1. AN OVERVIEW OF DATA PROTECTION
Data collection on our website
Who is responsible for the data collection on this website?
The data collected on this website are processed by the website operator. The operator’s contact details can be found in the website’s required legal notice.
How do we collect your data?
Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form.
Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site.
Which rights do you have regarding your data?
You have the right:
- to request information about your personal data processed by us in accordance with Article 15 GDPR. Notably you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right to complain, the origin of your data if it have not been collected by us and the existence of automated decision-making, including profiling and, if applicable, meaningful information on their details;
- to immediately request the correction of incorrect or complete personal data stored by us in accordance with Article 16 GDPR;
- to request the deletion of your personal data stored by us in accordance with Article 17 GDPR unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- to restrict the processing of your personal data in accordance with Article 18 GDPR if you dispute the accuracy of the data, if the processing is unlawful but you refuse the deletion of the data and we no longer need the data, but if you need it to assert, exercise or defend legal claims or if you have filed an objection to the processing in accordance with Article 21 GDPR;
- to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another controller in accordance with Article 20 GDPR. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible;
- to revoke the consent given to us at any time in accordance with Article 7 Para. 3 GDPR. As a result, this means that we will no longer be allowed to continue processing data based on this consent in the future and
Right to objection
If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Para. 1 Sentence 1 Lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR provided that there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.
If you would like to make use of your right to revocation or objection, simply send an email to firstname.lastname@example.org .
2. GENERAL INFORMATION AND MANDATORY INFORMATION
Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
Notice concerning the party responsible for this website
The party responsible for processing data on this website is:
Dept Marketplaces GmbH
50968 Cologne, Germany
Phone: +49221 177 337 10
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).
Revocation of your consent to the processing of your data
Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
Revoking your consent to data processing
Many data processing procedures are only possible with your explicit consent. You can revoke your consent at any time. All you need to do is send an informal message by email to email@example.com . The legality of data processing until revocation remains unaffected by the revocation.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Information, blocking, deletion
As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.
3. DATA PROTECTION OFFICER
Statutory data protection officer
We have appointed a data protection officer for our company.
RPA Datenschutz + Compliance GmbH
represented by Henning Koch and Ilja Borchers
Address: Hauser Gasse 19b, 35578 Wetzlar
4. DATA COLLECTION ON OUR WEBSITE
Server log files
When visiting our website at https://www.factor-a.com, the browser used on your device automatically sends information to the server on our website. The following data is collected without your intervention and stored until it is automatically deleted:
- IP address of the enquiring computer
- data and time of access
- browser used and your computer’s operating system
- referrer URL
- amount of data transferred
- successful retrieval message
- status code
The data is also stored in the log files of our system. Storage of this data together with other personal data of the user does not take place.
The temporary storage of the aforementioned data by the system is necessary to enable the website to be delivered to the user’s computer as well as to ensure the functionality and optimisation of our website and to ensure the security of the information technology systems.
The aforementioned data processing is based on Article 6 Para. 1 Sentence 1 lit. f GDPR. In accordance with Article 6 Para. 1 Sentence 1 lit. f GDPR, processing data for the protection of legitimate interests is permitted unless the interests, fundamental rights or freedoms of data subjects requiring the protection of personal data prevail. Our legitimate interest can be seen in the secure provision and functionality of our website.
The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. This is the case after 30 calendar days at the latest if the data is stored in the log files. Exception: we detect irregularities, e.g. in the form of attacks or other illegal actions. In these cases, we reserve the right to suspend the retention period until the facts of the case have been clarified.
We do not pass your data on to third parties with the exception of our technical website operators and hosting providers. Furthermore, we take appropriate measures and carry out regular checks to ensure that the data we collect cannot be viewed or accessed by third parties from outside.
If you contact us about our services, the emails you send may include information about you, such as your name, address, age, gender, email address and your enquiry. We use this information to carry out the following:
- In line with the legitimate interest we have in promoting our business, we will process your enquiries to provide you with information about the services we offer.
- This might include replying to your enquiry, or sending you invites to our events.
- We use SalesForce CRM to process your email address and information supplied by you in the course of an enquiry through the website, and to send you invitations and marketing materials. You can find out more about how they process personal data here: https://www.salesforce.com/uk/company/privacy.
- We may also process enquiries to take steps you ask of us with a view to entering into an agreement to provide you with our services.
- You are under no obligation to provide us with any details, but if you don’t provide all relevant information, we may not be able to help.
If you would like to receive our newsletter, we require a valid email address as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive this newsletter. No additional data is collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.
We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1) (a) DSGVO. You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, e.g. through the “unsubscribe” link in the newsletter. The data processed before we receive your request may still be legally processed.
The user’s consent to the processing of this data is obtained as part of the registration process.
In addition, the following data is stored at the time of registration for the purpose of proving consent:
- date/ time of registration
- IP address
The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted. Data we have stored for other purposes (e.g. email addresses for the members area) remain unaffected.
When you apply for a job on this site, the personal data contained in your application will be collected by us. Your personal data was either provided by yourself or obtained from publicly available sources (e.g. LinkedIn) or provided to us by someone who referred you for potential employment.
Your personal data will be processed for the purposes of managing our recruitment related activities in line with our legitimate interests, which include evaluating your candidacy/application for employment with us, setting up and conducting interviews and test for applicants, evaluating and assessing the results thereto, and as in otherwise needed in the recruitment and hiring processes.
Your personal data will be shared with Greenhouse Software Inc., a cloud services provider located in the United States of America and engaged by us to help manage its recruitment and hiring process on our behalf.
Your personal data will be retained by us for 12 months from the date of the application. The data is used in order to improve our recruitment efforts and selection procedure but also as a talent pool. Whenever we have a new opening we can easily access the data of candidates who have shown interest in our company in the past and contact them to see if they are available for a new opportunity. If you have any objections to us retaining your information for these purposes, please contact firstname.lastname@example.org.
Cookies – using “session cookies” (technically necessary cookies)
Information is stored in the cookie resulting from the specifically used device in each case.
Some functions on our website cannot be offered without using cookies. For this it is necessary that the browser is recognised even after a page change.
These are automatically deleted after leaving our site and are not used to create user profiles.
The legal basis for processing personal data using session cookies is Article 6 Para. 1 Lit f. GDPR on the basis of our legitimate interest. Our legitimate interest is in the provision of the website and a user-friendly Internet presence.
Personal data is not contained in the cookies and the cookies are not linked to other personal data stored by us. Cookies can only identify the workstation computer used, but not the user’s personal identity.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, the complete deactivation of cookies can lead to you not being able to use all of our website’s functions.
In addition, we also use temporary cookies that are stored on your device for a specified period of time to optimise user-friendliness. If you visit our site again to use our services, it will automatically recognise that you have already visited us and which entries and settings you have made so that you do not have to enter them again.
The legal basis for processing personal data by using cookies of analytical purposes is Article 6 Para. 1 Lit. a GDPR if the user has given consent.
The use of Google Analytics is carried out on the basis of your voluntary consent, Article 6 Para. 1 Sentence 1 Lit. a GDPR. By using these analysis measures, we want to ensure that our website is designed to meet requirements and is continually optimised.
We use Google Analytics for the purpose of the demand-orientated design and continuous optimisation of our sites, a web analysis service provided by Google In (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). In this context, pseudonymised user profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as
- browser type/version,
- operating system used,
- referrer URL (the previously visited site),
- time of the server request,
is transmitted to a Google server in the USA and stored there. The information is used to analyse the use of the website, to compile reports on website activities and to provide further services associated with the use of the website and the Internet for the purposes of market research and the demand-orientated design of these Internet pages. This information will also be transferred to third parties if this is required by law or if the third party process the data on someone else’s behalf. Under no circumstances will your IP address be associated with other Google data. The IP address is anonymised so that allocation is not possible (IP masking).
You can also prevent Google’s collection and use of data generated by the cookie and related to your use of the website (including IP address) and processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
We have entered into a processing contract with Google and implement the strict requirements of the German data protection authorities for using Google Analytics.
Demographic features on Google Analytics:
This website uses the “demographic features” function provided by Google Analytics. This allows reports to be created that contain information on the age, gender and interests of site visitors. This data comes from interest-related advertising by Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time using the ad settings in your Google account by downloading and installing a browser add-on(https://tools.google.com/dlpage/gaoptout?hl=de).
You fill find more information on data privacy in connection with Google Analytics on the Google Analytics help page(https://support.google.com/analytics/answer/6004245?hl=de).
Google Ads and Google Conversion Tracking
This website uses Google Ads. Ads is an online advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google Ads, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser stores on your computer. These cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.
Each Google Ads advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an Ads advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the Ads advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics.
Conversion cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
On our website, we refer to the social networking service facebook.com of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter refered to as “Facebook”). We have not integrated plugins or buttons from Facebook.
The links to Facebook on our websites do not initially transfer any of your data to Facebook. If you click on a link, you will be redirected to our Facebook profile. Data will only be transferred to Facebook if you are logged into your Facebook account.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and setting options in order to protect the privacy of its users, can be found in Facebook’s data policy: https://www.facebook.com/about/privacy/.
If you are a Facebook user and do not want Facebook to collect data about you and link it to your account data stored on Facebook, you must log out of Facebook before visiting the website.
On our website, we refer to the social networking service Twitter of Twitter Inc. 1355 Market St, Suite 900, San Francisco, CA 94103 (hereinafter refered to as “Twitter”), which is solely responsible for Twitter and its website. We have not integrated plugins or buttons for this service.
The links to Twitter on our website do not initially transfer any of your data to Twitter. If you click on a link, you will be redirected to our Twitter profile. A data transmission to Twitter will only take place if you are logged in to your Twitter account.
On our website, we refer to the social network LinkedIn of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter refered to as “LinkedIn”). We have not integrated plugins or buttons from LinkedIn.
The links to LinkedIn on our website do not initially transfer any of your data to LinkedIn. If you click on a link, you will be redirected to our LinkedIn profile. A data transmission to LinkedIn will only take place if you are logged in to your LinkedIn account.
On our website, we refer to the corporate network XING of XING AG, Gänsemarkt 43, 20354 Hamburg, Germany (hereinafter refered to as “XING”), which is solely responsible for XING and its website. The links on our website do not transfer your user data to XING.
For further information on the purpose and scope of data collection and on the processing and use of your data by XING when you are on the XING website, please see XING’s data protection regulations, which can be located under https://www.xing.com/privacy. Here you will also find information about setting options to protect your privacy and about your further rights regarding the collection, processing and use of your data by XING.
No liability for partner sites
Please note that our partners and other Internet sites and services that are accessible through our websites have their own data privacy guidelines that are independent of us. We therefore assume no responsibility or liability for the guidelines and procedures unrelated to us.
5. DATA COLLECTION IN THE FACTOR-A-SUITE
Users of the Factor-A-Suite go through an initial registration process.
When using the Factor-A-Suite the following tracking tools should be used.
This website service uses Google Analytics. The services are provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google”.
The information generated by the cookie about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of the server inquiry, is transferred to a Google server in the USA and stored there. Reports on website activities are generated for the website operator and further services connected with website and internet use are made possible. The information may be transferred by Google to third parties if required by law or if third parties process this data on behalf of Google. Ads are placed on websites on the Internet by third parties and Google. Google and third parties will use the data to place advertisements on third-party websites. The IP addresses are made anonymous so that an assignment is not possible (IP masking). On behalf of the operator of this website service, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.
The collection of data on Hotjar is based on Art. 6 para. 1 letter f DSGVO. This website service has a legitimate interest in analysing user behaviour in order to optimize both its website and its advertising. The collection and storage of data can be objected to at any time with effect for the future at www.hotjar.com/opt-out.
The following information can be recorded by your device and your browser: IP address of your device (anonymized), email address including first and last name if you have provided it to us through this website service, screen size and type of your device, browser information, location (country), user interactions such as mouse actions (movement, position, clicks), keyboard entries, log data.
This website service uses Mouseflow, a web analysis tool of Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark (hereinafter “Mouseflow”).