Privacy Policy
1. Controller and Data Protection Officer
1.1. digatus it group AG, Elsenheimerstraße 61, 80687 Munich, Phone: +49 89 215 469 41, Email: info@digatus.de (hereinafter referred to as “Provider”), operates the portal accessible at digatus.de with its subpages (hereinafter referred to as “Portal”).
1.2. The Provider takes the protection of your personal data very seriously and complies with applicable data protection regulations such as the EU General Data Protection Regulation (EU-GDPR), the Federal Data Protection Act (BDSG), the Telecommunications and Telemedia Data Protection Act (TTDSG), and the Telemedia Act (TMG). The following statement gives you an overview of how the Provider ensures this protection and in particular what type of data is collected for what purpose.
1.3. Contact details of Data Protection Officer:
PROTEQO GmbH
Moltkestraße 1
86159 Augsburg
Email: kontakt@proteqo.de
2. Specific Information about the Website
2.1. User Data
When you visit our websites, you transmit data (out of technical necessity) to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:
- Date and time of the request
- Name of the requested file
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- Web browser and operating system used
- Full IP address of the requesting computer
- Amount of data transferred.
For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data for a short period of time. We cannot identify individuals based on this data. After seven days at the latest, the data is anonymized by shortening the IP address to the domain level, so that it is no longer possible to establish a relationship to the individual user. In anonymized form, the data is also processed for statistical purposes; there is no comparison with other data sets or transfer to third parties, even in extracts.
2.2. Specific Information on the Processing of Customer/Prospect Data
Affected data: Data provided for contract execution; if applicable, additional data for processing based on your explicit consent.
Processing purpose:
Contract execution, including offers, orders, sales and invoicing, quality assurance.
Categories of recipients:
Public authorities in the presence of overriding legal provisions
External service providers or other contractors, including for data processing and hosting, for shipping, transport and logistics, service providers for printing and sending information.
Other external parties insofar as the data subject has given their consent or a transfer is permissible due to overriding interest, including for credit checks for purchases on account, for electronic dispatch of information, for quality assurance purposes.
Third country transfers:
As part of contract execution, processors outside the European Union may also be used, including email providers.
Duration of data storage:
The duration of data storage is based on legal retention obligations and is usually 10 years.
2.3. Newsletter
When registering for our newsletter, you provide us with your email address and optionally additional data. We use this information exclusively to send you the newsletter. The data you entered during the newsletter registration will remain stored with us until you unsubscribe from our newsletter. You can unsubscribe at any time via the link provided in the newsletter or by sending a corresponding message to us (datenschutz@digatus.de). By unsubscribing, you object to the use of your email address.
2.4. Applicant Portal
Data collection
In the course of your application, the following data will be processed by us:
- First name, Last name
- Phone number (private or mobile)
- Application documents (cover letter, resume, certificates, diplomas, etc.)
Purpose of data collection and legal basis
We process the data you have sent us in connection with your application for filling positions within our company. Your data will generally only be forwarded to the persons and departments responsible for the application process. Your application data will not be used or passed on to third parties beyond this.
The application data may be processed for statistical purposes (e.g., reporting). In this case, no conclusions about individual persons are possible.
According to § 26 of the new BDSG, the processing of personal data is permissible if it is necessary in connection with the decision to establish an employment relationship. If the data may be required for legal action after the completion of the application process, data processing may be carried out in accordance with Art. 6 GDPR, in particular to safeguard legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR. Our interest then lies in the assertion or defense of claims.
Retention period of applicant data
Your application data will be deleted six months after the completion of the application process. This does not apply if legal provisions prevent deletion, further storage is necessary for the purpose of providing evidence, or you have agreed to longer storage.
Storage for future positions
If you consent to the storage of your application data beyond the currently vacant position, we will continue to store your application data for future job offers.
3. Information regarding the use of cookies
3.1. Cookiebot
We use the consent management service Cookiebot, provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (Cybot). This allows us to obtain and manage website users’ consent for data processing. The processing is necessary to fulfill a legal obligation (Art. 7 para. 1 GDPR) to which we are subject (Art. 6 para. 1 s. 1 lit. c GDPR). For this purpose, the following data is processed using cookies:
Your IP address (the last three digits are set to ‘0’). Date and time of consent. Browser information. URL from which the consent was sent. An anonymous, random, and encrypted key. Your end-user consent status, as proof of consent.
The key and consent status are stored in the browser for 12 months using the “CookieConsent” cookie. This maintains your cookie preference for subsequent page requests. The key can be used to prove and track your consent.
If you activate the “Bulk Consent” service function to enable consent for multiple websites through a single end-user consent, the service additionally stores a separate, random, unique ID with your consent. If all of the following criteria are met, this key is stored in encrypted form in the third-party cookie “CookieConsentBulkTicket” in your browser: You activate the bulk consent function in the service configuration. You allow third-party cookies via browser settings. You have disabled “Do Not Track” via browser settings. You accept all or at least certain types of cookies when giving consent.
The functionality of the website is not guaranteed without this processing.
Cybot is the recipient of your personal data and acts as a data processor for us.
The processing takes place in the European Union. For further information on objection and removal options regarding Cybot, please visit: https://www.cookiebot.com/de/privacy-policy/
Your personal data will be continuously deleted after 12 months or immediately upon termination of the contract between us and Cybot.
Personal data is only collected, processed, and used as part of the use of the portal as described below. Personal data is all individual information about personal or factual circumstances of a specific or identifiable natural person (not included: legal entities, such as a GmbH or AG). Personal data primarily includes information such as first and last name, address, email address, or professional circumstances of a person.
3.2. Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited (“Google”), based on the consent of website visitors. Google Analytics uses so-called “cookies”, text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to and stored by Google on servers in the United States. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide other services related to website and internet usage to the website operator. We would like to point out that this website only uses Google Analytics after prior consent and with a shortened version of IP addresses to exclude direct personal identifiability.
3.3. GoogleMaps
On this website, Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) is used based on the consent of the site users. Google Maps is a web service for displaying interactive (land) maps for the visual representation of geographical information. By using this service, our locations are displayed and directions are facilitated.
As soon as you access the subpages where the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google’s servers and stored there, which may also be transferred to Google LLC’s servers in the USA. This happens regardless of whether Google provides a user account that you are logged into, or whether a user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not want your profile to be associated with Google, you must log out before accessing the map service. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.
You can view Google’s terms of use here: https://www.google.de/intl/de/policies/terms/regional.html. The terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found at: https://www.google.de/intl/de/policies/privacy/
3.4. hCaptcha
We use the anti-bot service hCaptcha (hereinafter “hCaptcha”) on our website based on the consent of the site users. This service is provided by Intuition Machines, Inc., a US company based in Delaware (“IMI”). hCaptcha is used to check whether the data entered on our website (e.g., on a registration page or contact form) has been entered by a human or an automated program. For this purpose, hCaptcha analyzes the behavior of the visitor to the website or mobile app based on various characteristics. This analysis starts automatically as soon as the visitor enters a part of the website or app with hCaptcha enabled. For the analysis, hCaptcha evaluates various information (e.g., IP address, visitor’s length of stay on the website or app, or mouse movements of the user). The data collected during the analysis is forwarded to IMI. The hCaptcha analysis in “invisible mode” can take place completely in the background. Website or app visitors are not informed that such an analysis is taking place if the user is not presented with a challenge.
For more information about hCaptcha and IMI’s privacy policy and terms of use, please visit the following links: https://www.hcaptcha.com/privacy and https://www.hcaptcha.com/terms.
3.5. Facebook
The provider uses social plugins from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are marked with a Facebook logo. When you access the portal, your browser establishes a direct connection with Facebook’s servers. The content of the plugin is transmitted directly from Facebook to your browser and embedded in the website. Through the integration of the plugins, Facebook receives, among other things, the information that you have accessed the corresponding page of the provider. If you are logged into Facebook, Facebook can associate your visit with your Facebook account. If you interact with the plugins, for example by clicking the “Like” button or posting a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights and setting options for protecting your privacy, can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy.
If you do not want Facebook to use your data, you must log out of Facebook before visiting the portal. If you are not a member of Facebook or have logged out before visiting the portal, there is still the possibility that at least your IP address will be transmitted and stored there.
3.6. LinkedIn Conversion Tracking
The provider uses social plugins from the social network linkedin.com, which is operated by LinkedIn Corporation, 599 N Mathilda Ave, Sunnyvale, CA 94085, USA. The analysis and conversion tracking technology of the LinkedIn platform is used on this website. With the aforementioned technology, more relevant advertising based on your interests can be displayed to you. Furthermore, the provider of LinkedIn receives aggregated and anonymous reports of advertising activities and information about how you interact with the website.
You can prevent the storage of cookies by adjusting the settings of your browser software accordingly. You can also object to the collection of data generated by the cookie and related to your use of the portal (including your IP address) by LinkedIn and the processing of this data by LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
3.7. Microsoft Bookings
For online booking of meeting appointments, we use a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The connection to the service is only established when you access the online booking function via a link on our site.
For more information on how user data is handled, please refer to Microsoft’s privacy policy at https://privacy.microsoft.com/en-us/privacystatement
4. Questions and Contact
Furthermore, you can exercise your rights to information, correction, deletion, or restriction of processing, or to object to processing, as well as the right to data portability at any time. Here you can contact us via email (datenschutz@digatus.de) or letter. You also have the right to lodge a complaint with the data protection supervisory authority.
Last updated 03/2022