Data privacy

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering and the associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as “online offering”). With regard to the terms used, such as “processing” or “controller,” we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Controller for the Processing of Your Personal Data in the Sense of the European General Data Protection Regulation:

B&B. Markenagentur GmbH
Georgstraße 56
30159 Hannover
Phone: +49 0 511 28061 500
Fax: +49 0 511 28061 500
E-Mail: kontakt[at]choyze.de

Data Protection Officer

If you have any questions regarding data protection, please contact our data protection officer at S-CON GmbH & Co. KG, Kriegerstraße 44, 30161 Hannover (office@s-con.de).

Types of Processed Data:

• Inventory data (e.g., names, addresses).
• Contact data (e.g., email, phone numbers).
• Content data (e.g., text input, photographs, videos).
• Usage data (e.g., visited websites, interest in content, access times).
• Meta/communication data (e.g., device information, IP addresses).

Categories of Affected Persons

Visitors and users of the online offering (hereinafter referred to collectively as “users”).

Purpose of Processing

• Provision of the online offering, its functions, and content.
• Responding to contact inquiries and communication with users.
• Security measures.
• Range measurement/marketing.

 

Terms used
“Personal data” is all information that relates to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who is identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more special features that are an expression of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Processing” is any process or series of processes carried out with or without the aid of automated processes in connection with personal data. The term is broad and encompasses practically every handling of data.

The “responsible person” is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data.

Relevant legal bases
In accordance with Art. 13 GDPR, we will inform you of the legal basis for our data processing. If the legal basis is not mentioned in the data protection declaration, the following applies: The legal basis for obtaining consent is Art. 6 (1) lit. a and Art Answering inquiries is Article 6(1)(b) GDPR, the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR, and the legal basis for processing to safeguard our legitimate interests is Article 6(1)(c) GDPR 6 Paragraph 1 lit. f GDPR. In the case,

Cooperation with processors and third parties
If we disclose data to other people and companies (processors or third parties) as part of our processing, transmit it to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if a transmission of the data to third parties, such as payment service providers, is required to fulfill the contract in accordance with Art. 6 Para. 1 lit. b GDPR), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

If we commission third parties to process data on the basis of a so-called “order processing contract”, this is done on the basis of Art. 28 DSGVO.

Data protection for applications and in the application process
The personal data you provide will be used for the purpose of making a decision on the establishment of an employment relationship in accordance with Article 88 (1) GDPR i. Collected, processed and used in conjunction with Section 26 (1) of the Federal Data Protection Act. The provision of your personal data is necessary for the handling of the application process and for the decision on the establishment of an employment relationship. If you are not available, it is unfortunately not possible for us to consider you when selecting to fill the advertised position. Automated decision-making is not carried out.

In principle, your personal data will not be passed on to external third parties. If operationally necessary, external service providers are involved as processors (Art. 28 GDPR) in accordance with data protection.

In order for your documents to be assessed, they will be forwarded to the responsible contact person in the relevant department for which the application is intended.

A transfer to a third country or an international organization of the personal data provided by you does not take place and is not planned.

Your application documents will be stored by us for the duration of the application process and also for 6 months in order to be able to answer any questions you may have. After this time, the documents will be deleted. Documents sent by post will be returned or destroyed after the 6 months have elapsed.

Only with your express written consent will we store your data until further notice so that we can contact you in the future regarding job offers within our company that may be of interest to you.

Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or this happens as part of the use of third-party services or disclosure or transmission of data to third parties, this only takes place if it is to fulfill our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or have the data processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. i.e. the processing takes place e.g. B. on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to that of the EU (e.g.

Rights of the persons concerned
You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

You have accordingly. Art. 16 DSGVO the right to request the completion of the data concerning you or the correction of incorrect data concerning you.

In accordance with Art. 17 GDPR, you have the right to demand that the data in question be deleted immediately, or alternatively, in accordance with Art. 18 GDPR, to demand a restriction of the processing of the data.

You have the right to request that you receive the data that you have provided to us in accordance with Art. 20 GDPR and to request that it be transmitted to other responsible parties.

You also have the right, in accordance with Article 77 GDPR, to lodge a complaint with the competent supervisory authority.

Right of revocation
You have the right to revoke your consent in accordance with Article 7 (3) GDPR with effect for the future.

Right of objection
You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. The objection can be made in particular against processing for direct advertising purposes.

Deletion of data
The data processed by us will be deleted in accordance with Art. 17 and 18 GDPR or their processing will be restricted. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage requirements. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. i.e. the data will be blocked and not processed for other purposes. This applies e.g. B. for data that must be kept for commercial or tax reasons.

According to legal requirements in Germany, storage takes place in particular for 6 years in accordance with Section 257 (1) HGB (books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) and for 10 years in accordance with Section 147 (1) AO (books, records , management reports, accounting documents, commercial and business letters, documents relevant to taxation, etc.).

Hosting
The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this online offer.

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, interested parties and visitors to this online offer on the basis of our legitimate interests in making this online offer available efficiently and securely in accordance with Art. 6 Para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of order processing contract).

Collection of access data and log files
We, or our hosting provider, collect data about every access to the server on which this service is located (so-called server log files) on the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR. . The access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider .

Log file information is stored for a maximum of 7 days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data whose further storage is required for evidence purposes are excluded from deletion until the respective incident has been finally clarified.

Contact
When contacting us (e.g. by e-mail, telephone or via social media), the information provided by the user is processed in order to process the contact request and its processing in accordance with Article 6 (1) (b) GDPR. User information can be stored in a customer relationship management system (“CRM system”) or comparable inquiry organization.

We delete the requests if they are no longer necessary. We review necessity every two years; Furthermore, the statutory archiving obligations apply.

Online presence in social media
We maintain an online presence within social networks and platforms in order to be able to communicate with customers, interested parties and users who are active there and to be able to inform them about our services there. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.

Unless otherwise stated in our data protection declaration, we process user data if they communicate with us within social networks and platforms, e.g. B. write posts on our online presence or send us messages.

Vimeo
We embed the videos from the “Vimeo” platform provided by Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Privacy Policy: https://vimeo.com/privacy .

YouTube
We embed videos from the “YouTube” platform provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/ , Opt-Out: https://adssettings.google.com/authenticated .