Source: https://www.cws.com/en-IE/privacy-policy
Timestamp: 2019-04-23 02:16:49+00:00

Document:
This policy concerns your personal data and how we process them in the context of using our website as well as the particular uses involved.
Personal data means any information relating to an identified or identifiable natural person; in other words, data that relates to you personally, such as your name, address, e-mail address, user behaviour, etc. Processing means any operation or set of operations, whether or not by automated means, which is performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
We principally process our users’ personal data only to the extent necessary to provide a functional website as well as our content and services. Our users’ personal data are processed regularly only with the user’s consent. One exception is such cases where it is not possible to obtain consent beforehand for reasons of fact and where statutory provisions permit data processing.
a) To the extent that we obtain the consent of the data subjects for personal data processing operations, the legal basis is point (a) of Art. 6(1) of the GDPR.
b) Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, the legal basis is point (b) of Art. 6(1) of the GDPR. This also applies to processing operations required to take steps prior to entering into a contract.
c) To the extent that the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, the legal basis is point (c) of Art. 6(1) of the GDPR.
d) In the event that the processing of personal data is necessary to protect the vital interests of the data subject or of another natural person, the legal basis is point (d) of Art. 6(1) of the GDPR.
e) If the processing is necessary for the purposes of legitimate interests of our company or a third party, except where such interests are overridden by the interest or fundamental rights and freedoms of the data subject, the legal basis for processing is point (f) of Art. 6(1) of the GDPR.
The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to exist. Beyond that, storage may take place if the European or national legislator provides for storage in Union regulations, laws or other provisions to which the controller is subject. Blocking or erasure of data also takes place when the storage period stipulated by the stated standards expires unless there is a necessity to continue to store the data in order to enter into or perform a contract.
Every time our website is accessed, our system automatically records data and information about the accessing computer system.
The data will also be stored in our system’s log files. These data are not stored along with other personal user data.
The legal basis for the temporary storage of data and log files is point (f) of Art. 6(1) of the GDPR.
The temporary storage of the IP address by the system is necessary to facilitate delivery of the website to the user’s computer. For this, the user’s IP address must remain stored for the duration of the session.
Storage in log files takes place to ensure website functionality. In addition, we use the data to optimise the website and to ensure the security of our IT systems. Evaluation of the data for marketing purposes does not take place in this context.
Given these purposes, we have a legitimate interest in data processing according to point (f) of Art. 6(1) of the GDPR.
The data are erased as soon as they are no longer required to achieve the purpose for which they were collected. In the event that the data are recorded to provide the website, this is the case when the individual session ends.
In the event that the data are stored in log files, this is the case after no more than seven days. Storage above and beyond this is possible. In that case, the IP addresses of the users will be erased or masked to make it impossible to identify the accessing client.
The recording of data to provide the website and the storage of data in log files is absolutely necessary for website operation. Therefore, the user does not have an opt-out option.
We use these cookies to make our website more user-friendly. Some elements of our website require the accessing browser using cookies.
The user data collected in this manner are anonymised by technical means. As a result, the accessing user can no longer be identified by the data. The data are not stored along with the users’ other personal data.
The legal basis for the processing of personal data using cookies is point (f) of Art. 6(1) of the GDPR.
Analytics cookies are used in order to improve the quality of our website and its content. Analytics cookies tell us how the website is used, which enables us to constantly improve our offering.
Given this purpose, we have a legitimate interest in personal data processing according to point (f) of Art. 6(1) of the GDPR.
In the event that IP anonymisation is activated on this website, your IP address will be truncated by Google Inc. before storage, but within Member States of the European Union or in other signatories to the Agreement on the European Economic Area. IP addresses are processed in truncated form, so personal identifiability can be ruled out. If the data collected on you is personally identifiable, this possibility of identification will be ruled out immediately and the personal data erased without delay.
Only in exceptional cases is the full IP address sent to a Google server in the USA and truncated there. For such exceptional cases where personal data are sent to the USA, Google is subject to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is point (f) of Art. 6(1) sentence 1 of the GDPR.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website provider with other services connected with website use and Internet use.
The IP address sent by your browser for Google Analytics purposes will not be combined with other Google Inc. data.
The legal basis for personal data processing is point (f) of Art. 6(1) of the GDPR.
We use Google Analytics to enable us to analyse and regularly improve the use of our website. The statistics we obtain enable us to improve our offering and make it more interesting for you the user. Given these purposes, we have a legitimate interest in personal data processing according to point (f) of Art. 6(1) of the GDPR. The users’ interests in the protection of their personal data is given adequate consideration through the anonymisation of the IP address.
If persons can be identified from the data collected, these will be promptly erased in the context of anonymisation.
We use etracker, a web analysis service of etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany. The terms and conditions are available at https://www.etracker.com/agb, the agreement for the processing of personal data under https://www.etracker.com/av-vertrag.
For more information on the etracker cookies, please visit https://www.etracker.com/support/etracker-cookies-2/. The customer portal uses only the following cockies: BT_ctst, BT_pdc, BT_sdc, _et_coid, noWS_mjV509.
If IP anonymisation is activated on this website, your IP address will be shortened beforehand by etracker GmbH within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. In this case, IP addresses are shortened further processed, a person-related ability can thus be excluded. Insofar as the data collected about you is assigned a personal reference, it will be immediately excluded and the personal data will be deleted immediately.
Legal basis for the use of etracker is Art. 6 para. 1 p. 1 lit. f GDPR.
On behalf of the operator of the customer portal, etracker GmbH will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website usage and internet usage to the website operator.
The IP address transmitted by your browser as part of the etracker will not be merged with other data of etracker or passed on to third parties.
The legal basis for the processing of personal data is Article 6 (1) lit. f GDPR.
We use etracker Analytics to analyze and regularly improve the use of our customer portal. With the statistics we can improve our offer and make it more interesting for you as a user.
Insofar as the data collected are personal, they will be deleted immediately as part of anonymisation.
Alternatively, you may make contact using the e-mail address provided. In this case, the user’s personal data sent in the e-mail will be stored.
Your data will be passed to an organisation associated with CWS-boco International GmbH in this context. The data are used solely for processing the enquiry.
The legal basis for data processing, given the user’s consent, is point (a) of Art. 6(1) of the GDPR.
The legal basis for processing data transmitted when an e-mail is sent is point (f) of Art. 6(1) of the GDPR.
If the purpose of the e-mail contact is to enter into a contract, the additional legal basis for the processing is point (b) of Art. 6(1) of the GDPR.
We process the personal data in the input screen solely for the purpose of dealing with the contact request. In the event that contact is made via e-mail, the requisite legitimate interest in processing the data also exists.
The data are erased as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data in the input screen of the contact form and those sent via e-mail, this is the case when the conversation with the user is over. The conversation is over when it can be inferred from the circumstances that the enquiry concerned has been closed.
The personal data additionally collected during the sending process will be erased after no more than 7 days.
The user has the option at any time to withdraw consent to the processing of personal data. If the user makes contact with us via e-mail, he/she can opt out of the storage of his/her personal data at any time. To do so, the conversation can be discontinued. To withdraw consent and to opt out of storage, you can use the e-mail address you used to make contact or the e-mail address stated in the Publication details section.
All personal data stored during the process of making contact will be erased in this event.
Our website contains an option to register by giving personal data. The data are entered in an input screen, sent to us and stored. The signup data are entered in an input screen, sent to us and stored. The data are not passed on to third parties.
We use the double opt-in process for signup to our customer portal. This means that after you sign up we send you an e-mail to the e-mail address you gave, asking you to confirm that you wish to sign up to the customer portal. If you do not confirm your signup within 48h, your information will be blocked and, after a month, automatically erased.
The legal basis for data processing after the user signs up to the customer portal, given the user’s consent, is point (a) of Art. 6(1) of the GDPR.
The purpose of collecting the data during the process of signing up is to connect the person signing in to the correct contracts so that the user can only manage his/her contracts and view the invoices and delivery notes for them.
The purpose of collecting any other data as part of the process of signing up is to prevent misuse of the services or the e-mail address used.
The data are erased as soon as you cancel your access permanently and your data are no longer necessary for contract performance. Furthermore, we store the data voluntarily entered by you for the period of their use, unless you erase them beforehand.
The other personal data collected as part of the process of signing up will generally be erased after a period of 7 days.
You can permanently cancel your access to the customer portal at any time by taking the steps given in the customer portal. However, this does not remove any existing contracts; these remain unaffected hereby.
We have embedded YouTube videos in our online offering, which are stored on https://www.youtube.com and can be played on our website directly. These are all embedded over the URL https://www.youtube-nocookie.com, meaning that no data on you the user is sent to YouTube unless you play the videos. Only after you play the videos will your data be sent. We have no control over this data transmission.
When you visit our website, information is sent to YouTube that you accessed that page of our website. In addition, the data listed under section IV.1. of this policy are sent. Data are sent whether or not you have a YouTube account or are logged in. If you are logged in to Google, your data will be directly connected with your account. If you do not wish your data to be connected with your YouTube profile, you must log out before clicking on the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or tailoring their website to your needs. Such evaluation is done in particular (even for users who are not logged in) to provide targeted advertising and to inform other users on the social network about your activities on our website.
The legal basis for embedding YouTube is point (f) of Art. 6(1) of the GDPR.
By embedding videos, we enable you to interact with YouTube and other users, thereby improving our offering and making it more interesting for you the user. Given this purpose, we have a legitimate interest in embedding YouTube videos.
Such evaluation is done by YouTube in particular (even for users who are not logged in) to provide targeted advertising and to inform other users on the social network about your activities on our website.
We have no information on the storage periods and erasure of the data collected by YouTube.
You have a right to opt out of the creation of these user profiles. However, to exercise this right you must contact Google.
We use the Google Maps tool on this website.
When you visit the website, information is sent to Google that you accessed that page of our website. In addition, the data listed under section IV.1. of this policy are sent. Data are sent whether or not you have a Google account or are logged in. If you are logged in to Google, your data will be directly connected with your account. If you do not wish your data to be connected with your Google profile, you must log out before clicking on the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or tailoring their website to your needs. Such evaluation is done in particular (even for users who are not logged in) to provide targeted advertising and to inform other users on the social network about your activities on our website.
The legal basis for embedding Google Maps is point (f) of Art. 6(1) of the GDPR.
The use of Google Maps gives you easy access to the interactive map, which is displayed on our website, and convenient use of the map function. Given this purpose, we have a legitimate interest in embedding Google Maps.
We have no information on the storage periods and erasure of the data collected by Google Maps.
The electronic applicant site is also operated by CWS-boco International as an operator for other companies in the CWS-boco Group. In principle, the responsible body is the CWS-boco group company specified in the respective vacancy notice.
Any personal data including data resulting from all investments (hereinafter referred to as "data") that you enter will be stored and used by CWS-boco International or the relevant Group company for the purpose of your application. Specific types of personal data (racial and ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or sexual life) are not deliberately collected (see point 3j II).
I. Your data will be passed on to fill vacancies within the CWS-boco Group in Germany. These currently include the following companies: CWS-boco International GmbH, CWS-boco Deutschland GmbH, CWS-boco Healthcare GmbH & Co.
II. Your data will only be used to fill the positions you have applied for. A transfer in the CWS-boco group does not take place.
The storage of your data is encrypted in a data center in Germany.
You will have access to your stored data to fill vacant positions within the CWS-boco Group, depending on the option you choose (3a I-II).
To ensure proper operation, selected employees of the CWS-boco Group have access to your data from Germany.
Your data is protected against unauthorized access through encrypted transmission, encrypted storage, a role and authorization concept, a data protection concept and physical protection for the servers.
You ensure that the personal information provided by you is truthful, accurate, clear and up-to-date. You have the opportunity to correct your own information in order to ensure their timeliness.
You can view your data at any time through the application. In addition, you have the right at any time to block or delete any personal data via the system or via e-mail, to object to the processing of the data or to have incorrect data corrected. If you do not initiate the deletion of your data, they will be kept for a maximum of twelve (12) months after the application process has been completed in order to open up further career opportunities to CWS-boco. This deadline applies to each of your applications.
If future amended legal requirements require a change to the retention period, this will be modified without prior notice. If you do not prematurely delete your general data (candidate profile), these remain for twelve (12) months. The deadline starts again with each application.
Due to the nature of the Internet and of computer systems, CWS-boco International or the responsible Group company can not guarantee the availability of the CWS-boco websites, the correctness and accuracy of the information contained on them or the freedom of intellectual property rights of third parties.
Incidentally, the liability of CWS-boco International or the relevant Group company is excluded, unless mandatory legal liability exists, such as: For intent, gross negligence, injury to life, body or health of a person.
The application places cookies (small text files) on your PC. These are session-based, contain no personal information, and are deleted after the session.
In order to proceed in the application process, you must agree to the following points. You can revoke this data protection declaration at any time via the system or via the above-mentioned email address.
I. You agree to the transmission of the data within the CWS-boco Group to the required persons according to the vacancy notice and visibility options as described above.
II. If you voluntarily provide us with particular types of personal information (including, but not limited to, information contained in the enclosures attached to you), you hereby expressly consent to the same treatment as described in this document.
We maintain company pages/accounts on several social networks and platforms („social media“) in order to communicate with our customers, potential customers, and other users, and in order to inform them about our services. The terms and conditions as well as privacy policies of these networks and platforms apply.
You have the right to obtain from the controller confirmation as to whether we process your personal data.
h) the existence of automated decision-making, including profiling, pursuant to Art. 11(1) and (4) of the GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to access information about whether your personal data are transmitted to a third country or to an international organisation. Where that is the case, you have the right to be informed of the appropriate safeguards pursuant to Art. 46 of the GDPR relating to the transfer.
You have the right to obtain from the controller the rectification of inaccurate personal data on you and/or completion of incomplete personal data on you processed by the controller. The controller shall carry out rectification without delay.
d) you have objected to processing pursuant to Art. 21(1) pending the verification whether the legitimate grounds of the controller override yours.
If you have obtained restriction of processing under the above criteria, you shall be informed by the controller before the restriction of processing is lifted.
You withdraw your consent on which the processing is based according to point (a) of Art. 6(1) or point (a) of Art. 9(2) of the GDPR and there are no overriding legitimate grounds for the processing.
Your personal data have been collected in relation to the offer of information society services referred to in Art. 8(1) of the GDPR.
Where the controller has made your personal data public and is obliged pursuant to Art. 17(1) of the GDPR to erase the data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
If you have exercised the right to obtain from the controller the rectification, erasure or restriction of processing, the controller is obliged to communicate such rectification or erasure of data or restriction of processing to each recipient to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
In exercising that right, you have the right to have your personal data transmitted directly from one controller to another, where technically feasible. That right shall not adversely affect the rights and freedoms of others.
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Art. 6(1) of the GDPR, including profiling based on these provisions.
However, such decisions shall not be based on special categories of personal data referred to in Art. 9(1) of the GDPR, unless point (a) or (g) of Art. 9(2) of the GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in points a) and c), the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your own point of view and to contest the decision.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 11
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9