The responsible party
The responsible party according to Article 6(7) of the EU General Data Protection Regulation (GDPR) is Scholz & Volkmer GmbH (hereinafter referred to as S&V), represented by its Managing Directors Peter Post and Michael Volkmer, Schwalbacher Straße 72, D-65183 Wiesbaden, Germany, Telephone +49 (611) 180 99-0, Fax +49 (611) 180 99-77, E-mail: firstname.lastname@example.org (see also Imprint).
You can reach our Data Protection Officer at email@example.com or by sending a letter to our postal address to "Mr York Freiling (Lawyer), Data Protection Officer".
Information about the collection of personal data
S&V respects the privacy of all persons who visit our website. In the following, we provide information on the collection of the personal data of our website users. Personal data is all the data that can be related to you personally, e.g. your name, address, e-mail addresses or user behaviour.
If we involve contracted third-party providers in individual functions at our website or want to use your data for advertising purposes, the applicable procedures are described in detail below. We also describe the fixed criteria for the duration of data storage.
Collection of the personal data of website users
When you use the website for information purposes only, that is, if you do not register or provide us information in any other way, we only collect the personal data transmitted by your browser to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure adequate stability and security (the legal basis is Article 6(1)(1)(f) of the GDPR):
• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (exact web page accessed)
• Access status/HTTP status code
• Data volume transmitted in each case
• Website generating the request
• Operating system and its interface
• Language and version of the browser software
The data is stored for a period of fourteen days and then deleted.
Use of Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. If IP anonymisation is activated at this website, Google will previously truncate your IP address within the Member States of the European Union and within other areas that have signed up for the Agreement on the European Economic Area. The full IP address will be transmitted to a Google server in the USA and truncated there only in exceptional cases. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to draw up reports about website activities and to provide additional services related to the use of the website and of the Internet to the website operator.
The IP address transmitted by your browser within the framework of Google Analytics is not combined with other Google data.
You can prevent the storage of cookies by activating the relevant setting in your browser software. Please note, however, that if you do this, you might not be able to fully use all the functions of this website. Another way of preventing Google from collecting and processing data generated by cookies about your use of the website (incl. your IP address) is to download and install the browser plug-in available at the following link. http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are truncated before further processing, which means that they cannot be traced back to a specific person. If the data collected about you includes a direct reference to you, this reference is therefore immediately removed, thus instantly deleting personal data.
We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases where personal data is transferred to the US, Google has declared that it adheres to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework, https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. The legal basis for the use of Google Analytics is Article 6 (1)(1)(f) of the GDPR.
Information on the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1)5850 – 436 13 1001
User conditions: http://www.google.com/analytics/terms/de.html,
Privacy overview http://www.google.com/intl/de/analytics/learn/privacy.html
Integration of Google Maps
We use the Google Maps service at this website. This allows us to show you interactive maps directly at the website and enables you to conveniently use the map function.
When you visit the website, Google is informed that you accessed the specific sub-page of our website. In addition, the data specified in the "Collection of the personal data of website users" Section of this Policy are transmitted. This happens regardless of whether you are logged in via a Google user account or whether no such user account exists. If you are logged into Google, your data is directly linked to your account. If you do not want this data to be linked with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses it for the purposes of advertising, market research and/or for the demand-oriented design of its website. The aim of compiling these profiles is, in particular, to customise advertising (even for users who are not logged in) and to inform other users of the social network about your activities at our website. You have the right to object to the creation of these user profiles, but you must contact Google to exercise this right.
The legal basis for the use of Google Maps is Article 6(1)(1)(f) of the GDPR.
Use of Vimeo plug-ins
We use the provider Vimeo to integrate videos into the website. Vimeo is operated by Vimeo, LLC, which is headquartered at 555 West 18th Street, New York, New York 10011, USA.
We use plug-ins by the provider Vimeo at our website. If you call up a page of our website that contains such a plug-in – for example, our media library – a connection to the Vimeo servers is established in order to display the plug-in. Thus, the Vimeo server is sent information on which of our Internet pages you have visited. If you are logged in as a Vimeo member, Vimeo assigns this information to your personal user account. When you use the plug-in, e.g. when you click on the start button of a video, this information is also assigned to your user account. You can prevent this information from being assigned to your account by logging out of your Vimeo user account before using our website and by deleting the corresponding cookies set by Vimeo.
For more information on data processing and on data privacy provided by Vimeo, please refer to: https://vimeo.com/privacy. The legal basis for the use of Vimeo is Article 6(1)(1)(f) of the GDPR.
When you contact us by e-mail, we store the data you provide (your name, address, e-mail address, telephone number, if applicable) in order to answer your questions. The legal basis for this is Article 6(1)(1)(b) of the GDPR. We delete the data we have stored in conjunction with e-mail contacts after storage is no longer required or restrict processing of it if we are required to retain it by law.
Opt-out option: possibility to have you data removed
When you send us an enquiry, you can at any time object to us using your data in the future. For this purpose, you can send an e-mail to firstname.lastname@example.org or notification in writing to Scholz & Volkmer GmbH, Data Protection Officer, Schwalbacher Straße 72, D-65183 Wiesbaden or by fax to +49 (611) 180 99-77. This will result in your request not being (further) processed.
Newsletter registration and consent
You can register directly at our website for our newsletter, in which we inform you about agency-related, promotional news about S&V, e.g. projects, new customers, personal data, awards or comments. We send our monthly newsletter by e-mail only with the consent of recipients or with legal permission. By subscribing to our newsletter, you agree to receive it and consent to the described procedures. The legal basis for this is Article 6(1)(1)(a) of the GDPR.
Registration for our newsletter involves a so-called double opt-in process. This means that your registration is only completed once you have confirmed your registration by responding to a confirmation e-mail sent to you for this purpose. This confirmation requires you to click on the link contained therein. If we do not receive this confirmation, your registration will be automatically deactivated in our database and deleted at the deadline for legally retaining data at the latest. Subscriptions to the newsletter are recorded so that we can prove that the subscription process complies with legal requirements. This includes saving the time of registration and time of confirmation as well as the IP address. The only information that is required to send the newsletter is your e-mail address. Your e-mail address is collected in order to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or of the e-mail address used. The legal basis for this is Article 6(1)(1)(f) of the GDPR. This data will be deleted as soon as it is no longer required for the purpose for which it was collected. Accordingly, your e-mail address will be stored as long as your subscription to the newsletter remains active.
Opt-out option: possibility to have your data removed
You can cancel your subscription to the newsletter at any time. For this purpose, there is an unsubscribe link in every newsletter. Alternatively, you can send an e-mail to email@example.com or notification in writing to the contact details provided in the Imprint.
Use of MailChimp
The legal basis for the use of data by MailChimp is Article 6(1)(1)(f) of the GDPR.
Use of social media plug-ins
We have no control over the data collected and the data processing operations and we do not have knowledge of the full extent of data collection, the purposes of the processing and the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.
The plug-in provider stores the data collected about you as usage profiles which are used for purposes of advertising, market research and/or for the demand-oriented design of its website. The aim of such analyses is, in particular, (also for users who are not logged in) to customise advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of such user profiles. To exercise this right, you must contact the respective plug-in provider. With the plug-ins, we offer you the opportunity to interact with the social networks and other users, enabling us to improve our offer and make it more interesting for you as a user. The legal basis for the use of plug-ins is Article 6(1)(1)(f) of the GDPR.
The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged into the plug-in provider, the data collected from our website is directly assigned to your account with the plug-in provider. If you click on the activated button and, e.g., create a link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button. This will enable you to prevent the information from being assigned to your profile with the plug-in provider.
For more information on the purpose and scope of data collection and its processing by plug-in providers, please refer to their Data Privacy Policies below. These policies also contain further information about your rights in this regard and setting options for protecting your privacy.
Addresses of the respective plug-in providers and the URLs with their Data Privacy Policies:
Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA http://www.facebook.com/policy.php; more information on data collection: http://www.facebook.com/help/186325668085084,
http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo.
Facebook has declared that it adheres to the EU-US Privacy Shield,
Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA https://twitter.com/privacy. Twitter has declared that it adheres to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework,
Xing AG, Gänsemarkt 43, 20354 Hamburg, DE
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA http://www.linkedin.com/legal/privacy-policy.
LinkedIn has declared that it adheres to the EU-US Privacy Shield,
Data processing within the context of our agency services
As an agency, we process the data of our customers in the context of the specific contractual services we provide. This involves various data processing operations, depending on the assignment. We use the contact data, bank details and order-related data provided by our customers exclusively for the purpose of fulfilling our contractual obligations towards customers as well as for executing contracts, unless we separately specify further uses of the data. The legal basis for data processing is Article 6(1)(b) of the GDPR. Data will only be passed onto third parties if this is necessary to fulfil our contractual obligations. Unless otherwise agreed with our customers, we delete data that we have stored in such a context when storage is no longer necessary, usually after expiry of contractual or legal claims by us or by our customers. Alternatively, we restrict processing of the data if we are obligated to retain it by law.
Opt-out option: possibility to have your data removed
Our customers can at any time object to us using their data in the future. For this purpose, you can send an e-mail to firstname.lastname@example.org or notification in writing to Scholz & Volkmer GmbH, Data Protection Officer, Schwalbacher Straße 72, D-65183 Wiesbaden or by fax to +49 (611) 180 99-77. This may mean that the order can no longer be carried out or can only be carried out to a limited extent if our contractual services to the customer have not yet been entirely fulfilled.
Data processing in the context of your job application
When you send us your application documents, you are transmitting personal data to us that have special protection under German law.
We process personal data about you for the purpose of checking your application for a position in the agency to the extent that it is necessary for us to make a decision on whether to establish an employment relationship with you. The legal basis for this is § 26(1) in conjunction with § 26(8)(2) of the German Federal Data Protection Act (BDSG). When we check applications, we may call, write or email you if we have questions and if you have provided contact information. Furthermore, we may process your personal data if this is necessary for us to defend ourselves legal claims against us related to the application process. The legal basis for this is Article 6(1)(f) of the GDPR. If an employment relationship is established between you and us, we may, in accordance with § 26(1) of the German Federal Data Protection Act (BDSG), further process the personal data already received from you for the purposes of the employment relationship if this is necessary for managing or terminating the employment relationship or for exercising or fulfilling the rights and obligations of the body representing employees resulting from a law. You are neither legally nor contractually obligated to provide personal data. However, you are required to provide personal data for the conclusion of a contract of employment with us.
We process data related to your application. This may be general personal data (such as name, address and contact details), information about your professional qualifications and school education or information about further professional training or other information that you provide with your application. In addition, we may process job-related information that you have made publicly available, such as information in a profile on professional social media networks. The employees tasked with processing such information are bound to maintain confidentiality and data secrecy in accordance with Article 5(1) of the GDPR. We do not share your data with third parties.
The data you provide to us is initially only processed and stored while we evaluate your application and is deleted after the evaluation has been completed if it is no longer required. The latter is the case, for example, if we decide on the basis of your applicant profile that your application could be of interest at a later date; in this case, we initially store your information for 6 months so that we can contact you again at a later date. If your application does not result in an employment relationship between you and us, we may also continue to store your data if this is necessary to defend ourselves against possible legal claims.
Right to information and deletion of application data
Upon request, we will provide you with information about which data we have stored about you. If you wish us to stop storing your data, you can inform us of this before the aforementioned time limit for storage and deletion is reached; we will then delete your data immediately.
With regard to personal data about you, you have the right with respect to us:
- to revoke any consent you may have given us at any time in accordance with Article 7(3) of the GDPR. As a result, we will no longer be authorised to continue processing the data to which the consent was related in the future;
- to request information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or opt-out, the existence of a right of complaint, the origin of your data if it was not collected by us as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- to immediately demand the correction of incorrect data or completion of your personal data stored by us, in accordance with Article 16 of the GDPR;
- to request that your personal data stored by us is deleted, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the enforcement, exercise or defence of legal claims, in accordance with Article 17 of the GDPR;
- to request that the processing of your personal data is restricted, in accordance with Article 18 the GDPR, if you contest the accuracy of the data or if its processing is unlawful, but if you object to it being deleted and we no longer require the data, but you need it to enforce, exercise or defend legal claims or you have objected to its processing in accordance with Article 21 of the GDPR;
- to receive the personal data that you provided to us in a structured, standard and machine-readable format or to request that it is transferred to another responsible party, in accordance with Article 20 of the GDPR.
In addition to any opt-out options set out above, you can contact us by e-mail at email@example.com or by letter to Scholz & Volkmer GmbH, Data Protection Officer, Schwalbacher Straße 72, D-65183 Wiesbaden or by fax at +49 (611) 180 99-77 if you wish to exercise your rights as a data subject, in particular your right to opt out. You also have the right to lodge a complaint with a data protection supervisory authority (in the state of Hesse) about the processing of your personal data by us.