data protection

DATA PROTECTION

§ 1 Information on the collection of personal data

(1) Below we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behavior.

(2) The responsible party according to Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR) is iDOO GmbH iG, Maschweg 70, D-49324 Melle (see our legal notice). You can contact our data protection officer at dsb@inoex.de or our postal address with the addition “the data protection officer”.

(3) When you contact us by email or via a contact form, the data you provide (your email address, if applicable your name and your telephone number) will be stored by us in order to answer your questions. We delete the data collected in this context once storage is no longer required or restrict processing if there are statutory retention periods.

(4) When you contact us personally via business card, the data you provide (your email address, your name and your telephone number as well as any other contact details provided on the business card) will be stored by us for the purpose of initiating contractual relationships, i.e. to provide information about our products to those interested in them and, if necessary, to create offers. We delete the data collected in this context once storage is no longer required or restrict processing if there are statutory retention periods.

(5) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also state the specified criteria for the storage period.

§ 2 Your rights

(1) You have the following rights with regard to the personal data concerning you:

– Right to information,
– Right to rectification or erasure,
– Right to restriction of processing,
– Right to object to processing,
– Right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

§ 3 Collection of personal data when visiting our website

(1) If you use the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (the legal basis is Art. 6 Para. 1 Clause 1 Letter f of GDPR):

- IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– Amount of data transferred each time
– Website from which the request comes
– Browser
– Operating system and its interface
– Language and version of the browser software.

(2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk and associated with the browser you use; they allow certain information to be sent to the location that placed the cookies (here, this is us). Cookies cannot run programs or transmit viruses to your computer. They are designed to make the Internet more user-friendly and effective.

Use of cookies:

a) This website uses the following types of cookies, the scope and functionality of which are explained below:

– Transient cookies (see b)
– Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

d) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website.

e) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.

f) The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects that are stored on your device. These objects store the required data regardless of the browser you use and do not have an automatic expiration date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.

§ 4 Registration function and services for registered users

(1) In order to use additional offers and functions of this website, you can register on this website. The data entered during registration will be used for the purposes of using the selected offer. The user can be informed by iDOO GmbH iG about information relevant to the offer or registration, such as changes to the scope of the offer or technical circumstances, using the email address provided during registration. The data collected can be seen in the input mask during registration.

(2) Depending on the scope of our services requested by the user, the following data will be collected:

- Full name
- E-mail address
– Postal address
– Information about your company

(3) The collection, processing and storage of this data serves exclusively to carry out, improve and ensure the desired scope of services for contract fulfilment (Art. 6 Para. 1 lit. b GDPR) on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). The data will not be passed on to third parties unless this is expressly requested and approved by the user (for example, if a service is provided by a third party such as a transport service provider). You can revoke your consent at any time. An informal message by e-mail (info@idoo.global) to iDOO GmbH iG The legality of the data processing that has already taken place remains unaffected by a revocation.

(4) Should it be necessary to pass on your data to third parties in order to carry out a service, we will inform you of this in advance and request your express consent.

(5) This data will be stored for as long as you are registered on this website. After this, the data will be deleted unless you have expressly consented to further use. Statutory retention periods, in particular those under commercial or tax law, remain unaffected.

(6) We would like to point out that we are obliged to provide information about this data in individual cases upon order of the competent authorities if this is necessary, for example, for the purposes of criminal prosecution or to avert danger.

§ 5 Newsletter

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

(2) We use the so-called double opt-in procedure to register for our newsletter. This means that after you register, we will send you an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

(3) The only mandatory information required to send the newsletter is your email address. Providing additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis is your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.

(4) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in each newsletter email, using the unsubscribe form on our website, or by sending an email to info@idoo.global or by sending a message to the contact details provided in the imprint.

(5) We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your email address and an individual ID. The data is collected exclusively in pseudonymized form, i.e. the IDs are not linked to your other personal data, and direct personal reference is excluded.

Such tracking is also not possible if you have deactivated the display of images in your email program by default. In this case, the newsletter will not be displayed in full and you may not be able to use all of the functions. If you display the images manually, the above-mentioned tracking will take place.

§ 6 Links to external websites

Our offer contains links to external third-party websites over whose content we have no influence. We therefore cannot accept any liability for this external content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal content was not recognizable at the time of linking. However, permanent control of the content of the linked pages is not reasonable without concrete evidence of a legal violation. If we become aware of any legal violations, we will remove such links immediately.

§ 7 Use of social media links

(1) Some of our websites contain links to Facebook, Google +, Twitter, LinkedIn and XING ("third-party providers"). However, we do not use social plug-ins from these third-party providers, so that no personal data is transferred to these third-party providers simply by visiting our websites. You will only be taken to their website by clicking on the symbol of one of the third-party providers. Data is then collected, processed and used on the websites of these third-party providers. We have no influence on the scope of the data that these third-party providers collect, process and use. The purpose and scope of data collection as well as the further processing and use of this data can be found in the data protection information of the respective third-party provider on the following websites:

a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; further information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other and www.facebook.com/about/privacy/your-info. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; www.google.com/policies/privacy/partners/. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacyTwitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

d) Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy

e) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; www.linkedin.com/legal/privacy-policyLinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

§ 8 Integration of YouTube videos

(1) We have integrated YouTube videos into our online offering, which are available on YouTube are stored and can be played directly from our website. These are all integrated in "extended data protection mode", which means that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transferred. We have no influence on this data transfer.

(2) When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in Section 3 of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your YouTube profile to be assigned, you must log out before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.

(3) You can find further information on the purpose and scope of data collection and processing by YouTube in the privacy policy. There you will also find further information on your rights and setting options for protecting your privacy: www.google.de/intl/de/policies/privacyGoogle also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§ 9 Integration of Google Maps

(1) We use Google Maps on this website. This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function.

(2) When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in Section 3 of this declaration is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your Google profile to be assigned, you must log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

(3) Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: www.google.de/intl/de/policies/privacyGoogle also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§ 10 Use of Google Analytics

(1) This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

(3) You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. In addition, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, so that personal references can be excluded. If the data collected about you can be personally identified, this will be excluded immediately and the personal data will be deleted immediately.

(5) We use Google Analytics to analyse the use of our website and to improve it regularly. Using the statistics obtained, we can improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield. www.privacyshield.gov/EU-US-FrameworkThe legal basis for the use of Google Analytics is Art. 6 (1) sentence 1 lit. f GDPR.

(6) Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: www.google.com/analytics/terms/de.html, Overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.

(7) This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

§ 11 Use of remarketing

(1) Our websites use remarketing technologies from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). We use these technologies to make the Internet more interesting for you. This technology makes it possible to target Internet users who have already shown an interest in our products with advertising on our partners' websites. We are convinced that the display of personalized, interest-based advertising is generally more interesting for Internet users than advertising that has no such personal relevance.

(2) This website uses so-called “remarketing tags”. This means that when you visit a page on this website that contains a “remarketing tag”, an online advertising provider (e.g. Google) places a cookie on the user’s computer and assigns it to the relevant remarketing target group lists. This cookie is then used to run remarketing campaigns (“interest-based advertising”) on other websites.

(3) The display of these advertisements on our partners' websites is also based on cookie technology and an analysis of previous usage behavior. According to Google, it does not collect any personal data during this process. No personal data is stored and no usage profiles are merged with your personal data.

(4) If you do not wish to receive interest-based advertising, you can disable Google’s use of cookies for these purposes by deactivating the https://www.google.de/settings/ads Alternatively, users can disable the use of third-party cookies by visiting the Network Advertising Initiative’s opt-out page (https://optout.networkadvertising.org/?c=1#!/).

§ 12 Applications

We would be delighted if you would like to apply to us. In the following, we explain how we process your personal data in the context of an application and hold further

relevant information in this context.

(1) For what purposes and on what legal basis do we process personal data?

We process personal data about you for the purpose of your application for an employment relationship, insofar as this is necessary for the decision on establishing an employment relationship with us. The legal basis for this is Art. 6 Para. 1 S.1 b) GDPR in conjunction with Section 26 Para. 1 S.1 BDSG. In addition, your separate consent in accordance with Art. 6 Para. 1 S.1 a), 7 GDPR in conjunction with Section 26 Para. 2 BDSG can be used as a permission requirement under data protection law.

We may also process personal data about you to the extent that this is necessary to defend against legal claims asserted against us arising from the application process. The legal basis for this is Art. 6 Paragraph 1 Letter f GDPR; the legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). If an employment relationship arises between you and us, we may, in accordance with Section 26 Paragraph 1 BDSG, further process the personal data already received from you for the purposes of the employment relationship if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employee representation arising from a law or a collective agreement, a works agreement or a service agreement (collective agreement).

If your application documents contain photographs, we regard this as an implied consent to process the photo. According to Art. 7 Para. 3 S.1 GDPR, you are entitled to revoke this consent at any time.

Insofar as special categories of personal data (in particular health data, e.g. severe disability) are processed in accordance with Art. 9 Para. 1 GDPR, this serves exclusively to fulfil the obligations incumbent upon us under Section 164 SGB IX as part of the application process.

If we wish to process your personal data for a purpose not mentioned above, we will inform you in advance of this and of the legal basis for doing so.

If necessary, we would like to keep your application documents for future job advertisements if your application for a specific vacant position is not successful. In this case, we will obtain a separate declaration of consent from you.

(2) What categories of personal data do we process?

We process data that is related to your application. This may be general data about you (such as name, address and contact details), information about your professional qualifications and school education or information about professional training or other information that you send to us in connection with your application, including any "special categories of personal data" provided by you in accordance with Art. 9 of the General Data Protection Regulation (e.g. a photo that reveals ethnic origin, information about severe disability, etc.). We may also process job-related information that you have made publicly available, such as a profile on professional social media networks.

(3) What are the sources of personal data if we do not collect it from you?

Your personal data is usually collected directly from you as part of the recruitment process. We may also receive data from third parties (e.g. employment agencies).

(4) What categories of data recipients are there?

We may transfer your personal data to companies affiliated with us, insofar as this is permitted within the scope of the purposes and legal bases set out in section 3.

(5) Is the transfer to a third country intended?

There is no intention to transfer data to a third country and this will only take place as part of security measures. This will ensure an appropriate level of data protection.

(6) How long will your data be stored?

We store your personal data for as long as it is necessary to make a decision on your application. If an employment relationship between you and us does not come about, we may continue to store data insofar as this is necessary to defend against possible legal claims. The application documents will be deleted six months after the rejection decision is announced, unless longer storage is necessary due to the assertion of claims.

(7) Necessity of providing personal data

The provision of personal data is neither required by law nor by contract, nor are you obliged to provide the personal data. However, the provision of personal data is necessary for the conclusion of a contract for an employment relationship with us. This means that if you do not provide us with personal data when applying for a job, we cannot enter into an employment relationship with you.

(8) No automated decision-making or profiling measures

There is no automated decision – including profiling – in individual cases within the meaning of Art. 22 GDPR, which means that the decision regarding your application is not based exclusively on automated processing.