP addresses of our website visitors are transmitted to the platform operator. | |
Data that the platform operator processes about registered and non-registered visitors to our fan page can be found at the following link: https://privacy.xing.com/de/datenschutzerklaerung The platform operator may use various analysis tools for evaluation. We have no influence on the use of such tools by the platform operator and have not been informed of such potential use. Should tools of this kind be used by the platform operator for our fan page, we have neither commissioned nor approved or otherwise supported this in any way. The data obtained during the analysis are also not made available to us. In addition, we have no way of preventing or turning off the use of such tools on our fan page and also no other effective control options. | |
Origin of the data | We receive the data from the data subjects directly or from the platform operator. |
The following link shows where the platform operator receives the data of the data subjects: https://privacy.xing.com/de/datenschutzerklaerung We have no influence or effective control options as to whether the data acquisition by the platform operator is permitted. | |
Legal basis for data processing | We process the data on the following legal bases: - Art. 6 para. 1 lit. a) GDPR: Consent of the data subjects - If applicable, Art. 6 Paragraph 1 lit. b) GDPR: fulfillment of a contract with the data subject or implementation of pre-contractual measures at the request of the data subject - Art. 6 para. 1 lit.f) GDPR legitimate interest
We process special categories of personal data, if at all, only on the basis of the following legal bases: - Art. 9 para. 2 lit. a) GDPR: Consent of the data subject - Art. 9 para. 2 lit. e) GDPR: The person concerned has clearly made the personal data public |
The legal bases on which the platform operator bases data processing can be found at the following link: https://privacy.xing.com/de/datenschutzerklaerung We have no influence or effective control options as to whether data processing by the platform operator is permitted. | |
Purposes of data processing | We process the data for the following purposes: - External presentation and advertising - Communication and data exchange - Event management - If necessary, contract initiation and processing |
Information about the purposes for which the platform operator processes the data can be found at the following link: https://privacy.xing.com/de/datenschutzerklaerung We have no influence on the purposes for which the platform operator actually uses the data. We also have no effective control options in this regard. | |
Storage period | It is the duty of the platform operator to store and delete the data. The information on this can be found at the following link: https://privacy.xing.com/de/datenschutzerklaerung We have no influence on how the platform operator determines the standard deletion periods and how the data is deleted. We also have no effective control options in this regard. |
Categories of recipients | Only our employees and service providers who maintain our fan page and who need the data for the above-mentioned purposes have access to the data processed by us. If the data subjects post their data publicly on our fan page, they can be accessed by other registered and possibly non-registered visitors. |
The recipient categories to which the platform operator discloses the data or enables the registered visitors to disclose their data, as well as information on internal group data exchange, can be found at the following link: https://privacy.xing.com/de/datenschutzerklaerung We have no influence on the disclosure of the data to the individual recipients (categories) by the platform operator. We also have no effective control options in this regard. | |
Data transfers to third countries
| If the data subjects post their data publicly on our fan page, they can be accessed by other registered and possibly non-registered visitors worldwide. |
Involved logic and scope of a profiling or an automated individual decision based on the collected data | If the data subjects are tracked through the collection of their data, be it through the use of cookies or comparable techniques or through the storage of the IP address, the platform operator is obliged to inform about this. The information can d em this link are taken: https://privacy.xing.com/de/datenschutzerklaerung The platform operator may use various analysis tools for evaluation. We have no influence on the use of such tools by the platform operator and have not been informed of such potential use. Should tools of this kind be used by the platform operator for our fan page, we have neither commissioned nor approved or otherwise supported this in any way. The data obtained during the analysis are also not made available to us. In addition, we have no way of preventing or turning off the use of such tools on our fan page and also no other effective control options. |
Rights of data subjects | The jointly responsible must grant the data subjects various rights with regard to the processing of their data, which they can assert directly against the platform operator: Subject to certain conditions in accordance with Art. 15 to Art. 18 GDPR, data subjects have a right to information, correction or deletion of the personal data concerning them or a right to restrict data processing by the person responsible. Affected persons also have the right to revoke their consent to the processing of their personal data at any time with effect for the future (Art. 7 Para. 3 GDPR). You can also object to the further processing of your data, which is based exclusively on the legitimate interest of the person responsible in accordance with Art. 6 Paragraph 1 lit. f) GDPR (Art. 21 Paragraph 1 GDPR), provided this is based on your particular personal situation There are legitimate interests in the exclusion of data processing and there are no longer any compelling legitimate reasons for further data processing for the person responsible. If personal data is processed for the purpose of direct marketing, data subjects have the right to object to this processing at any time with effect for the future (Art. 21 Paragraph 2 GDPR). If the data processing is based on the consent of the data subject in accordance with Art. 6 Paragraph 1 lit. a), Art. 9 Paragraph 1 lit. a) GDPR or in accordance with Art. 6 Paragraph 1 b) GDPR on a contract with the data subject and is carried out with the help of automated procedures, the data subjects can request, in accordance with Art. 20 Paragraph 1 DGVO, to receive the personal data stored about them in a structured, common and machine-readable format, or to a third party designated by the data subject to be transmitted. In principle, data subjects have the right not to be subjected to any automated individual decision in accordance with Art. 22 Paragraph 1 GDPR. ... Unless such automated decision in accordance with Article 22 paragraph 2 letter a) to c) GDPR permissible subjects 22 paragraph 3 GDPR are the following rights under Article granted. Law for submitting his own point of view, right to object to the obtaining of Intervention by a person on the part of the person responsible, right to be able to contest the automated individual decision (right of contestation). Furthermore, data subjects have the right to lodge a complaint with a supervisory authority if they are of the opinion that the processing of their personal data violates the General Data Protection Regulation, Art. 77 GDPR . The supervisory authority responsible for the platform operator is:
The Hamburg Commissioner for Data Protection and Freedom of Information Ludwig-Erhard-Str 22, 7th floor 20459 Hamburg Tel .: 040/428 54 - 4040 Fax: 040/428 54 - 4000 |
c) Instagram
Social network: | instagram.com We would like to point out that Instagram is just one more of various options for contacting us or receiving information from us. Alternatively, the information offered on our fan page can also be accessed, for example, on ours. |
Responsible person with whom the fan page is operated jointly ('platform operator'): | Facebook Inc. Menlo Park
Responsible for the data processing of persons living within the European Union: Facebook Ireland Ltd. |
In an agreement pursuant to Art. 26 para. 1 GDPR were between established the jointly responsible one who does that obligation according to the GDPR
| The agreement within the meaning of Art. 26 Paragraph 1 GDPR can be found under the following link: https://www.facebook.com/legal/terms/page_controller_addendum The platform operator makes the essential contents of this agreement available to the data subjects. We have no influence on whether or how the platform operator actually uses data (purpose, storage, deletion, disclosure, transmission, profiling). We also have no effective control options in this regard. |
Data protection contact details: | The contact details for data protection can be found in our data protection declaration or the data protection officer of the platform operator can be contacted using the following web form: |
Categories of data subjects: | Visitors to our fan page both registered and unregistered in the social network We point out to the data subjects that they use Instagram and its functions on their own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating). |
Categories of personal data: | Data that we process from registered visitors to our fan page: User ID under which you registered, released profile data (e.g. name details, profession, addresses, contact details, possibly also special categories of personal data such as religious affiliation, health data, etc.), data that is used when sharing content, exchanging messages and when Communication arises, data that are required in the context of contract processing at the request of registered visitors; Otherwise, we only process pseudonymised data such as statistics and insights, such as how our fan page, the articles, pages, videos and other content provided via it is interacted with (page activities, page views, "likes", reach, general demographic, location and interest-related) Information on age, gender, country, city, language), evaluations of the success and background of our advertisements, other analyzes and measurements on…. The pseudonymized data cannot be merged by us with the corresponding attribute (e.g. name details). This means that it is not possible for us to identify individual visitors who therefore remain anonymous to us. |
Data that we process from non-registered visitors to our fan page: Pseudonymized data such as statistics and insights into how our fan page, the posts, pages, videos and other content that is provided via it is interacted with (page activities, page views, "likes", reach, general demographic, location and interest-related information on age, Gender, country, city, language), evaluations of the success and background of our advertisements, other analyzes and measurements on…. The pseudonymized data cannot be merged by us with the corresponding attribute (e.g. name details). This means that it is not possible for us to identify individual visitors who therefore remain anonymous to us. | |
Data that the platform operator processes about registered and non-registered visitors to our fan page can be found at the following link: https://www.facebook.com/privacy/explanation help.instagram.com/519522125107875 The platform operator may use various analysis tools for evaluation. We have no influence on the use of such tools by the platform operator and have not been informed of such potential use. Should tools of this kind be used by the platform operator for our fan page, we have neither commissioned nor approved or otherwise supported this in any way. The data obtained during the analysis are also not made available to us. In addition, we have no way of preventing or turning off the use of such tools on our fan page and also no other effective control options. | |
Origin of the data | We receive the data from the data subjects directly or from the platform operator. |
The following link shows where the platform operator receives the data of the data subjects: | |
Legal basis for data processing | We process the data on the following legal bases: - Art. 6 para. 1 lit. a) GDPR: Consent of the data subjects - If applicable, Art. 6 Paragraph 1 lit. b) GDPR: fulfillment of a contract with the data subject or implementation of pre-contractual measures at the request of the data subject - Art. 6 para. 1 lit.f) GDPR legitimate interest
We process special categories of personal data, if at all, only on the basis of the following legal bases:
|
The legal bases on which the platform operator bases data processing can be found at the following link: https://www.facebook.com/about/privacy/legal_bases https://help.instagram.com/519522125107875 If the data subjects are tracked by collecting their data, be it through the use of cookies or comparable techniques or by storing the IP address, the platform operator will obtain the consent of the data subjects in advance. In particular, the platform operator is obliged to inform the persons concerned for what purposes and on what legal basis the first access to a fan page generates entries in the so-called local storage even for non-registered visitors and whether personal data of non-registered visitors (e.g. IP address or other) Data that are condensed into personal data) are used to create profiles. | |
Purposes of data processing | The data will be processed for the following purposes: - External presentation and advertising - Communication and data exchange - Event management |
Information on the purposes for which the platform operator processes the data can be found at the following link: | |
Storage period | The storage and deletion of the data is the duty of the platform operator in accordance with the agreement within the meaning of Art. 26 Para. 1 GDPR . The information on this can be found at the following link: |
Categories of recipients | Only our employees and service providers who maintain our fan page and who need the data for the above-mentioned purposes have access to the data processed by us . If the data subjects post their data publicly on our fan page, they can be accessed by other registered and possibly non-registered visitors. |
The recipient categories to which the platform operator discloses the data or the registered visitor enables the disclosure of his data, as well as information on the group-internal data exchange, can be found at the following link: https://www.facebook.com/privacy/explanation | |
Data transfers to third countries
| If the data subjects post their data publicly on our fan page, they can be accessed by other registered and possibly non-registered visitors worldwide.
As part of the operation of our fan page , the data is also processed by Facebook Inc. The associated data transfer to the USA as a third country is currently carried out due to the technical necessity of the data partially retrieved in the USA without an adequate level of data protection. Please note that due to the decision of the ECJ on the invalidity of the Privacy Shield, data may be transferred to the USA without an adequate level of data protection and we are therefore currently working on a solution. If you visit our fan page anyway, we would like to expressly point out that your fundamental rights from Articles 7, 8 and 47 of the Charter of Fundamental Rights of the European Union (GRChr) are currently not being adequately considered. The legal basis for the transfer is the EU standard contract 2010 in accordance with Article 46 (2) (c) GDPR in conjunction with the decision of the EU Commission of February 5, 2010 (2010/87 / EU). Additional measures to ensure a higher level of protection of personal data and effective legal protection for data subjects are currently in preparation |
The platform operator will transfer the data, regardless of the place of residence of the data subjects, to the United States, Ireland and any other country in which Facebook does business, and store it there and process it in other ways. Associated data transfers to third countries are secured by an adequacy decision of the EU Commission in accordance with Art. 45 GDPR or by suitable guarantees in accordance with Art. 46 GDPR: | |
Involved logic and scope of a profiling or an automated individual decision based on the collected data | If the data subjects are tracked through the collection of their data, be it through the use of cookies or comparable technologies or through the storage of the IP address, the platform operator is obliged to inform about this in accordance with the agreement within the meaning of Art. 26 (1) GDPR. In particular, the platform operator is obliged to give the data subjects the purposes and legal basis if a session cookie and three cookies with a lifespan of between four months and two years are stored on our fan page after accessing a subpage. The information on this can be found at the following link: https://www.facebook.com/privacy/explanation https://www.facebook.com/policies/cookies/ https://help.instagram.com/519522125107875 The platform operator may use various analysis tools for evaluation. We have no influence on the use of such tools by the platform operator and have not been informed of such potential use. Should tools of this kind be used by the platform operator for our fan page, we have neither commissioned nor approved or otherwise supported this in any way. The data obtained during the analysis are also not made available to us. In addition, we have no way of preventing or turning off the use of such tools on our fan page and also no other effective control options. |
Rights of data subjects | The jointly responsible persons must grant the data subjects various rights with regard to the processing of their data, which they can assert directly against the platform operator on the basis of the agreement within the meaning of Art. 26 Para. 1 GDPR : https://www.facebook.com/help/contact/540977946302970 Subject to certain conditions in accordance with Art. 15 to Art. 18 GDPR, data subjects have a right to information, correction or deletion of the personal data concerning them or a right to restrict data processing by the person responsible. Affected persons also have the right to revoke their consent to the processing of their personal data at any time with effect for the future (Art. 7 Para. 3 GDPR). You can also object to the further processing of your data, which is based exclusively on the legitimate interest of the person responsible in accordance with Art. 6 Paragraph 1 lit. f) GDPR (Art. 21 Paragraph 1 GDPR), provided this is based on your particular personal situation There are legitimate interests in the exclusion of data processing and there are no longer any compelling legitimate reasons for further data processing for the person responsible. If personal data is processed for the purpose of direct marketing, data subjects have the right to object to this processing at any time with effect for the future (Art. 21 Paragraph 2 GDPR). If the data processing is based on the consent of the data subject in accordance with Art. 6 Paragraph 1 lit. a), Art. 9 Paragraph 1 lit. a) GDPR or in accordance with Art. 6 Paragraph 1 b) GDPR on a contract with the data subject and is carried out with the help of automated procedures, the data subjects can request, in accordance with Art. 20 Paragraph 1 DGVO, to receive the personal data stored about them in a structured, common and machine-readable format, or to a third party designated by the data subject to be transmitted. In principle, data subjects have the right not to be subjected to any automated individual decision in accordance with Art. 22 Paragraph 1 GDPR. ... Unless such automated decision in accordance with Article 22 paragraph 2 letter a) to c) GDPR permissible subjects 22 paragraph 3 GDPR are the following rights under Article granted. Law for submitting his own point of view, right to object to the obtaining of Intervention by a person on the part of the person responsible, right to be able to contest the automated individual decision (right of contestation). è Further information on this social network and other social networks and how data subjects can protect their data can also be found here: https://www.youngdata.de/ .
Furthermore, data subjects have the right to lodge a complaint with a supervisory authority if they are of the opinion that the processing of their personal data violates the General Data Protection Regulation, Art. 77 GDPR . The supervisory authority responsible for the platform operator is: Data Protection Commission 21 Fitzwilliam Square, Dublin 2 Web address: https://www.dataprotection.ie/en/contact/how-contact-us |