Source: https://nest-one.com/en/privacy-statement/
Timestamp: 2019-04-25 17:45:38+00:00

Document:
Thank you for visiting our website. With this document, we would like to inform you about how we process your personal data in connection with the use of our website.
For questions about data protection or the exercise of your data protection rights, please get in touch with us using the above contact information.
Please refer to the following explanations for further details.
When you access our website, the company commissioned by us to operate the website processes and stores technical information about the end device you are using (operating system, screen resolution and other non-personal features) and the browser (version, language settings) as well as the public IP address of the computer you are using to visit our website, together with the date and time of access. The IP address is a unique numeric address through which your end device sends data to or retrieves data from the internet. As a rule, we or our service provider do not know who is behind an IP address unless you provide us with data during the use of our website that enables us to identify you. A user may also be identified if legal action is taken against him or her (e.g. in the event of attacks against our website) and we gain knowledge of his or her identity as part of the investigative proceedings. As a rule, you do not have to worry that we will be able to match your IP address to you as an individual.
Our service provider uses non-personal data that has been processed so that we can track which end devices with which settings are used to visit our website and, if necessary, to optimize it for that device. These statistics do not contain any personal data. The legal basis for compiling the statistics is Art. 6 Para. 1 (f) of the EU General Data Protection Regulation (GDPR).
The IP address is also used so you can access and use our website technically as well as to recognize and defend against attacks on our service provider or us. Unfortunately, there are frequent attacks that harm the operators of websites or their users (for example, by preventing access, spying on data, spreading malware (e.g. viruses) or through other illegal purposes). Such attacks would hinder the proper functioning of the server center of the company that we commission, the use of our website or its functionality and the security of visitors to our website. The processing of the IP address including the time of access is undertaken to prevent such attacks. The processing of this data is undertaken to secure our legitimate interest through our service provider of ensuring the functionality of our website and to fend off illegal attacks against us and visitors to our website. The legal basis for the processing of that data is Article 6 Para. 1 (f) of the GDPR.
The stored IP data is deleted (through anonymization) when it is no longer needed for the detection of or defense against an attack.
We are always pleased to welcome new coworkers! If you apply for one of the positions listed by us or submit your application absent a job announcement, we will process your data for the sole purpose of the application process and for the decision-making process on whether to establish an employment relationship. The legal basis for the processing of that data is § 26 of the German Federal Data Protection Act (BDSG) and subordinately Art. 6 Para. 1 (f) of the GDPR.
Should your application not lead to a job offer, we will delete your application together with the documents submitted within two months after our rejection, provided that further storage is not in our legitimate interest, such as enabling us to prove compliance with our statutory obligations, e.g. under the General Equal Treatment Act (AGG). In this case, erasure will take place as soon as there is no longer a reason for further storage. The legal basis for further storage is § 26 BDSG and subordinately Art. 6 Para. 1 (f) of the GDPR.
By withdrawing your application, you can opt out of the further processing of your data at any time.
If we do establish an employment relationship with you, we will provide separate information about the processing of your data and the rights to which you are entitled.
If you send us a message using one of the contact options offered, we will use the data you provide us with to process your request. The legal basis for this is our legitimate interest in responding to your request pursuant to Art. 6 Para. 1 (f) of the GDPR. If your inquiry serves the implementation or establishment of a contract with us, the further legal basis for the processing of your data is Art. 6 Para. 1 (b) of the GDPR. The erasure of the data will be completed once your request has been processed. If we should be legally obligated to extend the period of storage, the erasure will take place after expiry of the period in question.
We incorporate YouTube videos on our website. YouTube is a service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
The playback of videos involves considerable amounts of data, especially when different visitors to the website are watching videos at the same time. In addition, the playback of the videos is faster and the playback quality better if the videos are played from a server that is as close as possible to the visitor of the website. We cannot guarantee video services ourselves due to the considerable technical effort required and, as such, rely on YouTube for the integration of videos. The legal basis for this is Art. 6 Para. 1 (f) of the GDPR.
A cookie is a small text file that is stored on your end device when your browser calls-up our website. If you call up our website later, the cookies can be read-out again. Cookies are stored for variable lengths of time. On your browser, you have the opportunity at any time to set which cookies it will accept. This, however, can result in our website no longer functioning correctly. Furthermore, you can delete cookies on your own at any time.
We use Google Analytics in the context of order processing, a service of Google Ireland Limited, https://google.de/contact/impressum.html. For this, Google uses a so-called “cookie” as an order processor. This involves a small text file that is stored on your computer by your browser. These cookies allow Google to obtain information on which website was called-up by you and, in particular, the following additional information: browser type/-version, the operating system used, technical information on the operating system and the browser and the public IP address used by your computer. Please be certain: We use Google Analytics in such a way that your IP address is used only in anonymized form. According to information from Google, this anonymization takes place in the European Union or in a member state of the European Economic Community. In exceptional cases only, a complete IP address could be transferred to a Google server in the USA and not be abbreviated until reaching there. According to information by Google, the anonymization takes place before the IP address is stored on a permanent data carrier for the first time. We refer to the data protection declaration by Google at https://support.google.com/analytics/answer/6004245?hl=de.
Google Analytics permits us to create user statistics for our website in non-personally-related form and demographic data on the visitor and their user behavior. Furthermore, statistics are created that help us better understand how our website is detected in order to optimize our search engine and to improve our advertising measures. With this processing, we pursue the authorized interests of being able to improve our website and our adverting measures. The legal basis for the processing is art. 6 para. 1 f) DSGVO.
You will find information at https://tools.google.com/dlpage/gaoptout?hl=de on how you can object to the use of Google Analytics.
Pursuant to Art. 15 of the GDPR, you have the right to request confirmation from us about whether personal data relating to you is being processed by us. If this is the case, you have a right of access to this personal data and to further information cited in Art. 15 of the GDPR.
According to Art. 16 of the GDPR, you have the right to demand from us immediately the rectification of inaccurate personal data concerning you. Taking into consideration the purposes of the processing of the data, you shall also have the right to request the completion of incomplete personal data – including by means of a supplementary statement.
You have the right to demand that we erase personal data concerning you immediately. We are obliged to delete personal data without undue delay if the corresponding requirements of Art. 17 of the GDPR are met. For further details, please refer to Art. 17 of the GDPR.
In accordance with Art. 18 of the GDPR, you have the right under certain circumstances to demand that we restrict the processing of your personal data.
According to Art. 20 of GDPR, you have the right to receive the personal data pertaining to you that you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without hindrance from the controller, provided that the processing is based on consent pursuant to Article 6 Para. 1 (a) of the GDPR or Article 9 Para. 2 (a) of the GDPR or on a contract pursuant to Article 6 Para. 1 (b) of the GDPR and the processing is carried out by automated means.
Pursuant to Art. 21 of the GDPR, you have the right to object to the processing of personal data concerning you on the basis of Article 6 Para. 1 (e) or (f) of the GDRP; this also applies to profiling based on those provisions.
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
If you wish to exercise any right you are entitled to, please contact us at the contact information provided above or use any of the other means we offer to send us this notice. If you have any questions, please do not hesitate to contact us.
Pursuant to Art. 77 of the GDRP, you have the right to lodge a complaint with a supervisory authority without prejudice to any other administrative or judicial remedy. This right exists in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider the processing of your personal data to infringe this GDRP regulation.

References: Art. 6
 § 26
 Art. 6
 § 26
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 art. 6
 Art. 15
 Art. 15
 Art. 16
 Art. 17
 Art. 17
 Art. 18
 Art. 20
 Art. 21
 Art. 77