General information on data protection

1. Name and contact details of the data controller

The following data protection information applies to data processing by:

Controller:

Pattern Recognition Company GmbH
Innovations Campus Lübeck
Maria-Goeppert-Strasse 3
23562 Lübeck
Fax: +49 451 8836819

info@pattern-recognition-company.com

2. general information on data processing

a. Scope of the processing of personal data

As a matter of principle, we process personal data of our users only to the extent that this is necessary for the provision of a functional website as well as our content and services. The processing of personal data of our users is regularly carried out only with the consent of the user. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by legal regulations.

b. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) a.) of the EU General Data Protection Regulation (DSGVO) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b.) DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c.) DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) d) DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) lit. f.) DSGVO serves as the legal basis for the processing.

c. Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of data also takes place when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

d. Data security

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties (e.g. TSL encryption for our website), taking into account the state of the art, implementation costs and the nature, scope, context and purpose of the processing, as well as the existing risks of a data breach (including its probability and impact) for the data subject. Our security measures are continuously improved in line with technological developments. We will be happy to provide you with more detailed information on request. Please contact our data protection officer for this purpose.

e. Cooperation with processors

As with any larger company, we use external domestic and foreign service providers to process our business transactions (e.g. for IT, logistics, telecommunications, sales and marketing). They only act on our instructions and are contractually obligated to comply with the data protection provisions in accordance with Art. 28 DSGVO.

f. Conditions for the transfer of personal data to third countries

In the course of our business relationships, your personal data may be transferred or disclosed to third party companies. These may also be located outside the European Economic Area (EEA), i.e. in third countries. Such processing is carried out exclusively for the fulfillment of contractual and business obligations and to maintain your business relationship with us. We will inform you about the respective details of the transfer below at the relevant points.

Some third countries are certified by the European Commission through so-called adequacy decisions to have a level of data protection that is comparable to the EEA standard (a list of these countries and a copy of the adequacy decisions can be found here: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html However, in other third countries to which personal data may be transferred, there may not be a consistently high level of data protection due to a lack of legal provisions. If this is the case, we ensure that data protection is adequately guaranteed. This is possible through binding company regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct. Please contact our data protection officer if you would like more information on this.

3. provision of the website and creation of log files

a. Description and scope of data processing

Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected in this process:

(1) Information about the browser type and version used.

(2) The operating system of the user

(3) The user’s Internet service provider

(4) The IP address of the user

(5) Date and time of access

(6) Websites from which the user’s system accesses our website

(7) Websites that are accessed by the user’s system via our website.

This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

b. Legal basis for data processing

The legal basis for the temporary storage of data and the log files is Art. 6 para. 1 lit. f.) DSGVO.

c. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data for technical optimization of the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f.) DSGVO.

d. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

e. Possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

4. E-Mail contact and fax contact

a. Description and scope of data processing

On our website, it is possible to contact us via the e-mail address or fax provided. In this case, the user’s personal data transmitted by e-mail or fax will be stored.
In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.

b. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. a.) DSGVO if the user has given his consent.

The legal basis for the processing of data transmitted in the course of sending an e-mail or a fax transmission is Art. 6 para. 1 lit. f.) DSGVO. If the contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b.) DSGVO.

c. Purpose of the data processing

The processing of personal data serves us solely to process the contact. In the event of contact being made by e-mail or fax, this also constitutes the necessary legitimate interest in processing the data.

d. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For personal data sent by e-mail or fax, this is the case when the respective conversation with the user has ended. The conversation shall be deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

e. Possibility of objection and removal

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail or fax, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

5. Use of FastSpring

a. Description and scope of data processing

We use the product „FastSpring“ for checkout and have integrated a popup from FastSpring in the checkout process. FastSpring is a product of Bright Market, LLC, dba FastSpring, 801 Garden St., Santa Barbara, CA 93101. FastSpring is a software-as-a-service (SaaS) company that provides a full-service e-commerce platform for businesses selling software and other online digital products. As soon as you click on „Buy“, a pop-up from FastSpring will appear to complete the purchase process, where you will be made aware of FastSpring’s T&C and Privacy Policy and will be required to accept them. Once you have accepted them, the data you have entered will be transmitted to FastSpring.

b. Legal basis for data processing

The transmission of your data is based on Art. 6 para. 1 lit. a.) DSGVO (consent) and Art. 6 para. 1 lit. b.) DSGVO (processing for the performance of a contract).

c. Purpose of data processing

If you wish to order from us, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. Mandatory data necessary for the processing of contracts are marked separately, other data are voluntary.

d. Duration of storage

We have no control over the amount and content of data transferred to Bright Market LLC dba FastSping. „FastSpring“ complies with the EU Data Protection Regulation. This means that the data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. This is the case when the data is no longer necessary for the performance of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations.

The applicable privacy policy of „FastSpring“ can be found at the following link https://fastspring.com/privacy/eu-de/.

e. Possibility of objection and removal

As a user, you have the possibility to cancel the contract. If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, an early deletion of the data is only possible insofar as contractual or legal obligations do not prevent a deletion.

6. Use of our newsletter

a. Description and scope of data processing

We use the services of MailChimp to send our newsletter. MailChimp is a newsletter delivery platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA with server location USA.

MailChimp receives from us your email address, its user status, as well as the timestamp of the registration.
In addition to the data that we transfer to MailChimp, data is also collected within the service. It is registered whether a newsletter was opened, whether a link was clicked within the newsletter, with which device a newsletter was opened and from which location the newsletter was opened. If you unsubscribe from the newsletter, this is also stored in MailChimp so that no further newsletters are sent to your address.

MailChimp is certified under the US-EU data protection agreement „Privacy Shield“ and undertakes to comply with the data protection requirements of the European Union. Under this link https://mailchimp.com/legal/privacy/ you can read the privacy policy (in English) of MailChimp.

b. Legal basis for the processing

Your consent is obtained for the processing of data during the registration process. The legal basis for the processing of data after registration for the newsletter is Art. 6 para. 1 lit. a.) DSGVO if the user has given his consent.

c. Purpose of data processing
This information is required for sending and evaluating the newsletter. In this way, we can, for example, send newsletters only to the target groups for which the content is relevant, while other users do not receive notifications that do not interest you. According to MailChimp, it can evaluate the data on its part to be able to improve its service. However, MailChimp does not use your data to write to you itself and does not pass this data on to third parties.

d. Duration of storage

No data will be passed on to third parties in connection with data processing for sending newsletters. The data is used exclusively for sending the newsletter. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user’s e-mail address is stored as long as the subscription to the newsletter is active.

We work with a double opt-in for newsletter registration. This means that we send a confirmation email of the registration receipt to the email address deposited with us and ask you to verify the registration of our newsletter by clicking the confirmation link again. If you verify the confirmation link, you will become a subscriber to our newsletter. Otherwise, we will keep you as an interested party and your data will be deleted within 30 days.

e. Possibility of objection and removal

You can cancel your subscription to the newsletter at any time. For this purpose, you only need to send us an e-mail to implement the unsubscription. This also allows you to revoke your consent to the storage of personal data collected during the registration process.

7. use of cookies

a. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user calls up a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. We use cookies to make our website functional. Some elements of our website require that the calling browser can be identified even after a page change. We also use cookies on our website that enable an analysis of the user’s surfing behavior. When calling up our website, the user is informed about the use of cookies for analysis purposes and his consent to the processing of personal data used in this context is obtained. In this context, a reference to this privacy policy is also made.

Information about the cookies we use is provided below:

aa. Google Tag Manager

Our website uses the Google Tag Manager. The Google Tag Manager is operated by Google Ireleand Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Google Tag Manager is used to collect certain aggregated data for tag triggering. This data does not contain IP addresses or measurement IDs that are linked to a specific person.

bb. Impact

„Impact“ means Impact Tech, Inc (US) (formerly known as „Impact Radius, Inc“) and the following affiliated companies: Impact Radius Limited (UK), Forensiq Limited (UK), Impact Radius SA Pty Ltd (Cape Town, SA), Impact and Impact Radius Pty Ltd (AU), Impact Tech Singapore PTE. LTD. and Impact Radius (Shanghai) Co, Ltd. Impact operates the www.impact.com website and provides software-as-a-service products to our business customers.

cc. Borlabs

Our website uses Borlabs. Borlabs is operated by Borlabs GmbH, Rübenkamp 32, 22305 Hamburg. Borlabs is used to process personal data. This includes: Cookie; Usage data; First name; Last name; Email; Website; Data transmitted during use of the service; Unique device identifier for advertising (Google advertising ID or IDFA, for example); Contact information; Physical address; Payment data; Purchase history; Billing address; User ID; Email or message content.

b. Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies within the meaning of Section 25 (2) TTDSG is Art. 6 (1) lit. f.) DSGVO.

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a.) DSGVO if the user has given his consent in this regard.

c. Purpose of data processing

The purpose of using technically necessary cookies is to enable the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. The user data collected by technically necessary cookies are not used to create user profiles. The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer.

Google Tag Manager: In order for Google to monitor the stability, performance, and installation quality of the system, and to obtain data for diagnosis, Google Tag Manager collects certain aggregate tag triggering data.

Impact collects and uses personal customer information to:

– verify your identity;

– manage and support your interaction with our Site and Services;

– provide access to our Services;

– provide services to our customers;

– provide information and otherwise respond to your requests;

– periodically inform you about other services and products we offer and upcoming Impact events;

– perform marketing analysis, improvement, maintenance and debugging of our Site and Services;

– prevent fraudulent use of our Site and Services and prevent or take action against such fraudulent use or violation of our Terms of Use or applicable law;

– customize content and other aspects of your experience on and in connection with our Site and Services; and

– for any other purposes we disclose to you at the point we request your personal information and pursuant to your consent.

Borlabs: Personal data about the User is collected by Borlabs in order for the Provider to provide the Service and further to comply with its legal obligations, to respond to enforcement requests, to protect its rights and interests (or those of Users or third parties), to detect malicious or fraudulent activities. In addition, data is collected for the following purposes: Analytics, contacting the user, managing contacts and sending messages, managing support and contact requests, interacting with live chat platforms, advertising, remarketing and behavioral targeting, heat mapping and session recording, testing the performance of content and features (A/B testing), handling payments, marketing, tag management and traffic optimization and dissemination.

d. Duration of storage, possibility of objection and elimination

Cookies are stored on the user’s computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the storage of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all website functions to their full extent.

Google Tag Manager: unlike data in standard HTTP request logs, which are all deleted within 14 days of receipt, and the diagnostic data described above, Google Tag Manager does not collect, store, or share information about visitors to our customers‘ properties. This also applies to the URLs of visited pages. For more information on the use of Google Tag Manager data, please see the Google Tag Manager Terms of Use https://support.google.com/tagmanager/answer/9323295?hl=de.

Impact: Personal Customer Data is accessible at Impact through customer online accounts („Customer Portals“). Customers can access their personal information to update and correct their personal information. If you no longer have access to the Customer Portals, you may send a request to remove personal information you have provided to Impact by email to privacy@impact.com or contact Impact by phone or mail.

Impact reserves the right to retain and use Customer Personal Data as reasonably necessary to fulfill its contractual obligations to you and to comply with applicable laws, including data protection and/or privacy laws.

If you have downloaded applications from us, please contact us to request access to your personal information or to have that information corrected or deleted. For more information, please see Impact’s privacy notice at the link below: https://impact.com/privacy-policy/

Borlabs: Personal data is processed and stored at Borlabs for as long as required by the purpose for which it was collected. Therefore:

Personal data collected for the purposes of fulfilling a contract concluded between the Provider and the User will be stored until the complete fulfillment of this contract.

Personal data collected for the purpose of safeguarding the Provider’s legitimate interests will be kept for as long as it is necessary for the fulfillment of these purposes. Users may obtain more detailed information about the Provider’s legitimate interests in the relevant sections of this document or by contacting the Provider.

In addition, the provider is permitted to store personal data for a longer period of time if the user has consented to such processing, as long as the consent is not revoked. Furthermore, the provider may be obliged to store personal data for a longer period of time if this is necessary to fulfill a legal obligation or by order of an authority.

After expiration of the retention period, personal data will be deleted. Therefore, the right of access, the right of deletion, the right of rectification and the right of data portability cannot be exercised after the retention period has expired.

For more information on the use of Borlabs data, please refer to the Terms of Use of Borlabs https://de.borlabs.io/datenschutz/.

8. use of Google Analytics

a. Description and scope of data processing

We create pseudonymous usage profiles with the help of Google Analytics for the needs-based design of our website. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google sets the following cookies when you visit our website and consent to the use of the Google Analytics cookie:

Name, Purpose, Expires

_ga, „This helps us to count how many people visit our internet presentation if you have already visited it“, 26 months

_gid, „This helps us to count how many people visit our internet presentation if you have already visited it“, 26 months

_gat, „This helps us manage the frequency in which requests were made to view a page.“, 26 months

b. Legal basis for data processing

The data processing is based on Art. 6 para. 1 lit. a.) DSGVO (consent). In doing so, you consent to your data being transferred to the USA in accordance with Art. 49 para. 1 lit. a DSGVO.

c. Purpose of data processing

Google Analytics uses targeting cookies that are stored on your terminal device and can be read by us. In this way, we are able to recognize and count returning visitors as such and to learn how often our websites have been accessed by different users.

d. Duration of storage, possibility of objection and removal.

The information generated by the cookie about your use of our website is usually transmitted to a Google server in the USA and stored there. However, since we have activated IP anonymization on our website, your IP address will be shortened by Google beforehand within member states of the European Union. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and only shortened there (for more information on the purpose and scope of data collection, see e.g. https://policies.google.com/privacy?hl=de&gl=de ).

We have also concluded an order data processing agreement with Google LLC (USA) in accordance with Art. 28 DSGVO. Accordingly, Google will use all information strictly for the purpose of evaluating the use of our websites for us and compiling reports on website activity.

You can revoke your consent once given at any time. Please use one of the following options for this:

– You inform us that you wish to revoke your consent.

– You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

– You can also prevent the collection of data generated by the cookie and related to your use of our websites (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de ).

9. participation in the partner program

a. Description and scope of data processing

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected during the registration process:

– First name

– Surname

– E-Mail

– Username

– Password

– Alias name

– Company website

– Country

– Street and house number 1

– Street and house number 2

– City, state, postal code

– Telephone number

– Currency

– Time zone

– Business model

– Type of online presence

Registration is also possible via the user’s social media profile.

The following data is also stored as part of the registration process:

(1) The IP address of the user

(2) Date and time of registration

As part of the registration process, the user’s consent to the processing of this data is obtained.

b. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit.a.) DSGVO if the user has given his consent.
If the registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b.) DSGVO.

c. Purpose of data processing

Registration of the user is necessary for the fulfillment of a contract with the user or for the implementation of pre-contractual measures.

d. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
This is the case for data collected during the registration process for the fulfillment of a contract or for the implementation of pre-contractual measures when the data is no longer required for the implementation of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations.

e. Possibility of objection and removal

As a user, you have the option to cancel the registration. If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

10. registration process at 10Duke

a. Description and scope of data processing

On our website, we use the registration process of the company 10Duke Software Ltd with registered office at 85 Bayham Street, London NW1 OAG. In this context, the company 10Duke Software generates activation codes for our respective products sold through FastSpring. In this process, the data is entered into an input mask and transmitted to 10Duke. The following data is collected as part of the registration process:

(1) Name

(2) E-mail address

(3) Company

(4) Office location

(5) Job title

(6) Telephone

(7) Preferred language

(8) Country

(9) Other data provided by the user

The following data is also stored at the time of registration:

(1) License usage

(2) IP address

(3) License username and timestamp

As part of the registration process, the user’s consent to the processing of this data is obtained.

b. Legal basis for the processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. If the registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b DSGVO.

c. Purpose of data processing

Registration of the user is necessary for the fulfillment of a contract with the user or for the implementation of pre-contractual measures. The data is used to provide authentication, authorization and reporting services to the customer, including supporting the customer in problem cases and reporting personal data at the customer’s request in accordance with the framework agreement.

d. Duration of storage

Data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case for data collected during the registration process for the fulfillment of a contract or for the implementation of pre-contractual measures when the data is no longer required for the implementation of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to fulfill contractual or legal obligations.

e. Possibility of objection and cancellation

As a user, you have the option to cancel your registration at any time. You can have the data stored about you changed at any time. If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion. If you register with us via Facebook account through the 10 Duke interface, the corresponding access data will also be stored by us (or 10Duke). This is the name, the email address and the link to the corresponding Facebook account. If this information on our 10Duke server should be deleted, you can simply contact our support: support@excire.com Our support will then arrange for the deletion.

You can view additional privacy notices from 10Duke at https://www.10duke.com/privacy.

11. Social media

a. General

We maintain publicly accessible profiles on various social networks. Your visit to these profiles initiates a variety of data processing operations. In the following, we provide you with an overview of which of your personal data is collected, used and stored by us when you visit our profiles. Personal data is information that can be assigned to you as a specific person (e.g. name, age, address, photos, e-mail addresses, IP addresses). Furthermore, we inform you about your rights with regard to the processing of your personal data. You are not obliged to provide us with your personal data. However, this may be necessary for individual functionalities of our profiles in social networks. These functionalities will not be available to you or only to a limited extent if you do not provide us with your personal data.

When you visit our profiles, your personal data will be collected, used and stored not only by us, but also by the operators of the respective social network. This happens even if you yourself do not have a profile in the respective social network. The individual data processing operations and their scope differ depending on the operator of the respective social network and they are not necessarily traceable for us. For details about the collection and storage of your personal data as well as the type, scope and purpose of their use by the operator of the respective social network, please refer to the privacy policy of the respective operator:

– The privacy policy for the social network Facebook, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, can be viewed at https://www.facebook.com/about/privacy/update?ref=old_policy;

– the privacy policy for the social network YouTube, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, can be viewed at https://www.gstatic.com/policies/privacy/pdf/20190122/f3294e95/google_privacy_policy_de_eu.pdf;

b. Information about the collection of personal data

When you visit our profiles on social networks, we process the following personal data:

(a) Facebook Fanpage:

Our website uses a plugin from Facebook. The operator is Meta Platforms Inc (1 Hacker Way, Menlo Park, California 94025, USA).

When you visit our Facebook fan page, we process the following personal data. As the operator of a Facebook fan page, we can only view the information stored in your public Facebook profile, and only if you have such a profile and are logged into it while you visit our fan page. In addition, Facebook provides us with anonymous usage statistics that we use to improve the user experience when visiting our Fanpage. We do not have access to the usage data that Meta Platforms collects to compile these statistics. Meta platforms has committed to us to assume primary responsibility under the GDPR for the processing of this data, to comply with all obligations under the GDPR with respect to this data, and to provide the data subjects with the essence of this commitment.

The legal basis for these data processing operations is your consent pursuant to Art. 6 (1) a.) DSGVO.

In addition, Meta Platforms uses so-called cookies, which are stored on your end device when you visit our fan page, even if you do not have your own Facebook profile or are not logged into it during your visit to our fan page. These cookies allow Meta Platforms to create user profiles based on your preferences and interests and to show you advertising (inside and outside of Facebook) that is tailored to these preferences and interests. Cookies remain on your terminal device until you delete them. For details, please refer to Facebook’s privacy policy.

Information on all Facebook plugins can be found via the following link:

https://de-de.facebook.com/privacy/policy/?entry_point=facebook_page_footer

(b) YouTube

Our website uses a plugin of the video platform YouTube to embed videos and play them directly on our website. The operator of the video platform is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: „YouTube“). It is a Google company.

The integration of YouTube videos takes place in the so-called „extended data protection mode“, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube establishes a connection to the Google DoubleClick network – regardless of whether you watch a video.

When you activate embedded videos on our website, a connection to YouTube’s servers is established and a data transmission is started. We have no influence on the scope and content of the data that is transmitted to YouTube and possibly other partners of YouTube by activating the plugin. Among other things, the YouTube server is informed which of our pages you have visited. According to YouTube, this information is used, among other things, to collect video statistics, improve user-friendliness and prevent abusive behavior. YouTube uses cookies to collect information about user behavior. The cookies remain on your terminal device until you delete them. You can prevent YouTube from storing cookies by making the appropriate settings in your browser software.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account before activating the play button.

The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 lit. a.) DSGVO.

You can find more information on the handling of user data in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

If you use our profiles on social networks to contact us (for example, by creating your own posts, responding to one of our posts or by sending us private messages), the data you provide us with will be processed by us solely for the purpose of contacting you. The legal basis for the collection of data is thus Art. 6 para. 1 lit. a. and b. DSGVO. We delete stored data as soon as their storage is no longer necessary or you request us to delete them; in the case of statutory retention obligations, we limit the processing of the stored data accordingly.

12. data protection information for applicants

We also offer you the opportunity on our website to apply for job vacancies and send us your application by e-mail or post.

When you send us your application, we will process the information that you provide to us as part of the application (e.g. surname, first name, contact details (telephone number, e-mail address) if you send us your application by e-mail).

If you send us your application electronically, we process your e-mail address in order to process the application and to be able to contact the applicant to respond to the request. If you send us your application by post, we will process the data provided by you. The purpose of processing the personal data resulting from the application documents sent by you is to be able to identify a suitable applicant.

The legal basis for processing your e-mail address is Art. 6 para. 1 lit. f.) DSGVO. Our legitimate interest is to offer you the opportunity to apply to us electronically at any time. The legal basis for the processing of personal data resulting from the application is Art. 6 para. 1 lit. b.), Art. 88 para. 1 DSGVO, § 26 para. 1 BDSG-neu.

The application e-mail and the documents sent will be retained until a decision has been made for or against the applicant. If you have sent us your application documents by mail, we will return your application documents to you after the application process has been completed if no employment or cooperation is concluded. If you have sent us your application by e-mail, we will delete the e-mail accordingly. Your data will be deleted no later than 6 months after the end of the application process for the position for which you have applied, provided we have not hired you.

Insofar as we base the processing of your data on our legitimate interest, you have the right to object:

Right of objection

You have the right to object. You can send or inform us of your objection at any time (e.g. by e-mail to jobs@excire.de).

The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it would mean that we may not be able to process your application.#

To which recipients is your data passed on?

Your applicant data will only be passed on to those departments or persons in the company who need it to carry out the application process and to check the applicants.

Data will not be transferred to a third country.

13. rights of the data subject

If personal data is processed by you, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:

a. Right to information

You may request confirmation from the controller as to whether personal data concerning you are being processed by us.

If such processing is taking place, you may request information from the controller about the following:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data which are processed;

(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

(4) the planned duration of the storage of the personal data relating to you or, if specific information on this is not possible, criteria for determining the storage period;

(5) the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

(6) the existence of a right of appeal to a supervisory authority;

(7) any available information on the origin of the data, if the personal data are not collected from the data subject;

(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information about whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer.

b. Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller, insofar as the processed personal data concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.

c. Right to restriction of processing

You may request the restriction of the processing of personal data concerning you under the following conditions:

(1) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;

(3) the controller no longer needs the personal data for the purposes of the processing, but you need it for the establishment, exercise or defense of legal claims; or

(4) if you have objected to the processing pursuant to Article 21(1) of the GDPR and it is not yet clear whether the controller’s legitimate grounds override your grounds.

If the processing of personal data concerning you has been restricted, such data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

d. Right to erasure

aa. Obligation to delete

You may request the controller to erase the personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay, if one of the following reasons applies:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent on which the processing was based pursuant to Art. 6 (1) a.) or Art. 9 (2) a.) DSGVO and there is no other legal basis for the processing.

(3) You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.

(4) The personal data concerning you have been processed unlawfully.

(5) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

(6) The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) DSGVO.

bb. Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable measures, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.

cc. Exceptions

The right to erasure does not exist to the extent that the processing is necessary

(1) for the exercise of the right to freedom of expression and information;

(2) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of public health pursuant to Article 9(2)(h.) and (i.) and Article 9(3) of the GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or

(5) for the assertion, exercise or defense of legal claims.

e. Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right against the controller to be informed about these recipients.

f. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that.

(1) the processing is based on consent pursuant to Art. 6 para. 1 lit. a.) DSGVO or Art. 9 para. 2 lit. a.) DSGVO or on a contract pursuant to Art. 6 para. 1 lit. b.) DSGVO and

(2) the processing is carried out with the help of automated procedures.

In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

g. Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e.) or (f.) DSGVO; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to processing of the personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

h. Right to revoke the declaration of consent under data protection law.

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

i. Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and the controller,

(2) is permitted by legal provisions of the Union or the Member States to which the controller is subject and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests; or

(3) is made with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9(1) DSGVO, unless Art. 9(2)(a.) or (g.) DSGVO applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in (1) and (3), the controller shall take reasonable measures to safeguard the rights and freedoms of, and your legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.

j. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

Final Remarks: The English version of our privacy policy was generated automatically by Deepl.com and is based on the German original: https://excire.com/datenschutzerklaerung/