Pulp and Paper Technical Association of Canada (hereinafter “PAPTAC”) welcomes your visit to this website and your interest in our company and our services. The protection of personal data is important to us.
The use of our website is usually possible without providing personal information. If the person concerned wishes to use additional services (such as newsletters) from PAPTAC via our website, the processing of personal data may be necessary. If the processing of personal data is required for the service and there is no legal basis for such processing, we generally obtain the consent of the data subject.
The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always in accordance with the General Data Protection Regulation and in compliance with PAPTAC’s country-specific privacy policy. According to which, visitors to our website will be informed about the nature, scope and purpose of the personal data collected, used and processed by us and we will inform the persons concerned about the rights to which they are entitled.
PAPTAC, as the data controller and responsible party, has implemented technical and organizational measures to ensure the highest possible protection of the personal data processed through this website. Nevertheless, Internet-based data transmissions can generally have security holes, hence absolute protection can not be guaranteed. For this reason, each and every person concerned is free to provide us with personal data in alternative ways.
Definitions of the terms used
The PAPTAC Privacy Policy is based on the terminology used in the General Data Protection Regulation (GDPR). To ensure comprehensibility, we explain the terms used in advance.
a) Personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter the “data subject”). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.
b) The person concerned
The person concerned is any identified or identifiable natural person whose personal data is processed by the party responsible.
c) Processing
Processing means any process or series of operations related to personal data, such as collecting, organizing, storing, adapting or modifying, reading, querying, using, with or without the aid of automated procedures; disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.
d) Restriction of processing
Restriction of processing is the labeling of stored personal data with the purpose to limit their future processing.
e) Profiling
Profiling is any kind of automated processing of personal data that consists of using personal information to evaluate certain personal aspects relating to a natural person in terms of work performance, economic condition, health, personal preferences, interests, reliability, behavior, whereabouts, or location of that natural person to analyze or predict.
f) Pseudonymisation
Pseudonymisation is the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the need for additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data can not be assigned to an identified or identifiable natural person.
g) Responsible party or data controller
The responsible party or data controller is the natural or legal person, public authority, institution or other body that, alone or in cooperation with others, decides on the purposes and means of processing personal data. The purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.
h) Processor
The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the data controller.
i) Receiver
Recipient is a natural or legal person, agency or other entity to whom Personal Data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered as beneficiaries.
j) Third parties
Third party is a natural or legal person, public authority, institution, body or other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the data controller or the processor to process the personal data.
k) Consent
Consent is any voluntarily given and unambiguously expressed statement or other form of unambiguous confirmatory act given by the data subject for the particular case, by which the data subject indicates that he/she consent to the processing of the personal data concerning him / her.
Name and address of the responsible party :
Pulp and Paper Technical Association of Canada
6300 Ave Auteuil, suite 440
Brossard (Québec) J4Z 3P2 CANADA
Phone: (514) 392-0265
@: [email protected]
Name and Address of the Data Protection Officer
Greg Hay
For all questions and suggestions on data protection, anyone can directly contact our data protection officer.
Cookies
The PAPTAC website uses cookies. Cookies are text files that are stored and saved on a computer system via an Internet browser.
Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited websites and servers to distinguish the individual’s browser from other internet browsers that contain other cookies. A particular web browser can be recognized and identified by the unique cookie ID.
By using cookies, PAPTAC can provide users of this website with more user-friendly services that would not be possible without the cookie setting.
By means of a cookie the information and other offers on our website can be optimized for the user. Cookies allow us, as already mentioned, to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website.
The data subject can prevent the setting of cookies through our website at any time by means of a corresponding setting of the Internet browser used and thus permanently contradicting the setting of cookies. Furthermore, cookies that have been already set can be deleted at any time via an internet browser or other softwares. This should be possible in all common internet browsers. When deactivating cookies in the Internet browser used, due to compatibility issues, it may happen that not all the features of our website will be functional.
Collection of general data and information
The website of PAPTAC collects a series of general data and information each time the website is accessed by person concerned or an automated system. This general data and information is stored in the log files of the server. You can record the (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrers), (4) the sub-web pages which (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the accessing system’s Internet service provider and (8 ) other similar data and information used in the case of attacks on our information technology systems.
By using this general data and information, PAPTAC does not draw any conclusions about the data subject. Instead, this information is required to (1) properly provide the contents of our website, (2) to optimize the content of our website and to promote it, (3) to ensure the continued functioning of our systems and the technology of our website, and (4 ) to provide law enforcement authorities with the information necessary in the event of a cyberattack. The collected data and information are therefore statistically and further evaluated by PAPTAC with the aim of increasing data protection and data security in our company in order to ultimately ensure the best possible level of protection for the personal data we process.
Subscription to our newsletter
On the PAPTAC website, users are given the opportunity to subscribe to our newsletter. The personal data transmitted to the data controller when the newsletter is ordered results from the input mask used for this purpose.
PAPTAC informs its customers and business partners at regular intervals by means of a newsletter about company offers. The newsletter of our company can only be received by the data subject if (1) the data subject has a valid email address and (2) the data subject has signed up for receiving the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address entered by the person concerned for the first time for newsletter mailing using the double-opt-in procedure. This confirmation email is used to check whether the owner of the e-mail address is the same person who is authorized to receive the newsletter.
When subscribing to the newsletter, we also store the IP address of the computer system used by the person concerned at the time of registration, as well as the date and time of registration, as assigned by the Internet Service Provider (ISP). The collection of this data is necessary in order to understand the (possible) misuse of the affected person’s e-mail address at a later date and therefore serves as legal safeguards for the data controller.
The personal data collected as part of a subscription to the newsletter will only be used to send our newsletter and the related changes. Subscription to our newsletter may be terminated by the person concerned at any time. The consent to the storage of personal data that the data subject has given us for the newsletter dispatch can be revoked at any time. For the purpose of revoking the consent, there is a corresponding link in each newsletter. It is also possible to deregister at any time directly with the data controller in any other way.
Deletion and blocking of personal data
The data controller processes and stores personal data of the data subject only for the period required to achieve the purpose of the storage or as provided for in laws or regulations to which the person responsible is subject.
If the purpose of the storage is omitted or if a legally prescribed retention period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
Rights of the person concerned
a) Right to confirmation
Each data subject has the right to ask the person responsible for confirmation of the processing of the personal data concerned. If the person concerned wishes to make use of this confirmation right, they can contact the data protection officer of the responsible person at any time.
b) Right to information
Any person affected by the processing of personal data has the right at any time to obtain free information from the person responsible about the personal data stored about him/her and a copy of this information. Furthermore, the data subject has the following information:
- the processing purposes
- the categories of personal data being processed
- the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations
- if possible, the planned duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration
- the right of rectification or erasure of the personal data concerning them or restriction of processing by the controller or a right to object to such processing
the existence of a right of appeal to a supervisory authority - if the personal data are not collected from the data subject: all available information on the source of the data
- the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject
In addition, the data subject has a right of access as to whether personal data has been transmitted to a third country or to an international organization. If that is the case, then the data subject has the right to obtain information about the appropriate guarantees in connection with the transfer.
If the person concerned wishes to make use of this right to information, they can contact the data protection officer of the person in charge at any time.
c) Right to rectification
Any person affected by the processing of personal data has the right to demand the immediate correction of incorrect personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data, taking into account the purposes of the processing.
If the person concerned wishes to exercise this right to rectification, they can contact the data protection officer of the person in charge at any time.
d) Right to cancellation (right to be forgotten)
Anyaffected person by the processing of personal data shall have the right to require the controller to immediately delete the personal data concerning him/her, provided that one of the following reasons is satisfied and the processing is not required:
- The personal data has been collected or otherwise processed for such purposes for which they are no longer necessary.
- The data subject revokes their consent on which the processing was based Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR and there is no other legal basis for the processing.
- According to Art. 21 (1) GDPR, the data subject submits an objection against the processing and there are no legitimate reasons for the processing, or the data subject objects to the processing according to Art. 21 (2) GDPR.
- The personal data were processed unlawfully.
- The deletion of personal data is required to fulfill a legal obligation under Union or national law to which the controller is subject.The personal data were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
- If one of the above reasons is correct and the person concerned wishes to arrange for the deletion of personal data stored at PAPTAC, they may contact the data protection officer of the person in charge at any time.
- If personal data has been disclosed by PAPTAC and if our company is responsible for deleting personal data as the person responsible pursuant to Art. 17 (1) GDPR, PAPTAC will take appropriate measures to inform other data controllers, taking into account available technology and implementation costs who process the published personal data.
e) Right to restriction of processing
Any affected party by the processing of personal data shall have the right to require the controller to restrict the processing if any of the following conditions apply:
- The accuracy of the personal data is contested by the data subject for a period of time that enables the person responsible to verify the accuracy of the personal data.
- The processing is unlawful, the data subject refuses to delete the personal data and instead requests the restriction of the use of personal data.
- The data controller no longer needs the personal data for processing purposes, but the data subject requires them to assert, exercise or defend their rights.
- The person concerned has objection to the processing acc. Art. 21 para. 1 DSGVO and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the data subject.
- If one of the above conditions is met and the person concerned wishes to request the restriction of personal data stored by the PAPTAC, they may at any time contact the data protection officer of the person in charge.
f) Data transferability
Any person affected by the processing of personal data shall have the right to receive the personal data concerning him / her, provided to a controller by the data subject in a structured, common and machine-readable format. He/She also has the right to transfer this data to another party, provided that the processing is based on the consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or to a contract pursuant to Art. 6 para. 1 (b) GDPR and processing by automated means, unless the processing is necessary for the performance of a task in the public interest or in the exercise of public authority delegated to the controller.
Furthermore, in exercising their right to data portability under Article 20 (1) of the GDPR, the data subject has the right to obtain that the personal data are transmitted directly from one controller to another, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.
In order to assert the right to data portability, the data subject may at any time contact the data protection officer of PAPTAC
g) Right to object
Any person concerned by the processing of personal data shall have the right, at any time, to object to the processing of personal data concerning him / her pursuant to Article 6 (1) (e) or (f) of the GDPR for reasons arising from his/her particular situation.
PAPTAC no longer processes personal data in the event of an objection, unless we can prove compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
In order to exercise the right of opposition, the data subject may directly contact the PAPTAC Data Protection Officer. The data subject is also free, in the context of the use of information society services, notwithstanding Directive 2002/58 / EC, to exercise his right of opposition by means of automated procedures using technical specifications.
h) Automated decisions in individual cases
Any person concerned with the processing of personal data shall have the right not to be subject to a decision based solely on automated processing which has a legal effect, or similarly appreciably affects its performance, unless the decision (1) applies to the conclusion or (2) permissible under Union or Member State legislation to which the controller is subject, and where such legislation provides for appropriate measures to safeguard the rights and freedoms and legitimate interests of the person concerned or (3) with the express consent of the data subject.
If the decision (1) is required for the conclusion or performance of a contract between the data subject and the controller or (2) it takes place with the express consent of the data subject, PAPTAC shall take appropriate measures to safeguard the rights and freedoms and legitimate interests of the persons concerned, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and to challenge the decision.
If the data subject wishes to assert rights with regard to automated decisions, they can contact the data protection officer of the person in charge at any time.
As a responsible company we refrain from automatic decision-making or profiling.
i) Right to revoke a data protection consent
Any person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time.
If the data subject wishes to assert their right to revoke consent, they can contact the data protection officer of the person in charge at any time.
Data protection in applications and in the application process
The person responsible collects and processes the personal data of applicants for the purpose of processing the application process. The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents to the controller by electronic means, for example by e-mail or via a web form available on the website. If the controller concludes a contract of employment with an applicant, the data transmitted will be stored for the purposes of the employment relationship in accordance with the law. If no employment contract is concluded with the applicant by the controller, the application documents will be automatically deleted three months after the rejection decision has been announced, unless deletion precludes other legitimate interests of the controller or the data subject has consented to a longer storage period. Other legitimate interest in this sense, for example, a burden of proof in a procedure under the principle of equal treatment and the respective national legal implementation.
Privacy Policy on Operation and Use of Facebook
The person in charge integrated components of the company Facebook on this website. Facebook is a social network.
A social network is an Internet-based social meeting place, an online community that typically allows users to communicate with each other and interact in virtual space. A social network can serve as a platform to exchange views and experiences, or allows the Internet community to provide personal or business information. Facebook allows social network users to create private profiles, upload photos and socialize via friend requests.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Persons responsible for the processing of personal data, if the person concerned lives outside the US or Canada, are reachable at Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.
Each visit to any of the individual pages of this website, which is operated by the data controller and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the person concerned automatically by the respective Facebook Component causes a representation of the corresponding Facebook component of Facebook to download. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_US. As part of this technical process, Facebook receives information about which specific subpage of our website is visited by the person concerned.
If the data subject is simultaneously logged into Facebook, with each visit to our website by the data subject, Facebook recognizes which specific subpage of our website the data subject visits during the entire duration of the respective stay on our website. This information is collected through the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the person concerned activates one of the Facebook buttons integrated on our website, for example the “Like” button, or if the person concerned makes a comment, Facebook assigns this information to the personal Facebook user account of the person concerned and saves this personal data.
Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged into Facebook at the same time as accessing our website; this happens regardless of whether the person clicks on the Facebook component or not. If such a transfer of this information to Facebook is not wanted by the data subject, he/she can prevent the transfer by logging out of their Facebook account before visiting our website.
The data policy published by Facebook, which is available at https://de-de.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. It also explains what options Facebook offers to protect the privacy of the data subject. In addition, further applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.
Privacy statement for the use of HubSpot
Our website uses HubSpot, a software of HubSpot Inc., USA. This software is used in the field of inbound marketing and helps us, among other things, by means of statistical analysis and evaluation of the logged user behavior, to better coordinate and optimize our marketing strategy. Cookies are used (see below). You can prevent the storage of cookies by setting your browser software accordingly at any time or by the deletion of the cookies already stored. Please note that if cookies are blocked, you may not be able to use the services provided on our website to their fullest extent. For more information, see the terms of use and the data protection guidelines of the HubSpot Inc. at http://www.hubspot.com/terms-of-service and http://www.hubspot.com/privacy-policy. All information we collect is subject to this data protection regulation. HubSpot is subject to the TRUSTe’s Privacy Seal and the U.S. – EU Safe Harbor Framework and the U.S. – Swiss Safe Harbor Framework. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1.
Privacy Policy on Operation and Use of Twitter
The data controller has integrated Twitter components on this website. Twitter is a multilingual publicly available microblogging service where users can post and distribute so-called tweets, which are limited to 280 characters. These short messages are available to anyone, including non-Twitter subscribers as well. The tweets are also displayed to the so-called followers of the respective user. Followers are other Twitter users who follow a user’s tweets. Twitter also allows you to address a broad audience via hashtags, links or retweets.
The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
Each visit to any of the individual pages of this website, which is operated by the data controller and on which a Twitter component (Twitter button) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective Twitter component causes to download a presentation of the corresponding Twitter component of Twitter. Further information on the Twitter buttons is available at https://about.twitter.com/en/resources/buttons. As part of this technical process, Twitter receives information about which specific subpage of our website is visited by the person concerned. The purpose of the integration of the Twitter component is to allow our users to redistribute the contents of this website, to promote this website in the digital world and to increase our visitor numbers.
If the data subject is simultaneously logged into Twitter, with each visit to our website by the data subject, Twitter recognizes which specific subpage of our website the data subject visits during the entire duration of the respective stay on our website. This information is collected through the Twitter component and assigned through Twitter to the data subject’s Twitter account. If the person concerned activates one of the Twitter buttons integrated on our website, the data and information transmitted with it are assigned to the personal Twitter user account of the person concerned and stored and processed by Twitter.
Twitter always receives information via the Twitter component that the data subject has visited our website if the data subject is logged into Twitter at the same time as accessing our website; this happens regardless of whether the subject clicks on the Twitter component or not. If such a transfer of this information to Twitter is not wanted by the data subject, he/she can prevent the transfer by logging out of their Twitter account before visiting our website.
The applicable privacy policies of Twitter are available at https://twitter.com/privacy?lang=en.
Privacy Policy for Operation and Use of LinkedIn
The data controller has integrated components from LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that allows users to connect to existing business contacts and make new business contacts. Over 400 million registered people use LinkedIn in more than 200 countries. This makes LinkedIn currently the largest platform for business contacts and one of the most visited websites in the world.
LinkedIn’s operating company is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. Privacy Policy outside the United States is handled by LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Each visit to any of the individual pages of this website, which has a LinkedIn component (LinkedIn plug-in), causes the browser used by the person concerned to download a corresponding representation of the LinkedIn component. More information about the LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. As part of this technical process, LinkedIn receives information about which specific subpage of our website is visited by the data subject.
If the data subject is simultaneously logged into LinkedIn, with each visit to our website by the data subject, LinkedIn recognizes which specific subpage of our website the data subject visits during the entire duration of the respective stay on our website. This information is collected through the LinkedIn component and assigned through LinkedIn to the data subject’s LinkedIn account. If the person concerned activates one of the LinkedIn buttons integrated on our website, the data and information transmitted with it are assigned to the personal LinkedIn user account of the person concerned and stored and processed by LinkedIn.
LinkedIn always receives information via the LinkedIn component that the data subject has visited our website if the data subject is logged into LinkedIn at the same time as accessing our website; this happens regardless of whether the subject clicks on the LinkedIn component or not. If such a transfer of this information to LinkedIn is not wanted by the data subject, he/she can prevent the transfer by logging out of their LinkedIn account before visiting our website.
At https://www.linkedin.com/psettings/guest-controls, LinkedIn offers the ability to opt out of email messages, text messages, and targeted ads, as well as manage ad settings. LinkedIn also uses partners like Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, who can set cookies. Such cookies can be refused at https://www.linkedin.com/legal/cookie-policy. LinkedIn’s privacy policy is available at https://www.linkedin.com/legal/privacy-policy. LinkedIn cookie policy is available at https://www.linkedin.com/legal/cookie-policy.
Privacy Policy for Operation and Use of Xing
The data controller has integrated components from Xing on this website. Xing is an Internet-based social network that allows users to connect to existing business contacts and make new business contacts. The individual users can create a personal profile at Xing. Companies can, for example, create company profiles or publish job offers on Xing.
The operating company of Xing is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.
Each visit to any of the individual pages of this website, which has a Xing component (Xing plug-in), causes the browser used by the person concerned to download a corresponding representation of the Xing component.
More information about the Xing plug-ins can be found at https://dev.xing.com/plugins.
As part of this technical process, Xing receives information about which specific subpage of our website is visited by the data subject.
If the data subject is simultaneously logged into Xing, with each visit to our website by the data subject, Xing recognizes which specific subpage of our website the data subject visits during the entire duration of the respective stay on our website. This information is collected through the Xing component and assigned through Xing to the data subject’s Xing account. If the person concerned activates one of the Xing buttons integrated on our website, the data and information transmitted with it are assigned to the personal Xing user account of the person concerned and stored and processed by Xing.
Xing always receives information via the Xing component that the data subject has visited our website if the data subject is logged into Xing at the same time as accessing our website; this happens regardless of whether the subject clicks on the Xing component or not. If such a transfer of this information to Xing is not wanted by the data subject, he/she can prevent the transfer by logging out of their Xing account before visiting our website.
Xing’s privacy policy, available at https://www.xing.com/privacy, provides information about the collection, processing and use of personal information by Xing. In addition, Xing has posted privacy notices for the XING Share button at https://www.xing.com/app/share?op=data_protection.
Privacy Policy for Operation and Use of YouTube
The data controller has integrated YouTube components on this website. YouTube is an internet video portal that allows video publishers to freely watch video clips and other users for free viewing, rating and commenting. YouTube allows the publication of all types of videos,
therefore, both complete film and TV programs, but also music videos, trailers or videos made by users themselves are available on the Internet portal.
YouTube’s operating company is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
Each visit to any of the individual pages of this website, which has a YouTube component (YouTube plug-in), causes the browser used by the person concerned to download a corresponding representation of the YouTube component.
More information about YouTube can be found at https://www.youtube.com/yt/about/en/.
As part of this technical process, YouTube and Google receive information about which specific subpage of our website is visited by the data subject.
If the data subject is simultaneously logged into YouTube, with each visit to our website by the data subject, YouTube recognizes which specific subpage of our website the data subject visits during the entire duration of the respective stay on our website. This information is collected through the YouTube component and assigned through YouTube and Google to the data subject’s YouTube and Google account. If the person concerned activates one of the YouTube or Google buttons integrated on our website, the data and information transmitted with it are assigned to the personal YouTube and Google user account of the person concerned and stored and processed by YouTube.
YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the same time as accessing our website; this happens regardless of whether the subject clicks on the YouTube video component or not. If such a transfer of this information to YouTube and Google is not wanted by the data subject, he/she can prevent the transfer by logging out of their YouTube account before visiting our website.
YouTube’s privacy policy, available at https://www.google.com/intl/en/policies/privacy/ identifies the collection, processing, and use of personally identifiable information by YouTube and Google.
Privacy Policy on Use and Use of WhatsApp
The person in charge integrated components of WhatsApp on this website. WhatsApp is a messenger service. In this context, we offer our applicants the opportunity to contact us via WhatsApp.
If you use this option, you will automatically send us your mobile number.What should you consider when applying via WhatsApp?
The terms of use and privacy policy of WhatsApp apply. The data policy published by WhatsApp, available at https://www.whatsapp.com/legal/ provides information about the collection, processing and use of personal data by WhatsApp.
It also explains what settings WhatsApp offers to protect the privacy of the data subject.
Operating Company of WhatsApp Inc., Arbitration Opt-Out, 1601 Willow Road, Menlo Park, CA 94025, USA.
The person responsible for the processing of personal data is WhatsApp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, if the data subject resides outside the United States or Canada.
We will not store your mobile number or personal information in the message for any purpose other than WhatsApp chat.
Please do not send us any pictures or videos as part of the communication.
The chat will be deleted at the latest 3 months after the last contact with the candidate.
Privacy Policy for Operation and use of Google Analytics (with anonymization feature)
The controller has integrated on this website the component Google Analytics (with anonymization function). Google Analytics is a web analytics service. Web analysis is the collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on which website an affected person has come to a website (so-called referrers), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used to optimize a website and for a cost-benefit analysis of Internet advertising.
The operating company of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
The data controller uses the addition “_gat._anonymizeIp” for web analytics via Google Analytics. By means of this addendum, the IP address of the Internet access of the data subject will be shortened and anonymised by Google if the access to our website is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyze visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile for us online reports showing the activities on our websites, and to provide other services related to the use of our website.
Google Analytics uses a cookie on the information technology system of the person concerned. What cookies are, has already been explained above.
By using this cookie Google is enabled to analyze the usage of our website.
Each visit to any of the individual pages of this website where Google Analytics component has been integrated by the data collector, the Internet browser on the information technology system of the person concerned is automatically initiated by the respective Google Analytics component to submit data to Google for online analysis purposes. As part of this technical process, Google will be aware of personal data, such as the IP address of the person concerned, which serve, among other things, Google to track the origin of the visitors and clicks, and subsequently make commission settlements possible.
The cookies store personally identifiable information, such as access time, the location from which access was made, and the frequency of site visits by the data subject. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the data subject is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.
The affected person can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradicting the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other softwares.
Furthermore, the data subject has the option of objecting to and preventing the collection of the data generated by Google Analytics for the use of this website and the processing of this data by Google. To do this, the person must download and install a browser add-on at https://tools.google.com/dlpage/gaoptout
This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as a contradiction. If the data subject’s information technology system is later deleted, formatted or reinstalled, the data subject must re-install the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or any other person within their sphere of control, it is possible to reinstall or reactivate the browser add-on.
Additional information and Google’s privacy policy can be found at https://www.google.com/intl/en/policies/privacy and http://www.google.com/analytics/terms/en.html. Google Analytics is explained in more detail at https://www.google.com/intl/de_de/analytics.
Privacy Policy on Operation and Use of Google AdWords
The controller has integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to run both Google and Google Network search engine results. Google AdWords allows an advertiser to pre-set keywords that will display an ad on Google’s search engine results only when the search engine retrieves a keyword-related search result. In the Google Network, ads are distributed on topical web pages using an automated algorithm and according to pre-defined keywords.
The operating company for the services of Google AdWords is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to promote our website by displaying interest-based advertising on third-party websites and in the search engine results of Google’s search engine and by displaying advertisements on our website.
f a data subject arrives on our website via a Google ad, a so-called conversion cookie will be stored on Google’s information technology system by Google.
What cookies are, has already been explained above.
A conversion cookie expires after thirty days and is not used to identify the data subject. Regarding the conversion cookie, if the cookie has not yet expired on our website, it can be traced back to certain sub-pages such as the shopping cart from an online shop system. The conversion cookie allows both us and Google to understand whether a data subject who came to our website via an AdWords ad generated revenue, ie, completed or canceled a purchase.
The data and information collected through the use of the conversion cookie are used by Google to create visitor statistics for our website. These visitor statistics are then used by us to determine the total number of users who have been sent to us through AdWords ads, in order to determine the success or failure of each AdWords ad and to optimize our AdWords ads for the future.
Neither our company nor any other Google AdWords advertiser receives any relevant information from Google that could identify the data subject.
The conversion cookie stores personally identifiable information, such as the web pages visited by the person concerned. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the data subject, will be transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.
The person concerned can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradicting the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other softwares.
Furthermore, the data subject has the opportunity to object to Google’s interest-based advertising. To do this, the person concerned must access the link www.google.com/settings/ads from each of the Internet browsers they use and make the desired settings there.
Additional information and Google’s privacy policy can be found at https://www.google.com/intl/en/policies/privacy/
Legal basis of processing
Art. 6 I lit. A GDPR serves our company as the legal basis for processing operations in which we obtain consent for a particular processing purpose.
If the processing of personal data is necessary to fulfill a contract of which the data subject is a party, as is the case, for example, in processing operations necessary for the supply of goods or the provision of any other service or consideration, processing shall be based on Art. 6 I lit. b DSGVO.
The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries regarding our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c DSGVO.
In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and his or her name, age, health insurance or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d DSGVO.
Ultimately, processing operations could be based on Art. 6 I lit. f DSGVO. On this legal basis, processing operations that are not covered by any of the above legal bases are required if processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the person concerned prevail. Such processing operations are particularly allowed to us because they have been specifically mentioned by the European legislator. In that regard, it is considered that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, second sentence, DSGVO).
The processing of personal data based on Article 6 I lit. f DSGVO is our legitimate interest in conducting our business for the benefit of all of our employees and our shareholders.
Duration for which the personal data is stored
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the deadline, the corresponding data will be routinely deleted, if they are no longer required to fulfill the contract or to initiate a contract.
Legal or contractual provisions for the provision of personal data; Necessity for the conclusion of the contract; Obligation of the data subject to provide the personal data; possible consequences of non-provision
We clarify that the provision of personal information is partly required by law (such as tax regulations) or may result from contractual arrangements (such as details of the contractor). Occasionally, it may be necessary for a contract to be concluded that an affected person provides us with personal data that must subsequently be processed by us. For instance, the data subject is required to provide us with personal information upon signing an employment contract with us. Failure to provide the personal data would mean that the contract with the person concerned could not be finalized. Prior to any personal data being provided by the person concerned, the person concerned must contact one of our employees. Our employee will inform the individual on a case-by-case basis whether the provision of the personal data is required by law or contract or is required for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of the non-provision of the personal data.