Source: http://www.iconmobile.com/about/data-privacy-policy
Timestamp: 2019-04-24 07:58:50+00:00

Document:
We only process personal data of our users if this is necessary to provide a functional website, our contents and services. The processing of personal data of our users takes place only after the user has given consent to the processing. An exception applies in those cases where prior consent cannot be obtained for actual reasons and the processing of the data is permitted by law.
• Insofar as we obtain the consent of the user for the processing of personal data Art. 6 (1) (a) GDPR serves as the legal basis.
• If the processing of personal data required for the performance of a contract to which the user is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing data in order to take steps at the request of the user prior to entering into a contract.
• Insofar as the processing of personal data is necessary for compliance with a legal obligation to which the Controller is subject, Art. 6 ( 1) (c) GDPR serves as the legal basis.
• In the event that processing is necessary in order to protect the vital interests of the user or of another natural person Article 6 (1) (d) GDPR serves as the legal basis.
• If the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the user which require protection of personal data, in particular where the data subject is a child Article 6 (1)(d) GDPR serves as the legal basis for processing.
The personal data of the users will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the Controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Legal basis for the temporary storage of personal data and the log files is Art. 6 (1) (f) GDPR.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session. The IP address is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR is based as well on these purposes.
The data will be deleted as soon as the data is no longer necessary to achieve the purpose for which the data were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection for the user.
Legal basis for the temporary storage of personal data is Art. 6 (1) (f) GDPR.
In the context of an application and the transmission of personal data by the applicant to career@iconincar.com, the data will be processed solely in the context of the application procedure with regard to the possible establishment of an employment relationship. In addition, the applicant data for processing and evaluating the application will only be shared with persons on a need-to-know basis. A forwarding of the application, e.g. within the companies of the iconmobile group, only takes place if you have expressly consented to such.
The legal basis for the processing of personal data in the application process is § 26 paragraph 1 BDSG.
The data will only be processed for the purposes of the application procedure.
We will delete your personal data as soon as they are no longer required for the above-mentioned purposes of the application procedure. In this respect, however, personal data is stored for the time during which claims can be asserted against icon incar GmbH. Insofar, the applicant data will be kept for a period of 6 months after the end of the application procedure or the rejection of the application, and subsequently deleted. Any further storage of your application data will only take place with your express consent.
If personal data must necessarily be processed in the context of the application procedure, the failure to provide the information will prevent the application from being processed.
As far as you have expressly consented to a forwarding of the application to other companies within the iconmobile group or to a storage beyond the period of 6 months, such a consent can be revoked at any time under datenschutz@iconmobile.com This also applies to the revocation of consents given before the validity of the DSGVO - i.e. before 25 May 2018. The revocation does not affect the legality of the data processed until the revocation.
You have the right to obtain from the controller the information as to whether or not personal data are transferred to a third country or to an international organization. Within this context you shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
If you have obtained restriction of processing pursuant to paragraph 1 you will be informed by the controller before the restriction of processing is lifted.
(2) you withdraw consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing;.
If you enforced your right to rectification, erasure or restriction of processing, the controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 GDPR to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to get informed by the controller about those recipients.
In exercising your right to data portability pursuant to paragraph 1, you shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
An automated decision-making based on the collected personal data does not take place.
a) Description and scope of data processing iconmobile maintains Facebook pages to communicate with users and to inform them about events and services in connection with the business area of iconmobile. As Facebook is an US provider, it can be assumed that data will also be processed outside the European Union. However, Facebook is obliged to comply with EU data protection standards, as Facebook is certified under the “Privacy Shield”. We assume that Facebook generally processes user data for market research and advertising purposes. Thus, for example, user profiles can be created from the user behavior and the resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computer, in which the user's usage behavior and interests are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to these).
b) Legal basis for the data processing The legal basis for the processing of personal data using iconmobile Facebook pages is Art. 6 para. 1 lit. f DSGVO.
c) Purpose of data processing The use of the Facebook pages serves the purpose of communication and providing information for our users. For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f DSGVO.
d) Duration of storage, Right to object and erase As Facebook itself does not provide comprehensive information about data processing, we can only provide the information that Facebook itself provides. For a description of the respective processing and the possibilities of objection (opt-out), we refer to Facebook's data policy: https://www.facebook.com/privacy/explanation. In the event that you are considering asserting rights under the DSGVO, you should consider asserting these rights directly on Facebook, as only Facebook has access to the user data.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 26
 Art. 6
 Art. 6