Source: http://www.it-economics.com/dataprivacy
Timestamp: 2019-04-23 01:58:35+00:00

Document:
This privacy statement informs you about the nature, extent and purpose of personal data (subsequently referred to as "data") processing within our online offer and the related websites, features, contents as well as external online presences, e.g. our social media profiles (hereinafter jointly referred to as "online services"). Regarding the used terminology, such as "processing" or "responsible", we refer to the definitions in art. 4 of the General Data Protection Regulation (GDPR).
You can write to it-economics GmbH’s data protection officer at the address stated above, FAO Data Protection Officer, or via datenschutz@it-economics.de.
The legal basis for data processing is art. 6.1.1(f) GDPR. Our legitimate interest results from the purposes of data collection listed above. In no case, we use the collected data to draw conclusions to your person.
If you would like to receive the newsletter offered on the website, we require an e-mail address and information that allow us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter.
To ensure that you want to receive the newsletter, we use the so-called double opt-in procedure. As a result, the potential recipient can be added to a mailing list. After that, the user receives a confirmation e-mail with the option to legally confirm the registration. Only after sending this confirmation the address is actively included in the mailing list.
We use this data only for sending the requested information and offers, as well as for the dispatch of event invitations.
Newsletter2Go is used as newsletter software. Thus, your data are transmitted to Newsletter2Go GmbH. Newsletter2Go is not permitted to sell your information and to use it for any other purpose than for newsletter distribution. Newsletter2Go is a German certified provider, who has been selected according to the requirements of the General Data Protection Regulation and the Federal Data Protection Act.
You may withdraw the consent for storing your data and e-mail address as well as for their use for newsletter distribution at any time, e.g. via the link "sign out" in the newsletter. Alternatively, you may send an e-mail with your unsubscribe request to marketing@it-economics.de at any time.
The newsletter dispatch and the associated performance assessment is based on the recipient’s consent according to art. 6.1(a), art. 7 GDPR in conjunction with § 7.2.3 Fair Trade Law, respectively on the legal permit according to § 7.3 Fair Trade Law.
The recording of the notification procedure is based on our legitimate interests according to art. 6.1(f) GDPR. Our focus is on deploying a user-friendly and secure newsletter system which both serves our business interests and corresponds to the users’ expectations, and, in addition, allows proof of consent.
The newsletters contain a so called "web beacon", i.e. a pixel-sized file, that is retrieved from our server when you open the newsletter, or, if we use a shipping provider, from the shipping provider’s server. Within this retrieval, first, technical information, such as information about the browser and your system, as well as your IP address and time of visit are collected.
This information is used to improve the services on the basis of technical data or to improve target groups and their reading behaviour on basis of their location (which can be determined using the IP address) or access times. The statistical survey also includes the assessment whether the newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be associated with the individual newsletter receivers. However, it is neither our nor, if used, the shipping provider’s aspiration to observe individual users. On the contrary, we use these evaluations to identify our users’ reading habits and to customize our content, or to send out different content according to our users’ interests.
If you have any questions you can contact us via a form provided on the website. Therefore, a valid e-mail address is required, so we know who sent the request and are able to answer it. Further information may be made voluntarily.
Data processing for the purpose of contacting us occurs according to art. 6.1.1(a) GDPR based on your voluntarily provided consent. Your personal data can be stored in a customer relationship management system (“CRM system”) or a similar inquiries system. We delete requests if they are no longer required. We review the necessity every other year unless there is a legal obligation to retain data.
The personal data collected when using the contact form are automatically deleted after completion of your request.
We use hosting services to provide the following services: infrastructure and platform services, computing capacity, memory space and database services, security services as well as technical maintenance services, which we use for operating this website.
Here, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, prospective customers, and website visitors, based on our legitimate interests in providing an efficient and safe website according to art. 6.1(f) GDPR in conjunction with art. 28 GDPR (completion order processing contract).
We or our hosting provider collect data on each access to the server where this service is located (so-called server log files), based on our legitimate interests according to art. 6.1(f) GDPR. Access data include the name of visited website, data file, date and time of accessing, amount of data transferred, report about successful accessing, browser type and version, the user’s operating system, referrer URL (the previously visited website), IP address, and requesting provider.
Log file information is stored over a period of 7 days for security reasons (e.g. elucidation of abuse or fraud) and then deleted. Data which need to be stored for evidentiary purposes are excluded from deletion until final clarification of the incident.
It is very important to us to protect your personal data during the entire application process, and we want you to feel secure when visiting our website. The legal basis for data processing is art. 6.1.1(b) GDPR.
The personal data submitted by you are solely used for processing your application for the advertised position. Only people involved in the application process get knowledge of your personal data. All employees entrusted with data processing are obliged to respect the confidentiality of the data.
We do not pass on your personal data to third parties, with the exception of contract data processing, unless you have agreed to data transfer or we are obliged to transfer data to due to legal regulations and/or governmental or court orders.
Due to a separate agreement on the processing of personal data on behalf, your personal data are collected, processed and used by rexx systems GmbH, Süderstraße 75-79, 20097 Hamburg on our behalf in accordance with the corresponding legal requirements within the framework of contract data processing as stated in art. 28 GDPR. However, no transmission of your personal data to third parties in terms of data protection occurs. We remain responsible for the protection of your data.
Your data are automatically deleted within six months after the actual application process. This does not apply if deletion is barred by legal requirements, further storage is required for the purpose of evidence, or you have explicitly agreed to a further storage.
If you decide to be admitted to the talent pool, the entire company may access your personal data in case of any vacancy. You can join the talent pool by explicitly agreeing to a recruiter’s invitation via e-mail. The consent is voluntary and can be withdrawn at any time.
A transfer of your personal data to third parties for other than the purposes listed below does not occur.
if it is permitted by law and required for handling our contractual relationship according to art. 6.1.1(b) GDPR.
If we disclose information to other persons and companies (subcontractors or third parties) during our processing, send them or otherwise provide them access to the data, this is done only on the basis of a legal permit (for example, if the performance of a contract requires transmission of data to third parties, such as payment service providers, according to art. 6.1(b) GDPR), if you have given your consent, if there exists a legal obligation or on the basis of our legitimate interests (e.g. when using agents, Web hosting providers, etc.).
If we engage third parties to process data on the basis of a so-called "contract processing agreement", this is done on the basis of article 28 GDPR.
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or this occurs within the use of third-party services, or transfer of data to third parties is required, this is only done to meet our (pre)contractual obligations, based on your consent, due to a legal obligation, or on the basis of our legitimate interests. Subject to legal or contractual permits, we only process or let process data in a third country due to the special conditions of art. 44 ff. GDPR. I.e. the processing occurs e.g. based on special guarantees, such as the officially recognized assessment of an EU-appropriate level of data protection (e.g. for the USA through "Privacy Shield") or in compliance with officially recognized specific contractual obligations (so-called "standard contractual clauses”).
Information arising in association with the specific device is stored in the cookie. However, this does not mean that we instantly receive information about your identity.
In addition, we use temporary cookies that are stored on your device for a certain period to enhance the user experience. If you visit our website again to use our services, it is automatically detected that you have already visited our website and the inputs and settings you have made are recognized, so you do not need to enter these once more.
On the other hand, we employ cookies to collect statistical data about the usage of our website and evaluate these to optimize our online offer (see point 5). These cookies allow us to recognize that you have already been with us while visiting our website again. They are automatically deleted after a defined period.
The data processed by cookies are required for the purposes mentioned above to protect our or third parties’ legitimate interests, according to art. 6.1.1(f) GDPR.
Most browsers automatically accept cookies. If you do not want cookies to be stored on your computer, we kindly ask you to disable the respective option in the system settings of your browser. Stored cookies can be deleted in the browser system settings. The exclusion of cookies may cause functional limitations of this online offer.
The tracking methods listed above and used by us are performed on the basis of art. 6.1.1(f) GDPR. By using these tracking methods, we want to ensure an adequate design and the continuous optimization of our website. On the other hand, we use tracking methods to collect statistical data about the usage of our website, and evaluate these to optimize our online offer. These interests are regarded legitimate within the meaning of the regulation mentioned above.
The specific purposes of data processing and data categories can be found in the respective tracking tools.
is transmitted to a Google server in the US and stored there. The information is used to evaluate the use of the website, to compile reports on website activities and for further services for market research and customized design related with the use of the website and internet use. Furthermore, this information may be transmitted to third parties unless this is required by law or if third parties process these data on behalf. In no case, your IP address is merged with other data from Google. The IP addresses are anonymized so that an association is not possible (IP masking).
Google is certified under the Privacy Shield Agreement. Thus it is guaranteed to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
You may ban the installation of cookies by adjusting the browser software; however, we point out that in this case you may not be able to fully use all functions of this website.
Moreover, you can also prevent Google from acquiring and processing the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, especially for browsers on mobile devices, you may also prevent the acquisition by Google Analytics by clicking on this link. An opt-out cookie is used, which prevents the future acquisition of your data when you visit this website. The opt-out cookie is valid only in this browser and solely for our website, and it is stored on your device. If you delete the cookies in this browser, you need to set the opt-out cookie again.
The personal user data will be deleted after 14 months or anonymized.
For more information about data usage by Google, setting options and objection options see Google’s privacy statement (https://policies.google.com/technologies/ads) or Google’s ads settings options (https://adssettings.google.com/authenticated).
For more information on data protection in the context of Google Analytics please refer to Google Analytics Help Centre (https://support.google.com/analytics/answer/6004245?hl=de).
In addition, we use Google Conversion Tracking to collect statistical data about the usage of our website and evaluate these to optimize our online offer. If you access our website via a Google ad, a cookie (see point 4) is placed on your computer by Google Adwords.
These cookies expire after 30 days and are not used for personal identification. If a user visits certain pages of the Adwords customer’s website, and the cookie has not expired yet, Google and the customer can detect that the user clicked on the ad and has been redirected to this site.
Each Adwords customer receives a different cookie. Thus, cookies cannot be tracked via the Adwords customer’s websites. The information collected using the conversion cookie are used to create conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers get to know the total number of users that have clicked on their ad and have been redirected to a site with a conversion tracking tag. However, they do not receive any information about the users’ personal identity.
This website uses the Google Tag Manager. Google Tag Manager is a solution that enables the marketer to manage website tags via a surface. The tool Tag Manager itself (that implements the tags) is a cookie-free domain and collects no personal data. The tool activates other tags which may collect data. Google Tag Manager does not access these data. If domains or cookies have been disabled, this remains in place for all tracking tags implemented by Google Tag Manager.
On our website, we use social plug-ins by the social networks Facebook, Twitter and Instagram to promote our company, based on art. 6.1.1(f) GDPR. The related purpose of advertising is considered a legitimate interest within the meaning of the GDPR. The responsibility for data protection compliant operation must be ensured by their respective providers. These plug-ins are integrated via the so-called two click method to optimally protect our website visitors.
We neither have influence on collected data and data processing, nor are aware of the full extent of data collection, the purposes of processing, or retention periods. Furthermore, we have no information about deletion of the data collected by the plug-in provider.
The plug-in provider stores data collected about you as user profiles and uses them for advertising, market research and/or for customized website design. Such evaluation is made (also for users who are not logged in) to present customized ads and to inform other social network users about your activities on our website. You have the right to object against the creation of those user profiles; for that purpose, you would need to contact the respective plug-in provider. With these plug-ins the we give you the opportunity to interact with social networks and other users, so that we can improve our offer and design it more interesting for you as a user. Legal basis for the use of the plug-in is art. 6.1.1(f) GDPR.
Data transfer is independent of whether you have an account with the plug-in provider and are logged in. If you are logged in with the plug-in provider, your data collected by us are mapped directly to your existing plug-in provider account. If you click the activated button and e.g. link to the page, the plug-in provider also stores this information in your user account and makes it public to your contacts. We recommend that you log off regularly after using a social network, especially before you activate the button, to avoid assignment of your plug-in provider profile.
You can find more information about the purpose and extent of data collection and processing by the plug-in provider in the following privacy statements of the providers. There you can also find more information about your rights and about configuration options to protect your privacy.
On basis of our legitimate interests (i.e., interest in analysis, optimization and economical operation of our online offer according to art. 6.1.1(f) GDPR), we use social plug-ins ("plug-ins") by the social network facebook.com, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plug-ins can represent interaction elements or content (such as videos, graphics or texts) and can be recognized by the Facebook logos (white "f" on a blue background, the terms "Like", or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and the appearance of the Facebook social plugins can be found here: https://developers.facebook.com/docs/plugins/.
Facebook is certified under the Privacy Shield Agreement. Thus it is guaranteed to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
When you open a site of our online offer containing such a plug-in, your browser builds a direct connection to Facebook’s servers. The content of the plug-in is delivered right to your browser by Facebook and embedded in the website.
By integrating the plug-in, Facebook receives the information that your browser has opened the relevant site of our online offer, even if you do not have a Facebook account or are not logged in to Facebook. This information (including your IP address) is directly transmitted to a Facebook server in the US by your browser and stored there.
If you are logged in to Facebook, Facebook can directly assign the website visit to your Facebook account. When you interact with the plug-ins, e.g. press the "LIKE" or "SHARE" button, the corresponding information is directly delivered to a Facebook server and stored there. This information is also published on Facebook and shown your Facebook friends.
Facebook may use this information for advertising, market research and customized design of Facebook pages. For this purpose, Facebook creates usage, interests and relationship profiles, e.g. in order to evaluate your website usage regarding the ads displayed by Facebook, to inform other Facebook users about your activities on our website, and to provide further services associated with the use of Facebook.
If you do not want Facebook to assign the data collected via our website to your Facebook account, you need to log off Facebook before you visit our website.
To learn more about purpose and extent of data collection and their further processing, about data usage by Facebook as well as your rights and configuration options to protect your privacy, please refer to Facebook’s privacy notices (https://www.facebook.com/about/privacy/).
If a user is Facebook member and does not want Facebook to collect data about him via this online offer and link them to its membership data stored on Facebook, he needs to log out Facebook and delete its cookies before using our online offer. Furthermore, we recommend using a private browser session. Further settings and objections to data usage for advertising purposes can be made within the Facebook profile settings: https://www.facebook.com/settings?tab=ads, the US site http://www.aboutads.info/choices/, or EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are adopted for all devices like desktop computers or mobile devices.
For our short message service, we use the technical platform and services of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 USA. The Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland is responsible for data processing of people living outside of the United States.
We indicate that you take advantage of the Twitter short message service and its functions on your own responsibility. This applies especially to the use of the interactive functions (e.g. share, evaluate).
Plug-ins by the short message network of Twitter Inc. (Twitter) are integrated in our website. Twitter plugins (tweet button) can be recognized by the Twitter logo on our website. An overview of tweet buttons can be found here (https://about.twitter.com/resources/buttons).
When you open a site of our online offer containing such a plug-in, a direct connection is established between your browser and the Twitter servers, giving Twitter the information that you have visited our website using your IP address. If you click the Twitter "tweet button" while you are logged in to your Twitter account, you may link the contents of our website to your Twitter profile. Thus, Twitter may associate your visit to our website with your user account. We would like to point out that we as website provider receive no information about the content of the transmitted data and their use by Twitter.
If you do not want Twitter to be able to assign the visit to our website, please log off your Twitter account and use a private browser session.
For more information, see Twitter’s privacy statement ((https://twitter.com/privacy).
Twitter is certified under the Privacy Shield Agreement. Thus, it is guaranteed to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Privacy statement: https://twitter.com/de/privacy; opt out: https://twitter.com/personalization.
On our website we also use so-called social plug-ins ("plug-ins") by Instagram, operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram").
The plug-ins are marked with the Instagram logo, e.g. in the form of an “Instagram camera”.
When you open a site of our online offer containing such a plug-in, your browser establishes a direct connection to the Instagram servers. The content of the plug-in is delivered directly to your browser and embedded in the site by Instagram. Through this integration, Instagram receives the information that your browser has opened the site of our online offer, even if you have no Instagram profile or are not logged in to Instagram.
This information (including your IP address) is transmitted directly to an Instagram server in the US by your browser and stored there. If you are logged in to Instagram, Instagram can directly assign the visit to our website with your Instagram account. When you interact with the plugins, e.g. press the "Instagram" button, this information is also directly transmitted to an Instagram server and stored there.
Moreover, the information is published on your Instagram account and displayed to your contacts.
If you do not want Instagram to directly assign the data collected via our website to your Instagram account, please log off your Instagram account before visiting our website and use a private browser session.
For more information, see Instagram’s privacy statement (https://help.instagram.com/155833707900388).
We use the XING share button (XING AG, Gänsemarkt 6, 20354 Hamburg) on our website. When you open this website, your browser connects with servers of XING AG ("XING") that provide the "XING share button" functions (in particular, calculation/display of the count values) on a short-term basis. XING does not store any personal data about your access to this website. In particular, XING does not store IP addresses. Moreover, your user behaviour in connection with the "XING share button" is not evaluated using cookies. You can find updated privacy information about the "XING share button" and complementary information on the following website: https://www.xing.com/app/share?op=data_protection.
On this website, plug-ins by the social network LinkedIn by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, (hereinafter "LinkedIn") are integrated. The LinkedIn plug-in is indicated by the LinkedIn logo or the "share button" ("recommend") on this website. When you visit this we site, a direct connection is made between your browser and the LinkedIn server via the plug-in. LinkedIn will be given the information that you have visited this website using your IP address. If you click the "share button" while you are logged in to your LinkedIn account, you may link the contents of this website to your LinkedIn profile. As a result, LinkedIn may associate your visit to our website with your user account.
If you are a member of LinkedIn and do not want LinkedIn to link the data collected on our website with your member data stored on LinkedIn, you need to log off your LinkedIn account before visiting our website.
For information on the collection and use of data by the platform or plug-ins, see the privacy statement: http://de.linkedin.com/legal/privacy-policy.
Based on our legitimate interests (i.e., interest in analysis, optimization and economical operation of our online offer according to art. 6.1.1(f) GDPR), we use third-party content or service offers to include their content and services, such as videos or fonts (hereinafter uniformly referred to as "content") within our online offer.
This requires that the third-party supplier of such content perceives the user’s IP address of the user, because he would not be able to send the content to the user’s browser without knowing the IP address. The IP address is required for displaying this content. We try to use only content of suppliers who use the IP address solely for content delivery. Moreover, third parties can use so-called pixel tags (invisible graphics, also called "web beacons") for statistical or marketing purposes. Information such as the number of visitors to this website may be evaluated by these "pixel tags". In addition, the pseudonymous information may be stored in cookies on the user's device and, amongst others, contain technical information about browser and operating system, referring websites, visiting time as well as further information on the use of our online offer, and may also be linked with such information from other sources.
We integrate maps by the service "Google maps", provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may include the user’s IP addresses and location data, but these may not be collected without the user’s consent (usually occurring as part of the user’s mobile devices settings). The data may be processed in the United States. Privacy Statement: https://www.google.com/policies/privacy/, opt out: https://adssettings.google.com/authenticated.
This allows us to show you interactive maps directly on the website and to make the use of the map feature comfortable. This is done regardless of whether you are logged in to a Google account or if no user account exists. If you are logged in to Google, your data is assigned directly to your account. To avoid this, you need to log out before activating the buttons. Google stores your data as usage profile and uses them for advertising, market research and customized design of its site. Such evaluation particularly serves to provide customized adverts and to inform other social network users about your activities on our site (even for users who are not logged in). You have the right to object against the formation of a user profile; however, you need to address Google to make use of this right.
For more information about the purpose and extent of data collection and processing by the plug-in provider, see the provider’s privacy statement. There, you can find even more information about your relevant rights and settings options for privacy protection: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the United States and has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Typekit is a service providing access to a font library. Adobe Systems Software Ireland Limited. Commercial Register Number: Adobe Systems Software Ireland Companies Registration Number 344992. VAT identification number.: ADIR tax number 6364992 H; address: 4-6 Riverwalk; Citywest Business Campus, Dublin 24; Republic of Ireland.
to withdraw your consent at any time, according to art. 7.3 GDPR. In consequence, we are no longer allowed to continue data processing based on this consent in the future.
to file a complaint with a regulatory authority, according to art. 77 GDPR. In general, you may therefore contact the regulatory authority of your usual residence or workplace, or of our head office.
You have the right to withdraw granted consent with future effect, according to art. 7.3 GDPR.
If your personal data are processed on the basis of legitimate interests according to art. 6.1.1(f) GDPR, you have the right to object the processing of your personal data according to art. 21 GDPR if reason exists arising from your particular situation, or the objection is directed against direct mail. In the latter case, you have a general right of objection which will be implemented by us without specifying a particular situation.
If you wish to make use of your right of withdrawal or right of objection, please e-mail to datenschutz@it-economics.de.
When you visit our website, we use common transport encryption processes (TLS) in the highest version supported by your browser. If possible, TLS 1.2 is used in conjunction with AES-256. Unencrypted calls are automatically redirected to an encrypted connection. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is encrypted is indicated by the closed key or lock icon in the bottom status bar of your browser.
Apart from that, we use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorised access by third parties. Our security measures are improved continuously according to technological development.
The data processed by us will be deleted or their processing restricted according to art. 17 and 18 GDPR. Unless explicitly specified in the context of this privacy statement, the stored data are deleted as soon as they are no longer required for their intended purpose and there is no legal obligation to retain data. If data are not deleted because they are required for other and lawful purposes, these are pseudonymized or anonymized, and their processing is limited. In other words, the data are locked and not processed for any other purpose.
According to art. 32 GDPR, we take appropriate technical and organisational measures to ensure a risk-adequate level of protection, considering the state of the art, implementation costs, type, extent, circumstances and purpose of the processing, as well as the different probability of occurrence and severity of risks to the rights and liberties of natural persons.
In particular, these measures include ensuring the confidentiality, integrity and availability of data by controlling physical access to data as well as data access, input, transfer, availability securing, and separation. Furthermore, we have established procedures to ensure data protection rights, deletion of data and reaction to compromise of data. In addition, we already consider the protection of personal data when developing or selecting hardware, software and procedures, according to the principle of data protection by technology design and privacy-friendly default settings (art. 25 GDPR).

References: art. 4
 art. 6
 art. 6
 art. 7
 § 7
 § 7
 art. 6
 art. 6
 art. 6
 art. 28
 art. 6
 art. 6
 art. 28
 art. 6
 art. 6
 art. 44
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 7
 art. 77
 art. 7
 art. 6
 art. 21
 art. 17
 art. 32