Source: https://eyeo.com/privacy/
Timestamp: 2019-04-22 10:01:00+00:00

Document:
Website logs for 30 days.
Application data for six (6) months after rejection of a candidate.
Email addresses for newsletter services for no more than two (2) months after unsubscription.
Receive and access information about the personal data stored by us about you.
Contact our Data Protection Officer, Dr. Judith Nink, at or phone +49 (0) 221 / 65028 598.
The purpose of data protection is to protect personal data. Personal data means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This information includes, for example, details such as name, postal address, email address or telephone number but also nicknames, certificates and information about your interests.
This data is stored purely for technical reasons and cannot be linked to any individual person. We do not combine website log data with any other information about you.
 For more information, please refer to https://tools.ietf.org/html/rfc7231#section-5.5.3.
 For more information, please refer to https://tools.ietf.org/html/rfc7231#section-5.5.2.
We use Google Analytics on our website, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies” (text files which are stored on your computer and which enable you to analyze your use of our website). The information generated by the cookie on your use of our website (including your abbreviated IP address) is transmitted to a Google server in the United States and are stored there. Google will use this information to assess your use of our Website, to compile reports on the activities for us and to provide more services connected with use of our website and the internet. It is also possible that Google may transmit this information to third parties if this is required by law, or if third parties process this information on behalf of Google.
If you are applying online for a job at eyeo you need to fulfil our online application form. In order to evaluate your application properly we need at least your name, email address and a CV. On a voluntary basis you may further add a telephone number, a cover letter, additional documents, such as, but not limited to certificates, a website and additional information about you.
We collect and process those data for the sole purpose of managing eyeo’s recruitment related activities as well as for organizational planning purposes. Consequently, eyeo may use your personal data in relation to the evaluation and selection of applicants including for example setting up and conducting interviews and tests, evaluating and assessing the results thereto and as is otherwise needed in the recruitment processes including the final recruitment.
We provide you with a newsletter service free of charge. We use the newsletter to inform you about new products, updates on our products and to send you general information about eyeo. We need your email address in order to send you the newsletter. You can enter your email address at eyeo.com. We will store and use your email address solely to send you the newsletter.
Each newsletter contains information on how to unsubscribe (‘right to withdraw your consent’) from your subscription at any time with immediate effect.
You can download our ad-blocking report for free by submitting the following information: name, email address and organization and allowing us to contact you regarding our products and services. We will never pass on your information to a third party for any purpose.
In order to be able to communicate with our customers and interested parties, and to inform them about our activities and offers on social networks, we are active on Facebook, Instagram, Twitter and LinkedIn. In terms of Facebook, both Facebook and eyeo are jointly responsible for the processing of your personal data (“joint controller”, GDPR Art. 26), even if it is stored exclusively by the respective social network. Therefore, we still inform you about the data processing processes in connection with our presence on the respective social network as follows.
If you follow our respective online presence on one or more of the social networks used by us, please note that your data may be processed outside the European Union / the European Economic Area. However, all the networks we use have agreed to comply with EU data protection standards within the framework of the EU-US Privacy Shields.
The social networks we use also process your data regularly for market research and advertising purposes. Based on your usage behavior and interests, the networks may create usage profiles which are used, for example, to place advertisements corresponding to your potential interests within and outside the networks. For these purposes, cookies, which store your usage behavior and interests, as well as possibly also the devices you use, are regularly stored on your computer.
All data you provide us with in connection with your application (more information about the purposes you will find here>) is necessary for the sole purpose of hiring new employees and therefore evaluating and selecting applicants including for example setting up and conducting interviews and tests, evaluating and assessing the results thereto and as is otherwise needed in the recruitment processes including the final recruitment (meaning taking steps prior to enter into an employment contract). If you don’t send us your application data your application cannot be taken into account.
The collection and processing may be necessary for the purposes of our legitimate interests.
We collect and process website logs for technical reasons, such as, but not limited to, preventing denial of service attacks. Denial of service is typically accomplished by flooding the targeted machine or resource with superfluous requests in an attempt to overload systems and prevent some or all legitimate requests from being fulfilled. Preventing such overloads of our systems and any security issues by denial of service attacks is in your and our vital interest and therefore we use the website logs.
We use website log data (with anonymized IP addresses) for analyzing purposes to help us improve our website.
The processing of your personal data in connection with our presence in social networks is also based on our legitimate interests in effective information and communication with you.
When subscribing for our newsletter (more information on purposes), you provide us with your consent, which legitimizes the use of your email address in accordance and to the extent of your consent.
If you have given your consent to the respective social network in terms of data processing as described above, the legal basis for the processing is your consent (GDPR Art. 6 para. 1 lit. a, Art. 7).
If required for legal proceedings/investigations, personal data will be transferred to the criminal investigation authorities and, if appropriate, to injured third parties. We will only do this if there are concrete indications of illegal and/or abusive behaviour. We are also legally obliged to give certain public authorities information. These are criminal investigation authorities, public authorities which prosecute administrative offences entailing fines and the German finance authorities.
For support purposes we are working with a service provider, PlatinPower.com GmbH, Mündender Straße 31, 34123 Kassel, Germany (“PlatinPower”). PlatinPower will only access and process any of your personal data to the extent required for support purposes and only under our instructions. This is safeguarded by a data processing agreement.
Detailed website logs are retained for a period of 30 days, after which only the aggregated usage statistics that cannot be connected to a single user remain. Everything else is deleted.
Application data will be deleted six (6) months after rejection of a candidate. Data of hired candidates will be kept until the end of the employmentship.
Email addresses for newsletter services will be deleted at least two (2) months after you have unsubscribed.
You have the right to receive, upon request, information about the personal data stored by us about you and information about how we collect and process your personal data. Where that is the case, you have the right to gain access to such personal data stored by us. You have the right to request from us the rectification of inaccurate personal data, if any. Taking into account the purposes of collecting and processing your data, you have the right to have incomplete personal data completed. You also have the right to request restriction of processing.
Information on how we, at eyeo, process your personal data and your information rights in accordance with Articles 13, 14, and 21 of the General Data Protection Regulation (“GDPR”).
Data you provided directly to us or indirectly through our PR agency Rocket Science, who may have initiated our first contact; business cards; emails; professional social networks; your company website.
Contact data, contact person, communication data, bank details.
If necessary, we process your data beyond the actual scope of performance of our contract to protect our legitimate interests and those of third parties, e.g. newsletters about our products sent by our service providers.
Please note that withdrawing your consent will only affect processing of personal information that would have occurred after the time of the withdrawal. Processing that took place before your withdrawal will remain unaffected by such withdrawal.
By giving us your consent to process personal data for specific purposes (e.g. to send you newsletters), our processing your personal data for those purposes is permitted. Consent that has been given can be withdrawn at any time. This also applies to withdrawing declarations of consent which may have been given to us before the GDPR became enforceable, i.e. before 25 May 2018.
Within eyeo GmbH, certain departments (e.g. respective executives) may receive the data as needed to fulfill our contractual and legal obligations (e.g. accounting receives invoicing data).
Contractors that we use, which include but are not limited to service providers and freelancers, may also receive personal data for these purposes (GDPR Art. 28). Such contractors include companies that provide banking services, accounting services, marketing services, IT services, software tools, logistics, printing services, telecommunications, debt collection, consulting, and sales and marketing.
You have the right to object at any time to the collection and processing of your personal data on grounds relating to your particular situation when collection and processing of such data was based on our legitimate business interests (GDPR Art. 6(1)(f)). This also applies to any profiling (GDPR Art. 4) that was based on our legitimate business interests (GDPR Art. 6(1)(f) GDPR).
If you object, we will no longer process your personal data, unless (1) we can prove compelling reasons to continue processing your personal data that outweigh your interests, rights, and freedoms; or (2) the processing serves to assert, exercise, or defend legal claims.

References: Art. 26
 Art. 6
 Art. 7
 Art. 28
 Art. 6
 Art. 4
 Art. 6