Source: https://www.kwb.eu/en/data-privacy/
Timestamp: 2019-04-24 02:25:32+00:00

Document:
Thank you for visiting our websites. This text aims to provide information about how we handle your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).
The “controller” specified in the “Disclaimer” section is responsible for the collection and processing of data outlined below.
We store the IP address transmitted by your web browser strictly for the purpose intended for a duration of seven days in the interest of being able to identify, restrict, and eliminate attacks on our websites. We delete or anonymise the IP address after this period expires. The legal basis is Art. 6 par. 1 (1) letter f of the GDPR.
• the IP address of the requesting computer, truncated so that it cannot be linked to you.
The specified log data will only be saved in anonymised form.
As part of commissioned data processing in accordance with Art. 28 of the GDPR, we transmit your data to service providers that support us in operating our websites and the processes associated with it. Our service providers are strictly bound by instruction to us and are obliged accordingly by contract.
Personal data is also transmitted to the USA whenever Google services are used. An appropriate level of data protection is thereby ensured thanks to Google’s participation in the Privacy Shield agreement (Art. 45 par. 1 of the GDPR).
The information that is generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Since we have activated IP anonymisation on this website, your IP address will however be truncated within EU Member States. Only in exceptional cases will the full IP address be transferred to a Google server in the USA (appropriate level of protection in place in accordance with Art. 45 par. 1 of the GDPR thanks to Google’s participation in the Privacy Shield) and then truncated there. In addition, we have concluded a contract for commissioned data processing with Google Inc. (USA) in accordance with Art. 28 of the GDPR. Accordingly, Google will use all information strictly for the purpose intended in order to evaluate the use of our website for us and to compile reports about website activity.
You can also prevent the collection of the data relating to your use of the website (including your IP address) created by the Google cookie and the processing of such data by Google by downloading and installing the browser plug-in available at the following link.
Click here to object to the processing of your data by Google Analytics.
We use cross-device remarketing technologies from Google so that targeted advertising can be displayed on other websites based on your visit to our sites. Data is processed on the basis of your consent in accordance with Art. 6 par. 1 (1) letter a of the GDPR.
When you visit our websites, Google may retrieve recognition features for your browser or device (e.g. by creating a so-called browser fingerprint), evaluate your IP address, or store a recognition feature in the form of a small text file on your device (e.g. a so-called third-party cookie). Google may also link your visit to our websites with one or more of these recognition features and store this information in order to display our online advertising to you when you visit other sites.
The above-mentioned recognition features are configured as pseudonyms and can be used by Google to recognise your device on other websites. For example, if you visit a site that participates in Google´s Display Network (i.e. displays ads on behalf of Google), Google may recognise your device and browser based on the features specified above.
We can also provide our websites with so-called “remarketing tags”. This means that we can include keywords in our websites that contain statements about the content of the displayed site (such as product or service categories). The keywords that we use do not contain any personal or sensitive information. Google receives and stores these keywords to the above-mentioned recognition features. So, when you visit a site that we tagged with a particular product category, Google stores that particular tag and assigns it to your recognition criteria.
By doing this, we can use Google to advertise on other websites that are based on the web pages visited. If you visit another website that participates in the Google Display Network, Google will be able to tell you, based on the recognition features and the keywords stored with these recognition features, whether and, if so, which of our advertisements are to be displayed.
For more information about how Google Remarketing technologies work, please visit https://www.google.com/policies/technologies/ads/.
What does cross-device remarketing mean?
If you sign up for Google services with your own login credentials or use one or more of your own Google accounts, Google can combine the recognition features of different browsers and devices. Thus, if Google has ever created its own recognition feature for the laptop, desktop PC, smartphone, or tablet used by you, these recognition features can be associated with each other once you use or have used a Google service with your login information. In this way, Google can target our advertising campaigns beyond devices. However, Google will do so only if you have given them your consent to this type of data processing in the past.
You can make settings for advertising.
You can object to this form of advertising at any time. To do so, please go to the web page https://support.google.com/ads/answer/2662922 and turn off personalised ads. Please note that these settings may not be applied to all devices and browsers. More information is also available at https://support.google.com/ads/answer/2662922.
This website uses the online marketing tool DoubleClick by Google provided by the operator Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).
In addition, DoubleClick may use cookie IDs to collect so-called conversions related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser´s website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence over the volume and further use of the data collected by Google through the use of this tool, and therefore inform you according to the best of our knowledge: By integrating DoubleClick, Google receives information that you have accessed the corresponding part of our website or clicked one of our ads. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
Google LLC based in the USA is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the data protection level applicable in the EU.
This website uses the online advertising programme “Google AdWords” including conversion tracking from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use the offer of Google AdWords to draw attention to our attractive offers with the help of advertising materials (so-called Google AdWords) on external websites. We can determine in relation to the data of the advertising campaigns how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.
The cookie for conversion tracking is set if a user clicks an AdWords ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies generally lose their validity after 30 days and are not used for personal identification. If the cookie has not yet expired when the user visits certain pages of this website, we and Google will be able to tell that the user clicked the ad and proceeded to that page. Every Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. The information obtained with the help of conversion cookies serves to create conversion statistics for AdWords customers who have chosen conversion tracking. Customers are informed of the total number of users that clicked their advert and were redirected to a page with a conversion tracking tag. However, no information is received that can be used to personally identify users. If you do not want to participate in tracking, you can object to its use by deactivating the Google conversion tracking cookie via your browser´s user settings. You will then be excluded from the conversion tracking statistics. We use Google AdWords based on our legitimate interest in targeted advertising in accordance with Art. 6 par. 1 letter f of the GDPR.
Your comment will be published on our site. Please be aware that we may manually inspect this content before publication and that comments may therefore only appear after some delay. If you specify a name (you are welcome to use a pseudonym too), this will be published beside your comment. The legal basis for data processing is Art. 6 par. 1 (1) letter f of the GDPR. Our interest here is to enable an exchange of opinions. Please be aware that we manually approve comments before publication, which means that your comments may only appear after some delay especially on weekends.
If you wish to object to the processing of your data transmitted via the comment function, please send an email to the address specified in the “Disclaimer” section.
For reasons of data protection, no social plug-ins are integrated directly into our website. Therefore, no data is transferred to social-media services, e.g. Facebook, Twitter, XING, or Google+, when you visit our sites. Profiling by third parties is thus excluded.
You can still share selected web pages and articles by choosing the corresponding Facebook, Twitter, XING, or Google+ button and also see how often they have been shared in the past. For this we use the so called “Shariff” solution, developed by c’t magazine, to offer a data protection-compliant alternative to the traditional social plug-in.
What´s behind it? First, with the Shariff solution, all data and functions required to display the Facebook, Twitter, XING, or Google+ buttons are provided by our web server. Only once you have decided to share a contribution by clicking the corresponding button will the data be transferred to the operator of the respective social media service.
We embed YouTube videos on some sub-pages of our website. YouTube contents are loaded when these sub-pages are accessed. YouTube also receives your IP address during such operations, which is technically required for accessing the contents. Data is processed on the basis of Art. 6 par. 1 (1) letter f of the GDPR (interest in giving you an overall impression of our company). We basically have no influence over any further processing carried out by YouTube. However, when embedding the videos, we made sure to activate the extended data protection mode option provided by YouTube.
On the basis of our legitimate interests (i.e. interest in the economic operation of our online offer within the meaning of Art. 6 par. 1 (1) letter f of the GDPR), we are participants in the Amazon EU Associates Programme, an affiliate advertising programme designed to provide a means for sites to earn advertising fees by advertising and linking to amazon.de (so-called affiliate system). This means that we earn money on qualified purchases as an Amazon partner.
You can find additional information about data use by Amazon, and your options to object, in Amazon’s data privacy statement at: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010.
Note: Amazon and the Amazon logo are trademarks of Amazon.com, Inc., or one of its affiliate companies.
You can get in contact with us using a web form. To use the form, you need to give us your name and email address. You can provide further details but are not obliged to do so.
By sending this mail form, you agree that the data you enter may be collected and stored electronically. The legal basis for data processing is Art. 6 par. 1 (1) letter a of the GDPR. We use your data for the sole purpose of processing your query. You can revoke your consent at any time e.g. by sending an email to welcome@kwb.eu.
You have the option of sending us online applications. We process your personal data in accordance with the applicable data protection provisions on the basis of Section 26 of the new Federal Data Protection Act (BDSG-neu). We process the data you provide to us as part of your online application only for the purpose of selecting a candidate. Data is not processed for any other purposes.
You yourself determine the scope of data that you want to send to us as part of your online application. Online applications are electronically transferred to our HR department and processed there swiftly. Data is transferred with encryption. Applications are usually forwarded to the head of the relevant department within our company. Your data is not transferred to any other parties. Your details are treated as confidential within our company. Your documents will be deleted after a period of [6 months] if your application has not been successful.
In order to consider your application for other or future vacancies, we require that you state this in your application. We will then process your data on the basis of Art. 6 par. 1 (1) letter a of the GDPR.
In order to protect your data against unwanted access as comprehensively as possible, we take appropriate technical and organisational measures. We use an encryption method on our sites. Your information is transferred from your computer to our server and vice versa via the Internet by means of TLS encryption. You recognise this by the fact that the lock symbol is closed in the status bar of your browser and the address bar starts with https://.
When processing your personal data, the GDPR grants you certain rights as a website user.
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to access personal data and you have a right to access the information listed in Art. 15 of the GDPR.
You have the right to request that inaccurate personal data concerning you be corrected and if applicable any incomplete personal data be supplemented without delay.
You have the right to request that personal data concerning you be deleted without delay provided that one of the reasons listed in Art. 17 of the GDPR applies, e.g. if the data is no longer required for the purposes pursued.
You have the right to request that the processing of data be restricted if one of the prerequisites listed in Art. 18 of the GDPR applies, i.e. if you have objected to its processing for the duration of any inspection carried out.
In certain cases that are listed in detail in Art. 20 of the GDPR, you have the right to receive personal data concerning you in a structured, standard, and machine-readable format, or to request the transmission of this data to a third party.
If data is collected on the basis of Art. 6 par. 1 (1) letter f of the GDPR (data processing to safeguard legitimate interests), you have the right to object, on grounds relating to your particular situation, to its processing at any time. We shall then no longer process the relevant personal data unless we can demonstrate compelling, legitimate grounds for its processing, which override the interests, rights, and freedoms of the data subject, or its processing is required for the establishment, exercise, or defence of legal claims.
In accordance with Art. 77 of the GDPR, you have the right to file a complaint with a supervisory authority if you believe that the processing of your personal data infringes upon data protection provisions. This right can be exercised in particular with a supervisory authority in the Member State of your habitual residence, place of work, or place of the alleged infringement.
This text aims to provide information about how we handle your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).
You can find our contact details in our Disclaimer section.
The data you enter on our social media pages, e.g. comments, videos, images, likes, public messages, etc., is published by the social media platform and is never used or processed by us for any other purpose. We only reserve the right to delete contents if this is necessary. We may share your contents on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is Art. 6 par. 1 (1) letter f of the GDPR. Data is processed in the interest of our PR activities and communication.
If you wish to object to a certain type of data processing where we can exert influence, please refer to the contact details listed in the “Disclaimer” section. We will then assess your objection or forward it to the social media platform when required.
If you submit a query on the social media platform, depending on the required response, we may refer it to another, secure communication channel where confidentiality is guaranteed. You always have the option of sending confidential queries to the address specified in our “Disclaimer” section.
As already mentioned, we ensure that our social media pages are as privacy-compliant as possible where this is permitted by the provider of the social media platform. In particular, therefore, we ensure that we do not use demographic, interest-based, behaviour-based, or location-based target group definitions for advertising, which may be provided to us by the operator of the social media platform. In terms of statistics which the provider of the social media platform supplies to us, we can only influence these to an extent and cannot turn them off either. However, we ensure that no additional optional statistics are provided to us.
The operator of the social media platform uses web tracking methods. Web tracking can also take place irrespective of whether you are logged in to or registered with the social media platform. As already shown, unfortunately we have little influence over the web tracking methods employed by the social media platform. In other words, we cannot turn this off.
Please be aware that we cannot rule out that the provider of the social media platform will use your profile and behavioural data to evaluate e.g. your habits, personal relationships, preferences, etc. In this respect, we have no influence over the processing of your data by the provider of the social media platform.
If data is collected on the basis of Art. 6 par. 1 letter f of the GDPR (data processing to safeguard legitimate interests), you have the right to object, on grounds relating to your particular situation, to its processing at any time. We shall then no longer process the relevant personal data unless we can demonstrate compelling, legitimate grounds for its processing, which override the interests, rights, and freedoms of the data subject, or its processing is required for the establishment, exercise, or defence of legal claims.

References: Art. 13
 Art. 6
 Art. 28
 Art. 45
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 17
 Art. 18
 Art. 20
 Art. 6
 Art. 77
 Art. 13
 Art. 6
 Art. 6