Legals

Privacy policy
- Website

Status: 08/17/2021

Information on data protection about the processing of personal data on our website in accordance with art. 13, 14 and 21 of the General Data Protection Regulation (GDPR)

General

Preamble

Dear visitor, applicant, contractual partner, interested party,

in accordance with the specifications of Art. 13, 14, and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data as well as your associated data protection rights. Which data is processed individually and used in a certain fashion is based substantially on the requested or agreed-upon services. In order to guarantee that you are informed to the full extent about the processing of your personal data in the framework of the fulfillment of a contract or the carrying out of precontractual measures, please take into account the following information.

Responsible party

Company: awork GmbH

Street no.: Großer Burstah 36/38

Postal code, City, Country: 20354 Hamburg, Germany

Trade register no.: HRB Hamburg 172 488

Manager: Daniel Tobias Hagenau, Nils Lukas Czernig, Lucas Alexander Bauche

Phone number: +49 40 88215330

Email address: [email protected]

Data protection officer

Company: PROLIANCE GmbH

Street no.: Leopoldstr. 21

Postal code, city, country: 80802 Munich, Germany

Email address: [email protected]

Website: www.datenschutzexperte.de

General information

We process your personal data in line with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Insofar as personal data is required for the initiation or carrying out of a contractual relationship or in the course of the carrying out of precontractual measures, a processing according to Art. 6 Par. 1 let. b GDPR is legal.

If you grant us an exclusive consent for the processing of personal data for certain purposes (e.g. transfer to third parties, evaluation for marketing purposes or promotional addresses by email), the legality for this processing is given on the basis of your consent in accordance with Art. 6 Par. 1 let. a GDPR. A granted consent can be revoked at any time with effectiveness for the future.

As far as is necessary and legally permissible, we will process your data for the actual contractual purposes for the fulfillment of legal obligations in accordance with Art. 6 Par. 1 let. c GDPR. Furthermore, a processing takes place if necessary for the protection of authorized interests by us or by third parties as well as the defense and assertion of legal claims in accordance with Art. 6 Par. 1 let. f GDPR. If necessary, we will inform you separately specifying the authorized interest, insofar as this is legally prescribed.

Your rights

In the following you will find information on which rights of affected persons the valid data protection right grants you toward the responsible party with regard to the processing of your personal data:

The right, in accordance with Art. 15 GDPR, to demand information about your personal data which we are processing. In particular, you can demand information about the purposes of the processing, the category of personal data, the categories of receivers toward whom your data was or is disclosed, the planned storage length, the existing of a right to correction, deletion, limitation of the processing or contradiction, the existence of a right to appeal, the origin of your data insofar as this was not levied by us, as well as about the existence of an automated decision-making including profiling and if necessary meaningful information on their particulars.

The right, in accordance with Art. 16 GDPR, to demand immediately the correction of incorrect or the completion of your personal data stored by us.

The right, in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored with us, insofar as the processing is not necessary for the exercise of the right to a free expression of opinion and information on the fulfillment of a legal obligation for reasons of public interest or for the assertion, exercise, or defense of legal claims.

The right, in accordance with Art. 18 GDPR, to demand the limitation of the processing of your personal data, insofar as the accuracy of the data is contested by you, the processing is illegal, but you reject its deletion and we no longer need the data, but you need this for the assertion, exercise, or defense of legal claims, or you have filed an objection against the processing in accordance with Art. 21 GDPR.

The right, in accordance with Art. 20 GDPR, to receive the personal data which you have provided to us in a structured, common, and machine-readable format, or to demand the transfer to another responsible party.

The right, in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority. In general, for this you can turn to the supervisory authority of the federal state of our above-named seat or if necessary to our usual residence or place of work.

The right to revocation of granted approvals in accordance with Art. 7 Par. 3 GDPR: You have the right to revoke a once-issued approval in the processing of data at any time with effect for the future. In the case of revocation, we will immediately delete the affected data, insofar as a further processing cannot be supported on a legal basis of processing without approval. Through revocation of approval, the legality of the processing that has taken place based on the approval until its revocation is not affected.

Right of appeal

Insofar as your personal data is processed by us on the basis of authorized interest in accordance with Art. 6 Par. 1 S. 1 let. f GDPR, in accordance with Art. 21 GDPR, you have the right to introduce an objection against the processing of your personal data, insofar as this takes place for reasons that result from your particular situation. Insofar as your objection against the processing of personal data is oriented toward the purposes of direct advertising, you have a general right of appeal without the requirement of indicating a special situation.

If you would like to make use of your right to revocation or objection, an email to the above-listed contact address is sufficient.

Automated decisions in accordance with Art. 22 GDPR

The affected person has the right to not be subjected to a decision resting exclusively on an automated processing – including profiling – that opens him up to legal effect or influences him substantially in a similar fashion.

This does not apply if the decision

a) is necessary for the conclusion or the fulfillment of an agreement between the affected person and us,
b) is permitted based on legal specifications of the union or member states to which we are subject and these legal specifications contain appropriate measures for the safeguarding of the rights and freedoms as well as the authorized interests of the affected person or
c) takes place with the express approval of the affected person.

These decisions may not rest on special categories of personal data in accordance with Art. 9 Par. 1 GDPR, insofar as Art. 9 Par. 2 let. a or g GDPR does not apply and appropriate measures for the protection of the rights and freedoms as well as authorized interests of affected parties have been met.

In the cases named under Figures a) and c) we reach appropriate measures to preserve the rights and freedoms as well as the authorized interests of the affected person, whereby at least the right exists to the obtaining of the intervention of a person on our side, to the explanation of their own position, and the challenge of the decision.

Legal obligations

The provision of personal data for the decision about a contractual conclusion, the fulfillment of the contract or carrying out of precontractual measures takes place voluntarily. We can however only make the decision in the course of contractual measures, insofar as they indicate such personal data that are necessary for the conclusion of the contract, the fulfillment of the contract, or precontractual measures.

Right of modification

We reserve the right to adjust or to update this data protection declaration if necessary considering the valid data protection regulations. In this way, we can adjust the current legal requirements and take into account changes to our services, e.g. in the introduction of the new services. The respectively most current version always applies for your concerns.

Deployment & Log files

Purposes of processing

When you open our website, we collect data that is technically necessary to display the website.

Categories of personal data

This involves the following personal data that is automatically transmitted from your browser to our server: IP address, time stamp, content of the request (which page was accessed), access status, transferred data volumes, website from which the request came, browser, operating system, language and version of the browser. This data cannot be assigned to a specific person.

Legal basis for processing

The processing of this personal data takes place on the basis of a legitimate interest according to art. 6 section 1 lit. f) GDPR. The website cannot be accessed and offered to users without the use of this data.

Recipients of the data

The data is processed by our qualified website Raidboxes, with whom we have an order data processing contract. Raidbox is the host for WordPress sites and hosts our website on servers in Germany with guaranteed ISO 21007 certification.

Raidboxes GmbH

Hafenstraße 32,

48153 Münster, Deutschland

Storage duration / deletion

After a statistical analysis, the data will be deleted after 31 days at the latest.

Website analytics

Purposes of processing

In order to be able to operate our online site economically, we use analytics services to record and evaluate website activity and optimize the site as a result.

Categories of personal data

This involves the following personal data that is automatically transmitted by your browser: IP address, time stamp, content of the request (which page was accessed), access status, transferred data volumes, website from which the request came, browser, operating system, language and version of the browser.

Legal basis for processing

The processing of this personal data takes place on the basis of the consent according to art. 6 section 1 lit. a) GDPR when querying the use of cookies for website analytics.

You can revoke your consent at any time by deleting the cookies for the site in your browser or by adjusting the cookie settings for the site.

Recipients of the data

We us Google Analytics for the website analytics. Google Analytics is a service for recording and statistical analysis of website activities.

Google Analytics

Google LLC

1600 Amphitheatre Parkway

Mountain View, CA 94043, USA

Google fulfills a sufficient level of protection and we have a contract with Google with so-called standard contractual clauses in which they undertake to process user data only in accordance with our instructions and to comply with the EU data protection level.

Google will use this information on our behalf to evaluate the use of our online site by users, to compile reports on the activities within this online site and to provide us with other services related to the use of this online site and the internet. In doing so, pseudonymous user profiles can be created from the processed data.

Google makes use of cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there.

We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases.

The IP address transmitted by the user’s browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and from processing this data by downloading and installing the browser plug-in available under the following link:https://tools.google.com/dlpage/gaoptout?hl=de.

Further information on data usage by Google, setting and objection options can be found on the Google website: https://www.google.com/intl/de/policies/privacy/partners (“Use of data by Google when you use our partners’ websites or apps”), https://policies.google.com/technologies/ads (“Use of data for advertising purposes”), https://adssettings.google.com/authenticated (“Manage information that Google uses to show you advertisements”).

We also use the Segment service on our website. Segment is an analysis and tracking service that helps us to collect data on our website and to forward it to the appropriate evaluation services. Segment processes the data on servers within the EU.

Segment.io, Inc.

101 15th St

San Francisco, CA 94103, USA

Segment.io fulfills a sufficient level of protection and we have a contract with Segment.io with so-called standard contractual clauses in which they undertake to process user data only in accordance with our instructions and to comply with the EU data protection level.

Marketing & retargeting

Purposes of processing

In order to be able to operate our marketing activities for our online offer economically, we use marketing services. These help us to display advertisements based on actual interest and to make the success of our marketing activities measurable.

Categories of personal data

This involves the following personal data that is automatically transmitted by your browser: IP address, time stamp, content of the request (which page was accessed), access status, transferred data volumes, website from which the request came, cookies with marks from clicked advertising campaigns, browser, operating system, language and browser version.

Legal basis for processing

The processing of this type of personal data takes place on the basis of the consent according to art. 6 section 1 lit. a) GDPR when querying the use of cookies for marketing & amp; retargeting.

Recipients of data

Google-Re/Marketing-Services

Google LLC

1600 Amphitheatre Parkway

Mountain View, CA 94043, USA

The Google Marketing Services allow us to display advertisements for and on our website in a more targeted manner in order to only present users with advertisements that potentially correspond to their interests. If, for example, a user is shown advertisements for products that he was interested in on other websites, this is referred to as “remarketing”. For these purposes, when our and other websites on which Google Marketing Services are active are accessed, Google immediately executes a code from Google and so-called (Re)marketing tags (invisible graphics or code, also known as “web beacons”) are integrated into the website. With their help, an individual cookie, i.e. a small file, is saved on the user’s device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites the user has visited, which content he is interested in and which offers he has clicked on, as well as technical information about the browser and operating system, referred websites, visiting time and other information about the use of the online site. The IP address of the user is also recorded, whereby we inform you within the framework of Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases in its entirety sent to a Google server in the USA and shortened there. The IP address is not merged with the user’s data within other Google offers. The aforementioned information can also be combined by Google with information from other sources. If the user then visits other websites, the advertisements tailored to him can be displayed according to his interests.

The user data is processed pseudonymized as part of the Google Marketing Services. I.e. For example, Google does not store and process the name or email address of the user, but rather processes the relevant cookie-related data within pseudonymous user profiles. This means that from Google’s point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected about users by Google Marketing Services is transmitted to Google and stored on Google’s servers in the USA.

The Google marketing services we use include the online advertising program “Google AdWords”. In the case of Google AdWords, each AdWords customer receives a different “conversion cookie”. Cookies cannot therefore be tracked via the websites of AdWords customers. The information obtained with the help of the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The AdWords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

We can incorporate third-party advertisements on the basis of the Google “AdSense” marketing service. AdSense uses cookies that enable Google and its partner websites to display ads based on users’ visits to this website or other websites on the Internet.

We can also use the “Google Optimizer” service. Google Optimizer allows us to use so-called “A / B-Testings” to understand how various changes to a website affect (e.g. changes to the input fields, the design, etc.). For these test purposes, cookies are stored on the users’ devices. Only pseudonymous user data is processed.

We can also use the “Google Tag Manager” to integrate and manage Google analysis and marketing services on our website.

Since the IP address is transferred to Google in the USA, further protection mechanisms are required to ensure the data protection level of the GDPR. To ensure this, we have standard data protection clauses with the provider in accordance with art. 46 section 2 lit. c GDPR agreed. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases in which this cannot be ensured even through this contractual extension, we will endeavor to provide additional regulations and commitments from the recipient in the USA.

For more information on Google’s use of data for marketing purposes, see the overview page: https://policies.google.com/technologies/ads.

If you want to object to interest-based advertising by Google Marketing Services, you can use the setting and opt-out options provided by Google: https://adssettings.google.com/authenticated.

Facebook, Custom Audiences and Facebook Marketing Services

Facebook Inc.

1 Hacker Way

Menlo Park, CA 94025, USA

We use “Facebook Custom Audiences”, a remarketing tool from Facebook Ireland Ltd., on our website. 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (hereinafter referred to as “Facebook”).

Facebook Custom Audiences enables us to send interest-based advertisements to visitors to our website when they visit the social network Facebook or when they visit other websites that also use Facebook Custom Audiences. “Facebook Ads” to display.

By using “Facebook Custom Audiences”, your web browser automatically establishes a direct connection to the Facebook server. We have no influence on the scope and further use of the data that is collected by Facebook through the use of Facebook Custom Audiences. As far as we know, Facebook receives the information that you have accessed on the relevant part of our website or clicked on in an ad from us. If you have a Facebook user account and are registered, Facebook can assign the visit to your user account. Even if you are not registered with Facebook or have not logged in, there is a possibility that Facebook will find out and save your IP address and possibly other identification features.

We use Facebook Custom Audiences for marketing and optimization purposes, in particular to place relevant and interesting ads for you and thus improve our site and make it more interesting for you as a user. The legal basis is art. 6 section 1 p. 1 lit. a GDPR (consent). We have concluded an order processing contract with our service provider Facebook, in which we oblige them to protect our customers’ data and not to pass them on to third parties.

Since personal data is transferred to the USA, further protection mechanisms are required to ensure the level of data protection under the GDPR. To ensure this, we have standard data protection clauses with the provider in accordance with art. 46 section 2 lit. c GDPR agreed. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases in which this cannot be ensured even through this contractual extension, we will endeavor to provide additional regulations and commitments from the recipient in the USA.

Further information from Facebook on data protection can be found on the following Facebook website: https://www.facebook.com/about/privacy

The deactivation of Facebook Custom Audiences is possible for logged-in users athttps://www.facebook.com/settings/?tab=ads#_.

We would like to point out that this setting will also be deleted if you delete your cookies.

LinkedIn Insight Tag

LinkedIn Corporation

2029 Stierlin Court

Mountain View, CA 94043, USA

Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

We use the marketing functions (so-called “LinkedIn Insight Tag”) of the LinkedIn network. Each time you visit one of our pages that contains LinkedIn functions, a connection to the LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. With the help of the LinkedIn Insight Tag, we can in particular analyze the success of our campaigns within LinkedIn or determine target groups for them based on the interaction of users with our online site.

If you are registered with LinkedIn, LinkedIn is able to assign your interaction with our online site to your user account. Even if you click the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn is able to assign your visit to our website to you and your user account.

We use LinkedIn Insight Tag for marketing and optimization purposes, in particular to place relevant and interesting ads for you and thus improve our site and make it more interesting for you as a user. The legal basis is art. 6 section 1 p. 1 lit. a GDPR (consent). We have concluded an order processing contract with our service provider LinkedIn, in which we oblige them to protect our customers’ data and not to pass them on to third parties.

Further information from LinkedIn on data protection can be found on the following LinkedIn website: https://www.linkedin.com/legal/privacy-policy

The deactivation of LinkedIn Insight Tag is possible for logged-in users athttps://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

We would like to point out that this setting will also be deleted if you delete your cookies.

Outbrain Inc.

39 West 13th Street, 3rd Floor,

New York, NY 10011, USA

We use the Outbrain pixel from Outbrain Inc. on our website. This enables us to provide analytics related to our campaigns (ads) and advanced targeting functions. The pixel records which UUID (unique user ID) has interacted on pages on which the pixels are installed, as well as the relevant time stamp, the referring source and the fact that a conversion has taken place. The pixel only tracks activity on an anonymous basis. The pixel does not track or collect any personal data, but only checks whether a UUID is stored in the user’s browser. If this is the case, we can display our ads in the Outbrain network to such UUIDs (retargeting). If no UUID is found, the Outbrain-Pixel does not collect any information.

In the case of Outbrain services, the transmission of data to the USA cannot be ruled out. Please note the information in the section “Data transfer to third countries”. Further information on data protection at Outbrain can be found in Outbrain’s data protection information at www.outbrain.com/legal/privacy.

Bing Ads

Microsoft Corporation

One Microsoft Way

Redmond, WA 98052-6399, USA

If you have given us your consent in accordance with. art. 6 I 1 lit. a GDPR, we use Bing Adstechnologies on the website, which are provided and operated by Microsoft Corporation. Microsoft sets a cookie on your device if you have reached our website via a Microsoft Bing ad. In this way, Microsoft and we can recognize that someone clicked on an ad, was redirected to our website and reached a previously determined target page (“conversion site”). We only find out the total number of users who clicked on a Bing ad and were then redirected to the conversion site. Microsoft collects, processes and uses information via the cookie, from which usage profiles are created using pseudonyms. These usage profiles are used to analyze visitor behavior and are used to display advertisements. No personal information about the identity of the user is processed.

If you do not want information about your behavior from Microsoft to be used as explained above, you can refuse the setting of a cookie required for this – for example via a browser setting that generally deactivates the automatic setting of cookies. You can also prevent the collection of the data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by clicking on the following link https://choice.microsoft.com/de-DE/opt- explain your contradiction out.

AdTriba GmbH

Hoheluftchaussee 112

20253 Hamburg Deutschland

On this website, data is collected and stored using AdTriba technologies, from which usage profiles are created using pseudonyms. These usage profiles are used to analyze visitor behavior and are used to improve and tailor our offerings. Cookies may be used. These are small text files that are stored locally on the end device of the page visitor and thus enable recognition when you visit our website again. The pseudonymised usage profiles will not be merged with personal data about the bearer of the pseudonym without express consent to be given separately.

This website collects and uses cross-app and cross-device information for reporting purposes. This is expressly not personal data, from which information about individual users can be viewed and traced back to specific users. Techniques are used that enable users to be tracked across apps and devices, including cookie and ID synchronization.

You can object to the collection and storage of data at any time with effect for the future by deactivating tracking by Adtriba (opt-out from Adtriba tracking) at the URL https://www.adtriba.com/privacy-policy/.

FirstPromoter

Igil Webs SRL

Str. Talmacelului 30,

Talmaciu, Sibiu, Romania

We use an affiliate tool FirstPromoter on our website. With the help of this tool we can manage our affiliate links and pay out the commissions to the authorized persons. For this purpose, the users who click on the affiliate links (so-called “Leads”), tracked using their IP address.

Processing only takes place if you have given us your consent in accordance with art. 6 I 1 lit. a GDPR about the use of the corresponding cookies.

You can revoke the processing at any time by deleting the browser cookies for this site or by adjusting the site’s cookie settings.

FirstPromoter automatically deletes the data after a so-called rental period, in which the assignment of a lead to an affiliate partner can be guaranteed.

Cookies

Our website uses so-called “cookies”. Cookies are small text files that are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically resolves them.

Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. language settings). Other cookies are used to evaluate user behavior or to display advertising.

Technically necessary cookies are saved on the basis of art. 6 section 1 lit. f GDPR. We have a legitimate interest in storing cookies for the technically error-free and optimized provision of our services. Other cookies are only saved with your consent on the basis of art. 6 section 1 lit. a GDPR. The consent can be revoked at any time for the future. The legal basis can also be derived from art. 6 section 1 lit. b GDPR if the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures that are carried out at the request of the data subject.

Insofar as cookies are used for analysis purposes, we will inform you about this separately in the context of this data protection declaration and obtain your consent.

You can set your browser so that you can

be informed about the setting of cookies,
allow cookies only in individual cases,
exclude the acceptance of cookies for certain cases or in general,
activate the automatic deletion of cookies when you close your browser.

The cookie settings can be managed under the following links for the respective browser:

Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Edge (Microsoft): http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

You can also individually manage cookies from many companies and functions that are used for advertising. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your- ad-choices.

Most browsers also offer a so-called “Do-Not-Track-Function”. When this function is activated, the respective browser informs advertising networks, websites and applications that you do not want to be “tracked” for the purpose of behavior-based advertising and the like.

Depending on the provider of your browser, you can find information and instructions on how to edit this function under the following links:

Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/
Edge (Microsoft): https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track
Safari: https://support.apple.com/de-de/guide/safari/sfri40732/13.0/mac/10.15
Opera: http://help.opera.com/Windows/12.10/de/notrack.html

In addition, you can load so-called prevent scripts. “NoScript” only allows JavaScripts, Java and other plug-ins to be run on trustworthy domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser.

Please note that deactivating cookies may limit the functionality of our website.