We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy notice. With this privacy notice we inform you about the nature, scope and purpose of the personal data collected, used and processed by us. Furthermore, you will be informed about your rights by means of this privacy notice, which applies to all websites, applications, services or tools of Data Assessment Solutions GmbH (together: “Services”), in which reference is made to this privacy notice, regardless of how you access or use these services, including access via mobile devices.
Persons under the age of 16 are not permitted to use this website under consent to the storage of cookies in accordance with Art. 8 GDPR, as long as there is no legally valid consent of the legal representatives for the consent to data processing. The same applies to the subscription to our newsletter, the use of the live chat function on this website and our contact form by under 16 year olds. In addition, we point out that our offer is aimed exclusively at business customers.
Responsible for purposes of the General Data Protection Regulation (GDPR), other applicable data protection laws in the Member States of the European Union and other provisions with data protection character is the Data Assessment Solutions GmbH, Misburger Str. 81b, 30625 Hannover, Tel.: +49 511 47402330 E-Mail: firstname.lastname@example.org, website: www.data-assessment.com.
2. What Personal Data do we collect and what is the data used for?
Definition of Terms
Personal data is information about a specific or identifiable natural person. A determinable natural person is a person who can be identified directly or indirectly by means of a characteristic. A characteristic may be a name, an identification number, location data or an online identifier or specific information on the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person. Not personal data is data that is anonymous or aggregated and can no longer be used to identify a particular natural person, whether in combination with other data or otherwise.
The use of our website is possible without providing personal data. However, every time a website is accessed, our Internet service provider collects a series of general data and information that is temporarily stored in the log files of the web server. For example, the browser types and versions used are recorded, as well as the operating system used by the accessing system, the web page from which an accessing system accesses our website (called referrer), the sub-web pages accessed via an accessing system on our website, the date and time of access to the web page, an Internet Protocol (IP) address, the accessing system’s Internet service provider, and other similar data and information used in the event of attacks on our information technology systems.
When processing this general data and information no conclusions are drawn on the data subject. Rather, this information is needed to properly deliver the contents of our website and to provide law enforcement authorities with the information needed for law enforcement in the event of a cyberattack. The anonymous data of the server log files are stored separately from all personal data provided by an affected person.
Contact Form, E-Mail Inquiries
If you send us inquiries via the contact form on our website or by e-mail or in any other way, your details, including the contact details provided by you, will be stored in order to process the request and in case of follow-up questions. This information is always provided by you on a voluntary basis. We will not share your information without your consent. Please note that data transmission over the Internet (for example, when communicating via e-mail) may have security vulnerabilities. A complete protection of data from access by third parties is therefore not possible.
If you would like to receive our free newsletter, we need an e-mail address from you, in addition, the IP address of the calling computer as well as the date and time of registration are stored during the initial registration. You can optionally enter your first and last name for personalized addressing. Further data is not collected. We use this data exclusively for the newsletter dispatch and do not pass it on to third parties. You may revoke your consent to the storage of data, the e-mail address and its use for sending the newsletter at any time, for example via the corresponding link in the newsletter.
Our newsletters contain so-called counting pixels. A counting pixel is a miniature graphic that is embedded in such emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Using the embedded pixel, we can detect if and when an e-mail was opened by the recipient and which links in the e-mail were called. Such personal data collected via the counting pixels contained in the newsletters are stored and evaluated anonymously in order to optimize the delivery of newsletters and to better adapt the content of future newsletters to the interests of the recipient. This personal data will not be disclosed to third parties. Affected persons are at any time entitled to revoke the separate declaration of consent made via the double-opt-in procedure. After revocation, this personal data will be deleted by us. A deregistration from the receipt of the newsletter automatically we indicate as a revocation.
Under an existing agreement, we additionally use personal information to fulfill your contract and to provide you with our services, or to fulfill our legal obligations. This includes, for example, the processing of payments and account management, the operation, the assessment and improvement of our services, the safeguarding and functionality of our services, the contact with you in the course of contract execution or other measures in the context of customer service. For these reasons, we can contact you by email, telephone or post.
We process personal data of applicants for the processing of application procedures. The processing is usually done by electronic means, e. g. if an applicant submits application documents by e-mail to us. If we conclude a contract of employment with an applicant, the transmitted data will be stored for the purpose of the employment relationship in compliance with the legal requirements.
3. Do we pass on Personal Data?
A transfer of data to third parties without your consent takes place only if we are legally obliged to do so or if this is necessary for the fulfillment of the contract and serves our legitimate interests, unless your rights and freedoms prevail. In order to reconcile our interests with your rights, we have introduced appropriate control mechanisms. We may transfer your personal data to the following third parties and for the following purposes:
External service providers
We pass on personal data to external service providers who assist us in our operations to provide technical, sales, financial or logical services to us or assist us in preventing, detecting, containing and investigating potentially unlawful acts, compliance with our legal obligations, enforcing our Terms and Conditions, defending legal claims, bill collection, affiliate and rewards schemes and other business operations.
When we disclose personal information to external providers, this is solely on the basis of an agreement that limits the processing of such personal information by the outside provider to the purposes required to fulfill the contractual obligations to us. In doing so, the external provider is obliged to take appropriate security measures with regard to this data. External providers are in no way entitled to disclose personal data that they receive from us.
We pass on personal data to law enforcement agencies, government agencies, or legally authorized third parties on request for information or in connection with a preliminary investigation or suspected criminal offense, unlawful act or other act that may give rise to legal liability for us, you or another user. In such cases, we will only disclose information relevant to the investigation or request for information, such as: Name, location, zip code, phone number, email address or IP address.
Transmission to third countries
Processing of personal data in a third country by us or on our behalf takes place only in the legally and contractually permissible framework and in the presence of the special conditions of Art. 44 et seq. GDPR. Processing then takes place on the basis of specific guarantees, such as the officially recognized level of data protection or in compliance with officially recognized special contractual obligations (so-called “EU Commission standard contractual clauses”), supported by an individual risk assessment.
Legal successor, group companies
In the event of a merger with another company or a takeover by another company, we may share information with that company in accordance with our privacy notice. If such an event occurs, we will require the new merged entity to comply with the statutory data protection regulations with respect to your personal information. If your personal information is collected, used, shared or stored for any purpose not mentioned in this document, you will be informed in advance of the processing of your data for these new purposes.
4. How long do we retain Personal Data?
The storage of personal data is based on the respective statutory retention periods. After expiration of the respective deadline, the corresponding data will be deleted, provided that a) the data is no longer required to fulfill the contract and b) you have not explicitly agreed to an extended retention period and c) deletion does not conflict with any other legitimate interests of our company. Other legitimate interest in this sense could be justified, for example, by a burden of proof in a procedure under the General Equal Treatment Act (AGG) when applying for a job.
Some of these websites use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. By using cookies, we can provide you with more user-friendly services that would not be possible without the cookie set-up and make it easier for you to use our website. Cookies are small text files that are stored on your computer and stored by your browser. Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them.
Depending on the intended use and function, we divide cookies into the following categories:
- Technically necessary cookies (mandatory cookies) to ensure the technical operation and basic functions of our website. These types of cookies are used, for example, to maintain your settings while you navigate the website; or they can ensure that important information is retained throughout the session (e.g. login, shopping cart).
- Marketing cookies to tailor the content of our website to your needs and to further optimize our products by storing information about you that results from your use.
You can prevent the setting of cookies through our and other websites at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Furthermore, you can delete already set cookies at any time via an internet browser or other software programs. This is possible in all common internet browsers. Disabling cookies may restrict the functionality of this website.
Borlabs Cookie – Consent Tool Extension (“Cookies”)
This website uses the WordPress plugin “Borlabs Cookie” as content management tool. These are scripts that are implemented on a website and ensure that certain cookies are only activated after a check mark has been placed. At the same time they inform about the cookies used and document what the user has selected. The use of a content management tool is considered a technically necessary tool and therefore does not require the explicit consent of a website user. Further information on the tool can be found at https://de.borlabs.io/borlabs-cookie/.
Social Plugins from Facebook, LinkedIn, Xing, Instagram, Twitter
Our website uses so-called social plugins (“plugins”) from the social networks Facebook, LinkedIn and Xing as well as the microblogging services Instagram and Twitter. These services are provided by the companies Facebook Inc., LinkedIn Corporation, Xing AG, Instagram LLC. and Twitter Inc. (“Providers”).
Facebook is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins
XING is operated by Xing AG, Gänsemarkt 43, 20354 Hamburg, Germany. Information on the Xing plug-ins can be found at https://dev.xing.com/
Instagram is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). Instagram LLC is a subsidiary of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. An overview of the Instagram buttons and their appearance can be found here: https://en.instagram-brand.com/assets/icons
Twitter is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). An overview of the Twitter buttons and their appearance can be found here: https://about.twitter.com/en_us/company/brand-resources.html
If you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of the corresponding operator. The content of the plugin is transmitted by the respective provider directly to your browser and integrated into the page. Through the integration of the plugin, the respective provider receives the information that your browser has called up the corresponding page of our website, even if you do not have a profile or are not logged in. This information (including your IP address) is transmitted by your browser directly to a server of the provider in Europe or the USA and stored there. If you are logged in to one of the services, the respective provider of this service can directly assign the visit to our website to your respective profile.
When you interact with the plugins, for example, by clicking the “Like”, “+1”, “Twitter” or “Instagram” button, the corresponding information is also sent directly to a server of the provider and stored there. The information is also published in the respective social network or account and displayed to your contacts. Our company usually has no influence on the amount of data that the providers collect using these plugins. The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights and setting options for the protection of your privacy can be found in the data protection notices of the providers.
Data protection information from Facebook: http://www.facebook.com/policy.php
Data protection information from LinkedIn: https://www.linkedin.com/legal/privacy-policy.
Data protection information from Twitter: https://twitter.com/privacy
Data protection information from Instagram: https://help.instagram.com/155833707900388/
Data protection information from XING: https://privacy.xing.com/en/privacy-policy
If you do not want Facebook, LinkedIn, Xing, Instagram, or Twitter to associate the information collected through our website directly with your profile in their respective service, you must log out of the respective service before visiting our website. You can also completely prevent the loading of the plugins with add-ons for your browser, e.g. with the script blocker „NoScript“ (http://noscript.net/).
Our website has Google Ads integrated. The operating company is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The purpose is to promote our website by displaying interest-relevant advertisements on third-party websites and in the search results of the Google search engine. If a person reaches our pages via a Google advertisement, a so-called conversion cookie is stored on their system (for cookies, see the explanations above). A conversion cookie loses its validity after thirty days and does not serve to identify the person concerned. However, it can be used to track which subpages have been accessed on our site. In addition, the data and information collected is used by Google to compile visit statistics for our website, which are used by us to determine the total number of users who were referred to us via Ads ads, to determine the success or failure of the respective ads and to optimize our ads for the future. Neither our company nor other Google Ads advertisers receive information from Google that could be used to identify individuals.
Whenever you visit our Internet pages, personal data including the IP address of the Internet connection used may be transmitted to Google in the USA and stored there on Google servers. Google may pass this data on to third parties. As described above, the setting of cookies by our website can be generally prevented at any time by means of a corresponding setting of the Internet browser used and thus the setting of cookies can be permanently rejected. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the system of the visitor to a website. In addition, a cookie already set by Google Ads can be deleted at any time via the Internet browser or other software programs. It is also possible to object to interest-related advertising by Google. For this purpose, the link https://www.google.de/settings/ads must be called up from every internet browser used and the desired settings must be made there. Further information and the valid data security regulations of Google can be called up under https://www.google.de/intl/de/policies/privacy.
LinkedIn Conversion Tools: Insight Tag and Event Pixel
LinkedIn members may opt-out of having their personal information used for promotional purposes in their account settings by clicking the following link (“Opt-out”): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
This website uses functions of the web analytics service Google Analytics. Provider is Google Inc., 1600, Amphitheatre Parkway Mountain View, CA, 94043, USA. The purpose of the Google Analytics component is to analyze visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile for us online reports showing the activities on our websites, and to provide other services related to the use of our website.
Google Analytics uses “cookies” for this purpose. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. For more information about how to handle user data on Google Analytics, see the Google Privacy Notice: https://support.google.com/analytics/answer/6004245?hl=de
You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you might not be able to fully use all functions of this website you may also prevent the collection by Google of the cookie-generated data related to your use of the Website (including your IP address) and the processing of such data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Objecting to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.
We use the function “activation of IP anonymization” on this website. Your IP address will be shortened and anonymized by Google if your access to our website is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area. Your IP address detected by Google Analytics will not be merged with other data provided by Google.
On our website, we use the reCAPTCHA service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). This serves the purpose of distinguishing input by a human or by automated, machine processing. In the background, Google collects and analyses usage data that is used by reCaptcha to distinguish regular users from bots. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and, if applicable, other data required by Google for the reCAPTCHA service will be transmitted to Google. This data is processed by Google within the European Union and, if necessary, also in the USA. The processing is carried out on the basis of Art. 6 (1) (f) of the European Data Protection Act (GDPR) for the legitimate interest of protecting our website from automated spying, misuse and SPAM. You have the right to object to this processing of your personal data based on Art. 6 (1) f GDPR at any time for reasons that arise from your particular situation. You can find more information on Google reCAPTCHA and the associated data protection declaration at https://www.google.com/recaptcha/intro/android.html as well as https://www.google.com/privacy.
This website uses the remarketing function of Google Inc. (“Google”). This function is used to present interest-related advertisements to visitors to the website as part of the Google advertising network. The website visitor’s browser stores so-called “cookies” on your computer for this purpose (for cookies, see the explanations above). These pages may then display advertisements to the visitor that relate to content previously viewed by the visitor on websites that use Google’s remarketing feature. According to Google, it does not collect any personal data during this process. However, if you do not want Google’s remarketing function to work, you can always deactivate it by making the appropriate settings at http://www.google.com/settings/ads.
We manage this website with the help of the tool ManageWP. The provider is GoDaddy.com WP Europe, Trg republike 5, 11000 Belgrade, Serbia (hereinafter ManageWP).
With ManageWP, we can monitor the security and performance of our website and make automatic backups. ManageWP therefore has access to all website content, including our databases. ManageWP is hosted on the provider’s servers.
The use of ManageWP is based on Art. 6 para. 1 lit. f GDPR. As the website operator, we have a legitimate interest in protecting our website as effectively as possible against cyberattacks. Insofar as a corresponding consent was requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
The data transfer is based on the standard contractual clauses of the EU Commission supported by an individual risk assessment. Data protection information on this plugin can be found at https://www.wordfence.com/help/general-data-protection-regulation/ and https://managewp.com/privacy bzw. https://managewp.com/blog/managewp-and-gdpr-compliance.
Wordfence – WordPress Security Plugins
We have integrated Wordfence as a WordPress security plugin on this website. The provider is Defiant Inc, Defiant, Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter Wordfence).
Wordfence serves to protect our website from unwanted access or malicious cyberattacks. For this purpose, our website establishes a permanent connection to Wordfence’s servers so that Wordfence can compare its databases with the accesses made to our website and block them if necessary.
The use of Wordfence is based on Art. 6 para. 1 lit. f GDPR. As the website operator, we have a legitimate interest in protecting our website as effectively as possible against cyberattacks. Insofar as a corresponding consent was requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission supported by an individual risk assessment. Data protection information on this plugin can be found at https://www.wordfence.com/help/general-data-protection-regulation/.
This website has integrated components from YouTube. YouTube is an internet video portal that allows video publishers to post video clips and other users to view, rate and comment on them for free. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Information about YouTube plugins you find at: https://developers.google.com/youtube.
Each time a single page of this website is accessed on which a YouTube component (YouTube video) has been integrated, the Internet browser on the visitor’s information technology system is prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. As part of this technical process, YouTube and Google may obtain information about which specific subpage of our website was visited by the respective person. This information is collected by YouTube and Google and may be assigned to the respective YouTube account of the person concerned.
YouTube and Google receive information through the YouTube component that someone has visited our site whenever that person is logged into YouTube at the same time as they visit our site, regardless of whether they click on a YouTube video or not. If such transmission of this information to YouTube and Google is not intended by the person concerned, he or she may prevent such transmission by logging out of his or her YouTube or Google account before accessing our website.
The data protection regulations published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy, provide information about the collection, processing and use of personal data by YouTube and Google.
Zendesk – Live Chat
6. What options and rights do you have with regard to the processing of Personal Data?
Unless the legal basis is explicitly stated in the individual case, the following applies: The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 GDPR, the legal basis for the processing for the fulfillment of our services and the execution of contractual measures as well as the answer to inquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 (1) lit. c GDPR, and the legal basis for processing for the protection of our legitimate interests is Article 6 (1) lit. f GDPR.
You have the right to revoke your consent to receive the newsletter at any time. For revocation, there is a corresponding link in each newsletter. Furthermore, there is the possibility to unsubscribe at any time directly by phone, e-mail or mail from the newsletter dispatch.
According to Art. 15 GDPR, you also have the right to information on the type, scope and purpose of the stored personal data, the right of correction pursuant to Art. 16 GDPR, the right to cancellation under Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR, the right to object in accordance with Art. 21 GDPR and the right of data transferability under Art. 20 GDPR. With regard to the right to information and the right to erase, the restrictions under §§ 34 and 35 BDSG apply. In addition, a right of appeal to a data protection supervisory authority pursuant to Art. 77 GDPR combined with § 19 BDSG applies. If you wish to exercise your rights, contact us via the contact details provided. Upon your request, we will delete your personal information as far as this is possible under your contract and in accordance with applicable law.
If you ask us to cease all or part of the processing of your personal information, or if you revoke your consent (if applicable) to the use or disclosure of your personal information for the purposes set out in this privacy notice, we may be unable to provide you all services. Please note that this does not automatically release you from payment obligations under existing contracts.
7. How do we protect your Personal Data?
Your personal information is protected by technical and organizational security measures to minimize risks associated with their loss, misuse, unauthorized access, unauthorized disclosure and alteration. For this purpose, we use firewalls and data encryption, as well as physical access restrictions for our data processing facilities and data access authorization controls and other security measures. Subcontractors are obliged to comply with data protection regulations in accordance with Art. 28 (4) GDPR. Further information is available upon request.
We may revise this privacy notice at any time by publishing the amended version on this website. If you have any further questions, please do not hesitate to contact us.