Our data protection policy

 

 

1.   General information and principles of data processing

 

We are very pleased that you visit our website. The protection of your privacy and the protection of your personal data when using our website is an important concern for us.

 

According to Art. 4 No. 1 GDPR, personal data are all information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your e-mail address, but also your IP address.

 

Data that cannot be linked to your person, for example through anonymisation, are not personal data. The processing (e.g. the collection, storage, reading, querying, use, transmission, deletion or destruction) according to Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and no legally prescribed retention obligations are to be preserved.

 

Here you will find information about the handling of your personal data when you visit our website. In order to provide the functions and services of our website, it is necessary that we collect personal data about you.

 

We also inform you about the type and scope of the respective data processing, the purpose and the corresponding legal basis and the respective storage period.

 

This privacy policy may apply only to this website. It does not apply to other websites to which we merely refer via a hyperlink. We are not responsible for the confidential handling of your personal data on these third-party websites, as we have no influence on whether these companies comply with the data protection regulations. Please refer to these websites directly for information on how these companies handle your personal data.

 

Below you will find the contact details of the responsible controller and the data protection officer.

 

2.   Controller

 

Controller for the processing of personal data on this website (see imprint):

 

Serviceplan Group SE & Co. KG

Haus der Kommunikation      
Brienner Str. 45 a-d  
80333 Munich
Germany
Telephone: +49 89 2050 20  
Telefax: +49 89 2050 2111    
E-Mail: info@serviceplan.com

 

Represented by the managing directors: Florian Haller, Dr. Ing. Peter Haller, Ronald Focken, Dr. Fabian Prüschenk, Alexander Schill, Markus Noder.

 

3.   Data Protection Officer

 

You may also contact our data protection officer at any time should you have questions about data protection:

 

Dr. Georg Schröder, LL.M.   
Data protection officer
HEUSSEN Rechtsanwaltsgesellschaft mbH c/o
Brienner Straße 9 / Amiraplatz
80333 München (Munich)/ Germany
Telephone: +49 89 29 09 70
Telefaxax: +49 89 290 97 200          
E-mail: georg.schroeder@heussen-law.de  

 

4.   Provision and use of the website/ log files

 

a) Type and scope of data processing

If you use this website without otherwise transmitting data to us, we collect following technically necessary data via log files, which are automatically transmitted to our server:

 

- Date and time         

- IP address

- Session ID   

- Visited web page

- Name of the website from which our website was accessed       

- Browser used          

 

b) Purpose and legal basis

This processing is technically necessary in order to be able to display our website to you. We also use the data to ensure the security and stability of our website. This processing is also necessary in order to prevent the misuse of our website.

 

The legal basis for this processing is Art. 6(1) lit. f) GDPR. The processing of the mentioned data is necessary for the running of the website and protection against misuse of the website and thus serves the protection of a legitimate interest of our company.    

 

c) Storage period      

As soon as the personal data mentioned are no longer required to display the website, the data will be deleted. The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object to this aspect. Further storage may take place in individual cases if this is required by law.

 

5.   Use of cookies

 

a) Type, scope and purpose of data processing

We use cookies. Cookies are small files that are sent by us to the browser of your device during your visit to our website and stored there.

 

Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, allow us to perform various analyses. For example, some cookies can recognize the browser you are using when you return to our website and transmit various information to us. We use cookies to facilitate and improve the use of our website. For example, we can use cookies to make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, the third parties collect the information directly via your browser. However, cookies do not cause any damage to your device. They cannot run programs or contain viruses. Various types of cookies are used on our website and their type and function are explained below.

 

Transient/ Session cookies

Our website uses transient/session cookies, which are automatically deleted when you close your browser. This type of cookie allows us to collect your session ID. This makes it possible to assign different requests of your browser to a common session and it is possible to recognize your device during subsequent visits to websites. These session cookies contain expire at the end of the session.

 

Persistent cookies

Persistent cookies are used on our website. Persistent cookies are cookies that are stored in your browser for a longer period of time and can transmit information. The respective storage period differs depending on the cookie. You can delete persistent cookies independently using your browser settings.

 

Third-party cookies

We use analytical cookies to monitor the anonymous user behavior on our website.

We also use advertising cookies. These cookies can be used to track user behavior for advertising and targeted marketing purposes.

Social media cookies allow us to connect to your social networks and share content of our website within your networks.

 

A list of the cookies we use, descriptions of the purposes of the cookies and further information on the respective cookies can be found under:

https://www.serviceplan.com/en/footer/cookie-declaration.html

 

Configuring the browser settings

When you first visit our website and then at any time in our cookie banner, you can accept or reject individual or all cookies separately by placing a green tick next to the respective cookie or removing it and then clicking "OK".

 

Your settings made in the cookie banner are stored on your computer or mobile device. You will therefore need to make them again if you delete your browsing history or use another device or Internet browser.

 

Most web browsers are pre-set to automatically accept cookies. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may then no longer be able to use all the functions of our website.

 

You can also use your browser settings to delete cookies already stored in your browser. Furthermore, it is possible to set your browser so that it informs you before cookies are stored. Since the different browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the corresponding configuration options.

 

Disabling the use of cookies may require the storage of a permanent cookie on your computer. If you subsequently delete this cookie, you must deactivate it again.

 

b) Legal basis

This processing is technically necessary to be able to display our website. We also use the data to ensure the security and stability of our website in order to comply with legal obligations. The data collection is also necessary for the availability of our website and thus serves to protect the legitimate interest of our company. The legal basis for the processing of the aforementioned data is Art. 6 para. 1 lit. c) and lit. f) GDPR.

 

If you have given us your consent to the use of cookies via the cookie banner provided by us on the website, the legal basis for the further data processing is Art. 6 para. 1 lit. a) GDPR.

 

c) Storage period

As soon as the data transmitted to us via cookies is no longer required for the purposes described above, this information will be deleted. Further storage may take place in individual cases if this is required by law.

 

d) Cookie Categories

 

We use the following categories of cookies:

 

       i.          Necessary cookies

Necessary cookies guarantee functions without which our website cannot be used as intended. These absolutely necessary cookies serve, for example, to ensure that registered users always remain logged in when accessing various sub-pages. These are so-called first party cookies, which are only used by us. These cookies do not require consent. You can deactivate cookies in your browser at any time.

 

      ii.          Statistics Cookies

Statistics Cookies collect information about the way a website is used to improve its attractiveness, content and functionality. For example, the following data is collected: The number of times a page or sub-pages are accessed, the time spent on the website, the order of pages visited, which search terms led you to us, the country, region, city from which the access is made, and the percentage of mobile devices that access our websites. We also analyze which areas of our website are of particular interest to you.

 

     iii.          Cookies for personalization

Cookies for personalization enable our website to store the information you have already provided (e.g. registered name, language selection, location) and to offer you improved and more personalized functions based on this information. Only anonymised information is processed via these cookies.

 

    iv.          Marketing Cookies

Marketing cookies are used to track visitors to websites and to display interest-based advertisements to them. They are also used to limit the frequency of appearance of ads and to measure the effectiveness of advertising campaigns. These cookies register whether or not you have visited a website. This information may be shared with third parties, such as advertisers. Cookies used to improve targeting and advertising are often linked to third party site functionality.

 

The intention is to show ads that are relevant and appealing to the individual user and therefore more valuable to publishers and third-party advertisers.

 

e) Applied Cookies

 

Google Analytics

 

a. Type and scope of data processing

We use the tracking tool Google Analytics. Google Analytics is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Tel: +353 1 543 1000, Fax: +353 1 686 5660 ("Google").

 

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.

 

On behalf of the operator of this website, Google will use this information for the purpose of systematically evaluating your use of the website, compiling reports on website activity and providing other services to website operators relating to website activity and internet usage.

 

If individual pages of our website are accessed, the following data is stored:

 

- Three bytes of the IP address of the calling system of the user (anonymized IP address)

- The website accessed

- The website from which the user accessed the page of our website (referrer)

- The subpages that are called from the called page

- The time spent on the website

- Frequency of a call of a site

 

We use Google Analytics with IP anonymization enabled. With the IP anonymization the IP addresses are shortened by the last octet (e.g. 192.168.79.***; so-called IP masking). It is no longer possible to assign the abbreviated IP address to the user's computer or terminal device.

 

b. Purpose and legal basis

The Google Analytics service is used to analyze the usage behavior of our Internet presence. The legal basis is your consent according to Art. 6 para. 1 lit. a) GDPR.

 

c. Storage period

The stored data are deleted as soon as they are no longer needed for our recording purposes. In our case, the storage period is max. 24 months.

 

d. Right of withdrawal

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en

 

Learn more about the terms of use of Google Analytics:

http://www.google.com/analytics/terms/gb.html

 

For more information see the Google Analytics’ data practices: https://support.google.com/analytics/answer/6004245?hl=en

 

You can also modify your consent in the cookie settings [Change your consent] at any time.

 

Google Adwords Remarketing      

 

a. Type and scope of data processing

We use Google Adwords Remarketing. Google Adwords Remarketing is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, E-mail: support-deutschland@google.com ("Google").

 

This application allows us to display advertisements on other websites after you have visited our website. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage patterns when you visit various websites. In this way, Google can determine your previous visit to our website. According to Google's own statements, the data collected in the course of remarketing is not combined with your personal data, which may be stored by Google. In particular, according to Google, a pseudonymisation is used for remarketing.

 

b. Purpose and legal basis

The Google Adwords Remarketing service is used to analyse the usage behaviour of our website.

 

Legal basis is Art. 6(1) lit. a) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our internet presence.

 

c. Storage period

The stored data will be deleted as soon as they are no longer needed for our purposes.

 

d. Right to object

You can permanently deactivate the use of cookies by Google by following the following link and downloading and installing the plug-in provided there: https://support.google.com/ads/answer/7395996?hl=en

 

Alternatively, you can disable the use of cookies by third parties by visiting the network Advertising Initiative's opt-out page at https://www.networkadvertising.org/choices/ and implementing the opt-out information provided there.

 

For more information about Google Remarketing and its privacy policy, please visit: https://www.google.com/privacy/ads/

 

For more information see Google's privacy policy: https://policies.google.com/privacy?hl=en

 

e. Right of withdrawal        

You can revoke your consent to the processing of your personal data at any time with effect for the future. However, the legality of the processing carried out until the revocation is not affected by this.

 

Google reCAPTCHA

 

a) Type and scope of data processing

We use reCAPTCHA, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com ("Google").

 

This service enables Google to determine which website is sending a request and from which IP address you are using the so-called reCAPTCHA input box.

 

In addition to your IP address, Google may collect other information necessary to provide and guarantee this service. 

 

b) Purpose and legal basis     

The purpose of using Google reCAPTCHA is to ensure data security during the transmission of forms.

 

This serves above all to differentiate whether the input is made by a natural person or whether it is misused by mechanical and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google.

 

The legal basis is Art. 6(1) lit. f) GDPR. Our legitimate interest lies in the security of our internet presence and in the defence against unwanted, automated access in the form of spam.

 

c) Storage period      

The stored data will be deleted as soon as they are no longer needed for our purposes.

 

d) Right to object       

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.

 

If you do not wish your data to be collected by Google via our website, so-called opt-out cookies can also be used. These prevent future processing of your personal data when you visit our website. In order to prevent the processing of your personal data across different systems, you must use the opt-out cookie on all systems used.

 

For more information see Google's privacy policy: https://policies.google.com/privacy?hl=en.

 

Google Tag Manager

 

We use Google Tag Manager. Google Tag Manager is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Tel: +353 1 543 1000, Fax: +353 1 686 5660 E-mail: support-deutschland@google.com ("Google") that allows marketers to manage website tags through a single interface. 

 

The Google Tag Manager only implements tags. Tags are small code elements on your website that are used, among other things, to measure traffic and visitor behavior, to measure the impact of online advertising and social channels, to use remarketing and targeting, and to test and optimize your website.

 

This means that no additional cookies are used. No personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level - especially if you have chosen the above described objection solution for Google Analytics or have made the appropriate settings in your browser - it will remain in effect for all tracking tags, as long as they are implemented with Google Tag Manager.

 

For more information see Google's privacy policy: https://policies.google.com/privacy?hl=en

 

Privacy Policy for Advertising:https://www.google.com/intl/en/policies/technologies/ads/.

 

Google Maps

 

a. Type and scope of data processing

We integrate the maps of the service Google Maps. Google Maps ist a service of Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland, E-mail: support-deutschland@google.com ("Google").

 

This allows us to display interactive maps directly on our website and enables you to use the map function conveniently.

 

This allows us to display interactive maps directly on our website and allows you to conveniently use the map function. Google will store a cookie on your device and process the following data:

 

- The operating system         
- Information about the browser type and version used      
- Information about your Internet service provider   
- Your IP address      
- Date and time of access     
- Websites from which you came to our website     
- Websites that you visit through our website

 

This occurs regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you're logged in to Google, your information will be directly associated with your account. If you do not want your profile to be associated with Google, you will need to log out.

 

b. Purpose and legal basis

Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or the design of its website in line with requirements.

 

Such evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing demand-oriented advertising. The evaluation is also carried out to inform other users of the social network about your activities on our website.

 

The legal basis is consent, Art. 6 (1) lit. a) GDPR. Alternatively, Art. 6 (1) lit. f) GDPR serves as the legal basis, because our legitimate interest lies in the design of our website to meet requirements.

 

c. Storage period

The stored data will be deleted as soon as they are no longer needed for our purposes.

 

d. Right to object

You have a right of objection to the formation of these user profiles. This is to be addressed to Google.

 

You can prevent the transfer of data to Google by disabling JavaScript in your browser settings. In that case, you will not be able to use Google Maps on our website.

 

Learn more about the Google Maps Terms of Use:

https://policies.google.com/terms?gl=DE&hl=en

 

Learn more about the Additional Terms of Service of Google Maps:         

www.google.com/intl/en_US/help/terms_maps.html

 

For more information see Google's privacy policy: https://policies.google.com/privacy?hl=en

 

e. Right of withdrawal           

You can revoke your consent to the processing of your personal data at any time with effect for the future. However, the legality of the processing carried out until the revocation is not affected by this.

 

Campaign Manager (formerly DoubleClick by Google)

 

a. Type and scope of data processing      

We use the online marketing tool Campaign Manager from Google, a service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, E-mail: support-deutschland@google.com ("Google").

 

Campaign Manager uses cookies to serve ads relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once.

 

Google uses a cookie ID to track which ads appear in which browser and can thus prevent ads from appearing more than once. In addition, Campaign Manager can use cookie IDs to capture conversions related to ad requests. This is the case, for example, when a user sees a Campaign Manager ad and later visits the advertiser's website with the same browser and buys something there.

 

According to Google, Campaign Manager cookies do not contain any personally identifiable information.

 

Because of the marketing tools used, your browser automatically connects directly to Google's server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge.

 

b. Purpose and legal basis

Through the integration of Campaign Manager, Google receives the information that you have called up the relevant part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account.

 

Even if you are not registered with Google or you have not logged in, the provider may collect and store your IP address.

 

The Campaign Manager (DoubleClick Floodlight) cookies used enable us to understand whether you are carrying out certain actions on our website after you have accessed one of our display/video ads on Google or another platform via Campaign Manager or clicked on it (conversion tracking). This allows us to send you targeted advertising.

 

The legal basis is the consent according to Art. 6 (1) lit. a) GDPR.

 

c. Storage period   

The stored data will be deleted as soon as they are no longer needed for our purposes.

 

d. Right of objection

You can prevent cookies from being saved by setting your browser software accordingly. You can deactivate the display of personalised advertising using a browser plug-in at https://support.google.com/ads/answer/7395996?hl=en

 

You can also deactivate the display of personalized ads here.

 

Further information can be found in Google's privacy policy: https://policies.google.com/privacy?hl=en

 

Privacy policy for advertising measures: https://policies.google.com/technologies/ads?hl=en

 

e. Right of withdrawal         

You can withdraw your consent to the processing of your personal data at any time with effect for the future. However, the legality of the processing carried out until the withdrawal is not affected by this.

 

Marketo Munchkin Cookie

 

On our website we use a service of the company Marketo EMEA Ltd. (hereinafter "Marketo") to collect statistical data on user behaviour on our website in order to align and optimise our range of services accordingly, to provide a corresponding range of case studies, publications, market studies and similar materials and for optimised e-mail marketing.

 

For this purpose, we store one or more cookies on your end device, with the help of which we collect information for marketing and optimisation purposes, which in turn is stored and processed on the Marketo servers. The collected information can be combined with your further details, which you voluntarily leave on our website, to create a profile.

 

The collected data can be merged with the personal data you voluntarily provide on the website to create a profile. You can object to the profile creation by deactivating the cookie function in your browser or by clicking on this link. If you have given us your consent, we will also use your data to inform you about our products and news. For further information please refer to the Marketo privacy policy at https://www.marketo.com/company/legal/

 

Integration of YouTube videos

 

a. Type and scope of data processing

We have included YouTube videos in our online offering, which are stored at http://www.YouTube.com and can be played directly from our website. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, E-mail: support-deutschland@google.com ("Google").

 

We use YouTube in conjunction with the privacy-enhanced mode feature to display videos to you.

 

Due to the privacy-enhanced mode feature, the data explained in more detail below will only be transmitted to YouTube's server if you actually start a video.

 

YouTube collects your IP address, the date and time as well as the website you visited. This takes place regardless of whether YouTube provides a user account that you are logged in to or whether there is no user account. It also connects to Google's advertising network.

 

If you are logged into YouTube at the same time, YouTube assigns the connection information to your YouTube account and uses it for purposes of advertising, market research and/or tailoring its website to suit your needs.

 

Our website only embeds disabled images from the YouTube channel, which do not automatically connect to YouTube's servers.

 

When you click on the video for the first time, no data is transmitted from you.

 

Only after you have given your consent by clicking on it will data be transmitted to YouTube immediately and on each subsequent visit (so-called two-click solution).

 

Not until you you release the playing of the videos by clicking on "Permanent activation of Youtube videos", you give your consent that the necessary data will be transmitted to Youtube. You can revoke this consent at any time by unchecking the box in the privacy policy. In order to save the settings you have requested, we will set a cookie. These cookies do not provide any personal data, they only contain anonymized data to adjust the browser.

 

For further information, please refer to the Google privacy policy:

http://www.google.de/intl/de/policies/privacy/

 

b. Purpose and legal basis

The legal basis is the consent according to Art. 6 (1) lit. a) GDPR.

 

c. Storage period   

The stored data will be deleted as soon as they are no longer needed for our purposes.

 

d. Right to object

YouTube permanently stores cookies on your terminal device via your Internet browser for the purpose of functionality and analysis of user behaviour.

 

If you do not agree with this processing, you can prevent the storage of cookies by changing the settings in your Internet browser.

 

If you wish to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.

 

If you do not wish your profile to be assigned to YouTube, you must log out before activating the button.

 

If you do not want to receive user-based advertising, you can opt out of placing ads using Google's ad preferences.

 

Further information about the purpose and scope of data collection and processing by YouTube, please see Google's privacy policy. There you will also find further information about your rights and setting options to protect your privacy:

https://policies.google.com/privacy?hl=en

 

e. Right of withdrawal         

You can withdraw your consent to the processing of your personal data at any time with effect for the future. However, the legality of the processing carried out until the withdrawal is not affected by this.

 

Integration of vimeo videos      

     

a) Type and scope of data processing         

We use vimeo to display videos on our website. This is a service of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA, hereinafter referred to as "Vimeo."

 

Vimeo processes your IP address. In addition, the date and time of your visit to our website will also be recorded. If you are logged into vimeo while visiting our website containing a vimeo video, vimeo will associate information about your interaction with our site to your vimeo account. By visiting the website, vimeo receives the information that you have accessed the corresponding subpage of our website. In addition, log files are transmitted. This is done regardless of whether vimeo provides a user account that you are logged in to, or if there is no user account. If you are logged in as a member of vimeo, vimeo assigns this information to your personal user account. Clicking on the start button of a video also assigns this information to your user account.

 

Some of the user data is processed on Vimeo servers in the USA. Through certification according to the EU-US Privacy Shield.

 

Vimeo is certified under the Privacy Shield Agreement and thereby guarantees compliance with European data protection law.

 

b) Purpose and legal basis

Legal basis for the deployment of vimeo is your consent according to Art. 6(1) lit. a) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our internet presence. The legal basis is Art. 6(1) lit. f) GDPR. Our legitimate interest lies in improving the quality of our internet presence.

 

c) Storage period      

The stored data will be deleted as soon as they are no longer needed for our purposes.

 

d) Right to object       

If you wish to prevent this, you must either log out of vimeo before visiting our website or configure your vimeo user account accordingly.

 

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.

 

Vimeo offers further information about its data collection and processing as well your rights and your options for protecting your privacy at this link: http://vimeo.com/privacy.

 

Further information on the purpose and scope of the data collection and its processing by vimeo can be found in the privacy policy: https://vimeo.com/privacy.

 

There you will also find more information about your rights and settings options to protect your privacy.

 

6. Linking to social networks

 

On this website we link to our social networking sites. For this purpose we linked a graphic of the respective network. By using our website there is no automatic connection to the respective server of the social network. Only by a click on the appropriate diagram you are passed on to the service of the respective social network.

 

Here the following data are processed by the respective network:

 

- IP address

- Date, time

- Visited website

 

If you are logged into your user account of the respective network during this time, the network operator may be able to assign the collected information of the specific visit to the personal account of the user.

 

If you interact via a "Share" button of the respective network, this information can also be stored in the personal user account of the user and, if necessary, published. If you want to prevent the information collected from being directly assigned to your user account, the user must log out of the respective social network before clicking on the graphic.

 

You can also configure the respective user account accordingly.

 

We link to the following social networks:

 

- Facebook

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

 

Further information in the privacy policy:https://www.facebook.com/policy.php

 

EU-US Privacy Shield certification: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

 

- Twitter

Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA

 

Further information in the privacy policy: https://twitter.com/privacy

 

EU-US Privacy Shield certification: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

 

- YouTube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

 

Further information in the privacy policy:

https://policies.google.com/privacy?hl=en

 

EU-US Privacy Shield certification: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

 

- LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland

 

Further information in the privacy policy:

https://www.linkedin.com/legal/privacy-policy

 

EU-US Privacy Shield certification: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

 

- XING

XING SE, Dammtorstraße 30, 20354 Hamburg, Deutschland.

Further information in the privacy policy:
http://www.xing.com/privacy

 

- Instagram

Instagram: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

 

Further information in the privacy policy:
https://help.instagram.com/155833707900388

 

7.   Data collection for the implementation of pre-contractual measures and for contract fulfilment

 

a) Type and scope of data processing

In the pre-contractual area and at the conclusion of the contract we collect personal data about you. This includes, for example, first and last name, address, e-mail address, telephone number or bank details.

 

b) Purpose and legal basis of data processing

We collect and process this data exclusively for the purpose of contract execution and/or for the fulfilment of pre-contractual obligations.

                              

The legal basis for this is Art. 6(1) lit b) GDPR. If you also give your consent, the additional legal basis is Art. 6(1) lit. a) GDPR.

 

c) Storage period

The data will be deleted as soon as they are no longer necessary for the purpose of their processing.

 

In addition, statutory retention obligations may exist, such as commercial or tax retention obligations in accordance with the German Commercial Code (HGB) or the German Fiscal Code (AO). If such storage obligations exist, we will block or delete your data at the end of these storage obligations.

 

8. Data transmission

 

We will only pass on your personal data to third parties if:

 

a) you have given your explicit consent in accordance with Art. 6 (1) lit. a) GDPR

b) this is legally permissible and is necessary according to Art. 6 (1) lit. b) GDPR for the fulfilment of a contractual relationship with you or the implementation of pre-contractual measures

c) according to Art. 6 (1) lit. c) GDPR there is a legal obligation for the transfer.

We are legally obliged to transmit data to state authorities, e.g. tax authorities, social insurance carriers, health insurance funds, supervisory authorities and law enforcement authorities.

d) the disclosure according to Art. 6 (1) lit. f) GDPR is necessary for the protection of legitimate company interests, as well as for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.

e) in accordance with Art. 28 GDPR, we use external service providers, so-called processors, who are obliged to handle your data with care.

 

We use such service providers in the following areas:

 

- IT

- Logistics

- Telecommunications

- Sales

- Marketing

 

When transferring your personal data to external bodies in third countries, i.e. outside the EU or the EEA, we ensure that these bodies treat your personal data with the same care as within the EU or the EEA. We only transfer personal data to third countries for which the EU Commission has confirmed an appropriate level of protection or if we ensure the careful handling of personal data through contractual agreements or other suitable guarantees.

 

9. Application opportunity 

 

a) Type and scope of data processing

You can apply on our website or by e-mail. When you apply, we collect and store the data you enter in the input mask or which you send us by e-mail.

 

See also our privacy policy for our application process.

 

b) Purpose and legal basis   

We process your data only for the purpose of processing your application. A disclosure to thirds parties does not take place. The legal basis for processing is set out in Art. 88 (1) GDPR in conjunction with § 26 BDSG and additionally in Art. 6 (1) lit. b) GDPR.

 

Insofar as you give us consent to be included in our pool of applicants, the legal basis is Art. 6 (1) lit. a) GDPR.

 

c) Storage period

If we can not offer you a job, we will store your data for a maximum of six months after completing the application process, taking into account § 61b(1) ArbGG combined with § 15 AGG. The beginning of the deadline is the receipt of the rejection letter.

 

If you have given us consent to be included in our pool of applicants, we will store your data for a maximum of two years.

 

d) Data transfer

Only those departments involved in the decision (responsible personnel or specialist departments, management, works council) will receive your data.

 

In addition, we are obliged to transmit your data to public authorities and institutions (e.g. public prosecutors, police, supervisory authorities, tax authorities, social insurance carriers, etc.).

 

Other recipients of data may be those bodies for which you have given us your consent to the transfer of data.

 

10. Comment Function

 

a) Type and scope of data processing

On our website you can comment in our blog on contributions. When you comment on a post, we collect and save the data you enter in the input form. In addition to the comments left by you, we also also store and publish information on the date of the comment input and the one of your chosen username (pseudonym). Furthermore, the IP address assigned by the Internet service provider (ISP) of the person concerned is stored. A disclosure to third parties does not occur.

 

b) Purpose and legal basis

The data provided by you (for example the IP address) is made for security reasons and in the event that the data subject violates the rights of third parties or posts illegal contents by submitting a comment.  
There is no disclosure of this personal data to third parties, unless such disclosure is not required by law or the legal defense of the controller.        

 

Legal basis for the processing of personal data, which are transmitted when using the comment function, is if and to the extent that your consent is given is Art. 6 para. 1 lit. a) GDPR. You can revoke this consent at any time. The legality of the already completed data processing operations remains unaffected by the revocation. Further legal basis is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in processing if third party rights are violated or unlawful content is posted.

 

c) Storage period

The comments and related data (e.g. IP address) are stored and remain on our website until the commented content has been completely deleted or the comments must be deleted for legal reasons.

 

11.   Contact options by the contact form

 

a) Nature and extent of the data processing

On our website we offer you the possibility to get in contact with us via a provided form. During the process of sending your inquiry via the contact form, reference is made to this data protection declaration in order to obtain your consent.

 

If you use the contact form, the following personal data will be processed:

 

- Salutation

- Name

- E-mail address

- Phone number

- Subject

- Content of the message

 

b) Purpose and legal basis

The indication of your e-mail address serves the purpose of sending you an answer to your request by e-mail. When using the contact form, your personal data will not be passed on to third parties.

           

The legal basis for the processing is a consent pursuant to Art. 6 para. 1 lit. a) GDPR on the declaration of consent which you have made voluntarily and which can be withdrawn at any time in the future.

 

c) Storage period

The data you enter in the contact form will remain stored by us until you request us to delete it, withdraw your consent to store it or the purpose for which it was originally stored ceases to apply (e.g. after your request has been processed).

 

Mandatory legal provisions - in particular retention periods according to the German Commercial Code (HGB) or the German Fiscal Code (AO) - remain unaffected by this.

 

12. Contact options by e-mail

 

On our website you can contact us by e-mail.

 

a) Type and scope of data processing

You can contact us by e-mail. Our data collection is limited to the e-mail address of the e-mail account you use to contact us and to any personal data you make available when contacting us.

 

b) Purpose and legal basis

The purpose of data processing is to enable us to respond appropriately to your request. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. There is a legitimate interest in the processing of the above-mentioned personal data in order to be able to process your request properly.

 

c) Storage period

The duration of the storage of the above data depends on the background of your contact. Your personal data is regularly deleted if the purpose of the communication no longer applies and storage is no longer necessary. This may result, for example, from the processing of your request.

 

13. Registration with the Serviceplan Alumni Program

 

a) Nature and extent of the data processing

On our website, former employees have the opportunity to become members of the "Club of Communication" and stay in contact with us through the Serviceplan Alumni Program. As members of the " Club of Communication" you will be invited to events, receive regularly newsletters and subscribe to the TWELVE magazine free of charge.

 

When submitting your membership request via the provided contact form, you will be referred to this privacy policy in order to obtain your consent.

 

If you send us a membership enquiry using the online form, the following personal data will be processed:

 

- Salutation

- Title

- First name

- Last name

- E-mail address

- Companies

- Street

- Postcode

- Place

 

b) Purpose and legal basis

The data collected when you register for the Serviceplan Alumni Programme is used exclusively for the purpose of advertising through events, newsletters and the dispatch of the TWELVE magazine.

 

No personal data will be passed on to third parties when using the contact form.

 

The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR which you have voluntarily given on the consent-declaration and which can be withdrawn at any time in the future.

 

c) Storage period

The data entered by you in the contact form will remain with us until you request us to delete it, withdraw your consent for storage or the purpose for which the data was stored no longer applies.

 

Mandatory legal provisions - in particular retention periods according to the German Commercial Code (HGB) or the German Fiscal Code (AO) - remain unaffected by this.

 

14. Newsletter

 

a) Type and scope of data processing

On our website you can subscribe to a free regularly e-mail newsletter. In order to be able to send you the newsletter regularly, we need your e-mail address. 

 

In connection with the newsletter distribution, your data is forwarded to our newsletter service provider. This is Plan.Net Connect GmbH, Brienner Str. 45 a-d, Munich 80333, Germany. Any further disclosure to third parties will not take place.

 

For the newsletter distribution we use the so-called double-opt-in. This means that we will only send you an e-mail newsletter if you have explicitly confirmed that you consent to receive it.

 

We will then send you a confirmation e-mail asking you to confirm by clicking on an appropriate link that you wish to receive newsletters from us in the future. This is to ensure that only you as the owner of the specified e-mail address can subscribe to the newsletter. Your confirmation must be sent promptly after receiving the confirmation e-mail, otherwise your newsletter subscription will be automatically deleted from our database.       

 

When you subscribe to the newsletter, we collect and store the information you enter in the input mask (e.g. last name, first name, e-mail address). A disclosure to third parties does not occur. Subscription to the newsletter is only possible with your consent.

 

When registering for the newsletter, we also store your IP address entered by the internet service provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your e-mail address at a later point in time. In the case of the confirmation E-mail sent out for checking purposes (double-opt in the e-mail), we also save the date and time of the click on the confirmation link and the ip address entered by the internet service provider (ISP).

 

b) Purpose and legal basis

The data collected by us when registering for the newsletter will be used exclusively for promotional purposes for addressing you in advertising by means of the newsletter.

 

The processing of your e-mail address for sending newsletters is based on the declaration of consent voluntarily submitted by you below and revocable at any time for the future in accordance with Art. 6 para. 1 lit. a) GDPR and § 7 para. 2 Nr. 3 UWG.

           

In addition, the processing is based on Art. 6 para. 1 lit. f) GDPR because of legitimate interests and requires us to document proof of the required consent.

 

c) Storage period

Your e-mail address will be stored as long as you have subscribed to the newsletter. After you unsubscribe from the newsletter, your e-mail address will be deleted, unless you have expressly consented to the further use of your data.

 

15. Data security and security measures

 

We are committed to protecting your privacy and keeping your personal information confidential. For this purpose, we take extensive technical and organizational security measures, which are regularly reviewed and adapted to technological progress.

 

These include the use of recognised encryption methods (SSL or TLS). Unencrypted data, e.g. when sent by unencrypted e-mail, may be read by third parties. We have no influence on this. It is the responsibility of the respective user to protect the data provided by him/her against misuse by means of encryption or in any other way.

 

16. Changes to this Privacy Policy       

      

We reserve the right to update this statement at any time if necessary.

 

17. Your rights

 

Here you will find your rights regarding your personal data. Details can be found in articles 7, 15-22 and 77 GDPR. In this regard, you can contact the controller (item 2) or the data protection officer (item 3).

 

a) Right to withdraw your data protection consent according to Art. 7(3) s. 1 GDPR

You can withdraw your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the legality of the processing before its withdrawal.

 

b) Right of access according to Art. 15 GDPR

You have the right to request confirmation whether we obtain personal data concerning you.

 

In this case you have the right to get information about your personal data as well as further information, e.g. the purposes of processing, categories of personal data concerned, the recipients and the planed period of storage or the criteria used to determine that period.

 

c) Right to obtain rectification and completion according to Art. 16 GDPR

You have the right to obtain the correction of incorrect data without delay. Taking into account the purposes of the processing, you have the right to obtain the completion of incomplete data.

 

d) Right to erasure ("right to be forgotten") according to Art. 17 GDPR

You have a right of erasure, as far as the processing is not necessary. This is the case, if your data is no longer necessary for the original purposes, for example if you have withdrawn your consent or if the data was processed unlawfully.  

           

e) Right restriction of processing according to Art. 18 GDPR

You have the right to obtain processing, e.g. if you believe that the personal data is incorrect.

 

f) Right to data portability according to Art. 20 GDPR

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

 

g) Right to object according to Art. 21 GDPR

You have the right to object at any time to the processing of certain personal data concerning you for reasons arising from your particular situation.

 

In the case of direct marketing, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of advertising; this also applies to profiling, insofar as it is associated with direct marketing.

 

h) Automated individual decision-making, including profiling according to Art. 22 GDPR

You have the right not to be subject to a decision based solely on automated processing - including profiling - except in the exceptional circumstances mentioned in Art. 22 GDPR.

 

A decision based solely on automated processing - including profiling - does not take place.

 

i) Right to lodge a complaint with a data protection supervisory authority according to Art. 77 GDPR

You can also lodge a complaint with a data protection supervisory authority at any time, for example if you believe that data processing is not in compliance with data protection regulations.

 

Competent supervisory authority:

Bavarian State Office for Data Protection Supervision       

PO Box 606   

91511 Ansbach         

Germany

Telephone: +49 (0) 981 53 1300

Telefax: +49 (0) 981 53 98 1300

E-mail: poststelle@lda.bayern.de