Protection of your personal data during collection, processing and use on the occasion of your visit to our homepage is a matter of great concern for us. For this reason, we are using this pri-vacy statement to explain to you the type, extent and purpose of collecting and using personal data.
I. Name and address of the data controller
We are the controllers responsible for data processing.
Dr. Ausbüttel & Co. GmbH
Telephone: 0231 28666 100
You can contact our company data protection officer at the above address or at email@example.com.
II. Collecting and storing personal data and the type and purpose of its use
1. On visits to the website
When our website www.drausbuettel.de is viewed, the browser that is used on your terminal sends information automatically to our website server. This information is stored temporarily in a so-called logfile. The following information is recorded without any action on your part and stored until its automatic erasure:
• IP address of the enquiring computer,
• date and time of access,
• name and URL of the requested file,
• website from which access took place (referrer URL),
• browser used and where applicable your computer's operating system and the name of your access provider.
We process the above-mentioned data for the following purposes:
• to guarantee a smooth connection set-up for the website,
• to guarantee comfortable use of our website,
• to evaluate system security and stability and
• for other administrative purposes.
The legal basis for data processing is Art. 6(1)(f) of the GDPR. Our legitimate interest follows from the above list of purposes of data collection. In no case will we use the collected data for the purpose of drawing conclusions with regard to your person.
2. On applications and in the application process
We collect and process the personal data of applicants for the purpose of handling the applica-tion process. Processing can also take place electronically. This is in particular the case if an ap-plicant sends appropriate application documents to us by electronic means, for example via email, or via a web form on the webpage. If we conclude a contract of employment with an applicant, the transmitted data is stored for the purpose of handling the employment relation-ship, taking account of statutory provisions. If we do not conclude a contract of employment with the applicant, the application documents are erased automatically six months after notifi-cation of the decision to reject the application, unless we have any other legitimate interest in not erasing the documents. Another legitimate interest for these purposes is, for example, a burden of proof in proceedings under the German General Equal Treatment Act (AGG).
III. Disclosure of data
Transmission of your personal data to third parties for purposes other than those listed below does not take place.
We will pass your personal data on to third parties only if:
• you have given your express consent to this pursuant to Art. 6(1)(a) of the GDPR,
• disclosure is necessary pursuant to Art. 6(1)(f) of the GDPR for establishing, exercising or defending legal claims and there is no reason to assume that you have an overrid-ing interest worthy of protection in the nondisclosure of your data,
• there is a legal obligation for disclosure pursuant to Art. 6(1)(c) of the GDPR, and
• this is legally permissible and necessary pursuant to Art. 6(1)(b) of the GDPR for the performance of contractual relationships.
We set cookies on our webpage. These are small files that your browser creates automatically and that are stored on your terminal device (laptop, tablet, Smartphone or similar) when you visit our website. Cookies do not cause any damage to your terminal device and do not contain viruses, Trojans or other malware.
Information is filed in the cookie that arises in the context of the specific terminal device. How-ever, this does not mean that we obtain direct knowledge of your identity in this way.
In addition to this, to optimise user-friendliness we also set temporary cookies, which are stored on your terminal device for a specific stipulated period. If you visit our website again in order to use our services, your previous visit is automatically detected, as well as the inputs and settings that you activated, so that you do not have to enter them again.
On the other hand, we set cookies to record use of our website statistically and to evaluate it for the purpose of optimising our offer for you (see No 5). These cookies enable us to detect automatically that you have already visited our website in the event of a new visit. These cook-ies are erased automatically after a defined period.
Data processed through cookies is necessary for the above-mentioned purposes to safeguard our legitimate interests or those of third parties pursuant to Art. 6(1)(f) of the GDPR.
Most browsers accept cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your computer, or so that a prompt is seen before a new cookie is created. Complete deactivation of cookies can, however, lead to your being unable to use all the functions of our website.
V. Analysis tool: Google Analytics
For the purpose of the personalised design and on-going optimisation of our sites we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; referred to below as "Google"). This is done on the basis of Art. 6(1)(f) of the GDPR and represents a legitimate interest as defined in the above-mentioned provision.
In this context, pseudonymised usage profiles are created and cookies (see IV) are used. The information generated through the cookie on your use of the website, such as
• browser type/version,
• operating system used,
• referrer URL (the previously visited site),
• host name of the accessing computer (IP address),
• time of the server request,
is transmitted to Google servers in the USA and stored there. The information is used to evalu-ate the website’s use, to compile reports on website activities and to provide additional ser-vices connected with website and Internet use for the purposes of market research and person-alised design of these websites. This information is also transmitted to third parties, if this is prescribed by law, or if third parties process the data on our behalf. Your IP address will not be brought together in any case with other data from Google. IP addresses are anonymised, so that allocation is not possible (IP masking).
You can prevent the installation of cookies through a corresponding setting of the browser soft-ware; however, we must point out that in this case it is possible that you will not be able to use all functions of this website to the full extent.
In addition, you can prevent recording of the data created through the cookie and related to your use of the website (incl. your IP address), as well as the processing of this data by Google, by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, in particular with browsers on mobile terminal devices, you can prevent Google Analytics from recording your data by clicking this link. An opt-out cook-ie is set that prevents the future recording of your data when you visit this website. The opt-out cookie applies only in this browser and only for our website and is set on your device. If you erase the cookies in this browser, you will have to reset the opt-out cookie.
You can find further information on data protection in connection with Google Analytics for ex-ample at the Google Analytics helpdesk (https://support.google.com/analytics/answer/6004245?hl=de).
VI. Social media plug-ins
On the basis of Art. 6(1)(f) of the GDPR we set social plug-ins on our website for the social net-works Facebook, LinkedIn and Xing in order to make our company more well-known in this way. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for operations in conformity with data protection regulations is to be guaranteed by the respective operators. We integrate these plug-ins by means of the two-click method, in order to protect visitors to our website as best as possible.
Our website uses social media plug-ins from Facebook in order to make its use more personal. For this purpose we use the "LIKE" or "SHARE" button. This is an offer from Facebook.
If you open a site of our web presence that contains this type of plug-in, your browser sets up a direct connection to Facebook's servers. Facebook transmits the content of the plug-in directly to your browser and the browser then integrates it in the website.
Through the integration of the plug-ins, Facebook receives the information that your browser has requested the corresponding site of our web presence, even if you do not have a Facebook account or are not logged in to Facebook at the moment. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.
If you are logged into Facebook, Facebook can allocate the visit to our website directly to your Facebook account. If you interact with the plug-ins, for example by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and shown to your Facebook friends.
Facebook can use this information for the purpose of advertising, market research and personal-ised design of the Facebook pages. For this purpose, Facebook prepares usage, interests and relationship profiles, e.g. in order to evaluate your use of our website with regard to the pop-up advertising that is shown to you on Facebook, to inform other Facebook users about your activi-ties on our website and to provide other services connected with the use of Facebook.
If you do not want Facebook to allocate the data collected through our web presence to your Facebook account, you must log out of Facebook before visiting our website.
We have integrated components from the LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that enables the connection of users with existing business con-tacts, as well as linking new business contacts. Over 400 million registered users in over 200 countries use LinkedIn. This makes LinkedIn at present the largest platform for business contacts and one of the most-visited websites in the world.
On every single opening of our website, which is equipped with a LinkedIn component (LinkedIn plug-in), this component causes your browser to download a corresponding image of the LinkedIn component. You can request further information on the LinkedIn plug-ins at https://developer.linkedin.com/plug-ins. In the framework of this technical process LinkedIn acquires knowledge of which precise sub-page of our website you are visiting.
If you are logged in to LinkedIn at the same time, LinkedIn detects which precise sub-page of our website you are visiting on each opening of our website and throughout the whole duration of each visit to our website. This information is collected by the LinkedIn component and allo-cated to your relevant LinkedIn account by LinkedIn. If you click one of the LinkedIn buttons integrated on our website, LinkedIn allocates this information to your personal LinkedIn user account and stores this personal data.
If at the time you open our website you are logged into LinkedIn at the same time, LinkedIn always receives information that you have visited our website through the LinkedIn component; this takes place regardless of whether or not you click the LinkedIn component. If you do not wish this transmission of information to LinkedIn, you can prevent the transmission by logging out of your LinkedIn account before you access our website.
We have integrated Xing components on this website. Xing is an Internet-based social network that enables users to connect with existing business contacts and to establish new business con-tacts. Individual users can create their own personal profile in Xing. For example, companies can set up corporate profiles or publish vacancies on Xing.
The operating company of Xing is XING AG, Dammtorstraße 30, 20354 Hamburg, Germany.
On every single opening of one of the individual pages of this website that we operate and on which a Xing component (Xing plug-in) was integrated, the Internet browser in your IT system will be automatically caused by the relevant Xing component to download a representation of the corresponding Xing component from Xing. You can request further information on Xing plug-ins at https://dev.xing.com/plug-ins. In the framework of this technical process Xing acquires knowledge of which precise sub-page of our website you are visiting.
Insofar as the data subject is logged in at the same time with Xing, Xing detects which precise sub-page of our website is visited on each access to our website and throughout the whole du-ration of each visit to our website. This information is collected by the Xing component and allocated to your relevant Xing account by Xing. If you click one of the Xing buttons integrated on our
website, for example, the "Share" button, Xing allocates this information to your personal Xing user account and stores this personal data.
If at the time you open our website you are logged into Xing at the same time, Xing always re-ceives information that you have visited our website through the Xing component; this takes place regardless of whether or not you click the Xing component. If you do not wish this trans-mission of information to Xing, you can prevent the transmission by logging out of your Xing account before you access our website.
The data protection provisions published by Xing, which can be requested at https://www.xing.com/privacy, provide information on the collection, processing and use of personal data by Xing. In addition, Xing has published data protection information for the XING Share button at https://www.xing.com/app/share?op=data_protection.
VII. Advertising tools
We have integrated Google AdWords on this website. Google AdWords is a service for Internet advertising that permits advertisers to place adverts in Google search engine results as well as in the Google advertising network. Google AdWords enables an advertiser to stipulate specific key words in advance by means of which an advert is only displayed in Google search engine results if the user retrieves a search result relevant to the key word with the search engine. In the Google advertising network, adverts are distributed over thematically relevant websites by means of an automatic algorithm, taking the previously stipulated key words into consideration.
The operating company for the services of Google AdWords is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is advertising our website through the insertion of interest-based advertising in the websites of third-party companies, in the search engine results of the Google search engine and insertion of other advertising in our website.
If you reach our website via a Google advert, Google sets a so-called conversion cookie on your IT system . We have already explained above in Section IV what cookies are. A conversion cookie ceases to be valid after thirty days and is not intended to identify you. If it has not yet expired, the conversion cookie is used to track whether specific sub-pages, for example the shopping basket of an online shop system, were accessed on our website. With the conversion cookie both we and Google can track whether you, having reached our website via an AdWords advert, generated a sale, that is, completed or broke off a purchase.
The data and information that are collected through the use of the conversion cookies are used by Google to draw up visitor statistics for our website. We then use these visitor statistics to determine the total number of users who were passed on to us via AdWords adverts, that is, to determine the success or lack of success of the respective AdWords advert, and to optimise our AdWords adverts for the future. Neither our company nor other clients of Google AdWords re-ceive information from Google by means of which data subjects can be identified.
Personal information, for example, the websites that you visit, is stored by means of the conver-sion cookie. This means that on every visit to our website personal data, including the IP address of the Internal terminal that you use, is transmitted to Google in the USA. This personal data is stored by Google in the USA. In certain circumstances Google passes personal data on to third parties that was collected through the technical process.
As stated above, you can prevent the setting of cookies by our website at any time by means of an appropriate Internet browser configuration and in this way permanently object to the setting of cookies. Configuration of the Internet browser of this type would also prevent Google from setting a conversion cookie on your IT system. In addition, a cookie that was already set by Google AdWords can be erased at any time through the Internet browser or other software pro-grams.
You also have a possibility to object to interest-based advertising by Google. To do this, you must access www.google.de/settings/ads from each of the Internet browsers that you use and make the settings you want there.
Further information and Google's current data protection provisions can be downloaded from https://www.google.de/intl/de/policies/privacy/.
VIII. Using pictures from Getty Images
We have integrated components from Getty Images on this website. Getty Images is a US stock photo agency. A stock photo agency is a company that offers images and other photographic material on the market. Stock photo agencies usually market photos, illustrations and film mate-rial. Various customers, in particular website operators, editors of print and TV media and adver-tising agencies, license the images they use through a stock photo agency.
The operating company of Getty Images components is Getty Images International, 1st Floor, The Herbert Building, The Park, Carrickmines, Dublin 18, Ireland.
Getty Images permits the embedding of stock images (where appropriate at no charge). Embed-ding is the inclusion or integration of specific external content, for example text, video or pic-ture data, that was made available from an external website and then appears on your own website. A so-called embedding code is used for the embedding. An embedding code is an HTML code that is integrated by a website operator in a website.
If an embedding code is integrated by a website operator, the external contents of the other website are shown directly as standard as soon as a website is accessed. For external content to be displayed it is loaded directly by the other website. Getty Images makes further information on embedding content available at https://www.gettyimages.de/resources/embed.
The IP address of the Internet connection through which you access our website is transmitted to Getty Images via the technical implementation of the embedding code that enables the dis-play of images from Getty Images. In addition, Getty Images records our website, the browser type that was used, the browser language and the time and duration of the access. Besides this, Getty Images can also collect navigation information, i.e. information on which of our sub-pages you visited and which links you clicked, as well as other interactions that you carried out on your visit to our website. Getty Images can store and evaluate this data.
Further information and the current Getty Images data protection provisions can be download-ed from https://www.gettyimages.de/company/privacy-policy.
IX. Rights of data subjects
You have the right:
pursuant to Art. 15 of the GDPR to request access to your personal data that we process. In par-ticular you can request information on the purposes of the processing, the category of the per-sonal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged storage period, the existence of a right to rectification, erasure, restriction of pro-cessing or objection, the existence of a right to lodge a complaint, the source of your data, where it is collected by us, as well as on the existence of automated decision-making, including profiling, and, where applicable, meaningful information on their details;
pursuant to Art. 16 of the GDPR to request without undue delay rectification of inaccurate per-sonal data or completion of personal data stored by us;
pursuant to Art. 17 of the GDPR to request erasure of your personal data stored by us, unless processing is necessary to exercise the right of freedom of expression and information, to com-ply with a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims;
pursuant to Art. 18 of the GDPR to request restriction of the processing of your personal data, if you contest the accuracy of the data, the processing is unlawful but you reject its erasure and we no longer require the data, but you require it to establish, exercise or defend legal claims, or you have lodged an objection to the processing pursuant to Art. 21 of the GDPR;
pursuant to Art. 20 of the GDPR to receive your personal data that you made available to us in a structured, commonly used and machine-readable format, or to request transmission to another controller;
pursuant to Art. 7 (3) of the GDPR to withdraw your consent given to us at any time. The conse-quence of this is that we may no longer continue data processing based on this consent in fu-ture; and
pursuant to Art. 77 of the GDPR to lodge a complaint with a supervisory authority. As a general rule, you can contact the supervisory authority at your habitual residence or place of work, or our company's registered office.
X. Right to object
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) of the GDPR, you have the right, pursuant to Art. 21 of the GDPR, to lodge an objection to the processing of your personal data if there are grounds for this relating to your particular situation, or the objection relates to direct marketing. In the latter case you have a general right to object that we will implement without an indication of a particular situation.
If you wish to make use of your right to withdraw or object, simply send an email to firstname.lastname@example.org.
XI. Data security
Within the website visit we use the widespread SSL protocol (Secure Socket Layer) in combina-tion with the highest encryption level that your browser supports. Normally, this is 256 bit en-cryption. If your browser does not support 256 bit encryption, we use 128 bit v3 technology instead. You can see whether an individual site in our Internet presence is transmitted encrypt-ed by the closed key or lock symbol in the bottom status bar of your browser.
Apart from this, we use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in accordance with technological developments.
XII. Up-to-dateness and amendments to this privacy statement
This privacy statement is currently applicable as of May 2018.
The further development of our website and offers relating to it, and changes to statutory or official requirements, may make it necessary to amend this privacy statement. You can retrieve and print the current privacy statement, as amended, at any time by going to www.drausbuettel.de/data-protection/.