Privacy policy

This data protection notice informs you about how we handle your data. With regard to the terms used, such as "processing" or "controller", we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR). Our websites are not aimed at children and young people under the age of 16.

UMCO GmbH, you can reach us under the contact details given in the imprint.

Mauß Datenschutz GmbH
Phone: +49 40 999 99 52-0
Email: datenschutz@datenschutzbeauftragter-hamburg.de

Please refer to the client UMCO GmbH whenever you contact our data protection officer.

Below you will find out when which data is collected, how it is used (type, scope and purpose of the processing of personal data) as well as the legal basis and the duration of storage.

When you visit our website, we automatically process the following data about you in order to be able to provide our website and the services provided via it:

• Date and time of your access
• your IP address
• the address of the website from which you came to us
• the web pages you visit on our website
• information about your internet browser (browser type and version)
• the operating system of the device you use to access our websites and services
• Internet service provider

This information is stored by us in log files for security reasons and automatically deleted after 7 days. The data in the log files is stored separately from other data about you.

Longer storage only takes place in justified individual cases (e.g. in the event of suspected abuse or fraud or attacks on our web server). In these cases, the respective log files are stored until the matter has been clarified and the resulting measures have been completed.

In order to be able to provide you with our websites and the services provided via them, we use a service provider (web host) that processes your data on our behalf and exclusively in accordance with our instructions.

Kaufmann Digital GmbH
Steinstr. 13
32369 Rahden
Rahden, Germany

The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in processing your data so that we can offer you our websites and the services provided via them in a technically flawless, secure manner and optimised for your needs. In addition, our further legitimate interest is to recognise and ward off attempts at fraud or attacks on our websites.

In order to provide the functionalities requested by you, including the provision of the website, we store data in your browser in accordance with Section 25 TDDDG and also read it out again. For this purpose, we use so-called cookies as well as the session memory and the local memory of the browser.

The legal basis for the storage and retrieval of data from your browser is either your consent(Section 25 (1) TDDDG) or the technical necessity to offer a service requested by website visitors(Section 25 (2) No. 2 TDDDG).

If personal data is involved, the legal basis for its processing is stated in the data protection information of the respective service.

We would like to continuously develop and improve our website. To this end, we would like to statistically evaluate user behaviour. We use the Matomo service, which we operate ourselves, to collect and statistically analyse the data. The data collected includes, for example, the number of page views, the subpages visited and the length of stay, as well as the entry and exit points. In addition, the data can be used to recognise you for a period of 30 days. We store the user ID required for this on your user terminal device.

The legal basis for the processing is your consent(Art. 6 para. 1 lit. a GDPR).

The statistical data is anonymised immediately after collection and stored permanently. Your IP address is also only stored in anonymised form.

We use LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, to create target groups, segment visitor groups of our online offer, determine conversion rates and subsequently optimise them. This happens in particular when you interact with adverts that we have placed with LinkedIn Ireland. For this purpose, LinkedIn Ireland offers retargeting for website visitors in order to display targeted advertising outside our website.

LinkedIn Insight Tag collects data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent) and timestamp. This data is used to provide anonymised reports on website audience and ad performance.

We process your data with the help of LinkedIn Insight Tag for the purpose of optimising our website and for marketing purposes on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR.

The specific storage period of the processed data cannot be influenced by us, but is determined by LinkedIn Ireland. Further information can be found in the privacy policy for LinkedIn Insight Tag: https://www.linkedin.com/legal/privacy-policy.

LinkedIn Ireland is part of the American LinkedIn Group. We do not know whether and which data LinkedIn Ireland transfers from the scope of the GDPR to its parent company in the USA. If such a transfer takes place, LinkedIn Ireland is solely responsible for this. In addition, such a transfer of the IP address to the third country USA would also be permissible, as there is a so-called adequacy decision for the USA with the EU-U.S. Data Privacy Framework (DPF) in accordance with Art. 45 para. 1 GDPR and LinkedIn has submitted to its conditions by self-certification.

We have integrated YouTube videos on our website. YouTube Video is a component of the video platform of YouTube, LLC, on which users can upload content, share it over the Internet and receive detailed statistics. YouTube Video enables us to easily integrate content from the platform into our website.

When you access websites with integrated YouTube videos, you establish a connection to the servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. YouTube Video uses cookies and other browser technologies to evaluate user behaviour, recognise users and create user profiles. This information is used, among other things, to analyse the activity of the content listened to and to create reports. If a user is registered with YouTube, LLC, YouTube Video can assign the videos played to the profile.

The use of YouTube Video and thus the transmission of personal data to Google, as well as the storage of data on and retrieval of data from your computer in the form of cookies and/or LocalStorage, is based on your necessary consent(Art. 6 para. 1 lit. a GDPR). By giving your consent, you also agree to the creation of a profile by Google and the assignment of the profile information to a possible user account.

Google Ireland is part of the American Alphabet Group. We do not know whether and which data Google Ireland transfers from the scope of the GDPR to its parent company in the USA. If such a transfer takes place, Google Ireland Limited is solely responsible for this. In addition, such a transfer of the IP address to the third country USA would also be permissible, as there is a so-called adequacy decision for the USA with the EU-U.S. Data Privacy Framework (DPF) in accordance with Art. 45 para. 1 GDPR and the Google companies have submitted to its conditions by self-certification.

We do not store any data in connection with the use of YouTube Video. You can find out whether and for how long Google stores the data collected on the Google/YouTube pages.

We integrate content from the video platform Vimeo from Vimeo LLC, 555 West 18th Street, New York 10011, USA on our website. Some data is transmitted to Vimeo when the content is accessed.

This is standard transmitted information such as IP address, browser type or operating system. Vimeo also collects information about how you use the embedded elements. This includes, for example, session duration, bounce rate or clicked elements from Vimeo.

The legal basis for the integration of Vimeo and the analysis of your usage data is Art. 6 para. 1 lit. a GDPR, your consent.

The storage period of your data is not determined by us, but solely by Vimeo. Further information on Vimeo's handling of user data can be found in Vimeo's privacy policy at: https: //vimeo.com/privacy/.

You can contact us using the forms on our website. This is for the purpose of making general contact and contacting Hepline. By submitting your data, you consent to the processing of this data by us. This is done in order to be able to process your enquiries, insofar as this is necessary to answer the contact enquiries and any measures requested. The data processed in this context are

• Your name
• your e-mail address
• Text of your enquiry

and, in the case of the helpline, also

• your address
• telephone number

The legal basis for processing your data when you contact us is Art. 6 para. 1 lit. a GDPR, your consent.

Something else only applies if the content of your contact directly serves to initiate or implement an existing contractual relationship between you and us. In these cases, we base the processing of your data on Art. 6 para. 1 lit. b GDPR.

Your data will be deleted as soon as it is no longer required and is not subject to any statutory retention obligations or you withdraw your consent.

If you register for one of our e-mail newsletters, the data you provide will be processed for the creation and dispatch of the newsletter and for proof of registration for the newsletter until you withdraw your consent. The legal basis for the processing is your consent(Art. 6 para. 1 lit. a GDPR).

You can withdraw your consent at any time by unsubscribing from the newsletter. You will find a corresponding link at the end of each newsletter. This also applies to the revocation of declarations of consent that were given to us before the GDPR came into force, i.e. before 25 May 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

With regard to further rights as a data subject, we refer you to our explanations below.

To receive the newsletter, you must click on the confirmation link in the verification email that we send you after your registration in order to be able to prove your consent. When you click on the corresponding link, we save the public IP address of the Internet connection from which the link is accessed, together with the date and time of the click. We process this data in order to be able to prove that you have confirmed receipt of our e-mail newsletter. The legal basis for this storage is Art. 6 para. 1 lit. c GDPR.

We delete your data when you unsubscribe from the newsletter. The data that we require as proof that you have consented to receiving the newsletter will be deleted after expiry of the limitation period for corresponding obligations to provide proof.

The newsletter, which is sent by email, contains references to graphics that are downloaded from our servers by your email programme when you open the newsletter. This reloading enables us to recognise whether and when the newsletter was opened by you. The same applies to any clicks on links in the newsletter e-mails. These are also processed by us.

We use this usage data to analyse reader interest in the individual articles. If you do not want us to be able to assign the usage data to your specific person, you should use an e-mail address that does not allow any conclusions to be drawn about your person when you subscribe to the newsletter.

Inxmail GmbH
Wentzingerstr. 17
79106 Freiburg
Freiburg, Germany

On our website you can register for the seminars we offer and request further information on seminars. All we need in the first step is your contact details, in particular your e-mail address.

The information you provide as part of the seminar enquiry/registration or information request will be used exclusively for this purpose. This includes, in particular, contacting you.

We will delete this data after your enquiry has been finally processed. There may be statutory retention obligations that prevent the deletion. This may be the case, for example, if a seminar booking is made. In this case, we will retain your data until the statutory retention obligations (e.g. under the German Value Added Tax Act or the German Commercial Code) cease to apply.

The legal basis for this processing is Art. 6 para. 1 lit. b GDPR.

You have the option of ordering products from us. To process your order, we process your name, address and e-mail address in addition to the selected product and quantity. You can also provide further voluntary information.

The legal basis for the processing of your data is Art. 6 para. 1 lit. b GDPR, the fulfilment of the contract. A contract can only be successfully concluded if you provide us with the necessary data.

We store your data as long as it is necessary for the fulfilment of the contract or statutory retention obligations prevent deletion.

If you apply to us electronically, i.e. by e-mail or via our web form, we collect and process your personal data exclusively for the purpose of handling the application process and for the implementation of pre-contractual measures.

If you apply via a career network such as LinkedIn Ireland Unlimited Company, Dublin, Ireland, or an application platform such as The Stepstone Group Deutschland GmbH, Düsseldorf, Germany, we will use the data you provide to us there.

Only authorised employees from the HR department and employees involved in the application process have access to your data. Personal data is stored exclusively for the purpose of filling the vacant position for which you have applied.

In particular, the following data is collected

• Name (first name and surname)
• e-mail address
• telephone number
• Channel, how you became aware of us

You also have the option of uploading informative documents such as a cover letter, your CV and references. These may contain further personal data such as date of birth, address, etc.

We do not subject your data to automated decision-making or profiling.

The legal basis for the processing of your data in the application context is § 26 BDSG in conjunction with Art. 6 para. 1 lit. b GDPR.

Your data will be stored for a period of 180 days after the end of the application process. This is done to fulfil legal obligations or to defend against any claims arising from legal regulations. We are then obliged to delete or anonymise your data. In this case, the data will only be available to us as so-called metadata without direct personal reference for statistical analyses (e.g. proportion of women or men in applications, number of applications per period, etc.).

The data transmitted as part of your application is transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers personnel administration and applicant management software (https://www.personio.de/impressum/). Personio is our processor in this context in accordance with Art. 28 GDPR. The basis for the processing is an order processing contract between us as the controller and Personio.

When you access a page with a social media widget, no connection is established with the platform operators. Only when you click on it will you be forwarded to the operator of the platform; no processing takes place on our part in this context, nor is any data stored; it is merely an external link.

For more information on data protection on social media platforms, you can consult their data protection notices. We use social media widgets from the following platforms:

• X
• Facebook
• Xing
• LinkedIn

Unless otherwise stated above in the individual processing operations, we do not use any automated decision-making.

Unless mentioned separately in the individual processing operations, we do not transfer any personal data to non-European countries within the scope of our website. The web servers we use are located in Germany.

Please note that for some of the services we use, data transfer to the USA by the service providers cannot be ruled out. Corresponding information can be found in the respective services concerned.

You are neither legally nor contractually obliged to provide us with personal data when using our website. However, our pages cannot be accessed without providing your IP address. A newsletter subscription is also only possible if you provide your e-mail address. The provision of personal data may be mandatory when concluding a contract.

Every data subject has the right of access under Art. 15 GDPR, the right to rectification and completion or supplementation under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR. The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure. There is also a right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). Furthermore, we are obliged to inform all recipients to whom data has been disclosed by us of any correction or deletion of data or the restriction of processing that takes place on the basis of Articles 16, 17 para. 1, 18 GDPR. However, this obligation does not apply if this notification is impossible or involves a disproportionate effort. Notwithstanding this, you have a right to information about these recipients.

If you wish to exercise a right to which you are entitled, please contact us as the controller using the contact details provided above or use one of the other ways offered by us to send us this information.

According to Art. 7 GDPR, you have the right to withdraw your consent at any time and without giving reasons. Please note that a revocation only applies to the future and does not affect the legality of processing carried out in the past.

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority for data protection, without prejudice to any other administrative or judicial remedy. This right exists in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

We reserve the right to change the security and data protection measures at any time. Please therefore note the latest version of this data protection notice.