Data Protection Policy for Ten Brinke

I. Name and address of the Person Responsible

The controller in accordance with the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is:

Ten Brinke Group B.V.
Burgemeester van der Zandestraat 21
7051 CS Varsseveld (NL)
Telephone: +31 315 881 111

E-Mail: info@tenbrinke.com
Website: www.tenbrinke.com

II. Name and address of the Privacy Officer

The privacy officer of the responsible party is:
Nienhaus Information Systems in Rheinland UG
Represented by André Nienhaus
Roßmühle 23
46499 Hamminkeln
Tel: +49 2871 991 180.
E-Mail: info@n-inf.de
Website: www.n-inf.de

III. General Information about Data Processing
1. Scope of the Personal Data Processing

We collect and utilise your personal data only insofar as this is necessary for the provision of our content, services, and an operational website. The processing of personal data takes place only with the consent of the user or in those cases in which prior consent cannot be obtained for practical reasons and the processing of the data is permitted by legal regulations.

2. Legal Basis for Processing of Personal Data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.

In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.

3. Deletion of Data and Storage Time

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

IV. Provision of the Website and Creation of Logfiles
1. Description and Scope of Data Processing

Every time someone visits our website, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected:
1.1. Browser type and version
1.2. Operating system used
1.3. Internet service provider of the user
1.4. IP address
1.5. Date and time of access
1.6. Websites from which the user's system reached the lower webpage
1.7. Websites that you access from links on our website

The data is also stored in the log files of our system. Not affected by this are the IP addresses of the user or other data that enable the assignment of the data to a user. This data is not stored together with other personal data of the user.

2. Legal Basis for the Data Processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

3. Purpose of the Data Processing

The temporary storage of the IP address by the system is necessary to enable the delivery of the website to your computer. To this end, your IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the website's functionality. The data is also used to optimise the website and to ensure the security of our information technology systems. We do not evaluate this data for any marketing purposes.

For these purposes, our legitimate interest in data processing is based on Art. 6 para. 1 lit. f GDPR.

4. Duration of Storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case the data was collected in order to provide the website, it will be deleted once you end your session on our site.

Should any data be stored in log files, this will be deleted within seven days at the latest. Thus, it may be retained for a longer period. In this case, your IP addresses will be deleted or distorted so that the system can no longer identify you as the client accessing the site.

5. Possibility of Opposition and Elimination

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object to its collection.

V. Use of Cookies
1. Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored on or by your internet browser. If you visit a website, a cookie may be stored on your operating system. This cookie contains a distinctive character string that enables the unique identification of the browser when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the requesting browser be identifiable even after changing pages. These are, for example, the access data for closed areas of our website that require a log-in.

We also use cookies on our website to analyse users' web surfing behaviour. When accessing our website, you will be informed of the use of cookies for analytical purposes and your consent requested before processing any personal data in this context. Reference is also made to this Data Protection Declaration, in this context.

2. Legal Basis for the Data Processing

The legal basis for processing personal data is Art. 6 para. 1 lit.  c, Art. 6 para. 1 lit. a and Art. 6 para. 1 lit. f GDPR.

3. Purpose of the Data Processing

The purpose of using technically essential cookies is to simplify the use of websites for users. Not all functions can be offered without the use of cookies. The data collected by technically unnecessary cookies are used to improve the quality of our website and content. Therefore, we learn how the website is used and enables us to constantly optimise our offer.

For these purposes, our legitimate interest also lies in the processing of personal data according to Art. 6 para. 1 lit. f GDPR.

4. Duration of Storage, Possibility of Opposition and Elimination

Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, users have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, it is possible that you will no longer be able to use all of its features.
The transmission of Flash cookies cannot be prevented via browser settings. Rather, you must change the Flash Player settings.

VI. Consent Management through Usercentrics
1. Scope of the Personal Data Processing

We use the Usercentrics Consent Management Platform as a consent management tool in order to obtain and record all necessary consents from users of our website, for example for the analytics activities on our website.

The Usercentrics platform collects log file and consent data using JavaScript. This JavaScript makes it possible to inform the user about his consent to certain tags on our website and to obtain, manage, and document this.

The following data are processed:
1.1. Agreement data (so-called consent data, namely anonymized logbook data, consent ID, processor ID, controller ID, consent status, timestamp)
1.2. Data of the used devices (so-called device data, including abbreviated IP addresses, device information, timestamp)
1.3. User data (so-called user data, including email address, ID, browser information, setting IDs, changelog)

The ConsentID (contains the above-mentioned data), the consent status including time stamp are stored in the local memory of the browser of the visitor to our website and at the same time on the cloud servers used. Further processing only takes place if you submit a request for information or if you revoke your consent. In this case, the person responsible (that's us) is provided with the relevant information in a compact data format in an easily readable text form for the purpose of data exchange.

No user information is stored for the statistics on the use of the consent given or not. Only the frequency and location of the clicks are saved. The personal data is stored on a Google Cloud server based in the EU (Brussels, Frankfurt am Main).

2. Purpose of Data Processing

The purpose of the data processing is the analysis and management of the consents granted in order to meet our obligation of GDPR-compliant consent management. The use of Usercentrics serves the purpose of proofing granted and not granted consents as well as their administration. These purposes also include our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.

3. Legal Basis for the Data Processing

The legal basis for processing personal data is Art. 6 para. 1 lit. c and Art. 6 para. 1 lit. f GDPR.

4. Duration of Storage

The data will be deleted as soon as it is no longer needed for our purposes. The associated cookie has a duration of 60 days. On the one hand, the storage is based on our accountability in accordance with Art. 5 para. 2 GDPR. This obliges to comply with the processing of personal data according to the General Data Protection Regulation. The revocation receipt of a previously given consent will be kept in accordance with § 195 BGB. Claims against those responsible are subject to the regular statute of limitations according to § 195 BGB. This limitation period begins at the end of the year in which the claim arose (§ 199 BGB). As a result, the three-year limitation period begins at the end of 31.12. of the year in which you revoked your consent and ends three years later on 31.12, at 12.00pm.

5. Right Possibility of Opposition and Elimination

The function can be switched on and off in our "Privacy Settings" by ticking the checkbox.

VII. Newsletter dispatch via CleverReach
1. Scope of Personal Data Processing

Our e-mail newsletters are distributed via the technical service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede ("CleverReach"), to whom we pass on the data provided by the user when registering for the newsletter. The data you provide (e.g. your email address) in order to subscribe to our newsletter will be stored on CleverReach servers in Germany.

CleverReach uses this information to send and statistically analyse the newsletter on our behalf. For the analysis, the emails sent contain so-called web beacons or tracking pixels, these are one-pixel files, which are stored on our website. This allows us to determine if a newsletter message has been opened and which links, if any, you clicked on. In addition, so-called "conversion tracking" can be used to analyse whether a pre-defined action has taken place after a link in the newsletter has been clicked. Technical information (e.g. time of access, IP address, browser type and operating system) is collected as well. The data are collected using only pseudonyms and are not linked to any further personal data of yours; direct association with information related to your personal identity is impossible. This data is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to ensure that the content of future newsletters matches the interests of the recipients better

2. Legal Basis for Processing of Personal Data

The legal basis for processing the personal data of users is Art. 6 para. 1 lit. f DSGVO.

3. Purpose of the Data Processing

The passing on of the personal data of the users enables us to use a promotionally effective, secure and user-friendly newsletter system, which can be optimised.

For these purposes, we have a legitimate interest in data processing is based on Art. 6 Abs. 1 lit. f GDPR by anonymising the IP address, users' interest in protecting their personal data is sufficiently taken into account.

4. Duration of Storage

As shown above, the IP address is anonymised as soon as possible. Any other use, combination with other data or disclosure to third parties will not take place.

5. Possibility of Opposition and Elimination

You can object to the data processing described above at any time by unsubscribing from the newsletter.

VIII. Newsletter
1. Description and Scope of Data Processing

You can subscribe to a free newsletter on our website. When registering, the data from the input mask are transmitted to us, at least the following information:
1.1. Salutation
1.2. First name
1.3. Surname
1.4. E-mail address

The following data is also stored at the time the message is sent:
1.5. IP address of the user
1.6. Date and time of registration

For the processing, the consent of the user is obtained during the registration process and reference is made to this data protection declaration, which also contains the specific consent text below.

In connection with the data processing for the dispatch of newsletters, the data is not passed on to third parties. The data will be used exclusively for sending the newsletter.

2. Legal Basis for the Data Processing

The legal basis for the processing of personal data after registering for the newsletter is the art. 6 Para. 1 lit. a GDPR.

3. Purpose of the Data Processing

The purpose of collecting the user's data is to deliver the newsletter. The processing of other personal data during the sending process is done for the purpose of preventing the abuse of the contact form and ensuring the security of our information technology systems.

4. Duration of Storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Therefore, the user's email address will be stored for as long as the newsletter subscription is active.

5. Possibility of Opposition and Elimination

You may cancel your subscription to the newsletter at any time. A relevant link can be found in any newsletter for this purpose. This also allows for the withdrawal of consent to the storage of personal data collected during the subscription process.

IX. Contact Form and E-Mail-Contact
1. Description and Scope of Data Processing

If there are contact forms on our website that can be used for electronic contact and a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. Depending on the form selected, these data are usually:
1.1. Name
1.2. Company
1.3. Postal code
1.4. Location
1.5. Address
1.6. Phone number
1.7. E-mail address
1.8. Data protection checkbox

The following data is also stored at the time the message is sent:
1.9. IP address of the user
1.10. Date and time of registration

For the processing, the consent of the user is obtained during the registration process and reference is made to this data protection declaration, which also contains the specific consent text below.

Alternatively, you may contact us via the provided email address. In this case, the user's personal data that is transmitted along with the email will be stored.

This data will not be disclosed to third parties in this context. The data will be used exclusively for processing the conversation.

2. Legal Basis for the Data Processing

The legal basis for the processing of the data if your consent has been obtained is Art. 6 para. 1 lit. a GDPR.

The legal basis for the processing of data that are transmitted by e-mail is Art. 6 para. 1 lit.  f GDPR. If the e-mail contact is aimed at concluding a contract, then the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

3. Purpose of the Data Processing

The processing of personal data from the input mask is used by us only for processing the contact request. In the event that a contact request is done by email, this also constitutes the necessary legitimate interest in processing the data. The processing of other personal data during the sending process is done for the purpose of preventing the abuse of the contact form and ensuring the security of our information technology systems.

4. Duration of Storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data that was taken from the contact form input mask and data that was sent by email, this is the case when the respective conversation with the user has been completed. The conversation is considered to have ended when it is evident from the circumstances that the matter at hand has been conclusively resolved.
Personal data that was additionally collected during the sending procedure will be deleted at the latest after a period of seven days.

5. Possibility of Opposition and Elimination

The user has the option of revoking his or her consent to the processing of personal data, at any time. If you contact us by email, you may object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.
Users can withdraw their consent and object to the data storage verbally, in writing or by email.
In such cases, all personal data that was stored when you made contact with us will be deleted.

X. Web analytics by Google Analytics 4 (GA 4)

1. Scope of the processing of personal data

We use Google Analytics 4 on our website to analyze the surfing behavior of our users. The software uses a pseudonymous user identification number that does not contain any unique data such as names or e-mail addresses in order to be able to assign analysis information to an end device. If individual pages of our website are called up, the following events, among others, are recorded:
1.1. which contents were called up
1.2. how often content was accessed
1.3. how the content was interacted with
1.4. which search terms were used
1.5. time of use and its duration
1.6. sources of the users
1.7. technical information of the end devices and browsers

Google Analytics 4 receives and processes user data via domains and servers within the EU before the traffic is forwarded to Analytics servers for processing. The IP address of users is not logged or stored. This means that the user's IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. The IP address transmitted by the user's browser will not be merged with any other data held by Google. https://support.google.com/analytics/answer/12017362?hl=en&ref_topic=2919631

The USA is classified as a country whose level of data protection does not meet the standards in the European Union. There is also no adequacy decision by the EU Commission that assesses the level of data protection in the USA as adequate. In particular, there is a risk that data may be processed by US authorities, for control and monitoring purposes, and that you may not have adequate means of redress.

2. Legal baisis for the Processing of personal data

The legal basis for the processing of personal data is Article 6(1)(a) DSGVO and Article 49(1)(a) DSGVO.

3. Purpose of data processing

The processing of users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness.

4. Duration of storage

With Google Analytics 4, a maximum retention period of 14 months can be set for data. https://support.google.com/analytics/answer/7667196?hl=en

5. Possibility of objection and elimination

https://tools.google.com/dlpage/gaoptout?hl=en

XI. Google Maps
1. Description and Scope of Data Processing

We use Google Maps (API) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website. Google Maps is a web service for displaying interactive (terrestrial) maps in order to represent geographical information visually. By using this service, users can see our location or that of our partners, for example, and make it easier to get there.

As soon as you open sub-pages in which maps of Google Map is integrated, information about your use of our website (such as your IP address) is transmitted to a Google server in the USA and stored there. This takes place regardless of whether Google provides a user account via which you are logged in or no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your Google profile, you must first log out before activating the button. Google saves your data (even for users who are not logged in) as a usage profile and analyses it.

2. Legal Basis for the Processing of Personal Data

The legal basis for processing personal data is Art. 6 para. 1 lit. a GDPR as well Art. 49 para. 1 lit. a GDPR.

3. Purpose of the Data Processing

Our purpose is to integrate a dynamic map into our website.

4. Duration of Storage

According to its own information, the log data collected by Google is anonymised by deleting part of the IP address and the cookie information after 9 and 18 months respectively. Users can find more information here.

5. Possibility of Opposition and Elimination

If you do not agree to the future transmission of your data to Google in connection with your use of Google Maps, it is also possible to completely deactivate the Google Maps web service by switching off the JavaScript application in your browser. In that case, Google Maps and the map display on this website cannot be used.

XII. Operation of a Facebook Page
1. Description and scope of the data processing

When you visit our Facebook page, two companies collect personal data: us and Facebook; which is operated in Europe by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Facebook and we are jointly responsible for collecting personal data from visitors to our Facebook page. Facebook uses this data in accordance with its own data protection declaration, including for analysis services that are made available to us, so-called page insights. Such data collection by Facebook can also take place from visitors to the Facebook page who are not logged in or registered with Facebook. Visitors can find information about data collection and further processing by Facebook in Facebook's data protection information.

We cannot understand which user data Facebook collects. We also do not have full access to the recorded data or profile data. We can only see the public information of the profiles. Individuals registered with Facebook decide which these are in their respective Facebook settings. In addition, people registered on Facebook have the option of actively hiding “Likes” in their Facebook settings or in no longer following our Facebook page. Then the profile will no longer appear in the list of fans on our Facebook page.

We receive anonymous statistics on the use and usage of the page from Facebook. The following information is provided here, for example:

  • Number of people who follow us - including growth and development over a defined time frame.
  • Number of people who see a contribution.
  • Number of interactions on a post. For example, from this, it can differentiate which content is better received than others.
  • When advertisements are placed, we receive evaluations of the advertisements.
  • Demographic characteristics related to the average age of visitors, gender, place of residence, language.

We also receive personal data via Facebook if users use a form with fields filled out in advance with data from their profile to transmit the data to us and actively send the data to us by clicking a button.

Finally, we receive personal data when users comment on or share our posts.

2. Legal Basis for the Data Processing

The legal basis for processing personal data is Art. 6 para. 1 lit.  a GDPR as well Art. 49 para. 1 lit. a GDPR.

3. Purpose of the Data Processing

We use the statistics, from which we cannot draw any conclusions about individual users, to continuously improve our online offer on Facebook and to better respond to the interests of our visitors. We cannot link the statistical data with the profile data of our fans. People registered with Facebook can use their Facebook settings to decide in which form targeted advertising is shown to them.

We use the data when using the chat function to answer the request. The sales and customer care information collected in this way is used to establish contact in order to submit the desired information and offers.

4. Duration of Storage, Possibility of Opposition and Elimination

Cookies are stored on the user's device and transmitted to Facebook by the user. Therefore, users have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies for Facebook are deactivated, it is possible that you will no longer be able to use all of its features.

XIII. Operating a YouTube Page
1. Description and Scope of Data Processing

When you visit our YouTube page, two companies collect personal data: us and YouTube; which is operated in Europe by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google is responsible for collecting personal data from visitors, for example through the use of cookies. Such data collection by Google can also take place from visitors to the YouTube page who are not logged in or registered with YouTube. Visitors can find information about data collection and further processing by Google in the YouTube privacy policy.

We cannot understand which user data Google collects. We also do not have full access to the recorded data or profile data. We can only see the public information of the profiles. Individuals registered with YouTube decide which these are in their respective settings. In addition, people registered with YouTube have the option to actively hide “likes” in their settings or to no longer follow our YouTube page. Then the profile will no longer appear in the list of fans on our page.

We receive anonymous statistics from Google on the use and usage of the page. The following information is provided here, for example:

  • Number of people who follow us - including growth and development over a defined time frame.
  • Number of people who see a contribution.
  • Number of interactions on a post. For example, from this, it can differentiate which content is better received than others.
  • When advertisements are placed, we receive evaluations of the advertisements.
  • Demographic characteristics related to the average age of visitors, gender, place of residence, language.

We also receive personal data via Facebook if users use a form with fields filled out in advance with data from their profile to transmit the data to us and actively send the data to us by clicking a button.

Finally, we receive personal data when users comment on or share our posts.

2. Legal Basis for the Data Processing

The legal basis for processing personal data is Art. 6 para. 1 lit. a GDPR as well Art. 49 para. 1 lit. a GDPR.

3. Purpose of the Data Processing

We use the statistics, from which we cannot draw any conclusions about individual users, to constantly improve our online offer on YouTube and to better respond to the interests of our visitors. We cannot link the statistical data with the profile data of our fans. People registered with YouTube can use their settings to decide in which form targeted advertising is shown to them.

We use the data when using the chat function to answer the request. The sales and customer care information collected in this way is used to establish contact in order to submit the desired information and offers.

4. Duration of Storage, Possibility of Opposition and Elimination

Cookies are stored on the user's computer and transmitted by the user's computer to Google. Therefore, users have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies for Google are deactivated, it is possible that you will no longer be able to use all of our website features.

XIV. Operation of an Instagram Page
1. Description and Scope of Data Processing

When you visit our Instagram page, two companies collect personal data: us and Instagram; which is operated in Europe by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Facebook and we are jointly responsible for collecting personal data from visitors to our Facebook page. Facebook uses this data in accordance with its own data protection declaration, including for analysis services that are made available to us, so-called page insights. Such data collection by Facebook can also take place from visitors to the Facebook page who are not logged in or registered with Facebook. Visitors can find information about data collection and further processing by Facebook in Facebook's data protection information.

We cannot understand which user data Facebook collects. We also do not have full access to the recorded data or profile data. We can only see the public information of the profiles. Individuals registered with Facebook decide which these are in their respective Facebook settings. In addition, people registered on Facebook have the option of actively hiding “Likes” in their Facebook settings or in no longer following our Facebook page. Then the profile will no longer appear in the list of fans on our Facebook page.

We receive anonymous statistics on the use and usage of the page from Facebook. The following information is provided here, for example:

  • Number of people who follow us - including growth and development over a defined time frame.
  • Number of people who see a contribution.
  • Number of interactions on a post. For example, from this, it can differentiate which content is better received than others.
  • When advertisements are placed, we receive evaluations of the advertisements.
  • Demographic characteristics related to the average age of visitors, gender, place of residence, language.

We also receive personal data via Facebook if users use a form with fields filled out in advance with data from their profile to transmit the data to us and actively send the data to us by clicking a button.

Finally, we receive personal data when users comment on or share our posts.

2. Legal Basis for the Data Processing

The legal basis for processing personal data is Art. 6 para. 1 lit. a GDPR as well Art. 49 para. 1 lit. a GDPR.

3. Purpose of the Data Processing

We use the statistics, from which we cannot draw any conclusions about individual users, to continuously improve our online offer on Facebook and to better respond to the interests of our visitors. We cannot link the statistical data with the profile data of our fans. People registered with Facebook can use their Facebook settings to decide in which form targeted advertising is shown to them.

We use the data when using the chat function to answer the request. The sales and customer care information collected in this way is used to establish contact in order to submit the desired information and offers.

4. Duration of Storage, Possibility of Opposition an Elemination

Cookies are stored on the user's device and transmitted to Facebook by the user. Therefore, users have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies for Facebook are deactivated, it is possible that you will no longer be able to use all of its features.

XV. Operating a LinkedIn Page
1. Description and Scope of Data Processing

When you visit our LinkedIn page, two companies collect personal data; us and LinkedIn; which is operated in Europe by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

LinkedIn and we are jointly responsible for collecting personal data from visitors to our LinkedIn page. LinkedIn uses this data in accordance with its own data protection declaration, including for analysis services that are made available to us. Such data collection by LinkedIn can also take place from visitors to the LinkedIn page who are not logged in or registered with LinkedIn. Visitors can find information about data collection and further processing by LinkedIn in LinkedIn's privacy policy.

We cannot understand which user data LinkedIn collects. We also do not have full access to the recorded data or profile data. We can only see the public information of the profiles. Individuals registered with LinkedIn decide on which these are in their respective LinkedIn settings.

We receive anonymous statistics from LinkedIn on the use and usage of the page. The following information is provided here, for example:

  • Number of people who see a contribution.
  • Number of interactions on a post. For example, from this, it can differentiate which content is better received than others.
  • Number of people who follow us - including growth and development over a defined time frame.
  • When advertisements are placed, we receive evaluations of the advertisements.
  • Demographic characteristics related to the average age of visitors, gender, place of residence, language.

We also receive personal data via LinkedIn if users use a form with fields filled out in advance with data from their profile to transmit the data to us and actively send the data to us by clicking a button. Finally, we receive personal data when users comment on or share our posts.

2. Legal Basis for Data processing

The legal basis for the processing of the users' personal data is Art. 6, para. 1 lit. f GDPR.

3. Purpose of Data Processing.

We use the statistics, from which we cannot draw any conclusions about individual users, to constantly improve our online offer on LinkedIn and to better respond to the interests of our visitors. We cannot link the statistical data with the profile data of our fans. Persons registered with LinkedIn can use their LinkedIn settings to decide in which form targeted advertising is displayed to them.

We use the data when using the chat function to answer the request. The sales and customer care information collected in this way is used to establish contact in order to submit the desired information and offers.

4. Duration of Storage, Possibility of Opposition an Elemination

Cookies are stored on the user's device and transmitted to LinkedIn by the user. Therefore, users have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies for LinkedIn are deactivated, it is possible that you will no longer be able to use all of our website features.

XVI. Operating a XING page
1. Description and Scope of Data Processing

When you visit our XING page, two companies collect personal data, namely us and XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

XING and we are jointly responsible for collecting personal data from visitors to our page. XING uses this data in accordance with its own data protection declaration, including for analysis services that are made available to us.

Such data collection by Xing can also take place from visitors to the Xing page who are not logged in or registered with Xing. Visitors can find information about data collection and further processing by Xing in Xing´s privacy policy.

We cannot understand which user data Xing collects. We also do not have full access to the recorded data or profile data. We can only see the public information of the profiles. Individuals registered with Xing decide on which these are in their respective Xing settings.

We receive anonymous statistics from Xing on the use and usage of the page. The following information is provided here, for example:

  • Number of people who follow us - including growth and development over a defined time frame.
  • Number of people who see a contribution. Number of interactions on a post. For example, from this, it can differentiate which content is better received than others.
  • When advertisements are placed, we receive evaluations of the advertisements.
  • Demographic characteristics related to the average age of visitors, gender, place of residence, language.

We also receive personal data via LinkedIn if users use a form with fields filled out in advance with data from their profile to transmit the data to us and actively send the data to us by clicking a button. Finally, we receive personal data when users comment on or share our posts.

Finally, we receive personal data when users comment on or share our posts.

2. Legal Basis for the Data Processing

The legal basis for processing personal data is Art. 6 para. 1 lit. f GDPR .

3. Purpose of the Data Processing

We use the statistics, from which we cannot draw any conclusions about individual users, to constantly improve our online offer on LinkedIn and to better respond to the interests of our visitors. We cannot link the statistical data with the profile data of our fans. Persons registered with LinkedIn can use their LinkedIn settings to decide in which form targeted advertising is displayed to them.

We use the data when using the chat function to answer the request. The sales and customer care information collected in this way is used to establish contact in order to submit the desired information and offers.

4. Duration of Storage, Possibility of Opposition and Elimination

Cookies are stored on the user's device and transmitted to Xing by the user. Therefore, users have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies Xing are deactivated, it is possible that you will no longer be able to use all of our website features.

XVII. Rights of the Data Subjects

If your personal data is processed, you are a data subject in the sense of GDPR and you have the following rights vis-à-vis the person responsible, whereby the following list includes all your rights, not just the rights that arise when using our services:

1. Right to information

You can ask the person in charge to confirm whether personal data concerning you will be processed by us.

If such processing has taken place, you can request the following information from the person responsible:
1.1. Purposes of processing of personal data;
1.2. Categories of personal data which are being processed;
1.3. Recipients or categories of recipients to whom your personal data has been or will be disclosed;
1.4. The planned storage duration of your personal data or, if specific information in that regard is not possible, criteria for determining the storage period;
1.5. The existence of any right to correct or delete your personal data or restrict or object to is further processing by us;
1.6. The right to lodge a complaint with a supervisory authority;
1.7. Any available information as to the source of the personal data, where the personal data are not collected from the data subject;
1.8. The existence of automated decision-making includes profiling in accordance with Art. 22 Par. 1 and 4 GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.

2. Right of Correction

You have a right of correction and/or completion vis-à-vis the data controller if the personal data processed concerning you is incorrect or incomplete. The person responsible shall make the correction without delay.

3. Right to Limitation of Processing

You can request the restriction of the processing of personal data concerning you under the following conditions:
3.1. When the user disputes the accuracy of the personal data concerning you for a period of time that enables the data controller to verify the accuracy of the personal data;
3.2. The processing is unlawful and the user refuses to delete the personal data and instead requests that the use of the personal data be restricted;
3.3. The controller no longer needs the personal data for the purposes of the processing, but you do need them to assert, exercise or defence of legal claims; or
3.4. When the user filed an objection to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons for the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.

If the processing restriction has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

4. Right of Deletion
4.1 Obligation to Delete

You may request the data controller to delete your personal data relating to you immediately and the data controller is obliged to delete such data immediately if one of the following reasons applies.
4.1.1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
4.1.2. You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for processing.
4.1.3. You file an objection against the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21 para. 2 GDPR.
4.1.4. The personal data concerning the users have been unlawfully processed.
4.1.5. The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.
4.1.6. The personal data concerning you have been collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.

4.2. Information to Third Parties

If the data controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.

4.3. Exemptions

The right to deletion does not exist insofar as the processing is necessary:
4.3.1. On the exercise of freedom of expression and information;
4.3.2. For the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
4.3.3. For reasons of public interest in the field of public health pursuant with Art. 9 para. 2 lit h and i and Art. 9 para. 3 GDPR;
4.3.4. For archival purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as the law referred to under a) is likely to make it impossible or seriously impair the attainment of the objectives of such processing; or
4.3.5. For asserting, exercising, or defending legal claims.

5. Right to Information

If you have exercised your right to have the data controller correct, delete or limit the processing, he/she is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.

The person responsible shall have the right to be informed of such recipients.

6. Right to Data Transferability

You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format. In addition, you have the right to pass this data on to another person in charge without obstruction by the person in charge to whom the personal data was provided, provided that
6.1. Processing is based on a consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
6.2. Processing is carried out using automated methods.

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.

7. Right to Object

You have the right to object at any time for reasons arising from your particular situation to the processing of your personal data in accordance with Art. 6 Para. 1 lit. e or f GDPR; the same applies to profiling based on these provisions.

The data controller no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweighs your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data that concerns you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct advertising.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility to exercise your right of objection in connection with the use of Information Society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

8. Right to Revoke the Data Protection Declaration of Consent

You have the right to revoke your data protection declaration of consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until revocation.

9. Automated Decisions in Individual Cases, including Profiling

You have the right not to be subject to a decision based exclusively on automated processing – including profiling – that has legal effect against you or significantly impairs you in a similar manner. This shall not apply if the decision:
9.1. Is necessary for the conclusion or performance of a contract between you and the person responsible,
9.2. Is admissible by law of the Union or of the Member States to which the person responsible is subject and that law contains appropriate measures to safeguard your rights, freedoms and legitimate interests, or
9.3. Is made with your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedom as well as your legitimate interests.

In the cases referred to in (1) and (3), the person responsible shall take reasonable measures to safeguard your rights, freedoms, and legitimate interests, including at least the right to obtain the intervention of a person by the person responsible, to state his own position and to challenge the decision.

10. Right to Appeal to a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR.

The supervisory authority with which the appeal has been filed shall inform the appellant of the status and results of the appeal, including the possibility of a judicial remedy under Art. 78 of the GDPR.

XVIII Consents (Consent Texts)
1. Contact Form

I agree that my data entered in the input mask will be processed for the purpose of answering my contact request, whereby the processing according to Art. 4 Nr. 2 of the GDPR, any operation or set of operations that is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

2. Newsletter

I agree that my data entered in the input mask will be processed for the purpose of sending a newsletter, whereby the processing according to Art. 4 Nr. 2 of the GDPR, any operation or set of operations that is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.