I Introduction
We are pleased that you visit our website. We respect your privacy. Data protection and data security when using our website are very important to us. With this data protection declaration we would like to inform you to what extent data is collected when you use our website and for what purposes we use this data. We would also like to inform you about your rights in this regard.
II General information
Below we provide information about the collection of personal data when using our website in accordance with Art. 13 GDPR. Personal data is all data that can be personally related to you, e.g. E.g. name, address, email addresses, user behavior.
The person responsible in accordance with Article 4 Paragraph 7 of the EU General Data Protection Regulation (GDPR) is
Light Avenue GmbH, Am Kühlen Kasten 8, 93161 Sinzing
https://www.light-avenue.com/imprint/
You can reach our data protection officer at:
Bugl & Colleagues Society for Data Protection and Information Security mbH, Alexander Bugl, Eifelstraße 55, 93057 Regensburg, email: kontakt@buglundkollegen.de
III Your rights
If you as a user process personal data, you are considered a data subject in accordance with the GDPR. Those affected have the following rights vis-à-vis the person responsible:
• Right to information (Article 15 GDPR)
• Right to correct or delete personal data (Articles 16, 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to notification in connection with the correction or deletion of your personal data or the restriction of processing (Article 19 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to revoke declarations of consent. The lawfulness of the data processing carried out until the revocation remains unaffected due to the previously valid consent. (Art. 7 Para. 3 GDPR)
• Right to complain to a supervisory authority (Article 77 GDPR)
Contact options for the supervisory authorities in the individual countries.
IV Hosting
The hosting services we use (services for operating and providing the website) serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email delivery, security services and technical maintenance services, which we provide for for the purposes of operating this online offering.
In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, interested parties and visitors to this online offering based on our legitimate interests in the efficient and secure provision of this online offering in accordance with Art. 6 Para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of order processing contract).
V Access our website
When you use the website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:
- IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– amount of data transferred in each case
– Website from which the request comes
– Browser
– Operating system and its interface
– Language and version of the browser software.
We may also use another service provider to be able to display the data protection declaration. An embedding code is used, via which your IP address is transmitted to the service provider (preeco GmbH).
We process your data for a limited time based on our legitimate interest in order to ensure that personal data is derived in the event of unauthorized access or attempted access to local servers and to be able to properly display the data protection declaration and download the fonts we use from our own server can (Art. 6 Para. 1 lit. f GDPR).
VI Use of cookies
In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which certain information flows to the place that sets the cookie (here us). They serve to make the Internet offering more user-friendly and effective overall.
We differentiate between two categories of cookies: (a) essential cookies, without which the functionality of our website would be limited and (b) optional cookies for website analysis and marketing purposes.
The use of optional cookies is based on your consent (Art. 6 Para. 1 lit. a GDPR).
In our cookie banner we describe the optional cookies used on this website in detail.
VII Google Analytics
a. Type and purpose of processing
This website uses Google Analytics, a web analysis service provided by the Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics uses so-called “cookies”, i.e. text files that are stored on your computer and which enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Further related services will then be provided based on the use of the website and the Internet.
b. Legal basis for processing
The data entered is processed based on the user’s consent (Art. 6 Para. 1 lit. a GDPR).
c. Data categories
• IP address (shortened/anonymized)
d. Recipient
• Employees of the IT and marketing department of your own company
• Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland
e. Storage periods
Data will only be processed in this context as long as the relevant consent is given. They will then be deleted unless there are legal retention requirements. To contact us in this context, please use the contact details provided at the beginning of this data protection declaration.
f. Legal / contractual requirement
The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.
G. Third country transfer
Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be excluded.
H. Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time with future effect.
You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the available browser plug-in: “ Browser add-on to deactivate Google Analytics”.
i. Automatic decision making and profiling
With the help of the tracking tool Google Analytics, the behavior of website visitors can be evaluated and their interests can be analyzed. For this purpose, we create a pseudonymous user profile.
VIII Zoho One
a. Type and purpose of processing
On this website we use the ZOHO ONE offer from ZOHO Corporation GmbH, based in Trinkaustr. 7 in 40213 Düsseldorf. Personal data that you provide to us via a contact form, newsletter registration, email or other means will be processed and maintained by us with the help of Zoho in order to be able to offer a better service in various areas such as customer service or marketing.
b. Legal basis for processing
The legal basis for the integration of Zoho is our legitimate interest (Art. 6 Para. 1 lit. f) GDPR) in providing secure and efficient functionality of the website.
c. Data categories
IP address, location data, browser, etc...
d. Recipient
The recipients of the data are internal employees of the internal departments and Zoho as the processor.
e. Storage periods
In this context, the data is stored for the business relationship. They will then be deleted unless there are legal retention requirements. To contact us in this context, please use the contact details provided at the beginning of this data protection declaration.
f. Legal / contractual requirement
The provision of your personal data is based on our legitimate interest in avoiding functional restrictions on the website.
G. Third country transfer
Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). In order to ensure the level of data protection in this third country, we have concluded standard contractual clauses with Zoho.
H. Possibility of objection
You have the right to object to the processing of your personal data at any time. You can inform us of your objection at any time using the contact option provided at the beginning of this data protection notice.
i. Automated decision making and profiling
As a responsible company, we do not use automatic decision-making or profiling in this data processing.
IX Information requirements in the application process
a. Type and purpose of processing
We process the applicant data only for the purpose and as part of the application process in accordance with the legal requirements. The processing of applicant data is carried out to fulfill our (pre-)contractual obligations as part of the application process, if the data processing is necessary for us, for example in the context of legal proceedings.
The application process requires that applicants provide us with their applicant data. If we offer an online form, the necessary applicant data is marked; otherwise it can be found in the job descriptions and, in principle, this includes personal information, postal and contact addresses and the documents associated with the application, such as a cover letter, CV and certificates. Applicants can also voluntarily provide us with additional information. By submitting their application to us, applicants agree to the processing of their data for the purposes of the application process in the manner and scope set out in this data protection declaration. If provided, applicants can submit their applications to us using an online form on our website. The data is transmitted to us in encrypted form in accordance with the state of the art. Applicants can also send us their applications via email {application email address}. However, we ask you to note that emails are generally not sent encrypted and applicants must ensure encryption themselves. We cannot therefore assume any responsibility for the transmission path of the application between the sender and receipt on our server and therefore recommend using an online form or sending it by post. If the application is successful, the data provided by the applicants can be further processed by us for the purposes of the employment relationship.
b. Legal basis for processing
The processing of your data primarily serves to establish the employment relationship in accordance with Art. 6 Abs. 1 lit. b DSGVO.
c. Data categories
{Data Categories}
If special categories of personal data within the meaning of Art. 9 Para. 1 GDPR are voluntarily communicated as part of the application process, their processing will also take place in accordance with Art. 9 Para. 2 lit. b GDPR (e.g. health data, such as severely disabled status or ethnic origin). .
d. Recipient
Recipients of the data are internal employees of the {departments/s}
e. Storage periods
The deletion will take place, subject to a legitimate revocation by the applicant, after a period of {number of months} month(s) has elapsed, so that we can answer any follow-up questions about the application and meet our obligations to provide proof under the Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived in accordance with tax law requirements.
f. Legal / contractual requirement
Providing your personal data beyond the storage period, e.g. in order to be included in our applicant pool, is voluntary and based solely on your consent. You can revoke this consent to the storage of your personal data at any time with effect for the future.
G. Third country transfer
The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
H. Withdrawal of consent
If the application for a job offer is not successful, the applicant's data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. You can revoke your consent to the storage of your personal data beyond the storage period at any time with effect for the future. You can inform us of your revocation at any time using the contact option provided at the beginning of this data protection notice.
i. Automated decision making and profiling
As a responsible company, we do not use automatic decision-making or profiling in this data processing.