Thank you for visiting our website and your interest in our company. We believe data protection to be a customer-oriented quality criterion. The protection of your personal data and the protection of your right to privacy are important concerns to us.
In this Data Privacy Policy, we would like to inform all visitors to our website transparently about the kind, scope and purpose of the personal data we gather, use and process, and inform you about your rights.
Our website can generally be used without providing any personal data. However, if you should use our company’s services via our website, it may become necessary to process your personal data.
The personal data automatically gathered when you visit our website or the personal data that you enter when you use services are processed in compliance with the respectively current legal regulations for the protection of personal data.
If the processing of personal data is required and if there is no legal basis for such a processing, we will always request the consent from the data subject for the required purpose of the processing.
As the entity controlling the processing, we have defined technical and organizational measures to ensure the highest possible protection level for your personal data.
For security reasons and for the security of the transmission of confidential contents such as orders or inquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can tell that a connection is encrypted by the browser address bar changing from “http://” to “https://” and by the padlock symbol shown in your browser address bar.
If SSL or TSL encryption is activated, the data that you send us cannot be read by third parties.
However, we point out that there can be security gaps in the data transmission via the internet (e.g., in communication by email). There is no perfect protection of data against access by third parties.
If you would like to use our company’s services and not use the data transmission path via the World Wide Web, there is the option of contacting us by telephone.
1. Contact Details of the Data Controller
The controller as defined by the EU General Data Protection Regulation (GDPR) is:
Aliseo GmbH
Leutkirchstraße 63
77723 Gengenbach
Telefon: +49 (0) 7803 60279 0
E-Mail: datenschutz@aliseo.de
The appointed Data Protection Officer is:
Mr. Stephan Hartinger
Coseco GmbH
Telefon: +49 (0) 8232 80988 70
E-Mail: datenschutz@coseco.de
2. Gathering of General Access Information
This website is hosted by an external service provider (Hosting Provider). The personal data gathered on this website are saved on the servers of the Hosting Provider.
Our Hosting Provider processes your data only to the extent that this is required for the fulfillment of its performance obligations and only in accordance with our instructions regarding these data.
We use the following Hosting Provider:
Company: IONOS SE
Street: Elgendorfer Str. 57
Zip/City: 56410 Montabaur
Phone: +49 (0) 721 170 5522
Email: info@ionos.de
On each retrieval of our website, server log file information that is transmitted to us from your browser will be gathered automatically. These data are:
- IP address (Internet Protocol address) of the accessing computer,
- website from which you have been directed to us (referrer),
- web page of our site that you are visiting,
- data and duration of the visit,
- browser type and browser settings,
- operating system.
It is ensured that these data cannot be attributed to an identifiable person. We use these technical access data solely for the following purposes:
- ensuring that the connection to the website can be established without problems;
- ensuring a user-friendly use of our website;
- analysis of system security and stability; and
- further administrative purposes.
These data are stored by us for at most seven days as a technical precaution to protect the data processing systems against unauthorized accesses.
3. Gathering and Transfer of Personal Data
We use your personal data exclusively for the purposes listed on this data privacy page.
Our website offers the following input masks for the gathering of personal data:
3.1 Transmission of Job Application Documents
In the course of your job application (online application or by email), we gather and process various personal data from your application.
These include, in particular, your
- contact details (name, address, phone number, and email address);
- application documents (application cover letter, resumé, certificates or other proof of education and qualifications);
- application photo.
In the course of processing the application at our company, we cooperate with the job application platform of the service provider Workwise GmbH, legal notice https://www.workwise.io/impressum. Personnel recruitment on commission by job seekers or employers is not commissioned data processing, but a utilization of a specialized external service provided by an independent data controller (Bavarian State Data Protection Supervisory Office, FAQ list dated 07/20/2018). You can get more information about data privacy from the service provider Workwise GmbH in its Data Privacy Policy at https://www.workwise.io/datenschutz.
The gathering and processing of your personal data from your application exclusively serves the designated purpose of staffing vacancies at our company. Your data will generally only be transferred to the company-internal offices and operational departments at our company, which are responsible for the concrete application process. Your personal data from your application will not be transferred to other companies without your prior explicit consent.
The data from your application will not be used or transferred to third parties for any other purposes beyond this.
Your personal data from your application will generally be deleted automatically three months after completion of the application process. This does not apply if statutory provisions are opposed to deletion, if the further storage is required for the purposes of maintaining evidence, or if you have expressly consented to a longer storage period, e.g., for future job postings.
If an employment contract is concluded with an applicant, the transmitted data will be stored, in observation of the legal regulations, for the purpose of processing the employment.
3.2 Contacting by Email or Request/Contact Form
We offer you the option on our website to contact us by email and/or via a request/contact form.
If you contact us by email or via the request/contact form, the personal data transmitted by you will be stored automatically.
The personal data that you transmit to us voluntarily will be stored for the purposes of processing your request or contacting the data subject. These personal data will not be transmitted to third parties.
4. Cookies
In a few areas, this website uses so-called cookies. If you would like to receive detailed information about the cookies that are used or if you wish to make changes to the cookie settings, you can use our cookie consent tool again here.
5. Use and Application of Tracking, Analysis Tools, and Other Plug-Ins
5.1 Google Analytics
We use the web analysis service of Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. For these purposes, Google uses this gathered information to analyze your use of the website, compile reports about website activities, and perform additional services for the website operator, which relate to the website and internet use. The following information, among others, can be gathered in the process: IP address, date and time when the page was retrieved, click path, information about the browser and the device you use, visited web pages, referrer URL (website from which you accessed our website), location data, purchase activities. Within the scope of Google Analytics, Google will not combine the IP address transmitted by your browser with other data from Google.
Google Analytics uses technologies such as cookies, session storages in the browser and trackers that enable an analysis of your use of the website. The information generated this way about your use of this website is usually transmitted to and saved on a server of Google in the USA. The USA is subject of the Trans-Atlantic Data Privacy Framework (TADPF) which is applicable as adequacy decision of the EU Commission.
Google is certified according to the TADPF, whereby it undertakes to observe European data protection principles.
Both Google as well as U.S. state authorities have access to your data. Your data can be linked by Google with other data, such as your search history, your personal accounts, your usage data on other devices, and all other data that Google has available about you.
IP anonymization is activated on this website. This ensures that your IP address is truncated beforehand by Google within the Member States of the European Union or in other signatory states of the Treaty on the European Economic Zone. The complete IP address will only in exceptional cases be transmitted to a server of Google in the USA and be truncated there.
Your personal data is processed on the basis of Art. 6(1)(f) GDPR for our overriding legitimate interest in designing the website in a user-friendly and target-oriented way. You have the right to object to the processing of personal data relating to you at any time for reasons arising from your particular situation.
You can prevent the gathering of the data generated by Google Analytics that relates to your use of the website (incl. your IP address), which is to be transmitted to Google, as well as the processing of these data by Google by downloading and installing the browser plug-in that is available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
To prevent the data gathering and data storage by Google Analytics across all devices, you can set an opt-out cookie. Opt-out cookies prevent your data from being gathered in the future when you visit this website. You must set this opt-out cookie on all systems and devices you use for it to be fully effective. If you delete the opt-out cookie, requests will again be transmitted to Google. If you click here, the opt-out cookie will be set: Deactivate Google Analytics.
You can find more information at https://www.google.com/analytics/terms/de.html and/or at https://policies.google.com/technologies/cookies?hl=de.
5.2 Google Maps
We use Google Maps (API) of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
Google Maps is a web service to display interactive (geographic) maps for visualization of geographic data. Our location will be displayed to you and you can get help with directions when you use this service.
As far as legally required, we have obtained your consent according to Art. 6(1)(a) GDPR for the processing of your data as described above.
You can revoke the consent you have given at any time with effect for the future.
If you have given your consent, information about your use of our website (e.g., your IP address) will be transmitted to Google’s servers, where it will be stored, as soon as you retrieve the sub-pages on which Google Maps is embedded; at the same time, the data can also be transmitted to the servers of Google LLC in the USA. This takes place regardless of whether Google provides a user account that you are logged in to or whether you have a Google user account.
If you are logged in to Google, your data will be attributed directly to your account. If you do not want the attribution to your Google profile, you have to log out before you activate the button. Google stores and analyzes your data in user profiles (even the data of users who are not logged in). The gathering, storage and analysis takes place in accordance with Art. 6 (1)(f) GDPR on the basis of Google’s legitimate interest in the display of personalized advertising, market research, and/or user-friendly design of Google websites. You have a right to object to the creation of these user profiles, but you have to contact Google to exercise this right. If you do not agree with the future transmission of your data to Google when using Google Maps, there is also the option to completely deactivate the web service of Google Maps by switching off the JavaScript application in your browser. Google Maps and consequently also the map display on this website can then not be used anymore.
You can find the Terms of Use for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html.
You can find detailed information about data privacy in the context of using Google Maps on Google’s website (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/.
5.3 Google APIs
We use the service Google APIs on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
By using the service, data can be transmitted to a third country (USA). The service provider is certified according to the EU U.S. Data Privacy Framework and therefore offers an appropriate level of data protection.
You can find more information in the data privacy information of the service provider at the following URL: https://policies.google.com/privacy.
5.4 Google Static
We use the service Google Static on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
By using the service, data can be transmitted to a third country (USA). The service provider is certified according to the EU U.S. Data Privacy Framework and therefore offers an appropriate level of data protection.
You can find more information in the data privacy information of the service provider at the following URL: https://policies.google.com/privacy.
5.5 ISSUU
We use the service “Issuu” on our website. The provider is Issuu, Inc., 131 Lytton Ave, Palo Alto, CA, 94301, USA (hereinafter referred to as “Issuu”).
Issuu uses cookies, meaning small text files that are stored on your end device and which enable an analysis of your use of our website. In the process, Issuu gathers and stores personal data such as your IP address, date, time, and duration of the use. The transmission takes place if you have JavaScript activated in your browser. You can prevent the installation of cookies by deleting existing cookies and deactivating the storing of cookies in the settings of your web browser. Please note that you might then not be able to use all features of our website to the fullest extent. It is also possible to prevent the storing of cookies by adjusting the settings of your web browser so that cookies from the service provider’s domain will be blocked.
We use Issuu for the purpose of access to our publications as e-paper. By using JavaScript, which can be deactivated at any time in your browser settings, you consent to your data being gathered and transmitted to Issuu. Our legitimate interest is furthermore the provision of appealing online offers. The legal basis is Art. 6(1)(a) GDPR (consent).
As far as personal data might be transmitted to a third country for which no adequacy decision has been issued by the EU Commission, we have concluded a contract with Issuu that integrates EU standard contract clauses as defined by Art. 46(2)(c) GDPR in order to ensure an appropriate level of data protection for the processing of personal data in the third country.
You can find more information about the use of data by Issuu, options for settings and objection, and about data protection at the following Issuu website: https://issuu.com/legal/privacy.
5.6 Quantcast
We use the services of the company Quantcast Corp., 795 Folsom Street, CA 94107 San Francisco, United States of America, website: https://www.quantcast.com/.
An appropriate level of data protection is ensured in each case by an adequacy decision of the EU Commission, which, for the USA, is accessible here. The commissioned service providers from the USA are usually certified under the EU-U.S. Data Privacy Framework (DPF). You can find more information here. If contracted service providers are not certified under the DPF, standard contract clauses have been agreed as suitable guarantee.
The legal basis for the transmission of personal data is your consent according to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you have given on our website.
Quantcount
The service gathers information on our website about your user behavior and processes the data in a technical analysis of user behavior.
You can revoke your consent at any time. You can find more information about the revocation of your consent either directly when you give the consent or at the end of this Data Privacy Policy.
You can find more information about the handling of the transmitted data in the service provider’s data privacy policy at https://www.quantcast.com/privacy/.
The service provider additionally offers an opt-out option at https://www.quantcast.com/opt-out/.
Quantserve
This service is an analysis tool by means of which we can monitor the browsing patterns on our website.
You can revoke your consent at any time. You can find more information about the revocation of your consent either directly when you give the consent or at the end of this Data Privacy Policy.
You can find more information about the handling of the transmitted data in the service provider’s data privacy policy at https://www.quantcast.com/privacy/.
The service provider additionally offers an opt-out option at https://www.quantcast.com/opt-out/.
5.7 Sentry
On some sub-pages, we use the error analysis service “Sentry” of the company Functional Software Inc. dba Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA.
Sentry is used for the technical monitoring of the stability of our website and for identifying program errors on our website. In the process, data are transmitted to the service provider and they are normally stored there, e.g., your IP address, product and version information about the browser and operating system used (so-called user agent), the website from which you accessed our website (so-called referrer), the date and time of the retrieval, and in some cases, your internet service provider, and data regarding the time when the error occurred.
The legal basis for the processing of your personal data is your consent according to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, which you have given on our website. You can revoke your consent at any time.
You can find more information about the data use by Sentry in the service provider’s data privacy policy: https://sentry.io/privacy/.
6. Use and Application of Social Plug-Ins
6.1 Facebook
We use the social media channel Facebook. It is a service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
We have placed the Facebook icon on our website. There is no automatic transmission of personal data to Facebook in the course of the visit to our website. The icon merely serves as a link to Facebook.
We use the statistics service Facebook Insights for the needs-appropriate design and continuous optimization of our Facebook fan page. This service records your activity on our website and provides us with anonymized statistics. This way, we get insights about:
- reach of contributions,
- retrievals/average duration of video playbacks,
- age groups,
- gender statistics,
- shared content,
- origin of the users,
- general page activity,
- language default settings.
However, individual users cannot be identified by us nor can we access individual user profiles by means of this statistics service.
You can find more information about Facebook Insights here: https://www.facebook.com/business/pages/manage#page_insights.
If you contact us via Facebook or share or comment on our contributions, we get additional data from you, such as your name linked to the Facebook account, and the date and time of your contribution or contact request. Further datasets or information made available by you depend on the content of the comments or the purpose of your contact request.
It is also possible that we store data if you participate in our sweepstakes. The user names of sweepstakes winners will be publicized by us and asked to contact us via a direct message within a period of 48 hours. The winners must send us their real names and address, so that the prizes can be sent to them. These data are processed by us exclusively for processing the sweepstakes.
We and Facebook are joint data controllers for the processing of personal data via the “Insights” service, but Facebook has assumed the primary responsibility for data controlling in this regard. Facebook makes the essential content of the processing of personal data in the Facebook Insights service available to the data subjects.
The agreement in force between Meta Platforms Ireland Limited and us contains more information about the joint data controlling (Joint Controller Addendum).
For the further development and optimization of our pages, Facebook provides anonymized usage statistics.
The legal basis for the processing of personal data by providing the media offer is Art. 6(1)(f) GDPR. Our interest is that you notice us via Facebook and are informed about current events and news. If you are asked in certain cases by us or Facebook to consent to the data processing, the legal basis for the processing is Art. 6(1)(a) GDPR. The legal basis for the participation in sweepstakes is Art. 6(1)(b) GDPR.
During your visit to our Facebook pages, Facebook stores certain data such as your IP address and additional information that Facebook can attribute to your device by means of cookies. You can find more details about the processing of personal data by means of cookies in the Facebook Cookie Policy at the following link: www.facebook.com/about/privacy/update.
These data are used, among other, to allow Facebook to provide us with statistical information about the reach of our Facebook pages. We store your personal data only for as long as required for a given purpose. As you can contact us via Facebook, the storage duration essentially depends on the reason why you contact us. We will delete your data for the processing or analysis of sweepstakes at the latest 14 days after the end of the sweepstakes, unless statutory retention periods prescribe otherwise.
We do not transfer datasets that we receive from you via Facebook to third parties. Facebook may, in some cases, also transmit data that have been processed in connection with the use of our Facebook pages to the USA or to other countries outside of the territory of the European Union. You can find information about the opt-out options and data transmission in general at: https://www.facebook.com/settings?tab=ads.
The processing of information by means of the cookies used by Facebook can be prevented by prohibiting cookies from third-party providers or suchlike from Facebook in your browser settings. If you have consented to the data processing, you can revoke this at any time with effect for the future.
You can also prevent the processing of your personal data in that you neither click on the Facebook icon on our website nor visit our Facebook fan page via Facebook itself.
6.2 Youtube
We use the social media channel YouTube of the company YouTube LLC (“YouTube”), 901 Cherry Ave., San Bruno, CA 94066, USA, as a subsidiary of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We have placed the YouTube icon on our website. There is no automatic transmission of personal data to YouTube/Google in the course of a visit to our website. The icon merely serves as a link to YouTube.
When you visit our YouTube channel, YouTube, as a third party not associated with us, stores certain data according to its own data policies, including, for example, your IP address and additional information that can be attributed to you on your device via cookies. We have no control over the data processing. Exclusively Google, as the operator of YouTube, controls this data processing.
Please note that Google can receive further data via cookies that have been stored previously on your device. To what extent these are used by Google is outside of our control.
You can find more information about the purpose and scope of the data gathering and processing by YouTube in the data privacy policy. You can also find more information there about your rights and options for settings to protect your privacy: https://policies.google.com/privacy.
If you comment on our contributions or video clips via YouTube, we will receive additional data form you, such as the name of your YouTube account and the date and time of your contribution. The further datasets or the information previously provided by you depend on the content of your comment.
If we process personal data from you due to the technical provision of the YouTube service, this is done on the legal basis of Art. 6(1)(f) GDPR. Our interest is that you notice us via YouTube and are informed about current events and news. Moreover, we want to inform you about our work and draw your attention by providing our video clips. If you are asked in certain cases by us or YouTube to consent to the data processing, the legal basis for the processing is Art. 6(1)(a) GDPR. We do not transfer datasets that we have received from you via YouTube to third parties.
YouTube/Google also sometimes transmit data that have been processed in connection with the use of YouTube to the USA or other countries outside of the territory of the European Union. You can find more information about this at: https://policies.google.com/privacy?hl=de.
You can find information about privacy settings and the period for which data are stored by YouTube or Google at: https://privacy.google.com/take-control.html?categories_activeEl=sign-in.
You can find information about opt-out options at: https://adssettings.google.com/authenticated.
You can also prevent the data processing in that you neither click on the YouTube icon on our website nor visit our channel on YouTube.
6.3 Instagram
We use the social media channel Instagram of the service provider Instagram, which is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
We have placed the icon of the Instagram social network on our website. There is no automatic transfer of personal data to Instagram in the course of a visit to our website. The icon merely serves as a link to Instagram.
The datasets are stored and processed according to Instagram’s Data Privacy Policy. You can find information about this in Instagram’s Data Privacy Policy at https://instagram.com/about/legal/privacy and in its Cookie Policy at https://help.instagram.com/1896641480634370.
To design our Instagram channel as appropriate to need and to optimize it, we use the statistics service Instagram Insights. This service records your activity on our website and provides us with anonymized statistics.
It provides us with insights, for example, about:
- interactions of our page visitors,
- retrievals of our page,
- reach of contributions,
- information about our subscribers’ activities,
- information regarding what countries and cities our visitors come from,
- statistics about the genders of our visitors.
The created visitor statistics are transmitted to us exclusively in an anonymized form.
The user names of sweepstakes winners will be publicized by us and asked to contact us via a direct message within a period of 48 hours. The winners must send us their real names and address, so that the prizes can be sent to them. These data are processed by us exclusively for processing the sweepstakes.
If you comment on our contributions or video clips via Instagram, we will receive additional data from you such as your Instagram account name and the date and time of your contribution.
The further datasets or the information previously provided by you depend on the content of your comment.
As far as personal data are processed in the data processing by means of Instagram Insights, this is done on the basis of Art. 6(1)(f) GDPR. Our interest is the optimization as appropriate to needs and the continuous improvement of our media offer. If we want to repost pictures of users on the Instagram channel, we will first ask for your consent according to Art. 6(1)(f) GDPR. The consent declaration will be stored by us as a screenshot and the picture as a file with name reference to the user.
The pictures and consent declaration will be stored until you revoke your consent. The datasets for sweepstakes will be deleted as soon as the purpose of storage no longer applies, which is, outside of accounting retention periods, when the sweepstakes are over.
We do not transfer any data that we have received from you via Instagram to third parties. Regarding the data transfer by Instagram, we refer to the links to the Data Protection Regulation that are referred to in Section 5.1.
You can revoke the consent to data processing, which takes place on the basis of consent, at any time. In the event of a revocation, the picture and reference to the user will be deleted immediately. You can find information about opt-out options at: https://www.facebook.com/settings?tab=ads.
You can prevent the processing of information by means of the cookies used by Instagram by prohibiting cookies of third-party providers or those from Facebook in your own browser settings.
You can also prevent the data processing in that you neither click on the Instagram icon on our website nor visit our Instagram channel.
6.4 LinkedIn
We use the social media channel LinkedIn of the company LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
We use LinkedIn to be able to communicate with you and other interested parties and to be able to inform you about our current job vacancies, among other things.
In the process, cookies are normally stored on your computer in which the usage behavior is saved. These user data are made available to us by LinkedIn in anonymized and aggregated form for analysis. In addition, we process only the datasets that you make available to us via LinkedIn.
The legal basis for our processing of personal data in the context of the provision of the LinkedIn service is Art. 6(1)(f) GDPR. If you make datasets available beyond this via LinkedIn, the legal basis is your consent according to Art. 6(1)(a) GDPR.
We will delete your data that you have provided to us via LinkedIn as soon as the purpose no longer applies. As contacting us via LinkedIn can have different purposes, the storage duration essentially depends on the reason why you contact us. Please see LinkedIn’s Data Privacy Policy for the time when your data will be deleted as LinkedIn is the controller of these data.
You can find the Data Privacy Policy here: https://www.linkedin.com/legal/privacy-policy.
We do not transfer any data that we have received from you via LinkedIn to third parties. If LinkedIn transfers datasets, this is stated in LinkedIn’s Data Privacy Policy.
You can revoke the consent to data processing, which takes place on the basis of consent, at any time. Regarding the enforcement of rights (e.g., rights of data subjects), we inform that these rights should ideally be claimed against LinkedIn. LinkedIn has access to the users’ data and can take corresponding measures and provide information directly. You can find information about opt-out options here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
6.5 XING
We use the social media channel XING of the company New Work SE, Dammtorstraße 30, 20354 Hamburg.
We use XING to be able to communicate with you and further interested parties, and to be able to inform you about our current job vacancies, among other things. In the process, cookies are normally stored on your computer in which the usage behavior is saved. These user data are made available to us by XING in anonymized and aggregated form for analysis.
In addition, we process only the datasets that you make available to us via XING.
The legal basis for our processing of personal data in the context of the provision of the XING service is Art. 6(1)(f) GDPR.
Our interest is to inform you about current job vacancies. It is also possible that we want to inform you on XING about current events.
Our interest lies in the feedback you have given so that we have the opportunity to make specific improvements as an employer or, instead, respond to your rating in the form of a counter statement.
If you make datasets available beyond this via XING, the legal basis is your consent according to Art. 6(1)(a) GDPR.
We will delete you data that you have provided to us via XING as soon as the purpose no longer applies. As contacting us via XING can have different purposes, the storage duration essentially depends on the reason why you contact us. Please see XING’s Data Privacy Policy for the time when your data will be deleted as XING is the controller of these data. You can find the Data Privacy Policy here: https://privacy.xing.com/de/datenschutzerklaerung.
We do not transfer any data that we have received from you via XING to third parties.
You can revoke the consent to data processing, which takes place on the basis of consent, at any time. Regarding the enforcement of rights (e.g., rights of data subjects), we inform that these rights should ideally be claimed against XING.
XING has access to the users’ data and can take corresponding measures and provide information directly.
You can also prevent the data processing in that you neither click on the Instagram icon on our website nor visit our XING channel.
7. Deletion, Blocking, and Storage Duration of Personal Data
We process and store your personal data only for the period that is required to achieve the respective purpose of the storing or for the period prescribed by the various legal regulations.
After the storage purpose no longer applies or after expiration of the retention period prescribed by law, the personal data will be routinely blocked from further processing or deleted in accordance with the legal regulations.
8. Data Privacy Rights of Data Subjects
You can write to us at any time if you have questions about your personal data. Pursuant to the GDPR, you have the following rights:
- The right to obtain confirmation (sub-point of Art. 15 GDPR)
- The right to rectification (Art. 16 GDPR)
- The right to erasure (Art. 17 GDPR)
- The right to restrict the processing (Art. 18 GDPR)
- The right of data portability (Art. 20 GDPR)
- The right to object (Art. 21 GDPR)
- Right to lodge a complaint with the data protection supervisory authority (Art. 77 GDPR in conjunction with Sec. 19 BDSG)
- Right to revoke consent under data protection regulations (Art. 7(3) GDPR)
9. Legal Basis for the Processing
For the processing of personal data for which we obtain consent from the data subject, Art. 6(1)(a) GDPR serves as the legal basis.
For the processing of personal data that is required for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis.
This regulation also covers processing that is required for the execution of pre-contractual measures.
Where processing of personal data is required for the fulfillment of a legal obligation that applies to our company, Art. 6(1)(c) GDPR serves as the legal basis.
If the processing has the purpose of protecting a legitimate interest of our company or of a third party and if the interests, civil rights and fundamental freedoms of the data subject do not override the interest mentioned first, Art. 6(1)(f) GDPR serves as the legal basis for the processing.
Our company’s legitimate interest is the performance of our business activity and the analysis and optimization of our online offer, as well as maintaining its security.
10. Transfer of Data to Third Parties
We never sell or lend any user data on principle. A transfer to third parties beyond the scope described in this Data Privacy Policy will occur only if this is necessary for the implementation of the respectively requested service.
We transfer data only if there is a legal obligation to do so. This is the case when public institutions (e.g., law enforcement authorities) request information in writing or if a court order is presented.
No transfer of personal data to so-called third states outside of the EU/EEA territory takes place.
11. Legal or Contractual Terms on the Provision of Personal Data and Possible Consequences of Withheld Provision
We hereby inform you that, in certain cases, the provision of personal data may be prescribed by law (e.g., tax regulations) or can result from contractual terms (e.g., information about the contractual partner). For example, it may be required for the closing of a contract that the data subject/contract partner has to provide their personal data so that their concern (e.g., order) can be processed by us in the first place. An obligation to provide personal data results foremost from contract closings. If no personal data are provided in that case, the contract with the data subject cannot be concluded. Before the data subject provides personal data, the data subject can contact our Data Protection Officer or the controller of the data processing. The Data Protection Officer or the controller of the processing will then inform the data subject on whether the provision of the needed personal data is prescribed by law or required for the closing of the contract, and whether an obligation to provide the personal data arises from the data subject’s concern, and what the consequences of not providing the requested data will have on the data subject, respectively.
12. Existence of Automated Decision-Making
We, as a responsible company, forego automated decision-making or profiling in our business relationships.
13. Additional Information
You also have the possibility to view our Transparent Information besides this web-specific Data Privacy Policy.