Welcome to our website. Below we inform you according to Art. 13 GDPR about the processing of your personal data.
Welcome to our website. Below we inform you according to Art. 13 GDPR about the processing of your personal data.
Responsible Party
The entity named in the imprint is responsible for the data processing described below.
Usage Data
When you visit our websites, usage data is temporarily evaluated on our web server for statistical purposes as a log in order to improve the quality of our websites. This data set consists of
The legal basis for processing usage data is Article 6(1)(1)(f) GDPR. The processing is carried out in our legitimate interest to provide the website content and to ensure device and browser-optimized display.
Storage of IP Address for Security Purposes
Furthermore, we store the complete IP address transmitted by your web browser strictly for the purpose and for a period of 7 days, in the interest of being able to detect, limit and eliminate attacks on our websites. After this period has elapsed, we delete or anonymize the IP address. The legal basis is Article 6(1)(1)(f) GDPR.
Data Security
To protect your data as comprehensively as possible from unwanted access, we implement technical and organizational measures. We use an encryption procedure on our websites. Your information is transmitted from your computer to our server and vice versa via the Internet using TLS encryption. You can usually recognize this by the fact that the lock icon in the status bar of your browser is closed and the address bar begins with https://.
Required Cookies
We use cookies on our websites that are required for the use of our websites.
Cookies are small text files that can be stored and read on your device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.
We do not use these required cookies for analysis, tracking or advertising purposes.
Some of these cookies contain only information about certain settings and are not personally identifiable. They may also be necessary to enable user guidance, security and implementation of the site.
We use these cookies on the basis of our legitimate interest pursuant to Article 6(1)(1)(f) GDPR.
You can set your browser to notify you about the placement of cookies. You can also delete them at any time via the appropriate browser setting and prevent new cookies from being set. Please note that our websites may then not be displayed completely and some functions may no longer be available.
Consent Banner
On our websites we use a consent management platform (consent or cookie banner). The processing in connection with the use of the consent management platform as well as the logging of the settings you make is based on Article 6(1)(1)(f) GDPR, in our legitimate interest to provide our content according to your preferences and to be able to prove the consent(s) you have given. Your settings made, the consents given with them, and parts of your usage data are stored in a cookie. This way it is retained for subsequent page requests and your consents can continue to be traced. For further information, please see the section “required cookies”.
The provider of the consent management platform acts as a strictly instructed service provider (processor) for us. A data processing agreement pursuant to Article 28 GDPR has been concluded.
Pirsch Analytics
We use the web analytics service Pirsch Analytics by Emvi Software GmbH on our website for statistical evaluation of the use of our online offering as well as for demand-oriented optimization of our website. Pirsch Analytics works without the use of cookies. According to the provider’s information, no cookies are stored on your device.
Pirsch Analytics is anonymized and not relevant from a data protection perspective.
Contact and Registration Forms
You have the opportunity to contact us via our contact form or to register for an event. To use our forms, we first need the data marked as required fields.
We use this data on the basis of Article 6(1)(1)(f) GDPR to answer your request or to process your registration. Furthermore, you can decide for yourself whether you want to provide us with additional information. This information is voluntary and is not mandatory for contacting us or registering. We process your voluntary information on the basis of your consent pursuant to Article 6(1)(1)(a) GDPR.
Your data will only be processed to answer your request or for registration. We delete your data if it is no longer required and no legal retention obligations apply.
Insofar as your data transmitted via contact form is processed on the basis of Article 6(1)(1)(f) GDPR, you can object to the processing at any time. You can also revoke your consent to the processing of voluntary information at any time. Please contact the email address mentioned in the imprint for this purpose.
Microsoft Dynamics 365 Forms
We use Microsoft Dynamics 365 to provide forms on our website. When you fill out and submit a form, we process the data you enter to handle your request, for contact management, and if applicable, to carry out pre-contractual measures. The legal basis for this is Article 6(1)(1)(b) GDPR or Article 6(1)(1)(f) GDPR. Processing is carried out with Microsoft as a processor. For further information on data processing by Microsoft, please see the Microsoft Privacy Notice.
Application via Application Portal – softgarden embedded
You have the opportunity to apply for positions we have advertised or submit unsolicited applications via our application portal. In the course of the application process, we need the information marked as required fields in our application form. The legal basis for processing this data is Section 26(1)(1) BDSG, as the data is required to decide whether to establish an employment relationship. Data is not processed for any other purpose.
Furthermore, you can decide for yourself whether you want to provide us with additional information marked as non-mandatory in the application portal. Providing this data is voluntary and is not mandatory for your application. If you voluntarily provide us with personal data, we process this data on the basis of your revocable consent pursuant to Article 6(1)(1)(a) GDPR in conjunction with Section 26(2) BDSG. You can revoke your consent at any time with effect for the future. Please contact the entity named in the imprint for this purpose.
Your information will be treated confidentially by us. We use the strictly instructed service provider softgarden e-recruiting GmbH as a processor for applicant management, with whom an agreement pursuant to Article 28 GDPR has been concluded. Furthermore, your data will not be shared. If an employment contract is concluded following the application process, we store the data from your application that is required for the performance of your employment relationship. The legal basis for this processing is Section 26(1)(1) BDSG. In the event of an unsuccessful application, your documents will be deleted after 6 months. The legal basis for this processing is Article 6(1)(1)(f) GDPR. Processing until deletion is carried out in our legitimate interest to be able to defend ourselves against any claims relating to the application. We only process the personal data that you provide to us in the course of the application process.
Newsletter Registration and Distribution
You can subscribe to a newsletter on our websites. Please note that we need certain data for newsletter registration (at least your email address).
The newsletter is only sent if you have given us explicit consent. After successful registration, you will receive a confirmation email at the email address you provided (so-called double opt-in). You can revoke your consent at any time. You will receive an uncomplicated way to revoke, for example, via the unsubscribe link in every newsletter.
In the course of newsletter registration, in addition to the data already mentioned, we store further data if this is required so that we can prove that you have ordered our newsletter. This may include storing the complete IP address at the time of registration or confirmation of the newsletter, as well as a copy of the confirmation email we sent. The corresponding data processing is based on Article 6(1)(1)(f) GDPR and in our legitimate interest to be able to account for the legality of newsletter distribution.
For newsletter distribution, we use an external service provider based in Germany. We have a data processing agreement with this service provider pursuant to Article 28 GDPR.
Access-Protected Area
If you want to use our access-protected area, prior registration is required. We only collect the data required for registration. Processing is based on Article 6(1)(1)(b) GDPR or on the basis of Article 6(1)(f) GDPR in the interest of providing you with the services and information of the access-protected area.
If we collect additional data beyond this, it is marked as voluntary and is based on your consent pursuant to Article 6(1)(1)(a) GDPR.
If you wish to permanently log out of our access-protected area, please use the logout option we provide in the area.
Storage Duration
Unless we have already informed you of the storage duration in detail, we delete personal data when it is no longer required for the stated processing purposes and no legal retention obligations prevent deletion.
Additional Processors
We share your data with service providers as part of data processing pursuant to Article 28 GDPR who assist us in operating our websites and related processes. These include, for example, hosting service providers. Our service providers are strictly bound by our instructions and are contractually obligated accordingly.
Below we list the processors we work with, if we have not already done so in the preceding text of this privacy policy. If data is transferred outside the EU or EEA in this context, we provide information on an appropriate level of data protection.
Your Rights as a Data Subject
When processing your personal data, the GDPR grants you as a data subject certain rights:
Right to Access (Article 15 GDPR)
You have the right to request confirmation of whether personal data concerning you is being processed; if this is the case, you have the right to access this personal data and the information detailed in Article 15 GDPR.
Right to Rectification (Article 16 GDPR)
You have the right to request the immediate rectification of inaccurate personal data concerning you and, if necessary, the completion of incomplete data.
Right to Erasure (Article 17 GDPR)
You have the right to request that personal data concerning you be deleted immediately, if one of the reasons detailed in Article 17 GDPR applies.
Right to Restrict Processing (Article 18 GDPR)
You have the right to request restriction of processing if one of the conditions set out in Article 18 GDPR is met, for example, if you have objected to processing, for the duration of the controller’s review.
Right to Data Portability (Article 20 GDPR)
In certain cases detailed in Article 20 GDPR, you have the right to receive personal data concerning you in a structured, commonly used and machine-readable format or to request transmission of this data to a third party.
Right to Withdraw (Article 7 GDPR)
If processing of data is based on your consent, you are entitled pursuant to Article 7(3) GDPR to revoke your consent to the use of your personal data at any time. Please note that withdrawal only applies to the future. Processing that occurred before the withdrawal is not affected.
Right to Object (Article 21 GDPR)
If data is collected on the basis of Article 6(1)(1)(f) GDPR (data processing for the purpose of legitimate interests) or on the basis of Article 6(1)(1)(e) GDPR (data processing for the purpose of public interest or exercise of official authority), you have the right to object to the processing at any time on grounds relating to your particular situation. We will no longer process the personal data unless there are demonstrably compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or processing serves the establishment, exercise or defense of legal claims.
Right to Lodge a Complaint with a Supervisory Authority (Article 77 GDPR)
Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. The right to lodge a complaint can be exercised in particular with a supervisory authority in the member state of your habitual residence, place of work, or place of the alleged infringement.
Exercising Your Rights
Unless otherwise described above, please contact the entity named in the imprint to exercise your rights as a data subject.
Data Protection Officer
Our Data Protection Officer is happy to provide you with information on data protection matters at the following contact details.
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Web: https://www.dsn-group.de/
E-Mail: office@datenschutz-nord.de
If you contact our Data Protection Officer, please also provide the responsible entity mentioned in the imprint.