Privacy Policy · VisiMatch - Delivering Connections

----------------

1 General information

The following declaration informs you about what kind of personal data is collected by us as the responsible body and for what purpose, and to what extent this data is made accessible to third parties.

1.1 Responsible body and data protection officer

VisiTrans GmbH
Technologiepark 20, 33100 Paderborn
Telefon: +49 (0) 30 577143890
E-Mail: info@visitrans.de

Data protection officer
Carola Sieling
Technologiewerft GmbH
c/o Kanzlei Sieling
Gurlittstraße 24
20099 Hamburg
E-mail: datenschutz@visitrans.de

1.2 Agreement between joint controllers

This website is provided jointly by the aforementioned companies, which use joint servers and IT services for this purpose and jointly determine the purposes and means of processing personal data. The companies are therefore deemed to be "joint controllers" within the meaning of Art. 4 No. 7 in conjunction with Art. 26 para. 1 sentence 1 GDPR.

We have stipulated in an agreement that the company named first is generally responsible for fulfilling our obligations under the GDPR, in particular with regard to the rights of data subjects and information obligations. In more specific individual cases, another company may be responsible if it is most closely associated with the process in question.

You can of course address any concerns relating to data protection and your rights as a data subject to any of our companies or your respective contact persons and/or our data protection officer.

1.3 Legal basis for the processing of your personal data

The processing of personal data requires a legal basis, which we would like to present to you below.

Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data for which we obtain the consent of the data subject.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also includes processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6(1)(f) GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities as well as in the analysis, optimization and maintenance of the security of our online offer.

1.4 Rights of the data subject

You have a right to information about the personal data we have stored about you. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

In accordance with the statutory provisions, you also have the right to rectification of inaccurate data, restriction of processing, data portability and erasure of your personal data. To do so, please send us an e-mail with the subject line "Data protection";

You also have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that the processing of your personal data violates the statutory provisions.

For reasons arising from your particular situation, you may object at any time to the processing of personal data concerning you by us, which is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions (Art. 21 GDPR). If the legal requirements are met, we will then no longer process your personal data.

In the case of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If you object, your personal data will no longer be processed for these purposes;

If you have given your consent, you have the right to withdraw your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. 

We do not currently carry out automated decision-making, including profiling.

If you exercise one of the aforementioned rights as a data subject, we will process your personal data collected in this context to respond to your request. The processing of your personal data is carried out to fulfill a legal obligation.

In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing this data that outweigh your interests, rights and freedoms or your personal data is used to assert, exercise or defend legal claims.

1.5 Storage duration of personal data

Unless we have provided storage information on the specific points, the following applies: We store personal data for the duration of the respective statutory retention period or as long as the purpose of the collection exists. After the retention period has expired, the data is routinely deleted, unless there is a need to initiate or fulfill a contract. If the user's data is not deleted because it is required for other and legally permissible purposes, its processing is restricted as far as possible. Accordingly, the data is blocked where possible and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.

2 Contractual processing

When you enter into a contractual relationship with us or make an inquiry, we generally collect the following data: Title, first and last name, e-mail address, address, telephone/mobile phone number, information necessary for the execution and initiation of the contract.

We require this data so that we can identify you as a contractual partner, execute the contract, contact you and for invoicing purposes. The data processing is carried out at your / our request or order and is necessary for the purposes mentioned for the mutual fulfillment and obligation arising from the contractual relationship.

We may also process data on the basis of a legitimate interest, e.g. in the assertion of or defense against claims arising from the contractual relationship. The personal data collected will be stored until the end of the contractual relationship and then deleted, unless we are obliged to store it for a longer period in accordance with statutory obligations under tax and commercial law retention and documentation obligations (from HGB, StGB or AO).

We use the data of our (future) contractual partners and employees (first name, surname and, if applicable, address) to carry out comparisons against so-called sanctions lists. Sanctions lists are centrally compiled and maintained lists of persons, associations or companies against whom state economic or legal restrictions have been imposed. Various regulations oblige us to take measures to prevent support for business partners, suppliers and also our (potential) employees if they are included on the lists. We only use the data to ensure that these persons are not included on any of the sanctions lists. We need this information in order to fulfill our legal obligations and avert possible sanctions. This is also in our legitimate interest.

3 Application data

When you apply for a job with us, we receive data from you. We process the data that you have sent us in connection with your application in order to check your suitability for the position and to carry out the application process. Please note that your data will be accessible to our HR department and the relevant departments for the position to be filled. For data protection reasons, please ensure that you only provide the data required for the application. The legal basis for the processing of your personal data in application procedures is Section 26 BDSG and Art. 6 para. 1 b) GDPR. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted. Should the data be required for legal prosecution after completion of the application process, data processing may be carried out on the basis of the requirements of Art. 6 para. 1 lit. f) GDPR to safeguard legitimate interests. Our interest then lies in the assertion of or defense against claims;

Applicant data will be deleted after 6 months at the latest in the event of rejection. In the event that you have consented to further storage of your personal data, we will transfer your data to our applicant pool. There the data will be deleted after two years. If you have been accepted for a position as part of the application process, the data will be stored permanently for the purpose of implementing the employment relationship. You can change or delete your application at any time and revoke any consent you may have given at any time.

4 Data processing in the context of the website

4.1 Log-files, Hosting

The server statistics automatically store data that the browser transmits to us as part of our legitimate interest in analysis and for security reasons (so-called "log files").

This is the following data in detail:

Language and version of the browser software
Operating system used and its interface
Referrer URL (the previously visited page)
Host name of the accessing computer (IP address)
Date and time of the server request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Amount of data transferred
Access status/ HTTP status code

As a rule, we cannot assign this data to specific persons. This data is not merged with other data sources. The data is also deleted within 7 days after a statistical evaluation. Data whose further retention is required for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

We make use of hosting services. These are used to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services in order to maintain the operation of this online offering;

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer.

4.2 Contact us

When you contact us by e-mail or via a contact form, your details will be stored by us in order to answer your questions.

Your data will not be passed on to third parties unless applicable data protection regulations justify a transfer or we are legally obliged to do so. You can revoke your consent at any time with effect for the future. In the event of revocation, your data will be deleted immediately, unless there is a legal exception for further processing. Your data will otherwise be deleted once we have processed your request or the purpose of storage no longer applies and there are no other legal exceptions to the contrary. 

4.3 Cookies

Cookies are small text files that are stored on your end device and through which certain information flows to the place that sets the cookie. They are used to make the website more user-friendly and effective and/or to make it easier for you to navigate our website;

We only set cookies that are not absolutely necessary with your consent. You can revoke this consent for future use at any time. 

Consent is voluntary and you can also use our website without accepting cookies. You can also configure your browser settings according to your wishes and, for example, refuse to accept third party cookies or all cookies or delete cookies that have already been saved. If you do not accept cookies, please note that our website may not function properly in this case. Unless we provide other information on the individual topics mentioned in this privacy policy or in the cookie banner, the lifespan of cookies is 24 months.

You can find out which function on our website sets cookies in the individual function descriptions in our privacy policy and in the cookie banner.

4.4 Registration

Our website offers a registration and login option. The personal data entered during registration will be transmitted to the controller. The data is stored by us exclusively for internal use.

When logging in, the user's IP address and the date and time of login are stored. This serves to prevent misuse of the services. The data is not passed on to third parties. An exception is made if there is a legal obligation to pass on the data.

The registration of data is necessary for the provision of content or services. Registered persons have the option of having the stored data deleted or amended at any time. The data subject can obtain information about the personal data stored about them at any time.

5 Information for interested parties

If you, as our contractual partner, have concluded a contract for our services, we will offer you further information about our own similar services via the e-mail address sent to you when the contract was concluded (Section 7 III UWG). You may object to this transmission at any time. 

These mailings are sent on the basis of our legitimate interest in advertising.

6 Forwarding of the data: General and contractual purpose

We pass on data to third parties if this is necessary for the fulfillment of the contract and / or if we are legally obliged and / or entitled to do so in individual cases. The data is typically passed on to contracted service providers, including hosting, operation, maintenance and support of IT systems, communication systems and disposal under certain circumstances. In addition, your data may also be transmitted to postal or delivery services, your bank, tax consultants/auditors and lawyers.

7 Forwarding of the data: Tools as part of the operation of the website and online services

In some cases, we use external service providers within the scope of your consent or our legitimate interests with regard to analysis, optimization and economic operation of the online offer. If you have given your consent for tools that are not necessary for the operation of the website, you can have these settings changed again at any time. We list our service providers below.

If your data is to be used for other purposes, we will inform you in advance and only use the data if you have expressly given your further consent to this in advance;

7.1 Matomo with Cookie-Tracking

This website uses Matomo, an open source software for the statistical analysis of visitor access. The Matomo analysis tool uses so-called "cookies", which are text files that are stored on your computer and enable your use of our website to be analyzed. The information generated by the cookie about your use of this website is stored on our server in Germany. This site uses Matomo with the extension "AnonymizeIP". This means that IP addresses are further processed in abbreviated form, so that direct personal references can be ruled out;

You can revoke your consent to the use of cookies at any time in our cookie settings or by contacting us or prevent the installation of cookies by setting your browser software accordingly. You can also obtain information from the third-party provider on data protection at https://matomo.org/privacy-policy/

If you no longer agree to the storage and analysis of the usage information generated, you can also object to this.

7.2 Cookiebot

This website uses the Cookiebot tool from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, to inform you about the cookies used on our website and to obtain your consent to the use of cookies. A permanent cookie called "CookieConsent" is stored in your browser to store your consent.

The following data is automatically logged by Usercentrics:

IP number of the end user in anonymized form (the last three digits are set to '0')
Date and time of consent
User agent of the end user's browser
URL from which the consent was sent
An anonymous, random and encrypted key
Consent status of the end user, which serves as proof of consent

The information generated by the cookie is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym. The data collected by Usercentrics is stored on servers within the EU.

If you do not agree to the storage of this data, you can object to the storage by the cookie banner at any time. In this case, a so-called opt-out cookie will be stored in your browser, which means that Cookiebot will only provide cookies for the technically error-free and optimized provision of the website. Please note that the complete deletion of your cookies means that the opt-out cookie will also be deleted and may have to be reactivated by you. Further information can be found at https://www.cookiebot.com/de/privacy-policy/.

7.3 Friendly Captcha

To protect against misuse, we use the "Friendly Captcha" identification service on our website. This service is provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany. The query with Friendly Captcha serves to distinguish whether the entries in the website form are made by a human or abusively by automated machine processing;

You can avoid the corresponding data collection by not using the function. We have integrated a program code from Friendly Captcha into our website, for example for contact forms, so that the visitor's end device can establish a connection to Friendly Captcha's European servers in order to verify the human input by Friendly Captcha. Depending on the result, we can assign security rules to requests via our website and thus, for example, process or reject them. The data is used exclusively to protect against spam and bots as described above. Friendly Captcha does not set or read any cookies on the visitor's end device. IP addresses are only stored in hashed, i.e. one-way encrypted form and do not allow us or Friendly Captcha to draw any conclusions about an individual person.

8 Data storage outside the EU/EEA

Where indicated in the individual tool descriptions, we use tools from US third-party providers. Insofar as this is necessary for the purposes communicated, your IP address may be processed outside the European Economic Area, where a level of data protection corresponding to the European standard is not always consistently guaranteed and confirmed (e.g. by a suitable guarantee within the meaning of Art. 46 GDPR or an adequacy decision of the European Commission). In particular, it cannot therefore be ruled out that security authorities in a third country may gain access to your IP address without you being able to take effective legal action against this.

The IP address is transmitted to these third-party providers in accordance with Art. 49 para. 1 lit. a GDPR on the basis of your express consent given in the consent banner. This consent is voluntary. You can revoke it at any time with effect for the future. This will not result in any disadvantages for you;

In the opinion of some US third-party providers, a level of protection corresponding to the European standard is already guaranteed due to the conclusion of so-called standard contractual clauses and additional measures taken in accordance with the Schrems II case law. However, as the suitability of such measures to guarantee an adequate level of data protection is disputed, we have decided to transmit your IP address exclusively with your consent.

The certification of some companies under the Data Privacy Framework (DPF) serves to ensure the level of protection and can be requested here for the companies: https://www.dataprivacyframework.gov/s/ . This certification is sufficient as a measure to ensure an adequate level of data protection;

9 Our presence in social media

You can find us under online presences within social networks and platforms. We would like to use these presences to communicate with our customers, interested parties and users active there and to inform them about our services and our company in this way;

The processing of the personal data of the users active there is based on our legitimate interests in communicating and providing information to and with the users. If users have given their consent to data processing within the framework of the respective social platform, the processing is carried out on the basis of this consent. 

If you visit one of our social media sites, we are jointly responsible with the operator of the social platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint, see the following point "Rights of the data subject") both against us and against the operator of the respective social platform.

We would like to point out that, despite the joint responsibility, we do not have full influence on the data processing operations of the social platform and may forward the rights request to the respective operator in order to better process the rights of the data subject. Our options generally depend on the company policy of the respective provider.

You can find our information on storage below. We have no influence on the storage period of your data that is stored by the operator of the social platform for its own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Depending on the social platform named below, user data processing may also take place outside the European Union. EU standard contractual clauses have been agreed with the US companies or they are certified under the Data Privacy Framework (DPF), so that we have taken possible measures to ensure compliance with European data protection law.

As a rule, user data is processed by the platforms for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies are usually stored on the user's computer, in which the user's usage behavior and interests are stored. Data can also be stored in the user profiles independently of the devices used by the users. This occurs in particular if the users are members of the respective platforms and are logged in to them.

For a detailed description of the respective processing and the possibilities of objection, we refer to the following linked information from the providers.

9.1 LinkedIn

(LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland)

Privacy policyhttps://www.linkedin.com/legal/privacy-policy

Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

9.2 Xing

(New Work SE, Am Strandkai 1, 20457 Hamburg)

This privacy policy was provided by Technologiewerft GmbH.