Source: https://soley.io/en/data-privacy-declaration/
Timestamp: 2019-04-20 10:49:31+00:00

Document:
which the data subject indicates that he/she agrees to the processing of personal data concerning him/her.
You can use our website without disclosing your identity. Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer.
• Information about the website that your system accesses through our website.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the visitor’s computer. For this purpose, the IP address of the visitor to the website must remain stored for the duration of the session.
This is done to ensure the functionality of the website. In addition, the storage of data in log files serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f DS-GMO.
If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the visitors of the website are deleted or alienated so that an assignment of the calling client is no longer possible.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the visitor to the website.
a) If your explicit consent is given for the processing of your data, the legal ground for this processing is set out in Art. 6 section (1) (a) of the GDPR.
b) If your personal data is processed for the purpose of contract performance, the legal ground for this processing is set out in Art. 6 section (1) (b) of the GDPR.
c) The legal ground for all other cases (especially when using a contact form) is set out in Art. 6 section (1) (f) of the GDPR.
Right of revocation: You have the right to object at any time to the processing of data which was performed according to Article 6 (1) (f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation.
Our legitimate interest in data processing is to communicate with you in a timely manner and to answer your queries cost-efficiently. If you provide us with your address, we reserve the right to use it for direct postal marketing. You can protect your interest in data protection by transferring of data efficiently (e.g. using a pseudonym).
Your data will be deleted if it can be inferred from the circumstances that your queries or questions have been completely clarified. If you agree to a later resumption of the conversation, the data remains stored for this purpose until resubmission so that the facts can be clarified at this later point in time. You have the right to revoke your consent for processing at any time in compliance with your consent.
There is the possibility to write questions or comments in our forum. Your personal data (e.g. name/pseudonym, email address, website) collected in this scope will be solely processed for the purpose of publishing your comments.
You have the right to object at any time to the processing of data which was performed according to Article 6 (1) (f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation. In the case of direct marketing, however, you may object to the processing at any time without stating any reasons.
Sect. 5 Web analysis with Statify – We renounce Google Analytics and comparable services.
In direct comparison to statistical services such as Google Analytics, WordPress.com Stats and Matomo (Piwik), Statify does not process or store personal data such as IP addresses – Statify counts page views, not visitors. A database table created locally in WordPress consists of only four fields (ID, date, source, destination) and can be viewed, cleaned and deleted by the administrator at any time. We use this information to evaluate the use of the website in order to compile reports on website activity.
Our legitimate interest is the statistical analysis of user behavior for optimization and marketing purposes. Statify does not collect any personal data to protect your interest in data protection.
No personal data will be passed on.
This WordPress website is hosted via automattic possibly way in a third country. However, tracking does not collect, process or store any personal data.
60 days for the creation of monthly evaluations.
You can agree to tracking at the beginning of your website visit via an opt-in dialog. If you do not agree or actively reject tracking, no tracking code will be executed. If you have agreed, this decision is stored in the cookie “cookie_notice_accepted” for 30 days. You can reset your consent at any time by deleting this cookie in your browser. The next time you visit the site you will be asked for your preference.
The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies remain stored from a few minutes to several years. (4) Right of revocation You can reject the additional cookies by responding to the request displayed in our cookie notification as follows: “No” to cookies and tracking.” Then only the technically necessary cookies are created in your browser. If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this may result in a functional limitation of our website. Your decision will be stored in the cookie “cookie_notice_accepted” for 30 days. You can revoke your consent to permanent storage by deleting the stored cookies via your browser. If you delete the cookie “cookie_notice_accepted”, we will ask you for your cookie and tracking preference the next time you visit us.
• Cookie_notice_accepted – necessary – storage for 30 days – stores the cookie and tracking decision without personal data.
If you enter data in the web form for sending a license key, your e-mail address will be used for information purposes. This means that, depending on the product, we will send you a series of e-mails as part of our e-mail onboarding, which will help you get started with our software. We can evaluate which links are clicked in email onboarding and use this information to further improve the onboarding process. You were informed in the opt-in e-mail together with the license key that you are activating e-mail onboarding by activating the license key.
Your email address will be stored for email onboarding. After the expiration of the onboarding your email address will be deleted within 30 days.
You can revoke your consent at any time with effect for the future. If you no longer wish to receive the opt-in, you can unsubscribe at any time via a link in the onboarding emails.
(8) the existence of automated decision-making, including profiling in accordance with Article 22 (1) and (4) of the GDPR and – at least in these cases – meaningful information for your about the logic involved, as well as the consequences and intended effects of such processing. As a data subject, you have the right to be informed whether the personal data concerning you are transferred to a third country or to an international organisation. In this regard, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
(4) if you have lodged an objection against the processing in accordance with Art. 21 Section (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your grounds. Where processing of personal data relating to you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the purpose of establishing, exercising or defending legal claims or for the protecting of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State. If the restriction of processing has been restricted in accordance with the conditions mentioned above, you will be informed by the controller before the restriction of processing is lifted.
b) Obligation to inform other controllers (third parties) If the controller has made your personal data public and is obliged to erase them accordance to Article 17 Section (1) (1) of the GDPR, he has to take reasonable steps, taking into account the available technology and the cost of implementation, including technical measures, to inform the controllers who process the personal data that you, as the person concerned, have requested the erasure of any links to, or copy or replication of those personal data.
and (2) the processing is carried out using automated means. In exercising this right, you also have the right to have your personal data are transmitted directly from one controller to another, as far as this is technically feasible. Freedoms and rights of other persons may not be affected thereby. The right to data portability is not applicable to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority given to the data controller.
For reasons arising from your particular situation, you have the right to object at any time to processing of personal data concerning you, which is carried out based on point (e) or (f) of Article 6 Section (1); this also applies to profiling based on these provisions. The controller will no longer process the personal data concerning you, unless the controller can prove that there are compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims. Where the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling, insofar as it is related to such direct marketing. Where you object to the processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for these purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the possibility of exercising your right to object by automated means using technical specifications.
(3) is based on your explicit consent. However, these decisions may not be based on special categories of personal data in accordance with Article 9 Section (1) GDRP, unless point (a) or (g) of Article 9 Section (2) applies and appropriate measures to safeguard the rights and freedoms and your legitimate interests are in place. Regarding the cases referred to in (1) and (3), the data controller has to take appropriate measures to safeguard the rights and freedoms and your legitimate interests, at least the right to obtain human intervention on the part of the data controller, to state his or her own position and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes this Regulation. The supervisory authority with which the complaint has been lodged is to inform the complainant on the progress and the outcome of the complaint including the possibility of judicial remedy accordance to Article 78 GDPR.
The following data protection information provides an overview of the collection, processing and use of your data from the employment relationship. Applicants also belong to the group of employees within the framework of data protection pursuant to § 26 of the Federal Data Protection Act).
In the following, we inform you about the processing of your personal data by us and about your rights under data protection law.
Which data we process in detail and how they are used depends largely on the concrete application procedure.
2. what data sources and data do we use?
We process the personal data that you transmit to us as part of the application process.
Relevant personal data are in particular personal data (name, address and other contact data, date and place of birth and nationality), identification data (e.g. identity card data) and authentication data (e.g. specimen signature), health data (e.g. information on disability/disability), qualification documents (e.g. certificates, assessments and other training certificates) and photographs.
We process your personal data within the framework of the Basic Data Protection Regulation (EU-DSGVO), the Federal Data Protection Act (BDSG), sector-specific data protection standards and company agreements which may apply to the application procedure (Social Code, Telecommunications Act, Works Constitution Act, etc.).
The processing of personal data (Art. 4 No. 2 EU-DSGVO) is carried out to carry out the application procedure (taking into account Art. 88 EU-DSGVO and § 26 BDSG). There is no contractual obligation.
If necessary, we also process your data to safeguard our legitimate interest or the legitimate interests of third parties.
Your personal data may only be processed for the detection of criminal offences if documented realistic indications lead to the suspicion that you have committed a criminal offence, that the processing is necessary for the detection and that your legitimate interest in the exclusion of the processing does not predominate, in particular that its nature and extent are not disproportionate with regard to the cause.
If you have given us permission to process personal data for certain purposes (e.g. passing on application data to affiliated companies), the legality of this processing is given on the basis of your consent. A given consent can be revoked at any time. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.
As a company we are subject to various legal obligations (e.g. tax laws). Measures to fulfil control and reporting obligations include, inter alia, the purposes of processing.
Within the company, your data will be sent to those positions that need it for processing the application process and legal obligations. Also contract processors used by us may receive data for these purposes. Data will only be passed on to recipients outside the company in compliance with the applicable data protection regulations. We only pass on information about you if this is required by law, if you have consented or if we are authorised to provide information. Under these circumstances, recipients of personal data may be, for example, affiliated companies (for the purpose of applying for other jobs).
Other data recipients may be such places for which you have given us your consent for data transmission.
We process and store your personal data for the duration of the application process. Your personal data will be deleted after 3-6 months after fulfilment of the purpose and complexity (application procedure).
If data storage is no longer required for the application process and there are no other legal retention periods, or if you have not given us your consent to longer storage (e.g. for further application processes), your data will be deleted immediately in accordance with data protection regulations.
Unless you have given us your consent, data will not be transferred to third countries (countries outside the European Economic Area – EEA). If necessary, we will inform you separately about details as far as required by law.
7 What data protection rights do I have?
Every data subject has the right of access to the processing of his/her personal data, the right to rectification, the right to cancellation, the right to limitation of the processing, the right to object to the processing and the right to data transfer within the framework of the statutory provisions. The restrictions according to §§ 34 and 35 of the Federal Data Protection Act must be taken into account with regard to the right to information and the right to deletion. In addition, the right to lodge a complaint with the data protection supervisory authority pursuant to Art. 77 DS-GVO i.V.m. § 19 BDSG.
As part of the application process, you only need to provide the personal data necessary for the application process. There is no obligation to provide us with this necessary data. But without this data we cannot and will not usually be able to carry out the application procedure.
We do not use automated processing to make a decision on the justification and conduct of the application process. If we should use these procedures in individual cases, we will inform you separately about details, as far as legally prescribed.
10. to what extent is my data used for scoring?
Your data will not be used to create a profile (scoring) for the justification and implementation of the application procedure.
After you have submitted an objection, we will no longer process your personal data unless we are able to prove compelling reasons for the processing that outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.
The objection can be made without form and should preferably be addressed to: privacy@soley.io.
The following data protection information provides an overview of the collection, processing and use of your data.
With the following information we would like to provide you with an overview of how we process your personal data and your rights under data protection law.
Which data is processed by us in detail and how this data is used, depends decisively on our business relationship and, if necessary, on the type of data we use. the services you have requested or agreed with us.
(1) Who is responsible for data processing and who can I contact?
We process personal data that you transmit to us within the scope of our business relationship.
On the other hand, we process personal data that we have obtained and are permitted to process from publicly accessible sources (e.g. debtor directories, land registers, commercial and association registers, press, media).
Relevant personal data are personal data (name, address and other contact data, date and place of birth and nationality), if applicable. Identity data (e.g. ID card data) and authentication data (e.g. signature sample) and bank connection data (e.g. IBAN, account holder).
We process your personal data within the framework of the Basic Data Protection Regulation (EU-DSGVO) and the Federal Data Protection Act (BDSG).
We collect, process and use the personal data of our customers for the purpose of establishing, fulfilling, implementing or terminating contractual obligations arising out of the business relationship and the possible business relationship with us. related services.
The purposes of the data processing depend primarily on the respective contractual object. Further details for the purpose of data processing can be found in the respective contract documents and the respective valid terms and conditions.
If necessary, we process your data beyond the actual fulfilment of the contract to protect the legitimate interests of us or third parties.
• Video surveillance is used to collect evidence of criminal offences. They thus serve to protect customers and employees as well as the exercise of the householder’s rights.
– for business management and the further development of services and products.
If you have given us permission to process personal data for certain purposes, the lawfulness of this processing is given on the basis of your consent. A given consent can be revoked at any time. This also applies to the revocation of declarations of consent given to us before the DS-GVO came into force, i.e. before 25 May 2018.
As a company we are subject to various legal obligations, i.e. legal requirements and ordinances (e.g. tax laws). The purposes of the processing include, among other things, the fulfilment of control and reporting obligations under tax law as well as the assessment and control of risks.
• Public bodies and institutions (e.g. offices) where there is a legal or official obligation.
pipedrive– we use pipedrive to manage customer enquiries and support business development. (https://www.pipedrive.com/en/privacy). Pipedrive only cooperates with certified data processors and uses data centers in accordance with its own specifications also only uses data processors.
We process and store your personal data for the duration of our business relationship, which includes, for example, the initiation and execution of a contract. In addition, we are subject to various storage and documentation obligations, including the German Tax Code (AO) and the German Commercial Code (HGB). The retention periods laid down there are between two and ten years.
Already after the fulfilment of the purpose certain data are to be deleted (e.g. personal data of prospective customers who have not entered into a contractual obligation). Finally, the storage period is assessed according to the statutory limitation periods, which in certain cases can be up to thirty years.
In the context of our business relationship, you must only provide personal data which is necessary for the establishment, performance and termination of our business relationship or which we are legally obliged to collect. As a rule, we will have to refuse to conclude a contract without this data or will no longer be able to execute an existing contract and may have to terminate it.
We do not use automated decision making for the establishment and execution of the business relationship. If we should use these procedures in individual cases, we will inform you separately about details, as far as legally prescribed.
Your data will not be used to create a profile (scoring) for the establishment and implementation of the business relationship.
In order to operate direct advertising, we process your personal data in individual cases. You have the right to object at any time to the processing of your personal data for the purpose of such advertising. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 § 26
 Art. 88
 § 26
 Art. 77
 § 19