Source: https://www.proutatwork.de/en/datenschutz/
Timestamp: 2019-04-22 10:00:04+00:00

Document:
PROUT AT WORK takes the protection of your personal data very seriously. We consider it our primary task to protect the confidentiality of the personal data you provide us with, and to protect these data against any unauthorised access. Therefore, we take great care and employ the latest security standards to guarantee maximum protection of your personal data.
As a private-law company, we are subject to the provisions of the European General Data Protection Regulation (GDPR) and the provisions of the German Federal Data Protection Act [Bundesdatenschutzgesetz] (BDSG). We have taken technical and organisational measures to ensure that we and our external service providers observe the regulations on data protection.
PROUT AT WORK’s vision and work focusses on creating equal opportunities for LGBT*IQ in the world of work. This inevitably associates you as a private person and the involved company with LGBT*IQ.
Accordingly, PROUT AT WORK will oblige its employees to comply with the data protection regulations.
The following policy declaration provides an overview of how PROUT AT WORK ensures data protection and what types of data are collected for what purpose.
For all questions relating to data protection and all other matters you can contact us at info@proutatwork.de.
“Profiling”is any form of automated processing of Personal Data consisting of the use of Personal Data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
“Controller” is a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
(1) In the following, we inform you about the collection of personal data when you are using our website. Personal data are, for example name, address, email addresses, user behaviour.
(2) When contacting us per email or using a contact form, the data you provide us with (your email address, name and phone number, if applicable) are stored in order to answer your questions. We delete data collected in this connection once storage is no longer required; if there are statutory obligations to keep the data, we will restrict the processing of the data.
(1) In addition to the data mentioned above, when you use our website, cookies will be stored on your computer. Cookies are small text files stored on your hard disc drive allocated to the browser you used and by means of which the site that set the cookie is provided with specific information. Cookies cannot run a programme or leave a virus on your computer. Their purpose is to make the Internet offering more efficient and more user-friendly.
Transient cookies are deleted automatically once you close the browser. These cookies include in particular session cookies. These cookies store the session ID, which enables various requests of your browser to be identified as belonging to a joint session. As a result, your computer may be recognized when you return to our website. Session cookies are deleted once you log out or close the browser.
Persistent cookies are deleted automatically after a predefined period. This period may differ, depending on the respective cookie. You can delete cookies in your browser’s security settings any time.
You can configure your browser settings according to your wishes and , for example, refuse to accept any third-party cookies or any cookies at all. Third-party cookies are cookies set by third parties, i.e. not by the website you are actually visiting. We would like to point out to you that deactivating cookies may result in you not being able to use all the functions of this website.
On our website, we use a plug-in of the Internet service Google Maps. The Operator of Google Maps is Google Inc., located in the U.S., CA 94043, 1600 Amphitheatre Parkway, Mountain View.
When you use Google Maps on our website, any information on the use of this website and your IP address will be transmitted to a Google server in the U.S., and will also be stored on this server. We have no knowledge of the exact content of data transferred or their use by Google. In this context, the company denies any connection between the data and information from other Google services and the collection of personal data. However, Google may pass this information on to third parties.
By using our website, you consent to the collection and processing of the data by Google Inc. as set out above.
On our website, we use features provided by XING, a network that endeavours to promote in particular the professional contacts of its members. Network provider is XING AG. It is located in Dammtorstraße 29-32 in 20354 Hamburg.
If one of our websites with XING features is accessed, a connection to XING servers is established. We do not know whether XING stores personal data. As far as we know, XING does not analyse or store IP addresses.
(1) In addition to using our website for purely informational purposes, we also offer various services you can use if you are interested. You will generally be required to provide further personal data that we use in order to render the respective service; for these data, the principles on data processing as set out above apply.
(2) When processing your data, we use external providers in some cases. These have been carefully selected and instructed by us, are bound by our instructions, and are monitored on a regular basis.
(3) Furthermore, we may disclose your personal data to third parties where promotions, competitions, concluding agreements or similar services are offered by us together with partners. You will receive further information in this regard when you provide us with your personal data, or you can also refer to the description of the service below.
(4) To the extent our providers or partners are resident outside the European Economic Area (EAA), we will inform you about the consequences of this circumstance in the service description.
(1) With your consent, you can subscribe to our newsletter, in which we inform you about our current interesting offers. The goods and services promoted are specified in the declaration of consent.
(2) For subscription to our newsletter we use the double opt-in procedure. This means that after you have subscribed to the newsletter we will send you an email to the email address you provided us with in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your subscription within 24 hours, your information will be blocked and deleted automatically after one month. Furthermore, we store the IP addresses you used and the times of your subscription and confirmation. The purpose of this procedure is to prove that you have subscribed to the newsletter and to help investigate any misuse of your personal data, if applicable.
(3) Data required for sending you the newsletter include your email address and your full name. The provision of further, specifically marked data is voluntary. Those data are used to contact you personally. Following your confirmation, we store your email address for the purpose of sending you the newsletter. The legal basis is point (a) of art. 6(1) sentence 1 GDPR.
(4) You may revoke your consent to receiving the newsletter at any time and unsubscribe to the newsletter. You can revoke your consent by clicking on the link provided in every newsletter email, by using the form on our website, via email to info@proutatwork.de or by contacting us using the contact data specified in the legal notice [Impressum].
(5) We would like to point out to you that we analyse your user behaviour after we sent out our newsletter. For this analysis, the emails sent by us contain web beacons and/or tracking pixels that are single-pixel images stored on our website. For this analysis, we link the data specified under section 3 and the web beacons with your email address and an individual ID. The data are collected in a pseudonymised manner only, i.e. the IDs are not linked to your further personal data, meaning that the data cannot be used to directly identify the data subject. You can revoke your consent to this form of tracking at any time by clicking on the separate link provided in every email, or informing us using another means of contact. Information is stored for as long as you subscribe to the newsletter. Once you have unsubscribed to our newsletter, we store the data for mere statistical purposes and in an anonymous manner.
The work of PROUT AT WORK is based on networking, the connecting of suitable contacts and the continuous extension of this network. To connect the contacts in our network, we collect, store and, upon request of members of our network, forward the following personal data.
The data relating to speakers and sponsors is disclosed to cooperation partners for graphical processing in connection with the creation of our conference brochure, and can be accessed by those who attend our conference, as they are published in our conference brochure.
You can register as an attendee on Xing Events. PROUT AT WORK is not responsible for the legality of XING Events’ data protection.
After the event, an opinion survey is conducted using www.surveymonkey.de. By participating in the survey, you consent to Surveymonkey’s data protection policy. PROUT AT WORK is not responsible for the legality of Surveymonkey’s data protection.
These data will be shared with the attendees by including them in the workshop minutes. Your personal data will be treated anonymously as far as your employer is concerned.
As a PROUTEMPLOYER, you regularly feature in PROUT AT WORK publications and will, in cooperations with PROUT AT WORK, be mentioned at least with your company data.
The TOP 100 OUT EXECUTIVES list is a cooperation with UHLALA GmbH managing director: Stuart Cameron, Wichertstr. 9A, 10439 Berlin. PROUT AT WORK will oblige its cooperation partner UHLALA GmbH to comply with the data protection regulations accordingly.
As our cooperation partner, UHLALA GmbH is itself responsible for complying with the data protection regulations.
Our services are generally targeted at adults. Persons under the age of 18 should not provide us with personal data without the consent of their parent or guardian.
If the processing of personal data is based on consent granted, you have the right to withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
You can contact us at any time if you wish to exercise your right of withdrawal.
You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed. You can request this confirmation at any time using the aforementioned contact details.
Where personal data are transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards pursuant to art. 46 GDPR relating to the transfer. We will provide a copy of the personal data undergoing processing. For any further copies requested by you, we may charge a reasonable fee based on administrative costs. Where you make the request by electronic means, and unless otherwise requested by you, the information will be provided in a commonly used electronic form. The right to obtain a copy referred to above must not adversely affect the rights and freedoms of others.
The data subject withdraws consent on which the processing is based according to point (a) of art. 6(1), or point (a) of art. 9(2) GDPR, and where there is no other legal ground for the processing.
Where the controller has made the personal data public and is obliged pursuant to art. 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
Where processing has been restricted under the above prerequisites, such personal data will, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
The data subject can contact us at any time via the contact details stated earlier if he or she wishes to assert his or her right to a restriction of processing.
In exercising the right to data portability pursuant to art. 20(1) GDPR, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The exercise of the right to data portability is without prejudice to the right to erasure (“right to be forgotten”).That right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of art. 6(1) GDPR, including profiling based on those provisions. The controller will no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.
Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to art. 89(1) GDPR, you, on grounds relating to your particular situation, have the right to object to processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
You can exercise the right to object at any time by contacting the data controller concerned.
The data controller will implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
The data subject can exercise this right at any time by contacting the data controller concerned.
Without prejudice to any other administrative or judicial remedy, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to you infringes the GDPR.
Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to art. 77GDPR, you have the right to an effective judicial remedy where you consider that your rights under the GDPR have been infringed as a result of the processing of your personal data in non-compliance with the GDPR.
The technical and organisational measures which the provider must as a minimum establish and maintain on an ongoing basis to ensure data protection and data security are set out below. The aim is to guarantee in particular the confidentiality, integrity and availability of the information processed on behalf of others. The technical and organisational measures taken are documented by the contractor and agreed and arranged in communication with the principal.
Input control: measures to determine if personal data have been input into, altered or removed from the data processing systems and, if so, by whom. This can be done by way of logging or document management.
We make use of external service providers (processors). Separate job processing contracts have been concluded with the service providers in order to ensure that personal data is protected.

References: art. 6
 art. 46
 art. 6
 art. 9
 art. 17
 art. 20
 art. 6
 art. 89
 art. 77