INFORMATION ON THE COLLECTION OF PERSONAL DATA
In the following, we provide information on the collection and, if applicable, further processing (storage, etc.) of personal data in accordance with the information obligations under Art. 13 and Art. 14 of the EU General Data Protection Regulation (GDPR).
1. INFORMATION ON THE ACCOUNTABLE PARTY AND THE DATA PROTECTION OFFICER
The controller pursuant to Art. 4 (7) GDPR is EVANA AG, Dudweilerstraße 17, 66111 Saarbrücken, Germany, telephone +49 681 954460, info@evana.de
You can contact our data protection officer as follows: Bianca Bach, Vidano GmbH, Sulzbachtalstraße 128, 66125 Saarbrücken, bach@vidano.de.
2. YOUR RIGHTS AS AN AFFECTED PARTY
You have the rights described below with regard to the personal data concerning you; further details on the content and exercise of the rights can be found in Articles 12 et seq. of the GDPR (e.g. here: https://dsgvo-gesetz.de/kapitel-3/) nachlesen:
- Right to information (e.g. whether and which of your personal data we process),
- Right to rectification or erasure (e.g. correction of errors, erasure of data no longer required),
- Right to restriction of processing,
- Right to object to processing (see more on this below),
- Right to data portability.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data. You can find the competent supervisory authority for our location in Saarbrücken here: https://datenschutz.saarland.de/
If you have given us your consent, you can revoke it at any time with effect for the future without affecting the legality of the processing carried out on the basis of the consent until revocation.
RIGHT TO OBJECT ACCORDING TO ART. 21 GDPR
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data with effect for the future in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation. If you wish to exercise your right of revocation or objection, simply send us an e-mail.
3. PROCESSING OF PERSONAL DATA
Below we inform you in which cases we collect and further process personal data and for what purposes. In principle, there is no legal or contractual obligation to provide your data, unless you enter into corresponding business contact with us; we must then collect the relevant data, otherwise we will not be able to provide our services.
COLLECTION OF PERSONAL DATA IN THE CONTEXT OF CONTRACTUAL AND PRE-CONTRACTUAL MEASURES
If we collect personal data from you in the context of contractual or pre-contractual measures (e.g. contractual questions, requests for quotations), we process this data exclusively for the purposes of these measures and thus for the provision of our contractual services. The legal basis is Art. 6 para. 1 lit. b GDPR.
We process application documents on the basis of Art. 6 para. 1 lit. b GDPR, § 26 BDSG for the purpose of deciding on the establishment and, if necessary, further implementation of the employment relationship. Data on rejected applicants will be deleted no later than six months after rejection of the application, unless consent is given for longer-term storage (e.g. for subsequent application rounds).
USE OF THE WEBSITE
The use of our website is generally possible without providing personal data. Insofar as personal data is collected on our website, this is always done on a voluntary basis as far as possible.
If we use contracted service providers for individual functions of our offer and data is transmitted to them, we will inform you in detail below about the respective processes.
If you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR): IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request comes, browser, operating system and its interface, language and version of the browser software.
Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.
USING OUR CONTACT FORM / REQUESTING A PRODUCT DEMONSTRATION
Bei Fragen jeglicher Art sowie zu Zwecken der Demonstration unserer Dienstleistungen bieten wir Ihnen die Möglichkeit, mit uns über ein auf der Website bereitgestelltes Formular Kontakt aufzunehmen. Im Übrigen können Sie auch per E-Mail oder telefonisch mit uns Kontakt aufnehmen.
Im Falle der Kontaktaufnahme über das Kontaktformular müssen die Angaben zu Name, E-Mail-Adresse und Ihrer Nachricht gemacht werden. Weitere Angaben können freiwillig getätigt werden.
Die Verarbeitung der personenbezogenen Daten, die im Rahmen der Kontaktaufnahme übermittelt und von Ihnen insoweit bereitgestellt werden, dient der schnellen Kontaktaufnahme und damit einer zügigen Bearbeitung Ihrer Anfrage. Hierdurch ermöglichen wir einen guten Kundenservice (Rechtsgrundlage ist Art. 6 Abs. 1 lit. f DSGVO bzw. Ihre Einwilligung, Art. 6 Abs. 1 lit. a DSGVO). Zielt Ihre Kontaktierung auf den Abschluss eines Vertrages ab, so ist Rechtsgrundlage für die Verarbeitung Art. 6 Abs. 1 lit. b DSGVO.
The personal data collected by us for contact inquiries will generally be deleted automatically after your inquiry has been dealt with, unless legitimate interests require longer storage (e.g. due to announced further inquiries etc.) or the inquiry leads to the conclusion of a contract.
COOKIES
Cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk and assigned to the browser you are using and through which certain information flows to us. Cookies are used to make the website more user-friendly and effective overall. Unless otherwise stated, the legal basis for the use of cookies is Art. 6 para. 1 lit. f GDPR (legitimate interests).
Cookies are usually differentiated as follows:
Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings.
You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website.
TOOLS AND OTHER PROCESSING
The respective data processing purposes and data categories can be found in the corresponding tools:
SERVICES OF THE COMPANY GOOGLE
We use the following services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, E-Mail: support-deutschland(at)google.com, a company of the Google Group ("Google"). Google may process data through American Google companies such as Google LLC. We would like to point out that we have concluded a data processing agreement (DPA) with Google to ensure secure data transmission.
You can find further information on Google's data protection policy here:
https://policies.google.com/privacy
Search Console
We use the Google Search Console to technically monitor our website for errors. The Google Search Console is a free service with which we can monitor and manage our website in the Google search index. It gives us access to data and information that Google has about our website. No user and tracking data is transmitted from our site to Google. We only receive data from Google about our website. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR.
You can find more information on Google's terms of use and privacy policy at https://policies.google.com/.
GOOGLE MAPS
This website uses the Google Maps API to display geographical information visually. When Google Maps is used, Google also processes data about the use of the map functions by visitors.
To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
You can find more information about data processing by Google in Google's privacy policy.
GOOGLE ANALYTICS
This website uses functions of the web analysis service Google Analytics in conjunction with the cross-device functions of Google DoubleClick. Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. a GDPR, provided you have consented to this.
IP anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser Plugin
Sie können die Speicherung der Cookies durch eine entsprechende Einstellung Ihrer Browser-Software verhindern; wir weisen Sie jedoch darauf hin, dass Sie in diesem Fall gegebenenfalls nicht sämtliche Funktionen dieser Website vollumfänglich werden nutzen können. Sie können darüber hinaus die Erfassung der durch den Cookie erzeugten und auf Ihre Nutzung der Website bezogenen Daten (inkl. Ihrer IP-Adresse) an Google sowie die Verarbeitung dieser Daten durch Google verhindern, indem Sie das unter dem folgenden Link verfügbare Browser-Plugin herunterladen und installieren: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising in your Google account by following this link: https://www.google.com/settings/ads/onweb/.
You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Storage duration
Data stored by Google at user and event level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. You can find details on this under the following link: https://support.google.com/analytics/answer/7667196?hl=de
YouTube
If necessary, videos from the YouTube platform are integrated on this page.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Durch jeden Aufruf einer der Einzelseiten dieser Internetseite, auf welcher eine YouTube-Komponente (YouTube-Video) integriert wurde, wird der automatisch veranlasst, eine Darstellung der entsprechenden YouTube-Komponente von YouTube herunterzuladen. Weitere Informationen zu YouTube können unter https://www.youtube.com/yt/about/de/ abgerufen werden. Im Rahmen dieses technischen Verfahrens erhalten YouTube und Google Kenntnis darüber, welche konkrete Unterseite unserer Internetseite durch die betroffene Person besucht wird.
If the data subject is logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website the data subject is visiting when a subpage containing a YouTube video is accessed. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged in to YouTube at the same time as accessing our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before accessing our website.
Further information can be found in the privacy policy at:
https://www.google.de/intl/de/policies/privacy/
4. OTHER PROCESSING AND DISCLOSURE OF DATA
Beyond the cases mentioned in this privacy policy, we only process your data if:
- you have consented to this (legal basis is Art. 6 para. 1 lit. a GDPR),
- the processing is necessary for the execution of contractual relationships with you (e.g. transmission to service providers required for the execution of the contract, in particular postal services, authorities, tax consultants, etc., legal basis is Art. 6 para. 1 lit. b GDPR),
- there is a legal obligation for processing (in particular retention and transmission obligations under tax and commercial law, audits in accordance with the GWG; the legal basis is Art. 6 para. 1 sentence 1 lit. c GDPR in conjunction with the corresponding statutory provisions such as the German Fiscal Code, the German Commercial Code, etc.), and
- processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, in particular for the establishment, exercise or defense of legal claims (e.g. disclosure to courts, debt collection agencies, lawyers), except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR).
Recipients of the data may also be service providers whose services we rely on to operate our company (e.g. technical service providers for the maintenance of the software and IT landscape) and to fulfill our contractual obligations (e.g. sub-service providers and subsidiaries for data evaluation) and who process the data exclusively in accordance with instructions; such service providers work for us within the framework of order processing in accordance with Art. 28 GDPR and on the basis of a corresponding order processing agreement, which binds the service provider to compliance with data protection law and our instructions.
5. Deletion of data
Unless otherwise stated in this declaration, personal data will be deleted immediately after the purpose for which it was collected ceases to apply and provided that there are no legal reasons or retention periods (e.g. 10-year retention period due to tax law regulations with regard to all data relevant to the tax case or 6-year retention period due to commercial law regulations) or e.g. limitation periods for data that may be useful for legal prosecution.
6. Social Media
We operate social media accounts, e.g. on Facebook, Instagram, Twitter, YouTube and LinkedIn. We may place links to these on our website (e.g. via the corresponding icons). If you do not click on the link, no data will be transmitted to the social media platform. If you click on a link, you will be taken to the corresponding website of the social media platform and from then on data will also be collected by the platform.
If you are also logged in to a social media platform and visit our website, the respective platform may be able to assign this to your profile. The social media platforms may use the data of their users for business purposes. In principle, we have no influence on data collection and further processing by the social media platforms, in particular the scope, location and duration of storage.
If you have any questions about data protection in connection with social media platforms, you can contact us directly; if you have technical questions, please contact the respective platform operator directly.
We would then like to inform you as follows in connection with our social media accounts:
Supplementary provisions for the use of Instagram accounts
Instagram is part of the Facebook group of companies and shares infrastructure, systems and technology with Facebook and other Facebook companies (https://www.facebook.com/help/111814505650678?ref=dp). Facebook stores and uses the data of users of its services. You can find more information about Facebook's data processing at Instagram in Instagram's privacy policy at https://help.instagram.com/519522125107875?helpref=page_content.
If the data you transmit to us via Instagram is also or exclusively processed by Facebook, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is also responsible for data processing in addition to us.
You can contact Facebook's data protection officer using the online contact form provided by Facebook at https://www.facebook.com/help/contact/540977946302970.
Supplementary provisions for the use of our Facebook page
You can find more information about Facebook's data processing in Facebook's privacy policy at https://de-de.facebook.com/policy.php.
Insofar as the data you transmit to us via Facebook is also or exclusively processed by Facebook (Insights data), Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is also responsible for data processing in addition to us. In this respect, data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR.
You can contact Facebook's data protection officer using the online contact form provided by Facebook at https://www.facebook.com/help/contact/540977946302970.
Facebook provides us with so-called Page Insights for our Facebook page: https://www.facebook.com/business/a/page/page-insights. This is aggregated data that allows us to gain insight into how people interact with our page. Page Insights may be based on personal data collected in connection with a visit or interaction of persons on or with our page and its content. In accordance with Art. 6 para. 1 lit. f GDPR, this serves to safeguard our legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties, which predominate in the context of a balancing of interests.
You can object to the processing of your data for the aforementioned purposes at any time by changing your settings for advertisements in your Facebook user account at https://www.facebook.com/settings?tab=ads.
Supplementary provisions for the use of Google pages and our YouTube channel
You can find more information about Google's data processing in Google's privacy policy at: https://policies.google.com/privacy?hl=de
If the data you transmit to us via Google is also or exclusively processed by Google, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") is also responsible for data processing in addition to us.
7. INFORMATION ON DATA SECURITY
We use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
We would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Especially when sending unencrypted e-mails, content can potentially be read by third parties. If you wish to use encrypted transmission, please contact us. However, it is not possible to guarantee complete protection of data against access by third parties.
NOTES ON E-MAIL COMMUNICATION
E-mail communication with us is unencrypted by default. If you send us an unencrypted e-mail or make an inquiry and ask for feedback by regular e-mail, we will initially assume that you agree to unencrypted communication.
Sollten Sie eine verschlüsselte Kommunikation wünschen, teilen Sie uns dies bitte mit. Wir weisen darauf hin, dass insoweit gewisse technische Anforderungen Ihrerseits erfüllt werden müssen (z. B. Implementierung einer Verschlüsselungssoftware in Ihr Mailprogramm oder Nutzung eines entsprechenden Dienstleisters). Auf Anfrage können wir Ihnen auch bestimmte Dokumente z. B. als passwortgeschützte PDF-Dateien oder .zip Container übersenden; Bitte prüfen Sie insoweit Ihren Spam-Ordner, da solche Anhänge häufig als unerwünschte Nachrichten eingestuft werden.
