Source: https://www.tso.de/data-protection-and-privacy/
Timestamp: 2020-08-03 22:56:49
Document Index: 711122594

Matched Legal Cases: ['Art. 28', 'Art. 17', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'arty\n27']

Data protection and privacy | TSO-DATA
Privacy policy of TSO-DATA GmbH regarding the websites:
https://www.katargo.de
https://karriere.tso.de
Landingpage Phonetic Search
http://webconnector.tso.de/
Thank you very much for your interest in our company. Data protection is particularly important to the management of TSO-DATA GmbH. A use of the internet pages of the TSO-DATA GmbH is basically possible without any indication of personal data. However, if a person concerned wishes to make use of special services of our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the person concerned.
The processing of personal data, for example the name, address, e-mail address or telephone number of a person concerned, is always carried out in accordance with the Basic Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to TSO-DATA GmbH. By means of this data protection declaration, our company wishes to inform the public about the type, scope and purpose of the personal data collected, used and processed by us. Furthermore, this data protection declaration will inform the persons concerned about their rights.
As the data controller, TSO-DATA GmbH has implemented numerous technical and organisational measures to ensure the most complete possible protection of the personal data processed via this website. Nevertheless, Internet-based data transmissions can in principle have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us by alternative means, such as telephone.
With all service providers who process personal data on behalf of TSO-DATA GmbH, a so-called order processing contract pursuant to Art. 28 DSGVO has been concluded, which ensures that the data processing is carried out in a permissible manner.
TSO-DATA GmbH's data protection declaration is based on the terms used by the European Directive and Ordinance Giver in the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be easy to read and understand for the public as well as for our customers and business partners. In order to guarantee this, we would like to explain the terms used in advance.
Tel.: +49 (541) 1395-0
E-Mail: info[at]tso[dot]de
Website: www.tso.de
GINDAT GmbH Gesellschaft für IT-Normierung und Datenschutz
Tel.: +49 (2191) 909 - 430
E-Mail: hans.daldrop[at]gindat[dot]de
The Internet pages of TSO-DATA GmbH use cookies. Cookies are text files which are stored on a computer system via an Internet browser.
By using cookies, TSO-DATA GmbH can provide users of this website with more user-friendly services that would not be possible without the setting of cookies.
The website of TSO-DATA GmbH collects a series of general data and information each time the website is accessed by a person concerned or an automated system. These general data and information are stored in the log files of the server. The (1) browser types and versions used can be recorded, (2) the operating system used by the accessing system, (3) the Internet page from which an accessing system accesses our Internet page (so-called referrer), (4) the sub-sites which are accessed via an accessing system on our Internet page, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information used to avert dangers in the event of attacks on our information technology systems.
When using this general data and information, TSO-DATA GmbH does not draw any conclusions about the person concerned. Rather, this information is required to (1) correctly deliver the contents of our website, (2) optimise the contents of our website and the advertising for it, (3) guarantee the long-term functionality of our information technology systems and the technology of our website and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. This anonymously collected data and information is therefore evaluated by TSO-DATA GmbH both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimum level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by the person concerned.
Due to legal regulations, the website of TSO-DATA GmbH contains information that enables rapid electronic contact with our company as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the data controller by e-mail or via a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data transmitted voluntarily by a data subject to the data controller will be stored for the purposes of processing or contacting the data subject. This personal data will not be passed on to third parties. Please note that all information you send us by e-mail is not encrypted. You should therefore only send us confidential information by post.
the existence of a right of appeal to a supervisory authority. Our competent supervisory authority is:
Prinzenstr. 5, 30159 Hanover, Germany
Phone: +49 (0) 511 120 4500
E-mail: poststelle[at]lfd.niedersachsen[dot]de
If one of the above reasons applies and a person concerned wishes to have personal data stored at TSO-DATA GmbH deleted, he or she can contact an employee of the data controller at any time. The employee of TSO-DATA GmbH shall arrange for the request for deletion to be complied with immediately.
If the personal data have been made public by TSO-DATA GmbH and if our company is obliged to delete the personal data in accordance with Art. 17 para. 1 GDPR, TSO-DATA GmbH shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform other persons responsible for data processing who process the published personal data that the person concerned has requested the deletion of all links to this personal data or copies or replications of this personal data from these other persons responsible for data processing, insofar as the processing is not necessary. The employee of TSO-DATA GmbH will take the necessary steps in individual cases.
If one of the above conditions is met and a person concerned wishes to request the restriction of personal data stored at TSO-DATA GmbH, he or she can contact an employee of the data controller at any time. The employee of TSO-DATA GmbH will arrange for the processing to be restricted.
In order to assert the right to data transferability, the person concerned may contact an employee of TSO-DATA GmbH at any time.
Any person data subject to the processing of personal data has the right, granted by the European directive and regulation maker, to object at any time, for reasons related to his/her particular situation, to the processing of personal data concerning him/her on the basis of Article 6(1)(e) or (f) of the GDPR Exemption Regulation. This also applies to profiling based on these provisions.
TSO-DATA GmbH will no longer process the personal data in the event of objection, unless we can prove compelling reasons for the processing worthy of protection which outweigh the interests, rights and freedoms of the person concerned, or the processing serves the assertion, exercise or defence of legal claims.
If TSO-DATA GmbH processes personal data in order to conduct direct advertising, the person concerned has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling as far as it is connected with such direct advertising. If the person concerned objects to TSO-DATA GmbH processing the data for purposes of direct marketing, TSO-DATA GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right to object to the processing of personal data relating to him by TSO-DATA GmbH for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR for reasons arising from his particular situation, unless such processing is necessary for the performance of a task in the public interest.
In order to exercise the right to object, the person concerned may directly contact any employee of TSO-DATA GmbH or another employee. The data subject is also free to exercise his/her right of objection in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.
If the decision (1) is necessary for the conclusion or fulfilment of a contract between the person concerned and the responsible person or (2) is made with the express consent of the person concerned, TSO-DATA GmbH shall take appropriate measures to protect the rights and freedoms as well as the legitimate interests of the person concerned, including at least the right to obtain the intervention of a person on the part of the responsible person, to state his own position and to challenge the decision.
The data controller collects and processes the personal data of applicants for the purpose of processing the application procedure. Processing may also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents electronically, for example by e-mail or via a web form on the website, to the data controller. If the data controller concludes an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in accordance with the statutory provisions. If the data controller does not conclude an employment contract with the applicant, the application documents will generally be deleted at the latest after six months, provided that no official requirements arise.
For further information, please contact our data protection officer: Dr. rer. nat. Hans Daldrop, GINDAT GmbH Gesellschaft für IT-Normierung und Datenschutz, Wetterauer Str. 6, 42897 Remscheid, Deutschland, Tel.: +49 (2191) 909 - 430, E-Mail: hans.daldrop[at]gindat[dot]de, Website: www.gindat.de
Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at developers.facebook.com/docs/plugins/ As part of this technical process, Facebook obtains information about which specific subpage of our website is visited by the person concerned.
Facebook's published data policy, which is available at de-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains which settings Facebook offers to protect the privacy of the person concerned. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.
11. Google Remarketing Privacy Policy on the Use and Usage of Google Remarketing
Google Remarketing places a cookie on the information technology system of the person concerned. What cookies are has already been explained above. When cookies are set, Google is able to recognize visitors to our website who subsequently visit websites that are also members of the Google advertising network. Each time a website is accessed on which the Google Remarketing service has been integrated, the Internet browser of the person concerned automatically identifies itself to Google. As part of this technical process, Google obtains knowledge of personal data, such as the IP address or surfing behaviour of the user, which Google uses, among other things, to display advertisements relevant to the interests of the user.t.
The person concerned can prevent the setting of cookies by our website at any time, as described above, by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned.
Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a Google+ button has been integrated, the Internet browser on the data subject's information technology system is automatically prompted by the respective Google+ button to download a display of the corresponding Google+ button from Google. As part of this technical process, Google obtains information as to which specific subpage of our website is visited by the person concerned. More detailed information on Google+ can be found at developers.google.com/+/.
If the data subject clicks on one of the Google+ buttons integrated on our website and thereby makes a Google+1 recommendation, Google assigns this information to the personal Google+ user account of the data subject and stores this personal data. Google stores the data subject's Google+1 referral and makes it publicly available in accordance with the data subject's accepted terms and conditions. A Google+1 recommendation made by the data subject on this website will subsequently be stored and processed together with other personal data, such as the name of the Google+1 account used by the data subject and the photograph stored in that account, in other Google services, such as the search engine results of the Google search engine, the data subject's Google account or elsewhere, for example on websites or in connection with advertisements. Google is also able to link a visit to this website with other personal data stored by Google. Google also records this personal information for the purpose of improving or optimising Google's various services.
For more information and to review Google's current privacy policy, please visit www.google.de/intl/de/policies/privacy/ Additional Google notices about the Google+1 button can be found at developers.google.com/+/web/buttons-policy.
The conversion cookie is used to store personal information, such as the Internet pages visited by the person concerned. Accordingly, each time you visit our website, personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties..
You can find more information about the handling of user data in Google's privacy policy: www.google.de/intl/de/policies/privacy/.
15. Use of external fonts (Google Fonts)
Pursuant to Article 6 (Lawfulness of processing)(1)(f) of the basic Data Protection Regulation, external fonts, so-called Google Fonts, are used on the websites listed above. For the integration of the fonts a server call is necessary, usually by Google Inc. in the USA. Under certain circumstances, the IP address of the page visitor may be transmitted and stored by Google. For further information, please refer to Google's privacy policy, which is referred to in Section 11.
16. Use of etracker
The provider of this website uses services of etracker GmbH from Hamburg, Germany (https://www.etracker.com, www.etracker.com) for the analysis of usage data. Cookies are used to enable a statistical analysis of the use of this website by its visitors and the display of use-related content or advertising. Cookies are small text files that are stored by the Internet browser on the user's terminal device. etracker cookies do not contain any information that enables a user to be identified.
The data generated with etracker is processed and stored by etracker exclusively in Germany on behalf of the provider of this website and is therefore subject to the strict German and European data protection laws and standards. etracker has been independently audited, certified and awarded the data protection seal of approval www.eprivacy.eu/kunden/vergebene-siegel/firma/etracker-gmbh/ ePrivacyseal.
The data processing takes place on the legal basis of Art. 6 para. 1 lit f (legitimate interest) of the EU Data Protection Basic Regulation (EU-DSGVO). Our legitimate interest lies in the optimisation of our online offer and our web presence. Since the privacy of our visitors is particularly important to us, etracker anonymizes the IP address as early as possible and converts login or device IDs into a unique key that is not assigned to a specific person. etracker does not use them for any other purpose, combine them with other data or pass them on to third parties.
17. Privacy policy for the use and application of Instagram
18. LinkedIn's Use and Usage Privacy Policy
Each time a LinkedIn component (LinkedIn plug-in) is installed on our website, the LinkedIn component causes the browser used by the individual to download an appropriate representation of the LinkedIn component. More information about LinkedIn plug-ins can be found at developer.linkedin.com/plugins . As part of this technical process, LinkedIn receives information about which specific subpage of our website is visited by the person concerned.
LinkedIn at https://www.linkedin.com/psettings/guest-controls offers the ability to unsubscribe from email messages, SMS messages, targeted ads, and manage ad settings. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame who can set cookies. Such (persistent) cookies may be declined at https://www.linkedin.com/legal/cookie-policy LinkedIn's current privacy policy can be found at https://www.linkedin.com/legal/privacy-policy LinkedIn's cookie policy is available at https://www.linkedin.com/legal/cookie-policy.
19. Privacy policy on the use and enjoyment of Twitter
Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a Twitter component (Twitter button) has been integrated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective Twitter component to download a representation of the corresponding Twitter component from Twitter. Further information on the Twitter buttons can be found at https://twitter.com/de/privacy. As part of this technical process, Twitter obtains information about which specific subpage of our website is visited by the person concerned. The purpose of integrating the Twitter component is to enable our users to disseminate the content of this website, to make this website known in the digital world and to increase our visitor numbers.
Twitter's current data protection regulations can be found at https://twitter.com/privacy?lang=de.
20. Data protection provisions on the use and application of Xing
Each time one of the individual pages of this Internet site is accessed, which is operated by the data controller and on which an Xing component (Xing plug-in) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Xing component to download a representation of the corresponding Xing component from Xing. Further information on the Xing plug-ins can be found at dev.xing.com/plugins . As part of this technical process, Xing obtains information about which specific subpage of our website is visited by the person concerned.
If the person concerned is logged in to Xing at the same time, Xing recognizes which specific page of our website the person concerned is visiting each time the person concerned accesses our website and for the entire duration of that person's stay on our website. This information is collected by the Xing component and assigned by Xing to the respective Xing account of the person concerned. If the person concerned activates one of the Xing buttons integrated on our website, for example the "Share" button, Xing assigns this information to the personal Xing user account of the person concerned and saves this personal data.
The data protection regulations published by Xing, which can be accessed at https://www.xing.com/privacy, provide information about the collection, processing and use of personal data by Xing. In addition, Xing has published data protection information for the XING Share button at https://www.xing.com/app/share?op=data_protection.
21. Data protection provisions on the use and application of YouTube
22. Privacy policy for the use of DoubleClick
DoubleClick by Google transfers data to the DoubleClick server with each impression as well as with clicks or other activities. Each of these data transfers triggers a cookie request to the person's browser. If the browser accepts this request, DoubleClick places a cookie on the data subject's information technology system. What cookies are has already been explained above. The purpose of the cookie is to optimise and display advertising. The cookie is used, among other things, to place and display user-relevant advertisements and to generate reports on or improve advertising campaigns. In addition, the cookie is used to avoid multiple displays of the same advertisement.
DoubleClick uses a cookie ID, which is necessary to complete the technical process. For example, the cookie ID is required to display an ad in a browser. DoubleClick may also use the cookie ID to determine which advertisements have already been displayed in a browser in order to avoid duplication. DoubleClick also uses the cookie ID to collect conversions. Conversions are collected, for example, when a user has previously been shown a DoubleClick ad and then makes a purchase on the advertiser's website using the same Internet browser.
Each time one of the individual pages of this website is accessed, operated by the data controller and incorporating a DoubleClick component, the Internet browser on the data subject's information technology system is automatically prompted by the respective DoubleClick component to submit data to Google for online advertising and commission billing purposes. As part of this technical process, Google becomes aware of data that Google also uses to prepare commission statements. Among other things, Google can track that the person concerned clicked on certain links on our website.
Further information and the valid data protection regulations of DoubleClick by Google can be called up under https://www.google.com/intl/de/policies/.
23. Privacy policy for use and application of YieldKit
The data controller has integrated YieldKit components into this website. YieldKit is a German affiliate network which offers affiliate marketing. Affiliate marketing is an Internet-supported sales form which enables commercial operators of Internet sites, the so-called merchants or advertisers, to display advertisements, which are usually paid for by click or sale commission, on Internet sites of third parties, i.e. sales partners who are also called affiliates or publishers. The merchant provides an advertising medium via the affiliate network, i.e. an advertising banner or other suitable means of Internet advertising, which is subsequently integrated by an affiliate on its own Internet pages or advertised via other channels, such as keyword advertising or e-mail marketing.
YieldKit sets a cookie on the information technology system of the person concerned. What cookies are has been described above. The YieldKit tracking cookie does not store any personal data. Only the identification number of the affiliate, i.e. the partner referring the potential customer, as well as the order number of the visitor of a website and the clicked advertising material are stored. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are processed via the affiliate network, i.e. YieldKit.
The current data protection regulations of YieldKit can be found at http://yieldkit.com/legal-notes/privacy-policy/.
24. Legal basis of the processing
Art. 6 I lit. a GDPR serves our company as a legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 I lit. b GDPR. The same shall apply to such processing operations which are necessary for the implementation of pre-contractual measures, for example in cases of inquiries regarding our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may become necessary in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our site were injured and his name, age, health insurance information or other vital information would have to be disclosed to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d GDPR. Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and fundamental freedoms of the data subject do not predominate. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the data controller (recital 47 sentence 2 GDPR).
25. Legitimate interests in the processing pursued by the controller or a third party
27. Legal or contractual provisions on the provision of personal data; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of not providing the data
This privacy statement was created by the Privacy Statement Generator of the DGD Deutsche Gesellschaft für Datenschutz GmbH, in cooperation with the privacy lawyers of the law firm WILDE BEUGER SOLMECKE | Rechtsanwälte.