General information about the processing of your data
We are obliged by law to inform you about the processing of your personal data (hereinafter referred to as “data”) when you use our website. We take the protection of your personal information very seriously. This data protection notice informs you about the details of the processing of your data and about your legal rights in this regard. For terms such as “personal data” and “processing”, the legal definitions pursuant to Art. 4 GDPR apply. We reserve the right to adapt the privacy policy with future effect, in particular in the event of further development of the website, the use of new technologies or changes to the legal bases or the corresponding case law. We recommend that you read this privacy policy from time to time and take a printout or a copy for your records.
Scope
This privacy policy applies to all pages of www.promecon.com/de. It does not cover any linked websites of other providers.
Responsible provider
The following party is responsible for the processing of personal data within the scope of this privacy policy:
PROMECON
process measurement control GmbH
Steinfeldstraße 5
39179 Barleben
Tel.: +49 (0)39203 5120
Fax: +49 (0)39203 512202
Email: Esta dirección de correo electrónico está siendo protegida contra los robots de spam. Necesita tener JavaScript habilitado para poder verlo.
Any data subject may, at any time, contact our Data Protection Officer directly with all questions and suggestions concerning data protection.
Questions about data protection
Spirit Legal LLP Rechtsanwälte
Attorney-at-law and data protection officer
Peter Hense
Postal address:
Data protection officer
c/o PROMECON, Steinfeldstraße 5, 39179 Barleben
Security
We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, abuse, loss and other external disruption. To this end, we regularly review our security measures and adapt them to current standards.
Your rights
- Right of access: You can request access to the personal data concerning you which we process, as set forth in Art. 15 GDPR.
- Right to rectification: If the information concerning you is not (or no longer) correct, you can request its rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
- Right to erasure: You may request the erasure of your personal data in accordance with Art. 17 GDPR.
- Right to restriction of processing: Pursuant to Art. 18 GDPR, you have the right to demand that the processing of your personal data be restricted.
- Right to object to processing: Pursuant to Art. 21(1) GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data which occurs based on Art. 6(1) Sentence 1(e) or (f) GDPR. If you object, we will not process your data further, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or, moreover, the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). Furthermore, under Art. 21(2) GDPR you have the right to object at any time to the processing of your personal data for direct marketing purposes, which includes profiling to the extent that this is related to such direct marketing. In this privacy policy, we draw your attention to this right to object when describing each processing operation.
- Right to withdraw your consent: If you have given your consent for processing, you have a right to withdraw that consent under Art. 7(3) GDPR.
- Right to data portability: You have the right to receive the personal data you have given us in a structured, commonly used, machine-readable format (“data portability”) and the right to transfer this data to another controller, if the prerequisites of Art. 20(1)(a), (b) GDPR are fulfilled (Art. 20 GDPR).
If you believe that the processing of your personal data violates data protection law, then under Art. 77 GDPR you also have the right to lodge a complaint with a data protection supervisory authority of your choice.
Using our website
• Browser type / browser version
• Operating system used
• Date and time of access
• IP address
• Access status / HTTP status code
• Websites accessed via the website
• Referrer URL (website visited before)
• Notification of whether the access was a success
• Time zone difference from GMT
• Volume of data transferred.
It is necessary for this data to be processed temporarily in order to make it technically possible for you to visit our website and to deliver the website to your device. The access data is not used to identify individual users and is not combined with other data sources. The legal basis for the processing is Art. 6(1) Sentence 1(f) GDPR. We have legitimate interests in ensuring the functionality, integrity and security of the website. The access data will be erased as soon as it is no longer required for achieving the purpose of its processing. In the case of recording the data to provide the website, this is the case when you end your visit to the website.
You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. You may send us your objection using the contact details specified under “Responsible provider” above.
Cookies
Technically necessary cookies
• Language settings
• Items in shopping basket
• Log-in information.
The user data collected by technically necessary cookies is not processed to create user profiles. We also use session cookies, which store a session ID that can be used to assign various requests from your browser to the shared session. Session cookies are required for using the website. In particular, they enable us to recognise the device used when you return to the website. The legal basis of this processing is Art. 6(1) Sentence 1(f) GDPR. Our legitimate interests in the processing lie in providing the aforementioned special functionality and thereby making the use of our website more attractive and effective. The session cookies are erased as soon as you log out or, depending on which browser you are using and your browser settings, when you close the browser.
You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. You can prevent data processing based on cookies as follows: by deactivating or restricting or deleting cookies in your browser settings, or by opening your browser in “private mode”.
Technically non-essential cookies
• Entered search terms
• Frequency of page views
• Use of website functions.
The legal basis of this processing is your consent: Art. 6(1) Sentence 1(a) GDPR. Technically non-essential cookies are either automatically deleted after a specified period of time, which may vary depending on the type of cookies used, or are deleted after you withdraw your consent. Where we integrate cookies from third-party providers into our website, we point this out to you separately below.
You can withdraw your consent at any time by clicking on the button for the tool in the privacy settings. If you exercise your right of withdrawal, this does not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal. xxx
Usercentrics consent management platform
The legal basis for this processing is Art. 6(1) Sentence 1(f) GDPR. Our legitimate interests in this processing lie in the storage of users’ settings and preferences with regard to the use of cookies and other features. Usercentrics stores your data for as long as your user settings are active, usually for 360 days. After this period, a new request for consent will be made. Your user settings will then be saved again for the same period.
You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. You can prevent data processing based on cookies as follows: by deactivating or restricting or deleting cookies in your browser settings, or by opening your browser in “private mode”.
Contacting our company
You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. You may send us your objection using the contact details specified under “Responsible provider” above.
Processing for contractual purposes
Your personal data will be passed on to third parties if
- it is necessary for the creation, execution or termination of legal transactions with our company (e.g. when transmitting data to a payment service provider/a shipping company to process a contract with you) (Art. 6(1) Sentence 1(b) GDPR), or
- a subcontractor or party we use to perform our obligations, which we use exclusively within the framework of providing the offers or services requested by you, needs this data (unless you are expressly informed otherwise, such auxiliary parties are only entitled to process the data insofar as this is necessary for the provision of the offer or service), or
- there is an enforceable official order (Art. 6(1) Sentence 1(c) GDPR), or
- there is an enforceable court order (Art. 6(1) Sentence 1(c) GDPR), or
- we are legally obliged to do so (Art. 6(1) Sentence 1(c) GDPR), or
- the processing is necessary in order to protect the vital interests of the data subject or another natural person (Art. 6(1) Sentence 1(d) GDPR), or
- this is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6(1) Sentence 1(e) GDPR), or
- we can cite our overriding legitimate interests, or those of a third party, in the disclosure (Art. 6(1) Sentence 1(f) GDPR).
Online application process
When you apply, we process the following personal data, which is necessary and obligatory for the online application process:
- Personal master data (e.g. salutation, title, first name and last name, name supplements, gender, nationality, marital status, salary group if applicable)
- Contact details (e.g. private address, email address, (mobile) phone number)
- Qualification data (e.g. career, professional activities, assessments, references, certificates, qualifications, further education and training)
- Information about your education and training (e.g. your school or training institution, your main subject, your specialisation, your degree, your grades and the date of your degree)
- If applicable, your application photo
- If applicable, special categories of personal data pursuant to Art. 9(1) GDPR (e.g. trade union membership, biometric data, health data (e.g. the degree of disability))
- Other data that you have transmitted to us in connection with your application.
Individual purposes and legal bases
- We process your personal data for the purpose of exercising rights or fulfilling legal obligations arising from employment law, unless there is reason to believe that this is outweighed by your legitimate interest in the data not being processed. The legal basis for this processing is Art. 9(2)(b) GDPR in conjunction with Sect. 26(3) Sentence 1 BDSG.
- For the purpose of assessing your working capacity, we will process your health data, provided that you are offered employment as a result of the application process. The legal basis for the processing is Art. 9(2)(h) GDPR in conjunction with Sect. 22(1) No. 1(b) BDSG.
For statistical purposes, we keep a record – without reference to specific applicants – of the number of applications received over time, the time of each application’s submission, and the processing time from receipt of the application to acceptance or rejection. The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR. We have a legitimate interest in optimising our application management.
You may object to the processing described if you have legitimate reasons arising from your particular situation. You can exercise your right of objection by sending us a message via the contact details provided under “Responsible provider” above.
Should we require the data after the application process has ended, for the pursuit of legal claims or for defence in legal disputes, processing may be carried out to safeguard legitimate interests pursuant to Art. 6(1) Sentence 1(f) GDPR. In such cases, we have a legitimate interest in asserting or defending claims. If health data is involved, the legal basis is Art. 9(2)(f) GDPR.
You may object to the processing described if you have legitimate reasons arising from your particular situation. You can exercise your right of objection by sending us a message via the contact details provided under “Responsible provider” above.
Storage period
Recipients, persons with access
Service provider HRworks GmbH
HRworks acts as our processor and is contractually limited in its authority to use your personal data for purposes other than to provide services to us in accordance with the applicable data processing agreement.
The legal basis for the data processing is Art. 6(1) Sentence 1(f) GDPR. Our legitimate interests in using HRworks lie in optimising our application process, improving our range of services, and making our online application portal and the application process itself more attractive and applicant-friendly.
For further information about the protection of your data and how long HRworks stores your data, please refer to https://www.hrworks.de/unternehmen/datenschutz/ and https://www.hrworks.de/en/features/candidate-management-system/.
You may object to the processing described if you have legitimate reasons arising from your particular situation. You can exercise your right of objection by sending us a message via the contact details provided under “Responsible provider” above.
Talent pool
You can withdraw your consent to the further processing of your applicant data at any time. You can submit your withdrawal to us using the contact details provided under “Responsible provider” above. This will not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.
Compliance screening
The legal basis of the processing is Art. 6(1) Sentence (1)(e) and (3) Sentence (1)(a) GDPR in conjunction with Regulation (EC) No. 2580/2001 and Regulation (EC) No. 881/2002, insofar as the processing is necessary for the performance of a task carried out in the public interest, or Art. 6(1) Sentence 1(f) GDPR. We have legitimate interests in fulfilling legal requirements and obligations to combat terrorism and avoiding liability and sanction risks for our company. We store the results of the compliance screening for a maximum period of twelve months in the case of employee screening, and for a maximum period of six months in the case of applicants.
To carry out the comparison we use the software “ID.prove”, which is provided by Rausoft GmbH (Böblinger Straße 25, 71229 Leonberg, Germany). For this purpose, ID.prove processes your first and last name on our behalf in order to automatically compare this information with the current version of the sanctions lists. Once this process is complete, ID.prove informs us of the result of the compliance screening, so that we can document this in our HR administration system. The legal basis for the processing of data by ID.prove is Art. 6(1) Sentence 1(f) GDPR. We have legitimate interests in improving our range of services and avoiding liability and sanction risks for our company. For further information about data protection, please refer to https://www.idprove.de/index.php?option=com_content&view=article&id=18&Itemid=30 and https://www.idprove.de/index.php?option=com_content&view=article&id=28&Itemid=0.
You may object to the processing described if you have legitimate reasons arising from your particular situation. You can exercise your right of objection by sending us a message via the contact details provided under “Responsible provider” above.
Email marketing
We reserve the right to use the email address you provide when ordering in accordance with the statutory provisions in order to send you the following content by email at the time of or after your order, unless you have already objected to this processing of your email address:
- Interesting offers from our portfolio, especially about industry-specific products
- New offers involving our products and services
- Information about company events
- Information about our catalogues
- Technical information
- Customer feedback queries.
We would like to point out that you can object to receiving direct marketing and to the processing of the data for direct marketing purposes at any time without incurring any costs other than the transmission costs according to the basic rates. Here you have a general right of objection without giving reasons (Art. 21(2) GDPR). To do this, click on the unsubscribe link in the relevant email or send us your objection to the contact details provided under “Responsible provider”.
Newsletter
- Offers from our portfolio
- Information about company events
- New offers involving our products and services
- Special/time-limited offers
- Offers and events of third parties, especially our partners.
The legal basis for the processing is Art. 6(1) Sentence 1(a) GDPR.
You can withdraw your consent to the processing of your email address for the purpose of sending you the newsletter at any time, either by sending us a message using the contact details provided under “Responsible provider” above or by clicking directly on the unsubscribe link in the newsletter. This will not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.
Double opt-in procedure
This is how we ensure that you really want to receive our email newsletter.
We are legally obliged to be able to demonstrate that you have consented to the processing of your personal data in connection with registering for the newsletter (Art. 7(1) GDPR). Due to this legal obligation, this data processing is carried out on the basis of Art. 6(1) Sentence 1(c) GDPR. You are not obliged to provide your personal data during the registration process. However, if you do not provide the required personal data, we may not be able to process your subscription or process it in full. If you do not confirm your newsletter subscription within 24 hours, we will block the information transmitted to us and erase it automatically after one month at the latest.
Once you confirm your registration, we will process your data for as long as you have subscribed to the newsletter.
Establishment, exercise or defence of legal claims
You may object to the processing described if you have legitimate reasons arising from your particular situation. You can exercise your right of objection by either sending us a message using the contact details provided under “Responsible provider” above or by clicking directly on the unsubscribe link in the newsletter.
Opt-out list
The legal basis for the data processing is Art. 6(1) Sentence 1(c) GDPR, in order to comply with our obligations to provide evidence, and failing this, Art. 6(1) Sentence 1(f) GDPR. In this case, we have a legitimate interest in complying with our legal obligations to make sure that we stop sending you newsletters.
You may object to the processing described if you have legitimate reasons arising from your particular situation. You can exercise your right of objection by sending us a message via the contact details provided under “Responsible provider” above.
Statistical analyses and reach measurement
The legal basis of this processing is your consent (Art. 6(1) Sentence 1(a) GDPR).
You can withdraw your consent to the processing of your email address for the purpose of sending you the newsletter at any time, either by sending us a message using the contact details provided under “Responsible provider” above or by clicking directly on the unsubscribe link in the newsletter. This will not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.
Newsletter2Go email marketing service
Newsletter2Go acts as our external processor and is contractually restricted in its authority to use your personal data for purposes other than to provide services to us in accordance with the applicable data processing agreement.
The legal basis of the processing is Art. 6(1) Sentence 1(f) GDPR. Our legitimate interest in using an external email marketing service lies in the optimisation and more targeted control and monitoring of our newsletter content.
For more information, including on the storage period, please refer to the Newsletter2Go privacy policy at https://www.newsletter2go.de/datenschutz/ as well as https://hilfe.newsletter2go.de/?_ga=2.268559921.1383479931.1583849133-1018654755.1583849133.
You may object to the processing described above if you have legitimate reasons arising from your particular situation. You can exercise your right of objection by either sending us a message using the contact details provided under “Responsible provider” above or by clicking directly on the unsubscribe link in the newsletter.
A/B Testing
The legal basis of the processing of your data for A/B testing is Art. 6(1) Sentence 1(f) GDPR. By conducting A/B testing, we pursue our legitimate interests of analysing the reach and efficiency of our services and ads, continuously improving them and making them more attractive for you as a user. The information is processed for as long as you have subscribed to the newsletter. Once you unsubscribe, we process the data for purely statistical purposes and anonymously.
For more information, including on the storage period, please refer to the Newsletter2Go privacy policy at https://www.newsletter2go.de/datenschutz/ as well as https://hilfe.newsletter2go.de/?_ga=2.268559921.1383479931.1583849133-1018654755.1583849133.
You may object to the processing described if you have legitimate reasons arising from your particular situation. You can exercise your right of objection by sending us a message via the contact details provided under “Responsible provider” above.
Requests for information material
- Recipient’s name
- Address
- Recipient’s function
- Contact details (e.g. email address, telephone number).
If it is necessary to send you the information material by post, we will also forward your data to the relevant shipping company. The processing is carried out in order to fulfil the aforementioned purposes both within and outside the European Union. We erase the data as soon as storage is no longer necessary or, if statutory retention obligations apply, restrict processing of the data. Due to mandatory commercial and tax regulations, we are obliged to keep your address, payment and order data for a period of ten years. Two years after termination of the contract, we will restrict the processing and reduce the processing to compliance with our existing legal obligations. As far as the information material contains advertising content that goes beyond pure information provided for the potential conclusion of a contract, the legal basis of this is Art. 6(1) Sentence 1(f) GDPR. We have a legitimate interest in processing for the purpose of direct marketing. In order to fulfil the aforementioned purposes, your data may be passed on to the respective sales partners in the countries of our sales partner network responsible for you. The processing takes place both inside and outside the European Union. Unless you object to processing for advertising purposes, we will erase your data no later than two years after you request the information material.
We would like to point out that you can object to receiving direct marketing and to the processing of the data for direct marketing purposes at any time without incurring any costs other than the transmission costs according to the basic rates. Here you have a general right of objection without giving reasons (Art. 21(2) GDPR). Please send us your objection to the contact details specified under “Responsible provider” above.
Downloading white papers
Hosting
You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. You may send us your objection using the contact details specified under “Responsible provider” above.
Integration of third-party content
Google Tag Manager
Integration of YouTube
Our website uses interfaces from the video platform "YouTube.de" or "YouTube.com", a service provided by YouTube LLC (head office at 901 Cherry Avenue, San Bruno, CA 94066, US; hereinafter referred to as YouTube), for which Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001) is responsible as the controller under data protection law, which means that Google processes your data. The purpose of this is to integrate visual content ("videos") on the website that we have published on "YouTube.de"/"YouTube.com". When the streaming feature is used, information is also processed which is stored on your device (e.g. IP address). The videos are embedded in "extended privacy mode", which means that no data about you as a user will be transferred to YouTube if you do not play the videos. When videos are played on our website, Google receives the information that you have retrieved the corresponding page of our website. In addition, some of the data mentioned under "Using the website" is transmitted to Google. This occurs regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your Google profile, you must log out before activating the button. YouTube stores your data as usage profiles and processes it, regardless of whether you have a Google account, for the purposes of advertising, market research and/or the demand-oriented design of its website.
The legal basis of the processing of your data is your consent pursuant to Art. 6(1) Sentence 1(a) GDPR. Google also processes your personal data in the US. The EU Commission has not issued an adequacy decision for data transfers to the US. The legal basis of the transfer to the US is your consent pursuant to Art. 49(1) Sentence 1(a) GDPR. For more information about the purpose and scope of data processing and how long YouTube stores such data, please refer to https://policies.google.com/privacy.
You can withdraw your consent to the processing and transfers to third countries at any time, either by sending us a message using the contact details provided under Responsible provider or by disabling the checkbox for YouTube in the "Select trackers" section of the consent tool. This does not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.
Services for statistical, analysis and marketing purposes
Google Analytics
In order to tailor our website perfectly to user interests, we use Google Analytics, a web analytics service from Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001). Google Analytics uses cookies (see "Cookies" above), which are stored on your device. Google uses the cookies to process the information generated about the use of our website by your device – e.g. the fact that you have visited a certain page – and processes, among other things, the data mentioned under "Using our website", in particular your IP address, browser information, the website visited before and the date and time of the server request, for the purpose of statistical analysis of how people use our website. For this purpose, it is also possible to determine whether different devices belong to you or to your household. This website uses Google Analytics with the "anonymizeIp()" extension. This shortens IP addresses before they are processed, in order to make it much more difficult to identify individuals. According to Google, your IP address is shortened beforehand within member states of the European Union. Only in exceptional cases will the full IP address be transferred to a Google server in the US and shortened there. On our behalf, Google will process this information for the purpose of evaluating your use of this website, compiling reports for us on website activity, and – where we point this out separately – providing us with other services relating to website usage. Google will not associate the IP address transmitted by your browser for these purposes with any other data held by Google. The legal basis of this processing is your consent under Art. 6(1) Sentence 1(a) GDPR. Google also processes the data in part in the US. The EU Commission has not issued an adequacy decision for data transfers to the US; the legal basis for transfers to the US is your consent under Art. 49(1) Sentence 1(a) GDPR. Your data processed in connection with Google Analytics will be erased after 14 months at the latest. For further information about privacy at Google, please refer to: http://www.google.de/intl/en/policies/privacy.
You can withdraw your consent to the processing and transfers to third countries at any time by disabling the checkbox in the "Select trackers" section of the consent tool. This does not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.
Google Analytics Advertising
We also use the web analytics service Google Analytics with the marketing function Google Analytics Advertising, which is provided by Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, US). To this end, Google Analytics Advertising uses technologies such as cookies, tracking pixels and device fingerprinting to track specific user behaviour on websites. This involves processing information that is stored on users' devices. Google uses the tracking pixels embedded in websites and the cookies stored on users' devices to process the information generated about the use of our website by users' devices and access data for the purpose of statistical analysis – e.g. the fact that a specific website has been accessed or the user registered for newsletters – and for the purpose of displaying personalised ads on this basis. For these purposes, it is also possible to determine whether different devices belong to you or to your household. With the additional Google Analytics Advertising function, it is possible to create target groups for certain cookies or mobile advertising IDs and reuse them later on for targeted personalised advertising. Target group criteria may include but are not limited to: users who have viewed products but not added them to a shopping cart or have added them to a shopping cart but not completed the purchase; or users who have purchased certain items. A target group comprises at least 100 users. With the help of the Google Ads tool, interest-based ads can then be displayed in search results. In this way, it is possible to recognise users of websites on other websites within the Google advertising network (in Google Search or on YouTube, so-called Google Ads, or on other websites) and present them with ads tailored to the specified target group criteria. Ads may also refer to products and services that users have already viewed on our website. Access data includes in particular the IP address, browser information, the website visited before and the date and time of the server request. Google Analytics is used with the "anonymizeIp()" extension. This shortens IP addresses before they are processed, in order to make it more difficult to identify individuals. Due to the use of the Google Analytics Advertising tool the user's browser automatically establishes a direct connection to the Google server. If a user is registered with a Google service, Google can associate the visit with the user's account and create and evaluate user profiles across applications. The legal basis of this processing is your consent under Art. 6(1) Sentence 1(a) GDPR. Google also processes the data in part in the US. The EU Commission has not issued an adequacy decision for data transfers to the US; the legal basis for transfers to the US is your consent under Art. 49(1) Sentence 1(a) GDPR. Your data processed in connection with Google Analytics will be erased after 14 months at the latest. For further information about privacy at Google, please refer to: http://www.google.de/intl/en/policies/privacy.
You can withdraw your consent to the processing and transfers to third countries at any time by disabling the checkbox in the "Select trackers" section of the consent tool. This does not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.