Source: https://www.arge.de/en/data-privacy-statement/
Timestamp: 2019-04-22 16:38:48+00:00

Document:
The following declaration is to inform you about what kind of personal data are collected for what purpose by us in our capacity as Data Controller on this website, and to what extent these data will be disclosed to third parties.
The processing of personal data requires legal grounds that we would like to present to you hereinafter.
For the processing of personal data for which we obtain consent from the individual in question, the legal basis is Art. 6 (1) lit. a of the EU General Data Protection Regulation (GDPR).
For the processing of personal data necessary for the performance of a contract to which the data subject is party, the legal basis is Art. 6 (1) lit. b GDPR. This also includes steps at the request of the data subject prior to entering into a contract.
Insofar as the processing of personal data necessary for compliance with a legal obligation to which the data controller is subject, the legal basis is Art. 6 (1) lit. c GDPR.
If processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, the legal basis is Art. 6 (1) lit. f GDPR. The legitimate interest pursued by our enterprise is to conduct our business and the analysis, optimization and maintenance of safety of our online offer.
In the server statistics data are recorded that are transmitted to us within the scope of our legitimate interest in analysis and for safety reasons (so-called “logfiles”).
In general, we are not able to assign these data to specific individuals. These data are not merged with other data sources. Moreover, after being evaluated statistically, the data will be deleted within 7 days. Data that need to be stored for evidentiary purposes are excluded from deletion until the incident in question has been clarified.
We make use of hosting services. These serve to provide infrastructure- and platform services, computing capacity, storage space and database services, security services, and technical maintenance services in order to keep the operation of this online offer running.
In this context, we and/or our hosting provider process inventory data, contact data, content data, contractual data, usage data, meta- and communication data of customers, interested parties and visitors of this online offer, on the basis of our legitimate interest in making this online offer available in an efficient and secure manner.
The personal data provided by you e.g. in the course of enquiries, such as name, address or email address, will only be used in our house to respond to your queries, to process your orders, or to give you access to specific contractual information.
When you contact us via email or the contact form, we store your data in order to be able to respond to your queries.
As a rule, these data will not be disclosed to third parties, unless applicable data protection regulations justify such disclosure or we are obliged to do so by law. You may withdraw your consent at any time with future effect. In that case, your data will be deleted immediately unless there is a legal exception regarding further processing. Otherwise, your data will be deleted once we have processed your query or the storage purpose ceases to exist and there are no other contrasting legal exceptions. You may obtain information regarding your personal data being stored at any time.
Of course, you can also use our website without accepting cookies. You may also configure your browser settings according to your wishes and e.g. refuse acceptance of third-party cookies or all cookies altogether, or delete cookies set earlier. Should you choose not to accept cookies, please note that in that case our offer might not work faultlessly.
To find out which function on our website sets cookies, please refer to the single functions below.
Our website offers a login function. The personal data entered during login will be transmitted to the person responsible for processing. The data will be stored for the sole purpose of internal usage in our house.
During login, the user’s IP address and the date and time of the login will be stored. This serves to prevent misuse of the services. The data will not be disclosed to third parties, unless applicable data protection regulations justify such disclosure or we are obliged to do so by law.
The registration of the data is required for the provision of contents or services. Registered users have the possibility to have the stored data deleted or altered at any time. The data subject may obtain information regarding their personal data being stored at any time.
You can find our online presence in social networks and on platforms. By means of these presences, we want to communicate with our customers, interested parties and users who are active there, and inform them of our services and our organization.
The personal data of the active users are processed on the basis of our legitimate interests in communicating with and providing information to the users.
Provided the users have agreed to their personal data being processed within the social platform in question, their data will be processed on the basis of such consent.
If you visit one of our social media presences, both we and the operator of the social platform in question will be jointly responsible for the data processing operations initiated during this visit. On principle, you may assert your rights (of information, correction, deletion, restriction of processing, data portability, and complaint; cf. “Rights of the data subject” below) both against us and against the operator of the social platform in question.
Please note that, despite the joint responsibility, we do not have full influence on the data processing operations of the social platform and may therefore forward the legal enquiry to the relevant platform operator, in order to better process the rights of the individuals affected. As a rule, our possibilities depend on the corporate policy of the respective provider.
Our information on data storage can be found below. We have no influence on how long the social platform providers may store your data for their own purposes. Please obtain detailed information on this from the social network providers directly (e.g. from their data privacy statement, see below).
Depending on the individual social platform mentioned below, user data may also be processed outside the area of the European Union. The US-American providers that have been certified under the Privacy Shield have undertaken to comply with the EU data protection standards.
As a rule, user data are processed by the platforms for market-research and advertising purposes. For instance, usage profiles may be created based on the usage behaviour and user interests resulting therefrom. The usage profiles can then be used to place ads within and outside of the platforms that are presumed to match the individual user’s interests. For this, cookies are generally saved on the user’s computer that capture the usage behaviour and user interests. In the usage profiles, data may also be saved independent from the terminal devices used by the users. This happens in particular if the users are members of the platform in question and are logged in.
For detailed information on the relevant data processing operations and the opt-out possibilities please refer to the information supplied by the providers linked below.
We will only disclose data to third parties if disclosure is necessary for the performance of a contract and/or necessary for compliance with a legal obligation and/or we are legally entitled to do so in individual cases.
For the purposes of our legitimate interests with regard to analysis, optimization and cost-effective operation of the online offer, we avail ourselves of the services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, („Google“).
Google has been certified under the Privacy Shield Agreement and thereby guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
This website uses Google Analytics as a web analysis service. Google Analytics uses so-called “cookies”, i.e. text files that are stored on your computer and facilitate an analysis of your using this website. The information generated by the cookie regarding your use of this website (including your IP address) are transmitted to a Google server in the US and stored there.
WPlease note that this website uses Google Analytics with the extension “_anonymizeIp()”, which means that, in EU member states and other states that are parties to the European Economic Area Agreement, Google will abbreviate IP addresses before transmission in order to exclude any direct reference to your person. Only in exceptional cases, the full IP address will be transmitted to a Google server in the US and abbreviated on site.
On behalf of the provider, Google will use this information to analyse your use of the website in order to compile reports on website activities for the website operators, and in order to render further services in connection with website usage and internet usage. Google may also transfer this information to third parties insofar as required by law or to the extent third parties process these data on behalf of Google. Under no circumstances will Google link your IP address to other Google data. You may prevent the installation of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website.
By using this website, you agree to the processing of the data gathered from you by Google in the aforementioned manner and for the said purpose.
Please note: When you delete your cookies, also the deactivation cookie will be deleted, which means that you will have to save it again.
You are entitled to obtain information on your personal data stored by us. In accordance with the legal regulations you are also entitled to have incorrect data corrected, and to have your personal data blocked, transferred or deleted. For this, please send us an email with the subject line “Data protection”.
You are also entitled to submit a complaint to a data protection supervisory authority if you are of the opinion that processing your personal data violates legal provisions.
If you have given consent, you are entitled to withdraw that consent at any time. This withdrawal shall not affect the lawfulness of the data processing performed based on the consent up to the moment of withdrawal.
You are entitled to object to the future processing of your personal data in accordance with legal requirements at any time. Objection may be entered in particular against data processing for direct advertising purposes.
Unless otherwise specified under the relevant items, the following applies to data storage: We store personal data for the duration of the statutory retention period or until the purpose of the data collection ceases to exist. Upon expiry of said retention period, all data will be deleted routinely unless they are required for contract negotiations or -fulfilment. If user data are not deleted because they are required for other and legally admissible purposes, their processing will be limited to the extent possible. Accordingly, the data will be blocked if possible and not processed for other purposes. For instance, this applies to user data that have to be stored for commercial-law or tax-law reasons.
We work hard to ensure that your personal data are processed using all technological and organizational possibilities in such a way that the relevant data protection regulations are complied with in order to protect these data. Our website and the communication with us via our website are encrypted with HTTPS.
This Data Privacy Statement has been made available by Rechtsanwaltskanzlei Sieling – a law firm specialized in IT law.
1. Name and contact details of the Data Controller and of the Data Protection Officer.
2. Collection and storage of personal data as well as nature and purpose and their usage.
Title, first and last name, email address, position, phone/mobile number, and information required for the performance of the contract or for consulting.
We need these data in order to be able to identify you as a member, to perform the contract, to contact you, for invoicing purposes, and for the assertion of possible claims against you. Data processing will take place upon your request or order and is required in accordance with Art. 6 (1) clause 1 lit. b GDPR for the aforementioned purposes to ensure adequate processing of your order and for the mutual fulfilment and obligation arising from the contractual relationship.
The personal data obtained will be stored until the end of the contractual relationship and subsequently deleted, unless we are required in accordance with Art. 6 (1) clause 1 lit. c GDPR to store them for a longer period of time because of tax-law- or commercial-law storage- and documentation obligations (as per HGB [German Commercial Code], StGB [German Penal Code] or AO [German Fiscal Code]) or you consented to storage beyond this scope in accordance with Art. 6 (1) clause 1 lit. a GDPR.
The order comprises the administration of your employees’ user accounts for the handling of business transactions with your market partners via the portals, verification tools, and discussion forums of the ARGE Neue Medien e. V. As an industry participant you can access participant lists and control access authorization to your master data. All participant lists and user lists may only be used for operating the portals. In addition, there is a statistical evaluation of the use of your data formats. Within the scope of orders, price availability enquiries, and order status enquiries, user authentication information may be transmitted to you that you are required to handle in compliance with the GDPR. Moreover, the ARGE offers committee work platforms.
There will be no disclosure of your personal data to third parties for purposes other than the ones listed herein.
in accordance with Art. 77 GDPR to lodge a complaint with the responsible supervisory authority of your habitual residence or of our head office.
In accordance with Art. 21 GDPR you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data insofar as processing is necessary for the purposes of legitimate interests pursuant to Art. 6 (1) lit. f GDPR.
Should you wish to exercise your right to opt out, it suffices to send an email to info@arge.de.
Title, first and last name, email address, fax/phone/mobile number, and information required for the performance of the contract or for consulting.
We need these data in order to be able to identify you as a customer, to perform the contract, to contact you, for invoicing purposes, and for the assertion of possible claims against you.
Data processing will take place upon your request or order and is required in accordance with Art. 6 (1) clause 1 lit. b GDPR for the aforementioned purposes to ensure adequate processing of your order and for the mutual fulfilment and obligation arising from the contractual relationship.
For the processing of personal data for which we obtain consent from the individual in question, the legal basis is Art. 6 (1) lit. a GDPR.
We are glad that you are taking an interest in our organization and are applying or have applied for a position in our house. In the following, we would like to inform you about our processing of your personal data in connection with your application.
2. What personal data provided by you will we process? And for what purpose?
We will process the personal data you have provided us with in connection with your application to assess your eligibility for the position in question (or perhaps other vacancies in our organization) and to complete the recruiting process.
3. What are the legal grounds for this?
The processing of your personal data in this application process is primarily based on Art. 26 BDSG [Federal Data Protection Act] as amended on 25 May 2018. According to this article, processing is permitted for those data that are required in connection with the decision on establishing an employment relationship.
Should the data be required after completion of the application process for the assertion of any rights, said data may be processed on the grounds of the prerequisites as per Art. 6 GDPR, in particular for the purposes of legitimate interests in accordance with Art. 6 (1) lit. f GDPR. The legitimate interest pursued by our organization in that case consists in the assertion of or defence against claims.
In the case of rejection, applicant data will be deleted after six months.
In case you have consented to further storage of your personal data, we will transfer your data to our applicant pool. There they will be deleted after two years.
Should you have been given a contract for a position in the course of the recruiting process, your personal data will be stored permanently for the execution of the employment contract.
5. Who will your personal data be disclosed to?
Upon receipt of your application, your applicant data will be viewed by us, and further steps will be determined. As a rule, in our organization only individuals who need your data for the proper handling of our recruiting process will have access to your data.
6. Where are your personal data processed?
The data are only processed in the Federal Republic of Germany.
You have the right to obtain information from us regarding your personal data insofar as they are processed by us. If the information enquiry is not made in writing, we call on your understanding that we may ask you to provide proof that you are indeed the person you are impersonating. Furthermore, you have the right to obtain from us the rectification of inaccurate personal data, the erasure of personal data, or the restriction of processing insofar as you are legally entitled to this. Moreover, you have the right to object to the processing to the extent permitted by law. This also applies to the right to data portability. In accordance with Art. 7 (3) GDPR you also have the right to withdraw your consent given to us at any time. As a consequence, we will not be allowed to continue the data processing based on said consent in the future.
You are entitled to submit a complaint to a data protection supervisory authority about the processing of personal data performed by us.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 V. 
 Art. 77
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 26
 Art. 6
 Art. 6
 Art. 7