PRIVACY NOTICE
As the data controller we have prepared this privacy notice to inform you in accordance with the requirements of the Regulation (EU) 2016/679 (General Data Protection Regulation- GDPR) about the nature, scope and purpose of the processing of personal data in relation to the services we offer on our web site.
I.Definitions
„Personal data“ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
„Processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
„Controller“ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
„Recipient“ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
II.General information
1. The data controller
Brandextend GmbH & Co. KG
Lenzhalde 47
70192 Stuttgart
Germany
Email: welcome@brandextend.de
Telefon: +49 (0) 711 184241-0
Fax: +49 (0) 711 184241-1
2. Contact details of the data protection officer
OBSECOM GmbH
Königstr. 40
70173 Stuttgart
Germany
Telephone: 0711 / 4605025-40
Telefax: 0711 / 4605025-49
E-Mail: privacy@obsecom.de
Website: https://www.obsecom.de
3. Legal bases
We process personal data based on at least one of the following legal bases:
In this privacy policy we refer to the respective legal basis of the individual data processing operations.
4. Onward transfer of personal data
We forward personal data to recipients (data processors or other third parties) only to the extent required and only if one of the subsequent conditions are met:
5. Third countries
The transfer of personal data to a third country or an international organisation outside the European Union (EU) or the European Economic Area (EEA) is subject to legal or contractual permission only in accordance with the provisions under Art. 44 et seq. GDPR. It means that pursuant to Art. 45 GDPR an adequacy decision of the EU commission must be present for the respective country, appropriate safeguards for data privacy under Art. 46 GDPR, or Binding Corporate Rules under Art. 47 GDPR do exist.
6. Rights of data subjects
As a data subject you have the following right:
If you wish to assert the data subject rights mentioned above, you can contact us or our data protection officer at any time using the contact details above.
7. Erasure and restriction of personal data
Unless otherwise provided for in this privacy notice, personal data will be deleted, if these data are no longer necessary in relation to the purposes for which they were collected or otherwise processed and the deletion does not conflict with statutory retention requirements. In addition, we will erase the personal data processed by us in accordance with Art. 17 GDPR on your request, if the conditions provided therein are met. If personal data are required for other lawful purposes, they will not be erased, but their processing will be restricted in accordance with Art. 18 GDPR.
In case of restriction, the data will not be processed for other purposes. This applies, for example, to personal data that must be retained by us for commercial or tax law reasons. For example, data must be kept for 6 years pursuant to Section 257 (1) Nos. 2 and 3 German Commercial Code (HGB) and Section 147 (1) Nos. 2, 3, 5 GERMAN Tax Code (AO); data must be kept for 10 years pursuant to Section 257 (1) Nos. 1 and 4 HGB and Section 147 Abs. 1 No. 1, 4, 4a AO.
8. Cookies
Our website uses cookies. Cookies are small text files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, PC, etc.) when you visit our website. Cookies do no harm to your device, nor do they contain any viruses or other malicious software. The cookie stores information which is created in relation to the specific device you are using. However, this does not mean that we become immediately aware of your identity. Cookies are mainly used to make the website more user-friendly, effective and secure.
We use session cookies to recognize that you have already visited individual pages of our website. These cookies also support certain features and functionalities on our website. Session cookies are deleted after you have left our website.
The data processed by cookies are required for the purposes mentioned above in order to protect our legitimate interests which result thereof, as well as those of third parties according to Art. 6 para. 1 lit. f GDPR.
Most browsers accept cookies automatically. However, if you do not wish to accept cookies, you can configure your browser so that no cookies are stored on your device or a message is displayed before new cookies are created. A general objection to the use of cookies used for online marketing purposes can be made for a variety of services, such as explained at http://www.youronlinechoices.com/or the opt-out page of the Network Advertising Initiative http://optout.networkadvertising.org. However, disabling cookies may mean that you may not be able to use all the features of our website.
III.Individual processing operations
1. Hosting
In order to make available our website, we use services provided by hosting companies, such as: Provision of web servers, disk space, database services, and security or maintenance services. Here we, or our hosting providers, process personal data of the website visitors on the basis of our legitimate interests in providing efficient and secure access to our website in accordance with Art. 6 para. 1 lit. f GDPR.
2. Access data and log files
By visiting our website or its individual pages, your device’s internet browsers automatically sends information to the server of our website. This information is stored in so-called log files by us or our hosting provider and will be deleted after 6 months at the latest.
The following information is stored:
This data will be used for the following purposes:
The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes mentioned above. Under no circumstance will we use the personal data collected for the purpose of drawing conclusions about a person.
3. Other modes of contact
If you contact us using the contact information published on our website (for example, by e-mail) and herewith provide us with personal data, we will use this information solely for the purpose of processing your request and then delete it afterwards, unless further storage is required for the documentation of other transactions (for example, subsequent conclusion of a contract). Legal basis for the data processing is your voluntary consent in accordance with Art. 6 para. 1 lit. a GDPR.
4. Job application
If you would like to apply for a job via the given e-mail address we kindly ask you to provide your name, contact information and further application documents so that we can review your application and get in personal contact with you. The data processing for the purpose of processing your application is carried out in accordance with Art. 6 para. 1 lit. a GDPR based on your voluntary consent. Taking into account the limitation periods of the General Equal Treatment Act (AGG), application documents will be kept for a period of 6 months after completion of the application process and then deleted, unless storage is required for the documentation of other operations (for example, subsequent recruitment
IV. Google Services
Provider of the services below is Google Ireland Limited (Register No: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (hereafter „Google“).
The legal basis for the use of the following Google services are our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR.
Google has joined the EU/US Privacy Shield Agreement and is committed to uphold EU data privacy standards. Google therefore meets the EU requirements for legitimising the transfer of personal data to the United States. For information about Google’s commitment, please visit:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
For more information about how Google deals with your personal data, please refer to Google's Privacy Policy: https://www.google.com/intl/de/policies/privacy/. For information on the use of data for advertising purposes by Google, setting and your right to object please refer to: https://www.google.de/policies/privacy/partners/
https://www.google.de/policies/technologies/ads/
https://adssettings.google.com/
1. Google Analytics
Our Website uses Google Analytics. Google Analytics uses cookies. Google Analytics collects information about the visits of website users and analyses their behaviour. This data serves the purpose of developing a user-friendly website design, the continuous optimisation of our services and offers, to measure the success of marketing activities, and to create statistical analysis. In this context, pseudonymised user profiles are created and cookies are used. Google Analytics collects information such as browser type / version, operating system, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of server request. The information generated is transferred to the US and stored on servers owned by Google. The collected user data and event data will be deleted after 26 months. Information may also be transferred to third parties if required by law or if third parties process this data on behalf of us or Google. Under no circumstances will your IP address be merged with any other data that is kept by Google. The IP address will be anonymised so that assignment is impossible. You can prevent the local storage of cookies by configuring your browser software correspondingly. However, be advised that in this case you may not be able to use all the features of this website to the full extent possible. Additionally, in order to prevent Google to collect and process the data generated in relation to your use of the website you may download and install the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en. You can prevent Google from gathering your data by clicking on this link
which sets an opt-out cookie on your computer. This cookie ensures that Google Analytics will not collect and store any user data from your browser when visiting this website. Attention: If you delete your cookie cache, this will result in the opt-out cookie being deleted as well. Then you must re-activated the opt-out cookie again.
2. Google Web Fonts
This website uses external typesets from Google, so-called web fonts. To do this, when you visit the website your browser loads the required web font into your browser cache. If your browser does not support this feature, your computer will use a standard font in order to display the website. This service collects your IP address, which of our websites you have visited and, if necessary, other data required by Google for the provision of the web fonts. The generated information about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of us or Google.
3. Google Tag Manager
This website uses Google Tag Manager in order to manage website through a single tag management interface. Google Tool Manager only implements tags. This means: no cookies are used and no personal data is collected. Google Tag Manager triggers other tags, which may collect data. However, Google Tag Manager does not access this data. If deactivated at the domain or cookie level, it will remain effective for all tracking tags as far as they are implemented with the Google Tag Manager.