Privacy policy and additional data protection information - as at 31.10.2024 Version 1.3

Information on the handling of your personal data

 

1. An initial overview

When we collect your data, we must inform you in a clear and understandable way about how we handle your personal data. Here you will find a brief overview of

- who our company is and how you can contact us or our data controller; we will provide you with the relevant contact details there;

- the purpose for which we will use your personal data

- which categories of your personal data we process;

- the legal basis on which we process your personal data

- how long we will retain your personal data

- which recipients may receive your personal data

- whether the personal data will be transferred to a country outside the EU;

- that you have basic rights in the area of data protection, e.g. in relation to

o Information

o Correction

o Deletion

o Restriction of processing

o data portability

o objection or

o detailed information on automated decision-making.

- You will also find further information on the handling of data from external and internal applicants,

- on the handling of data when using our websites and online presences on social media sites,

- how we handle your data when you use our newsletter service,

- on the handling of data in the context of conducting video conferences

- and on the use of cloud services.

 

Please remember that personal data is required as part of our business activities. Without personal data, we will not be able to fulfill your wishes, manage you as a contractual partner or provide you with information about our activities, services or our company. Naturally, we will only collect the data required for this purpose. If we request additional data from you, we will inform you of this and point out that this information is voluntary. Incidentally, we do not carry out any automated decision-making processes.

 

Data protection is very important to us. We would therefore like to inform you comprehensively and comprehensibly about how we process your personal data - naturally in compliance with the applicable legal provisions, such as the European General Data Protection Regulation (DSGVO), the German Federal Data Protection Act (BDSG 2018) and all other relevant data protection regulations. We have defined how we handle personal data in our data protection management system and act accordingly.

 

If you are of the opinion that our data protection declaration can be improved, we would be pleased to receive your comments and suggestions.

You also have the option of contacting us directly or the responsible data protection supervisory authority (State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, P.O. Box 20 04 44 40102 Düsseldorf, telephone: 0211/384 24-0, fax: 0211/384 24-999, e-mail: poststelle@ldi.nrw.de, www.ldi.nrw.de ) at any time and complaining to them if necessary.

Our privacy policy and the other information on data protection are regularly reviewed and adapted as part of our data protection management. The latest version will be published on this page.

 

2. Detailed information:

Contact details

Contact details of the person responsible

IVA Schmetz GmbH

Holzener Str. 35-39

58708 Menden

Phone: +49 2373 686-0

E-mail: infoiva-schmetz.de

 

Contact details of the data protection officer

A legally prescribed data protection officer has been appointed for our company and can be contacted by post at the above address of the person responsible with the addition DATENSCHUTZ or by e-mail at the e-mail address: datenschutziva-schmetz.de.

 

3. Purpose

Which data we process in detail and for what purpose we use it depends on the services you use with us. Details on the purposes of our data processing can be found in the respective contract documents, forms, declarations of consent and other information provided to you in this context. This data protection information is part of our contractual texts, website or other documents that we provide or have provided to you. Essentially, we process personal data by default for the following purposes:

- Customer and supplier management

- Applicant management

- Employee management

- Order management

- Operation of the website www.iva-schmetz.de

- Publications on our websites and social media portals

- Management of training and event participants

 

In addition, we process your data in the cases listed below for the purpose of

- sending (by post, e-mail, etc.) company information, unless you have objected to this

- Communication (analog and digital)

- Obtaining information from credit agencies

- the use of your e-mail address for marketing purposes, newsletters, etc.

- the fulfillment of legal requirements, such as tax laws, compulsory insurance, etc.

- the fulfillment of legal security, control and reporting obligations

- the archiving of data for security purposes and to fulfill obligations to provide evidence

- disclosure in the context of official/judicial measures

 

4. Categories

Data categories of personal data that we can process from you are, depending on your use of our offer or the existing contractual relationship with you, the following:

- Master data (e.g. name, telephone number, e-mail address, address, etc.), customers (including potential customers), suppliers and service providers (including potential suppliers), data of employees within the scope of the employment relationship, data of applicants, training and event participants, other interested parties as well as other categories of persons associated with the aforementioned persons who may be involved within the scope of the respective affiliations (e.g. family members, employees of service providers and/or suppliers, etc.).

- Contact data for the aforementioned categories of persons (addresses, telephone numbers, e-mail addresses, etc.)

- transaction data relating to the aforementioned categories of persons (interests, orders, participation in training courses and events of all kinds, etc.)

- Bank details and data on payments and, if applicable, creditworthiness

- Usage data on websites and customer portals offered by us (IP address, time of accessing pages, pages visited, etc.)

- Consent data, for the documentation of granted / revoked consents

 

5. Legal basis

If you are in an employment relationship with us, we process your personal data to establish, implement and terminate the associated contractual relationship on the basis of Art. 6 (1) b in conjunction with Art. 88 DSGVO and § 26 BDSG 2018.

If we are in another contractual relationship or communicate in the context of pre-contractual measures, the processing of personal data takes place for the execution of related contracts, implementation of measures and activities in this context. This processing is based on Art. 6 (1) b DSGVO.

 

In addition, we process your data for the purposes listed below on the basis of the following legal bases:

- Customer management (Art. 6 (1) b DSGVO)

- Supplier management (Art. 6 (1) b DSGVO)

- Employee management (Art. 6 (1) c DSGVO)

- Applicant management (Art. 6 (1) a and b DSGVO)

- Administration (Art. 6 (1) c DSGVO)

- Operation and hosting of the company's websites, in particular to provide you with the requested page content and to ensure the necessary security in their operation (Art. 6 (1) f DSGVO)

- Publication of photos on the websites and social media portals (Art. 6 (1) f and, if applicable, a DSGVO), provided you have given us your consent to do so

- Market and opinion research, unless you have objected (Art. 6 (1) f or Art. 6 (1) a DSGVO)

- Use of your email address for marketing purposes, newsletters (Art. 6 (1) f or Art. 6 (1) a DSGVO)

- Compliance with legal requirements, such as tax laws, etc. (Art. 6 (1) c DSGVO)

- Fulfillment of legal control and reporting obligations (Art. 6 (1) e DSGVO)

- Archiving of data for security purposes (Art. 6 (1) c and, if applicable, f DSGVO)

- Fulfillment of obligations to provide evidence (Art. 6 (1) c DSGVO)

- Disclosure in the context of official/judicial measures (Art. 6 (1) e DSGVO)

In the event that we process further personal data about you on the basis of Art. 6 (1) f DSGVO - in the sense of a balancing of interests - we will inform you of this separately in advance.

 

6. Storage

We process and store your data only for as long as is necessary for our activities and purposes or as required by legal retention obligations (e.g. HGB, AO, etc.). In individual cases, this may result in personal data being stored for several years.

 

7. Recipients

In principle, your personal data will only be made available to internal or external recipients who need it to fulfill contractual or legal obligations or to perform their tasks. This means that data will only be passed on or disclosed

- to bodies that process data as processors or in joint responsibility with us (e.g. in the areas of HR, legal department, data centers, maintenance, accounting, data disposal, purchasing, customer administration, marketing, sales, information and communication technology, website administration and hosting, applicant management, etc.)

- in the event of a legitimate interest, to authorities, lawyers, associations, courts, experts, credit agencies, debt collection agencies, etc.

- to any other third parties if you have given us your express consent to do so.

 

We will not pass on your data beyond this.

Service providers that we have commissioned as part of order processing or in the sense of joint responsibility may only use the data for the purposes for which we have passed it on to them. This is contractually regulated with these service providers and data processing there is subject to the same framework conditions as with us.

 

8 Data transfer outside the EU

As a rule, data is not transferred to locations in countries outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries). Only when data is collected when you visit our websites, use our newsletter service or visit our social media pages can data transfer to third countries (including unsafe third countries) not be ruled out. Please note the relevant information at the relevant points in this privacy policy.

 

9. Basic rights

You can assert your data protection rights against us under certain conditions:

- You have the right to obtain information about your data stored by us in accordance with the rules of Art. 15 DSGVO - with restrictions if necessary.

- If your data stored by us is inaccurate or incorrect, you can request that it be corrected in accordance with Art. 16 DSGVO.

- In accordance with Art. 17 DSGVO, you can request that the personal data stored about you be deleted. However, this only applies as long as there are no other legal provisions to the contrary.

- If the requirements of Art. 18 DSGVO are met, you can request that the processing of your data be restricted.

- In accordance with Art. 21 DSGVO, you have the right to object in special circumstances. This means that you can object to the processing of your personal data after we have to stop processing your data.

- Under certain circumstances, you have the right that we must provide you with your personal data under the conditions of Art. 20 DSGVO.

- You have the right to withdraw your consent at any time with effect for the future. From this point on, your personal data will no longer be processed for the purposes to which you object. The objection can be made informally.

For example, if you have expressly consented in accordance with Art. 6 (1) a DSGVO, we will use your email address to regularly send you our newsletter. You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time to info@iva-schmetz.de by email.

 

As part of the existing contractual relationships with our customers, we send contract and/or service-related information by email to the contact email addresses we have stored as customer information, especially in the service area. This includes, for example, information on upcoming maintenance and service intervals or current technical information on the products purchased from us. If you do not wish to receive this information, you can inform us at any time by sending an e-mail to info@iva-schmetz.de or by clicking on the unsubscribe link provided in each customer information. If you would like to designate a different or additional contact person from your company to receive the information, please send us an e-mail to info@iva-schmetz.de.

If you wish to exercise any of the aforementioned rights, please contact us in writing at the address of the controller given above (see contact details) or contact us directly by email at infoiva-schmetz.de.

 

10. Additional information regarding data from external and internal applicants

Data relating to your person is generally collected directly from you - e.g. as part of the application process - on the basis of § 26 (1) BDSG as amended on May 25, 2018.

In addition, we may also have received data from third parties (e.g. job exchanges such as Indeed, Stepstone or similar job agencies).

We may also process personal data that we have legitimately obtained from publicly accessible sources (e.g. professional social networks).

The processed categories of personal data of applicants include in particular your master data (such as first name, surname, name affixes, nationality, personnel number), contact data (such as private address, (mobile) telephone number, e-mail address) as well as the data of the entire application process (cover letter, CV, work or other certificates, proof of qualifications).

If you have also voluntarily provided special categories of personal data (such as health data, degree of disability, religious affiliation) in the letter of application or during the application process, processing will only take place if you have consented to this.

We process personal employee and applicant data on the basis of and in compliance with the European General Data Protection Regulation (EU DSGVO), the German Federal Data Protection Act (BDSG) and all other relevant provisions of German labor law (e.g. AGG, BetrVG, SGB, etc.).

The primary purpose of processing your personal data as part of the application process is to carry out the application procedure, in particular to determine the extent to which you are suitable for the advertised position. The processing of your applicant data is necessary for the decision on the establishment of an employment relationship. The primary legal basis for this is Art. 88 DSGVO in conjunction with § 26 (1) BDSG.

 

10.1 Data transfer for internal and external applicants:

Within our company, only those persons and bodies will receive your personal data that need it to make a decision about your employment and to fulfill our legal and contractual obligations.  Outside our company, we only disclose your personal data to bodies that process this data as processors (applicant management).

Deviating from this, we only transfer your personal data - e.g. to investigating authorities - if we are legally obliged to do so.

 

10.2 Storage period for internal and external applicants:

Personal applicant data transmitted to us will be deleted as soon as it is no longer required for the above-mentioned purposes; after 6 months at the latest. This does not apply if you have expressly consented to a longer storage period, if storage is necessary for evidence purposes or if statutory regulations prevent deletion. For example, we will retain your applicant data for as long as there is a possibility that you may assert legal claims against us, e.g. due to a breach of the provisions of the AGG.

However, if your application leads to the establishment of an employment contract with you, your data will continue to be stored and used for the purposes of the usual administrative and organizational processes and for the implementation of the employment relationship in compliance with the applicable legal regulations.

 

10.3 Your rights:

Applicants and employees - like all other data subjects - are of course entitled to the rights of data subjects in accordance with Art. 15 to 22 DSGVO when their personal data is processed by companies (see Chapter 9 of the Privacy Policy).

You have the right to lodge a complaint with the above-mentioned controller or a data protection supervisory authority (see Section 2 of the Privacy Policy).

 

11. Additional information on the collection and storage of personal data when visiting our websites:

When you visit our websites, the browser used on your device automatically sends information to the server of our website and our customer portal. This information is temporarily stored in a log file. The following information is collected without any action on your part and stored until it is automatically deleted

- IP address of the requesting computer,

- Host name of the requesting computer,

- Date and time of access,

- Website from which the access was made (referrer URL),

- browser used and the browser version and operating system of your computer

 

We process the aforementioned data for the following purposes:

- Ensuring a smooth connection to the website,

- Ensuring a comfortable use of our website,

- evaluation of system security and stability and

- for other administrative purposes.

The legal basis for data processing is Art.  (1) f DSGVO, Art. 6 (1) e DSGVO. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

 

11.1 Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Cookies are small text files that are stored on your hard disk assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). Cookies cannot execute programs or transmit viruses to your computer. They are used to make the website more user-friendly and effective overall.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specified period of time. If you visit our site again to use our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These cookies enable us to automatically recognize that you have already visited our website when you visit it again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is required for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) f DSGVO.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.

Our website uses cookies to the following extent:

- Transient cookies (temporary use)

- Persistent cookies (temporary use)

Transient cookies are automatically deleted as soon as you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to the website.

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings.

You can configure your browser settings according to your wishes and, for example, refuse to accept cookies. However, we would like to point out that you may then not be able to use all the functions of this website.

This stored information is stored separately from any other data transmitted to us. In particular, the cookie data is not linked to your other data (e.g. in the case of contact requests or online applications).

Consent with the help of Usercentrics

Our website uses the consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, website usercentrics.com/de/ (hereinafter referred to as “Usercentrics”).

When you visit our website, the following personal data is transferred to Usercentrics:

- Your consent(s) or the withdrawal of your consent(s)

- your IP address

- Information about your browser

- Information about your end device

- Time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consents you have given or revoke them. The data collected in this way is stored until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected. Usercentrics is used to obtain the consent required under data protection law for the use of certain technologies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO.

 

11.2 Analysis tools / tracking tools

Google Analytics

We use Google Analytics on our website, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), provided that you give us your consent in accordance with Art. 49 para. 1 lit. a DSGVO. Cookies are used in this context. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there.

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet. Pseudonymous user profiles can be created from the processed data.

We only use Google Analytics with activated IP anonymization. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and from processing this data by Google by refusing to give their consent or by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout.

Further information on the use of data by Google, setting and objection options, can be found in Google's privacy policy (https://policies.google.com/privacy) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

Users' personal data is deleted or anonymized after 14 months.

We have concluded a contract with Google for order processing within the meaning of Art. 28 DSGVO. The appropriate level of data protection is guaranteed by the EU-U.S. Data Privacy Framework. Further information can be found in Google's privacy policy: https://policies.google.com/privacy.

Google Tag Manager

We use Google Tag Manager on our website, a tag management system for the integration of tracking or statistical tools from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), provided that you give us your consent in accordance with Art. 49 para. 1 lit. a DSGVO. The Google Tag Manager itself does not create any user profiles, does not store any cookies to our knowledge and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. According to its own information, Google Tag Manager does not collect any IP addresses or other personal data (https://support.google.com/tagmanager/answer/9323295?hl=de).

We have concluded a contract with Google for order processing within the meaning of Art. 28 DSGVO. The appropriate level of data protection is guaranteed by the EU-U.S. Data Privacy Framework. Further information can be found in Google's privacy policy: https://policies.google.com/privacy

Web fonts from Fonts.com and Font Awesome

On the basis of our legitimate interests (i.e. interest in the uniform and appealing presentation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO), we use fonts from Fonts.com.  which are provided by Monotype GmbH. If your browser does not support web fonts, a standard font will be used by your computer. Further information on these web fonts can be found at www.fonts.com/info/legal and in Fonts.com's privacy policy: www.fonts.com/info/legal/privacy/ and in the privacy policy of www.monotype.com/legal/privacy-policy/.

Google Maps

We use Google Maps, a map service of Google LLC (“Google”), provided that you give us your consent in accordance with Art. 49 para. 1 lit. a DSGVO. To use the functions of Google Maps, it is necessary to save your IP address. This information about the use of the online offer by users is usually transmitted to a Google server in the USA and stored there. If Google Maps is activated, Google may also use Google Web Fonts for the purpose of uniform display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

We have concluded a contract with Google for order processing within the meaning of Art. 28 DSGVO. The appropriate level of data protection is guaranteed by the EU-U.S. Data Privacy Framework. Further information can be found in Google's privacy policy: https://policies.google.com/privacy

Google reCAPTCHA

We use Google reCAPTCHA on our website, an automated test from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), to distinguish people from machines based on different interaction patterns and associated parameters. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website, provided you have consented to the use of reCAPTCHA. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not informed separately or repeatedly that an analysis is taking place.

We have concluded a contract with Google for order processing within the meaning of Art. 28 GDPR. The appropriate level of data protection is guaranteed by the EU-U.S. Data Privacy Framework. Further information can be found in Google's privacy policy: https://policies.google.com/privacy

Comfort functions

We use technologies such as JavaScript and CSS (cascading style sheets) to optimize the presentation of our website (e.g. adaptation to different screen sizes, fade-in menu).

You can disable the use of these technologies by making the appropriate settings in your browser. In this case, you may no longer be able to use parts of our website.

 

12. Online presence on social media sites

We maintain online presences within social networks and platforms such as Xing, LinkedIn, Facebook and YouTube in order to communicate with the customers, interested parties and users active there and to inform them about our services and generally on the subject of data protection. With regard to the operation of these online presences, we are jointly responsible with the aforementioned providers.

Please note that LinkedIn, Facebook, Instagram and YouTube in particular may process user data outside the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce users' rights.

Furthermore, user data is generally processed by the platforms for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computer, in which the user's usage behavior and interests are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them). We do not receive any access to the actual usage data. We only use general usage statistics to check the effectiveness of usage.

The processing of users' personal data is based on our legitimate interests in effective user information and communication with users in accordance with Art. 6(1) f. DSGVO. If users are asked by the respective providers for consent to terms and conditions for which data processing is required, the legal basis for processing is Art. 6 (1) b., Art. 7 DSGVO.

For a detailed description of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information from the providers.

In the case of requests for information and the assertion of user rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

- Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) - Privacy Policy: privacy.xing.com/de/datenschutzerklaerung

- LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) - Privacy Policy: de.linkedin.com/legal/privacy-policy

- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - Privacy Policy: www.facebook.com/about/privacy

- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) - Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de

 

13. Newsletter

You will only receive our newsletter if you give us your consent in accordance with Art. 49 para. 1 lit. a DSGVO, i.e. if you agree to receive our newsletter. We use the service provider Mailchimp of Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, to send the newsletter.

Mailchimp is a service with which, among other things, the sending of newsletters can be organized and analyzed. If you enter your data for the purpose of receiving our newsletter (usually your e-mail address), it will be stored on Mailchimp's servers in the USA. With the help of Mailchimp, we can analyze our newsletter campaigns. When you open an email sent with Mailchimp, a file contained in the email (known as a web beacon) connects to Mailchimp's servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.

If you do not agree with this analysis by Mailchimp, you can withdraw your consent at any time and unsubscribe from our newsletter. We provide you with a corresponding link for this purpose in every newsletter. The legality of data processing operations that have already taken place remains unaffected by the revocation. The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until we receive your revocation and you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

 

14. Cloud services

We use software services that are accessible via the internet and run on the servers of their providers (so-called “cloud services”, also referred to as “software as a service”), e.g. “Microsoft Teams” for the following purposes: exchanging documents, content and information with specific recipients or for authenticated and 2-factor-secured login of users as well as chats and participation in audio and video conferences.

In this context, personal data may be processed and stored on the servers of the providers, insofar as these are part of communication processes with us or are otherwise processed by us as set out in this privacy policy. This data may include, in particular, master data and contact data of users, data on transactions, contracts, other processes and their content. Cloud service providers also process usage data and metadata that they use for security purposes and to optimize their services.

If we use cloud services to provide forms or other documents and content to other users or publicly accessible websites, the providers may store cookies on users' devices for the purposes of web analysis or to remember user settings (e.g. in the case of media control).

Notes on legal bases: If we ask for consent to the use of cloud services, the legal basis for processing is consent. Furthermore, their use may be part of our (pre-)contractual services, provided that the use of cloud services has been agreed in this context. Otherwise, user data is processed on the basis of our legitimate interests (i.e. interest in efficient and secure administration and collaboration processes).

Processed data types: Inventory data (e.g. names, addresses), Contact data (e.g. email, telephone numbers), Content data (e.g. text input, photographs, videos), Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses).

Affected persons: Customers, employees (e.g. employees, applicants, former employees), interested parties, communication partners.

Purposes of processing: Office and organizational procedures.

Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a DSGVO), Performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. DSGVO), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. DSGVO), Consent pursuant to Art. 49 para. 1 lit. a GDPR for transfer to servers in the USA.

Services and service providers used:

Microsoft cloud services: Cloud storage services; Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA; Website: microsoft.com/en-en; Security information: www.microsoft.com/de-de/trustcenter. We have concluded a contract with Microsoft for order processing within the meaning of Art. 28 DSGVO. The appropriate level of data protection is guaranteed by the EU-U.S. Data Privacy Framework.

 

15. Rights of use of imprint data

We expressly object to the use of our contact data published in the context of the imprint obligation by third parties for sending unsolicited advertising and information material.

We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

 

16. Creation

This declaration has been created in cooperation with

Dapro Serv GmbH Phone: +49 (0) 241-55967796 

Auf der Hüls 128 E-Mail: info@daproserv.com52068 Aachen Web: www.daproserv.com