Source: https://www.data-assessment.com/en/data-protection
Timestamp: 2019-04-26 10:08:06+00:00

Document:
Persons under the age of 16 are not permitted to use this website under consent to the storage of cookies in accordance with Art. 8 GDPR, as long as there is no legally valid consent of the legal representatives for the consent to data processing. The same applies to the subscription to our newsletter, the use of the live chat function on this website and our contact form by under 16 year olds. In addition, we point out that our offer is aimed exclusively at business customers.
Responsible for purposes of the General Data Protection Regulation (GDPR), other applicable data protection laws in the Member States of the European Union and other provisions with data protection character is the Data Assessment Solutions GmbH, Misburger Str. 81b, 30625 Hannover, Tel.: +49 511 47402330 E-Mail: info@data-assessment.com, website: www.data-assessment.com.
2. What Personal Data do we collect and what is the data used for?
Personal data is information about a specific or identifiable natural person. A determinable natural person is a person who can be identified directly or indirectly by means of a characteristic. A characteristic may be a name, an identification number, location data or an online identifier or specific information on the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person. Not personal data is data that is anonymous or aggregated and can no longer be used to identify a particular natural person, whether in combination with other data or otherwise.
The use of our website is possible without providing personal data. However, every time a website is accessed, our Internet service provider collects a series of general data and information that is temporarily stored in the log files of the web server. For example, the browser types and versions used are recorded, as well as the operating system used by the accessing system, the web page from which an accessing system accesses our website (called referrer), the sub-web pages accessed via an accessing system on our website, the date and time of access to the web page, an Internet Protocol (IP) address, the accessing system’s Internet service provider, and other similar data and information used in the event of attacks on our information technology systems.
When processing this general data and information no conclusions are drawn on the data subject. Rather, this information is needed to properly deliver the contents of our website and to provide law enforcement authorities with the information needed for law enforcement in the event of a cyberattack. The anonymous data of the server log files are stored separately from all personal data provided by an affected person.
If you send us inquiries via the contact form on our website or by e-mail or in any other way, your details, including the contact details provided by you, will be stored in order to process the request and in case of follow-up questions. This information is always provided by you on a voluntary basis. We will not share your information without your consent. Please note that data transmission over the Internet (for example, when communicating via e-mail) may have security vulnerabilities. A complete protection of data from access by third parties is therefore not possible.
If you would like to receive our free newsletter, we need an e-mail address from you, in addition, the IP address of the calling computer as well as the date and time of registration are stored during the initial registration. You can optionally enter your first and last name for personalized addressing. Further data is not collected. We use this data exclusively for the newsletter dispatch and do not pass it on to third parties. You may revoke your consent to the storage of data, the e-mail address and its use for sending the newsletter at any time, for example via the corresponding link in the newsletter.
Our newsletters contain so-called counting pixels. A counting pixel is a miniature graphic that is embedded in such emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Using the embedded pixel, we can detect if and when an e-mail was opened by the recipient and which links in the e-mail were called. Such personal data collected via the counting pixels contained in the newsletters are stored and evaluated anonymously in order to optimize the delivery of newsletters and to better adapt the content of future newsletters to the interests of the recipient. This personal data will not be disclosed to third parties. Affected persons are at any time entitled to revoke the separate declaration of consent made via the double-opt-in procedure. After revocation, this personal data will be deleted by us. A deregistration from the receipt of the newsletter automatically we indicate as a revocation.
Under an existing agreement, we additionally use personal information to fulfill your contract and to provide you with our services, or to fulfill our legal obligations. This includes, for example, the processing of payments and account management, the operation, the assessment and improvement of our services, the safeguarding and functionality of our services, the contact with you in the course of contract execution or other measures in the context of customer service. For these reasons, we can contact you by email, telephone or post.
We process personal data of applicants for the processing of application procedures. The processing is usually done by electronic means, e. g. if an applicant submits application documents by e-mail to us. If we conclude a contract of employment with an applicant, the transmitted data will be stored for the purpose of the employment relationship in compliance with the legal requirements.
3. Do we pass on Personal Data?
We pass on personal data to external service providers who assist us in our operations to provide technical, sales, financial or logical services to us or assist us in preventing, detecting, containing and investigating potentially unlawful acts, compliance with our legal obligations, enforcing our Terms and Conditions, defending legal claims, bill collection, affiliate and rewards schemes and other business operations.
When we disclose personal information to external providers, this is solely on the basis of an agreement that limits the processing of such personal information by the outside provider to the purposes required to fulfill the contractual obligations to us. In doing so, the external provider is obliged to take appropriate security measures with regard to this data. External providers are in no way entitled to disclose personal data that they receive from us.
We pass on personal data to law enforcement agencies, government agencies, or legally authorized third parties on request for information or in connection with a preliminary investigation or suspected criminal offense, unlawful act or other act that may give rise to legal liability for us, you or another user. In such cases, we will only disclose information relevant to the investigation or request for information, such as: Name, location, zip code, phone number, email address or IP address.
Processing of personal data in a third country by us or on our behalf takes place only in the legally and contractually permissible framework and in the presence of the special conditions of Art. 44 et seq. GDPR. Processing then takes place on the basis of specific guarantees, such as the officially recognized level of data protection (eg for the USA through the “Privacy Shield”) or in compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
4. How long do we retain Personal Data?
The storage of personal data is based on the respective statutory retention periods. After expiration of the respective deadline, the corresponding data will be deleted, provided that a) the data is no longer required to fulfill the contract and b) you have not explicitly agreed to an extended retention period and c) deletion does not conflict with any other legitimate interests of our company. Other legitimate interest in this sense could be justified, for example, by a burden of proof in a procedure under the General Equal Treatment Act (AGG) when applying for a job.
Some of these websites use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. By using cookies, we can provide you with more user-friendly services that would not be possible without the cookie set-up and make it easier for you to use our website. Cookies are small text files that are stored on your computer and stored by your browser. Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them.
You can prevent the setting of cookies through our and other websites at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Furthermore, you can delete already set cookies at any time via an internet browser or other software programs. This is possible in all common internet browsers. Disabling cookies may restrict the functionality of this website.
This website uses functions of the web analytics service Google Analytics. Provider is Google Inc., 1600, Amphitheatre Parkway Mountain View, CA, 94043, USA. The purpose of the Google Analytics component is to analyze visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile for us online reports showing the activities on our websites, and to provide other services related to the use of our website.
We use the function “activation of IP anonymization” on this website. Your IP address will be shortened and anonymized by Google if your access to our website is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area. Your IP address detected by Google Analytics will not be merged with other data provided by Google.
6. What options and rights do you have with regard to the processing of Personal Data?
Unless the legal basis is explicitly stated in the individual case, the following applies: The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 GDPR, the legal basis for the processing for the fulfillment of our services and the execution of contractual measures as well as the answer to inquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 (1) lit. c GDPR, and the legal basis for processing for the protection of our legitimate interests is Article 6 (1) lit. f GDPR.
You have the right to revoke your consent to receive the newsletter at any time. For revocation, there is a corresponding link in each newsletter. Furthermore, there is the possibility to unsubscribe at any time directly by phone, e-mail or mail from the newsletter dispatch.
According to Art. 15 GDPR, you also have the right to information on the type, scope and purpose of the stored personal data, the right of correction pursuant to Art. 16 GDPR, the right to cancellation under Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR, the right to object in accordance with Art. 21 GDPR and the right of data transferability under Art. 20 GDPR. With regard to the right to information and the right to erase, the restrictions under §§ 34 and 35 BDSG apply. In addition, a right of appeal to a data protection supervisory authority pursuant to Art. 77 GDPR combined with § 19 BDSG applies. If you wish to exercise your rights, contact us via the contact details provided. Upon your request, we will delete your personal information as far as this is possible under your contract and in accordance with applicable law.
Your personal information is protected by technical and organizational security measures to minimize risks associated with their loss, misuse, unauthorized access, unauthorized disclosure and alteration. For this purpose, we use firewalls and data encryption, as well as physical access restrictions for our data processing facilities and data access authorization controls and other security measures. Subcontractors are obliged to comply with data protection regulations in accordance with Art. 28 (4) GDPR. Further information is available upon request.

References: Art. 8
 Art. 44
 Art. 7
 Art. 6
 Art. 6
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 21
 Art. 20
 Art. 77
 § 19
 Art. 28