Source: https://www.valendo.de/en/data-privacy/
Timestamp: 2019-04-26 12:32:16+00:00

Document:
Terms used herein shall have the meaning ascribed to them in Art. 4 of the Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation (“GDPR”)).
Any data subject can contact datenschutz@valendo.de at any time for any questions or suggestions regarding data protection.
Our Website uses “cookies” in accordance with Art. 6 para. 1f) GDPR in order to make the use of our Website more convenient and tailored to your needs, for example by saving certain entries and settings. Cookies are small text files that are stored on your computer using your Internet browser.
You can prevent cookies from being stored by making the appropriate settings in your web browser. However, we would like to point out that in this case you may not be able to use all functions of the Website in full.
As IP-anonymization is activated on our Website, your IP address will be truncated within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the United States and truncated there.
Google will use this information on behalf of us for the purpose of evaluating your use of our Website, compiling reports on Website activity and providing us other services relating to Website activity and Internet usage. The collection and processing of your personal data is accordingly based on our legitimate interest in a demand-oriented design as well as the statistical evaluation of our Website and the fact that your legitimate interests do not outweigh (Art. 6 para. 1f) GDPR).
As an alternative to the browser Addon or within browsers on mobile devices, you can click this link in order to opt-out from being tracked by Google Analytics within our Website in the future (the opt-out applies only for the browser in which you set it and within this domain). An opt-out cookie will be stored on your device, which means that you will have to click the link again, if you delete your cookies. However you may not be able to use all services of our Website if cookies are disabled or deleted.
We are active on social media for marketing reasons and to inform you about current news, events and to send you other information that may be of interest to you.
– XING (XING SE, Dammtorstraße 30, 20354 Hamburg, Germany).
We offer you a free newsletter service. We use the newsletter to inform you about current news, events and to send you other information that may be of interest to you. To receive the newsletter via e-mail, you can sign up on our Website. For the newsletter service, we need your e-mail address and, in order to address you personally, your first and last name. After registration, you will receive an e-mail. This contains a link with which you can confirm your registration. You will not receive the newsletter until you have confirmed it.
The collection and processing of your personal data for the newsletter as well as the transmission to MailChimp described below is based on your consent, which can be withdrawn at any time in the future, and is necessary for the provision of the newsletter (Art. 6 para. 1a) GDPR).
We use the service Mandrill of The Rocket Science Group LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA, 30308, United States (hereinafter: “MailChimp”) to send the newsletter. This service allows us to internally manage a database of e-mail contacts to communicate with you via e-mail. The service manages information about when an e-mail was read by you and when you interacted with incoming e-mail messages, for example by clicking on links included in the e-mail. This is done by so-called web beacons, also called tracking pixels. These are small image files that allow us to evaluate user behaviour. Through the use of MailChimp personal data are transmitted to the United States. MailChimp is certified under the EU-US-Privacy Shield, so that an adequate level of data protection according to Art. 45 GDPR is ensured.
We will only process your personal data for a purpose other than that for which the personal data has been collected if permitted by law or if you have consented to the changed purpose of data processing. In this case we will inform you about these other purposes before further processing and provide you with all other relevant information.
If your personal data are no longer required for the aforementioned purposes or you revoke your consent on which the data processing is based, they will be deleted. If the data must be kept for legal reasons, they will be blocked. The data is then no longer available for further use.
In accordance with Art. 15 GDPR, you have the right to request confirmation from us as to whether personal data relating to you is processed; if this is the case, you have the right to receive information free of charge, in particular on the personal data stored about you and a copy of this information.
In addition, pursuant to Art. 19 sentence 2 GDPR, you have the right to request us to inform you of all recipients to whom personal data have been disclosed.
Pursuant to Art. 16 GDPR, you have the right to request us to correct and/or complete your personal data if it is incorrect or incomplete.
In accordance with Art. 17 GDPR, you have the right to request us to delete your personal data without delay. Deleting your data has the effect that our services can no longer be used in full extend or used at all.
– You have withdrawn your consent on which the processing was based and there is no other legal basis for the processing.
– You have lodged an objection to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for processing or you have lodged an objection to the processing pursuant to Art. 21 para. 2 GDPR.
– The personal data has been processed unlawfully.
– Deleting your personal data is necessary to fulfil a legal obligation under German or European law.
If we have made your personal data public and we are obliged to delete it, we will take appropriate measures, taking into account the available technology and implementation costs, to inform our data processors, who are processing your personal data that you have requested to delete all links to your personal data or copies or replications of your personal data. The measures shall only be taken in so far as processing is not necessary.
– You have disputed the accuracy of your personal data for a period that enables us to check the accuracy of your personal data.
– The processing is unlawful and you have refused to delete your personal data and have instead requested a restriction on the use of your personal data.
– We no longer need your personal data for processing purposes, but you do need them to assert, exercise or defend legal claims.
– You have filed an objection to the processing pursuant to Art. 21 para. 1 GDPR and it is not clear yet whether our legitimate interests outweigh yours.
If the processing of personal data has been restricted in accordance with the conditions above, such data may only be processed – apart from being stored – with your consent or for the purpose of asserting, exercising or defending rights or for the protection of the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the processing is restricted, we will inform you before the restriction is lifted.
b) for the purposes of direct advertising or profiling.
We will no longer process your personal data in the event of an objection. This does not apply in the case of data processing pursuant to Art. 6 para. 1f) GDPR if we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or if the data is processed to assert, exercise or defend legal claims.
According to Art. 20 GDPR, you have the right to receive your personal data, which you have provided to us in a structured, common and machine-readable format.
In addition, you have the right to transmit your personal data yourself or through us directly to another controller, insofar as this is technically feasible and insofar as the rights and freedoms of others are not affected.
Finally, under Art. 77 GDPR, you have the right to lodge a complaint to a supervisory authority responsible for us.

References: Art. 4
 Art. 6
 Art. 45
 Art. 15
 Art. 19
 Art. 16
 Art. 17
 Art. 21
 Art. 21
 Art. 21
 Art. 6
 Art. 20
 Art. 77