Information:
__________
Thank you for visiting our website. In the privacy policy, we would like to inform you about the handling of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).
Controller
The controller for the data processing described below is named in the imprint.
Usage data
When you visit our websites, our web server temporarily evaluates so-called usage data for statistical purposes in order to improve the quality of our website. This data consists of the following data categories:
- The page from which the data is requested,
- the name of the data file
- the date and time of the query,
- the amount of data transferred,
- the access status (content transferred, content not found),
- the description of the used web browser and operating system,
- the referral link, which indicates from which page you reached ours,
- the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established.
The mentioned log data will be evaluated anonymously.
The legal basis for the processing of usage data is Art. 6 (1) (f) GDPR. The processing is based on the legitimate interest of providing the contents of the website and ensuring a device- and browser-optimised display.
Data security
In order to protect your data as comprehensively as possible from unwanted access, we implement technical and organisational measures. These measures include encryption procedures on our websites. Your data is transferred from your computer to our server and vice versa via the internet using TLS encryption. You can usually recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.
Necessary cookies
We use cookies on our websites, which are necessary for using our websites.
Cookies are small text files that can be stored on and extracted from your device. There is a difference between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored for more than the duration of the session.
We do not use these necessary cookies for analysis, tracking or advertising purposes.
In some cases, these cookies only contain information on certain settings and are not linked to a person. They may also be necessary to enable user guidance, security and operating of the site.
The legal basis for using these cookies is our legitimate interest according to Art. 6 (1) (f) GDPR.
You can set your browser to inform you about the use of cookies. You can also delete cookies or prevent the setting of new cookies at any time by using the appropriate browser settings. Please note that if you delete certain cookies, our websites may not be displayed correctly and some functions may no longer be available.
Name | Provider | Purpose | Storage period | Adequate level of data protection |
borlabs-cookie | Borlabs | Saving of the settings in the Consent Banner | 1 year | Data processing within the EU/EWR |
Consent banner
We use a consent management platform (consent or cookie banner) on our websites. The processing in connection with the use of the consent management platform and the logging of the settings you have made is based on our legitimate interest in accordance with Art. 6 (1) (f) GDPR to provide you with our content according to your preferences and to be able to prove your consent(s). The settings you have made, the consents you have given and parts of your usage data are stored in a cookie. This ensures that it is kept for further website visits and that your consents continue to be traceable. You can find more information about this under the section “Necessary cookies”.
The provider of the consent management platform acts on our behalf and is strictly bound by our instructions (processor). A data processing agreement in accordance with Art. 28 GDPR has been concluded.
Google Analytics
We use the web analysis tool “Google Analytics” to design our websites in accordance with the needs of our visitors. Google Analytics creates usage profiles based on pseudonyms. For this purpose, permanent cookies are stored on your device for a maximum of 2 years and accessed by us. This allows us to recognise returning visitors and count them as such.
We are supported by Google Ireland Limited as a processor in accordance with Art. 28 GDPR when using the Google Analytics service. Data processing by Google may also take place in the USA and thus outside the EU or the EEA. With regard to Google, an adequate level of data protection is guaranteed on the basis of the adequacy decision (EU-U.S. Data Privacy Framework). Google also undertakes to conclude standard contractual clauses with further sub-processors.
The data processing is based on your consent, provided you have given your consent via our banner. You can revoke your consent at any time. To do so, please click at the bottom setting icon and make the appropriate settings via our banner. There you will also receive further information about data processing.
Contact form
You may contact us via our contact form. In order to use our contact form, we first require the data marked as mandatory.
The legal basis for this processing is Art. 6 (1) (f) GDPR in order to respond to your request. In addition, you can decide for yourself whether you would like to provide us with further information. This information is provided voluntarily and is not mandatory for contacting us. We process the information you provide voluntarily on the basis of your consent.
Your data will only be processed to respond to your enquiry. We delete your data if it is no longer required and there are no legal retention obligations in conflict to that.
Concerning the processing according to Art. 6 (1) (f) GDPR, you have the right to object at any time. You can also withdraw your consent to the processing of the data you provided voluntarily at any time. To do so, please contact the e-mail address stated in the imprint.
Contacting us by e-mail, telephone or post
You also have the option of contacting us by e-mail, telephone or post. When you contact us, we use the personal data that you voluntarily provide in this context solely for the purpose of contacting you and processing your enquiry.
The legal basis for this data processing is Art. 6 (1) (a) and Art. 6 (1) (b) GDPR.
You can revoke your consent to the processing of your data at any time. To do so, please contact the e-mail address stated in the imprint.
Embedded videos
On our websites, we embed videos that are not stored on our servers. However, for reasons of data protection, no content from third-party providers is reloaded yet and the third-party provider will not receive any information, when you call up our web pages.
Only when you give your consent via our consent banner or by clicking on the preview image the content of the third-party provider will be reloaded. The third-party provider is therefore able to obtain the information that you have accessed our site as well as the usage data that is technically required in this context. Additionally, the third-party provider is able to implement tracking technologies. We have no influence on the further data processing by the third-party provider. Your consent includes that contents of the third party provider are reloaded.
The embedding is based on your consent, which can be revoke at any time, provided that you have given your consent via the preview image or the cookie banner. Please note that the embedding of some map services results in that your data will be processed outside the EU or EEA (in particular the USA). If the data is processed outside the EU or the EEA in this context, we provide information on the level of data protection in the following table.
Provider | Maximum storage period | Adequate level of data protection | Withdrawal of consent |
Vimeo | 2 years |
For transfers to the U.S., an adequate level of data protection is ensured due to the certification of the provider under the adequacy decision (EU-U.S. Data Privacy Framework). |
If you wish to withdraw your consent, please click at the bottom setting icon and make the appropriate setting via our banner. |
Google (YouTube) | 6 Monate | For transfers to the U.S., an adequate level of data protection is ensured due to the certification of the provider under the adequacy decision (EU-U.S. Data Privacy Framework). | If you wish to withdraw your consent, please click at the bottom setting icon and make the appropriate setting via our banner. |
Map services
On our websites, we embed map services that are not stored on our servers. For reasons of data protection, no content from third-party providers is reloaded yet and the third-party provider will not receive any information, when you call up our web pages.
Only when you give your consent via our consent banner the content of the third-party provider will be reloaded. The third-party provider is therefore able to obtain the information that you have accessed our site as well as the usage data that is technically required in this context. Additionally, the third-party provider is able to implement tracking technologies. We have no influence on the further data processing by the third-party provider. Your consent includes that contents of the third party provider are reloaded.
The embedding is based on your consent, provided you have given your consent via our consent banner. Please note that the embedding of some map services results in that your data will be processed outside the EU or EEA (in particular the USA). If the data is processed outside the EU or the EEA in this context, we provide information on the level of data protection in the table below.
Provider | Maximum storage period | Adequate level of data protection | Withdrawal of consent |
6 month | For transfers to the U.S., an adequate level of data protection is ensured due to the certification of the provider under the adequacy decision (EU-U.S. Data Privacy Framework). | If you wish to withdraw your consent, please click at the bottom setting icon and make the appropriate setting via our banner. | |
Open Street Map | 1-10 years, depending on the cookie set. | Processing operations within the EU/EEA or in the UK. For transfers to the UK, an adequate level of data protection is guaranteed on the basis of an adequacy decision of the EU Commission. | If you wish to withdraw your consent, please click at the bottom setting icon and make the appropriate setting via our banner. |
Social media plugins
We enable you to use social plugins. However, for reasons of data protection, we only integrate social media plugins in a deactivated form.
Yet you have the option of giving your consent for this data processing via our consent banner in order to activate and use the integrated social plugins on our websites. Only then your browser will be able to establish a connection to the servers of the respective social media service operator.
By activating a plugin via the corresponding setting in the consent banner, the social media service receives in particular your IP address and, among other things, knowledge about your visit to our websites (usage data). This occurs regardless of whether you have an account with the respective social media service. If you are logged in, the data can be directly assigned to your social media profile.
In general, we have no influence on whether and to what extent the respective social media service processes personal data after the activation of the social plugins. However, it is likely that the social media service will create usage profiles from your data and use those profiles on the purpose of personalised advertising. Also, your data will be used to inform other users of the social media service about your activities on our websites.
The embedding is based on your consent, provided you have given your consent via our consent banner. Please note that the embedding of many social plugins results in that your data will be processed outside the EU or EEA (in particular the USA). If the data is processed outside the EU or the EEA in this context, we provide information on the level of data protection in the table below.
Provider | Maximum storage period | Adequate level of data protection | Withdrawal of consent |
Meta (Facebook/
|
Duration of session | For transfers to the U.S., an adequate level of data protection is ensured due to the certification of the provider under the adequacy decision (EU-U.S. Data Privacy Framework). | If you wish to withdraw your consent, please click at the bottom setting icon and make the appropriate setting via our banner. |
X | Indefinitely until consent is withdrawn. |
For transfers to the U.S., an adequate level of data protection is ensured due to the certification of the provider under the adequacy decision (EU-U.S. Data Privacy Framework). |
If you wish to withdraw your consent, please click at the bottom setting icon and make the appropriate setting via our banner. |
.
For transfers to the U.S., an adequate level of data protection is ensured due to the certification of the provider under the adequacy decision (EU-U.S. Data Privacy Framework). |
If you wish to withdraw your consent, please click at the bottom setting icon and make the appropriate setting via our banner. |
Application via application portal
You are welcome to apply for the positions we are currently recruiting for application via our application portal.
For your registration in our application portal we need the following information:
- Your First and Last Name
- Your E-Mail address
The legal basis for the data processing is Art. 6 (1) (b) GDPR. In principle, we store this information for the duration of its use during the application process. Your registration data will be deleted after six months of inactivity of your profile or if your application is not successful.
As part of the application process, we require the information that is marked as mandatory in our application form. The legal basis for processing this data is § 26 (1) sentence 1 BDSG (German Federal Data Protection Act, „Bundesdatenschutzgesetz“), as the data is required for the decision on the establishment of an employment relationship. Data processing for other purposes does not take place.
In addition, you can decide whether to provide us with further information that is marked as voluntary in the application form. The provision of this data is not mandatory for the application. If you voluntarily provide us with personal data, we process this data on the basis of your consent in accordance with Art. 6 (1) (a) GDPR in conjunction with § 26 (2) BDSG. You can withdraw your consent at any time with effect for the future. To do so, please contact the controller for the data processing named in the imprint.
We will handle your data confidentially. We use the service provider Haufe-umantis AG as a strictly instruction-bound processor for the applicant management. We have concluded an agreement in accordance with Art. 28 GDPR with the processor. Beyond that, your data will not be shared. If an employment contract is concluded after the application process, we store the data from your application as it is required for your employment relationship. The legal basis for this processing is Section 26 (1) sentence 1 BDSG. If your application is not successful, your data will be deleted after 6 months. The processing until deletion takes place in our legitimate interest to be able to defend us against any claims and lawsuits relating to the application. We only process the personal data that you provide to us as part of the application process.
This does not apply if you explicitly consent to us storaging your data data for a longer period of time (talent pool). Based on your consent, your data will then be further processed for a period of 2 years to be able to consider your application for other or future vacancies. The legal basis for storing the application documents and contacting you in the event of a suitable vacancy is Art. 6 (1) (a) GDPR in conjunction with § 26 (2) BDSG. You can withdraw your consent at any time with effect for the future. To do so, please contact the controller for the data processing named in the imprint.
Storage period
Unless we have already informed you in detail about the storage period, we delete personal data when they are no longer required for the aforementioned processing purposes and no legitimate interests or other (legal) reasons for storage prevent deletion.
Your rights as a data subject
When processing your personal data, the GDPR grants you certain rights as a data subject:
Right of access (Art. 15 GDPR)
You have the right to obtain confirmation as to whether personal data of you is being processed; if this is the case, you have the right to obtain information about the processed personal data and to receive the information listed in detail in Art. 15 GDPR.
Right of rectification (Art. 16 GDPR)
You have the right to request the rectification of any inaccurate personal data relating to you and, where applicable, the completion of any incomplete data, without delay.
Right to erasure (Art. 17 GDPR)
You have the right to request the erasure of your personal data without delay, provided that one of the reasons listed in detail in Art. 17 GDPR applies.
Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of processing, for the duration of the assessment by the controller, if one of the requirements listed in Art. 18 GDPR is met, e.g. if you have objected to the processing,
Right to data portability (Art. 20 GDPR)
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive your personal data in a structured, commonly used and machine-readable format or to request the transfer of this data to a third party.
Right to withdraw consent (Art. 7 GDPR)
If the processing of data is based on your consent, you are entitled to withdraw your consent to the processing of your personal data at any time in accordance with Art. 7 (3) GDPR. Please note that the withdrawal of the consentonly effective for the future. Processing that took place before the withdrawal is not affected.
Right to object (Art. 21 GDPR)
If data is collected on the basis of Art. 6 (1) (f) GDPR (data processing for the protection of legitimate interests) or on the basis of Art. 6 (1) (e) GDPR (data processing for the protection of public interests or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations. The right to lodge a complaint can be asserted in particular witha supervisory authority in the Member State of your habitual residence, your place of work or the place of the suspected infringement.
Assertion of your rights
Unless otherwise described above, please contact the controller of the data processing named in the imprint to assert your rights as a data subject.
Contact details of the data protection officer
Our external data protection officer will be happy to provide you with information on the subject of data protection under the following contact details:
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Web: https://www.dsn-group.de/
E-mail: office@datenschutz-nord.de
If you contact our data protection officer, please also state the controller for the data processing named in the imprint.