Source: https://ime-actia.com/index.php/en/privacy-policy.html
Timestamp: 2020-08-03 11:31:36
Document Index: 433336143

Matched Legal Cases: ['Art. 4', 'Art. 13', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 25', 'Art. 44', 'Art. 16', 'Art. 20', 'Art. 77', '§ 257', '§ 147', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 13', 'Art. 6', 'Art. 6', 'Art. 22']

Privacy policy for clients & website users
14.05.2018 KB ACTIA I+ME GmbH [IR15086A]
This privacy policy explains to you the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offer and the associated websites, functions and contents as well as external online presences. (hereinafter jointly referred to as "online offer").
With regard to the terms used, such as "personal data" or their "processing", we refer to the definitions in Art. 4 of the General Data Protection Regulations (GDPR).
Name / Company: ACTIA I+ME GmbH
Address: Dresdenstr. 17-18
Postcode / city: D-38124, Braunschweig
Commercial Register No.: HRB 4640
Managing Director: Jean-Louis Pech
Phone number: + 49 (0) 531 38 701 0
E-mail: info@ime-actia.de
Name / Company: Kämmer Consulting GmbH
Phone number: +49 (0)531 702249-0
☒ Meta/communication data (e.g., device information, IP addresses).
☒ Customers / interested parties / suppliers.
☒ Visitors and users of the online offer.
☒ Applicants.
☒ Provision of the online offer, its contents and functions.
☒ Response to contact requests and communication with users.
☒ Response to applicant enquiries.
Effective: 14.05.2018
1. Applicable legal bases
In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR, the legal basis for the processing for the fulfilment of our services and the execution of contractual measures as well as the reply to inquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing to fulfil our legal obligations is Art. 6 Para. 1 lit. c GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 Para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person require a processing of personal data, Art. 6 1 lit. d GDPR applies as the legal basis.
2. Changes and updates to this Privacy Policy
We ask you to inform yourself regularly about the contents of our privacy policy. We will adapt the privacy policy as soon as changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.
3.1 We shall take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk, in accordance with Article 32 GDPR, taking into account the state of the art, implementation costs and the nature, scope, circumstances and purposes of processing and the different likelihood and severity of the risk to the rights and freedoms of natural persons; the measures shall include in particular safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transmission, security of availability and its separation. Furthermore, we have established procedures that guarantee the exercise of data subject rights, deletion of data and reaction to data risks. Furthermore, we already consider the protection of personal data during the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and data protection-friendly presettings (Art. 25 GDPR).
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this only takes place if it occurs for the fulfilment of our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or leave the data in a third country only in the presence of the special requirements of Art. 44 ff. GDPR. This means, for example, processing is carried out on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy Shield") or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").
6.2 According to Art. 16 GDPR, you have the right to request the completion of data concerning you or the correction of inaccurate data concerning you.
6.4 You have the right to request that the data concerning you that you have provided to us be received in accordance with Art. 20 GDPR and to request their transmission to other persons responsible.
6.5 According to Art. 77 GDPR you have the further right to lodge a complaint with the competent supervisory authority.
8. Objection right
9. Cookies and right of objection for direct advertising
We use temporary and permanent cookies, i.e. small files that are stored on the user's devices (explanation of the term and function, see last section of this privacy policy). In part, cookies serve security purposes or are required for the operation of our online offer (e.g., for the presentation of the website) or to save the user's decision when confirming the cookie banner. In addition, we or our technology partners use cookies to measure reach and for marketing purposes, about which the users will be informed in the course of the privacy policy.
A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/ . Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that in this case not all functions of this online offer can be used.
10.1 The data processed by us will be deleted or their processing restricted in accordance with Articles 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage obligations. If the data are not deleted because they are necessary for other and legally permissible purposes, their processing is restricted. This means that the data are blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.
10.2 In accordance with legal requirements, the storage is carried out in particular for 6 years in accordance with § 257 Para. 1 HGB [German Commercial Code] (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) as well as for 10 years according to § 147 para. 1 AO [Tax Code] (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
11. Answering inquiries and customer portal
11.1 We process inventory data (e.g., names and addresses as well as contact data of users), for the purpose of answering inquiries of customers, prospective customers and applicants, as well as provision of product documents in the customer portal in accordance with. Art. 6 Para. 1 lit. b, GDPR). Entries marked as mandatory in online forms are required to respond to requests or access the Customer Portal.
11.2 Users can optionally obtain a user account, in particular by viewing their specific product documentation. During the registration process, the required information will be communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data with regard to the user account will be deleted, subject to their retention being required for commercial or tax reasons, according to Art. 6 Para. 1 lit. c GDPR. It is up to the users to save their data before the end of the contract if they have given notice of termination. We are entitled to irretrievably delete all user data stored during the term of the contract.
11.3 When registering, re-registering and using our online services, we store the IP address and the time of the respective user action. The data are stored on the basis of our legitimate interests as well as the user's protection against misuse and other unauthorised use. A passing on of this data to third parties does not take place in principle, unless it is necessary for the pursuit of our claims or there is a legal obligation in accordance with. Art. 6 Para. 1 lit. c, GDPR.
11.4 We process usage data (e.g., the visited websites of our online offer, interest in our products) and content data (e.g., entries in the contact form or user profile) for advertising purposes in a user profile in order to show the user e.g. product information based on their previously used services.
11.5 The deletion takes place after the expiration of statutory warranty and comparable obligations, the necessity of the storage of the data is checked every three years; in the case of statutory archiving obligations the deletion takes place after their expiration (end of commercial law (6 years) and tax law (10 years) storage obligation); details in the customer account remain up to its deletion.
12. Credit check
12.1 If we make advance payments (e.g. when purchasing on account), we reserve the right to obtain information on identity and creditworthiness for the purpose of assessing credit risk on the basis of mathematical-statistical procedures from specialised service providers (credit agencies) in order to safeguard legitimate interests.
12.2 In the context of a credit check, we can transmit the following personal data: company name, postal address, information on the type of contract, bank details, commercial register number to the following credit agencies:
Creditreform Braunschweig Harland KG Saarbrückener Straße 253 a 38116 Braunschweig
Verband der Vereine Creditreform e.V. Hellersbergstraße 12 D-41460 Neuss www.creditreform.de
12.3 We process the information received from credit agencies on the statistical probability of non-payment within the framework of an appropriate discretionary decision on the establishment, execution and termination of the contractual relationship. We reserve the right to refuse payment on account or any other advance payment in the event of a negative result of the credit assessment.
12.4 If we obtain an express consent from you, the legal basis for the credit information and the transmission of the customer's data to the credit inquiry agencies is the consent in accordance with Art. 6 Para. 1 lit. a GDPR. If no consent is obtained, our legitimate interests in the default security of your payment claim shall be the legal basis pursuant to Art. 6 Para. 1 lit. f, GDPR).
13.1 When contacting us (via contact form or e-mail), the user's details for the processing of the contact enquiry and its handling according to the terms and conditions of this agreement are stored. Art. 6 Para. 1 lit. b) GDPR.
13.2 User information can be stored in our Customer Relationship Management System ("CRM System") or comparable request organisation.
13.3 We delete the requests if they are no longer necessary. We review the requirement every two years; requests from customers who have a customer account are stored permanently and are linked to the customer account details for deletion. In the case of statutory archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) storage obligation).
14.1 We collect on the basis of our legitimate interests as defined in Art. 6 para. 1 lit. f. GDPR data on each access to the server on which this service is located (so-called server log files). Access data includes the name of the requested website, file, date and time of access, amount of data transferred, notification of successful retrieval, browser type along with version, the operating system of the user, referrer URL (previously visited), IP address, and the requesting provider.
14.2 Log file information is stored for a maximum of seven days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data whose further storage is required for evidentiary purposes are excluded from deletion until the respective incident has been finally clarified.
15.2 We use "session cookies", which are only stored on our website for the duration of your current visit (e.g. to store your login status). A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. A cookie also contains information about its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online offer and log out or close your browser, for example.
15.3 Users will be informed about the use of cookies in the context of pseudonymous range measurement within the scope of this data protection declaration.
15.4 If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Cookies already saved can be deleted in the system settings of the browser at any time. The exclusion of cookies can lead to functional restrictions of this online offer.
15.5 You can object to the use of cookies for range measurement and advertising purposes via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
16.1 We use on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. GDPR) Google Analytics, a web analytics service of Google LLC ("Google"). Google uses cookies. The information generated by the cookie about the user's use of the website's online offerings is generally transmitted to and stored on a Google server in the USA.
16.2 Google has become subject to the Privacy Shield agreement, thereby offering a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
16.3 On our behalf, Google will use this information to evaluate the use of our online offering by the user, to compile reports on the activities within this online offering and to provide us with other services related to the use of this online offering and the internet. Pseudonymous usage profiles of users may be created from the processed data in this respect.
16.4 We use Google Analytics only with activated IP anonymisation. This means that the IP address of the user is shortened by Google within the member states of the European Union or in other countries that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there.
16.5 The IP address sent by your browser will not be connected with other data from Google. The user may refuse the use of cookies by selecting the appropriate settings in their browser; the user can also prevent Google from collecting the data generated by the cookie regarding your use of the contents data and the processing of this data by Google by downloading and installing the browser plugin available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
16.6 For further information on data usage by Google, setting and objection options, please see the Google website: https://www.google.com/intl/de/policies/privacy/partners ("Data usage by Google when using websites or apps of our partners"), https://policies.google.com/technologies/ads ("Use of data for advertising purposes"), https://adssettings.google.com/authenticated ("Manage information Google uses to show you advertisements").
14.01.2020 SLB ACTIA I+ME GmbH [IR15874A]
In the following, we, ACTIA I+ME GmbH (hereinafter referred to as "we"), are informing you in accordance with Art. 13 of the EU General Data Protection Regulation ("GDPR"), how we process your personal data as part of your application.
Dresdenstr. 17-18
Telephone nummer: + 49 (0) 531 38 701 0
2. Data Protection Representative:
You can contact our Data Protection Representative regarding all of the questions related to your personal data and exercising your rights. He can be reached via the following contact details:
Telephone: +49 (0)531/702249-0
We process personal data about you for the purpose of your application for an employment relationship, insofar as this is necessary for the decision about the establishment of an employment relationship with us. The legal basis for this is Section 26 Subsection 1 in conjunction with Subsection 8 S. 2 BDSG [German Data Protection Act].
Furthermore, we may process personal data about you, if it is necessary for defending from asserted legal claims against us from the application procedure. The legal basis of this is Art. 6 Subsection 1 Letter f GDPR, for example, the legitimate interest is a burden of proof in proceedings according to the General Equal Treatment Act (AGG).
If an employment relationship is established between you and us, we may continue processing personal data already received from you in accordance with Section 26 Subsection 1 BDSG for the purpose of the employment relationship, if this is necessary for the implementation or termination of the employment relationship or to exercise or fulfil the rights and duties of the interested parties arising from a law or a wage agreement, a service agreement (collective agreement).
We process data, which are related to your application. This may be general data about you personally (such as your name, address and contact details), details about your professional qualification and school education or details about professional advanced training or other details, which you send to us in relation to your application. Furthermore, we can also process career-related information, which you have made publicly accessible, such as a profile on professional social media networks.
5. Which categories of recipients of your personal data exist?
As part of the application process, we also forward your data to persons in the company, who are entrusted with the selection process. During the course of providing the website, we have mandated an external IT service provider.
6. Is transmission to a third country intended?
7. For how long will your data be stored?
We will store your personal data for as long as necessary, to decide on your application. If an employment relationship is not concluded between you and us, we may also store data beyond this time, if it is necessary for defence against possible legal claims. The application documents are deleted six months after notification of the rejection decision, if longer storage is not required on the basis of legal disputes.
8.nbsp; Which rights do you have?
As an applicant with us, depending on the situation, you have the following data privacy rights on a case-by-case basis; in order to exercise these, you may contact us at the details referred to under Clause 1 and 2 at any time:
You have the rights to request disclosure about your personal data processed with us, as well as gaining access to your personal data and/or copies of these data. This includes disclosures about the purpose of the use, the category of the data used, their recipients and parties with access authorisation and, if possible, the planned duration of the data storage or, if this is not possible, the criteria for the specification of this duration;
You have the right to request the correction of the inaccurate personal data relating to you from us at once. In consideration of the purposes of processing, you have the right to request the supplementation of incomplete personal data - also using a supplementary declaration.
If the processing of personal data relating to you occurs on the basis of Art. 6 Subsection 1 Letter f GDPR, you have the right to file an objection to the processing of these data, for reasons, which arise from your specific situation. We will then no longer process your personal data, unless we can provide evidence of mandatory protectable reasons for the processing, which outweigh your interests, rights and freedoms, or are for the purpose of processing the assertion, exercising or defence of legal claims.
If the processing is based on a consent, you have the right to revoke the consent at any time, without the lawfulness of the processing, which has occurred on the basis of the consent until its revocation, being affected. For this, you can contact us or our Data Protection Representative at any time, under the aforementioned details.
You file an objection against the processing, in accordance with 8.c above, and no overriding legitimate interests exist for the processing.
The deletion of the data is required to fulfil a legal obligation under Union law or the law of the Member States, by which we are governed.
to fulfil a legal obligation, which requires the processing according to the law of the Union or the Member States, by which we are governed.
for the assertion, exercising or defence of legal claims.
the accuracy of the personal data is disputed by you, for a duration, which enables us to check the accuracy of the personal data,
the processing is unlawful and you reject the deletion of the personal data and instead, request the restriction of use of the personal data;
we no longer require the personal data for the processing purposes, however, you require them to assert, exercise or defend legal claims, or
you have filed an objection to the processing according to Number 8.c above, as long as it is not yet established, whether our legitimate interests outweigh yours.
If the processing has been restricted in accordance with this Letter f, these personal data - apart from their storage - may only be processed with your consent or for the assertion, exercising or defence of legal claims. or to protect the rights of other natural persons or legal entities or for reasons of an important public interest of the Union or a Member State. If you have obtained a restriction of processing, we will notify you before the restriction is rescinded.
g. Right to complain
Without prejudice to other administrative law or judicial legal remedies, you are entitled to a right to complain to a supervisory authority, particularly in a Member State of your place of residence, your place of work or the location of the suspected infringement, if you are of the opinion that the processing of your personal data infringes the GDPR.
9. Necessity to provide personal data
The provision of personal data is neither legally nor contractually prescribed, nor are you obligated to provide the personal data. However, it is necessary for you to provide personal data for the conclusion of a contract for an employment relationship with us. This means that as long as you fail to provide us with personal data with your application, we will not enter into an employment relationship with you.
10. No automated decision-making
No automated decision-making occurs in an individual case within the meaning of Art. 22 GDPR, which means that the decision about your application is not based exclusively on automated processing.