Privacy policy ACTINEO GMBH
Introduction and general information
Thank you for your interest in our website. Protecting your personal data is very important to us. The following contains information on how we handle your data, which is collected when you use our website. Your data is processed in accordance with the statutory provisions on data protection.
Controller within the meaning of the General Data Protection Regulation (GDPR)
ACTINEO GmbH
Mannesmannstr. 5
50996 Cologne
Tel: +49 (0)2236 48003100
Email: info(at)actineo.de
Contact details of the data protection officer
Proliance GmbH / www.datenschutzexperte.de
Datenschutzbeauftragter [data protection officer]
Leopoldstr. 21
80802 Munich
Email: datenschutzbeauftragter(at)datenschutzexperte.de
When contacting the data protection officer, please state to which company your enquiry relates. Please refrain from enclosing sensitive information to your enquiry, such as ID copies.
Definition of terms
Our privacy policy is intended to be straightforward and understandable to everyone. The official terms of the GDPR are generally used in this privacy policy. The definitions of these official terms are explained in Art. 4 GDPR.
Access to and storage of information in terminal equipment
As a result of the use of our website, information may be accessed (e.g. IP address) or stored in your terminal equipment (e.g. cookies). The further processing of personal data within the meaning of the GDPR may be associated with this access or storage.
In cases in which such access to information or such storage of information is required for the technically faultless provision of our services, this occurs on the basis of Section 25 (1) clause 1 and (2) No. 2 of the German Telecommunication and Telemedia Data Protection Act (TTDSG).
In cases in which such processing serves other purposes (e.g. the needs-based presentation of our website), this occurs on the basis of Section 25 (1) TTDSG only with your consent according to Art. 6 (1a) GDPR. Consent may be revoked for the future at any time. The provisions of the GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.
Further information on the processing of your personal data and the pertinent legal basis in this connection can be found in the following sections on the specific processing activities on our website.
Web hosting
This website is hosted by an external service provider (hoster). This website is hosted in Germany. Personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact enquiries, meta and communication data, website visits and other data generated about a website.
We collect the listed data in order to ensure a smooth connection with the website and the technically faultless provision of our services. The processing of this data is required to make the website available to you. The legal basis for the processing of data is our legitimate interest in the practical presentation and functionality of our website according to Art. 6 (1f) GDPR.
We have concluded a data processing contract with the provider in accordance with the provisions of Art. 28 GDPR in which we commit the provider to protect our customers’ data and not to forward such data to third parties.
Server logfiles
When you access our website, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following types of data are recorded during an ongoing connection for communication between your Internet browser and our web server:
- Date and time of the request
- Name of the requested file
- Page from which the file was requested
- Access status
- Web browser and operating system used
- (Complete) IP address of the requesting computer
- Data quantity transmitted
We collect the listed data in order to ensure a smooth connection with the website and the technically faultless provision of our services. The processing of this data is required to make the website available to you. The logfiles serve the purpose of evaluating system security and stability as well as administrative purposes. The legal basis for the processing of data is our legitimate interest in the protection and functionality of our website according to Art. 6 (1f) GDPR.
For reasons of technical security, in particular to defend against attempted attacks on our webserver, we save this data for a limited period. After 60 days at the latest, the data is anonymised by shortening the IP address to the domain level, thereby eliminating the possibility of establishing a link to the individual user.
In addition, the data may be processed for statistical purposes in anonymised form. At no time is this data stored together with other personal data of the user, compared with other data inventories or forwarded to third parties.
Submission of applications
We collect personal data when you submit an application to us by email. In particular, this includes your contact details (such as first name and surname, telephone number and email address of the user) as well as other data that you provide us concerning your background (e.g. curriculum vitae, qualifications, certificates and professional experience) and your personality (e.g. cover letter and personal interests). This may also encompass special categories of personal data (e.g. details relating to a severe disability).
As a general rule, your personal data is collected directly by you as part of the application process and encrypted during electronic transmission. The primary legal basis for this is Section 26 (1) BDSG. Moreover, consent in accordance with Art. 6 (1a) GDPR in conjunction with Section 26 (2) BDSG may be obtained as a form of authorisation required under data protection law. Insofar as the processing of your data is based on consent, you have the right to revoke the consent with effect for the future at any time.
Within our company, only those persons and functions (e.g. human resources) have access to your personal data as required in order to conduct the application process or fulfil our statutory obligations. To this end, your applications may be forwarded for review to the person or function responsible for the respective application process. Under no circumstances will your personal data be forwarded to third parties without authorisation.
We will store and process your data relating to an application for a specific job posting for the duration of the ongoing application process. Following the end of the application (e.g. in the form of an offer or rejection), the application file including all personal data will be deleted from the system no later than six months after the end of the application process. The data of selected applicants will be securely stored for up to one year, provided the applicants have given their consent according to Art. 6 (1a) GDPR in conjunction with Section 26 (2) BDSG. You may revoke your consent with effect for the future at any time. To do so, an email to that effect may be sent to the above contact details of the controller. In the event of an offer, your application documents will be moved to your personnel file.
If you use the online application procedure integrated on our careers page, the separate privacy policy provided there applies.
Cookies
Our website uses what are known as cookies. Cookies are small text files that are stored on your terminal device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies are stored on your terminal device until you delete them or your web browser automatically deletes them.
Cookies have various functions. Many cookies are technically necessary as certain website functions would not work without them (e.g. the shopping basket function or language settings). Other cookies are used for the analysis of user behaviour or the presentation of advertising.
The processing of data through the use of necessary cookies occurs on the basis of a legitimate interest in the technically faultless provision of our services according to Art. 6 (1f) GDPR. Please see the explanations on the specific forms of data processing for details on the processing purposes and the legitimate interests.
The processing of personal data through the use of other cookies occurs on the basis of consent according to Art. 6 (1a) GDPR. Consent may be revoked for the future at any time. Insofar as such cookies are used for analysis and optimisation purposes, we will inform you about this separately as part of this privacy policy and obtain consent in accordance with Art. 6 (1a) GDPR.
You may configure your browser such that:
- you are informed about the placement of cookies;
- you only permit cookies in individual cases;
- you exclude the acceptance of cookies for certain cases or generally;
- you activate the automatic deletion of cookies when closing the browser.
Cookie settings can be adjusted using the following links for the respective browser:
You can also manage the cookies of many companies and functions used for advertising individually. To do so, use the corresponding user tools accessible at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.
Most browsers also offer a “do not track” function. When this function is activated, the respective browser tells advertising networks, websites and applications that you do not wish to be “tracked” for the purpose of behaviour-based advertising or similar.
Information and guides on how these functions can be used are available via the following links depending on the provider of your browser:
In addition, you can prevent the loading of scripts by default. “NoScript” enables the execution of JavaScripts, Java and other plug-ins only for your choice of trusted domains. Information and guides on how this function can be used are available via the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/en-GB/firefox/addon/noscript/).
Please note that the functionality of our website may be restricted when deactivating cookies.
Newsletter
When you wish to receive the newsletter offered on our website, which provides regular information about our products and offers, we require the disclosure of your email address.
Additional details may be disclosed in order to address you personally in the newsletter and/or identify you if you wish to exercise your rights as a data subject.
We use the double opt-in procedure for dispatching the newsletter. This means that we only send you our newsletter by email once you have expressly confirmed that you consent to the dispatch of newsletters. During this process, you first receive an email containing a link, which allows you to confirm that you wish to receive the newsletter in the future as the owner of the corresponding email address. By confirming, you give us your consent according to Art. 6 (1a) GDPR that we may use your personal data for the purpose of dispatching the newsletter as requested.
When you register for the newsletter, we store the email address required for dispatch as well as the IP address from which you have registered for the newsletter, the date and time of registration and confirmation in order to reproduce a potential instance of misuse at a later time. The legal basis for this is our legitimate interest according to Art. 6 (1f) GDPR.
You may unsubscribe from the newsletter at any time via the link integrated in each newsletter or by emailing the above-stated controller. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list insofar as you have not expressly consented to the continued use of the collected data or continued processing is otherwise legally permissible.
Adjustment of cookie settings
You may cancel or adjust your cookie settings at any time. To do so, open the cookie settings using the following link.
Google Analytics 4
This website uses Google Analytics 4, a service by the company Google Ireland Limited, Gordon House, 4 Barrow St., Dublin, D04 E5W5, Ireland (“Google”), which enables the analysis of the use of websites.
Cookies are used in connection with Google Analytics 4. The information collected by cookies regarding your use of the website (including the shortened IP address transmitted by your terminal device, see below) is generally sent to a Google server, where it is then stored and processed. During this process, information may be transmitted to the servers of Google LLC based in the USA and further processed there.
When using Google Analytics 4, the IP address transmitted by your terminal device during use of the website is automatically only collected and processed in shortened form as standard, such that the collected data cannot be linked directly to your personal identity. In this process of automatic anonymisation, the IP address transmitted by your terminal device is shortened by the last digits by Google within the member states of the European Union (EU) or other contractual states of the Agreement on the European Economic Area (EEA).
Google uses this and other information on our behalf to analyse your use of the website, compile reports about your website activity and usage behaviour and to perform other services associated with your website use and the use of the Internet. The shortened IP address transmitted by your terminal device in connection with Google Analytics 4 is not combined with other data held by Google. The data collected in connection with the use of Google Analytics 4 is stored for 14 months and then deleted.
Google Analytics 4 offers a special function that enables the analysis of demographic information as well as the creation of statistics that encompass age, gender and interests of website users on the basis of an analysis of interest-based advertising and with the use of third-party information. This makes it possible to determine and distinguish user groups of the website for the purpose of arranging marketing measures in a manner optimised for target groups. However, the demographic information cannot be used to personally identify any person – including you personally. The data collected using the “demographic information” function is stored for 14 months and then deleted.
All aforementioned types of processing, including the placement of Google Analytics cookies for the storage and read-out of information on the terminal device you use to visit the website, only take place if you have given us your express consent thereto in accordance with Art. 6 (1a) GDPR. Google Analytics 4 is not used during your use of the website without your consent.
The “UserIDs” function is also used in connection with this website as an extension of Google Analytics 4. The assignment of individual UserIDs allows us to obtain cross-device reports from Google (known as cross-device tracking). This means that your usage behaviour can also be analysed across multiple devices when you give your corresponding consent to the use of Google Analytics 4 in accordance with Art. 6 (1a) GDPR, provided that you have set up a personal account by registering on this website and are logged into your account using your pertinent login details on multiple terminal devices. The data collected in this manner shows, for example, which terminal device you used to click on an advertisement for the first time and on which terminal device the corresponding conversion took place.
We have concluded a data processing contract with Google for our use of Google Analytics 4, which commits Google to protect the data of our website users and not to forward such data to third parties.
Since personal data is transmitted to the USA, further protection measures are necessary that ensure the level of data protection stipulated by the GDPR. In order to guarantee this level of data protection, we have agreed on standard data protection clauses with the provider in accordance with Art. 46 (2c) GDPR. These clauses commit the data recipient in the USA to process the data according to the level of protection in Europe. In cases in which this also cannot be ensured by this contractual amendment, we endeavour to agree on further provisions and commitments with the recipient in the USA.
Further legal notices on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found via the following link: https://policies.google.com/privacy?hl=en&gl=de
Details on the types of processing initiated by Google Analytics 4 and how Google handles website data can be found here: https://policies.google.com/technologies/partner-sites
External links
Social networks (Xing and LinkedIn) are integrated on our website only in the form of links to the corresponding service. After clicking on the integrated text/image link, you will be redirected to the website of the respective provider. User information is transmitted to the respective provider only after you are redirected in this manner. Please consult the corresponding privacy policies of the providers you use for information on how they handle your personal data when you use these websites.
Your personal data is not transmitted to third parties, unless:
- we have expressly referred to such transmission in the description of the respective instance of data processing;
- you have given your express consent thereto in accordance with Art. 6 (1a) GDPR;
- such provision is required according to Art. 6 (1f) GDPR in order to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in non-provision of your data;
- a statutory obligation exists for such provision in accordance with Art. 6 (1b) GDPR;
- this is required according to Art. 6 (1b) GDPR for the processing of contractual relations with you.
Moreover, we use external service providers for the processing of our services, whom we have carefully selected, commissioned in writing and with whom we have concluded data processing contracts according to Art. 28 GDPR where necessary. These are bound by our instructions and we regularly check them. These include service providers for hosting, email dispatch and the maintenance and servicing of our IT systems, etc. The service providers will not forward this data to third parties.
Data security
In accordance with Art. 32 GDPR, we take suitable technical and organisational measures in consideration of the state of the art, implementation costs and the manner, scope and purposes of processing as well as the various probabilities of occurrence and the severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection commensurate with the risk. This website uses SSL encryption for reasons of security and to protect the transmission of confidential content.
Duration of the storage of personal data
The duration of the storage of personal data is determined by the pertinent statutory retention periods (e.g. those arising from commercial and tax law). The corresponding data is routinely deleted after expiry of the respective period. Insofar as data is required for the fulfilment or initiation of a contract, or if we have a legitimate interest in continued storage, the data will be deleted once it is no longer required for these purposes or you have exercised your right to revocation or objection.
Your rights
The following contains information on which rights for data subjects the applicable data protection law grants to you with respect to the controller in relation to the processing of your personal data:
The right according to Art. 15 GDPR to request information about your personal data that we process. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data is or has been disclosed, the planned duration of storage, the existence of a right to correction, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, insofar as we did not collect the data, and the existence of automated decision-making including profiling and any meaningful information about the details thereof.
The right according to Art. 16 GDPR to request the correction of incorrect or the completion of your personal data that we store without delay.
The right according to Art. 17 GDPR to request the erasure of your personal data that we store insofar as the processing of such data is not required for exercising the right to freedom of expression and information, the fulfilment of a legal obligation, for reasons in the public interest or for the assertion, exercise or defence of legal claims.
The right according to Art. 18 GDPR to request the restriction of the processing of your personal data insofar as you dispute the correctness of the data, the processing is unlawful, but you reject its erasure and we no longer require the data, but you require such data for the assertion, exercise or defence of legal claims or you have submitted an objection to processing in accordance with Art. 21 GDPR.
The right according to Art. 20 GDPR to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to request transmission to another controller.
The right according to Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of the federal state of our above address or the supervisory authority at your usual place of residence or employment.
The right according to Art. 7 (3) GDPR to revoke consent that has been given. You have the right to revoke consent given to the processing of data at any time with effect for the future. In the event of revocation, we will promptly delete the data concerned unless further processing may be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing performed on the basis of the consent until the time of revocation.
Right to object
Insofar as we process your personal data on the basis of legitimate interests in accordance with Art. 6 (1f) GDPR, you have the right according to Art. 21 GDPR to submit an objection to the processing of your personal data, provided this occurs for reasons related to your special situation. Insofar as the objection relates to the processing of personal data for the purpose of direct advertising, you have a general right to object without having to indicate a special situation.
Should you wish to exercise your right of revocation or right to object, simply send an email to: marketing(at)actineo.de.
Statutory obligations
The provision of personal data for deciding on concluding a contract, contract fulfilment or the performance of precontractual measures is voluntary. However, we may only take the decision in connection with precontractual measures if you provide the personal data required for contractual conclusion, contract fulfilment or precontractual measures.
Automated decision-making
Automated decision-making or profiling according to Art. 22 GDPR does not take place.
Reservation of changes
We reserve the right to change or update this privacy policy where necessary in consideration of the applicable data protection provisions. We may thus adjust this privacy policy according to current legal requirements and in consideration of changes to our services, such as the introduction of new services. The respectively current version applies to your visit.
Status of this privacy policy: 01/07/2023
