Data protection

Welcome to the website of Palladio Recruitment GmbH. In the following data protection information you will learn what happens to your data, the so-called personal data, and above all why. We will also tell you how we protect your data, when the data will be deleted and what rights you have thanks to data protection.

First of all: We comply with data protection laws and the European General Data Protection Regulation and protect your privacy as best we can.

But we want to be completely open: The Internet thrives on data exchange and still has many security gaps. Even if your data is encrypted when you visit our website, there is always a residual risk when exchanging data with external websites. If you visit other websites – for example via a link on our website – please note that this data protection information does not apply to these external websites, but only to our website! Please also note that e-mails are generally an unencrypted and therefore fundamentally insecure communication medium. If you wish to exchange personal data with us, please agree the transmission method with us in advance.

We believe that information and knowledge about data protection help you to better assess possible dangers and risks. For this reason, we have prepared this data protection information and compiled all relevant information. It has been compiled to the best of our knowledge and belief and in accordance with the requirements of Article 13 of the EU GDPR. Because it is important to us that your trust is honored here.

It is important to us that you as a customer, supplier and business partner can be sure that we handle your data – whether personal or publicly accessible – responsibly and confidentially. We select employees, service providers and business partners with great care and expect everyone involved to handle data and business matters lawfully. These are our personal and business values.

We process data that is required to justify and fulfill the contractual services and point out the necessity of its disclosure. Disclosure to external parties only takes place if it is really necessary in the context of an order. When processing data provided to us as part of an order, we act in accordance with the instructions of the client and the legal requirements of order processing in accordance with Art. 28 GDPR and do not process the data for any purpose other than the purpose of the order.

We process personal data (hereinafter: data) of our customers, candidates, applicants, suppliers, employees and business partners exclusively in order to provide our services with the highest quality and reliability. Data is processed in both automated and non-automated form.

This usually involves the following data: Name and address/address as well as e-mail address, account details and telephone numbers (landline and mobile). In addition, special category data may also be processed as part of our services (application content and details). This is always done on the basis of necessity, lawfulness and purpose in accordance with Article 5 GDPR.

“Processing of data” includes, for example, the following operations: Collecting, recording, organizing, storing, using, transmitting, disseminating and deleting data (Article 4 No. 2 General Data Protection Regulation – GDPR).

Palladio Recruitment GmbH
Dreischeibenhaus 1
40211 Düsseldorf
Germany

Managing Director: Sofia Panagiotou
Phone: +49 211 88 250 230
E-mail: [email protected]

You can contact us at any time if you have any questions about your data protection rights or wish to assert any of the following rights:

• Right to withdraw consent pursuant to Art. 7 (3) GDPR (e.g. you can contact us if you wish to withdraw consent you have previously given for a newsletter)
• Right to information in accordance with Art. 15 GDPR (e.g. you can contact us if you would like to know what data we have stored about you)
• Correction in accordance with Art. 16 GDPR (e.g. you can contact us if your e-mail address has changed and we should replace the old e-mail address)
• Deletion in accordance with Art. 17 GDPR (e.g. you can contact us if you want us to delete certain data that we have stored about you)
• Restriction of processing in accordance with Art. 18 GDPR (e.g. you can contact us if you do not want us to delete your e-mail address, but only to use it to send absolutely necessary e-mails)
• Data portability in accordance with Art. 20 GDPR (e.g. you can contact us to receive your data stored by us in a compressed format, e.g. because you want to make the data available to another service provider)
• Objection to data collection in special cases and to direct advertising in accordance with Art. 21 GDPR (e.g. you can contact us if you do not agree with one of the advertising or analysis procedures specified here)
• Right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 para. 1, f. GDPR (e.g. you can also contact the data protection supervisory authority directly in the event of complaints)

Visitors and users of our online offer (hereinafter we also refer to the data subjects collectively as “users”).

Furthermore, interested parties, candidates, customers, suppliers, service providers and business partners as well as applicants and employees who work with us on a basis of trust.

• Provision of the online offer, its functions and contents
• Provision of our online stores, their functions and product ranges
• Processing of contractual and legal processes for commissioning and order execution as well as orders
• Answering contact inquiries and communicating with users, customers, suppliers and applicants, for example
• Security and protection measures for the website

In addition, personal data will only be processed within the scope of our business purpose, taking into account Article 6 GDPR and Article 9 GDPR para. 2 lit. h. This is always done under the aspect of necessity, lawfulness and adequacy for the purpose, in accordance with Article 5 GDPR.

Data will only be passed on to third parties if we are legally obliged to do so. Data is not transferred to third countries.

In accordance with Art. 13 GDPR, we inform the users of our website and our customers of the legal basis of our data processing. For users from the area of application of the General Data Protection Regulation (GDPR), i.e. the EU and the EEC, the following applies if the legal basis is not mentioned in the data protection declaration:

• • the legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR;
  • the legal basis for the processing for the fulfillment of our services and implementation of contractual measures as well as answering inquiries is Art. 6 para. 1 lit. b GDPR;
  • the legal basis for processing to fulfill our legal obligations is Art. 6 para. 1 lit. c GDPR;
  • In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
  • the legal basis for the processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller is Article 6(1)(e) GDPR.
  • the legal basis for processing to protect our legitimate interest is Art. 6 para. 1 lit. f GDPR.
  • the processing of data for purposes other than those for which they were collected is governed by the provisions of Art. 6 (4) GDPR.
  • the processing of special categories of data (in accordance with Art. 9 para. 1 GDPR) is determined in accordance with the provisions of Art. 9 para. 2 GDPR (e.g. in the context of personnel administration and application management).

Unless otherwise stated, we will delete your data as soon as it is no longer required or you request us to do so. Your data will also be blocked or deleted if a storage period prescribed by law expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

As part of our data protection information, we can provide users and visitors to our website with further information on the deletion and retention of data that applies specifically to the respective processing operations.

Certain data may have to be stored for longer for legal reasons. You can of course request information about the stored data and their retention periods at any time.

We regularly check whether it is necessary to retain the data; in the case of statutory retention obligations, the data will be deleted after their expiry (e.g. 6 years in accordance with Section 257 (1) HGB, 10 years in accordance with Section 147 (1) AO).

When you visit our website, SSL or TLS encryption is used to protect the transmission of incoming and outgoing requests. You can recognize an encrypted connection by the fact that the address line of the browser begins with “https://” and by the lock symbol in the browser line. If you simply wish to browse our website, no personal data will be collected, with the exception of the data that your browser transmits to enable you to visit the website, first and foremost:

• Name of the website accessed (e.g. the website that has just been accessed)
• Date and time of retrieval (e.g. 11:45 on 25.05.2018)
• Amount of data transferred (e.g. 2427 bytes)
• Notification of successful retrieval (e.g. information on whether there was an error when the page was accessed)
• Browser type and version (e.g. the Firefox 60.0.1 browser used)
• the user’s operating system (e.g. MacOS 10.13.4)
• Referrer URL (the previously visited page)
• IP address and the requesting provider (e.g. 95.91.215.example or 2a02:8109:9440:1198:bdb1:551f:example)
• Status codes (e.g. status code 200: request successfully processed)

The most interesting data for you as a visitor to our website is the IP address, as this is data that can theoretically be traced back to you as a person. As a protective measure in favor of your privacy, all data is therefore deleted from the website after your visit. The purpose of temporarily storing the data at the beginning is to ensure the connection, accessibility and correct display of our website. The IP address and the aforementioned technical data are required to display the website, prevent display problems for visitors and resolve error messages. The legal basis is our so-called legitimate interest pursuant to Art. 6 para. 1 lit. f. GDPR.

This website was created in the environment of and using WordPress. WordPress is software that allows you to create and manage a website via your browser. Many plug-ins are already installed and active in WordPress by default. The integration of social media or analysis plug-ins in particular often leads to a direct connection being established between the browser of the website visitor – i.e. you – and the servers of the social media or analysis platforms. As the website operator, we have only limited influence on this and, moreover, have neither knowledge nor control over the scope of the data collected and stored in this way.

We have provided as much information as possible about the tools and plug-ins used by us in the WordPress environment in this data protection information to the best of our knowledge and belief.

Further data protection information on WordPress can be found at: https://de.wordpress.org/about/privacy/

Cloudflare

We use the Content Delivery Network (CDN) of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich Germany (Cloudflare) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 para. 1 lit. f GDPR). A CDN is a network of [globally] distributed servers that is able to deliver optimized content to the website user. For this purpose, personal data may be processed in Cloudflare’s server log files.

Cloudflare is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR not to operate a content delivery network ourselves.

Your personal data will be stored by Cloudflare for as long as is necessary for the purposes described.

Further information can be found at: https://www.cloudflare.com/de-de/cloudflare-customer-dpa/

jsdelivr.com-CDN

So that we can deliver our individual websites to you quickly and flawlessly on all different devices, we use the open source services of jsdelivr.com from the Polish software company ProspectOne, Królewska 65A/1, 30-081, Kraków, Poland.

This is a content delivery network (CDN). This is a network of regionally distributed servers that are connected via the Internet. As a result, content, especially large files, can be delivered quickly and optimally, even at high load peaks.

jsDelivr is structured in such a way that JavaScript libraries can be downloaded that are hosted on npm and Github servers. However, WordPress plugins can also be loaded if they are hosted on WordPress.org. In order to provide this service, your browser can send personal data to jsdelivr.com. jsDelivr can therefore collect and store user data such as IP address, browser type, browser version, which website is loaded or the time and date of the page visit. The privacy policy of jsdelivr.com expressly states that the company does not use cookies or other tracking services.

If you have consented to the use of jsdelivr.com-CDN, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur when jsdelivr.com-CDN collects data.

We also have a legitimate interest in using jsdelivr.com-CDN to optimize our online service and make it more secure. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests).

Further information on data processing by the jsDelivr software service can be found in the company’s privacy policy at https://www.jsdelivr.com/privacy-policy-jsdelivr-net.

As part of our offer, you are given the opportunity to rate our products and services. By submitting your rating, you agree that the name, e-mail address and IP address currently assigned to your Internet connection will be stored by us in connection with your rating. The e-mail address and IP address will not be published or otherwise passed on. We would like to point out that all the information you provide, in particular your name, rating date and rating, can be viewed by any user of the site.

Comment function on this website

For the comment function on this page, in addition to your comment, information about the time the comment was created, your e-mail address and, if you are not posting anonymously, the user name you have chosen will be saved.

Storage duration of the comments

The comments and the associated data (e.g. IP address) are stored and remain on our website until the commented content has been completely deleted or the comments have to be deleted for legal reasons (e.g. offensive comments).

Storage of the IP address

Our comment function stores the IP addresses of users who post comments. As we do not check these on our site before activating them, we need this data in order to be able to take action against the author in the event of legal violations such as insults or propaganda.

SSL encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL encryption is activated, the data that you transmit, e.g. via the contact form or inquiry form, cannot be read by third parties.

Cookie banner and cookie notice

According to the ruling of the BGH, an active cookie banner is required if cookies (of any kind) are used. Our website uses cookie consent technology to obtain your consent to the storage of certain cookies in your browser and to document this in compliance with data protection regulations. When you enter our website, a cookie for the cookie notice is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data is not passed on to the provider of the cookie banner.

The data collected will be stored until you ask us to delete it or the cookie banners delete themselves or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.

Cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.

Cookies

Our website (including the subpages) partly uses so-called cookies.

A cookie is a data record or a small packet of information that consists of a pair of data, a key and a value and stores data. Cookies do not cause any damage to your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. A cookie is managed in the end device of users or visitors in their browser and stored there.

A distinction is made between the following cookie types and functions:

• Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online service and closed their browser.
• Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. The interests of users that are used for reach measurement or marketing purposes can also be stored in such a cookie.
• First-party cookies: First-party cookies are set by us.
• Third-party cookies (also: third-party cookies): Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
• Necessary (also: essential or absolutely necessary) cookies: Cookies can be absolutely necessary for the operation of a website (e.g. to save logins or other user input or for security reasons).
• Statistical, marketing and personalization cookies: Cookies are also generally used to measure reach and when a user’s interests or behaviour (e.g. viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles are used, for example, to show users content that matches their potential interests. This process is also referred to as “tracking”, i.e. tracking the potential interests of users. If we use cookies or “tracking” technologies, we will inform you separately in our privacy policy or when obtaining consent.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. As the website operator, we have a legitimate interest in the storage of cookies for the technically error-free and optimized provision of our services.

Insofar as other cookies (e.g. cookies for analyzing surfing behavior) are stored, these are treated separately in this privacy policy and you will be asked for your consent by means of a consent tool (cookie banner).

Storage period: If we do not provide you with explicit information on the storage period of permanent cookies (e.g. as part of a so-called cookie opt-in), please assume that the storage period can be up to two years.

Note on deactivating or deleting cookies

Users can set their own web browser so that the storage of cookies on the end device is generally prevented or they are asked each time whether they agree to the setting of cookies. Once cookies have been set, users can delete them at any time. How this works is described in the help function of the respective web browser.

Please note: a general deactivation of cookies may lead to functional limitations of websites.

Consent Banner / Cookie Banner / Consent request

According to the ruling of the BGH, an active cookie banner is required if cookies (of any kind) are used. Our website uses cookie consent technology to obtain your consent to the storage of certain cookies in your browser and to document this in compliance with data protection regulations.

When you enter our website, a cookie for the cookie notice is stored in your browser, in which the consents you have given or the revocation of these consents are stored.

This data is not passed on to the provider of the cookie banner. The data collected in this way is stored until you ask us to delete it or the cookie banners delete themselves or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.

Cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Right to object to direct advertising

A general objection to the use of cookies used for online marketing purposes can be raised for a large number of services, especially in the case of tracking, via the US sitehttps://www.aboutads.info/choices/ or the EU website https://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that you may then only be able to use website functions to a limited extent.

You can configure, block and delete cookies in your browser settings. The Federal Office for Information Security provides helpful information and instructions for the most common browsers: https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlungen/EinrwirtungSoftware/EinrwirtungBrowser/Sicherheitsmassnahmen/Cookies/cookies_node.html

Security measures

We take appropriate technical and organizational measures (TOM) in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different likelihood and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transfer, safeguarding of availability and its separation. Furthermore, procedures are in place to ensure that the rights of data subjects are exercised, data is deleted and we respond to data threats. Furthermore, we take the protection of personal data into account as early as the development and selection of hardware, software and processes, in accordance with the principle of data protection through technology design and data protection-friendly default settings. This applies in particular to our online offer and the information compiled here.

When commissioning our services, we collect and process personal data only insofar as this is necessary to fulfill and process the order and to process the request. The provision of the data is necessary for the conclusion of the contract or for the completion of the order. Failure to provide the data means that no contract can be concluded. The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary for the fulfillment of the contract with you. Your data will only be passed on if required by law and as part of contractually regulated processes. In all cases, we strictly observe the legal requirements. The scope of data transfer is limited to a minimum.

Types of data processed

• Inventory data (e.g., personal/customer master data, names or addresses, application documents).
• Contact details (e.g., e-mail, telephone numbers)
• Content data (e.g., text entries, photographs, videos of objects)
• Usage data (e.g., websites visited, interest in content, access times)
• Meta/communication data (e.g., device information, IP addresses)

Contact us

When contacting us (e.g. by e-mail, telephone, contact form), the information provided by users, including all resulting personal data (name, e-mail address) for processing the contact request and its processing in accordance with Art. 6 para. 1 lit. b. (in the context of contractual/pre-contractual relationships), Art. 6 para. 1 lit. f. GDPR (other requests). The user’s details may be stored in a system-supported environment (e.g. “CRM system, billing system, ERP system”) or comparable applications. We delete requests if they are no longer required. The necessity is checked regularly. Furthermore, the statutory archiving and retention obligations apply. Inquiries that are not relevant or do not need to be stored are deleted. This applies in particular to unsolicited advertising.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, we will store and process your inquiry, including all personal data (name, inquiry), for the purpose of processing your request. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and/or on our legitimate interest (Art. 6 para. 1 lit. f GDPR), as we are very interested in the effective processing of the inquiries addressed to us.

Cooperation with processors, joint controllers and third parties

If we disclose data to other persons and companies (processors, joint controllers or third parties) as part of our processing, transfer it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission.

We ensure that cooperation with business partners and service providers is either regulated by an order processing contract or that a declaration of commitment to confidentiality and compliance with data and business secrecy has been concluded. In the case of shared responsibility, we ensure that our business partners are also committed to data protection.

Transfers to third countries

If data is processed in a third country (i.e. countries outside the European Union) or in the context of the use of third-party services (software, applications, etc.), this will only take place if it is necessary to fulfill our (pre)contractual obligations or if we have your consent to do so.

Subject to legal or contractual permissions, we only process or have the data processed in a third country if the legal requirements are met. This means, for example, that the processing takes place on the basis of special guarantees or in compliance with officially recognized, special contractual obligations. In this case, the EU standard contractual clauses are our standard for providers from third countries, as well as the adequacy decisions defined by the EU.

Hosting and e-mail delivery

The hosting services we use from our provider Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (server location Germany) serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services that we use for the purpose of operating this online offering.

We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interest in the efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with. Art. 28 GDPR (conclusion of order processing contract).

Objection to advertising e-mails

We hereby object to the use of our contact data published in the context of the imprint obligation to send unsolicited advertising and information material. As the site operator of the pages offered, we expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by e-mail.

We process applicant data only for the purpose and in the context of the application process in accordance with the legal requirements. The processing of applicant data is carried out in accordance with Art. 88 GDPR (data processing in the employment context – initiation) and in conjunction with. § Section 26 BDSG (data processing for the purposes of the employment relationship – initiation).

The application process requires applicants to provide us with their application data. The necessary applicant data is derived from the job descriptions and generally includes personal details, postal and contact addresses and the documents relating to the application, such as cover letter, CV and references. Applicants can also voluntarily provide us with additional information.

By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the type and scope set out in this privacy policy.

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily communicated as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 lit. b GDPR (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 lit. b GDPR (e.g. health data if this is necessary for the exercise of the profession).

Applicants can send their applications by e-mail. Please note, however, that e-mails are generally not sent in encrypted form and applicants must ensure that they are encrypted themselves. We therefore cannot accept any responsibility for the transmission path of the application between the sender and receipt on our server and therefore recommend that you send your application by post. In this context, we ask that you only send attachments in PDF format and keep to a maximum file size of 5 MB.

The data provided by applicants may be processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job offer is unsuccessful, the applicant’s data will be deleted. Applicants’ data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.

The deletion takes place, subject to a justified revocation by the applicant, after a period of six months, so that any follow-up questions regarding the application and obligations to provide evidence under the Equal Treatment Act can be answered. Invoices for any reimbursement of travel expenses are archived in accordance with tax law requirements.

We use various tools from different providers on our website for the technical and functional design. This is always done with a view to making our online offering as appealing, modern and secure as possible for the market and interested visitors. Below you will find an overview of these tools/services, compiled to the best of our knowledge and belief:

Google Fonts

We integrate the fonts (“Google Fonts”) of the provider Google, whereby the user’s data is used solely for the purpose of displaying the fonts in the user’s browser. The integration is based on our legitimate interests in a technically secure, maintenance-free and efficient use of fonts, their uniform presentation and taking into account possible licensing restrictions for their integration. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://fonts.google.com/; Privacy Policy: https://policies.google.com/privacy.

Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. (“Google”). Google Analytics uses so-called “cookies”, data records that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link.

As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again):

Deactivate Google Analytics

Further information and Google’s privacy policy can be found at:

https://www.google.de/intl/de/policies/privacy/, http://www.google.com/analytics/terms/de.html, https://www.google.com/intl/de_de/analytics/

Google Tag Manager

Google Tag Manager is a solution with which we can manage so-called website tags (keywords) via an interface and thus integrate other services into our online offer (please refer to further information in this data protection notice). The Tag Manager itself (which implements the tags) therefore does not create user profiles or store cookies, for example.

Google only learns the IP address of the user, which is necessary to run the Google Tag Manager. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com; Privacy Policy: https://policies.google.com/privacy.

Google Maps

We use the Google Maps service on our website. This allows us to show you interactive maps directly and enables you to use the map function conveniently.

For this purpose, corresponding program libraries or map contents are retrieved from Google servers. In addition to your IP address, other personal data, such as your location, may also be transmitted to Google when you access such pages. In this context, we would like to point out that the use of Google Maps means that an external Google server in the USA is called up when this page is accessed. This site uses the Google Maps map service via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://policies.google.com/privacy.

ReCaptcha

We integrate the “ReCaptcha” function to recognize bots, e.g. when entering data in online forms. The user’s behavioral data (e.g. mouse movements or queries) are evaluated in order to distinguish humans from bots. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://www.google.com/recaptcha/; Privacy Policy: https://policies.google.com/privacy; Opt-Out: Opt-out plug-in: https://tools.google.com/dlpage/gaoptout?hl=de,

Social media links

We use links to refer to our social media sites. Unlike social media plugins, links do not lead to the social media platform finding out about your visit as soon as you access our site. However, like any link, they will result in your data being processed by the social media platform at the latest when you click on the link.

As a rule, the social media platform will store cookies on your device or even store your usage behavior for your account, especially if you are logged in yourself. The social media platform can use your data to analyze your user behavior and use it for (interest-based) advertising. This may result in advertising being displayed to you inside and outside the social media platform.

Please make it clear to yourself whether you want to accept this and only use a social media platform if you have been sufficiently informed about the data processing there and agree to it (this applies in particular if you have not yet used it yourself) – we have attached links to the data protection declarations of the social media platforms.

Contents of the Deubner Verlag

In order to offer you further interesting information from our professional environment, we use the information service of Deubner Verlag on our website. By using this information service, Deubner Recht & Steuern GmbH & Co KG, Oststr. 11, 50996 Cologne, Germany, collects technically necessary data that is automatically transmitted to its server. This is technically necessary in order to be able to show you the latest information on our website. The data is also used to ensure the security and stability of the website. The legal basis for the collection is Art. 6 para. 1 lit. f GDPR.

We also use various plugins/extensions from a wide range of providers on our website for technical and functional purposes. This is always done with the aim of making our online offering as appealing, modern and secure as possible for the market and interested users. Below you will find an overview of these tools/services, compiled to the best of our knowledge and belief:

Instagram plugins and content:
Instagram plugins and content – This may include, for example, content such as images, videos or text and buttons with which users can share content from this online service within Instagram. Service provider: https://www.instagram.com, Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Privacy Policy: https://instagram.com/about/legal/privacy.

TikTok plugins and content:
TikTok plugins and content – This may include content such as images, videos or text and buttons. Service provider: TikTok Technology Ltd, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland; Website: https://www.tiktok.com; Privacy Policy: https://www.tiktok.com/de/privacy-policy.

YouTube videos:
Video content; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://www.youtube.com; Privacy Policy: https://policies.google.com/privacy; Opt-Out: Opt-out plug-in: https://tools.google.com/dlpage/gaoptout?hl=de; Settings for the display of advertisements: https://adssettings.google.com/authenticated.

YouTube is integrated via the domain https://www.youtube-nocookie.com in the so-called “extended data protection mode”, whereby no cookies are collected on user activities in order to personalize the video playback. Nevertheless, information on user interaction with the video (e.g. remembering the last playback location) may be stored; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://www.youtube.com; Privacy Policy: https://policies.google.com/privacy.

We use available software solutions to offer telephone conferences, online meetings and video conferences so that we can stay in contact and communicate with our customers and business partners as personally as possible, even in special times and situations.

To take part in “online meetings” or to enter a “meeting room”, you may be asked to provide at least your name. This is so that the moderator can grant you access. Anonymous participation is often also possible.

Personal data that is processed in connection with participation in “online meetings” is not passed on to third parties unless it is intended to be passed on. Please note that content from “online meetings”, as with face-to-face meetings, is often used to communicate information with customers, interested parties or third parties and is therefore intended to be passed on.

Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information. For recordings: MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.

Other recipients: The provider of the online conference necessarily receives knowledge of the above-mentioned data. It should be noted that, depending on the provider, data may be processed outside the European Union. If the service is provided by a provider from the USA, personal data is usually processed in a third country.

We are providing you with this data protection information so that you can gain an overview of the design and functions. It is important to us that you receive a transparent, comprehensible overview of our work and our handling of your data, especially your personal data.

It is a matter of course for us that we only process data that is necessary for the justification, preparation and fulfillment of our (pre)contractual services and point out the necessity.

In this context, Article 6 para. 1 b., c. and f. apply. Article 9(2) applies to the processing of special categories of data and Article 88 EU GDPR applies to data processing in the context of employees. Disclosure to external parties only takes place if it is really necessary in the context of an order. When processing data provided to us as part of an order, we act in accordance with the instructions of the client and the legal requirements of order processing in accordance with Art. 28 GDPR and do not process the data for any purpose other than the purpose of the order. In the case of cooperation with other controllers, the data protection requirements are taken into account in reciprocity by means of Article 26 EU GDPR.

We update our data protection information as soon as changes to the data processing we carry out make this necessary or legal requirements demand it. We have compiled our information to the best of our knowledge and as completely as possible.