Source: https://arwa.de/en/data-protection/
Timestamp: 2020-08-15 07:08:26
Document Index: 217415228

Matched Legal Cases: ['Art 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art 6', 'Art 18', 'Art. 17', 'Art. 9', 'Art. 9', 'Art 89', 'Art 6', 'Art. 9', 'Art. 6', 'Art. 6']

Data protection | ARWA Personaldienstleistungen GmbH
With this privacy policy, we want to explain the processing, purpose and scope of personal data to the users of and visitors to our website.
In principle, it is possible to use the ARWA Personaldienstleistungen GmbH website without entering any personal data. If a data subject wishes to make use of specific services from our company via our website, the processing of personal data may be necessary. If there is no legal basis for the processing of personal data, then we will generally obtain consent for it from the data subject. Data processing is done in accordance with the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) exclusively for the realisation of the contractual purposes, on the basis of consent which has been given or on a legal basis. We also inform data subjects of their rights. We therefore request that you take note of the following information regarding the handling of your data.
As the data protection controller, we have implemented numerous technical and organisational measures in order to ensure the protection of the personal data processed through this website with as few gaps as possible. However, online data transmissions may have fundamental security holes, meaning that absolute protection cannot be assured.
Acknowledgement of this privacy policy is a mandatory requirement for the use of this website. By using the website or sending their data, the user declares that they consent to its storage.
The controller according to law is:
1.1. Contact details for the Data Protection Officer
BRAUN Unternehmensdienstleistungen
Sennteichplatz 1
+49 (0)162 2316637
datenschutz[at]arwa.de
According to the Federal Data Protection Act (BDSG), personal data is specific information about the personal or material circumstances of a specific or identifiable natural person. Furthermore, the GDPR defines “personal data” as all information which relates to an identified or identifiable natural person. A natural person who can be directly or indirectly identified, in particular by means of attribution to an identification such as a name, an identification number, location data or online identification data, is considered to be identifiable.
A data subject is any identified or identifiable natural person whose personal data is processed by the processor.
Processing is a process carried out with or without the help of automated procedures or any such series of processes in connection with personal data, such as the collection, recording, organisation, ordering, storage, amendment or modification, reading, querying, use, publication through transmission, dissemination, comparison or linking, restriction, erasure or destruction.
3. General information concerning data collection
Whenever a website is accessed by a data subject or an automated system, this website collects a range of general data and information.
This general data and information is stored in the web server’s log files. The browser type and version used, the operating system used by the accessing system, the website from which an accessing system accesses our website (so-called referrer), the sub-sites on our website which an accessing system visits, the date and time of access to the website, an Internet Protocol address (IP address), the Internet Service Provider for the accessing system and other similar data and information which is used for emergency response in the event of attacks on our IT systems may be recorded.
In the event of use of this general data and information, no conclusions are drawn about the data subject. We are not able to attribute this data to specific individuals. This data is not combined with other data sources. Rather, this information is required in order to correctly deliver the content of our website, to optimise the website and advertising for it, to ensure the ongoing functionality of our IT systems and the technology of our website and to provide the information required for prosecution to the law enforcement authorities in the event of a cyber attack. This anonymously collected data and information is therefore subjected to statistical analysis on the one hand and is furthermore analysed with the aim of improving data protection and data security within the company in order to ultimately ensure an optimal level of protection for the processing of personal data. The anonymous data in the server log files is stored separately from all personal data given by a data subject. The data is erased after statistical analysis.
3.1. Provision of the website
You can visit our website without providing any information about yourself. We only store access data with no references to persons, such as the name of your Internet Service Provider and the website from which you visit our website or the name of the requested file, for example.
This data is collected on a statistical basis in server log files, stored and exclusively used to improve our offering. This pseudonymous data is not combined with your personal data.
We do not store other personal data.
If the programming on our website allows your browser to load data from servers which are operated by third parties, we are not ourselves involved in this data transmission.
Personal data is only collected if you voluntarily provide it to us for the execution of a contract. Erasure of your applicant account is possible at any time and can be done by sending a message to the contact details set out below. We store and use the data which you provide to us for contract execution. After full execution of the contract or erasure of your customer account, your data is blocked with regard to the storage periods defined in tax law and commercial law, and erased upon expiry of these periods if you have not expressly consented to further use of your data or legal further use, on which topic we will provide you with more information below, has not been reserved on our part.
The ARWA Personaldienstleistungen GmbH website uses cookies and so-called Flash cookies (also known as Flash local shared objects), including from third party providers. A “cookie” is a small data file which is transmitted to your terminal (e.g. Computer, tablet or smartphone) when you browse our website. Some of the cookies we use are erased at the end of the browser session, i.e. when your browser is closed (so-called session cookies). Other cookies remain on your terminal and allow us or our partner companies to recognise your browser again on your next visit (so-called persistent cookies).
Many cookies contain a so-called cookie ID. A cookie ID is a clear identification of the cookie. It consists of a character string through which websites and servers can be matched with the concrete Internet browser in which the cookie was stored. This allows the websites and servers to differentiate the data subject’s individual browser from other Internet browsers which contain other cookies. A specific Internet browser can be recognised again and identified using the unique cookie ID. A cookie can only contain information which is sent to your computer – it cannot be used to read private data. If you accept cookies on our website, we do not have access to your personal data, but your computer can be identified with the help of the cookies.
If – after the appearance of our information on the use of cookies and the analysis of your user behaviour on our homepage – you (I) use our online offering and (II) have permitted the acceptance of cookies in your browser settings, to us this means that you want to use our products and services and that you consent to the use of cookies, services and other technologies to this end.
Cookies may be used in order to (I) recognise you again on your next visit to our online offering, (II) present content on the web pages of our online offering or our partners which is specially tailored to your interests (including online advertising), (III) take your preferences into consideration, (IV) carry our research and diagnostic analysis to improve our content, products and services or (V) improve the security of your data. Our own cookies or cookies from third party providers are used for these purposes.
Most browsers (e.g. Firefox, Chrome, Internet Explorer, Safari, etc.) accept cookies as standard. However, you can set you browser so that you are informed about cookies and make decisions about their acceptance on a case by base basis or refuse the acceptance of cookies for specific cases or in general. The help pages for most browsers explain how you can adjust your browser settings as described above. Furthermore, you can generally also learn there what you need to do so that your browser informs you when new cookies are received and how you can switch off or erase all cookies which have been received. You can switch off of erase similar functions (such as Flash cookies), which are used by so-called browser add-ons, by changing the settings for the browser add-on or via the browser add-on manufacturer’s website. However, would like to expressly note that certain features of our website will not be available to you and some web pages may not be displayed correctly if you deactivate cookies.
3.3. Contact form and email contact
There is a contact form on our website which can be used to contact us electronically (e.g. for a job offer). If a user makes use of this option, then the data entered on the input screen is communicated to us and stored. This data is:
Your consent to the processing of the data is obtained and you are informed of this privacy policy during the sending process.
Alternatively, you can contact us using the email address provided. In this case, the user’s personal data communicated with the email is stored.
Data is not disclosed to third parties in this context. We use your data exclusively to respond to your enquiry and, if the enquiry relates to a contractual relationship or a contractual relationship results from it, for initiation and handling of the contractual relationship (Sec. 28 Para 1 Clause 1, 2 of the BDSG, old version; Art 6(1) Point a, b, f of the GDPR). If you are already our employee or become our employee in the future, we may collect, store, amend and communicate data concerning the establishment, implementation or ending of the contractual relationship without requiring your consent for this and as long as the law permits us to do so.
In other cases, i.e. as long as the contractual relationship has not yet come into being, we store your data for not longer than 2 years, or longer if the law requires us to do so. You have the right to object in relation to the data communicated to us via the contact form with effect for the future. You can exercise your right of revocation by notifying us.
Without your express consent, your personal data is solely used for the establishment, implementation or ending of contractual or similar obligations. If you have given us a separate declaration of consent for the use and disclosure of personal data, then the personal data may also be disclosed to the recipients specified therein where applicable.
If, during the course of order processing, personal data is disclosed to service providers, these are also bound by the GDPR / BDSG and other applicable legal provisions. Data processing which is exclusively bound by instructions is ensured through the conclusion of order processing agreements which comply with the GDPR requirements.
No disclosure of applicants/employees’ personal data to third parties occurs beyond this. We will disclose your personal data to institutions which are entitled to receive such data if we are required by law, by court order or on the basis of an enforceable official order to do so. Furthermore, we will disclose your personal data to third parties if disclosure is required in order to assert our rights and remedies resulting from your existing obligations or in order to protect the rights of other users and / or third parties.
We do not use the data collected for the purposes of advertising, market research or opinion research without your consent.
ARWA Personaldienstleistungen GmbH collects data for the following purposes:
Customer support and communication with the applicant/employee (e.g. through response to their enquiries, questions and comments)
Handling of complaints which are received in connection with our services
Provision of an online application tool
Publication of specific campaigns, events programmes, questionnaires and other offerings or advertising campaigns
Analysis and improvement of services, websites; and accomplishment of activities which are associated with accounting, auditing, invoicing, account reconciliation and dunning)
Protection against fraud, benefit claims and other obligations, as well as their coverage and prevention
Compliance with the applicable law and our policies
In addition, we use information collected using cookies and other automated processes for the following purposes:
Diagnosis of problems which arise in connection with technology and customer service
Administration and improvement of the website
We process personal data exclusively on the basis of an appropriate authorisation. If processing is done on the basis of consent, then the legal basis is point a of Art. 6(1) of the GDPR. If processing of personal data is required for the fulfilment of a contract in which the contracting party is the data subject, e.g. for the performance of a service, processing is done in accordance with point b of Art. 6(1) of the GDPR. This includes pre-contractual measures which may be necessary during the course of enquiries, for example. If we are subject to a legal obligation to process data, for the fulfilment of tax obligations for example, then the processing of personal data falls under point c of Art. 6(1) of the GDPR. If an individual’s vital interests are affected, in the event of a serious injury to physical integrity for example, then the necessary data may be communicated to a doctor or a hospital, for example, in accordance with point d of Art. 6(1) of the GDPR. If processing is required for the protection of a legitimate interest of our company or a third party, a data subject’s personal data may be processed in accordance with point f of Art. 6(1) of the GDPR unless the interests are outweighed by the data subject’s fundamental rights and fundamental freedoms.
7. Period for which the personal data is stored
The criterion for the storage period for personal data is the applicable legal retention period. Upon expiry of the period, the corresponding data is routinely erased unless it is still required for fulfilment of a contract or initiation of a contract.
If no specific storage period is indicated during collection (e.g. within a declaration of consent), personal data will be erased as soon as it is no longer required for fulfilment of the purpose of storage unless legal retention obligations (e.g. retention obligations according to commercial and tax law) prevent this erasure. If the purpose of storage ceases to apply or a retention period stipulated by the competent legislator expires, we will erase or block the personal data in accordance with the legal requirements.
8. Specific privacy policies for online advertising
ARWA Personaldienstleistungen GmbH attaches considerable importance to the protection of your personal data (“data”) in connection with the personnel services which we provide. Your data is collected, processed and used in compliance with the relevant data protection regulations.
During the course of online application, we offer you the option of sending your application to us with or without registration. For use of the online application process, data is collected in the following categories:
Master data (e.g. name, postal address, email, phone number)
(Work) preferences (e.g. professional field, form of employment, place of employment, availability, etc.)
Usage or inventory data (e.g. IP address, name of the file accessed, date and time of access, data volume transferred, notification of successful access, web browser and requesting domain)
These mandatory fields, indicated with *, require information which is necessary for the processing of your application in the application process and for us to contact you promptly.
For users who register, ARWA Personaldienstleistungen GmbH collects additional personal data from the user, provided during registration, for purposes of initiation and execution, where applicable, of the contract. This is the data which must be provided – such as the user’s title, name, address and email address, phone number and information concerning education and training; skills within the meaning of additional qualifications; employment preferences with information concerning professional field and the preferred place of employment, etc. Additional information is provided by the applicant on a purely optional basis.
Access to the user account is only possible with entry of your email address and personal password. Users should therefore always keep their login information strictly confidential and close the browser window as soon as communication with ARWA Personaldienstleistungen GmbH is completed, particularly if the computer is shared with other people.
All data collected by ARWA Personaldienstleistungen GmbH is transmitted over the Internet in an encrypted form with the help of Secure Sockets Layer (SSL) or TLS encryption.
ARWA Personaldienstleistungen GmbH would like to point out that data transmission over the internet (e.g. during communication via email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
If you do not wish to consent to our online application service, you are welcome to contact us by email or on paper with your application with equal opportunities. We will simply check this application once (Art. 6(1) a, b of the GDPR).
ARWA Personaldienstleistungen GmbH uses your personal data in order to check the application with regard to suitability based on your application for initiation of a possible employment relationship where applicable, as well as to personally contact you (Art. 6(1) a, b of the GDPR).
Furthermore, it will be processed for purposes of compliance with the legal provisions and regulations such as labour law, tax and social law and the international sanctions regimes (e.g. the EU anti-terror regulations), for example.
8.3. Scope of data collection and storage and disclosure to third parties
a) ARWA Personaldienstleistungen GmbH collects and stores the data itself. Your data will not be sold or provided to unauthorised third parties.
b) If your application is successful, the data provided may be used for human resources and administrative matters during employment. Your online application will only be processed and looked at by the relevant employees at ARWA Personaldienstleistungen GmbH. All employees entrusted with data processing are required to maintain the confidentiality of your data.
c) Users only need to provide personal data for initiation and execution of a contract if it is required for the establishment and use of the account and for accomplishment of the application process. ARWA Personaldienstleistungen GmbH discloses the user’s personal data to customers insofar as this is required for the negotiation of jobs and the user has consented to it. The necessity depends on the commonly defined job and skills profile, insofar as ARWA Personaldienstleistungen GmbH considers placement with a customer to be possible. ARWA Personaldienstleistungen GmbH assures users that only data which is required for the application process is disclosed to customers. Within the context of their account, the user determines for themselves what field of the personnel recruitment service they would like to be available for.
d) If the user participates in support measures and qualification projects (e.g. from the job centre) for ARWA Personaldienstleistungen GmbH, then ARWA Personaldienstleistungen GmbH is authorised to disclose personal data to these institutions and to third parties insofar as this is required for the intended purpose and/or legally required.
e) Third parties employed by ARWA Personaldienstleistungen GmbH who carry out specific tasks for us and in accordance with our instructions may, as processors, have access to personal data. IT service providers, who undertake tasks in the fields of hosting, database management, website management, maintenance services, web analysis and the handling of incoming enquiries and data analysis, are one example of this. ARWA Personaldienstleistungen GmbH requires that the third parties who provide these services implement and maintain security measures in order to ensure the confidentiality and security of your data which we entrust to them and that they collect, process and use the personal data only in accordance with our instructions and as contractually agreed.
a) If we enter into an employment relationship with you, we will record your application data in the personnel files and store it for the duration of the employment relationship and for the legal retention periods beyond this (Art. 6(1) a, b of the GDPR). We will then inform you about our concrete data use in an employment relationship again before conclusion of the contract of employment.
b) in the event that your application cannot be taken into consideration at present, we will store the data you have provided for up to 6 months for the purpose of being able to answer possible questions in connection with your application and rejection.
8.5. Inclusion in the applicant pool
If your application is not initially considered in a current application process, it may nevertheless be the case that we offer you the option of keeping your application within an “applicant pool” in order to come back to it in the event of vacancies in the following months. In this case, we will inform you of this in advance and request your consent. We will not include your documents in the applicant pool without your consent.
If you give your consent to inclusion in the applicant pool, then you make your personal data available to us for the purpose of future searches for a suitable position.
Your data will then be included in the applicant pool for 24 months. This data will be used by the responsible human resources employees at ARWA Personaldienstleistungen GmbH. In the event that a position to which your application is suited opens up, the human resources employees at ARWA Personaldienstleistungen GmbH may also disclose your data to the company in question. By giving consent, you also agree that the human resources employees at ARWA Personaldienstleistungen GmbH may contact you for staffing of open positions. All other provisions with regard to data protection and security in this privacy policy continue to apply.
You can withdraw your consent to inclusion in the applicant pool at any time with effect for the future and without specifying reasons.
Furthermore, you have the right to withdraw your application and request that we erase your data at any time.
9. Further privacy policies / website analysis
9.1. Use of Google Analytics and Google Analytics advertising functions (with anonymisation function)
The processor has integrated the Google Analytics and Google Analytics advertising functions modules (with anonymisation function) into this website. Google Analytics is a web analysis service. Web analysis is the collection, compilation and evaluation of data on the behaviour of visitors to websites. Among other things, a web analysis service collects data on the website from which a data subject arrived at a website (so-called referrer), what sub-pages of the website were accessed or how often and for how long a sub-page was viewed. Web analysis is predominantly used for optimisation of a website and for cost-benefit analysis of online advertising.
The operating company for the Google Analytics module is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The processor uses the “_gat._anonymizeIp” add-on for web analysis using Google Analytics. Through this add-on, Google shortens and anonymises the IP address for the data subject’s Internet connection if our website is accessed from a member state of the European Union or from another state which is a party to the Agreement on the European Economic Area.
The purpose of the Google Analytics module is the analysis of visitor flows on our website. Google uses the data and information gained to evaluate the use of our website, among other things, in order to put together online reports which show the activity on our website and in order to provide other services in connection with the use of our website.
Google Analytics stores a cookie on the data subject’s IT system. Cookies have already been explained above. Storage of the cookie allows Google to analyse the use of our website. With each view of the individual pages of this website which are operated by the processor and on which a Google Analytics module has been integrated, the web browser on the data subject’s IT system is automatically prompted by the respective Google Analytics module to communicate data for the purposes of online analysis by Google. During the course of this technical process, Google gains knowledge of personal data such as the data subject’s IP address which Google uses, among other things, to trace the visitor’s origin and clicks and, as a result, to allow for commission settlement.
Personal information such as the access time, the location from which the site was accessed and frequency of the data subject’s visits to our website and demographic characteristics (age & gender) and interests are recorded using the cookies. This personal data, including the IP address for the internet connection used by the data subject, is transmitted to Google in the United States of America with each visit to our website. This personal data is stored by Google in the United States of America. Google discloses this personal data collected through the technical process to third parties under some circumstances.
As outlined above, the data subject can prevent the storage of cookies by our website at any time using the appropriate setting on the web browser they are using and thus permanently counter the storage of cookies. Such a setting in the web browser used would also prevent Google from storing a cookie on the data subject’s IT system. In addition, a cookie which has already been stored by Google Analytics can be erased at any time via the web browser or other software programs.
Furthermore, the data subject has the option of objecting to collection of the data generated by Google Analytics relating to the use of this website and the processing of this data by Google and prevent such collection and use. To this end, the data subject must download and install a browser add-on via the link https://tools.google.com/dlpage/gaoptout. This browser add-on uses JavaScript to inform Google Analytics that no data and information concerning website visits may be communicated to Google Analytics. Installation of the browser add-on is considered by Google to be an objection. If the data subject’s IT system is erased, formatted or reinstalled at a later point in time, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person who is attributed to their sphere of influence, the option of reinstalling or reactivating the browser add-on exists.
As an alternative to the browser add-on, particularly for browsers on mobile devices, you can prevent collection by Google Analytics by clicking on this link. An opt-out cookie will be stored, which prevents future collection of your data when visiting this website. The opt-out cookie only applies in this browser and only for our website and will be stored on your device. If you erase the cookies in this browser, you will need to store the opt-out cookie again.
More information and the applicable Google data protection provisions can be found at https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail in this link https://www.google.com/intl/de_de/analytics/.
9.2. Use of Google Tag Manager
This website uses Google Tag Manager, a cookie-free domain that does not collect any personal data.
This tool allows the implementation of “website tags” and their management via an interface. By using Google Tag Manager, we can automatically trace which button, link or which personalised image you have actively clicked on. We are then able to record the contents you are most interested in on our website.
Moreover, the tool triggers the implementation of other tags that may collect data on their part. Google Tag Manager does not access this data. In case of deactivation on domain or cookie level, it remains in effect for all tracking tags that were implemented using Google Tag Manager.
Google Tag Manager is used in the interest of a comfortable and easy use of our website. This constitutes a legitimate interest within the meaning of point (f) of Art. 6(1) of the GDPR.
9.3. Use of Google Optimize
The web analysis and optimisation service “Google Optimize” is used on our website, which is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google Optimize”). We use Google Optimize to increase the attractiveness, content and functionality of our website by presenting new functions and contents to a percentage of our users and statistically evaluate the change in user behaviour. Google Optimize is a sub-service of Google Analytics (see Google Analytics section).
Google Optimize uses cookies that enable us to optimize and analyse your use of our website. The information generated by these cookies about your use of our website is usually transferred to a Google server in the USA and stored there. We use Google Optimize with activated IP anonymisation, so that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of our website, compiling reports on optimisation tests and related website activities and providing other services relating to website activity and Internet usage.
You can prevent the storage of cookies by adjusting your Internet browser settings accordingly. In addition, you can prevent the collection of data generated by the cookie and related to your use of our website (including your IP address) for Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. For more information about Google’s data collection and processing, please refer to Google’s privacy policy, which is available at https://www.google.com/policies/privacy.
9.4. Use of Google Maps
We use maps from Google Maps on the website in order to help you find us. Google Maps is a service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). When accessing the contact page, your web browser is instructed to load the necessary functions and map data directly from the Google servers. These servers may be in the USA or other countries of the world. We have no control options for this and do not receive any information from Google regarding whether you exchanged relevant map information during your visit to our website. We do not know whether Google only provides you with the information technically required or whether additional data concerning you or your system, e.g. IP address, information about your browser, etc., is stored and analysed. Google publishes a privacy policy (link: https://www.google.com/intl/de/policies/privacy/index.html), which also applies for Google Maps. Please note in particular that Google processes the following categories of data: device-related information, IP address, hardware settings, browser type, browser language, date and time of your request and referrer URL, cookies, location information. Google can link the data with other data from you and uses the data collected within the context of the services for the provision, maintenance, protection and improvement of the Google services, for the development of new services and for the protection of Google and its users. Google also uses this data in order to offer you personalised content – for example to provide you with more relevant search results and advertising. Google improves your user experience and the quality of the Google services as a whole with the help of data which is collected using cookies and other technologies such as Pixel Tags, for example. Google allows you to save your preferred language setting, for example, in order to display services in your preferred language. Before Google uses information for purposes other than those stated in its privacy policy, Google will request your consent. Google also discloses data to third parties with your consent for order data processing operation and for legal reasons. You can also change data protection settings for Google when you log in to Google. Google also complies with several self-regulation obligations including the EU-US Privacy Shield Agreement and deals with complaints.
9.5. Use of Facebook Pixels
This website uses the “Facebook Pixels” remarketing function from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”), which has the data processed by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. This active program function (JavaScript) is used to understand visitors’ actions on this website, measure the effectiveness of advertising and present advertisements within the context of visiting the Facebook social network and other websites (“Facebook ads”). This JavaScript establishes a direct connection to the Facebook servers when visiting the website. As a result, the fact that you have visited this website is communicated to the Facebook servers and Facebook associates this information with your personal Facebook user account and other profiles. The association attempts to function across devices so that the behaviour of visitors is also analysed across devices. The bases for use are Sec. 28 Para. 1 Clause 1 Point 2 of the BDSG, old version; Art 6(1) f of the GDPR. However, the data is stored and processed by Facebook so that a connection with the appropriate user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data use guidelines (https://www.facebook.com/about/privacy/).
We assume that the information remains stored until you delete your Facebook account. More information about the collection and use of data by Facebook and concerning your rights and options with regard to this for protecting your privacy can be found in the Facebook privacy policy at https://www.facebook.com/about/privacy/. You can manage your privacy settings in your Facebook account. You must be logged in to Facebook for this.
9.6. Use of Hotjar
We use Hotjar, which is provided by the company Hotjar Limited (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta), on our website in order to better understand our users’ needs and to optimize the website’s offers.
Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on what pages, which links they choose to click, what users do and don’t like, etc.). This enables us to adjust our offers to our users’ feedback. Hotjar uses cookies and tracking codes to collect data on our users’ behaviour and their devices (in particular, the device’s IP address (captured and stored only in anonymised form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website).
Hotjar stores this information in a pseudonymised user profile. Neither Hotjar nor we will ever use this information to identify individual users or to combine it with further data on individual users. For further details, please see Hotjar’s privacy policy by clicking on this link: https://www.hotjar.com/legal/policies/privacy
You can object to the storage of a user profile and of information about your usage of our website by Hotjar and to Hotjar’s use of tracking cookies on other websites by deactivating Hotjar via the following link: https://www.hotjar.com/legal/compliance/opt-out
9.7. Use of YouTube
Our website embeds YouTube videos in the privacy-enhanced mode. The operator of the YouTube page is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
If videos are embedded in the privacy-enhanced mode, no cookies for analysing user behaviour are stored. No data on user activities is collected in order to personalise the video playback. Instead, video recommendations are based on the current video. Videos played in the privacy-enhanced mode do not affect what videos are recommended to you on YouTube.
If you click on YouTube videos that are embedded in our website, you are forwarded to the YouTube page. YouTube may analyse the user behaviour on its page in accordance with the YouTube guidelines and terms of use. If you are logged in to your YouTube account, you allow YouTube to directly associate your surfing behaviour with your personal profile. You can prevent this by logging out of your YouTube account.
You can find further information about how user data is handled in YouTube’s privacy policy at: https://policies.google.com/privacy?hl=de&gl=de
9.8. Use of Google Ads
We use the services of Google Ads Words (formerly Google Adwords). Google Ads is an online advertising service. It enables us to place ads in the Google search engine results and in the Google advertising network. By using Google Ads, certain keywords can be determined in advance by means of which an ad is only displayed in the Google search engine results if the user retrieves a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed to websites related to the subject by means of an automated algorithm and by following the previously determined keywords. The purpose of Google Ads is the promotion of our website by showing ads that are pertinent to the user’s interests.
The operating company for the Google Ads services is Google Ireland Limited,
If a user accesses our website via a Google ad, a so-called conversion cookie is placed by Google on the data subject’s IT system. Cookies have been explained above. A conversion cookie is no longer valid after thirty days and does not serve to identify the data subject. Unless the cookie has expired, it can be identified via the conversion cookie whether certain sub-pages of our website have been accessed.
Data and information collected by using the conversion cookie is used by Google to create user statistics for our website. We use such user statistics to determine the total number of users and the success of the relevant ad and to optimise it for the future. Neither we nor other Google Ads customers obtain information from Google that could help identify the data subject.
Personal data such as accessed websites are stored by means of the conversion cookies. Every time you visit our web pages, personal data such as IP address and the Internet connection used is transmitted to Google. Such personal data is stored by Google. Google may disclose such data to third parties under some circumstances through the technical process.
Users can prevent the storage of cookies by our website at any time by using the appropriate setting on the web browser they are using and thus permanently counter the storage of cookies. Such a setting in the web browser used would also prevent Google from storing a conversion cookie on the user’s IT system. In addition, a cookie which has already been stored by Google Ads can be erased at any time via the web browser or other software programs.
The use of cookies or device identifiers can be deactivated in the Google settings for advertising at www.google.de/settings/ads. Alternatively, the use of cookies by third-party providers can be deactivated via the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/managing/opt_out.asp; or the use of the device identifiers can be managed via the device settings at https://support.google.com/ads/answer/1660762#mob.
More information and the applicable Google data protection provisions can be found at https://policies.google.com/privacy?hl=de&gl=de.
We use the remarketing feature within the Google Ads service. The remarketing feature allows us to present advertisements based on the interests of users of our website on other websites within the Google advertising network.
For this purpose, the interaction of the users on our website is analysed, e.g. in which offers the user was interested, to also show the users targeted advertisements on other pages after they have used our website. To do this, Google stores a number in the browsers of users who visit certain Google services or websites on the Google display network. This number, known as a “cookie”, is used to record the visits of these users. This number is used to uniquely identify a web browser on a particular device and not to identify a person. Options for deactivation are described above.
9.9. Use of Indeed Conversion-Tracking-Pixel
This website uses a web analysis tool by Indeed (Indeed Ireland Operations, Ltd., 124 St. Stephen’s Green, Dublin 2, Ireland) to better understand our users’ needs and to optimise the offers on this website. User data transmitted by your browser are collected and evaluated by Indeed for analysis. Indeed may use one or more cookies for collecting such user data. In addition, the IP address allocated to your device at the relevant time as well as a browser-specific identifier are transmitted. The IP address is only required for session identification and for geolocalisation (up to city level). We merely receive statistical and aggregated data. You can find more information in Indeed’s data protection concept at https://de.indeed.com/legal/gdpr_de?hl=de.
If your personal data is processed, you are the “data subject” within the meaning of the GDPR and you have the following rights in relation to us as the controller. You can exercise your rights by contacting our Data Protection Officer or our service centre employees, specifying your request.
Each individual affected by the processing of personal data has the right to receive free information from the processor concerning the personal data on file for them (purpose of processing, categories of processed data, publication to third party recipients, duration of storage, rights to blocking, erasure, complaint to the supervisory authorities, notification of automated decision-making – so-called profiling, disclosures in third countries or to international organisations) and a copy of this data.
You can request confirmation of whether personal data concerning you is processed from the controllers.
Each individual affected by the processing of personal data has the right to request the immediate rectification of incorrect personal data concerning themselves. Furthermore, the data subject has the right, taking the purposes of processing into account, to request the completion of incomplete personal data – including by means of a supplementary statement.
Each individual affected by the processing of personal data has the right to request restriction of processing by the controllers if the requirements stipulated by the legislator in Art 18(1) of the GDPR are met.
If the processing of the personal data in question has been restricted, this data – with the exception of its storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of a significant public interest for the Union or a member state.
If the restriction of processing has been restricted in accordance with the above requirements, you will be notified by the controllers before the restriction is lifted.
Each individual affected by the processing of personal data has the right to request that the controllers immediately erase the personal data concerning your person, provided that one of the reason specified in Art. 17(1) of the GDPR applies.
There is no right to erasure if processing is required: for exercising the right to freedom of expression and information; for fulfilment of a legal obligation which requires processing in accordance with the law of the Union or the member states to which the controller is subject or performance of a task which is in the public interest or occurs in the exercise of official authority which has been entrusted to the controller; for reasons of public interest in the field of public health in accordance with points h and i of Art. 9(2) and Art. 9(3) of the GDPR; for archiving purposes, scientific or historic research purposes or statistical purposes which are in the public interest in accordance with Art 89(1) of the GDPR, provided that the right specified under section a) is expected to make fulfilment of the objectives of this processing impossible or seriously impede it, or for the establishment, exercise or defence of legal claims.
Each individual affected by the processing of personal data has the right to receive the personal data concerning themselves which has been provided by the data subject to a controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data was provided insofar as the processing is based on consent in accordance with point a of Art 6(1) of the GDPR or point a of Art. 9(2) of the GDPR or on a contract in accordance with point b of Art. 6(1) of the GDPR and the processing is carried out by automated means.
Each individual affected by the processing of personal data has the right to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning themselves which is based on point e or f of Art. 6(1) of the GDPR.
This also applies for profiling based on those provisions.
If you exercise your right to object, the company will no longer process the personal data, unless we are able to demonstrate compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject, or if processing serves the establishment, exercise or defence of legal claims.
If the company processes personal data in order to conduct direct marketing, then the data subject has the right to object to the processing of personal data for the purposes of such advertising at any time. This also includes profiling to the extent that it is related to such direct marketing. If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.
10.7. Right to withdraw the declaration of consent under data protection law
Each individual affected by the processing of personal data has the right to withdraw consent for data collection and use at any time with effect for the future without specifying reasons. Withdrawal of consent does not affect the legality of the processing which has been carried out on the basis of the consent before it was withdrawn.
10.8. Right to information
If you have exercised the right to rectification, erasure or restriction on processing, we will inform all recipients to whom the personal data concerning you has been disclosed of the rectification, erasure or restriction, insofar as this does not involve disproportionate time and effort or is not impossible. You have the right to be informed of these recipients.
10.9. Questions / right to complaint to a supervisory authority
If you have further questions regarding the protection of your personal data, regarding this privacy policy, regarding the declarations of consent given and regarding the processing of your personal data or in the event of data protection complaints, you can contact our Data Protection Officer using the following email address:
Regardless of any other administrative or judicial remedy, you have the right to complaint to a supervisory authority, in particular in the member state in which you are resident, the member state in which you work or in the place of the putative violation if you consider that the processing of personal data concerning you violates the GDPR.
The supervisory authority is the Rhineland-Palatinate Data Protection authority with its headquarters in Mainz.
We take internal data protection very seriously. To this end, we use modern data storage and security technologies in order to optimally protect your data. Of course, our security measures are also continuously improved in line with technological development. Our employees and the processors we use (service providers) are contractually bound to maintain confidentiality and to comply with the IT/security provisions and the applicable data protection law provisions.
We and our contractual partners protect your personal details against unauthorised access, loss, use or publication and ensure that your personal information is located in a controlled, secure environment as required by law in which unauthorised access, as well as loss or publication, is prevented.
Technical and organisational measures are taken within our company in order to ensure our company’s compliance with the legal requirements of the BDSG and the GDPR and to protect your data against damage, destruction, falsification, manipulation and unauthorised access. Your data is transmitted with encryption and stored in a database. All systems on which your personal data is stored are protected against access and are only accessible to a specific group of people responsible for human resources.
In order to avoid collecting and processing unnecessary volumes of data, we only use your personal data insofar as this is required within the context of our range of services.
Data collection is done by ARWA Personaldienstleistungen GmbH and by processors used by it.
We would like to inform you that the provision of personal data is legally required to some extent (e.g. tax regulations) or may result from contractual arrangements (e.g. information about the contractual partner). It may sometimes be necessary for the data subject to provide us with personal data for the conclusion of a contract which we must them process. The data subject is required, for example, to provide us with personal data if our company concludes a contract with them. Failure to provide the personal data will result in an inability to conclude the contract with the data subject. Before providing personal data, the data subject must contact out Data Protection Officer. Our Data Protection Officer clarifies to the data subject, for the specific case, whether the provisions of personal data is legally or contractually required or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences of failure to provide the personal data would be.
13.1. Newsletter – Subscription
We provide regular information about our offers in our Newsletter. When subscribing to our Newsletter, the data provided by you is only used for this purpose. Subscribers can also be informed about circumstances via email that are relevant to the service or the subscription (such as changes to the newsletter offer or technical conditions).
You need a valid email address to receive our Newsletter. We use the “double opt-in” procedure to check whether a subscription has actually been made by the owner of an email address. When you subscribe to our Newsletter, we will store your IP address and the date and time of your subscription. This serves to protect us if a third party abuses your email address and subscribes to our Newsletter without your knowledge.
No other data is collected. The data is only used for sending the Newsletter. It is not disclosed to third parties, except for the used Newsletter Service MailerLite (see below). The collected data is not compared to data which may be collected by other components of our website.
13.2. Newsletter – Cancellation
You can revoke your consent to the storage of your personal data and its use for sending the Newsletter at any time. You can find a corresponding link in each Newsletter. You can also unsubscribe directly on this website at any time or inform us about your desire to unsubscribe via the contact stated at the end of this data privacy information.
13.3. Use of MailerLite
We use the MailerLite component to send out our Newsletter. MailerLite is a service provided by the company MailerLite UAB.
MailerLite UAB, Paupio g. 246, LT-11341 Vilnius, Registration code 302942057, VAT LT100007448516
The data stored during your Newsletter subscription (email address, IP address, date and time of your subscription) is transmitted to a server of the company MailerLite UAB in Lithuania and stored there in compliance with the European data protection regulations. You can find more information on MailerLite UAB’s privacy policy at: https://www.mailerlite.com/privacy-policy
13.4. Newsletter – Tracking
Our Newsletters include so-called tracking pixels (web bugs) by means of which we can see whether and when an email has been opened and what links in the email were followed by the recipient. We store this data so that we can perfectly adjust our Newsletters to the needs and interests of our subscribers.
By subscribing to the Newsletter, you agree that your email address and your user behaviour are electronically stored by the Newsletter Tracking.
If you revoke your consent to receive the Newsletter, your consent to the aforementioned tracking is revoked as well.
14. Up-to-dateness and amendment of the privacy policy
Please note that data protection provisions and data protection operations are subject to change at any time and the content of this privacy policy must be amended accordingly. If this should be the case, we will set out the amendments for you in a transparent manner. It is also advisable to inform yourself about the changes to the legal provisions and our company’s practices.