(1) Processed data and purposes of processing
Whenever our portal is visited, the server stores data: the Internet Protocol address, also known as the IP address, of the requesting computer, the date and time of access to our website and its subpages, the name and URL of the retrieved file, the Internet service provider, where applicable the operating system of the requesting computer, the name of your access provider, and comparable data.
Access to jijilo.de includes, as is generally customary when using websites, cookies to improve and optimise the user experience. Cookies are small data files that are temporarily stored in the browser you use in order to store and retrieve information about behaviour. Cookies are stored for a limited period of time. These files make it possible to store user-specific settings such as the selected language, currency, or font size.
The cookies do not establish any connection between IP addresses and personal data. None of the cookies enables us to send messages to your email address or otherwise contact you via the contact details provided. None of the cookies reads data from your hard drive. You can prevent the processing of data by disabling the installation of cookies in your browser settings. Most browsers can report cookies and prevent their use. The relevant settings are usually found under “Options” or “Settings” in the browser menu. However, this may impair the functionality of the website.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological development. These data are not linked to external databases or personal data.
When registering for and using our SaaS offering, we process the personal data required to create and manage the user account. This includes in particular name, email address, access data in encrypted or hashed form, language settings, account settings, contract and subscription data, as well as content entered or uploaded by the user within the platform. There is no order in the sense of a classic online shop.
Google Single Sign-On
We offer you the option to register or log in to our offering using “Sign in with Google” or Google Single Sign-On. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Depending on the technical processing, data may also be transferred to Google LLC, USA.
If you use Google login, you will be redirected to Google and can log in there with your Google account. In this process, we receive from Google the information required for registration and login, in particular your email address, your name, where applicable your profile picture, and a unique Google account ID. We use this data exclusively to create your user account, authenticate you, and enable access to our offering.
The use of Google Single Sign-On is voluntary. Where offered, you can also register or log in using an email address and password. If you use Google Single Sign-On, Google processes your data under its own responsibility in accordance with Google’s privacy policy. We have no influence over this data processing by Google.
The legal basis for processing the data transmitted by Google is Article 6(1)(b) GDPR, insofar as the processing is necessary for registration, login, and provision of your user account. Where the use of Google Single Sign-On is based on your voluntary choice and consent is required for this purpose, the processing is additionally based on Article 6(1)(a) GDPR.
The data received in connection with Google Single Sign-On is stored for as long as your user account exists or as long as statutory retention obligations or legitimate reasons require further storage.
Connection of an email account or email provider
Our offering may allow you to connect an email account or email provider to the platform in order to use email functions within the platform. This may in particular serve to create, send, manage, or document applications, messages, reminders, or other communications related to your use of the platform.
Where technically possible, the connection is made via a secure authorisation procedure such as OAuth. You do not provide us with your email password. Instead, you grant us a purpose-specific access authorisation via the respective provider, which you can generally revoke at any time through that provider.
Depending on the provider selected and the scope of the authorisation you grant, the following data in particular may be processed: email address, name of the email account, technical account ID, access and refresh tokens, sending and status data, recipients, subject, message content, attachments, and communication histories, insofar as this is necessary for the respective function.
We use access to your email account exclusively to provide the functions actively used by you. Access to the contents of your email inbox takes place only insofar as this is necessary for the respective function and has been authorised by you. Email data is not used for advertising purposes or disclosed to third parties for such purposes.
Where email content, application documents, or other messages are processed via the platform, this is done to provide the contractual services requested by you pursuant to Article 6(1)(b) GDPR. Where you voluntarily connect an email provider and consent is required for this purpose, the processing is additionally based on Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future and disconnect the email account.
Access tokens and technical connection data are stored only for as long as the email account connection exists or as long as storage is necessary for security, troubleshooting, or compliance with legal obligations. If you disconnect the account, the access data stored for the connection will be deleted unless statutory retention obligations or legitimate reasons require further storage.
When using external email providers, the respective provider processes personal data in accordance with its own privacy policy. We have no influence over the independent data processing carried out by the respective email provider.
Where personal data is transferred to a third country, in particular the USA, in connection with the use of Google services, this takes place in accordance with the applicable data protection requirements, in particular on the basis of an adequacy decision, appropriate safeguards such as the EU-U.S. Data Privacy Framework, standard contractual clauses, or other transfer mechanisms permitted under the GDPR.
Data processing when contacting us, using contact forms, and submitting support requests
If you contact us via contact form, email, or by other means, we process the personal data you provide, in particular name, email address, message text, and, where applicable, other voluntary information. The processing is carried out in order to handle your request, communicate with you, and properly document your matter.
Where your request relates to the use of our offering, registration, conclusion or management of a subscription, use of support services, or other contractual services, the processing is carried out for the implementation of pre-contractual measures or the performance of a contract pursuant to Article 6(1)(b) GDPR.
Where your request is not related to a contract or pre-contractual measures, the processing is based on our legitimate interest in handling and documenting enquiries pursuant to Article 6(1)(f) GDPR.
Separate consent to the processing of the data transmitted via the contact form is not required insofar as the processing is based on the legal bases mentioned above. Irrespective of this, we inform you about the processing of your personal data in this privacy policy.
Cloudflare Turnstile
To protect our forms against spam, abuse, and automated access, we use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.
Turnstile is used to verify whether an input is made by a human or by an automated program. For this purpose, Cloudflare processes technical information required to detect abusive or automated access. This may include in particular the IP address, browser and device information, technical connection data, interaction data with the website, and information about the page accessed.
The processing is carried out for the purpose of securing our website, preventing spam and abuse, and protecting our technical infrastructure. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in securely providing our forms and protecting our website against automated access, spam, and abusive use.
Where information is stored on or read from the user’s device in connection with Cloudflare Turnstile, this is done, where necessary, on the basis of Section 25(2) No. 2 TDDDG, as this processing is necessary for providing the security function and protecting the forms.
According to Cloudflare, the data generated in this context is not processed for advertising or retargeting purposes. Cloudflare Turnstile is used only where this is necessary to protect forms or security-relevant functions.
Where necessary, we have concluded a data processing agreement with Cloudflare pursuant to Article 28 GDPR. Where personal data is transferred to a third country, in particular the USA, this is carried out on the basis of the applicable data protection requirements, in particular an adequacy decision, appropriate safeguards such as standard contractual clauses, or other transfer mechanisms permitted under the GDPR.
Further information on data processing by Cloudflare Turnstile can be found in Cloudflare’s privacy notices.
(2) Disclosure of data to third parties
Your personal data will not be transferred to third parties for purposes other than those listed below.
We disclose your personal data to third parties only if:
– you have given your express consent pursuant to Art. 6(1) sentence 1 lit. a GDPR;
– disclosure pursuant to Art. 6(1) sentence 1 lit. f GDPR is necessary for the establishment, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed;
– in the event that disclosure is subject to a legal obligation pursuant to Art. 6(1) sentence 1 lit. c GDPR; and
– this is legally permissible and necessary pursuant to Art. 6(1) sentence 1 lit. b GDPR for the performance of contractual relationships with you.
Our website also uses “plug-ins” or social modules such as “Like” buttons and “Sharing” from third-party companies such as social networks Facebook, Pinterest, Twitter, Google+ etc., for example on product pages. With these buttons, you can view and share information on our portal with your friends on social networks. Accessing a page with such plug-ins or social modules causes a connection to be established with the servers of the social networks, such as Facebook or Twitter, which are then informed that you have accessed the relevant page, even if you do not have a Facebook or Twitter account or are not logged into your Facebook or Twitter account. If you do not want social networks to transfer your actions via plug-ins to your social media accounts, you must log out of your social networks before visiting our website.
Google Ads Conversions
jijilo uses Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials, known as Google Ads. This allows jijilo to determine, in relation to the data from advertising campaigns, how successful the advertising measures are. In doing so, we pursue the interest of showing you advertising that may be of interest to you, making our website more interesting for you, and achieving a fair calculation of advertising costs.
These advertising materials are delivered by Google via so-called “ad servers”. For this purpose, the site uses ad server cookies, through which certain parameters for measuring success, such as the display of ads or user clicks, can be measured. If you access our website via a Google ad, Google Ads stores a cookie on your computer. These cookies usually expire after 30 days and are not intended to identify you personally. In relation to this cookie, the following analysis values are usually stored: unique cookie ID, number of ad impressions per placement, last impression, and opt-out information, meaning a marker that the user no longer wishes to be addressed.
These cookies allow Google to recognize your Internet browser again. If a user visits certain pages of an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. Each Ads customer is assigned a different cookie. Cookies therefore cannot be tracked across the websites of Ads customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of advertising materials; in particular, we cannot identify users based on this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: by integrating Ads Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google may associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider may obtain and store your IP address.
You can prevent participation in this tracking process in various ways:
a) by adjusting your browser software accordingly; in particular, blocking third-party cookies means that you will not receive ads from third-party providers;
b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”,
www.google.de/settings/ads, although this setting will be deleted if you delete your cookies;
c) by disabling interest-based ads from providers that are part of the “About Ads” self-regulation campaign via the link
www.aboutads.info/choices, although this setting will be deleted if you delete your cookies;
d) by permanently disabling them in your Firefox, Internet Explorer, or Google Chrome browsers via the link
www.google.com/settings/ads/plugin. Please note that, in this case, you may not be able to use all functions of this offer in full.
Remarketing
In addition to Ads Conversion, we use the Google Remarketing application. This is a process by which we would like to address you again. Through this application, after visiting our website, our advertisements may be displayed to you during your further Internet use. This is done by means of cookies stored in your browser, through which Google records and evaluates your usage behavior when visiting various websites. This allows Google to determine your previous visit to our website. According to Google’s own statements, the data collected as part of remarketing are not combined with your personal data that may be stored by Google. In particular, according to Google, pseudonymization is used in remarketing.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Its use includes the “Universal Analytics” operating mode. This makes it possible to assign data, sessions, and interactions across multiple devices to a pseudonymous user ID and thus analyze a user’s activities across devices. Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow your use of the website to be analyzed. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, however, your IP address will first be shortened by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide the website operator with other services related to website use and Internet use.
The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data sent by us and linked to cookies, user identifiers, such as user ID, or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached are automatically deleted once a month.
You can prevent cookies from being stored by adjusting your browser software accordingly; however, please note that in this case you may not be able to use all functions of this website in full. You can also prevent the collection by Google of the data generated by the cookie and relating to your use of the website, including your IP address, and the processing of these data by Google by downloading and installing the browser plug-in available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de.
You can prevent collection by Google Analytics by clicking on the following link. An opt-out cookie will be set, which prevents future collection of your data when visiting our pages: Disable Google Analytics.
To prevent collection by Universal Analytics across different devices, you must carry out the opt-out on all systems used.
This website uses Google Analytics with the “_anonymizeIp()” extension. This means that IP addresses are processed further in shortened form, thereby excluding personal identifiability. If the data collected about you contain a personal reference, this reference is therefore immediately excluded and the personal data are deleted without delay.
We use Google Analytics in order to analyze the use of our website and to improve it regularly. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data are transferred to the USA, Google has submitted to the EU-US Privacy Shield,
www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6(1) sentence 1 lit. f GDPR.
Google Signals
Also on the basis of our legitimate interests, i.e. our interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6(1) lit. f GDPR, we use the Google Signals web analytics service. With Signals, Google provides website operators with reports on cross-device user numbers and on various groups of users based on different device combinations used. Google uses so-called “cross device tracking” for this purpose. This allows website visits by a single visitor using different end devices to be assigned to that one visitor, provided that the visitor is logged into a Google service during the sessions and has at the same time activated the “personalized advertising” option in their Google account settings. Google Signals is used only with activated IP pseudonymization. This means that users’ IP addresses are shortened within the Member States of the EU or in other contracting states of the Agreement on the European Economic Area. Through this shortening, the personal reference of your IP address is removed. As a result, no conclusions can be drawn about the identity of an individual user.
Additional information on how Google handles your personal data in its advertising network can be found here: Advertising and data protection.
Locally embedded fonts
To ensure a consistent presentation of our website, we use locally embedded fonts. The font files are provided through our own application infrastructure.
When our pages are accessed, no fonts are loaded from external servers, in particular not from Google Fonts or Bunny Fonts. No personal data is transmitted to external providers in connection with the display of fonts.
OpenStreetMap and Nominatim
We use map data from OpenStreetMap for certain map and location functions. The provider is the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.
When a map is displayed, map tiles may be loaded from servers of the OpenStreetMap Foundation or from the technical infrastructure used by OpenStreetMap. Technically necessary data may be processed in this context, in particular the user’s IP address, browser and device information, the page accessed, the time of access and the requested map sections.
The markers displayed on the map, such as job title, company, location or status, are processed within our application. According to the current technical implementation, this information is not transmitted as parameters in requests to the map tile servers.
For converting location information into geographic coordinates, we use the server-side geocoding service Nominatim. The location information required for geocoding, such as the location of a job posting, is transmitted to Nominatim. The request is made by our server; the user’s IP address is not transmitted directly to Nominatim.
As part of geocoding, we do not transmit account data, email addresses, CVs, cover letters or application documents to Nominatim.
The processing is carried out to provide map, location and search functions within our application. The legal basis is Article 6(1)(b) GDPR where the function forms part of the user contract, and Article 6(1)(f) GDPR based on our legitimate interest in providing a user-friendly display of locations and search results.
External job sources and job APIs
To provide the job search function, we may access external job sources and job APIs. These include, in particular, the Bundesagentur für Arbeit as well as other job aggregators or job portals such as Adzuna, Jooble and Trudvsem.
The requests are generally made server-side by our application. This means that the user’s browser generally does not establish a direct connection to these providers and the user’s IP address is not transmitted directly to them.
Only the search parameters required for the search are transmitted to the respective providers, for example job title, keywords, location, country, radius, page number, language or other filter settings.
We do not transmit account data, email addresses, names, CVs, cover letters or application documents to these providers unless this is expressly stated or actively initiated by the user.
When a server-side request is made, the providers generally receive the IP address of our server as well as the transmitted search parameters. These search parameters may allow conclusions to be drawn about the user’s professional interests, desired place of work or search preferences.
The processing is carried out to provide the job search function, display suitable job postings, update and enrich job information and improve the search function within our application. The legal basis is Article 6(1)(b) GDPR where the job search is part of the user account, and Article 6(1)(f) GDPR based on our legitimate interest in providing an efficient and up-to-date job search.
Search results may be stored within our application, in particular where job postings are imported, saved or processed further. In such cases, we store the job information obtained from the respective sources, but we do not create a user profile with the provider.
Where users open external job postings, they may leave our website or application. In this case, the user’s browser establishes a direct connection to the website of the respective provider or employer. The privacy policies of the respective provider apply to the processing of personal data on those websites.
External job postings and links
Our application may contain links to external job postings, employer websites or job portals. When users open such a link, they leave our website or application. The respective external provider may process personal data, in particular the IP address, browser information and time of access.
We have no influence over data processing by external providers. The privacy policies of the respective provider apply to the processing of personal data on linked pages.
International job sources and third-country transfers
Some job sources or job portals may have their registered office or technical infrastructure outside the European Union or the European Economic Area. This may apply in particular to international job sources.
We limit the data transmitted to such providers to the search parameters required for the respective search. Account data, email addresses, CVs, cover letters or application documents are not transmitted unless this is expressly stated or actively initiated by the user.
Where personal data is transferred to a third country, this is done only where there is an applicable legal basis under data protection law.
Log files
Each time our website is accessed, usage data is transmitted by the respective internet browser and stored in log files, known as server log files. The data records stored in this process contain the following information: date and time of access, name of the page accessed, IP address, referrer URL (the source URL from which you accessed the website), the amount of data transferred, as well as product and version information of the browser used and the operating system of your computer.
Users’ IP addresses are deleted or anonymized after the end of use. No other evaluation of the data takes place, except for statistical purposes and then generally in anonymized form. No personal “surfing profiles” or similar profiles are created or processed.
The legal basis for the data processing is Article 6(1)(f) GDPR, which permits the processing of data for the purposes of the legitimate interests pursued by the controller, provided that the interests or fundamental rights and freedoms of the data subject do not override those interests. We have a legitimate interest in the anonymized analysis of user behavior in order to optimize our website and the services offered there, as well as in ensuring data security on the website.
Data processing via Hotjar
Our website uses Hotjar, a web analytics tool provided by Hotjar Ltd., Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta. With Hotjar, we analyze the behavior of our website visitors in order to improve the user experience. Hotjar allows us, for example, to record mouse movements, clicks, and scrolling behavior in anonymized form.
Hotjar uses cookies and other technologies to collect information about users’ behavior and their end devices, in particular IP address in anonymized form, screen size, device type, browser information, geographical location at country level only, and preferred language for displaying our website. Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will use this information to identify individual users or merge it with further data about individual users.
The use of Hotjar is based on your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR in conjunction with Section 25 TDDDG. You can withdraw your consent at any time via our cookie consent tool.
Google Tag Manager
On some of our web pages, we may use the tag management system (TMS) Google Tag Manager provided by Google. The purpose of using this tool is to allow tracking codes and associated code fragments on our website and mobile apps to be updated easily.
Legal basis and further information on Google:
The processing is carried out on the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR in conjunction with Section 25 TDDDG. You can withdraw your consent at any time. You may declare your withdrawal by sending a message to the contact details mentioned above or via the consent management tool used. The lawfulness of data processing operations that have already taken place remains unaffected by the withdrawal.
We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR. Data processing takes place within the EU or, in the event of transfer to third countries, in compliance with the standard contractual clauses.
Data processing through LinkedIn Page Analytics, Ads and Insight Tags
We operate a company page on the social network linkedin.com of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”) and receive so-called Page Analytics from LinkedIn with regard to our services. For the operation of this LinkedIn company page, we are jointly responsible with LinkedIn within the meaning of Art. 26 GDPR. In the course of LinkedIn providing further services, in particular marketing solutions, we have concluded a data processing agreement with LinkedIn pursuant to Art. 28 GDPR.
LinkedIn Ads (
https://business.linkedin.com/de-de/marketing-solutions/ads) offers the possibility of displaying target group-specific ads on LinkedIn. Data processing is carried out for the purposes of conversion tracking, advertising, remarketing, and optimizing our advertisements and page activities. For this purpose, a cookie is set and pixels and advertising tags are used. The following data are processed for this purpose: IP address, user agent data, device ID, search terms, viewed articles, visited pages, viewed advertisements, followers, connections, videos watched, profile information, advertising identifier, information about the operating system, and device information.
Page Analytics (
https://www.linkedin.com/help/linkedin/answer/4499/linkedin-page-analytics-overview) are aggregated data through which we can gain insight into how people interact with our page. The generation and provision of these Page Analytics are the responsibility of LinkedIn; we have no influence over this. LinkedIn assumes all obligations under the GDPR with regard to the processing of insights data, including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR, and Articles 32 to 34 GDPR.
The purpose of our processing of the data provided by LinkedIn is the statistical evaluation of the use of our company page. This enables us, for example, to determine preferred visiting and posting times of our users and use them to optimize our posts and our company page. In addition, we process personal data that you have made publicly accessible on LinkedIn, for example your real name in the user profile, as well as data directly connected with activities on our company page, for example contributions, posts, likes, and tags, also for the purpose of communicating with you.
For some of our services, we may use the conversion tracking and retargeting tool LinkedIn Insight Tags. In this case, a cookie is placed in your browser that makes it possible to track the behavior of visitors to our online activities if they were redirected to our offers by clicking on a LinkedIn advertisement. In this way, we can evaluate the effectiveness of our LinkedIn advertisements for statistical and market research purposes and optimize future advertising measures. The data collected in this process are anonymous for us and we cannot draw conclusions about the identity of the users who may be recorded in this way. However, the data are stored and processed by LinkedIn, so that a connection to the respective user profile is possible and LinkedIn may use the data for its own advertising purposes. Through the retargeting option, LinkedIn enables the display of advertisements outside our services. As the page operator, we cannot influence this use of the data. If you are a LinkedIn member, you can control the remarketing function in your account settings or deactivate it by setting an opt-out cookie, see below. In this context, we have an interest in analyzing user behavior in order to optimize both our offer and, where applicable, advertising for our offer.
If you do not agree to the storage and use of your data in the context of LinkedIn Insight Tags, you can deactivate storage and use here. In this case, an opt-out cookie is placed in your browser, which prevents LinkedIn from storing usage data. If you delete your cookies, this also results in the opt-out cookie being deleted. The opt-out must then be reactivated when you visit our page again.
The basis for the above data processing is Art. 6(1) sentence 1 lit. a GDPR. If you have given LinkedIn corresponding consent, you may withdraw such consent at any time vis-à-vis LinkedIn with effect for the future. If you have given us corresponding consent, you may withdraw such consent at any time vis-à-vis us with effect for the future.
Otherwise, the basis for our data processing is Art. 6(1) sentence 1 lit. f GDPR, which permits the processing of data to protect the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail. Our interest lies in providing content and communicating with LinkedIn users, as well as improving the reach and effectiveness of our posts.
Please exercise your rights of access, rectification, deletion, restriction of processing, and data portability regarding your stored insights data directly with LinkedIn, as LinkedIn has assumed the corresponding obligations:
LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
Data processing in the USA
Under certain circumstances, the use of the above-mentioned products of external services may result in personal data being transferred to servers in the USA. Important in connection with data processing in the USA: according to the Court of Justice of the European Union, the data protection standard in the USA is insufficient, and there is a risk that your data may be processed by US authorities for control and surveillance purposes and possibly without legal remedy options. The respective external service provider ensures, within the framework of its processing on behalf pursuant to Art. 28 GDPR, sufficient safeguards under Chapter 5 GDPR in order to take corresponding mitigating measures.
Online presence in other social networks
We have established online presences in various social networks in order to communicate with you, interested parties, and customers and to provide information about our services and current offers. In addition to our interaction with you, the social networks process data from visitors to their websites for market research and advertising purposes. This means that, based on the respective visit or usage behavior and the preferences and interests derived from it, the respective operator of the social network may create a user profile. Such user profiles may be used, among other things, to display advertisements individually tailored to the respective user profile within the respective social network and, under certain circumstances, on other websites. In this context, cookies, see above, may be stored on visitors’ devices, with the help of which data on usage behavior may be collected. The collection of these data may, especially for logged-in members of the respective social network, also take place across several browsers and/or end devices used by a user. Even if a visitor does not have a profile with the respective social network, it cannot be ruled out that personal data about this visitor will be stored when visiting the respective website.
Requests for information regarding the data stored via our online presences in social networks or the exercise of other related data subject rights, see below, may be addressed to the provider of the respective service. Only the providers of the social networks have access to the data stored there and can provide the relevant information, etc. With regard to the purpose and scope of data processing by the various social networks, we additionally refer to their respective privacy notices and contact options:
Facebook & Instagram
Meta Platform Ireland Ltd.
4 Grand Canal Square
Dublin 2, Ireland
New Work SE (XING)
Dammtorstraße 29-32
20354 Hamburg, Germany
LinkedIn
LinkedIn Ireland Unlimited Company
Wilton Plaza, Wilton Place
Dublin 2, Ireland
YouTube LLC
901 Cherry Ave.
San Bruno, CA 94066, USA
represented by:
Google Inc.
1600 Amphitheatre Parkway
Mountain View, CA 94043, USA
The processing of data in the context of our online presences in social networks is carried out, insofar as we are responsible under data protection law, on the basis of our legitimate interest in effective information and direct communication with interested parties and customers of our company. The basis for data processing is Art. 6(1) sentence 1 lit. f GDPR, which permits the processing of data to protect the legitimate interests of the controller, provided that the interests or fundamental rights and freedoms of the data subject do not prevail. Our interest lies in providing content and communicating with users of the respective social networks, as well as improving the reach and effectiveness of our posts.
(3) Right to rectification, deletion, and blocking
You have the right:
– pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if these were not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details;
– pursuant to Art. 16 GDPR, to request without delay the rectification of inaccurate personal data or completion of your personal data stored by us;
– pursuant to Art. 17 GDPR, to request deletion of your personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
– pursuant to Art. 18 GDPR, to request restriction of the processing of your personal data, insofar as the accuracy of the data is contested by you, the processing is unlawful but you oppose its deletion and we no longer need the data, but you require them for the establishment, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
– pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller;
– pursuant to Art. 7(3) GDPR, to withdraw your consent once given to us at any time. This means that we may no longer continue the data processing based on this consent in the future; and
– pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your usual place of residence or workplace or of our company’s registered office.
(4) Right to object
If your personal data are processed on the basis of legitimate interests pursuant to Art. 6(1) sentence 1 lit. f GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of your personal data, provided that there are reasons arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without requiring you to state a particular situation.