Source: https://itestra.com/en/data-protection/
Timestamp: 2019-04-20 16:19:05+00:00

Document:
We are very pleased about your interest in our company. Data protection is of a particularly high priority for the management of the itestra GmbH. The use of the Internet pages of the itestra GmbH is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the itestra GmbH. By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
As the controller, the itestra GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.
The data protection declaration of the itestra GmbH is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be legible and understandable for the general public, as well as our customers and business partners. To ensure this, we would like to first explain the terminology used.
The website of the itestra GmbH collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems.
There is no merge of these data with other data sources. The basis for data processing is Art. 6(1) lit. b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.
Data, including your contact details, submitted via the contact form will be stored to process your request or to be available for follow-up questions. This information is not shared with third parties.
The processing of the data entered into the contact form takes place exclusively on the basis of your consent (Art. 6(1) lit. a GDPR). A revocation of your consent is possible at any time by sending an email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
Data submitted via the contact form will be stored until you instruct us to delete it, revoke your consent to storage or there is no longer a need to retain your data. Mandatory statutory provisions – especially retention periods – remain unaffected.
The data controller collects and processes the personal data of applicants for the purpose of the processing of the application procedure. The processing may also be carried out electronically. This is the case, in particular, if an applicant submits corresponding application documents by e-mail or by means of a web form on the website to the controller. If the data controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded with the applicant by the controller, the application documents will be deleted after notification of the refusal decision, provided that no other legitimate interests of the controller are opposed to the deletion. Other legitimate interest in this relation is, e.g. a burden of proof in a procedure under the General Equal Treatment Act (AGG).
We use so-called cookies in some areas of our website. These are small text files that are temporarily stored by a website on your hard disk. Cookies do not damage your hard drive and contain no viruses or similar. The cookies used by us do not collect any personal data. We use the information contained in cookies to facilitate the use of our pages and to tailor them to your needs.
If you do not want cookies to be stored on your computer, you can disable the corresponding option in the system settings of your browser. You can delete stored cookies at any time in the system settings of your browser. However, we would like to point out that when the cookies are deactivated, the page can no longer be used to the full extent.
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Provider of the web analysis service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”, text files that are stored on your computer and which allow an analysis of the use of the website by you. The information about your use of this website (including your IP address) generated by the cookie is transferred to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services related to web usage and Internet usage. Google may also transfer this information to third parties, provided this is required by law or if third parties process these data on behalf of Google. Google will in no case associate your IP address with other data from Google. Google Analytics cookies are set on the basis of Art. 6(1) lit. f GDPR.
Likewise, you can prevent the collection of data relating to your website use, including your IP address and subsequent processing by Google. An opt-out cookie will be set which prevents the collection of your data on future visits of our website. Therefore you can download and install the browser plug-in accessible via this link.
This website uses Google Web Fonts provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By using these web fonts, we will be able to display you the desired presentation of our website, regardless of the fonts available to you locally. This is done by retrieving Google Web fonts from a Google server in the United States and then transferring your data to Google. This refers to your IP address and the page you visited on our website. The use of Google Web Fonts is based on Art. 6(1) lit. f GDPR. As the operator of this website, we have a legitimate interest in the optimal presentation and transmission of our website. Google Inc. is certified for the EU-US privacy shield. This privacy agreement aims to ensure compliance with the level of data protection in the EU.
HTML links to LinkedIn, facebook, twitter and Xing are embedded on our website. In order to increase the protection of your data when visiting our website, we do not use plugins of the above mentioned services. The use of an HTML link ensures that no connection is established with the servers of the provider of the respective service when visiting a page on our website. By clicking on one of the HTML links of the services above, a new window in your browser opens and calls up the page of the respective service provider. There you can log in, if necessary after entering your login data.
We take all necessary technical and organizational measures to protect your personal data from loss and misuse. Your data is stored in a secure operating environment that is not accessible to the public. In certain cases, your personal data will be encrypted during transmission by the so-called Secure Socket Layer (SSL) technology. If your browser supports SSL, the communication between your computer and our servers is done by using a recognized encryption method.
If you wish to contact us via e-mail outside of the form, please note that the confidentiality of the information transmitted is subject to the protection you choose.
Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, the processing is based on Article 6(1) lit. b GDPR. This is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services.
If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor was injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR. Ultimately, processing operations could be based on Article 6(1) lit. f GDPR.
This legal basis is used for processing operations which are not covered by any of the above mentioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permitted because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).
You can also assert your claims for information, correction or deletion or for restriction of processing or the exercise of your right of objection as well as the right to data transferability at any time.
You can contact us here in written form. You also have the right to contact the data protection supervisory authority in the event of complaints.

References: Art. 6
 Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6