1. Person in charge and data protection officer
1.1. digatus it group AG, Elsenheimerstrasse 61, 80687 Munich, Germany, +49 89 215 469 41, e-mail: firstname.lastname@example.org (hereinafter referred to as the “Provider”), operates the portal accessible at digatus.de with its subpages (hereinafter referred to as the “Portal”).
1.2. The provider takes the protection of your personal data very seriously and complies with the applicable data protection regulations such as the EU Data Protection Regulation (EU-DSGVO), the German Federal Data Protection Act (BDSG), the Telecommunications Telemedia Data Protection Act (TTDSG), and the Telemedia Act (TMG). The following statement provides you with an overview of how the provider ensures this protection and, in particular, what type of data is collected for what purpose.
1.3. Contact details data protection officer:
IITR Datenschutz GmbH
2. Website specifics
2.1. User data
When you enter our web pages, you transmit data to our web server (out of technical necessity) via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:
- Date and time of the request
- Name of the requested file
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- Web browser and operating system used
- Complete IP address of the requesting computer
- Amount of data transferred.
For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data for a short period of time. It is not possible for us to draw conclusions about individual persons on the basis of this data. After seven days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a link to the individual user. In addition, the data is processed anonymously for statistical purposes; it is not compared with other data or passed on to third parties, even in excerpts.
2.2. Specific information on the processing of customer data/prospect data
Concerned data: Data communicated for the execution of the contract data going beyond this for processing on the basis of your express consent.
Purpose of processing:
Contract execution, including quotes, orders, sales and invoicing, quality assurance.
Categories of recipients:
Public bodies in the case of overriding legal provisions
External service providers or other contractors, including for data processing and hosting, shipping, transport and logistics, service providers for printing and mailing information.
Other external bodies insofar as the data subject has given his/her consent or transmission is permissible for reasons of overriding interest, e.g. for creditworthiness information in the case of purchase on account, for electronic dispatch of information, for quality assurance purposes.
Third country transfers:
In the context of the execution of the contract, processors outside the European Union may also be used, including email providers.
Duration of data storage:
The duration of the data storage depends on the legal retention obligations and is usually 10 years.
When registering for our newsletter, you provide us with your mail address and optionally other data. We use this information exclusively to send you the newsletter. The data you entered when registering for the newsletter will remain stored by us until you unsubscribe from our newsletter. Unsubscribing is possible at any time via the link provided for this purpose in the newsletter or by sending us a corresponding message (email@example.com). By unsubscribing, you object to the use of your mail address.
2.4. Applicant portal
In the course of your application, the following data will be processed by us:
- Name, surname
- Phone number (personal or mobile)
- Application documents (cover letter, resume, references, certificates, etc.)
Purpose of data collection and legal basis
We process the data you have sent us in connection with your application for the purpose of filling positions within our company. As a matter of principle, your data will only be forwarded to the persons and departments responsible for the application process. Your application data will not be used for any other purpose or passed on to third parties.
The application data can be processed for statistical purposes (e.g. reporting). It is not possible to draw any conclusions about individual persons.
According to Section 26 BDSG-neu, the processing of personal data required in connection with the decision on the establishment of an employment relationship is permissible. Should the data be required for legal prosecution after completion of the application process, data processing may be necessary pursuant to Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 para. 1 lit. f) DSGVO shall apply. Our interest then consists of asserting or defending claims.
Retention period of the application data
Your application data will be deleted six months after completion of the application process. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of evidence or if you have consented to longer storage.
Storage for future positions
If you agree to the storage of your application data beyond the current vacancy, we will continue to store your application data for future vacancies.
We use the consent management service Cookiebot, of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (Cybot). This allows us to obtain and manage the consent of website users for data processing. The processing is necessary for the fulfillment of a legal obligation (Art. 7 para. 1 DSGVO) to which we are subject (Art. 6 para. 1 p. 1 lit. c DSGVO). For this purpose, the following data is processed with the help of cookies:
Your IP address (the last three digits are set to ‘0’). Date and time of consent. Browser information URL from which the consent was sent. An anonymous, random and encrypted key your consent status of the end user, as proof of consent.
The key and consent status are stored in the browser for 12 months using the cookie “CookieConsent”. This preserves your cookie preference for subsequent page requests. With the help of the key, their consent can be proven and traced.
If you enable the Service’s “Collective Consent” feature to enable consent for multiple websites through a single end-user consent, the Service will also store a separate, random, unique ID with your consent. If all the following criteria are met, this key will be stored in the third-party cookie “CookieConsentBulkTicket” in your browser in encrypted form: you enable the collective consent feature in the service configuration. You allow third-party cookies via browser settings. You have disabled “Do not track” via the browser settings. You accept all or at least certain types of cookies when you give consent.
The functionality of the website is not guaranteed without the processing.
Cybot is a recipient of your personal data and acts as a processor for us.
The processing takes place in the European Union. For more information about opting out and opting in to Cybot, please visit: https://www.cookiebot.com/de/privacy-policy/
Your personal data will be deleted consecutively after 12 months or immediately after the termination of the contract between us and Cybot.
Personal data is only collected, processed and used within the scope of using the portal as described below. Personal data are all individual details about personal or factual circumstances of an identified or identifiable natural person (not included: legal entities, such as a GmbH or AG). Personal data primarily includes information such as a person’s first and last name, address, e-mail address or professional circumstances.
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), based on the consent of website visitors. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually also transmitted to a Google server in the USA and stored there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. We would like to point out that this website uses Google Analytics only after prior consent has been given and with shortened IP addresses in order to exclude direct personal reference.
On this website, Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) is used on the basis of the consent of the page users. Google Maps is a web service for displaying interactive (land) maps for visual representation of geographic information. Using this service will display our locations and make it easier to find us.
As soon as you call up the sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to and stored on Google’s servers, which are also transmitted to the servers of Google LLC. can be transferred in the USA. This happens regardless of whether Google provides a user account to which you are logged in or whether a user account exists. If you are logged in to Google, your data is directly assigned to your account. If you do not want your profile to be assigned to Google, you must log out before calling up the map service. Google stores your data (also for non-logged-in users) as usage profiles and evaluates them.
Detailed information on data protection in connection with the use of Google Maps can be found at: https://www.google.de/intl/de/policies/privacy/
We use the anti-bot service hCaptcha (hereinafter “hCaptcha”) on our website based on the consent of the site users. This service is provided by Intuition Machines, Inc. a U.S. corporation incorporated in Delaware (“IMI”). hCaptcha is used to verify that data entered on our website (e.g. on a registration page or contact form) has been entered by a human or an automated program. For this purpose, hCaptcha analyzes the behavior of the website or mobile app visitor based on various characteristics. This analysis starts automatically as soon as the website or mobile app visitor enters a part of the website or app with hCaptcha enabled. For the analysis, hCaptcha evaluates various information (e.g. IP address, dwell time of the visitor on the website or app or mouse movements of the user). The data collected during the analysis will be forwarded to IMI. The hCaptcha analysis in “invisible mode” can take place completely in the background. Visitors to the website or app are not made aware that such analysis is taking place unless a challenge is presented to the user.
If you do not want Facebook to use your data, you must log out of Facebook before visiting the portal. If you are not a member of Facebook or have logged out before visiting the portal, there is still the possibility that at least your IP address is transmitted and stored there.
3.6. LinkedIn Conversion Tracking
The provider uses social plugins of the social network linkedin.com, which is operated by LinkedIn Corporation, 599 N Mathilda Ave, Sunnyvale, CA 94085, USA. This website uses the analysis and conversion tracking technology of the LinkedIn platform. With the aforementioned technology, you can be shown more relevant advertisements based on your interests. Further, the provider of LinkedIn aggregated and anonymous reports of ad activity and information about how you interact with the site.
You can prevent the storage of cookies by selecting the appropriate settings on your browser software. You can also object to the collection of the data generated by the cookie and related to your use of the portal (including your IP address) to LinkedIn and the processing of this data by LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
3.7. Microsoft Bookings
To book meeting appointments online, we use a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The connection to the service is only established when you access the online booking function via a link on our site.
4. Contact and questions
In addition, you may at any time exercise your rights of access, rectification or erasure, or to restrict processing or exercise your right to object to processing, as well as the right to data portability. You can contat us by mail(firstname.lastname@example.org) or letter. You also have the right to contact the data protection supervisory authority in the event of complaints.