Privacy Statement
I. Name and address of the data controller
The data controller for the purpose of the General Data Protection Regulation and other national data protection laws of the member states and other data protection regulations is:
CorPro GmbH
Frankfurter Straße 63–69
D-65760 Eschborn
Germany
+49 (0) 6173 / 9373-0
info@corpro.gmbh
https://corpro.gmbh
II. Contact details of the data protection officer
The data protection officer of the controller is
DataCo GmbH
Dachauer Street 65
80335 Munich
Munich, Germany
+49 89 7400 45840
www.dataguard.de
III. General information about the data processing
1. Scope of the processing of personal data
We always only process personal data of our users if this is necessary to provide a functional website as well as our contents and services. The processing of personal data of our users only takes place regularly after consent of the user. An exception applies in those cases where prior consent cannot be obtained for practical reasons and where processing of the data is permitted by law.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Article 6 paragraph 1 sentence 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
Article 6 paragraph 1 sentence 1 lit. b GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are required to perform pre-contractual actions.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Article 6 paragraph 1 sentence 1 lit. c GDPR serves as the legal basis.
In the event that life-saving interests of the data subject or another natural person require the processing of personal data, Article 6 paragraph 1 sentence 1 lit. d GDPR serves as the legal basis.
If the processing is required to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 paragraph 1 sentence 1 lit. f GDPR serves as the legal basis for the processing.
3. Data erasure and storage time
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data can be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject. The data will also be blocked or erased if a storage period specified by the aforementioned standards expires unless there is a need for further storage of the data for the conclusion or performance of a contract.
IV. Rights of the data subject
If your personal data are processed, you are the data subject for the purposes of GDPR and you have the following rights against the data controller:
1. Right to information
You can request a declaration from the data controller as to whether your personal data are being processed by us.
If there is such processing, you can request details from the data controller about the following information:
1. the purposes for which the personal data are being processed;
2. the categories of personal data which are being processed;
3. the recipients or categories of recipients to whom the personal data concerning you have been disclosed or will be disclosed;
4. the planned duration of the storage of the personal data concerning you or, if specific information about this is not possible, criteria for determining the storage period;
5. the existence of a right to rectification or erasure (right to be forgotten) of the personal data concerning you, a right to have processing restricted by the data controller or a right to object to such processing;
6. the existence of a right of complaint to a supervisory authority;
7. all available information about the origin of the data if the personal data are not collected from the data subject;
8. the existence of automated decision-making, including profiling in accordance with Article 22 paragraphs 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you may request to be informed about the appropriate guarantees in accordance with Article 46 GDPR in connection with the transmission.
2. Right to rectification
You have the right to obtain from the data controller the rectification and/or completion of the personal data concerning you insofar as these data are inaccurate or incomplete. The data controller shall perform the rectification without undue delay.
3. Right to restriction of processing
You have the right to obtain from the data controller restriction of processing where one of the following applies:
• the accuracy of the personal data concerning you is contested by yourself for a period enabling the data controller to verify the accuracy of the personal data;
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
• the data controller no longer needs the personal data for the purposes of the processing, but they are required by yourself for the establishment, exercise or defence of legal claims, or
• you have objected to the processing pursuant to Article 21 paragraph 1 pending the verification whether the legitimate grounds of the data controller override those of yourself.
If the processing of the personal data concerning you has been restricted, these data shall – with the exception of their storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have obtained restriction of processing according to the above conditions, you shall be informed by the data controller before the restriction of processing is lifted.
4. Right to erasure (right to be forgotten)
a) Erasure obligation
You can request the data controller to erase the personal data concerning you immediately and the data controller shall have the obligation to erase these data without undue delay where any of the following grounds applies:
1. The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
2. You withdraw your consent on which the processing is based according to Article 6 paragraph 1 sentence 1 lit. a or Article 9 paragraph 2 lit. a GDPR and there is no other legal ground for the processing.
3. You object to the processing pursuant to Article 21 paragraph 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 paragraph 2 GDPR.
4. The personal data concerning you have been unlawfully processed.
5. The personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which the data controller is subject.
6. The personal data concerning you have been collected in relation to the offer of information society services according to Article 8 paragraph 1 GDPR.
b) Information to third parties
Where the data controller has made the personal data concerning you public and is obliged pursuant to Article 17 paragraph 1 GDPR to erase the personal data, the data controller, taking account of available technology and the implementation costs, shall take reasonable steps, including technical measures, to inform data controllers who are processing the personal data that you as the data subject have requested the erasure by such data controllers of all links to or copies or replications of those personal data.
c) Exceptions
The right to erasure shall not apply to the extent that processing is necessary
1. for exercising the right of freedom of expression and information;
2. for compliance with a legal obligation which requires processing according to Union or Member State law to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
3. for reasons of public interest in the area of public health in accordance with Article 9 paragraph 2 lit. h and i as well as Article 9 paragraph 3 GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 paragraph 1 GDPR insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of this processing, or
5. for the establishment, exercise or defence of legal claims.
5. Notification obligation
If you have exercised the right for rectification, erasure or restriction of processing against the data controller, the data controller shall be obligated to communicate any rectification or erasure of personal data or restriction of processing to all recipients to whom the personal data concerning you have been disclosed unless this proves impossible or involves disproportionate effort.
You have the right to be informed by the data controller about these recipients.
6. Right to data portability
You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, commonly used and machine-readable format. You also have the right to transmit these data to another data controller without hindrance from the data controller to which the personal data have been provided where
1. the processing is based on consent pursuant to Article 6 paragraph 1 sentence 1 lit. a GDPR or Article 9 paragraph 2 lit. a GDPR or is based on a contract pursuant to Article 6 paragraph 1 sentence 1 lit. b GDPR and
2. the processing is carried out by automated means.
In exercising this right to data portability, you also have the right to have the personal data concerning you transmitted directly from one data controller to another data controller insofar as this is technically feasible. Freedoms and rights of other persons must not be adversely affected by this.
The right to data portability shall not apply for any processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
7. Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of the personal data concerning you which is based on Article 6 paragraph 1 sentence 1 lit. e or f GDPR, including profiling based on those provisions.
The data controller shall no longer process the personal data concerning you unless the data controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is used for the establishment, exercise or defence of legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.
In the context of the use of information society services – notwithstanding Directive 2002/58/EC – you may exercise your right to object by automated means using technical specifications.
8. Right to revoke the data protection declaration of consent
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
9. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly adversely affects you. This shall not apply if the decision
1. is necessary for entering into, or performance of, a contract between you and the data controller,
2. is authorised by Union or Member State law to which the data controller is subject and which also lays down appropriate measures to safeguard your rights and freedoms and legitimate interests or
3. is based on your explicit consent.
These decisions shall not be based on special categories of personal data referred to in Article 9 paragraph 1 GDPR unless Article 9 paragraph 2 lit. a or g GDPR applies and appropriate measures to safeguard your rights and freedoms and legitimate interests are in place.
With regard to the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the data controller to express your point of view and to contest the decision.
10. Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect of infringement, if you believe that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant about the status and the results of the complaint, including the possibility of a judicial remedy according to Article 78 GDPR.
V. Provision of the website and creation of log files
1. Description and scope of the data processing
Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer.
The following data are collected:
• Information about the browser type and version used
• The IP address of the user
• Date and time of the access
• Websites from which the user’s system reaches our website
• Websites accessed by the user’s system via our website
The data are also saved in the log files of our system. These data are not stored together with other personal data of the user.
2. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Article 6 paragraph 1 sentence 1 lit. f GDPR.
3. Purpose of the data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. The IP address of the user must remain stored for the duration of the session.
The data are stored in log files to ensure the functionality of the website. In addition, the data are used by us for the optimisation of the website and to ensure the security of our information technology systems. Any evaluation of the data for marketing purposes does not take place in this context.
Our legitimate interest in the data processing in accordance with Article 6 paragraph 1 sentence 1 lit. f GDPR is also in these purposes.
4. Duration of the storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data are stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or distorted so that any assignment of the calling client is no longer possible.
5. Possibility of objection and elimination
The collection of the data for the provision of the website and the storage of the data in log files are essential for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
VI. Use of cookies
1. Description and scope of the data processing
Our website uses cookies. Cookies are small text files which are stored locally on the computer system of the user in the cache of the web browser. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables a unique identification of the browser when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.
The following data are stored and transmitted in the cookies:
• Login information
We also use cookies on our website which enable an analysis of the user’s surfing behaviour.
The following data can be transmitted in this way:
• Entered search terms
• Frequency of page views
• Use of website functions
The user data collected in this way is pseudonymised by technical measures. Therefore, assignment of the data to the calling user is no longer possible. The data are not stored jointly with other personal data of the users. When you visit our website, an information banner informs you about the use of cookies for analytical purposes and refers you to this data privacy statement. In this context, there is also a note about how the storage of cookies can be prevented in the browser settings.
When accessing our website, the user is informed about the use of cookies for analytical purposes and his consent is obtained for processing the personal data used in this context. In this context, reference is also made to this data privacy statement.
2. Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Article 6 paragraph 1 sentence 1 lit. f GDPR.
The legal basis for the processing of personal data using cookies for analytical purposes if the user has given his consent in this regard is Article 6 paragraph 1 sentence 1 lit. a GDPR.
3. Purpose of the data processing
The purpose of the use of technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be provided without the use of cookies. It is necessary for these that the browser is also recognised after a page change.
We need cookies for the following applications:
• Remembering search terms
• Evaluation of surfing behaviour
The user data collected by technically necessary cookies are not used to create user profiles.
The analysis cookies are used to improve the quality of our website and its content. We learn from the analysis cookies how the website is used and can thus continuously optimise our website.
Improvement of the quality and the content of the website
Our legitimate interest in the processing of personal data in accordance with Article 6 paragraph 1 sentence 1 lit. f GDPR is also in these purposes.
4. Duration of the storage, possibility of objection and elimination
Cookies are stored on the computer of the user and transmitted from this to our website. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your web browser. Already stored cookies can be deleted at any time. This can also be automated. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
VII. Newsletter
1. Description and scope of the data processing
You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input form are transmitted to us.
• E-mail address
• Name
• First name
In the course of the subscription process, your consent is obtained for the processing of the data and reference is made to this data privacy statement.
No data are disclosed to third parties in connection with data processing for the delivery of newsletters. The data are used exclusively for sending the newsletter.
2. Legal basis for data processing
The legal basis for the processing of personal data after subscribing to the newsletter if the user has given his consent is Article 6 paragraph 1 sentence 1 lit. a GDPR.
3. Purpose of the data processing
The collection of the e-mail address of the user is used for delivering the newsletter.
The collection of other personal data as part of the subscription process is intended to prevent misuse of the services or the e-mail address used.
4. Duration of the storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The e-mail address of the user will therefore be stored for as long as the subscription to the newsletter is active.
The other personal data collected during the subscription process will usually be deleted after a period of seven days.
5. Possibility of objection and elimination
The subscription to the newsletter can be cancelled by the relevant user at any time. For this purpose there is a corresponding link in every newsletter.
This also makes it possible to revoke the consent to the storage of personal data collected during the subscription process.
VIII. Contact form and e-mail contact
1. Description and scope of the data processing
There is a contact form on our website which can be used for electronic contact. If a user makes use of this possibility, the data entered in the input form will be transmitted to us and stored.
The following data are also stored at the time the form is submitted:
• E-mail address
• Name
• First name
• Telephone / mobile telephone number
• IP address of the calling computer
• Date and time of the registration
In the course of the submission process, your consent is obtained for the processing of the data and reference is made to this data privacy statement.
Alternatively, you can contact us using the provided e-mail address. In this case, the user’s personal data provided in the e-mail message will be stored.
No data will be disclosed to third parties in this context. The data are used exclusively for processing the conversation.
2. Legal basis for data processing
The legal basis for the processing of personal data if the user has given his consent is Article 6 paragraph 1 sentence 1 lit. a GDPR.
The legal basis for the processing of personal data that are transmitted in the course of sending an e-mail is Article 6 paragraph 1 sentence 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, additional legal basis for the processing is Article 6 paragraph 1 sentence 1 lit. b GDPR.
3. Purpose of the data processing
We only use the processing of personal data from the input form for processing the contact. If you contact us by e-mail, we also have the necessary legitimate interest in the processing of your data.
The other personal data processed during the submission process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of the storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input fields of the contact form and those sent by email, this is the case when the conversation with the user is finished. The conversation is finished when it can be inferred from the circumstances that the relevant matter has been finally clarified.
The additional personal data collected during the submission process will be deleted after a period of seven days at the latest.
5. Possibility of objection and elimination
The user has the possibility to revoke his consent for the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. The conversation cannot be continued in such a case.
The consent, as well as the storage of the data can be revoked by sending an e-mail to info@corpro.gmbh
All personal data that have been stored in the course of contacting us will be deleted in this case.
IX. Plug-ins used
Use of Google AdWords
1. Scope of the processing of personal data
Our website uses Google AdWords from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. This is an online advertising program that uses conversion tracking. If you reach our website via a Google ad, Google AdWords places a cookie on your computer. Each Google AdWords customer is assigned a different cookie.
2. Legal basis for the processing of personal data
The legal basis for the processing is Article 6 paragraph 1 sentence 1 lit. f GDPR.
3. Purpose of the data processing
We only receive information about the total number of users who have responded to our ad. No information is disclosed with which we could identify you. The use is not for tracking.
4. Duration of the storage
The cookie expires after 30 days.
5. Possibility of objection and elimination
You can disable Google Conversion Tracking by disabling tracking in your browser. Further information can be found at https://www.google.com/intl/de/policies/privacy/ .
Use of Google Analytics
1. Scope of the processing of personal data
Our website uses Google Analytics, a web analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). Google Analytics uses so-called “cookies”. These are text files which are stored on your computer and which make possible an analysis of your usage of the website. The information generated by the cookie about your use of this website will be transmitted to and stored by Google on a server in the USA. However, if IP anonymisation is activated on this website, Google will replace the last octet of your IP address with zeros within Member States of the European Union or in other countries party to the Agreement on the European Economic Area at the Analytics Collector before the data are stored or processed. The complete IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. The IP anonymisation is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports about website activities and to provide the website operator with further services associated with website use and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that you may not be able to use all functions of our website to their full extent in this case.
2. Legal basis for the processing of personal data
The legal basis for the processing is Article 6 paragraph 1 sentence 1 lit. f GDPR.
3. Purpose of the data processing
The purpose of the processing of personal data is to specifically address a target group that has already expressed an initial interest by visiting the site.
4. Duration of the storage
Advertising data in server logs are anonymised according to its own information by Google deleting parts of the IP address and cookie information after 9 or 18 months.
5. Possibility of objection and elimination
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing these data by Google by downloading and installing the browser plug-in that is available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en. Further information can be found at https://www.google.com/intl/de/policies/privacy/ .
Use of LinkedIn
1. Scope of the processing of personal data
Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Every time you access one of our pages that contains functions of LinkedIn, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our web pages with your IP address. If you click on the “Recommend button” of LinkedIn and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account. We point out that we as provider of the pages have no knowledge of the content of the transmitted data and their use by LinkedIn.
Further information can be found in the LinkedIn privacy policy at: https://www.linkedin.com/legal/privacy-policy.
2. Legal basis for the processing of personal data
The legal basis for processing the personal data of the users is Article 6 paragraph 1 sentence 1 lit. a GDPR.
3. Purpose of the data processing
The use of the LinkedIn plug-in is intended for the user-friendliness of our website.
4. Duration of the storage
We have no information about the duration of storage.
5. Possibility of objection and elimination
If such transmission of this information to LinkedIn is not desired by the person concerned, he can prevent the transmission by logging out of his LinkedIn account before visiting our website. LinkedIn provides the possibility to unsubscribe from e-mail messages, SMS messages and targeted ads as well as to manage ad settings at https://www.linkedin.com/psettings/guest-controls LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame who can set cookies. Such cookies can be refused at https://www.linkedin.com/legal/cookie-policy The applicable LinkedIn privacy policy is available at https://www.linkedin.com/legal/privacy-policy The LinkedIn cookie policy is available at https://www.linkedin.com/legal/cookie-policy
Use of wiredminds
1. Scope of the processing of personal data
Our website uses the Web Bug technology of wiredminds GmbH, Lindenspürstraße 32, D-70176 Stuttgart, Germany. Data can be collected, processed and stored from which a pseudonymised usage profile is created. If possible, this user profile will be made completely anonymous. IP addresses are anonymised when they are collected. This is done by deleting the last octet.
2. Legal basis for the processing of personal data
The legal basis for processing the personal data of the users is Article 6 paragraph 1 sentence 1 lit. f GDPR.
3. Purpose of the data processing
This helps us to constantly improve our website and its user-friendliness. Our legitimate interest in the processing of the data in accordance with Article 6 paragraph 1 sentence 1 lit. f GDPR is also in these purposes. The anonymisation of the IP address takes sufficient account of the interest of users in protecting their personal data.
4. Duration of the storage
The data will be deleted as soon as they are no longer required for our collection purposes. In our case this is after….the event.
5. Possibility of objection and elimination
Further information can be found at:
https://www.wiredminds.de/1/data-protection-report/
Use of XING plug-in
1. Scope of the processing of personal data
Our website uses the “XING Share Button” of XING SE, Dammtorstraße 29-32, D-20354 Hamburg, Germany. When you access this website, your browser is used to establish a short-term connection to XING SE servers (“XING”), with which the “XING Share Button” functions (particularly the calculation/display of the counter value) are performed.
2. Legal basis for the processing of personal data
The legal basis for processing the personal data of the users is Article 6 paragraph 1 sentence 1 lit. a GDPR.
3. Purpose of the data processing
The “XING share button” is integrated for user-friendliness. Clicking this button takes you to the XING starting page. You can recommend the link to our website if you are logged into your profile.
4. Duration of the storage
XING does not store any personal data about you when you access this website. In particular, XING does not store any IP addresses. There is also no evaluation of your usage behaviour via the use of cookies in connection with the “XING Share Button”.
5. Possibility of objection and elimination
The most up-to-date data protection information about the ” XING Share button ” and additional information can be found on the following website:
https://www.xing.com/app/share?op=data_protection.
Use of YouTube plug-in
1. Scope of the processing of personal data
We use the YouTube plug-in from YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES that is operated by Google on our website. Your browser connects to YouTube servers when you visit our website. Information about your website visit is forwarded to YouTube. We have no influence on the content of the plug-in. If you are logged into your YouTube account during your visit, YouTube can associate your website visit with that account. By interacting with this plug-in, this information is transmitted directly to and stored on YouTube. You must log out of your YouTube account before visiting our website if you do not want this data transfer.
2. Legal basis for the processing of personal data
The legal basis for processing the personal data of the users is Article 6 paragraph 1 sentence 1 lit. f GDPR.
3. Purpose of the data processing
The provision of the YouTube plug-in is intended for the user-friendliness of our website.
4. Duration of the storage
We have no information about the duration of storage.
5. Possibility of objection and elimination
Further information about the purpose and the scope of the data collection of YouTube can be found at: https://www.google.com/intl/en/policies/privacy/
[borlabs-cookie type=”btn-switch-consent” id=”ID of the Service”/]
