Privacy statement
We are delighted about your interest in our online shop. The protection of your privacy is very important to us. Below, we inform you in detail about how we handle your data.
Scope of and responsibility for data processing
This privacy statement applies to the use of the website https://www.adidasteam.com.
Responsible for data processing:
eleven teamsports GmbH
Im Winkel 1-3
74589 Satteldorf, Germany
Phone: +49 7951 9645 100
Fax: +49 7951 9645 199
E-mail: [email protected]
1. Visiting our website
You can visit our website without providing personal details. For every access to a website, the web server merely automatically saves what is known as a server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, quantity of data transferred, and the requesting provider (access data), and which documents the access.
This access data is evaluated exclusively for the purpose of ensuring that the site functions perfectly, and for improving our internet offering. As per article 6 paragraph 1 clause 1(f) GDPR, in terms of a balance of interests this serves to protect our prevailing legitimate interests in the correct presentation of our offering. All access data is deleted no later than three months after the end of your visit to our website.
Person-related analysis of the server log files does not take place. At no time is it possible for us to assign this data to specific individuals. This data is not combined together with other data sources.
Hosting services from a third-party provider
In the course of processing data on our behalf, a third-party provider provides the services for hosting and for the presentation of the website. In terms of a balance of interests, this serves to protect our prevailing legitimate interests in the correct presentation of our offering. All data collected in the course of using this website or in forms in the online shop intended for this purpose, as subsequently described, is processed on the provider’s servers. Processing on other servers takes place only in the circumstances explained here.
This service provider is situated within a country of the European Union or of the European Economic Area.
2. Personal data in the ordering process and for opening a customer account
We collect personal data when you provide them to us voluntarily in the course of your order, when you contact us (e.g. via a contact form or e-mail), or when you open a customer account. Mandatory fields are indicated as such, because in these cases it is essential for us to have this data for contract processing, and/or for processing your contact request, or for opening your customer account, and therefore without these details you cannot complete the order, open the account, or send the contact request. The data collected is evident from the respective input forms. We use the data provided by you as per article 6 paragraph 1 clause 1(b) GDPR for contract performance and for dealing with your enquiries. After the contract has been fully processed or your customer account has been deleted, your data is excluded from further processing, and after expiry of the retention periods under tax and commercial law it is deleted, unless you have expressly consented to a further use of your data or we have reserved for ourselves a use of data going beyond this, which is legally permitted and about which we inform you in this privacy statement. The deletion of your customer account is possible at any time, and can take place either via a message to the contact option described below or via a function for this purpose in the customer account.
3. Data transfer for contract processing
For the performance of the contract as per article 6 paragraph 1 clause 1(b) GDPR, we pass your data on to the shipping company engaged for the delivery, as long as this is necessary for the delivery of ordered goods. Depending on the payment service provider which you select during the ordering process, for the processing of payments we pass the payment data collected for this purpose on to the credit institute engaged to handle the payment, and also to payment service providers which we may engage, and/or to the selected payment service. In part, the selected payment service providers also collect some of this data themselves if you create an account with them. In this case you should use your access data to log in to the payment service provider during the ordering process. In this regard, the privacy statement of the respective payment service provider applies.
4 Use of data for payment processing
Credit check and scoring when selecting “PayPal purchase on account”
If you decide to use the “purchase on account” option from PayPal (www.paypal.com), during the purchasing process you are asked to consent to the transmission to PayPal of the necessary data for processing the payment and for an identity check and credit check, as per article 6 paragraph 1 clause 1(a) GDPR. If you grant your consent, this data is transmitted to PayPal. For the purpose of their own identity check and credit check, PayPal or partner companies engaged by PayPal transmit data to credit agencies and receive back from them information and possibly creditworthiness details on the basis of mathematical/statistical processes, and address data may be fed into their calculations. Detailed information about this and the credit agencies used can be found in PayPal's data protection information (https://www.paypal.com/de/webapps/mpp/ua/privacy-full).
PayPal uses the information obtained about the statistical probability of a payment default to make a balanced decision about the justification for, or implementation or ending of the contractual relationship.
You may cancel your consent with respect to PayPal at any time. However, PayPal may continue to be authorised to process, use, and transmit your personal data, to the extent that this is necessary for payment processing as contracted or legally prescribed, or is mandated by a court or a public body.
Use of personal data when selecting “Purchase by Instalments” as payment type
When “Purchase by Instalments” is selected as payment type, and the consent necessary for this under data protection regulations as per article 6 paragraph 1 clause 1(a) GDPR is granted, personal data (first name, surname, address, e-mail, phone number, date of birth, IP address, gender) together with the data necessary for processing the transaction (article, invoiced amount, due dates, total amount, invoice number, taxes, currency, ordering date and time) is transmitted to our partner PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg for the purpose of processing this type of payment.
For checking the identity and creditworthiness of the customer, our partner runs enquiries and searches in publicly accessible databases and with credit agencies. Please refer to our partner PayPal’s privacy statement to find the providers from whom information and possibly creditworthiness details on the basis of mathematical/statistical processes are obtained, as well as further details about the processing of your data after its transmission to PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Our partner PayPal uses the information obtained about the statistical probability of a payment default to make a balanced decision about the justification for, or implementation or ending of the contractual relationship. By means of contact information, you have the option to present your position to our partner PayPal, and to challenge the decision.
The consent provided by agreement during the ordering process to our sharing of data can be cancelled at any time with future effect, even without giving reasons.
Use of personal data when selecting “PayPal” as payment type
One of the options on our website is payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L 2449 Luxembourg (subsequently referred to as “PayPal”).
When you select payment via PayPal, the payment data which you enter is transmitted to PayPal.
The transmission of your data to PayPal takes place on the basis of article 6 paragraph 1(a) GDPR (consent) and article 6 paragraph 1(b) GDPR (processing for the performance of a contract). You have the option of cancelling your consent to data processing at any time. A cancellation has no effect on data processing activities performed in the past.
Use of personal data when selecting instant bank transfer ("Sofort-Überweisung") as payment type
One of the options on our website is payment via instant bank transfer ("Sofort-Überweisung"). The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany (subsequently referred to as “Sofort GmbH”).
By means of the instant bank transfer “Sofort-Überweisung” process we receive a payment confirmation from Sofort GmbH in real time, and we can start to fulfil our obligations immediately.
If you have chosen the “Sofort-Überweisung” payment type, you transmit the PIN and a valid TAN to Sofort GmbH, with which the company can log in to your online banking account. After logging in, Sofort GmbH automatically checks your account balance and performs the transfer to us by means of the TAN which you provided. Sofort GmbH then immediately sends us a transaction confirmation. Additionally, after logging in, your transactions, the credit limit of the overdraft facility, and the existence of other accounts and their balances are checked automatically.
In addition to the PIN and TAN, the payment data which you entered, as well as personal data about you, are also transmitted to Sofort GmbH. The personal data about you consists of first name and surname, address, phone number(s), e-mail address, IP address, and possibly other data required for payment processing. The transmission of this data is necessary to determine your identity unequivocally, and to prevent attempts to defraud.
The transmission of your data to Sofort GmbH takes place on the basis of article 6 paragraph 1(a) GDPR (consent) and article 6 paragraph 1(b) GDPR (processing for performance of a contract). You have the option of cancelling your consent to data processing at any time. A cancellation has no effect on data processing activities performed in the past.
You can find details about payment using instant bank transfer ("Sofort-Überweisung") via the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.
Use of personal data when selecting “Amazon Pay” as payment type
For payment via Amazon Payments, as part of the payment processing we transmit your payment data to Amazon Payments Europe S.C.A., 5 Rue Plaetis, L-2338 Luxembourg (subsequently referred to as “Amazon”). This is used exclusively to make safe payments using the “SSL” process. Amazon is certified to PCI DSS and transmits, processes, and possibly stores personal data outside of the EU. For this, Amazon is subject to the Safe Harbour Agreement. Amazon reserves the right to conduct a credit check. Amazon uses the result of the credit check regarding the statistical payment default probability for the purpose of deciding whether to make the respective payment method available. The credit check may contain probability values (known as score values). If score values contribute to the result of the credit check, they are based on a scientifically recognised mathematical/statistical process. Address data makes a contribution to calculating the score values. Furthermore, Amazon has the right to pass your data to unspecified third parties (e.g. banks, e-service providers, service partners, auditors, analytical services, credit agencies). Please refer to Amazon’s corresponding privacy statement for further legal information on data protection, including the credit agencies used: https://pay.amazon.com/de/help/201212490
Use of personal data when selecting “Credit Card” via Ingenico/Ogone as payment type
On our website, JavaScript code from the company Ingenico Payment Services GmbH, Am Gierath 20, 40885 Ratingen, Germany (Ingenico/Ogone) is downloaded. If you have activated JavaScript in your browser and you have not installed a JavaScript blocker, then your browser may transmit personal data to Ingenico/Ogone. We do not know the data which Ingenico/Ogone links to the data that it receives or the purposes for which Ingenico/Ogone uses this data. You will find further information about this in the privacy statement of Ingenico/ Ogone: https://www.ingenico.de/payment-services/footer/datenschutzerklarung. To completely prevent the execution of JavaScript code from Ingenico/Ogone, you can install a JavaScript blocker (e.g. www.noscript.net or www.ghostery.com).
Use of personal data when selecting “Paydirekt” as payment type
If you have chosen the “Paydirekt” payment type, payment is implemented via the payment service provider Paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Germany. For this, your payment data (e.g. payment amount, details of payment recipient) and your confirmation that the payment data is correct are collected, processed, and transmitted to your bank by Paydirekt GmbH, as per article 6 paragraph 1(b) GDPR. This processing takes place only to the extent actually necessary for implementing the payment. Paydirekt GmbH then authenticates the payment via the authentication process set up for you at your bank. You can find further information about the sharing and processing of your data in the Paydirekt privacy statement at the following link: https://www.paydirekt.de/agb/index.html
5. Integration of the Trusted Shops Trustbadge
The Trusted Shops Trustbadge is built in to this website to display our Trusted Shops seal of approval and our aggregated ratings, as well as to offer Trusted Shops products to purchasers after placing an order.
In terms of a balance of interests, this serves to protect our prevailing legitimate interests in the optimum marketing of our offering as per article 6 paragraph 1 clause 1(f) GDPR. The Trustbadge and the services thereby advertised are made available by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
When the Trustbadge is accessed, the web server automatically saves what is known as a server log file which contains, for example, your IP address, date and time of access, quantity of data transferred, and the requesting provider (access data), and which documents the access. This access data is not assessed, and is automatically overwritten no later than seven days after the end of your site visit.
Further personal data is transmitted to Trusted Shops only if you have consented to this, have decided to use Trusted Shops products after concluding an order, or have already registered for use. In this case, the contractual agreement made between you and Trusted Shops applies.
6. Trustpilot
For reviews via the www.trustpilot.de review platform, the conditions and data protection provisions of trustpilot.de apply. These are published at https://de.legal.trustpilot.com/end-user-privacy-terms and https://de.legal.trustpilot.com/end-user-terms-and-conditions. If you participate (previous registration necessary) in this review system, your review is published on our website and on the Internet pages of Trustpilot and its partners, as per the provisions of trustpilot.de. For the purpose of using trustpilot.de, we share your e-mail address, name, and our internal booking number to Trustpilot A/S, Trommesalen 5, 3. sal, 1614 Copenhagen, Denmark.
7. Cookies and web analysis
To make a visit to our website attractive, to enable the use of certain functions, to display appropriate products, and for market research, on various pages we use what are known as cookies. In terms of a balance of interests, this serves to protect our prevailing legitimate interests in the optimised presentation of our offering as per article 6 paragraph 1 clause 1(f) GDPR. Cookies are small text files which are automatically stored on your end device. Some of the cookies (known as session cookies) which we use are deleted at the end of the browser session, i.e. after you close your browser. Other cookies remain on your end device and enable us to recognise your browser again on your next visit (persistent cookies). You can see how long cookies are stored in the overview of cookie settings for your web browser. You can configure your browser so that you are informed about the setting of cookies and can decide whether to accept them individually, whether to accept cookies in certain cases, or to reject them in general. Every browser differs in the way that it manages cookie settings. This is described in the help text of every browser, and explains how you can modify your cookie settings. The following links provide this information for the respective browsers:
Internet Explorer™: https://support.microsoft.com/de-de/help/17442/windows-internet- explorer-delete-manage-cookies
Edge™: https://support.microsoft.com/de-de/help/4468242/microsoft-edge-browsing- data-and-privacy-microsoft-privacy
Safari™: https://support.apple.com/de-de/guide/safari/sfri11471/13.0/mac/10.15 Chrome™: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en Firefox™: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Opera™: https://help.opera.com/de/latest/web-preferences/#cookies
If cookies are rejected, the functionality of our website may be restricted.
Use of Google (Universal) Analytics for web analysis
This website uses Google (Universal) Analytics for web analysis. It is a web analyse service of Google LLC (www.google.de). In terms of a balance of interests, this serves to protect our prevailing legitimate interests in the optimised presentation of our offering as per article 6 paragraph 1 clause 1(f) GDPR. Google (Universal) Analytics uses methods, such as cookies, which enable analysis of your use of the website. As a rule, the automatically collected information about your use of this website is transmitted to a Google server in the USA and saved there. Because IP anonymisation is activated on this website, the IP address is abbreviated before transmission within the member states of the European Union and in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address transmitted to a Google server in the USA and abbreviated there. The anonymised IP address transmitted by your browser as part of Google Analytics is fundamentally not combined with other data from Google. On behalf of the operator of this website, Google will use this information to assess your use of the website, to compile reports about the website activities, and to provide further services for the website operator, related to the website and internet use. These purposes also include our legitimate interests in the processing of the data.
Once the purpose no longer exists and we no longer use Google Analytics, the data collected in this regarded is deleted.
The headquarters of Google LLC are located in the USA, and the company is certified under the EU-US Privacy Shield. A current certificate can be viewed at https://www.privacyshield.gov/list. On the basis of this agreement between the USA and the European Commission, the latter has specified an appropriate level of data protection for companies certified under the Privacy Shield.
You can prevent the collection of the data generated by the cookie and relating to the use of the website (including your IP address) from being sent to Google and processed by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in, you can click this link to prevent the data from being collected by Google Analytics on this website in future. This places an opt-out cookie on your end device. If you delete your cookies, then you need to click the link again.
8. Advertising via marketing networks
Google AdWords Remarketing
We use Google Adwords to create advertising for this website in the Google search results, as well as on third-party websites. For this, the Google Remarketing Cookie is set when our website is visited. This enables automatic interest-based advertising on the basis of the pages which you have visited, by means of a pseudonymised cookie ID. In terms of a balance of interests, this serves to protect our prevailing legitimate interests in the optimum marketing of our website as per article 6 paragraph 1 clause 1(f) GDPR. Once the purpose no longer exists and we no longer use Google AdWords Remarketing, the data collected in this regard is deleted.
Data processing beyond this takes place only if you have agreed with Google that your web and app browser usage is linked by Google to your Google account and that information from your Google account is used to personalise advertisements which you see on the web. In this case, if you are logged in to Google while visiting our website, then Google uses your data together with Google Analytics data, in order to create and define target group lists for remarketing across different devices. For this, Google temporarily links your personal data with Google Analytics data in order to create target groups.
Google AdWords Remarketing is provided by Google LLC (www.google.de). The headquarters of Google LLC are located in the USA, and the company is certified under the EU-US Privacy Shield. A current certificate can be viewed at https://www.privacyshield.gov/list. On the basis of this agreement between the USA and the European Commission, the latter has specified an appropriate level of data protection for companies certified under the Privacy Shield.
You can deactivate the remarketing cookie via https://adssettings.google.com/authenticated?hl=de . In addition, you can find out about the setting of cookies and adjust configurations at the Digital Advertising Alliance (http://www.aboutads.info/) .
Google Adwords Conversion Tracking
In order to collect statistics about the use of our website and to assess our website so that we can optimise it for you, we also use Google Conversion Tracking. For this, Google Adwords sets a cookie (see item 4) on your computer if you have accessed our website via a Google Ad.
These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the website of an Adwords customer, and the cookie has not yet expired, then Google and the customer are able to recognise that the user has clicked the Ad and has been transferred to this site.
Each Adwords customer receives a different cookie. Cookies cannot therefore be tracked via websites by Adwords customers. The information collected by the conversion cookie is used to generate conversion statistics for Adwords customers who have selected conversion tracking. The Adwords customers learn the total number of users who have clicked on their Ad and have been transferred to a page provided with a conversion tracking tag. However, they receive no information with which users can be identified personally.
If you do not wish to participate in the tracking process, you can reject the setting of a cookie required for this, e.g. by configuring your browser to deactivate the automatic setting of cookies in general. You can also deactivate cookies for conversion tracking by configuring your browser so that cookies from the domain “www.googleadservices.com” are blocked. You will find Google’s privacy statement about conversion tracking here (https://services.google.com/sitestats/de.html).
Use of Webgains Tracking
In addition, we use a plug-in from the international affiliate network Webgains. The provider is ad pepper media GmbH (“Webgains”). With this we can measure the success of our adverts placed for us on partner websites by Webgains. In this way we wish to display publicity which is of interest to you, to make our website more attractive for you, and to obtain a fair calculation of publicity costs A tracking code is built in to our website for this purpose. By means of this code, Webgains can use cookies to collect pseudonymised data about your visit and the use of our online presence, and on this basis can provide us with aggregated, not personally identifiable statistics, especially about how many visitors to a specific partner website order something from us after clicking our advert.
You can deactivate this tracking. Thus, in your browser configuration you can prevent the storage of cookies, although this may mean that our online presence provides you only restricted functionality. In addition, you can deactivate the interest-related publicity from providers who belong to the self-regulating campaigns “YourAdChoices” (https://optout.aboutads.info) or, for example, the Network Advertising Initiative (https://optout.networkadvertising.org), although this setting is cancelled when you delete your cookies.
The legal bases for processing are article 6 paragraph 1 clauses 1(a) and (f) GDPR.
Information about the third-party provider: ad pepper media GmbH, FrankenStrasse 150C, FrankenCampus, 90461 Nuremberg, Germany. Webgains’ privacy statement: https://www.webgains.com/public/de/datenschutzerklaerung/.
9. Social Media Plug-ins
Use of Social Plug-ins by Facebook and Twitter, using the Shariff solution.
Social buttons from social networks are used on our website.
In terms of a balance of interests, this serves to protect our prevailing legitimate interests in the optimum marketing of our offering as per article 6 paragraph 1 clause 1(f) GDPR. In order to increase the protection of your data when you visit our website, these buttons are not built into the page as plug-ins without restriction, but simply by using an HTML link. This inclusion ensures that when accessing a page of our web presence which contains such buttons, no connection is initially established with the servers of the respective social network provider.
When you click one of the buttons, a new window of your browser opens and accesses the site of the respective service provider, where (possibly after entering your login data) you can, for example, actuate the Like or Share button.
For the scope and purpose of the data collection and the further processing and use of the data by the provider on its web pages, plus contact details and your rights and configuration options to protect your privacy in this regard, please refer to the provider’s privacy statement.
http://www.facebook.com/policy.php
You can also contact us via WhatsApp.
By sending a Start message I state my agreement to the applicability of the internal data protection provisions of eleven teamsports GmbH.
In particular, as per article 6 paragraph 1(a) GDPR I consent that my personal data (surname and first name, telephone number, messenger-ID, profile image, and messaging history) is stored, processed, and used in the course of using of the respective messenger, in order to send me messages. An active account with the respective provider is required for the use of the messenger service.
I am also aware that eleven teamsports GmbH uses MessengerPeople GmbH, Herzog-Heinrich-Str. 9, 80336 Munich, Germany as technical service provider and order processor for the provision of this service.
My consent to the processing of personal data can be cancelled at any time; a corresponding notification to eleven teamsports GmbH is sufficient. Further information is included in the respective data protection guidelines of eleven teamsports GmbH, the Messenger services, and MessengerPeople GmbH.
Use of conversion tracking (visitor actions pixel) from Facebook
For conversion tracking, our website uses the visitor actions pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
This allows the actions of website visitors to be tracked after they have been transferred to the provider’s website by clicking a Facebook advert. The effectiveness of the Facebook adverts can thus be assessed for statistical and market research purposes, and future advertising tools can be optimised.
For us as the operator of this website, the data collected is anonymously, and we can draw no conclusions about the identities of the users. However, the data is stored and processed by Facebook, and so a link to the respective user profile is possible, and Facebook is able to use the data for its own advertising purposes, as per the Facebook data usage guideline. This enables Facebook to display adverts on Facebook pages as well as outside of Facebook. As a website operator, we have no influence on this use of the data.
Tracking by the Facebook Pixel on this website is currently: activated.
Facebook opt-out information: This setting is also retained for all subsequent visits. However, if you delete the cookies in this browser, you have to click the link again. In addition, the opt-out is active only within the browser which you use, and only within our web domain, where the link was clicked.
You will find further information about the protection of your privacy in Facebook’s data protection information: https://www.facebook.com/about/privacy/.
You can also deactivate the “Custom Audiences” remarketing function in the Configuration for Adverts area at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. For this, you need to be logged into Facebook.
If you do not have a Facebook account, then you can deactivate use-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/
We use Facebook Pixel to design our website appropriate to needs, and to publicise it (legitimate interests as per article 6 paragraph 1(f) GDPR).
Inclusion of YouTube videos
We have built YouTube videos into our online presence; these are stored on https://www.youtube.com and can be played directly from our web pages. These are all included in “enhanced data protection mode”, i.e. no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos is the data specified in 7.2 transmitted. We have no influence on this data transmission.
Through your visit to the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in section 4 of this statement is transmitted. This takes place regardless whether YouTube provides a user account through which you are logged in, or whether no user account exists. If you are logged into Google, your data is assigned directly to your account. If you do not want to be linked to your YouTube profile, then you should log out before actuating the button. YouTube stores your data as use profiles, and uses them for advertising, market research, and/or to design its website appropriate to requirements. Such an assessment takes place (even for users who are not logged in) specially to provide appropriate advertising and to inform other users of the social network about your activities on our web pages. You have a right to object to the creation of these user profiles, but to exercise this you should contact YouTube.
You can obtain further information about the purpose and scope of the data collection and its processing by YouTube in their privacy statement. There you will also receive further information about your rights and the configuration options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA, and has made itself subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework
10. Assessment reminders via e-mail
If you have given us your express consent to this during or after your order, as per article 6 paragraph 1 clause 1(a) GDPR, we use your e-mail address to remind you to provide an assessment of your order via the assessment system which we use.
This consent can be cancelled at any time by a message to the contact option shown below.
Assessment reminder from Trusted Shops
If you have given us your express consent to this during or after your order, as per article 6 paragraph 1 clause 1(a) GDPR, we transmit your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany (www.trustedshops.de), so that they can send you an assessment reminder by e-mail.
This consent can be cancelled at any time by a message to the contact option shown below, or directly to Trusted Shops.
11. Cloudflare
Purpose of data processing
To secure our website against denial-of-service attacks, we use the services of the US-American provider Cloudflare Inc. An order processing agreement exists with this service provider, who has Privacy Shield certification, and this ensures that the data processed there on our behalf is in safe hands. The data transmitted consists of IP address, browser type, operating system used, and the respective file accessed.
Storage duration
Immediately the page is accessed, the data is deleted; we merely log this as described in the section “Visit to our website”.
Legal basis
Storage of the above-mentioned data takes place on the basis of article 6 paragraph 1(f) GDPR (“legitimate interests”). The legitimate interests are based on maintaining the availability of our website and on secure operation.
Option to object and right to opt out
By configuring the use of our website, the data subject can prevent data processing.
12. E-mail newsletter
E-mail advertising with registration for the newsletter
12.1 Emarsys
When you register for our newsletter, the data necessary for this or which you have provided separately is used by us to regularly send you our e-mail newsletter on the basis of your consent as per article 6 paragraph 1 clause 1(a) GDPR.
Deregistration from the newsletter is possible at any time, and can take place either via a message to the contact option described below or via a link for this purpose in the newsletter. After deregistration we delete your e-mail address unless you have expressly consented to a further use of your data or we have reserved a right to data use beyond this, which is legally permitted and about which we shall inform you in this statement.
The newsletter is sent on our behalf through processing by a service provider to whom we have passed on your e-mail address for this purpose.
For sending the newsletter we use the service provider Emarsys eMarketing Systems AG (Stralauer Platz 34, 10243 Berlin, Germany; www.emarsys.com/de), an Austrian company with offices in Berlin, which provides the software and infrastructure for sending consent-based electronic messages. For this, Emarsys is conscious of its responsibility to the recipients of such messages, and it has a zero-tolerance spam directive. If you have consented as subsequently described, for the content and design of the newsletter we use the preferences collected on the basis of the pseudonymised user profile, and we combine your e-mail address with the user profile for the purpose of sending the personalised newsletter.
In addition, Emarsys provides various analytical options for how the sent newsletters are opened and used, e.g. to how many users an e-mail was sent, whether e-mails were rejected, and whether users have deregistered from the list after receiving an e-mail. However, these analyses are only group-related, and we do not use them for individual assessment.
After registration, Emarsys sends you an e-mail, in order to confirm your registration (“double opt-in”). If you no longer wish to receive our newsletter, then you can deregister at any time by clicking the deregistration link included in any mailing. You will find further information about data protection at Emarsys here: https://www.emarsys.com/de/datenschutzrichtlinie/
12.2 Exponea
When you register for our newsletter, we use the data which is necessary for this or which you have provided separately, in order to regularly send you our e-mail newsletter on the basis of your consent as per article 6 paragraph 1 clause 1(a) GDPR.
Deregistration from the newsletter is possible at any time, and can take place either via a message to the contact option described below or via a link for this purpose in the newsletter. After deregistration we delete your e-mail address unless you have expressly consented to further use of your data or we have reserved the right to data use beyond this, which is legally permitted and about which we inform you in this statement.
The newsletter is sent on our behalf through processing by a service provider to whom we have passed on your e-mail address for this purpose.
For sending the newsletter we use the service provider Exponea DE GmbH (Kemperplatz 1, 10785 Berlin, Germany; https://exponea.com/de/), a Slovak company with offices in Berlin, which provides the software and infrastructure for sending consent-based electronic messages. For this, Exponea is conscious of its responsibility to the recipients of such messages, and it has a zero-tolerance spam directive. If you have consented as subsequently described, for the content and design of the newsletter we use the preferences collected on the basis of the pseudonymised user profile, and we combine your e-mail address with the user profile for the purpose of sending the personalised newsletter.
In addition, Exponea provides various analytical options for how the sent newsletters are opened and used, e.g. to how many users an e-mail was sent, whether e-mails were rejected, and whether users have deregistered from the list after receiving an e-mail. However, these analyses are only group-related, and we do not use them for individual assessment. After registration, Exponea sends you an e-mail, in order to confirm your registration (“double opt-in”). If you no longer wish to receive our newsletter, then you can deregister at any time by clicking the deregistration link included in any mailing.
You will find further information about data protection at Exponea here: https://exponea.com/de/legal/privacy-policy/
13. Data security
In the order process your personal data is transmitted via the Internet after encrypting through SSL encryption. Credit card data is not stored by us; instead it is collected and processed directly by our payment service provider. We use technical and organisational measures to protect our website and other systems against loss, destruction, modification, and the distribution of your data by unauthorised persons.
14. Bewerbermanagement
For processing the personal data transmitted to us through your application, we use the easyHR candidate management system, provided by the service provider Fravis GmbH, Sonnenhalde 10, 73489 Jagstzell, Germany.
We have carefully selected this service provider and the program, in order that we can ensure that your data is processed correctly. You will find further information about data protection at easyHR here: https://www.easyhr.de/
Purpose of processing personal data
We process personal data about you for the purpose of your application for employment. The legal basis for this is § 26 paragraph 1 combined with paragraph 8 clause 2 BDSG [German Federal Data Protection Act].
Furthermore, we may process personal data about you, as long as this is necessary to defend against legal claims asserted against us and arising from the application process. The legal basis for this is article 6 paragraph 1(f) GDPR. The legitimate interests are, for example, burden of proof in proceedings under the General Equal Treatment Act (AGG).
If an employment relationship between you and us comes into being, then as per § 26 paragraph 1 BDSG the personal data already provided by you can be further processed by us for purposes related to the employment relationship, as long as this is necessary for the implementation or termination of the employment relationship.
We process data which is related to your application. This can be general data relating to your person (such as name, address, and contact data), details about your professional qualifications and schooling, or details about your further professional education, or other details which you provide to us in connection with your application.
Recipients of personal data
We are permitted to transfer your personal data to companies connected to us, as long as this is permissible in terms of the purposes and legal bases presented in the previous section. Otherwise, personal data is processed on our behalf on the basis of contracts as per article 28 GDPR, particularly by host providers or providers of candidate management systems. Transmission to third-party countries is not envisaged.
Storage duration for personal data
We store your personal data while it is required for the decision about your application. If an employment relationship between you and us does not come into being, we may still continue to store data if it is necessary for defending against potential legal claims. The application documentation is deleted six months after the rejection decision has been communicated, unless longer storage is necessary because of legal disputes.
After contact has been made, we offer some applicants the option of inclusion in our talent pool. If the applicant agrees to longer storage of his personal data, we will store this on our systems for a period of two years. The sole purpose of this is to make it possible to contact an applicant again as soon as a suitable position arises for him. After the two-year period has expired, the personal data is deleted automatically. The applicant can request at any time that we delete his data, and we will implement his wish immediately.
Data protection rights as an applicant
a. Information
You have the right to obtain information about your personal data which we have processed, and to demand copies of this data. This includes information about the purpose of use, the category of the data used, its recipients and access rights and, if possible the planned duration of data storage or, if this is not possible, the criteria for determining this duration.
b. Correction, deletion, or restriction of processing
You have the right to demand that incorrect personal data which affects you is corrected immediately. Taking into account the purposes of processing, you have the right to demand the completion of incomplete personal data – also by means of an explanatory statement.
c. Right to object
If the processing of personal data which affects you takes place on the basis of article 6 paragraph 1(f) GDPR, then you have the right, for reasons arising from your specific situation, to object at any time to the processing of this data. We then no longer process your personal data, unless we can demonstrate compelling reasons for the processing which are worthy of protection, and they outweigh your interests, rights, and freedoms, or if the processing is for the purpose of asserting, exercising, or defending legal claims.
d. Right of cancellation
If the processing relies on consent, then you have the right to cancel the consent at any time, without this affecting the legality of the processing performed on the basis of the consent before its cancellation.
e. Right to deletion
You have the right to demand that personal data affecting you is deleted immediately, and we are obliged to delete personal data immediately when one of the following reasons applies:
· The personal data is no longer needed for the purposes for which it was collected or otherwise processed.
As per item 8.c above, you make an objection to the processing, and there are no overriding justified reasons for the processing.
· The personal data was processed illegally.
· Deletion of the personal data is required for the fulfilment of a legal obligation under the law of the European Union or of the member states to which we are subject.
This does not apply if the processing is necessary:
· for the fulfilment of a legal obligation which requires the processing under the law of the European Union or of the member states to which we are subject.
· for asserting, exercising, or defending legal claims.
f. Right to restriction of processing
You have the right to demand that we restrict the processing when one of the following prerequisites is fulfilled:
· you dispute the correctness of the personal data; the restriction then lasts for a period that allows the correctness of the personal data to be checked.
· the processing is illegal, you refuse deletion of the personal data, and instead you require that its use is restricted.
· we no longer require the personal data for the purposes of processing, but you require it for asserting, exercising, or defending legal claims, or you have made an objection to its processing, as per item 8.c above, as long as it is not yet clear whether our legitimate reasons outweigh yours. If processing was restricted as per this item (e), then – apart from its storage – this personal data may be processed only with your consent or for asserting, exercising, or defending legal claims or for protecting the rights of another natural or legal person or for reasons of an important public interest of the European Union or of a member state. If you have obtained a restriction of processing, then we will inform you before the restriction is lifted.
g. Right of appeal
Regardless of an administrative or judicial remedy to the contrary, you have the right to appeal to a supervisory authority, especially in the member state in which you reside or work, or where the presumed infringement took place, if you are of the opinion that processing of the personal data affecting you infringes GDPR.
15. Contact options and your rights
As data subject, you have the following rights:
- to
the extent described in article 15 GDPR, you have the right to demand
information about your personal data processed by us;
- as
per article 16 GDPR, you have the right to demand immediate rectification of
inaccurate personal data stored by us, or its completion, if incomplete;
- as
per article 17 GDPR, you have the right to demand erasure of your personal data
stored by us, as long as further processing is not required
- for exercising the right of freedom of expression and information;
- for compliance
with a legal obligation;
- for reasons of public interest, or
- for the establishment, exercise or defence of legal claims;
- as
per article 18 GDPR, you have the right to demand the restriction of processing
of your personal data stored by us, if
- you contest the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data;
- we no longer need the personal data, but you require the data for the
establishment, exercise or defence of legal claims, or
- as per article 21 GDPR you have raised an objection to its processing;
- as per article 20 GDPR, you have the right to demand that the personal data which you provided to us is made available to you or to another controller in a structured, commonly used, machine-readable format;
- as per article 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, for this you can contact the supervisory authority of your habitual residence, place of work, or of our company headquarters.
For questions relating to collection, processing, or use of your personal data, for information, correction, blocking, or deletion of data, as well as cancellation of consent which has been granted or objection to a specific use of data, please contact:
Said-Elham Sadat - DSB Münster GmbH
Martin-Luther-King-Weg 42-44
48155 Münster, Germany
+49 251 718790
********************************************************************
Right to object
In terms of a balance of interests, if we process personal data to protect our prevailing legitimate interests as explained above, you can object to this processing with future effect. If the processing takes place for the purposes of direct marketing, then you can exercise this right at any time, as described above. If the processing takes place for other purposes, you have a right to object only if there are reasons resulting from your particular situation.
After you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling reasons for the processing which are worthy of protection, and they outweigh your interests, rights, and freedoms, or if the processing is for the purpose of asserting, exercising, or defending legal claims.
This does not apply if the processing serves the purposes of direct marketing. In this case, we will no longer process your personal data for this purpose.