The protection of your personal data when visiting our website is very important to us. Your data is protected in accordance with the applicable statutory provisions. Below, we would like to inform you about the nature and scope of the processing of personal data via this website pursuant to Article 13 of the General Data Protection Regulation (GDPR).

Details of the Controller

ecom GmbH
Am großen Teich 2
58640 Iserlohn
Germany

Tel.: +49 2371/945 5
E-Mail: in**@**om.de
Website: www.ecom.de

Information about the Data Protection Officer

If you have any questions regarding data protection, our external Data Protection Officer for company data protection will be happy to assist you:

Mr  Arndt Halbach of GINDAT GmbH
Wetterauer Str. 6, 42897 Remscheid
Mail: da*********@****at.de
Tel. +49 2191 / 909 430

Data Processing via the Website

Your visit to our website is logged. Initially, the following data, which your browser transmits to us, is essentially recorded:

• the IP address currently used by your computer or router
• date and time
• browser type and version
• the operating system of your computer
• the pages you have viewed
• name and size of the requested file(s)
• and, where applicable, the URL of the referring website.

This data is collected solely for the purposes of data security, improving our website and error analysis on the basis of Art. 6(1)(f) GDPR. We reserve the right to use this data in the event of system misuse in order to determine the reasons for and the cause of such misuse and, where necessary, to initiate legal action. Otherwise, the IP address of your computer is evaluated only in anonymized form, shortened by the last three digits.

You can visit our website without providing any personal information.

Please note that data transmission over the internet, for example when communicating by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible. Confidential data should therefore be sent to us by another means, for example by post.

Applications

The controller processes the personal data of applicants for the purpose of handling the application process. The legal basis is Section 26(1), sentence 1 of the German Federal Data Protection Act (BDSG). Processing may also take place electronically. This is particularly the case if an applicant submits the relevant application documents to the controller by electronic means, for example by email or via a web form on the website.

If the controller enters into an employment contract with an applicant, the submitted data will be stored for the purpose of managing the employment relationship in compliance with the statutory provisions. If the controller does not enter into an employment contract with the applicant, the application documents will be deleted after the advertised position has been filled, taking into account the statutory provisions, unless deletion conflicts with any other legitimate interests of the controller. Another legitimate interest in this context may, for example, be an obligation to provide evidence in proceedings under the German General Equal Treatment Act (AGG). For this purpose, the data will be stored for 6 months after completion of the application process and then deleted.

If you have consented to being included in our talent pool, we will also store your data in order to consider your application data for future job vacancies within our company. For this purpose, we will store your data for 12 months and delete it thereafter. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

Applications can only be processed by us if they are sent to the email address “be*******@********nn.de” or submitted via our application portal. If you use another email address of our company, your application will unfortunately not be recognized by our systems and therefore cannot be considered. Please bear in mind that email is not a secure medium. Once your application reaches our email server at the above-mentioned email address, we protect your application using high-level technical and organizational measures. However, while your application is being transmitted to our company via the public internet, we have no influence over this process and cannot guarantee the level of protection for your application. If your sending email server supports STARTTLS, our email server will also use STARTTLS, thereby ensuring transport encryption.

Contact

Personal data, such as your name, address details or contact details, which you provide to us voluntarily, for example in the context of an inquiry or in any other way, will be stored by us and processed only for correspondence with you and only for the purpose for which you provided us with this data. This data is processed on the basis of our legitimate interest in responding promptly to inquiries from interested parties pursuant to Art. 6(1)(f) GDPR.

Registration

You may register on our website in order to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration. In the event of important changes, for example regarding the scope of the offer or technically necessary changes, we will use the email address provided during registration to inform you accordingly.

The data entered during registration is processed on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw any consent you have given at any time. An informal notification by email to us is sufficient for this purpose. The legality of data processing already carried out remains unaffected by the withdrawal. The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.

Secure Data Transmission

To protect the security of your data during transmission, we use state-of-the-art encryption technology, namely SSL via HTTPS.

Encrypted Payment Transactions on this Website

If, after concluding a paid contract, you are required to provide us with your payment details, such as your account number in the case of a direct debit authorization, this data is required for payment processing. Payment transactions using common payment methods, such as Visa/MasterCard or direct debit, are carried out exclusively via an encrypted SSL or TLS connection.

You can recognize an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by the lock symbol in your browser bar. With encrypted communication, the payment data you transmit to us cannot be read by third parties.

Processing of Data: Customer and Contract Data

We process personal data only to the extent necessary for the establishment, content-related structuring or modification of the legal relationship, known as inventory data. This is carried out on the basis of Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

We process personal data concerning the use of our website, known as usage data, only to the extent necessary to enable the user to make use of the service or to invoice for it. The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data Transfer upon Conclusion of a Contract for Services and Digital Content

We transfer personal data to third parties only if this is necessary within the scope of contract processing, for example to companies entrusted with the delivery of goods or to the financial institution responsible for payment processing. No further transfer of data takes place, or only if you have expressly consented to such transfer. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

PayPal

On our website, we offer payment via PayPal, among other options. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, hereinafter referred to as “PayPal”. If you choose payment via PayPal, the payment data you enter will be transmitted to PayPal. Your data is transmitted to PayPal on the basis of Art. 6(1)(b) GDPR, processing for the performance of a contract.

Further information on data collection by PayPal can be found here:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Sofort Bank Transfer

On our website, we offer payment by “Sofort bank transfer”, among other options. The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany, hereinafter referred to as “Sofort GmbH”. With the “Sofort bank transfer” procedure, we receive a real-time payment confirmation from Sofort GmbH and can immediately begin fulfilling our obligations.

If you have chosen the “Sofort bank transfer” payment method, you transmit the PIN and a valid TAN to Sofort GmbH, which enables Sofort GmbH to log in to your online banking account. After logging in, Sofort GmbH automatically checks your account balance and carries out the transfer to us using the TAN you have provided. It then immediately sends us a transaction confirmation.

After logging in, your transactions, the credit limit of your overdraft facility and the existence of other accounts, as well as their balances, are also checked automatically. In addition to the PIN and TAN, the payment data entered by you as well as personal data about you are transmitted to Sofort GmbH. This personal data includes your first and last name, address, telephone number(s), email address, IP address and, where applicable, further data required for payment processing.

The transmission of this data is necessary in order to establish your identity beyond doubt and to prevent attempted fraud. Your data is transmitted to Sofort GmbH on the basis of Art. 6(1)(a) GDPR, consent, and Art. 6(1)(b) GDPR, processing for the performance of a contract. You have the option to withdraw your consent to data processing at any time. Such withdrawal does not affect the validity of data processing operations carried out in the past.

Details on payment by Sofort bank transfer can be found at the following links:

https://www.klarna.com/de/datenschutz/ 

und

https://www.klarna.com/sofort/

Recipients of Personal Data

In order to carry out and process data processing operations, we may use service providers as processors.

Specifically, we have engaged service providers for our applicant portal and for the hosting of our website.

The contractual relationships with our service providers are governed by the provisions of Art. 28 GDPR and include the legally required provisions on data protection and data security.

Data Collection by Google Analytics

Diese Website benutzt Google Analytics, einen Webanalysedienst der Google Ireland Ltd. („Google“), Gordon House, Barrow Street, Dublin 4, Irland, Tel: +353 1 543 1000, Fax: +353 1 686 5660.

This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, Tel.: +353 1 543 1000, Fax: +353 1 686 5660.

Google Analytics uses cookies that enable an analysis of the use of our websites. The information collected by the cookies about your use of this website is generally transmitted to a Google server in the USA and stored there.

We use Google Signals. This allows Google Analytics to collect additional information about users who have enabled personalized ads, such as interests and demographic data. Ads may also be delivered to these users in cross-device remarketing campaigns.

In Google Analytics 4, IP anonymization is enabled by default. Due to IP anonymization, your IP address is shortened by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

During your visit to the website, your user behavior is recorded in the form of “events”. Events may include:

• Page views
• First visit to the website
• Start of the session
• Web pages visited
• Your “click path”, interaction with the website
• Scrolls, whenever a user scrolls to the end of the page, 90%
• Clicks on external links
• Internal search queries
• Interaction with videos
• File downloads
• Ads viewed or clicked
• Language setting

The following information is also recorded:

• Your approximate location, region
• Date and time of the visit
• Your IP address, in shortened form
• Technical information about your browser and the devices you use, such as language setting and screen resolution
• Your internet service provider
• The referrer URL, meaning the website or advertising medium through which you came to this website

Google will use this information to evaluate your pseudonymous [NOT WHEN USING USER ID] use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and to improve our services for our customers.

Possible recipients of your data are Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as processor pursuant to Art. 28 GDPR, as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

On July 10, 2023, the European Commission adopted its adequacy decision for the USA. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and data transfer to third countries, for example Singapore, cannot be completely ruled out, we have also concluded the EU-Standardvertragsklauseln with the provider.

The data sent by us and linked to cookies is automatically deleted after 2 [OR: 14 months]. The maximum lifetime of Google Analytics cookies is 2 years. Data whose retention period has been reached is automatically deleted once a month.

The legal basis for this data processing is your consent pursuant to Art. 6(1), sentence 1, lit. a GDPR and Section 25(1), sentence 1 TDDDG.

Sie können Ihre Einwilligung jederzeit mit Wirkung für die Zukunft widerrufen, indem Sie die Cookie-Einstellungen aufrufen und dort Ihre Auswahl ändern. Die Rechtmäßigkeit der aufgrund der Einwilligung bis zum Widerruf erfolgten Verarbeitung bleibt davon unberührt.

You may withdraw your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. The legality of processing carried out on the basis of consent before its withdrawal remains unaffected.

You can also prevent the storage of cookies from the outset by selecting the appropriate settings in your browser software. However, if you configure your browser to reject all cookies, the functionality of this and other websites may be restricted. You can also prevent the collection of data generated by the cookie and related to your use of the website, including your IP address, by Google, as well as the processing of this data by Google, by

1. not granting your consent to the setting of the cookie, or
   b. downloading and installing the browser add-on to deactivate Google Analytics here: https://tools.google.com/dlpage/gaoptout?hl=de

Further information on the terms of use of Google Analytics and on data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, please note that in this case you may not be able to use all functions of this website to their full extent.

Google Web Fonts

This section may be removed if fonts are integrated locally.

This site uses so-called web fonts provided by Google for the uniform display of fonts. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel.: +353 1 543 1000, Fax: +353 1 686 5660, Email: su*****************@****le.com. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google Web Fonts can be found in Google’s privacy policy:

https://www.google.com/policies/privacy/

Google-reCAPTCHA

On this website, we use the reCAPTCHA function provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to determine whether an input is made by a natural person or abusively by machine-based and automated processing. The service includes the transmission of the IP address and, where applicable, other data required by Google for the reCAPTCHA service to Google. This service is used on the basis of our legitimate interest in preventing misuse and spam. The legal basis is Art. 6(1)(f) GDPR.

When using Google reCAPTCHA, personal data may also be transmitted to servers of Google LLC in the USA.

Further information on Google reCAPTCHA and Google’s privacy policy can be found at:

https://www.google.com/intl/de/policies/privacy/

Further information on Google reCAPTCHA and Google’s privacy policy can be found at:

https://www.google.com/intl/de/policies/privacy/

Instagram

The controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform and enables users to share photos and videos, as well as to redistribute such data on other social networks.

The operating company of Instagram’s services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

When one of the individual pages of our website on which an Instagram component, such as the Instagram button, has been integrated is accessed, the internet browser of the data subject is automatically prompted to download a representation of the corresponding Instagram component from Instagram. As part of this technical process, Instagram becomes aware of the specific subpage of our website visited by the data subject.

If the data subject is logged into Instagram at the same time, Instagram may associate the visit to our website with the data subject’s Instagram account. This information is collected by the Instagram component and linked to the data subject’s Instagram account. If the data subject clicks an Instagram button on our site, this data is transmitted directly to Instagram and linked to the data subject’s Instagram profile. Instagram stores and processes this data in accordance with its own privacy policy.

The use of Instagram components and the associated data processing take place on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by changing the cookie settings.

It is possible that personal data may be transmitted to Meta Platforms, Inc. in the USA. The USA is considered a third country without an adequate level of data protection. However, the transfer is based on Standard Contractual Clauses approved by the EU Commission in order to ensure the protection of your data, Art. 46(2)(c) GDPR.

To prevent Instagram from associating the data collected through your visit to our website with your Instagram account, please log out of your Instagram account before visiting our website.

WhatsApp

The controller has integrated services of the software solution provided by Messenger People GmbH, Herzog-Heinrich-Str. 9, 80336 Munich, Germany, on this website within the framework of a data processing agreement. The WhatsApp API is used for this service. We process the telephone number, the WhatsApp profile name and/or the name for communication purposes within the scope of support. The legal basis for the processing is Art. 6(1)(a) GDPR, your consent.

By starting a WhatsApp chat with the ecom company account, you consent to being contacted by an ecom employee. The legal basis for the processing is Art. 6(1)(a) GDPR, your consent. You may withdraw your consent at any time by sending the message “Widerruf / Revocation” by email to ds*@**om.de.

For communication, we use, among other things, the instant messaging service WhatsApp. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Communication takes place via end-to-end encryption, peer-to-peer, which prevents WhatsApp or other third parties from accessing the communication content. WhatsApp has access to metadata generated during the communication process, such as sender, recipient and time.

The controller further points out that, according to WhatsApp, WhatsApp shares personal data of its users with its parent company Meta, which is based in the USA. Further details on data processing can be found in WhatsApp’s privacy policy at: https://www.whatsapp.com/legal/#privacy-policy.

The use of WhatsApp is based on our legitimate interest in the fastest and most effective communication possible with customers, interested parties and other business and contractual partners, Art. 6(1)(f) GDPR. If corresponding consent has been requested, data processing takes place exclusively on the basis of this consent and may be withdrawn at any time with effect for the future.

The communication content exchanged between and on WhatsApp remains with us until you request us to delete it, withdraw your consent to storage or the purpose for data storage no longer applies, for example after your inquiry has been fully processed. Mandatory statutory provisions, in particular retention periods, remain unaffected.

We use WhatsApp in the “WhatsApp Business” version. Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found here: https://www.whatsapp.com/legal/business-data-transfer-addendum.

We have configured the ecom company account so that it does not perform automatic data synchronization with the address book on the smartphones used.

Pipedrive

We use the CRM system “Pipedrive”, provided by Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia, to manage our customer relationships and optimize our sales processes and communication. In doing so, personal data such as names, contact details, inquiries, contract details and communication histories are processed.

Data processing is carried out pursuant to Art. 6(1)(b) GDPR for the performance of contractual obligations or for the implementation of pre-contractual measures. In addition, we rely on our legitimate interest pursuant to Art. 6(1)(f) GDPR in ensuring effective customer support and optimized workflows.

Your personal data is transferred to Pipedrive OÜ as our processor. Pipedrive acts on our behalf and in accordance with the provisions of a data processing agreement pursuant to Art. 28 GDPR. It is possible that personal data may be transferred to countries outside the European Union. In such cases, Pipedrive ensures that appropriate safeguards pursuant to Art. 46 GDPR, such as EU Standard Contractual Clauses, are in place to ensure an adequate level of data protection.

Your data will only be retained for as long as necessary to fulfill the contract or due to statutory retention obligations. After these periods have expired, the data will be deleted unless further legal retention obligations apply.

 Adwords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel.: +353 1 543 1000, Fax: +353 1 686 5660, Email: su*****************@****le.com.

As part of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser places on the user’s computer. These cookies expire after 30 days and are not used to personally identify users.

If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot be tracked across the websites of AdWords customers.

The information obtained with the help of the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page equipped with a conversion tracking tag. However, they do not receive any information that personally identifies users.

If you do not wish to participate in tracking, you can object to this use by easily disabling the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” is based on your consent pursuant to Art. 6(1)(a) GDPR. Further information on Google AdWords and Google Conversion Tracking can be found in Google’s privacy policy:

https://www.google.de/policies/privacy/

You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies in certain cases or generally, and to activate the automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be restricted.

You can change your settings at any time via the cookie settings.

Soziale Medien / Plugins

YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel.: +353 1 543 1000, Fax: +353 1 686 5660, Email: su*****************@****le.com (“Google” or synonymously “YouTube”).

We have integrated the service with a so-called two-click solution. A connection to Google’s servers is established only when the corresponding placeholder is clicked. To access a video via YouTube, a connection to YouTube’s servers is established. In doing so, the YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

Further information on the handling of user data can be found in Google’s privacy policy at:

https://www.google.de/intl/de/policies/privacy

As a registered user of the YouTube platform, you can also use the YouTube platform to make extensive settings for Google advertising and control the extent to which your user behavior may be recorded and used by Google.

The use of YouTube is in the interest of an appealing presentation of our online offerings. The legal basis is your consent, which you express by clicking on a corresponding placeholder, within the meaning of Art. 6(1)(a) GDPR. If consent is not required, the legal basis in this case is Art. 6(1)(f) GDPR.

Facebook Pixel

Our website uses the visitor action pixel from Meta Platforms, Inc., Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”), for conversion measurement. This allows the behavior of website visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook advertisement. This enables the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook’s Data Use Policy. This allows Facebook to display advertisements on Facebook pages and outside Facebook. We, as the website operator, have no influence over this use of the data.

Further information on protecting your privacy can be found in Facebook’s privacy policy:

https://www.facebook.com/about/privacy/

This measurement only takes place if you have given your consent. Accordingly, the legal basis is Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

You can deactivate the “Custom Audiences” remarketing function on Facebook in the ad settings area at:

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

To do so, you must be logged into Facebook.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance:

http://www.youronlinechoices.com/de/praferenzmanagement/

You can also withdraw your consent by changing your cookie settings.

Facebook-Plugins (Like & Share-Button)

Plugins of the social network Facebook, provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, are integrated on our pages. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on our site. An overview of Facebook plugins can be found here:

https://developers.facebook.com/docs/plugins/

When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thereby receives the information that you have visited our site with your IP address.

If you click the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to associate your visit to our pages with your user account.

We point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information can be found in Facebook’s privacy policy at:

https://de-de.facebook.com/policy.php

If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

LinkedIn

Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established.

LinkedIn is informed that you have visited our websites with your IP address. If you click the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn may associate your visit to our website with you and your user account.

We point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn. Further information can be found in LinkedIn’s privacy policy at:

https://www.linkedin.com/legal/privacy-policy

Use of Cookies

Our online offering uses so-called cookies. Cookies are small text files that are stored by your browser and placed on your computer. The use of cookies serves to make the online offering more user-friendly. For example, it is possible to recognize the user for the duration of the session without requiring the username and password to be entered repeatedly.

Cookies do not cause any damage to your computer and are deleted after the end of your session. The basis for data processing is Art. 6(1)(f) GDPR.

Some of the cookies we use are deleted immediately after you close your browser, so-called session cookies.

Other cookies remain on your device and allow your browser to be recognized the next time you visit, persistent cookies.

Data processing in connection with cookies that are used solely to provide the functionality of our online offering is carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

In all other cases, we use cookies only after you have given your consent. The legal basis is therefore Art. 6(1)(a) GDPR. You may withdraw your consent at any time by changing your cookie settings.

If you do not wish cookies to be used, you can set your browser so that cookies are not accepted. Please note, however, that in this case you may not be able to use all functions of our websites.

Your Rights

Pursuant to Articles 15 to 21 GDPR, if the conditions described therein are met, you may assert the following rights with regard to the personal data processed by us.

You may request access to your personal data processed by us pursuant to Art. 15 GDPR.

If inaccurate personal data is processed, you have the right to rectification pursuant to Art. 16 GDPR.

If the statutory requirements are met, you may request the deletion or restriction of processing, Art. 17 and Art. 18 GDPR.

You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the legality of processing carried out on the basis of consent before its withdrawal.

Right to Object pursuant to Art. 21 GDPR

The data subject has the right, on grounds relating to their particular situation, to object at any time to the processing of personal data concerning them which is based on Art. 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.

Standard Periods for Data Deletion

Unless a statutory retention requirement applies, the data will be deleted or destroyed when it is no longer required for achieving the purpose of the data processing. Different periods apply to the retention of personal data. For example, data relevant for tax purposes is generally retained for 10 years, while other data is generally retained for 6 years in accordance with commercial law provisions.

Finally, the retention period may also be determined by statutory limitation periods, which, for example, pursuant to Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases may be up to thirty years.

Right to Lodge a Complaint with a Supervisory Authority

Every data subject has the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR if they consider that the processing of personal data concerning them violates the GDPR.

The supervisory authority responsible for data protection matters is the State Data Protection Commissioner of the federal state in which our company has its registered office.

The State Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf
Germany

Tel.: +49 211 38424-0
Fax: +49 211 38424-999
Email: po********@*****rw.de