Types of processed data
We divide the processed data into the following types:
- Usage data: This includes, in particular, websites visited and interests in content.
- Metadata: This means the data generated during the communication process, such as IP addresses, browser identification and device details.
- Content data: These mean those data that are provided when using our services themselves (texts, images, forms).
- Contact details: This includes e-mail addresses, telephone numbers and the postal address.
- Contract data: The data necessary for the conclusion of the contract, such as the subject of the contract and the parties concluding it.
- Inventory data: This is the existing core data such as names and addresses.
- Geodata: This includes, for example, the own location or the location targeted within a route.
- Payment data: Data on payment methods.
Categories of data subjects
We divide the persons concerned by the data processing into the following categories:
- Users: Visitors to our websites and online services.
- Applicant: People who apply to us.
- Interested parties: People who are interested in our services and contact us through this.
- Communication partner: People who establish communication with us.
- Customers: People who use our services as clients.
- Contractors: Persons with whom we have contractual relationships without them being customers.
Purposes for the pursuit of which the processing is carried out
- Provision of our online offer: We process data in order to be able to provide our online offer at all.
- Improvement of the user-friendliness of our online offer: We process data in order to improve the user-friendliness of our offer. We achieve this in particular by analyzing visits to our online offering.
- Analysis of the behavior of visitors to our online offer: Analysis of accessed pages, e.g. by recording click paths and bounce rates.
- Obtaining feedback: Request and evaluate feedback on services and performance.
- Interest-based and behavioral (re-)marketing: Marketing tailored to the interests of users, which in turn is derived from their behavior.
- Conversion measurement: Measurement of the effectiveness of marketing measures
- Security measures: Measures to protect our technical infrastructure
- Contact requests and communication: Processing of contact requests, etc.
- Office organization: Measures to organize the office, e.g. scheduling, division of tasks, etc.
- Direct marketing: Direct marketing to customers, especially via individual letters by mail.
- Provision of contractual services: Processing of data during the execution and initiation of contracts.
- Implementation of the application process: In the case of an application procedure, the data processed within it.
- Implementation of the employment relationship: Data processing for the purpose of implementation, management and termination of employment relationship.
Overview and explanation of the legal basis
In the following, we inform you about the legal basis of the General Data Protection Regulation (GDPR), on the basis of which we process personal data. In addition to the regulations of the DSGVO, national regulations of the respective user's country of residence or domicile may apply.
- Legitimate interests (Art. 6 para. 1 p.1 lit. f DSGVO): The processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.
- Contract fulfillment and pre-contractual inquiries (Art. 6 para. 1 p. 1 lit. b. DSGVO): The processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the request of the data subject.
- Legal obligation (Art. 6 para. 1 p. 1 lit. c. DSGVO): The processing is necessary for compliance with a legal obligation to which the controller is subject.
- Protection of vital interests (Art. 6 para. 1 p. 1 lit. d. DSGVO): The processing is necessary to protect the vital interests of the data subject or another natural person.
- Application procedure as a pre-contractual or contractual relationship (Art. 9 para. 1 p. 1 lit. b DSGVO): (Insofar as special categories of personal data within the meaning of Article 9 (1) of the GDPR (e.g. health data, such as severely disabled status or ethnic origin) are requested from applicants in the context of the application process so that the controller or the data subject can exercise the rights accruing to him or her under labor law and social security and social protection law and fulfill his or her obligations in this regard, their processing shall be carried out in accordance with Article 9 (2) b. DSGVO, in case of protection of vital interests of the applicants or other persons according to Art. 9 para. 2 lit. c. DSGVO or for the purposes of preventive health care or occupational medicine, for the assessment of the employee's ability to work, for medical diagnostics, care or treatment in the health or social sector or for the management of systems and services in the health or social sector pursuant to Art. 9 para. 2 lit. h. DSGVO. In the case of communication of special categories of data based on voluntary consent, their processing is based on Art. 9 para. 2 lit. a. DSGVO.).
- Data processing for the purposes of the employment relationship (§ 26 BDSG) : We process (special) types of personal data in the employment relationship on the basis of the statutory provision for the purpose of establishing, implementing and terminating the employment relationship.
- Consent (if requested) (Art. 6 para. 1 p. 1 lit. a DSGVO): The data subject has given his/her consent to the processing of personal data concerning him/her for a specific purpose or purposes.
- Storage of information in the end user's terminal equipment with the end user's consent (§ Section 25 (1) sentence 1 TTDSG): We use memory areas of the terminal equipment of our users for certain functions with the explicit and informed consent of the same.
- Storage of information in the end user's terminal equipment due to necessity (§ 25 Ab. 2 No. 2 TTDSG): Unless we have asked for your permission when you visit our website or use individual functions, we use the memory of your terminal device for the technical presentation and delivery of our telemedia service if this is technically absolutely necessary.
- Processing for the exercise of a public interest (Art. 6 para. 1 lit. e DSGVO): To the extent that processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.