RESPONSIBLE
ITMediaConsult AG, Gut Retzenhöhe 1, 54422 Züsch, Tel.: +49 8232 80988-70 s. hartinger@coseco.de Further information about our company can be found in our imprint.
You can reach the person responsible for data protection in the company at
s.hartinger@coseco.de.
GENERAL
When you visit our website, personal data is also processed.
In order for the pages to be displayed in your browser, the IP address of the end device you are using must be processed. There is also further information about the browser of your end device.
We are obliged under data protection law to also guarantee the confidentiality and integrity of the personal data processed with our IT systems.
The following data is logged for this purpose:
- Information about the browser type and version used
- The user’s operating system
- The user’s internet service provider
- The IP address of the user (for a maximum of 7 days)
- Date and time of access
- Websites from which the user’s system accesses our website
- Websites accessed by the user’s system through our website
The IP address will be deleted or made anonymous by all systems used in connection with the operation of this website after 7 days at the latest. We can then no longer establish a personal reference from the remaining data.
The data is also used to correct errors on the website.
The legal basis for this data processing is Article 6 Paragraph 1 Letter f) GDPR. Our “interest” within the meaning of Article 6 Paragraph 1 Letter f) is the operation of this website and the implementation of the protection goals of confidentiality, integrity and availability of the data.
COOKIES
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. If a user calls up a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic character string that enables the browser to be clearly identified when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. These are, for example, the access data for closed areas of our website that require a log-in.
Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 f. GDPR.
Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Not all functions can be offered without the use of cookies.
The data collected by technically unnecessary cookies are not used to create user profiles. This type of cookie is also used to improve the quality of our website and content. This tells us how the website is used and allows us to continuously optimize our offer.
Our legitimate interest in the processing of personal data in accordance with Article 6 (1) (f) GDPR also lies in these purposes.
Duration of storage, possibility of objection and removal
Cookies are stored on the user’s computer and transmitted to our site. Therefore, users also have full control over the use of cookies. By changing the settings in the Internet browser, users can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.
CONTACT BY FORM, NEWSLETTER AND EMAIL CONTACT
We offer contact and newsletter forms on our website, which you can use to contact us with concerns relating to our service, such as product or service inquiries. The personal data provided will be stored for the purpose of processing the request and in the event that follow-up questions arise.
Alternatively, it is possible to contact us via our e-mail address, which is linked to various buttons. In this case, the user’s personal data transmitted with the e-mail will be stored for the purpose of processing the message and in the event that follow-up questions arise.
Inquiries and messages received via the contact or newsletter forms on our website or via our e-mail address are usually stored in our CRM system. The CRM system is regularly checked to see whether data can be deleted. If data is no longer required in the context of a guest or prospective customer relationship or if the guest or prospective customer has a conflicting interest, we will delete the data in question, provided that there are no legal storage obligations to the contrary.
Legal basis for data processing
The legal basis for processing the data is Article 6(1)(a) GDPR if the user has given their consent.
The legal basis for the processing of data transmitted in the course of sending an email is Article 6 Paragraph 1 Letter f GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
Purpose of data processing
The processing of the personal data from the input mask serves us solely to process the contact. If contact is made by e-mail, this is also the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is over when it can be inferred from the circumstances that the facts in question have been finally clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
Possibility of objection and removal
The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
The revocation of the consent and the objection to the storage is possible verbally, in writing or by e-mail.
All personal data that was saved in the course of making contact will be deleted in this case.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses an SSL or. TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
SUPPLEMENTARY DATA PROTECTION NOTICE FOR APPLICANTS
We process the data that you have sent us in connection with your application in order to check your suitability for the position (or any other open positions in our company) and to carry out the application process.
The legal basis for the processing of your personal data in this application process is primarily § 26 BDSG in the version valid from May 25th, 2018. According to this, the processing of the data required in connection with the decision on the establishment of an employment relationship is permitted.
If the data is required for legal prosecution after the application process has been completed, data processing can take place on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 Para. 1 lit. f) GDPR. Our interest then lies in legal prosecution.
Applicants’ data will be deleted after six months in the event of a rejection.
In the event that you have consented to further storage of your personal data, we will transfer your data to our pool of applicants. There, the data will be deleted after two years.
If you have been awarded a position as part of the application process, the data will be transferred to our personnel information system.
Your applicant data will be viewed by the HR department or management after your application has been received. Suitable applications will then be forwarded internally to those responsible for the open position. Then the further process is coordinated. In principle, only those people in the company who need it for the proper running of our application process have access to your data.
MINORS
Minors may not transmit any personal data to us without the consent of their legal guardians. As part of the website, we do not process any knowingly obtained personal data from minors.
INTEGRATION OF THIRD PARTY SERVICES AND CONTENT
Content from third parties is integrated into the website. For the use of such content, the transmission of the user’s IP address to the respective third-party provider is technically necessary. Because without the IP address, the third-party providers could not send the content integrated into the website to the browser of the respective user. We have no influence on whether a third-party provider stores the IP address for statistical purposes, for example, or uses it in any other way.
Google Maps
We integrate the maps of the “Google Maps” service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.
Google Maps is used in the interest of easy findability. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f) GDPR. When Google Maps is called up, servers in the USA or at least outside the EU are called up. An appropriate level of data protection is demonstrated by the fact that Google LLC is listed in the Privacy Shield.
Google Web Fonts
This page uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly. For this purpose, your browser must establish a direct connection with the servers by Google. This gives Google knowledge that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and attractive display of our plugins. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. If your browser does not support web fonts, a standard font will be used by your computer used.
You can find further information on handling user data at https://developers.google.com/fonts/faq and in Google’s data protection declaration at https://www.google.com/policies/privacy/.
YouTube
Our website uses plugins from YouTube, which is operated by Google.
The site operator is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers will be established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube serves to make our website attractive. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. More information For handling user data, see YouTube’s privacy policy at https://www.google.de/intl/de/policies/privacy.
reCAPTCHA
We use the Google reCaptcha service to determine whether a person or a computer makes a specific entry in our contact or newsletter form. Google uses the following data to check whether you are a human or a computer: IP address of the terminal device used, the website that you are visiting and on which the Captcha is integrated, the date and duration of the visit, the identification data of the device used Browser and operating system type, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks that require you to identify images. The legal basis for the data processing described is Article 6 Paragraph 1 Letter f of the General Data Protection Regulation. There is a legitimate interest on our part in this data processing, to ensure the security of our website and to protect us from automated input (attacks).
WordFence
This website uses the WordPress additional plugin “WP WordFence”, from the manufacturer Defiant, 800 5th Ave Ste 4100, Seattle, WA 98104, USA. This additional plugin acts as a firewall, virus protection and spam filter for our website and is intended to prevent malicious program code from being transmitted to our server and prevent unauthorized access to our data.
Further information on functionality can be found at https://www.wordfence.com/. The manufacturer’s data protection declaration can be found at: https://www.wordfence.com/privacy-policy/.
Compliance
We use the Complianz Plugin – The cookie consent of Complianz GDPR does not process any personal data. This means you don’t need to add any text to your privacy policy about this plugin. The cookies used (all functional ones) are automatically added to your cookie policy. You can find our privacy policy here.
WP Statistics
The website uses the WordPress add-on plugin “WP Statistics” URL: https://wp-statistics.com from the provider “Verona Labs”, Tatari 64, 10134, Tallinn, Estonia, URL: https://veronalabs.com for analysis of visitor data. The WP Statistics plugin respects the privacy of visitors. This additional function is used for statistical evaluations of visitor access, such as the browser version, links and search queries or visitors by country. The data is collected and stored anonymously and without user profiles. To protect the online identity of the respective visitor, IP addresses are completely replaced by hash values, which excludes subsequent identification of the visitor. The anonymized data is stored locally on a secure server in accordance with the applicable GDPR. The respective statistical visit data is stored in the database for one year (365 days) and then automatically deleted.
MailChimp
We use the MailChimp service to create and send emails to registered newsletter recipients. By registering via our newsletter function, the data you enter such as name, company name, email, company size and industry will be stored in our MailChimp account for sending the newsletter. If you unsubscribe, the data will be removed from the distribution lists of our MailChimp account.
Your rights as a data subject
Insofar as your personal data is processed when you visit our website, you as the “data subject” within the meaning of the GDPR have the following rights:
Information
You can request information from us as to whether your personal data is being processed by us. There is no right to information if the provision of the requested information would violate the confidentiality obligation pursuant to § 57 StBG or the information must be kept secret for other reasons, in particular because of an overriding legitimate interest of a third party. Deviating from this, there may be an obligation to provide information if your interests outweigh the interest in secrecy, especially taking into account impending damage. The right to information is also excluded if the data is only stored because it may not be deleted due to legal or statutory retention periods or is used exclusively for data backup or data protection control purposes, provided that the provision of information would require a disproportionate amount of effort and processing for other purposes is excluded by appropriate technical and organizational measures. If the right to information is not excluded in your case and your personal data is processed by us, you can request information from us about the following information:
- Purposes of processing,
- Categories of personal data processed by you,
- Recipients or categories of recipients to whom your personal data is disclosed, in particular recipients in third countries,
- if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining the storage period,
- the existence of a right to rectification or erasure or restriction of processing of your personal data or a right to object to such processing,
- the existence of a right of appeal to a supervisory authority for data protection,
- if the personal data has not been collected from you as the data subject, the available information about the origin of the data,
- The existence of automated decision-making, including profiling and meaningful information about the logic involved and the scope and intended effects of automated decision-making,
- In the case of transmission to recipients in third countries, provided there is no decision by the EU Commission on the adequacy of the level of protection in accordance with Article 45 (3) GDPR, information on which suitable guarantees are available in accordance with Article 46 (2) GDPR on the Protection of personal data are provided.
Correction and Completion
If you find that we have incorrect personal data about you, you can request us to correct this incorrect data without delay. If your personal data is incomplete, you can request that it be completed.
Deletion
You have a right to erasure (“right to be forgotten”), provided that the processing is not necessary to exercise the right to freedom of expression, the right to information, or to fulfill a legal obligation or to perform a task of public interest and one of the following reasons applies:
- The personal data are no longer necessary for the purposes for which they were processed.
- The sole justification for the processing was your consent, which you revoked.
- You have objected to the processing of your personal data that we have made public.
- You have objected to the processing of personal data that we have not made public and there are no overriding legitimate grounds for the processing.
- Your personal data has been processed unlawfully.
- The erasure of personal data is necessary to comply with a legal obligation to which we are subject.
There is no right to deletion if, in the case of lawful, non-automated data processing, deletion is not possible or only possible with disproportionate effort due to the special type of storage and your interest in deletion is low. In this case, the restriction of processing takes the place of deletion.
Restriction of processing
You can ask us to restrict processing if one of the following reasons applies:
- You dispute the accuracy of the personal data. In this case, the restriction can be requested for a period of time that enables us to verify the accuracy of the data.
- The processing is unlawful and you request the restriction of the use of your personal data instead of deletion.
- We no longer need your personal data for the purposes of processing that you need to assert, exercise or defend legal claims.
- You have lodged an objection in accordance with Article 21 (1) GDPR. The restriction of processing can be requested as long as it is not yet clear whether our legitimate reasons outweigh your reasons.
Restriction of processing means that the personal data will only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest. Before we lift the restriction, we have a duty to let you know.
Data portability
You have the right to data portability if the processing is based on your consent (Art. 6 Para. 1 Sentence 1 Letter a) or Art. 9 Para. 2 Letter a) GDPR) or on a contract to which you are a party and the processing is carried out using automated procedures. In this case, the right to data portability includes the following rights, provided this does not affect the rights and freedoms of other persons: You can request that we receive the personal data that you have provided to us in a structured, common and machine-readable format . You have the right to transmit this data to another responsible person without hindrance on our part. As far as technically feasible, you can request that we transmit your personal data directly to another person responsible.
Contradiction
If the processing is based on Art. 6 Para. 1 Sentence 1 Letter e) GDPR (performing a task in the public interest or in the exercise of official authority) or on Art. 6 Para. 1 Sentence 1 Letter f) GDPR (legitimate interest of the person responsible or a third party), you have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation. This also applies to profiling based on Article 6 (1) sentence 1 letter e) or letter f) GDPR. After you have exercised your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
You can object at any time to the processing of your personal data for direct marketing purposes. This also applies to profiling associated with such direct advertising. After exercising this right of objection, we will no longer use the personal data concerned for direct marketing purposes.
You have the option of informing our company of your objection informally by telephone, e-mail, if necessary by fax or to our postal address listed at the beginning of this data protection declaration.
Revocation of consent
You have the right to revoke your consent at any time with effect for the future. The revocation of consent can be communicated informally by telephone, e-mail, if necessary by fax or to our postal address. The revocation does not affect the legality of the data processing that has taken place on the basis of the consent up to the receipt of the revocation. After receipt of the revocation, the data processing, which was based exclusively on your consent, will be discontinued.
Complaint
If you believe that the processing of your personal data is unlawful, you can lodge a complaint with a data protection supervisory authority responsible for your place of residence or work or for the place of the alleged infringement.
Status and update of this data protection declaration
This data protection declaration is dated January 14, 2020. We reserve the right to update the data protection declaration in due course in order to improve data protection and/or adapt it to changed official practice or case law.
