1. General Declaration
2. Name and Address of the data protection officer
3. Definition of personal data
4. Collection of anonymized data/Log files/IP Addresses
5. Purpose of data collection
6. Rights of data subjects
7. Deleting or blocking of data
9. SSL encryption
10. Subscribing to the newsletter
11. Google Analytics
12. Google Search Console
13. Google Tag Manager
14. Usage of Google Maps
15. Usage of Google Fonts
16. Embedded YouTube videos
17. Usage of Facebook
18. Usage of LinkedIn
19. Usage of Xing
20. Contact via email
21. Data protection during application process
1. GENERAL DECLARATION
Collecting personal data happens on a voluntary basis if possible. We will also only pass this data to third-parties if we receive your explicit consent. We provide high security for especially confidential data by using SSL encryption. Nevertheless we do not want to fail to point out the general dangers of using the internet on which we do not have any influence. Especially when communicating via email personal data is not always secure and without special precautions could possibly be captured by third-parties.
2. NAME AND ADDRESS OF THE DATA PROTECTION OFFICER
Name of the data protection officer:
For questions regarding data protection, please contact us via the following contact details:
3. DEFINITION OF PERSONAL DATA
Personal data in the meaning of GDPR is all information that refers to an identified or identifiable natural person. A natural person is considered identifiable if he or she can be directly or indirectly identified by assigning an identifier such as name, ID number, location data or online ID, or if he or she can be identified by one or more special features that reveal the physic, physiologic, genetic, psychologic, economic, cultural or social identity. This personal data will only be collected if it is required in order to fulfill contracted services, for compliance with legal requirements or for one of the purposes mentioned in the following.
4. COLLECTION OF ANONYMIZED DATA/LOG FILES/IP ADDRESSES
Our website collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be the browser types and versions used, the operating system used by the accessing system, the website from which an accessing system reaches our website (so-called referrers), the sub-websites, the date and time of access to the Internet site, an Internet protocol address (IP address), the Internet service provider of the accessing system, and any other similar data and information that may be used in the event of attacks on our information technology systems.
When using these general data and information, we do not draw any conclusions about the data subject. Rather, this information is needed to deliver the content of our website correctly, optimize the content of our website, ensure the long-term viability of our information technology systems and website technology, and provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, we analyze anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
5. PURPOSE OF DATA COLLECTION
6. RIGHTS OF DATA SUBJECTS
Through the above mentioned contact data of our privacy officer you can exercise the following rights at any time: disclosing your stored personal data and its purpose for processing, correcting incorrect personal data, deleting stored data, restricting the processing of personal data if we are not allowed to delete it yet in order to fulfill legal requirements, objecting the processing of personal data, withdrawing previously given consent to process data.
7. DELETING OR BLOCKING OF DATA
By means of a cookie, the information and offers on our website can be optimized with the user in mind. Cookies allow us, as previously mentioned, to recognize our website users. The purpose of this recognition is to make it easier for users to utilize our website.
You may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.
9. SSL ENCRYPTION
To ensure the highest possible security for the transmission of your data between your web browser and our internet system we use the Secure Socket Layer (SSL) encrypting technology. SSL enables an encrypted transfer of documents via the internet between web browser and web server. The URL of a website with SSL connection to your browser starts with https://.
If your current browser is not SSL-enabled you can download the most up-to-date version for the two most popular web browsers. Both products support SSL and are available for numerous operating systems. Should the configuration of your computer not permit an installation, please contact your system administrator.
10. SUBSCRIBING TO THE NEWSLETTER
On our website, users are given the opportunity to subscribe to our enterprise’s newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered from the controller.
We inform our customers and business partners regularly by means of a newsletter about the company. The enterprise’s newsletter may only be received if you have a valid e-mail address and you registered for the newsletter shipping. A confirmation e-mail will be sent to the e-mail address registered for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether you as the owner of the e-mail address are authorized to receive the newsletter.
During the registration for the newsletter, we also store the IP address of your computer system assigned by the Internet service provider (ISP) at the time of the registration, as well as the date and time of the registration. The collection of this data is necessary in order to understand the (possible) misuse of your e-mail address at a later date, and it therefore serves the aim of the legal protection of the controller.
The personal data collected as part of a registration for the newsletter will only be used to send our newsletter. In addition, subscribers to the newsletter may be informed by e-mail, as long as this is necessary for the operation of the newsletter service or a registration in question, as this could be the case in the event of modifications to the newsletter offer, or in the event of a change in technical circumstances. There will be no transfer of personal data collected by the newsletter service to third parties. You can terminate the subscription to our newsletter at any time. The consent to the storage of personal data, which you have given for shipping the newsletter, may be revoked at any time. For the purpose of revocation of consent, a corresponding link is found in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly by communicating this to the controller in a different way.
11. GOOGLE ANALYTICS
On our website, the component of Google Analytics (with the anonymizer function) is integrated. Google Analytics is a web analytics service. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.
The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.
For the web analytics through Google Analytics we use the application “_gat. _anonymizeIp”. By means of this application your IP address of the Internet connection is abridged by Google and anonymized when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.
Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.
The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website. With each visit to our Internet site, such personal data, including the IP address of the Internet access, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.
You can, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs.
Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/.
12. GOOGLE SEARCH CONSOLE
We use Google Search Console, a free service from Google that allows us to monitor and manage our website’s presence in Google search results and fix any errors. We can use Search Console to better understand how our website is seen by Google and optimise it if necessary.
Search Console includes tools and reports for the following actions:
- Ensure Google can find and crawl your site
- Fix indexing problems and request re-indexing of new or updated content
- Retrieve Google search query data for your website to see how often your website appears in Google searches, which searches lead to your website, click-through rate, etc.
- Receive notifications when Google finds indexing errors, spam or other problems on your website
- See which pages are linking to your site
- Fix problems with AMP pages, user experience on mobile devices and with other search features
13. GOOGLE TAG MANAGER
For our website, we use the Google Tag Manager of the company Google Inc. For the European area, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. This tag manager is one of many helpful marketing products from Google. Via the Google Tag Manager, we can centrally integrate and manage code sections of various tracking tools that we use on our website.
What data is stored by the Google Tag Manager? The Tag Manager itself is a domain that does not set cookies or store data. It acts as a mere “administrator” of the implemented tags. The data is collected by the individual tags of the various web analysis tools. The data is virtually passed through to the individual tracking tools in the Google Tag Manager and is not stored.
In the account settings of the Tag Manager, we have allowed Google to receive anonymised data from us. However, this is only the use and usage of our Tag Manager and not your data stored via the code sections. We allow Google and others to receive selected data in anonymised form. We thus consent to the anonymous sharing of our website data. Which summarised and anonymous data is passed on exactly, we could not find out – despite long research. In any case, Google deletes all information that could identify our website. Google combines the data with hundreds of other anonymous website data and creates user trends as part of benchmarking measures. Benchmarking compares our own results with those of our competitors.
14. USAGE OF GOOGLE MAPS
14. USAGE OF GOOGLE FONTS
This page uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google’s servers. This gives Google knowledge that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO.
If your browser does not support web fonts, a standard font will be used by your computer.
15. EMBEDDED YOUTUBE VIDEOS
On some of our websites YouTube videos are embedded. The operator of applicable plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When visiting an individual page integrated with the YouTube plugin, a connection to the server of YouTube is established. During this process YouTube is informed about which page you are visiting. If you are logged into a YouTube account at the same time YouTube will be able to match you user behavior to your account. You can avoid this process by logging out of your YouTube account.
16. USAGE OF FACEBOOK
On our website components of the enterprise Facebook are integrated. Facebook is a social network.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, the controller is the Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
With each call-up to one of the individual pages of this Internet website, which is operated by the controller and into which a Facebook component (Facebook plug-ins) was integrated, the web browser on the information technology system of the data subject is automatically prompted to download display of the corresponding Facebook component from Facebook through the Facebook component. An overview of all the Facebook Plug-ins may be accessed under https://developers.facebook.com/docs/plugins/. During the course of this technical procedure, Facebook is made aware of what specific sub-site of our website was visited by the data subject.
If the data subject is logged in at the same time on Facebook, Facebook detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-site of our Internet page was visited by the data subject. This information is collected through the Facebook component and associated with the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated into our website, e.g. the “Like” button, or if the data subject submits a comment, then Facebook matches this information with the personal Facebook user account of the data subject and stores the personal data.
Facebook always receives, through the Facebook component, information about a visit to our website by the data subject, whenever the data subject is logged in at the same time on Facebook during the time of the call-up to our website. This occurs regardless of whether the data subject clicks on the Facebook component or not. If such a transmission of information to Facebook is not desirable for the data subject, then he or she may prevent this by logging off from their Facebook account before a call-up to our website is made.
The data protection guideline published by Facebook, which is available at https://facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the data subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook. These applications may be used by the data subject to eliminate a data transmission to Facebook.
17. USAGE OF LINKEDIN
On our website components of the LinkedIn Corporation are integrated. LinkedIn is a web-based social network that enables users with existing business contacts to connect and to make new business contacts.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding LinkedIn component of LinkedIn. Further information about the LinkedIn plug-in may be accessed under https://developer.linkedin.com/plugins. During the course of this technical procedure, LinkedIn gains knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in at the same time on LinkedIn, LinkedIn detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-page of our Internet page was visited by the data subject. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores the personal data.
LinkedIn receives information via the LinkedIn component that the data subject has visited our website, provided that the data subject is logged in at LinkedIn at the time of the call-up to our website. This occurs regardless of whether the person clicks on the LinkedIn button or not. If such a transmission of information to LinkedIn is not desirable for the data subject, then he or she may prevent this by logging off from their LinkedIn account before a call-up to our website is made.
18. USAGE OF XING
On this website, the controller has integrated components of XING. XING is an Internet-based social network that enables users to connect with existing business contacts and to create new business contacts. The operating company of XING is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a XING component (XING plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding XING component of XING. Further information about the XING plug-in the may be accessed under https://dev.xing.com/plugins. During the course of this technical procedure, XING gains knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in at the same time on XING, XING detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-page of our Internet page was visited by the data subject. This information is collected through the XING component and associated with the respective XING account of the data subject. If the data subject clicks on the XING button integrated on our Internet site, e.g. the “Share”-button, then XING assigns this information to the personal XING user account of the data subject and stores the personal data.
XING receives information via the XING component that the data subject has visited our website, provided that the data subject is logged in at XING at the time of the call to our website. This occurs regardless of whether the person clicks on the XING component or not. If such a transmission of information to XING is not desirable for the data subject, then he or she can prevent this by logging off from their XING account before a call-up to our website is made.
The data protection provisions published by XING, which is available under https://www.xing.com/privacy, provide information on the collection, processing and use of personal data by XING.
19. CONTACT VIA EMAIL
If you contact us via email we will collect and process your data for the purpose of answering your request and in order to be able to pose any follow-up questions.
20. DATA PROTECTION DURING APPLICATION PROCESS
H2c collects and processes the personal data of applicants for the purpose of the processing of the application procedure. The processing may also be carried out electronically. This is the case, in particular, if an applicant submits corresponding application documents by e-mail to the controller. If the data controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded with the applicant by the controller, the application documents shall be automatically erased two months after notification of the refusal decision, provided that no other legitimate interests of the controller are opposed to the erasure. Other legitimate interest in this relation is, e.g. a burden of proof in a procedure under the General Equal Treatment Act (AGG).
Status of this data protection declaration: 22.09.2023.