Privacy Notice Data protection notice We put a high priority on data protection and data security for our customers and users. This is why protecting your personal data in all of our business processes is a special concern to us. This data protection notice explains which information is collected when you visit our website and how this information is used. However, this notice does not apply to other companies’ websites containing a link to this website nor does it apply to websites to which our website provides links. Alterric GmbH Holzweg 87 26605 Aurich contact@alterric.com Executive management: Jan-Knut Brune and Dr. Urban Keussen Name and address of the data protection officer The data protection officer for the controller is: Stephan Toleikis, Thosa-Datenschutz UG (limited liability) Hans-Böckler-Allee 26 30173 Hannover E-mail: datenschutz@alterric.com If you have any questions or suggestions regarding data protection, you can directly contact our data protection officer at any time. Data processing for visits to our website Alterric automatically collects data and other information from your computer or device when you visit our website. We will collect the following data: the IP address or domain name of the requesting computer the time and date of access the pages accessed your internet provider’s name possibly your computer’s operating system and browser software the website from which you visit the Alterric website. This data is collected and processed to ensure the security of our system. Your IP address will be erased within 7 days. Alterric reserves the right to process the data further in an anonymised form. This data processing complies with Article 6 (1) (f) of the General Data Protection Regulation (GDPR). Legal basis for processing personal information Provided that we obtain consent from the data subject to personal data processing operations, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. Article 6 (1) (b) of the GDPR serves as the legal basis for processing personal data required to perform a contract to which the data subject is a contracting party. This also applies to processing operations required to take pre-contractual measures. Provided that it is necessary to process personal data to meet a legal obligation to which our company is subject, Article 6 (1) (c) of the GDPR serves as the legal basis. In the event that vital interests of a data subject or of another natural person make processing of personal data necessary, Article 6 (1) (d) of the GDPR serves as the legal basis. If processing is necessary to safeguard a justified interest of our company or of a third party and if the interests, basic rights and basic freedoms of the data subject do not override the above-stated interest, Article 6 (1) (f) of the GDPR serves as the legal basis of processing. Security measures Alterric uses extensive technical and organisational security measures to manage and protect your personal data against misuse, accidental or intentional manipulation or against access by unauthorised persons. We continually improve our security procedures according to technological developments. Online applications If you apply at Alterric, we will process your personal data for the purpose of handling your application. We will only use your application data for this purpose and in accordance with statutory provisions. We will treat your data confidentially. We will only collect personal data from you that we need for the application process. Alterric will collect the following data when you apply: Mandatory fields: your title, first name, family name, e-mail address and telephone number Voluntary information: your date of birth, address, an alternative telephone number and any application documents submitted We will erase your data within three months of completing the application process. In any case, you can view, edit or have your data and any supporting documents erased (such as your CV) at any time as part of your online application. This data processing complies with Article 6 (1) (f) of the GDPR. Cookies and interest-based advertising (retargeting) Alterric uses cookie technology in some parts of the website in order to provide optimal service. Cookies are small text files that are generated by a web server and are saved on your computer via the web browser you have used. At the end of your session on our website, Alterric will erase most of the cookies that it utilises. Some cookies will remain on your PC even after the session has ended and will enable Alterric to use the data saved on the cookie (including the time and date of your visit to the Alterric website, your browser type, your operating system and the products that you viewed on the Alterric website) to recognise your PC when you next visit (ID cookies). Personal identification is not possible using the information saved on the cookies. This data processing complies with Article 6 (1) (f) of the GDPR. Furthermore, when you visit the Alterric website, third-party cookies will be saved on your computer for purposes of interest-related advertising (retargeting) and web analysis. This site uses cookies and other tracking technologies. We share the data with our partners, including the services like Google or Facebook. If necessary, your data may be transferred to a third country, e.g. the USA. By means of unique identifiers, e.g. device IDs, our partners can analyse usage and we can present you with interest-related content and advertising. You can adjust the settings or decline them here. Our privacy policy can be found under this link. Cookies are small text files that can be used by websites to make a user's experience more efficient. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission. This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages. You can at any time change or withdraw your consent from the Cookie Declaration on our website. Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy. Please state your consent ID and date when you contact us regarding your consent. Your consent applies to the following domains: www.alterric.com Your current state: Deny. Change your consent Cookie declaration last updated on 10/28/21 by Cookiebot: Necessary (2) Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies. Name Provider Purpose Expiry Type CookieConsent Cookiebot Stores the user's cookie consent state for the current domain 1 year HTTP Cookie pll_language www.alterric.com This cookie is used to determine the preferred language of the visitor and sets the language accordingly on the website, if possible. 1 year HTTP Cookie Statistics (2) Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously. Name Provider Purpose Expiry Type _ga Google Tag Manager Registers a unique ID that is used to generate statistical data on how the visitor uses the website. 2 years HTTP Cookie _ga_# Google Tag Manager Used by Google Analytics to collect data on the number of times a user has visited the website as well as dates for the first and most recent visit. 2 years HTTP Cookie Cookiebot This pseudo-anonymised cookie serves the purpose of saving the cookie consent where your cookie preferences are saved. The cookie is necessary to control the website. The provider collects or saves the following data: Your anonymised IP address An anonymised, randomly generated, encrypted key Date and time of consent Status of consent Possibly, your computer’s operating system and browser software The website from which you visit the Alterric website. This data processing complies with Article 6 (1) (f) of the General Data Protection Regulation (GDPR). Google Analytics This website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses “cookies”, text files that are saved on your computer and that enable analysis of your use of the website. The information generated by the cookies about your use of this website is usually transferred to a Google server in the United States and saved there. We use the suffix “gat._anonymizelp” for web analysis via Google Analytics. Google uses this suffix to truncate or anonymise the IP address of the internet connection if our website is accessed from a member state of the European Union or other contracting states to the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the United States and truncated there in exceptional cases. The IP address is not merged with other Google data in this context. Google will analyse this information on behalf of the website operator to create reports about website activities and to perform other associated services for the website operator on the basis of website activity. Cookies are automatically erased after a duration of 14 months. Data processing for using Google Analytics is in compliance with Article 6 (1) (a) of the GDPR and is in compliance with your consent according to Article 45 (1) (a) of the GDPR for personal data processing operations outside of the EU/EEA (third countries including the United States). Recipients/categories of recipients: Google is the recipient of the collected data. Transmission to third countries: Personal data is transmitted to the United States based on the current Standard Contractual Clauses (SCC) that were made available by a decision of the EU Commission and that should ensure a corresponding level of data protection between the involved parties provided that the clauses are used without essential changes. Transmission is made by consent in compliance with Article 45 (1) (a) of the GDPR in cases where the Standard Contractual Clauses (SCC) do not satisfy the specifications of the GDPR. You can prevent cookies from being saved by changing the preferences of their browser software accordingly. However, we would like to point out to you that in this case you may not be able to use all functions of this website to their full extent. Furthermore, you can prevent the data generated by the cookie and related to your use of the website (including your IP address) from being collected by Google and then processed by Google by downloading and installing the browser Plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can find more information and Google’s applicable data protection policies at https://www.google.de/intl/de/policies/privacy/ or https://www.google.com/analytics/terms/de.html. Google Maps On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive maps to visually display geographic information. Our location is shown to you by using this service in case you decide to visit our location. If you access the subpages into which Google Maps are integrated, it does not transfer information about your use of our website (such as your IP address) to a Google server and save it there. Information is only transmitted to Google when you explicitly access Google Maps by clicking on them, and then information may be transmitted to a server of Google LLC in the United States. This takes place regardless of whether Google provides a user account by which you are logged in and regardless of whether a user account exists. When you are logged into Google, your data is classified directly to your account. If you do not want classification with your profile by Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as a user profile and evaluates the profiles. Collection, retention and evaluating takes place in compliance with Article 6 (1) (f) of the GDPR on the basis of Google’s justified interest in displaying personalised advertising, market research and/or needs-based design of Google websites. You are entitled to a right to object to these user profiles being created, and you must contact Google to exercise this right. For cases where personal data is transmitted to Google LLC with its headquarters in the United States, Google LLC has accepted the updated Standard Contractual Clauses (SCCs) of the European Commission, which should guarantee compliance with the level of data protection applicable in the EU. Google’s terms of service can be viewed at https://www.google.de/intl/de/policies/terms/regional.html, and the additional terms of service for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html. On Google’s website, you can find detailed information about data protection related to the use of Google Maps (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/. Your rights If Alterric processes personal data related to your person, we will provide you information about the categories of affected data, the purposes of use, any recipients or categories of recipients of data and about the duration of the planned retention if you request this information. You have the right to demand that any incorrect or incomplete data be rectified or supplemented. If data processing takes place because of consent that you have given, you have the right at any time to withdraw your consent with future effect. If data processing takes place based on Alterric’s justified interests, you have the right to object to the data processing for reasons that are based on your special situation (Article 21 of the GDPR). Under certain circumstances, you have the right to demand that your data be erased. This especially applies in cases where the data is no longer required for data processing, you have withdrawn consent that was given or you objected to the data processing because of your special situation. Under certain circumstances, you can demand restriction of your personal data, if erasure is not possible or if the obligation to erase is disputed. Furthermore, you have a right to data portability. This means that we provide your data to you in a machine-readable format upon request. You have the right to contact the competent supervisory authorities with a complaint. The Federal Commissioner for Data Protection and Freedom of Information is competent for telecommunication services. The State Commissioner for Data Protection in Lower Saxony is competent for all other concerns. Persons to whom Alterric transfers data Alterric transmits your data to processors in compliance with Article 28 of the GDPR. The processor only processes your data in compliance with the law and according to Alterric’s instructions. Alterric is responsible for how data processors process the data. Alterric may transmit your data to cooperation partners for service performance. This takes place either as permitted by law or if you have given us your consent to do so. Furthermore, we are obliged to transmit your data to public authorities in certain cases. Data transfer to third countries We transmit some personal data to a third country outside of the EU such as to Google or Facebook and other third parties in the United States. The European Court of Justice evaluates the United States as a country with an insufficient level of data protection according to EU standards. There is especially the risk that your data could be processed by US authorities for purposes of monitoring and surveillance and possibly even without means of redress. You can actively consent to this transmission via our website using our cookie management. You may withdraw this consent at any time. This data processing complies with Article 49 (1) (1) (a) of the GDPR. Existence of automated decision-making in individual cases (including profiling) We do not utilise any purely automated decision-making procedures in compliance with Article 22 of the GDPR. If we would utilise such a procedure in the future in individual cases, we would specifically inform you about this if required to do so by law. Privacy policy for using social media Plug-ins (no like buttons) Our website uses social Plug-ins (“Plug-ins”; only forwarding, no “Like” button) from the social networks LinkedIn, Twitter and XING. Your browser only creates a direct connection to the servers of a social network if you activate the Plug-ins by clicking and thus give your consent to data transmission. The content of a Plug-in is directly transmitted to your browser and integrated into the site. The Plug-in then transmits data (including your IP address) to the social network. We have no influence on the amount of data that the social network collects by means of the Plug-ins. To our knowledge, social networks definitely receive information about which of our webpages you are currently accessing and have previously accessed. By integrating Plug-ins, social networks also receive information that your browser has accessed the associated page of our web presence if you do not have a profile with the social network or are not logged in at the time. This information (including your IP address) is directly transmitted by your browser to a server of the social network (and is also transmitted into the United States) and is saved there. If you interact with the Plug-ins, the associated information is also directly transmitted to a server of the social network and is saved there. The information is also published by the social network, and your contact data is displayed. Please see the following privacy policies for the purpose and scope of data collection and further processing and for the use of the data by the social network as well as your associated rights and settings to protect your privacy …… LinkedIn: https://de.linkedin.com/legal/privacy-policy Twitter: https://twitter.com/de/privacy XING: https://privacy.xing.com/de/datenschutzerklaerung No Plug-ins are integrated into our website that are provided by the social networks LinkedIn, Twitter or XING. There is no automatic transfer on our website of user data to the operators of these platforms. Our social buttons only create direct contact between networks and users if a user actively clicks on one of the buttons. As a user, you can post the contents of this website in social networks without complete surf profiles being created by the operators of these networks. Making contact If you have a concern or a request, you can contact us via our contact form. Alterric will collect the following data if you make contact: your title, first name, family name, telephone number (voluntary information), e-mail address and your concern. The data will be processed for purposes of handling your concern and responding to it. The data will be erased depending on your concern. This data processing complies with Article 6 (1) (f) of the GDPR. Imprint Data protection notice A company of the Aloys Wobben Foundation | EWE