Source: https://www.corporate-benefits.eu/privacy-terms
Timestamp: 2019-04-21 09:10:13+00:00

Document:
What are employee discount programs?
The information in this declaration applies to the processing of personal data on or via our website and is intended in particular to inform you of the scope of processing, the purposes of processing, the recipient, legal bases, storage periods and your rights. Personal data is all information relating to an identified or identifiable natural person, i.e. a person (hereinafter also referred to as "data subject"), including for example your name, your address or your e-mail address. "Processing" of personal data means in particular the collection, storage, use and transmission of such data.
Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 Para. 1 (a) EU General Data Protection Regulation (GDPR) serves as legal basis.
In processing personal data necessary for performance of a contract to which the data subject is a party, Art. 6 Para. 1 lit. b GDPR applies as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR applies as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Para. 1 (f) GDPR applies as the legal basis for processing.
The data subject's personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject.
The legal basis for temporary storage of data and log files is Art. 6 para. 1 (f) of the GDPR.
Temporary storage of IP address by the system is necessary to enable delivery of the website to the user's computer. To this end, the user's IP address shall remain stored for the duration of the session. The data is stored in log files to ensure the website's functionality.
The data is also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context.
These purposes also encompass our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f GDPR.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for provision of the website, this will be undertaken once the respective session has ended.
If the data is stored in log files, this will be undertaken after 7 days at the latest. Further storage is possible. In this case, the user's IP addresses will be deleted or altered so that a tracing back to the accessing client would no longer be possible.
The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f GDPR.
We use these cookies for the adaptation of language settings. This is also our legitimate interest in the processing of personal data.
You can contact us via the e-mail addresses provided on our website. In this case, the user's personal data that is transmitted along with the email will be stored.
There is also a contact form on our website where you can send us enquiries or request offers.
In addition, the data that you may transmit to us in an optional personal message.
The legal basis for the processing of data transmitted in the course contact via e-mail or via the contact form is Art. 6 Para. 1 lit. f GDPR. If the contact is aimed at concluding a contract, the additional legal basis for the processing is art. 6 para. 1 lit. b of the GDPR.
The processing of personal data is only carried out for the purpose of processing this contact request. This is also the necessary legitimate interest in the processing of the data.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data sent by e-mail or contact form, this is the case when the conversation with you has ended. The conversation will have ended when it is evident from the circumstances that the matter at hand has been conclusively resolved.
In the event of rejection, applicant data will be deleted no later than three months after notification of the rejection to the applicant.
If, in the course of e-mail communications, data is accumulated that we are obliged to store due to tax regulations, commercial law or other regulations, deletion will only take place after expiry of the respective statutory retention or storage periods. The legal basis for this storage is Art. 6 para. 1 lit. c, GDPR.
Our website uses Google Universal Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Universal Analytics uses "cookies", which are text files stored on your computer that analyse how you use a website. The information generated by the cookie about the use of this website by the user is generally transmitted to and stored in a Google server in the USA. IP anonymisation has been enabled on this website, whereby a user's IP address will be truncated in advance by Google within Member States of the European Union, or other States party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, for compiling reports on website activity, and for providing to the website operator other services relating to the website activity and internet activity. The IP address transmitted by your browser as part of Google Universal Analytics will not be merged with any other data held by Google.
In addition, a so-called "user ID" is used. This is not assigned to a specific device, but to a specific user. The user ID itself is a unique, permanent and non-personalized string of characters. This allows for the behavior of the respective user on different end devices (smartphone, tablet, notebook, etc.) to be recorded. The user ID is assigned to a user if we can uniquely identify a user. This is usually only possible if they use a personalized area (e.g. login area). As soon as a user logs in for the first time, we will assign them a unique user ID. This user ID is transmitted to Google in connection with Google Universal Analytics and used as a pseudonym for communications with Google. Subsequently, the online behavior and the user ID are transferred to Google together where they are aggregated into profiles. Google only receives the user ID and not the information from the linked profile or other personal data of the user. The user profiles created in this way are made available to us in summarized form. We do not merge the user profiles submitted to us for a user ID with other personal data of the user.
The legal basis for processing the personal data of users is Art. 6 para. 1 lit. f GDPR.
The processing of the data by Google Analytics enables us to analyse the surfing behavior of our users. We are in a position to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, our legitimate interest also lies in the processing of personal data. through anonymization of the IP address, users' interest in protecting their personal data is sufficiently taken into account.
You can also prevent data collection by Google Universal Analytics by clicking this link . This sets an opt-out cookie which prevents any future collection of your data when visiting this website. The opt-out cookie applies only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
The recipient of the data is Google. For the cases in which personal data is transferred to the USA, a transfer to Google as a third country for the purpose of the GDPR is permissible according to Art. 44, 45 GDPR, as an appropriate level of statutory data protection exists for the USA with respect to this company.
We use DoubleClick and the data processed in this context for advertising purposes, in particular to be able to show you targeted advertising. For these purposes, our legitimate interest also lies in the processing of personal data.
The recipient of the data is Google. For the cases in which personal data is transferred to the USA, a transfer to Google as a third country for the purpose of the GDPR is permissible according to Art. 44, 45 GDPR, as an appropriate level of statutory data protection exists for the USA with respect to this company (cf. 1) e)).
We use the Google AdWords conversion tracking. This is an analysis service of Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; "Google"). When you click an ad delivered by Google, a cookie for conversion tracking is stored on your computer. These cookies expire after 30 days and are not used for personal identification.
If you now visit our website and the cookie has not yet expired, we and Google can recognize that you clicked on the ad and were forwarded to our page.
In this context, we receive information about the total number of users who clicked on our ads and were redirected to that respective page. However, advertisers do not obtain any information that can be used to personally identify users.
We use the data to compile statistics from which the success of AdWords campaigns can be inferred. For these purposes, our legitimate interest also lies in the processing of personal data.
If you wish to deactivate cookies for conversion tracking, you can set your browser to block cookies from the following domain: "googleadservices.com".
We use Google Maps on our website to display our location. Google Maps is operated by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; "Google"). When you access our contact page in which "Google Maps" is integrated, Google stores a cookie on your device in order to process user settings and data for display on Google Maps when displaying the page and the associated functions of Google Maps.
IP address, (starting) address entered during route planning.
We use Google Maps to show our location. For these purposes, our legitimate interest also lies in the processing of personal data.
For the purpose and scope of data collection and the further processing and use of the data by Google as well as your rights and setting options for the protection of your privacy, please refer to the data protection information from Google https://policies.google.com/privacy?hl=en.
For the provision of our website and the contact possibilities offered, we make use of various service providers, including host providers and e-mail providers, who process the data retained by them exclusively on our behalf as contract processors in the European Union in accordance with Art. 28 DSGVO.
To assert these rights, please use the contact details provided at the beginning.
Without prejudice to any other administrative or judicial remedy, you also have the right to appeal to the competent supervisory authority if you believe that the processing of personal data concerning you is contrary to the GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 art. 6
 Art. 6
 Art. 6
 Art. 44
 Art. 44
 Art. 28