Privacy policy
Data protection
Information obligations according to Art. 13 GDPR
In our opinion, data protection should be transparent, easy to understand and, above all, fair for all parties.
For this reason, we would like to inform you in this data protection notice about what personal data we collect and use from you, whether and if so, to which third parties it may be passed on, how long we store the data and what rights you have if you do not agree with our responsible handling.
If you still have any questions after reading this detailed data protection information, please do not hesitate to contact us using the contact details below.
- name and contact details of the person responsible
F.Y.K. Group GmbH
Donnersbergweg 1
D-67059 Ludwigshafen am Rhein
You can reach us by post, by e-mail atinfo@fyk-group.com or by telephone on 0621/54578345
- collection of personal data for informational use
Each time you access our website, we collect the following information about your computer: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred as part of this request are recorded. We also collect product and version information about the browser used and the operating system of your computer. We also record the website from which our website was accessed. The IP address of your computer is only stored for the duration of your use of the website and is then immediately deleted or anonymized by shortening it. We use this data for the operation of our website, in particular to detect and eliminate errors on the website, to determine the utilization of the website and to make adjustments or improvements. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR.
- cookies & local storage
- 1.
We may also collect information about your use of our website through the use of so-called browser cookies. These are small text files that are stored on your data carrier and that store certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent, as well as information about the age of the cookie and an alphanumeric identifier. Cookies enable our systems to recognize the user’s device and make any default settings immediately available. As soon as a user accesses the platform, a cookie is transferred to the hard disk of the user’s computer. Cookies help us to improve our website and offer you a better, more personalized service. They enable us to recognize your computer when you return to our website and thereby:
- to store information about your preferred activities on the website and thus tailor our website to your individual interests. This includes, for example, advertising that corresponds to your personal interests.
- speed up the processing of your requests.
- 2.
The cookies we use only store the data explained above about your use of the website. This is not done by assigning it to you personally, but by assigning an identification number to the cookie (“cookie ID”). The cookie ID is not merged with your name, IP address or similar data that would allow the cookie to be assigned to you.
- 3.
A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. In terms of their function, a distinction is made between cookies:
- Technical cookies: These are strictly necessary to move around the website, use basic functions and ensure the security of the website; they do not collect information about you for marketing purposes or store which websites you have visited;
- Performance cookies, statistical cookies: These collect information about how you use our website, which pages you visit and, for example, whether errors occur when using the website; they do not collect any information that could identify you – all information collected is anonymous and is only used to improve our website and to find out what interests our users;
- Advertising cookies, targeting cookies: These are used to offer the website user needs-based advertising on the website or offers from third parties and to measure the effectiveness of these offers; advertising and targeting and statistics cookies are stored for a maximum of 13 months;
- Sharing cookies: These are used to improve the interactivity of our website with other services (e.g. social networks); sharing cookies are stored for a maximum of 13 months.
- 4.
Any use of cookies that is not absolutely technically necessary constitutes data processing that is only permitted with your express and active consent in accordance with Section 25 (1) TTDSG and only takes place in compliance with this legal provision. This applies in particular to the use of advertising, targeting or sharing cookies. In addition, we only pass on your personal data processed by cookies to third parties if you have given your express consent in accordance with Section 25 (1) TTDSG.
- 5.
Below you will find an overview of the cookies used on our website and your current consent status.
- 6.
You can determine yourself whether cookies can be set and retrieved using the settings in your browser. For example, you can completely deactivate the storage of cookies in your browser, restrict it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback. You can block or delete individual cookies. For technical reasons, however, this may result in some functions of our website being impaired and no longer functioning fully.
- 7.
If cookies are only used on our website with your consent, you can also make the settings mentioned under 4. 6. in our Cookie Consent Tool by clicking on the Cookiebot icon at the bottom left of the browser window.
- data security
All information that you transmit to us is stored on servers within the European Union. Unfortunately, the transmission of information via the Internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website via the Internet. However, we take technical and organizational measures to protect our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorized persons. In particular, your personal data is transmitted to us in encrypted form. We use the SSL (Secure Socket Layer) or TLS (Transport Layer Security) coding system.
- use of CookieBot
- 1.
We have integrated the consent management tool “Cookiebot” from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (Usercentrics) on our website in order to obtain consent for data processing or the use of cookies or comparable functions. With the help of “Cookiebot”, you have the option of giving or refusing your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, reach measurement and personalized advertising. You can use “Cookiebot” to give or refuse your consent for all functions or give your consent for individual purposes or individual functions. You can also change the settings you have made at a later date using the icon at the bottom left of the website you are visiting.
- 2.
The purpose of integrating “Cookiebot” is to allow the users of our website to decide on the aforementioned matters and to offer the possibility of changing settings already made during the further use of our website. In the course of using “Cookiebot”, personal data and information about the end devices used (IP address, language, browser, etc.) are processed and sent to CookieYes Limited. The information about the settings you have made is also stored on your device.
- 3.
The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. c), Art. 6 para. 3 sentence 1 lit. a), Art. 25, Art. 5 para. 2 GDPR and alternatively Art. 6 para. 1 lit. f) GDPR. We store the cookie required to store your consent on the basis of § 25 para. 2 no. 2 TTDSG. “Cookiebot” helps us to process the data of our users in order to fulfill our legal obligations (e.g. obtaining informed consent and the obligation to provide proof thereof). Our legitimate interests in processing that goes beyond the obtaining and verifiability of the consent obtained lie in the evaluation of consent rates and other functionalities.
- 4.
“Cookiebot” stores your data for as long as your user settings are active. After one year after the user settings have been made, you will be asked for your consent again. The user settings made will then be stored again for this period, unless you delete the information about your user settings in the terminal device capacities provided for this purpose yourself beforehand. We have concluded the standard data protection clauses (SCC) with “Cookiebot”. In addition, an adequacy decision of the EU Commission exists for the United Kingdom.
- 5.
You can object to the processing if the processing is based on Art. 6 para. 1 sentence 1 lit. f) GDPR. You have the right to object on grounds relating to your particular situation. To object, please send an email to privacy@cookiebot.com.
- no disclosure of your personal data
We do not pass on your personal data to third parties unless you have consented to the data being passed on or we are entitled or obliged to pass on data on the basis of statutory provisions and/or official or court orders. In particular, this may involve providing information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.
8 Data protection and third-party websites
The website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or guarantee for third-party content or data protection conditions. Please check the applicable data protection conditions before you transmit personal data to these websites.
- use of functions on our website
- 1.
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you generally have to provide additional personal data that we use to provide the respective service. If additional voluntary information is possible, it is marked accordingly.
- 2.
When you contact us by e-mail or via the contact form, your e-mail address and, if you provide it, your name and telephone number will be stored by us in order to answer your questions. (The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR).
- social media profiles
- 1.
We have various presences on social media platforms. We operate these sites with the following providers:
- 1. 1. LinkedIn, operated by Linkedin Ireland Unlimited Compnay, Wiltom Plaza, Wilton Place, Dublin 2, Ireland, privacy policy at https://de.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy
- 1. 2. Xing, operated by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, data protection information at https://privacy.xing.com/de/datenschutzerklaerung
- 2.
We use the technical platform and services of the providers for these information services. We would like to point out that you use our presence on social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our websites, the providers of the social media platforms collect your IP address and other information in the form of cookies on your end device. This information is used to provide us, as the operator of the accounts, with statistical information about the interaction with us. The legal basis in each case is your consent: for the setting of cookies this is § 25 para. 1 TTDSG, for the subsequent data processing Art. 6 para. 1 lit. a GDPR.
- 3.
The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. According to their own statements, all of the aforementioned providers maintain an adequate level of data protection that corresponds to that of the former EU-US Privacy Shield and we have concluded the standard data protection clauses with the companies (with the exception of Xing, as this provider is based within the EU). We do not know how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or whether you visit the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your end device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can be used to track how you have moved around the network. Buttons integrated into websites enable the platforms to record your visits to these websites and assign them to your respective profile. This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out or deactivate the “stay logged in” function, delete the cookies on your device and restart your browser.
- 4.
As the provider of the information service, we also only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy policy. The legal basis for the processing of your data on the social media platform is Art. 6 para. 1 sentence 1 lit. f GDPR.
- 5.
To exercise your rights as a data subject, you can contact us or the provider of the social media platform. If one party is not responsible for responding or must receive the information from the other party, we or the provider will then forward your request to the respective partner. Please contact the operator of the social media platform directly for questions about profiling and the processing of your data when using the website. If you have any questions about the processing of your interaction with us on our site, please write to the contact details provided by us above.
- 6.
What information the social media platform receives and how it is used is described by the providers in their privacy policies (link see 9. 1.). There you will also find information about contact options and the settings options for advertisements. Further information on social networks and how you can protect your data can also be found at www.youngdata.de.
- application process
- 1.
We process the data that you have sent us in connection with your application in order to check your suitability for the position (or any other open positions in our companies) and to carry out the application process.
- 2.
The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted. Should the data be required for legal prosecution after completion of the application process, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR. Our interest then lies in the assertion of or defense against claims.
- 3.
Applicants’ data will be deleted after 6 months in the event of rejection.
- 4.
In the event that you have consented to further storage of your personal data, we will transfer your data to our applicant pool. There the data will be deleted after two years.
- 5.
If you have been accepted for a position as part of the application process, the data from the applicant data system will be transferred to our personnel information system.
- 6.
Your application data will be reviewed by the HR department after receipt of your application. Suitable applications are then forwarded internally to the department managers responsible for the respective open position. The next steps are then agreed. Within the company, only those persons have access to your data who need it for the proper course of our application procedure.
- 7.
If you use our application tool, we use a specialized software provider for the application process. This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems. We have concluded a so-called order processing contract with this provider, which ensures that the data processing is carried out in a permissible manner. You can find more details on this under section 12.10
- third-party tools
- 1 Use of Google Tag Manager
- 1. 1. This website uses Google Tag Manager, a cookie-free domain that does not collect any personal data
- 1. 2. The tool triggers other tags, which in turn may collect data Google Tag Manager does not access this data. If you have made a deactivation at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
- 1. 3. The use of Google Tag Manager is in the interest of simple administration and development of our website Google Tag Manager is used to efficiently control content on various pages, reduce the potential for errors, prevent outdated processes and thus also ensure secure websites for the user. The legal basis for its use is Art. 6 para. 1 lit. a GDPR.
- 2 Use of Google Analytics
12 .2. 1. This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) The purpose of our use of the tool is to enable us to analyze your user interactions on websites and in apps and to use the statistics and reports obtained to improve our offer and make it more interesting for you as a user.
- 2. 2 We record the interactions between you as a user of the website and our website primarily with the help of cookies, device/browser data, IP addresses and website or app activities. In Google Analytics, your IP addresses are also recorded to ensure the security of the service and to provide us as the website operator with information about the country, region or location from which the respective user originates (so-called “IP location determination”). For your protection, however, we naturally use the anonymization function (“IP masking”), i.e. Google truncates the IP addresses by the last octet within the EU/EEA.
- 2. 3 Google acts as a processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. For these cases, Google has, according to its own information, imposed a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to maintain an appropriate level of data protection in the third country.
- 2. 4 The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). Any necessary cookies will also only be set with your consent in accordance with Section 25 (1) TTDSG. You can withdraw your consent at any time without this affecting the permissibility of processing up to the time of withdrawal. In apps, you can reset the advertising ID in the Android or iOS settings. The easiest way to revoke your consent is via our Consent Manager or by installing the Google browser add-on, which can be accessed via the following link: tools.google.com/dlpage/gaoptout?hl=en/.
- 2. 5. You can find more information on the scope of services provided by Google Analytics at marketingplatform.google.com/about/analytics/terms/en/. Google provides information on data processing when using Google Analytics at the following link:support.google.com/analytics/answer/6004245?hl=en/. General information on data processing, which according to Google should also apply to Google Analytics, can be found in Google’s privacy policy at www.google.de/intl/de/policies/privacy/.
- 3 Use of Google Ads
- 3. 1. We use Google Ads to draw attention to our offers with the help of advertisements If you access our website via a Google ad, Google Ads will store a cookie on your device. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TTDSG. You can revoke your consent at any time with effect for the future. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings.
- 3. 2. The advertising material is delivered by Google via so-called “ad servers” For this purpose, we and other websites use so-called ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. We can obtain information about the success of our advertising campaigns via the Google Ads cookies stored on our website. These cookies are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that a user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
- 3. 3. The cookies set by Google enable Google to recognize your internet browser If a user visits certain pages of an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer so that the cookies cannot be tracked via the websites of other Ads customers. By integrating Google Ads, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.
- 3. 4. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server We ourselves do not independently collect personal data in the aforementioned advertising measures, but only provide Google with the opportunity to collect the data. We only receive statistical evaluations from Google, which provide information on which advertisements were clicked on how often and at what prices. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.
- 3. 5. you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. The easiest way to revoke your consent is via our Consent Manager or via the following functions: a) by setting your browser software accordingly, in particular by suppressing third-party cookies so that you do not receive any ads from third-party providers; b) by setting your browser to block cookies from the domain “www.googleadservices.com”, www.google.de/settings/ads, whereby this setting will be deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the “About Ads” self-regulation campaign via the link www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers under the link www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this website to their full extent.
- 3. 6. further information on data protection at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, can be found here: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/en.html.
- 4 Google Conversion Tracking
12 .4. 1. We use Google Ads with the additional application “Google Conversion Tracking” This is a procedure with which we can check the success of our advertising campaigns. For this purpose, the advertisements are provided with a technical provision, e.g. an ID, with which we can determine how a user interacts after clicking on the advertisements and whether one of our services is actually used. This provides us with statistical information about the total number of readers of our advertisements, which advertisements are particularly popular and, if applicable, further information about the consequences of the advertisement.
- 4. 2. the legal basis for the processing of your data is also in this respect Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. You can prevent or stop using the conversion tracking function in the same way as described above for Google Ads. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) of the GDPR. You can revoke your consent at any time with effect for the future. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings.
- 5.Google Remarketing
- 5. 1. We use Google Ads with the additional application “Google Remarketing” This process enables us to create advertisements based on existing information about you and to address you again when you continue to use the Internet. This is done by means of cookies set when you visit our website (usually through cookies), which are used by Google to record and pseudonymize your usage behavior when you visit various websites. According to Google’s own statements, the data collected as part of remarketing is not merged with your personal data, which may be stored by Google.
- 5 2. The legal basis for the processing of your data in this respect is also Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TTDSG. You can revoke your consent at any time with effect for the future. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings.
- 6. integration of YouTube videos
- 6. 1 We have integrated YouTube videos into our online offering, which are stored on YouTube.com and can be played directly from our website. [These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer]. The legal basis for the display of the videos is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. We set the cookie required to play the videos in accordance with Section 25 (2) No. 2 TTDSG, as this is a mandatory technical requirement.
- 6. 2. by visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
- 6. 3. the information collected is stored on Google servers, including in the USA. In these cases, the provider has, according to its own statements, imposed a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to maintain an appropriate level of data protection in the third country.
- 6. 4 For more information on the purpose and scope of data collection and its processing by YouTube, please refer to the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.
- 7. use of Vimeo
12 .7 1 We integrate the “Vimeo” service on our website, which is provided by Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.
- 7. 2 We use plugins from the provider Vimeo on some of our pages. When you access the pages of our website that have such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This tells the Vimeo server which of our pages you have visited. If you are logged in to Vimeo as a member, Vimeo assigns this information to your personal user account. When you use the plugin, e.g. by clicking on the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.
- 7. 3. the privacy policy of Vimeo Inc. can be viewed here: vimeo.com/privacy
- 7. 4. the processing of the data is based on our legitimate interest, i.e. the optimization of our offer and our website in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR. The transmission of the technically required data to Vimeo also takes place on the same legal basis. The technically required cookie for playing the videos is set on the basis of § 25 para. 2 no. 2 TTDSG.
- 7. 5. In order to ensure an adequate level of data protection when transferring data to the USA, we have concluded the EU standard contractual clauses with the provider of Vimeo in the so-called “Controller to Controller” variant. As a further protective measure, we always integrate videos from Vimeo in the “Do Not Track” variant, so that personal data is only transmitted to Vimeo in a minimal way. In addition, the provider of Vimeo has made a commitment to us to continue to comply with the self-imposed obligations from the former Privacy Shield Agreement.
- 8 LinkedIn Insight Day
- 8. 1 Furthermore, the website uses the so-called LinkedIn Insight Tag (or LinkedIn Pixel) of LinkedIn Ireland Unlimited Company (“LinkedIn”). By integrating this JavaScript tag, you as a user of our website can be shown interest-based and relevant advertisements (“ads”) when visiting the LinkedIn social network or other websites that also use the process, and we receive statistics about website visitors and demographics. Furthermore, we can evaluate your use of our LinkedIn ads and interest in our offers using a conversion tracking function and also show you LinkedIn ads on other websites via retargeting. In this way, we pursue the interest of improving the effectiveness of LinkedIn ads and making our website more interesting for you.
- 8. 2 By integrating the LinkedIn Insight tag, your browser automatically establishes a direct connection with the LinkedIn server, both when visiting the LinkedIn website and from websites that have the LinkedIn Insight tag integrated. LinkedIn and we are jointly responsible for collecting your usage data when you visit our website and transmitting it to the provider, but LinkedIn is solely responsible for the relevant processing to achieve the described purposes after the data has been transmitted. We have no influence on the scope and type of use of the data by LinkedIn, we therefore inform you according to our level of knowledge: By integrating the LinkedIn Insight tag, LinkedIn receives the information that you have called up the corresponding website of our Internet presence or clicked on an advertisement from us. If you are registered with a LinkedIn service, LinkedIn can assign the visit to your account. Even if you are not registered with LinkedIn or have not logged in, there is a possibility that the provider will find out your IP address, time window and other identifying features and link them to the actions assigned to you.
- 8. 3. deactivation of the LinkedIn Insight tag and other advertising objections are possible in the settings for advertisements at www.linkedin.com/help/linkedin/answer/62931?trk=microsites-frontend_legal_privacy-policy&lang=en and additionally at www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Further setting options and information can be found in the LinkedIn Privacy Center: privacy.linkedin.com/en-de?lr=1/.
- 8. 4. the legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with § 25 para. 1 TTDSG. You can revoke your consent at any time with effect for the future. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings.
- 8. 5. LinkedIn also processes your personal data in the USA and has imposed a standard that corresponds to the former EU-US Privacy Shield. We have also agreed so-called standard data protection clauses with LinkedIn, the purpose of which is to ensure an adequate level of data protection in the third country.
- 8. 6. further information on data processing by LinkedIn can be obtained from the provider, LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland; information on the LinkedIn Insight tag: business.linkedin.com/en/marketing-solutions/insight-tag?lr=1/; data protection information: www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
- 9. application tool Personio
- 9. 1. we use the service provider Personio SE & Co KG, Seidlstraße 3, 80335 Munich, Germany, for applicant management.
- 9. 2 If you use our online application process, the associated personal data (e.g. contact and communication data, application documents, notes during job interviews, etc.) will be collected and processed insofar as this is necessary for the decision on the establishment of an employment relationship. The legal basis for this is § 26 BDSG i.V.m. Art. 6 para. 1 lit. b GDPR. Your personal data will only be passed on within our company to persons who are involved in processing your application. If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of Section 26 BDSG for the purpose of implementing the employment relationship. Otherwise, the data will be deleted by us 6 months after your application.
- 9. 3. possibly cookies: If a cookie is required for data processing, it will be set in accordance with § 25 para. 1 TTDSG, i.e. after you have given your consent. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings.
- recipients or categories of recipients
If we pass on your personal data to third parties, you will be explicitly informed of this in the description of the respective data processing (e.g. when using our contact form). Of course, we also use external service providers for technical and organizational processing, with whom we have concluded corresponding order processing contracts within the meaning of Art. 28 GDPR. These are, for example, service providers for web hosting, sending emails, maintenance and servicing of our IT systems, etc.
14 Storage period
- 1.
Your data will be stored for as long as it is absolutely necessary to achieve the respective purpose, but for no longer than required by law (e.g. under commercial law we are obliged to store business letters, which may also include emails, for 10 years).
- 2.
As soon as the storage purpose no longer applies or a storage period prescribed by the aforementioned regulations expires, the personal data is routinely blocked or deleted.
15 Your rights
- 1.
You have extensive rights with regard to the processing of your personal data. First of all, you have a comprehensive right to information and may request the correction and/or deletion and/or blocking of your personal data. You can also request a restriction of processing and have a right to object and a right to data portability. If you wish to assert any of your rights and/or receive more information about this, please contact us at info@fyk-group.com.
- 2.
You also have the right to lodge a complaint with a supervisory authority. If you have any questions, comments or requests regarding the collection, processing and use of your personal data by us, please also contact us using the contact details provided.
- 3 .1 Right to object on a case-by-case basis:
- You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
- We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
- 3. 2. right to object to the processing of data for direct marketing purposes:
- If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
- If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
- Notwithstanding Directive 2002/58/EC, you have the option of exercising your right to object in connection with the use of information society services by means of automated procedures using technical specifications.
- no obligation to provide personal data
We do not make the conclusion of contracts with us dependent on you providing us with personal data beforehand. As a customer, you are under no legal or contractual obligation to provide us with your personal data; however, we may only be able to provide certain services to a limited extent or not at all if you do not provide the necessary data. If this should exceptionally be the case within the scope of the products and services offered by us as presented above, you will be informed of this separately.
Data protection
Information obligations according to Art. 13 GDPR
In our opinion, data protection should be transparent, easy to understand and, above all, fair for all parties.
For this reason, we would like to inform you in this data protection notice about what personal data we collect and use from you, whether and if so, to which third parties it may be passed on, how long we store the data and what rights you have if you do not agree with our responsible handling.
If you still have any questions after reading this detailed data protection information, please do not hesitate to contact us using the contact details below.
- name and contact details of the person responsible
F.Y.K. Group GmbH
Donnersbergweg 1
D-67059 Ludwigshafen am Rhein
You can reach us by post, by e-mail atinfo@fyk-group.com or by telephone on 0621/54578345
- collection of personal data for informational use
Each time you access our website, we collect the following information about your computer: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred as part of this request are recorded. We also collect product and version information about the browser used and the operating system of your computer. We also record the website from which our website was accessed. The IP address of your computer is only stored for the duration of your use of the website and is then immediately deleted or anonymized by shortening it. We use this data for the operation of our website, in particular to detect and eliminate errors on the website, to determine the utilization of the website and to make adjustments or improvements. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR.
- cookies & local storage
- 1.
We may also collect information about your use of our website through the use of so-called browser cookies. These are small text files that are stored on your data carrier and that store certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent, as well as information about the age of the cookie and an alphanumeric identifier. Cookies enable our systems to recognize the user’s device and make any default settings immediately available. As soon as a user accesses the platform, a cookie is transferred to the hard disk of the user’s computer. Cookies help us to improve our website and offer you a better, more personalized service. They enable us to recognize your computer when you return to our website and thereby:
- to store information about your preferred activities on the website and thus tailor our website to your individual interests. This includes, for example, advertising that corresponds to your personal interests.
- speed up the processing of your requests.
- 2.
The cookies we use only store the data explained above about your use of the website. This is not done by assigning it to you personally, but by assigning an identification number to the cookie (“cookie ID”). The cookie ID is not merged with your name, IP address or similar data that would allow the cookie to be assigned to you.
- 3.
A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. In terms of their function, a distinction is made between cookies:
- Technical cookies: These are strictly necessary to move around the website, use basic functions and ensure the security of the website; they do not collect information about you for marketing purposes or store which websites you have visited;
- Performance cookies, statistical cookies: These collect information about how you use our website, which pages you visit and, for example, whether errors occur when using the website; they do not collect any information that could identify you – all information collected is anonymous and is only used to improve our website and to find out what interests our users;
- Advertising cookies, targeting cookies: These are used to offer the website user needs-based advertising on the website or offers from third parties and to measure the effectiveness of these offers; advertising and targeting and statistics cookies are stored for a maximum of 13 months;
- Sharing cookies: These are used to improve the interactivity of our website with other services (e.g. social networks); sharing cookies are stored for a maximum of 13 months.
- 4.
Any use of cookies that is not absolutely technically necessary constitutes data processing that is only permitted with your express and active consent in accordance with Section 25 (1) TTDSG and only takes place in compliance with this legal provision. This applies in particular to the use of advertising, targeting or sharing cookies. In addition, we only pass on your personal data processed by cookies to third parties if you have given your express consent in accordance with Section 25 (1) TTDSG.
- 5.
Below you will find an overview of the cookies used on our website and your current consent status.
- 6.
You can determine yourself whether cookies can be set and retrieved using the settings in your browser. For example, you can completely deactivate the storage of cookies in your browser, restrict it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback. You can block or delete individual cookies. For technical reasons, however, this may result in some functions of our website being impaired and no longer functioning fully.
- 7.
If cookies are only used on our website with your consent, you can also make the settings mentioned under 4. 6. in our Cookie Consent Tool by clicking on the Cookiebot icon at the bottom left of the browser window.
- data security
All information that you transmit to us is stored on servers within the European Union. Unfortunately, the transmission of information via the Internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website via the Internet. However, we take technical and organizational measures to protect our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorized persons. In particular, your personal data is transmitted to us in encrypted form. We use the SSL (Secure Socket Layer) or TLS (Transport Layer Security) coding system.
- use of CookieBot
- 1.
We have integrated the consent management tool “Cookiebot” from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (Usercentrics) on our website in order to obtain consent for data processing or the use of cookies or comparable functions. With the help of “Cookiebot”, you have the option of giving or refusing your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, reach measurement and personalized advertising. You can use “Cookiebot” to give or refuse your consent for all functions or give your consent for individual purposes or individual functions. You can also change the settings you have made at a later date using the icon at the bottom left of the website you are visiting.
- 2.
The purpose of integrating “Cookiebot” is to allow the users of our website to decide on the aforementioned matters and to offer the possibility of changing settings already made during the further use of our website. In the course of using “Cookiebot”, personal data and information about the end devices used (IP address, language, browser, etc.) are processed and sent to CookieYes Limited. The information about the settings you have made is also stored on your device.
- 3.
The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. c), Art. 6 para. 3 sentence 1 lit. a), Art. 25, Art. 5 para. 2 GDPR and alternatively Art. 6 para. 1 lit. f) GDPR. We store the cookie required to store your consent on the basis of § 25 para. 2 no. 2 TTDSG. “Cookiebot” helps us to process the data of our users in order to fulfill our legal obligations (e.g. obtaining informed consent and the obligation to provide proof thereof). Our legitimate interests in processing that goes beyond the obtaining and verifiability of the consent obtained lie in the evaluation of consent rates and other functionalities.
- 4.
“Cookiebot” stores your data for as long as your user settings are active. After one year after the user settings have been made, you will be asked for your consent again. The user settings made will then be stored again for this period, unless you delete the information about your user settings in the terminal device capacities provided for this purpose yourself beforehand. We have concluded the standard data protection clauses (SCC) with “Cookiebot”. In addition, an adequacy decision of the EU Commission exists for the United Kingdom.
- 5.
You can object to the processing if the processing is based on Art. 6 para. 1 sentence 1 lit. f) GDPR. You have the right to object on grounds relating to your particular situation. To object, please send an email to privacy@cookiebot.com.
- no disclosure of your personal data
We do not pass on your personal data to third parties unless you have consented to the data being passed on or we are entitled or obliged to pass on data on the basis of statutory provisions and/or official or court orders. In particular, this may involve providing information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.
8 Data protection and third-party websites
The website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or guarantee for third-party content or data protection conditions. Please check the applicable data protection conditions before you transmit personal data to these websites.
- use of functions on our website
- 1.
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you generally have to provide additional personal data that we use to provide the respective service. If additional voluntary information is possible, it is marked accordingly.
- 2.
When you contact us by e-mail or via the contact form, your e-mail address and, if you provide it, your name and telephone number will be stored by us in order to answer your questions. (The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR).
- social media profiles
- 1.
We have various presences on social media platforms. We operate these sites with the following providers:
- 1. 1. LinkedIn, operated by Linkedin Ireland Unlimited Compnay, Wiltom Plaza, Wilton Place, Dublin 2, Ireland, privacy policy at https://de.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy
- 1. 2. Xing, operated by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, data protection information at https://privacy.xing.com/de/datenschutzerklaerung
- 2.
We use the technical platform and services of the providers for these information services. We would like to point out that you use our presence on social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our websites, the providers of the social media platforms collect your IP address and other information in the form of cookies on your end device. This information is used to provide us, as the operator of the accounts, with statistical information about the interaction with us. The legal basis in each case is your consent: for the setting of cookies this is § 25 para. 1 TTDSG, for the subsequent data processing Art. 6 para. 1 lit. a GDPR.
- 3.
The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. According to their own statements, all of the aforementioned providers maintain an adequate level of data protection that corresponds to that of the former EU-US Privacy Shield and we have concluded the standard data protection clauses with the companies (with the exception of Xing, as this provider is based within the EU). We do not know how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or whether you visit the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your end device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can be used to track how you have moved around the network. Buttons integrated into websites enable the platforms to record your visits to these websites and assign them to your respective profile. This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out or deactivate the “stay logged in” function, delete the cookies on your device and restart your browser.
- 4.
As the provider of the information service, we also only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy policy. The legal basis for the processing of your data on the social media platform is Art. 6 para. 1 sentence 1 lit. f GDPR.
- 5.
To exercise your rights as a data subject, you can contact us or the provider of the social media platform. If one party is not responsible for responding or must receive the information from the other party, we or the provider will then forward your request to the respective partner. Please contact the operator of the social media platform directly for questions about profiling and the processing of your data when using the website. If you have any questions about the processing of your interaction with us on our site, please write to the contact details provided by us above.
- 6.
What information the social media platform receives and how it is used is described by the providers in their privacy policies (link see 9. 1.). There you will also find information about contact options and the settings options for advertisements. Further information on social networks and how you can protect your data can also be found at www.youngdata.de.
- application process
- 1.
We process the data that you have sent us in connection with your application in order to check your suitability for the position (or any other open positions in our companies) and to carry out the application process.
- 2.
The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted. Should the data be required for legal prosecution after completion of the application process, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR. Our interest then lies in the assertion of or defense against claims.
- 3.
Applicants’ data will be deleted after 6 months in the event of rejection.
- 4.
In the event that you have consented to further storage of your personal data, we will transfer your data to our applicant pool. There the data will be deleted after two years.
- 5.
If you have been accepted for a position as part of the application process, the data from the applicant data system will be transferred to our personnel information system.
- 6.
Your application data will be reviewed by the HR department after receipt of your application. Suitable applications are then forwarded internally to the department managers responsible for the respective open position. The next steps are then agreed. Within the company, only those persons have access to your data who need it for the proper course of our application procedure.
- 7.
If you use our application tool, we use a specialized software provider for the application process. This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems. We have concluded a so-called order processing contract with this provider, which ensures that the data processing is carried out in a permissible manner. You can find more details on this under section 12.10
- third-party tools
- 1 Use of Google Tag Manager
- 1. 1. This website uses Google Tag Manager, a cookie-free domain that does not collect any personal data
- 1. 2. The tool triggers other tags, which in turn may collect data Google Tag Manager does not access this data. If you have made a deactivation at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
- 1. 3. The use of Google Tag Manager is in the interest of simple administration and development of our website Google Tag Manager is used to efficiently control content on various pages, reduce the potential for errors, prevent outdated processes and thus also ensure secure websites for the user. The legal basis for its use is Art. 6 para. 1 lit. a GDPR.
- 2 Use of Google Analytics
12 .2. 1. This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) The purpose of our use of the tool is to enable us to analyze your user interactions on websites and in apps and to use the statistics and reports obtained to improve our offer and make it more interesting for you as a user.
- 2. 2 We record the interactions between you as a user of the website and our website primarily with the help of cookies, device/browser data, IP addresses and website or app activities. In Google Analytics, your IP addresses are also recorded to ensure the security of the service and to provide us as the website operator with information about the country, region or location from which the respective user originates (so-called “IP location determination”). For your protection, however, we naturally use the anonymization function (“IP masking”), i.e. Google truncates the IP addresses by the last octet within the EU/EEA.
- 2. 3 Google acts as a processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. For these cases, Google has, according to its own information, imposed a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to maintain an appropriate level of data protection in the third country.
- 2. 4 The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). Any necessary cookies will also only be set with your consent in accordance with Section 25 (1) TTDSG. You can withdraw your consent at any time without this affecting the permissibility of processing up to the time of withdrawal. In apps, you can reset the advertising ID in the Android or iOS settings. The easiest way to revoke your consent is via our Consent Manager or by installing the Google browser add-on, which can be accessed via the following link: tools.google.com/dlpage/gaoptout?hl=en/.
- 2. 5. You can find more information on the scope of services provided by Google Analytics at marketingplatform.google.com/about/analytics/terms/en/. Google provides information on data processing when using Google Analytics at the following link:support.google.com/analytics/answer/6004245?hl=en/. General information on data processing, which according to Google should also apply to Google Analytics, can be found in Google’s privacy policy at www.google.de/intl/de/policies/privacy/.
- 3 Use of Google Ads
- 3. 1. We use Google Ads to draw attention to our offers with the help of advertisements If you access our website via a Google ad, Google Ads will store a cookie on your device. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TTDSG. You can revoke your consent at any time with effect for the future. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings.
- 3. 2. The advertising material is delivered by Google via so-called “ad servers” For this purpose, we and other websites use so-called ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. We can obtain information about the success of our advertising campaigns via the Google Ads cookies stored on our website. These cookies are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that a user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
- 3. 3. The cookies set by Google enable Google to recognize your internet browser If a user visits certain pages of an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer so that the cookies cannot be tracked via the websites of other Ads customers. By integrating Google Ads, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.
- 3. 4. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server We ourselves do not independently collect personal data in the aforementioned advertising measures, but only provide Google with the opportunity to collect the data. We only receive statistical evaluations from Google, which provide information on which advertisements were clicked on how often and at what prices. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.
- 3. 5. you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. The easiest way to revoke your consent is via our Consent Manager or via the following functions: a) by setting your browser software accordingly, in particular by suppressing third-party cookies so that you do not receive any ads from third-party providers; b) by setting your browser to block cookies from the domain “www.googleadservices.com”, www.google.de/settings/ads, whereby this setting will be deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the “About Ads” self-regulation campaign via the link www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers under the link www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this website to their full extent.
- 3. 6. further information on data protection at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, can be found here: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/en.html.
- 4 Google Conversion Tracking
12 .4. 1. We use Google Ads with the additional application “Google Conversion Tracking” This is a procedure with which we can check the success of our advertising campaigns. For this purpose, the advertisements are provided with a technical provision, e.g. an ID, with which we can determine how a user interacts after clicking on the advertisements and whether one of our services is actually used. This provides us with statistical information about the total number of readers of our advertisements, which advertisements are particularly popular and, if applicable, further information about the consequences of the advertisement.
- 4. 2. the legal basis for the processing of your data is also in this respect Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. You can prevent or stop using the conversion tracking function in the same way as described above for Google Ads. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) of the GDPR. You can revoke your consent at any time with effect for the future. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings.
- 5.Google Remarketing
- 5. 1. We use Google Ads with the additional application “Google Remarketing” This process enables us to create advertisements based on existing information about you and to address you again when you continue to use the Internet. This is done by means of cookies set when you visit our website (usually through cookies), which are used by Google to record and pseudonymize your usage behavior when you visit various websites. According to Google’s own statements, the data collected as part of remarketing is not merged with your personal data, which may be stored by Google.
- 5 2. The legal basis for the processing of your data in this respect is also Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TTDSG. You can revoke your consent at any time with effect for the future. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings.
- 6. integration of YouTube videos
- 6. 1 We have integrated YouTube videos into our online offering, which are stored on YouTube.com and can be played directly from our website. [These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer]. The legal basis for the display of the videos is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. We set the cookie required to play the videos in accordance with Section 25 (2) No. 2 TTDSG, as this is a mandatory technical requirement.
- 6. 2. by visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
- 6. 3. the information collected is stored on Google servers, including in the USA. In these cases, the provider has, according to its own statements, imposed a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to maintain an appropriate level of data protection in the third country.
- 6. 4 For more information on the purpose and scope of data collection and its processing by YouTube, please refer to the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.
- 7. use of Vimeo
12 .7 1 We integrate the “Vimeo” service on our website, which is provided by Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.
- 7. 2 We use plugins from the provider Vimeo on some of our pages. When you access the pages of our website that have such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This tells the Vimeo server which of our pages you have visited. If you are logged in to Vimeo as a member, Vimeo assigns this information to your personal user account. When you use the plugin, e.g. by clicking on the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.
- 7. 3. the privacy policy of Vimeo Inc. can be viewed here: vimeo.com/privacy
- 7. 4. the processing of the data is based on our legitimate interest, i.e. the optimization of our offer and our website in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR. The transmission of the technically required data to Vimeo also takes place on the same legal basis. The technically required cookie for playing the videos is set on the basis of § 25 para. 2 no. 2 TTDSG.
- 7. 5. In order to ensure an adequate level of data protection when transferring data to the USA, we have concluded the EU standard contractual clauses with the provider of Vimeo in the so-called “Controller to Controller” variant. As a further protective measure, we always integrate videos from Vimeo in the “Do Not Track” variant, so that personal data is only transmitted to Vimeo in a minimal way. In addition, the provider of Vimeo has made a commitment to us to continue to comply with the self-imposed obligations from the former Privacy Shield Agreement.
- 8 LinkedIn Insight Day
- 8. 1 Furthermore, the website uses the so-called LinkedIn Insight Tag (or LinkedIn Pixel) of LinkedIn Ireland Unlimited Company (“LinkedIn”). By integrating this JavaScript tag, you as a user of our website can be shown interest-based and relevant advertisements (“ads”) when visiting the LinkedIn social network or other websites that also use the process, and we receive statistics about website visitors and demographics. Furthermore, we can evaluate your use of our LinkedIn ads and interest in our offers using a conversion tracking function and also show you LinkedIn ads on other websites via retargeting. In this way, we pursue the interest of improving the effectiveness of LinkedIn ads and making our website more interesting for you.
- 8. 2 By integrating the LinkedIn Insight tag, your browser automatically establishes a direct connection with the LinkedIn server, both when visiting the LinkedIn website and from websites that have the LinkedIn Insight tag integrated. LinkedIn and we are jointly responsible for collecting your usage data when you visit our website and transmitting it to the provider, but LinkedIn is solely responsible for the relevant processing to achieve the described purposes after the data has been transmitted. We have no influence on the scope and type of use of the data by LinkedIn, we therefore inform you according to our level of knowledge: By integrating the LinkedIn Insight tag, LinkedIn receives the information that you have called up the corresponding website of our Internet presence or clicked on an advertisement from us. If you are registered with a LinkedIn service, LinkedIn can assign the visit to your account. Even if you are not registered with LinkedIn or have not logged in, there is a possibility that the provider will find out your IP address, time window and other identifying features and link them to the actions assigned to you.
- 8. 3. deactivation of the LinkedIn Insight tag and other advertising objections are possible in the settings for advertisements at www.linkedin.com/help/linkedin/answer/62931?trk=microsites-frontend_legal_privacy-policy&lang=en and additionally at www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Further setting options and information can be found in the LinkedIn Privacy Center: privacy.linkedin.com/en-de?lr=1/.
- 8. 4. the legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with § 25 para. 1 TTDSG. You can revoke your consent at any time with effect for the future. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings.
- 8. 5. LinkedIn also processes your personal data in the USA and has imposed a standard that corresponds to the former EU-US Privacy Shield. We have also agreed so-called standard data protection clauses with LinkedIn, the purpose of which is to ensure an adequate level of data protection in the third country.
- 8. 6. further information on data processing by LinkedIn can be obtained from the provider, LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland; information on the LinkedIn Insight tag: business.linkedin.com/en/marketing-solutions/insight-tag?lr=1/; data protection information: www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
- 9. application tool Personio
- 9. 1. we use the service provider Personio SE & Co KG, Seidlstraße 3, 80335 Munich, Germany, for applicant management.
- 9. 2 If you use our online application process, the associated personal data (e.g. contact and communication data, application documents, notes during job interviews, etc.) will be collected and processed insofar as this is necessary for the decision on the establishment of an employment relationship. The legal basis for this is § 26 BDSG i.V.m. Art. 6 para. 1 lit. b GDPR. Your personal data will only be passed on within our company to persons who are involved in processing your application. If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of Section 26 BDSG for the purpose of implementing the employment relationship. Otherwise, the data will be deleted by us 6 months after your application.
- 9. 3. possibly cookies: If a cookie is required for data processing, it will be set in accordance with § 25 para. 1 TTDSG, i.e. after you have given your consent. You can revoke your consent at any time with effect for the future by clicking on the cookiebot icon at the bottom left of the browser window and making the appropriate settings.
- recipients or categories of recipients
If we pass on your personal data to third parties, you will be explicitly informed of this in the description of the respective data processing (e.g. when using our contact form). Of course, we also use external service providers for technical and organizational processing, with whom we have concluded corresponding order processing contracts within the meaning of Art. 28 GDPR. These are, for example, service providers for web hosting, sending emails, maintenance and servicing of our IT systems, etc.
14 Storage period
- 1.
Your data will be stored for as long as it is absolutely necessary to achieve the respective purpose, but for no longer than required by law (e.g. under commercial law we are obliged to store business letters, which may also include emails, for 10 years).
- 2.
As soon as the storage purpose no longer applies or a storage period prescribed by the aforementioned regulations expires, the personal data is routinely blocked or deleted.
15 Your rights
- 1.
You have extensive rights with regard to the processing of your personal data. First of all, you have a comprehensive right to information and may request the correction and/or deletion and/or blocking of your personal data. You can also request a restriction of processing and have a right to object and a right to data portability. If you wish to assert any of your rights and/or receive more information about this, please contact us at info@fyk-group.com.
- 2.
You also have the right to lodge a complaint with a supervisory authority. If you have any questions, comments or requests regarding the collection, processing and use of your personal data by us, please also contact us using the contact details provided.
- 3 .1 Right to object on a case-by-case basis:
- You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
- We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
- 3. 2. right to object to the processing of data for direct marketing purposes:
- If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
- If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
- Notwithstanding Directive 2002/58/EC, you have the option of exercising your right to object in connection with the use of information society services by means of automated procedures using technical specifications.
- no obligation to provide personal data
We do not make the conclusion of contracts with us dependent on you providing us with personal data beforehand. As a customer, you are under no legal or contractual obligation to provide us with your personal data; however, we may only be able to provide certain services to a limited extent or not at all if you do not provide the necessary data. If this should exceptionally be the case within the scope of the products and services offered by us as presented above, you will be informed of this separately.