Privacy Policy

Hinweise zum Datenschutz Datenschutzhinweise nach Art. 13, 14 und 21 DSGVO für die Websites und externe Seiten der Shirtigo GmbH.

1. Introduction

Thank you for visiting our website! The protection of your personal data and your privacy is very important to us. We want you to feel not only comfortable but also safe on our website. We therefore undertake all necessary procedures, as the body responsible under data protection legislation, to protect your personal data and to treat it confidentially.

In principle, it is possible to use our Internet pages without providing any personal data. In addition to the informational use of our website, we use data for marketing and analysis purposes and offer various services on our website that you can use if you are interested. For this purpose, it is usually necessary to provide personal data. In some cases, we use external service providers who have been carefully selected and commissioned by us to process this data. These service providers are bound by our instructions and are regularly monitored.

By means of this data protection declaration, our company would like to inform the public about the nature, scope and purpose of the personal data we collect, use and process and the processes involved. Furthermore, you will be informed about the rights to which you are entitled. Personal data is always processed in accordance with the General Data Protection Regulation (DSGVO) and in compliance with the country-specific data protection regulations currently applicable to us.

This current data protection declaration can be accessed, saved and printed out at any time at the URL https://cockpit.shirtigo.de/privacy.

2. Data controller and contact

The responsible party within the meaning of the General Data Protection Regulation (DSGVO), other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

Shirtigo GmbH

Legally represented by the managing director Michael Bröhl

Siemensstraße 2
50354 Hürth
Germany

Phone: +49 (0)221 / 58 90 1820

E-mail: cockpit@shirtigo.de
Website: https://cockpit.shirtigo.de

The data protection officer of the responsible party is:

Jan Klein
E-mail: datenschutz@shirtigo.de

Bitte beachten Sie, dass Sie über Links auf unserer Website zu anderen Websites gelangen können, die nicht von uns, sondern von Dritten betrieben werden. Solche Links werden von uns entweder eindeutig gekennzeichnet oder sind durch einen Wechsel in der Adresszeile Ihres Browsers erkennbar. Für die Einhaltung der datenschutzrechtlichen Bestimmungen und einen sicheren Umgang mit Ihren personenbezogenen Daten auf diesen von Dritten betriebenen Websites sind wir nicht verantwortlich.

3. Definition of terms

Die Datenschutzerklärung der Shirtigo GmbH beruht auf den Begrifflichkeiten, die durch den Europäischen Richtlinien- und Verordnungsgeber beim Erlass der Datenschutz-Grundverordnung (DSGVO) verwendet wurden. Unsere Datenschutzerklärung soll sowohl für die Öffentlichkeit als auch für unsere Kunden und Geschäftspartner einfach lesbar und verständlich sein. Um dies zu gewährleisten, möchten wir vorab die verwendeten Begrifflichkeiten erläutern.

The data protection declaration of Shirtigo GmbH is based on the terms used by the European Directive and Regulation Enactor when issuing the Data Protection Regulation (DSGVO). Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.

We use the following terms, among others, in this data protection declaration:

a) Personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject

Data subject means any identified or identifiable natural person whose personal data are processed by the controller.

c) Processing

Wir verarbeiten personenbezogene Daten nur, soweit dies gesetzlich zulässig ist. Eine Weitergabe personenbezogener Daten findet ausschließlich in den unten beschriebenen Fällen statt. Die personenbezogenenDaten werden durch angemessene technische und organisatorische Maßnahmen (z.B. Pseudonymisierung, Verschlüsselung) geschützt. Sofern wir nicht gesetzlich zu einer Speicherung oder einer Weitergabe an Dritte (insbesondere Strafverfolgungsbehörden) verpflichtet sind, hängt die Entscheidung, welche personenbezogenen Daten von uns wie lange verarbeitet werden und in welchem Umfang wir sie ggf. offenlegen, davon ab, welche Funktionen der Website Sie im Einzelfall nutzen.

Verarbeitung ist jeder mit oder ohne Hilfe automatisierter Verfahren ausgeführte Vorgang oder jede solche Vorgangsreihe im Zusammenhang mit personenbezogenen Daten wie das Erheben, das Erfassen, die Organisation, das Ordnen, die Speicherung, die Anpassung oder Veränderung, das Auslesen, das Abfragen, die Verwendung, die Offenlegung durch Übermittlung, Verbreitung oder eine andere Form der Bereitstellung, den Abgleich oder die Verknüpfung, die Einschränkung, das Löschen oder die Vernichtung.

d) Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.

e) Profiling

Profiling is any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.

f) Pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separate and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

g) Controller or person responsible for processing.

The controller or person responsible for processing is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.

h) Processor

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.

i) Recipient

Recipient means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive Personal Data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients.

j) Third Party

Third party means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.

k) Consent

Consent is any expression of will given voluntarily by the data subject for the specific case in an informed manner and unambiguously, in the form of a statement or other unambiguous affirmative act by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.

4. Data protection compact

When and how do we collect data?

Personal data is transmitted to us exclusively by means of cookies when visiting our Internet pages or through direct input by the user in forms on our site. By calling up and/or using our Internet pages, we collect, for example, pseudonymized data such as

  • the browser type,
  • the sub-pages visited on our Internet site,
  • the operating system or
  • the anonymized IP address.

When registering or making a purchase on our Internet pages, it may be necessary to provide personal data such as

  • name, first name, title
  • payment data
  • contact data (e-mail, telephone)
  • address and order data.

What are the personal data processed and used for?

All personal data collected by us is collected and used exclusively for a specific purpose. Therefore, the following reasons for processing are merely a list. More detailed information on why we collect or need to collect which data can be found in the explanations of this privacy policy.

  • Provision of tools, products & services
  • Fulfillment of legal requirements and sales contracts
  • Processing and delivery of orders
  • Payment processing
  • Processing of relevant inquiries about our tools, products & services
  • Marketing and analysis purposes
  • Informing about orders, products, services and offers
  • Optimizing the usability of our website
  • Improving the shopping experience
  • Conducting our business activities
  • Prevention of misuse of our websites
  • Security mechanisms

What rights do you have?

At any time you have the right to free

  • information,
  • correction,
  • blocking,
  • revocation and
  • deletion

of your stored data. You will find a detailed description of the data subject rights in this privacy policy.

How can I object to the use of data and exercise my rights?

To exercise your right to object or otherwise exercise your rights, you may contact any employee of Shirtigo GmbH. You are also free to exercise your right to object to individual data collection processes by means of automated procedures (opt-out) using technical specifications.

How long will personal data be stored and when will it be deleted?

We generally delete your personal data as soon as the purpose for which it was collected no longer applies. In order to comply with commercial/tax and other legal requirements, it may be necessary to block your personal data for further processing.

How does Shirtigo GmbH protect personal data?

As the controller, the Shirtigo GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can always be vulnerable to security risks, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

The website uses the industry standard SSL (Secure Sockets Layer) to encrypt the data transfer. This ensures the confidentiality of your personal information over the Internet. By using the SSL process, your data is alienated in such a way that a third party cannot reconstruct it. It also ensures that your data is only sent to the server from which it was requested.

5. rights of the data subject according to Art. 12 - 23 DSGVO

The exact wording of your rights can be found in Chapter 3 of the GDPR: https://dsgvo-gesetz.de/kapitel-3/

a) Right to confirmation

Every data subject has the right granted by the European Directive and Regulation to obtain confirmation from the controller as to whether personal data concerning him or her are being processed. If a data subject wishes to exercise this right of confirmation, he or she may, at any time, contact any employee of the controller.

b) Right to information

You may request confirmation from the controller as to whether personal data concerning you are being processed by us.

If such processing is taking place, you may request information from the controller about the following:

(1) the purposes for which the personal data are processed;
(2) the categories of personal data which are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data, if the personal data are not collected from the data subject;
(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information about whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer.

c) Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller, insofar as the processed personal data concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.

d) Right to erasure (right to be forgotten)

You may request the controller to erase the personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay, if one of the following reasons applies:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) DSGVO and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.
(4) The personal data concerning you have been processed unlawfully.
(5) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
(6) The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) DSGVO.

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable measures, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.

The right to erasure does not exist to the extent that the processing is necessary to.

(1) for the exercise of the right to freedom of expression and information;
(2) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) DSGVO, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
(5) for the assertion, exercise or defense of legal claims.

e) Right to restrict processing.

Any person concerned by the processing of personal data has the right granted by the European Directive and Regulation to obtain from the controller the restriction of processing.

You may request the restriction of the processing of personal data concerning you under the following conditions:

(1) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
(3) the controller no longer needs the personal data for the purposes of the processing, but you need it for the establishment, exercise or defense of legal claims; or
(4) if you have objected to the processing pursuant to Article 21(1) of the GDPR and it is not yet clear whether the controller's legitimate grounds override your grounds.

If the processing of personal data concerning you has been restricted, such data may - apart from being stored - only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

f) Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that.

(1) the processing is based on consent pursuant to Art. 6(1)(a) DSGVO or Art. 9(2)(a) DSGVO or on a contract pursuant to Art. 6(1)(b) DSGVO and

(2) the processing is carried out with the help of automated procedures.

In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

g) Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions. In this context, we ask you to explain the reasons on the basis of which you object to the processing of your personal data by us.

The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to processing of the personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

The data subject is also free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise his/her right to object by means of automated procedures (opt-out) using technical specifications.

h) Automatisierte Entscheidungen im Einzelfall einschließlich Profiling

Any data subject concerned by the processing of personal data shall have the right, granted by the European Directive and Regulation, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, unless the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the controller, or (2) is permitted by Union or Member State law to which the controller is subject and that law contains suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is made with the data subject's explicit consent.

If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the data controller, or (2) it is made with the data subject's explicit consent, the Shirtigo GmbH shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, which include at least the right to obtain the data subject's involvement on the part of the controller, to express his or her point of view and contest the decision.

If the data subject wishes to exercise the rights concerning automated decisions, he or she may, at any time, contact any employee of the controller.

However, as a responsible company, we do not use automated decision-making or profiling.

i) Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.

The supervisory authority of Shirtigo GmbH is the:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

Helga Block
PO Box 20 04 44
40102 Düsseldorf

or:

Kavalleriestraße 2-4
40213 Düsseldorf

Phone: 02 11/384 24-0
E-mail: poststelle@ldi.nrw.de
Homepage: https://www.ldi.nrw.de

6. Legal basis of processing

Your data will be stored and processed by us in compliance with the relevant legal provisions, in particular in compliance with the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG) as well as the General Data Protection Regulation (EU DSGVO).

Art. 6 I lit. a DSGVO serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for a delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 I lit. b DSGVO. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products or services or deposit of the information in the user account.

Insofar as processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.

In rare cases, the processing of personal data might become necessary to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured on our premises and as a result his or her name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d DSGVO.

Finally, processing operations could also/or be based on Art. 6 I lit. f DSGVO. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden. Such processing operations are permitted to us in particular because they were specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller - i.e. us (Recital 47, Sentence 2 DSGVO).

Personal data processing for marketing purposes is carried out on the basis of the legal provisions of Section 96 (3) TKG as well as Art 6 (1) lit a (consent) and/or f (legitimate interest) of the DSGVO. Our concern in terms of the DSGVO (legitimate interest) is the improvement of our offer and our website to permanently improve your shopping experience and to make it customer-friendly and individual for you. The evaluation and analysis of the pseudonymized data collected from you helps us to do this. Furthermore, our legitimate interest is to conduct our business for the benefit of the well-being of all our employees and our shareholders. However, whenever data processing is based on legitimate interest, the data subject - i.e. you - will also be given the right to object (opt-out).

7. Transfer of data to third parties

We do not transfer your personal data to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:

  • you have given your express consent to do so in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO,
  • the disclosure is permitted under Art. 6 (1) p. 1 lit. f DSGVO to protect our legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
  • in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c DSGVO, as well as
  • this is legally permissible and necessary for the processing of contractual relationships according to Art. 6 para. 1 p. 1 lit. b DSGVO.

8. Duration for which the personal data is stored and routine deletion and blocking of personal data

Die personenbezogenen Daten werden gelöscht, sobald der Zweck der Verarbeitung entfällt oder eine vorgeschriebene Speicherfrist abläuft, es sei denn, dass eine Erforderlichkeit zur weiteren Speicherung der personenbezogenen Daten für einen Vertragsabschluss oder eine Vertragserfüllung besteht. Soweit wir über die Speicherdauer von Cookies und ähnlichen Technologien informieren müssen, finden Sie die Angaben hierzu am Ende dieser Datenschutzhinweise. Personenbezogene Daten, die wir im Rahmen einer Bewerbung (s. unten) verarbeiten, werden für die Dauer von sechs Monaten nach Abschlussdes Bewerbungsverfahrens gespeichert.

9. Legal or contractual provisions for the provision of personal data; necessity for the conclusion of a contract; obligation of the data subject to provide the personal data; possible consequences of non-provision

We inform you that the provision of personal data is sometimes required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner in the case of an order). Sometimes, in order to conclude a contract, it may be necessary for you as the data subject to provide us with personal data that must subsequently be processed by us. For example, you are obliged to provide us with personal data if our company concludes a contract with you. Failure to provide the personal data would mean that the contract could not be concluded. Before providing personal data, you must contact our contact person for data protection. Our contact person will clarify on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences of not providing the personal data would be.

10. Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

11. Collection, processing and use of general data and information

If you call up our Internet pages without sending us information directly, e.g. by means of a contact form or registration, we only collect such personal data that your web browser transmits to our server in order to enable the display of our Internet presence and to ensure stability and security. The following general data and information is collected in this context, for example:

  • Information about the browser type and the language and version used.
  • The operating system of the user
  • The user's Internet service provider
  • The Internet protocol address (IP address) of the user
  • The date and time of access to the website
  • Websites that are accessed by the user's system via our website
  • Other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

When using these general data and information, Shirtigo GmbH does not draw any conclusions about the visitor. This information is rather required in order to

  • to deliver the contents of our website correctly,
  • to ensure the long-term functionality of our information technology systems and the technology of our website.
  • To provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

This anonymously collected data and information is ultimately evaluated by us with the aim of increasing the data protection and data security of our enterprise, and ultimately ensuring an optimal level of protection for the personal data we process. These purposes also include our legitimate interest in data processing pursuant to Art. 6 (1) lit. f DSGVO. The general data and information are stored in log files on our servers separately from any personal data provided by you. A storage of your IP address or other data, which enables a personal allocation of the data to you, does not take place.

Furthermore, the data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. No other evaluation of this data takes place. Consequently, there is no possibility for the user to object.

Bereitstellung der Webseite

Zweck der Verarbeitung: Funktionsfähigkeit und Optimierung der Website, Gewährleistung der Sicherheit unserer informationstechnischen Systeme bei rein informatorischer Nutzung (ohne Verwendung von Zusatzfunktionen wie Kontaktformularen oder Social Media Plugins) unserer Website; Einbindung und Anzeige von Funktionen und Inhalten (z.B. Grafiken), die wir nicht selbst bereitstellen.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. f DSGVO
Datenkategorien: Nutzungsdaten, Verbindungsdaten
Empfänger der Daten: Eine Datenweitergabe an Dritte findet nur statt, soweit dies zum Betrieb unserer Website erforderlich ist. Hierzu werden die personenbezogenen Daten an folgende Empfänger übertragen: IT-Dienstleister

Beabsichtigte Drittlandübermittlung:

Webflow, Inc.
398 11th Street, 2nd Floor
San Francisco, CA 94103, USA

Ein angemessenes Datenschutzniveau ist durch die Verwendung der EU-Standardvertragsklauseln gewährleistet.

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

Online-Shop

Zweck der Verarbeitung: Betrieb des Onlineshops; Abwicklung Ihrer Bestellungen und Anfragen; Gewährleistung der Sicherheit unseres Onlineshops.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. b, f DSGVO

Datenkategorien: Stammdaten, Kontaktdaten, Vertragsdaten, Inhaltsdaten, Zahlungsdaten, Nutzungsdaten und Verbindungsdaten. Haben Sie bereits ein Kundenkonto bei uns, genügt die Anmeldung in Ihr Kundenkonto. Wir verwenden dann im Übrigen die personenbezogenen Daten aus Ihrem Kundenkonto.

Empfänger der Daten: Versandunternehmen; Zahlungsdienstleister

Beabsichtigte Drittlandübermittlung: Keine

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

Kundenkonto

Zweck der Verarbeitung: Nutzung eines Kundenkontos; Erfüllung des Vertrags oder vorvertraglicher Maßnahmen; Gewährleistung der Sicherheit unserer informationstechnischen Systeme.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. b, f DSGVO

Datenkategorien: Stammdaten, Kontaktdaten, ggf. Inhaltsdaten, Verbindungsdaten, ggf.

Zahlungsdaten, ggf. Vertragsdaten und Nutzungsdaten

Empfänger der Daten: Keine

Beabsichtigte Drittlandübermittlung: Keine

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

Google Fonts

Zweck der Verarbeitung: Persönlicheren Gestaltung unserer Website durch von Google-Servern geladene Schriftarten.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. f DSGVO

Datenkategorien: Verbindungsdaten

Empfänger der Daten: Google Ireland Ltd., GordonHouse, Barrow Street Dublin 4 Irland

Beabsichtigte Drittlandübermittlung: Im Einzelfall USA (gemäß Standarddatenschutzklauseln der EU-Kommission, Art. 46 Abs. 2 Buchst. cDSGVO)

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

12. Collection, processing and use of personal data by cookies

What are cookies?

Our Internet pages use cookies. Cookies are text files that are stored on a computer system via an Internet browser and through which certain information flows to us as the person responsible for setting the cookie.

Numerous Internet pages and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This makes it possible to distinguish visited Internet pages and servers, as well as the individual browser from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID. The user data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data is not stored together with other personal data of the users. The user data collected by technically necessary cookies are not used to create user profiles.

Numerous Internet pages and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This makes it possible to distinguish visited Internet pages and servers, as well as the individual browser from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID. The user data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data is not stored together with other personal data of the users. The user data collected by technically necessary cookies are not used to create user profiles.

Are cookies dangerous?

Through the use of cookies, we can provide the users of this website with services that would not be possible without the cookie setting. By means of a cookie, the information and offers on our website can be optimized in terms of the user. Cookies enable us, as already mentioned, to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website and to make it as comfortable as possible. For example, the user of a website that uses cookies does not have to re-enter his or her access data each time he or she visits the website, because this is handled by the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping cart in an online store. The online store uses a cookie to remember the items that a customer has placed in the virtual shopping cart. Cookies can further be used for anonymized analysis of the use of a website and its functions by its users. The information thus generated is transferred to the provider's server and stored there. The analyzed data are the basis for aligning our websites according to the wishes of our visitors and customers and to improve their content and functions.In these purposes also lies our legitimate interest in the processing of personal data according to Art. 6 para. 1 lit. f DSGVO.

What do we use cookies for?

Through the use of cookies, we can provide the users of this website with services that would not be possible without the cookie setting. By means of a cookie, the information and offers on our website can be optimized in terms of the user. Cookies enable us, as already mentioned, to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website and to make it as comfortable as possible. For example, the user of a website that uses cookies does not have to re-enter his or her access data each time he or she visits the website, because this is handled by the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping cart in an online store. The online store uses a cookie to remember the items that a customer has placed in the virtual shopping cart. Cookies can further be used for anonymized analysis of the use of a website and its functions by its users. The information thus generated is transferred to the provider's server and stored there. The analyzed data are the basis for aligning our websites according to the wishes of our visitors and customers and to improve their content and functions.In these purposes also lies our legitimate interest in the processing of personal data according to Art. 6 para. 1 lit. f DSGVO.

Do you want to do without the benefits of cookies?

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies.

You can restrict or prevent the setting of cookies by our website at any time by means of a corresponding (extended) setting in the sub-item "Data protection" or "Security" of the Internet browser you are using and thus permanently object to the setting of cookies. If you deactivate the setting of cookies in the Internet browser used, however, not all functions of our website may be fully usable.

The help function in the menu bar of the web browser explains how to prevent your browser from accepting new cookies, how to have your browser notify you when you receive a new cookie, or even how to delete all cookies you have already received and block them for all further sessions.

In Internet Explorer:
1. select "Internet Options" from the "Tools" menu.
2. click on the "Privacy" tab.
3. now you can make the security settings for the Internet zone. Here you set whether and which cookies are to be accepted or rejected.
4. confirm your setting with "OK".

In Firefox:
1. select the Settings item in the "Tools" menu.
2. Click on "Privacy".
3. in the drop-down menu, select the entry "create according to user-defined settings".
4. now you can set whether cookies should be accepted, how long you want to keep these cookies and add exceptions, which websites you always or never want to allow to use cookies.
5. confirm your setting by clicking "OK".

In Google Chrome:
1. click on the Chrome menu in the browser toolbar.
2. now select "Settings".
3. Click on "Show advanced settings".
4. under "Privacy", click "Content settings".
5. Under "Cookies", you can set the following settings for cookies:
(a) Delete cookies
b) Block cookies by default
c) Allow cookies by default
d) Delete cookies and website data by default after exiting the browser.
e) Allow exceptions for cookies from specific websites or domains.

Alternatively, especially for browsers on mobile devices, you can prevent the storage of tracking data by clicking on this link . An opt-out cookie will be set with a validity of 180 days, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete all cookies in this browser, you must set the opt-out cookie again.

13. Collection, processing and use of general data through contact options.

Based on statutory provisions, the website of Shirtigo GmbH contains data that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If you contact us by e-mail, the personal data you provide will be stored.

There is also a contact form on our website, which can be used for electronic contact. For the processing of the data, reference is made to this data protection declaration in the context of the sending process. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.

Based on statutory provisions, the website of Shirtigo GmbH contains data that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If you contact us by e-mail, the personal data you provide will be stored.

There is also a contact form on our website, which can be used for electronic contact. For the processing of the data, reference is made to this data protection declaration in the context of the sending process. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.

In doing so, the specification of a valid e-mail address is required so that we know from whom the inquiry originates and in order to be able to answer it. In addition, when using the contact form, we record your IP address and the time of sending. Apart from the content of the message, no other personal information is required.

The processing of personal data serves us solely to process the contact. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. Data processing for the purpose of pre-contractual contact with us is carried out in accordance with Art. 6 (1) lit. b DSGVO.

If you as a data subject contact us by e-mail or via a contact form, the personal data transmitted to us will be stored automatically. Your data will be deleted after final processing of your request, provided that you wish this and the deletion does not conflict with any statutory retention obligations.

If you contact us by e-mail or form, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

14 Registration on our website

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored.

The personal data entered is collected and stored exclusively for internal use and for our own purposes. Before sending your data, we again expressly refer you to our data protection declaration. By sending us your data, you agree to the processing of your personal data as described in this privacy policy. Which personal data is transmitted to us is determined by the respective input mask used for registration.

By registering on our website, your IP address assigned by your Internet service provider (ISP), the date and time of registration will also be stored. The storage of this data takes place against the background that only in this way the misuse of our services can be prevented. In this respect, the storage of this data is necessary for our protection. In principle, this data is not passed on to third parties, unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

User registration is necessary for the provision of certain content and services on our website. The legal basis for processing the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. If the registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 (1) lit. b DSGVO.

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. This is the case for the data collected during the registration process when the registration on our website is cancelled or modified, provided that this does not conflict with any legal obligations to retain data.

As a user, you have the option to cancel your registration at any time. You can have the data stored about you changed at any time. Upon request, we will provide you with information about which personal data is stored at any time. Furthermore, we will correct or delete your personal data upon request, provided that this does not conflict with any legal obligations to retain data. Please contact us by e-mail at datenschutz@shirtigo.de.

Facebook Connect

Alternatively, we use "Facebook Connect" on our website, a service provided by Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA. Facebook Connect facilitates registration for services on the Internet. Instead of using a registration screen on our website, you can enter your login data for Facebook and then use our service. By using Facebook Connect, your web browser automatically establishes a direct connection with the Facebook server. To register, you will be redirected to the Facebook page. There you can log in with your usage data. This links your Facebook profile and our service. Through the link, we automatically receive from Facebook Inc. your email address registered with Facebook, as well as the first and last name. Exclusively if you give your express consent in accordance with Art. 6 (1) lit. a DSGVO prior to the registration process on the basis of a corresponding notice about the exchange of data with Facebook, we receive the general and publicly accessible information stored in your profile when using the "Facebook Connect" button from Facebook, depending on your personally made data protection settings at Facebook.

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to Facebook's servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there. These data processing operations are carried out pursuant to Art. 6 (1) lit. f DSGVO on the basis of Facebook's legitimate interest in displaying personalized advertising based on browsing behavior.

You can prevent Facebook from processing the above information by using our registration mask and not using Facebook Connect. The consent given can be revoked at any time by sending a message to the responsible person named at the beginning of this statement.

For more information on Facebook Connect and privacy settings, please refer to the privacy notices und den terms der Facebook Inc.

If you do not want Facebook to directly assign the data collected via our website to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of Facebook plugins with add-ons for your browser, e.g. with "Adblock Plus" (https://adblockplus.org/de/).

Google Sign-in

Alternatively, we use "Google Sign-in" on our website, a service provided by Google Inc. ("Google"), 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Google Sign-in facilitates registration for services on the Internet. Instead of using a registration mask on our website, you can enter your login data for Gmail and then use our services. By using Google Sign-In, your web browser automatically establishes a direct connection with Google's server. To log in, you will be redirected to the Google Mail page. There you can log in with your usage data. This links your Google profile and our service. Through the link, we automatically receive your Google email and your first and last name from Google. Exclusively if you give your express consent in accordance with Art. 6 (1) lit. a DSGVO before the registration process on the basis of a corresponding notice about the exchange of data with Google, we receive the general and publicly accessible information stored in your profile when you use the Google- button from Google, depending on your personally made data protection settings at Google.

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to Google's servers. The content of the plugin is transmitted by Google directly to your browser and integrated into the page. Through this integration, Google receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Google profile or are not currently logged in to Google. This information (including your IP address) is transmitted by your browser directly to a Google server in the USA and stored there. These data processing operations are carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of Google's legitimate interest in displaying personalized advertising based on browsing behavior.

You can prevent Google from processing the above information by using our registration mask. The consent given can be revoked at any time by sending a message to the responsible person named at the beginning of this statement.

If you do not want Google to directly assign the data collected via our website to your Google profile, you must log out of Google before visiting our website. You can also completely prevent the loading of Google plugins with add-ons for your browser, e.g. with "Adblock Plus" (https://adblockplus.org/de/).

If you do not want Google to directly assign the data collected via our website to your Google profile, you must log out of Google before visiting our website. You can also completely prevent the loading of Google plugins with add-ons for your browser, e.g. with "Adblock Plus" (https://adblockplus.org/de/).

15. Completion of the user account

On our website, we offer certain services and content in a closed user account. In order to be able to use these services and contents, it is necessary to complete the user account after registration by providing personal data. The data is stored in input masks or a product configurator and transmitted to us and stored. All personal data collected are collected and stored exclusively for internal use and for our own purposes. Excluded from this are all payment information that is transmitted to external payment providers for security reasons. These third parties are legally authorized to store such sensitive personal data and are strictly controlled by the authorities. If a contract is concluded, the transfer may still be made to one or more processors who will also use the personal data exclusively for an internal use attributable to the controller - i.e. us.

The completion of the user account is necessary for the provision of certain content and services on our website (e.g. creation of individualized products) as well as for the fulfillment of a contract with the user (production of individualized products) or for the implementation of pre-contractual measures. The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. If the collection of data serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 (1) lit. b DSGVO.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case for the data specified in your user profile (including all print-specific data) when the registration on our website is cancelled or modified, provided that there are no legal retention obligations to the contrary. If individualized designs or products were sold via a user account, your account will be blocked for a period of 3 years following a request for deletion. This enables us to meet any legal claims by third parties concerning trademark and/or copyright.

As a user, you have the option at any time to cancel your registration and to delete or modify the personal data stored in your user account. We will provide you with information about which personal data is stored at any time upon request. Furthermore, we will correct or delete your personal data upon request, provided that this does not conflict with any retention obligations. Please contact us by e-mail at datenschutz@shirtigo.de.

16. Purchase transaction via the website

If you wish to make use of the services offered by us against payment, it is necessary for the conclusion of the contract that you provide personal data or transmit them to us via an interface. The data you provide is necessary for the execution of the contract and the provision of the contractually owed services or for the implementation of pre-contractual measures. Without this data, we cannot conclude the contract with you.

By sending the data, you agree to the processing of personal data as described in this privacy policy. In the course of the purchase process, the mandatory data required for the processing of the contract will be marked accordingly in the input mask at the conclusion of the order or specified by the connections offered by us. All other information is voluntary.

Through the manual purchase on our website, your IP address assigned by the Internet service provider (ISP), the date as well as the time of the purchase process will also be stored. The storage of this data takes place against the background that only in this way the abuse of our services can be prevented. In this respect, the storage of this data is necessary for our security. As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. If the processing of personal data is for the performance of a contract, the processing is further based on Art. 6 I lit. b DSGVO. We may also process the contact data you provide (e-mail and name) to inform you about important innovations or changes to our products or about other interesting products from our portfolio. The legal basis for sending the newsletter as a result of the sale of goods or services is then Section 7 (3) UWG.

In the event that a contract is concluded, all data such as address, payment and order data from the contractual relationship will be stored and blocked until the expiry of the retention period under tax law (7 years). In addition, warranty periods must be observed. The data name, address, purchased goods and purchase date are stored beyond that until the expiry of product liability (10 years). We also pass on your personal data to third parties if this is required for the processing of the contract, including the order, delivery and payment process (e.g. the shipping company commissioned with the delivery and the credit institution commissioned with the payment processing). Furthermore, we transmit this data to third parties such as our tax advisor for tax and accounting purposes. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. Third parties process the personal data on our behalf and according to our instructions. The scope of the transmitted data is limited to the minimum necessary to ensure the fulfillment of the contract.

If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, deletion or modification of the data is only possible insofar as this does not conflict with contractual or legal obligations. However, we will provide you with information about which personal data is stored at any time upon request. To do so, please contact us by e-mail at datenschutz@shirtigo.de.

PayPal

Zweck der Verarbeitung: Abwicklung von Zahlungen über den Zahlungsdienst PayPal; Direkte Bestellung über Ihren PayPal-Account (PayPalExpress-Checkout).

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. b DSGVO.

Datenkategorien: Stammdaten, Kontaktdaten, ggf. Vertragsdaten, Zahlungsdaten, Nutzungsdaten, Verbindungsdaten

Empfänger der Daten: PayPal (Europe) S.à.r.l. et Cie,S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg („PayPal“)

Beabsichtigte Drittlandsübermittlung: Keine

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

Sofort Überweisung

Zweck der Verarbeitung: Abwicklung von Zahlungen über den Zahlungsdienst „Sofortüberweisung“.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. b DSGVO

Datenkategorien: Stammdaten, Kontaktdaten, ggf. Vertragsdaten, Zahlungsdaten, Nutzungsdaten,Verbindungsdaten

Empfänger der Daten: Sofort GmbH, Theresienhöhe 12,80339 München

Beabsichtigte Drittlandsübermittlung: Keine

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

Stripe

Zweck der Verarbeitung: Abwicklung von Zahlungen über den Zahlungsdienst Stripe

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. b DSGVO.

Datenkategorien: Stammdaten, Kontaktdaten, ggf.Vertragsdaten, Zahlungsdaten, Nutzungsdaten, Verbindungsdaten

Empfänger der Daten: StripePayments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin,Irland

Beabsichtigte Drittlandsübermittlung: Keine

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

17. Newsletter dispatch

We use Mailchimp from The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308 USA (Mailchimp) to send our newsletter. This allows us to contact subscribers directly. In addition, we analyze your usage behavior in order to optimize our offer.

For this purpose, we share the following personal data with Mailchimp: email address.

Our email sends include a link that allows you to update your personal data.

Mailchimp is the recipient of your personal data and acts as a processor for us as far as the sending of our newsletter is concerned. The processing of the data provided under this section is not required by law or contract. Without your consent and the transmission of your personal data, we cannot send out a newsletter to you.

In addition, Mailchimp collects the following personal data using cookies and other tracking methods: Information about your terminal device (IP address, device information, operating system, browser ID, information about the application you use to read your emails and other information about hardware and internet connection. In addition, usage data is collected such as date and time, when you opened the email / campaign and browser activity (e.g. which emails / web pages were opened). Mailchimp needs this data to ensure the security and reliability of the systems, compliance with the terms of use and the prevention of abuse. This corresponds to the legitimate interest of Mailchimp (according to Art. 6 para. 1 lit. f DSGVO) and serves the execution of the contract (according to Art. 6 para. 1 lit. b DSGVO). Furthermore, Mailchimp evaluates performance data, such as the delivery statistics of emails and other communication data. This information is used to create usage and performance statistics of the services.

providers. We have no control over this process.

For more information on objection and removal options vis-à-vis Mailchimp, please visit: https://mailchimp.com/legal/privacy/#3._Privacy_for_Contacts.

The legal basis for these processing operations is your consent pursuant to Art. 6 (1) lit. a DSGVO. You can revoke your consent to the processing of your personal data at any time. A corresponding link can be found in all mailings. In addition, the revocation can be made via the specified contact options. By declaring the revocation, the lawfulness of the processing carried out so far is not affected.

Your data will be processed as long as a corresponding consent is available. Apart from that, they will be deleted after the termination of the contract between us and Mailchimp, unless legal requirements make further storage necessary.

Mailchimp has implemented compliance measures for international data transfers. These apply to all global activities where Stripe processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, please visit: https://mailchimp.com/legal/data-processing-addendum.

Zweck der Verarbeitung: Abonnement unseres Newsletters zu unseren Neuigkeiten und Angeboten; Nachweis Ihrer Einwilligung; Gewährleistung der Sicherheit unserer informationstechnischen Systeme; Messung des auf unseren Newsletter bezogenen Klick- und Öffnungsverhaltens; persönlichen Gestaltung unseres Newsletters.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. a DSGVO.

Datenkategorien: Stammdaten (optional), Kontaktdaten, Nutzungsdaten, Verbindungsdaten

Empfänger der Daten: TheRocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, USA

Beabsichtigte Drittlandübermittlung: USA (gemäß Standarddatenschutzklauseln der EU-Kommission, Art. 46 Abs. 2 Buchst. c DSGVO)

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

18. Deployment and use of tracking tools

On this website, information about the surfing behavior of website visitors is collected and stored in anonymous form for marketing purposes. This data is stored on your computer using cookie text files and allows us to analyze the surfing behavior of site visitors in anonymous form. For example, which pages a visitor has visited on the website and which Internet browser he used for this purpose. Under no circumstances can the collected data be used to personally identify the visitor to this website. The collected data is only used to improve the website. Therefore, all IP addresses are shortened so that IP addresses are only processed in anonymous form. No other use or disclosure to third parties will take place.

This website also uses retargeting technologies, such as Facebook Pixel. These technologies make it possible to target those users on our partners' websites with online advertising who have already visited our internet offers. In retargeting, the ads are displayed on the basis of an analysis of previous user behavior. Of course, no personal or only pseudonymized data is stored in this process.

18.1 Use and application of social plugins

On these Internet pages, components of the Internet video portal YouTube are integrated. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time you call up one of the individual pages of this website on which a YouTube component (YouTube video) has been integrated, the Internet browser on your information technology system is automatically prompted by the respective YouTube component to download a representation of the corresponding component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. Within the scope of this technical procedure, YouTube and Google receive knowledge of which specific sub-page of our website is visited by you, provided that you, as the person concerned, are logged in to YouTube at the same time. This information is collected by YouTube and Google and assigned to the respective YouTube account. This takes place regardless of whether you click on a YouTube video or not. If such a transmission of this information is not wanted, this can prevent the transmission by logging out of their YouTube account before calling up our website.

The privacy policy published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

Zweck der Verarbeitung: Einbindung von Videos über dasVideo-Plugin von YouTube zur persönlichen Gestaltung unserer Website.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. f DSGVO

Datenkategorien: Verbindungsdaten

Empfänger der Daten: Google Ireland Ltd., GordonHouse, Barrow Street Dublin 4 Irland

Beabsichtigte Drittlandübermittlung: Im Einzelfall USA (gemäß Standarddatenschutzklauseln der EU-Kommission, Art. 46 Abs. 2 Buchst. c DSGVO)

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

18.2 Use and application of the Google Tag Manager

This website uses the Tag Manager of Google Inc. ("Google"), 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

This service allows website tags to be implemented and managed on websites via an interface. No cookies are used in the process and no personal data is collected. The Tool Tag Manager itself (which implements the tags) is a cookie-free domain. The Google Tool Manager merely triggers other tags, which in turn can collect data in tools. However, Google Tag Manager does not access this data, only the tracking tools listed in the privacy policy. If a deactivation has been made at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager.

Further information can be found here:

18.3 Use and application of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google") 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google Analytics is a web analytics service. Web analysis is the collection, compilation and analysis of data about the behavior of visitors to websites. A web analysis service collects, among other things, data on which website a data subject came to a website from (so-called referrers), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is predominantly used for the optimization of a website and for the cost-benefit analysis of internet advertising. The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile online reports for us showing the activities on our website, and to provide other services related to the use of our website. For example, we continue to use Google Analytics to analyze data from Google AdWords for statistical purposes. If you do not wish this to happen, you can deactivate this via the Ads Preferences Manager (http://www.google.com/settings/ads/onweb/?hl=de).

Google Analytics sets a cookie on the information technology system of you as the data subject. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyze the use of our website. Each time you call up one of the individual pages of this website on which a Google Analytics component has been integrated, the Internet browser on the information technology system is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. By means of the cookie, personal information, for example the access time, the location from which an access originated and the frequency of visits to our website are stored.

We use the addition "_gat._anonymizeIp" for web analysis via Google Analytics. By means of this additive, the IP address of the Internet connection of you as the data subject is shortened and anonymized by Google if access to our Internet pages is from a member state of the European Union or from another state party to the Agreement on the European Economic Area. This guarantees the masking of your IP address so that all data is collected anonymously. The anonymized IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

The processing of users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. In these purposes also lies our legitimate interest in processing the data in accordance with Art. 6 para. 1 lit. f DSGVO. By anonymizing the IP address, the interest of users in their personal data protection is sufficiently taken into account.

Each time you visit our website, this personal data, including the IP address, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

The data is deleted as soon as it is no longer required for our recording purposes. In our case, this is the case after 24 months.

In order to oblige Google to process the transmitted personal data in accordance with our instructions and to comply with the applicable data protection regulations, we have concluded an order processing agreement with Google. In addition, Google has submitted to the Privacy Shield agreement concluded between the European Union and the USA and has certified itself. In this way, Google undertakes to comply with the standards and regulations of European data protection law. You can find more information in the entry linked below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

You can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of you - the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. This browser add-on tells Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as an objection. If the information technology system is deleted, formatted or reinstalled at a later time, the browser add-on must be reinstalled in order to deactivate Google Analytics. Provided that the browser add-on is uninstalled or deactivated, there is the option of reinstalling or reactivating the browser add-on.

Alternatively, we offer users on our website the option of opting out of the analysis process. To do this, you must follow this link. An opt-out cookie with a validity of 180 days will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete all cookies in this browser, you must set the opt-out cookie again.

More information about Google Analytics and the applicable Google privacy policy can be found at:

Zweck der Verarbeitung: Statistische Auswertung; Optimierung und bedarfsgerechte Gestaltung unserer Website auf Basis Ihres Klick- und Nutzungsverhaltens.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. a DSGVO

Datenkategorien: Nutzungsdaten, Verbindungsdaten (aktive IP-Anonymisierung; nur in Ausnahmefällen wird die volle IP-Adresse an einen Server von Google übertragen und dort gekürzt)

Empfänger der Daten: Google Ireland Ltd., GordonHouse, Barrow Street Dublin 4 Irland

Beabsichtigte Drittlandübermittlung: Im Einzelfall USA(gemäß Standarddatenschutzklauseln der EU-Kommission, Art. 46 Abs. 2 Buchst. c DSGVO)

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Ja (Einzelheiten hierzu finden Sie in der Übersicht am Ende dieser Erklärung)

18.4 Use and application of Google AdWords conversion tracking

We have integrated Google AdWords on this website. The operating company of the Google AdWords services is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google AdWords is an Internet advertising service that allows advertisers to place ads both in Google's search engine results and in the Google advertising network. Google AdWords enables an advertiser to specify certain keywords in advance, by means of which an ad is displayed in Google's search engine results exclusively when the user retrieves a keyword-relevant search result using the search engine. In the Google advertising network, the ads are distributed on topic-relevant websites by means of an automatic algorithm and in compliance with the previously defined keywords. The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine.

If you, as a data subject, access our website via a Google ad, a so-called conversion cookie will be stored on your information technology system by Google. What cookies are has already been explained above. The conversion cookie loses its validity after thirty days and is not used to identify you. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, for example the shopping cart from an online store system, were called up on our website. Through the conversion cookie, both we and Google can track whether a data subject who arrived at our website via an AdWords ad generated a sale, i.e. completed or cancelled a purchase of goods. The data and information collected through the use of the conversion cookie are used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other advertisers of Google AdWords receive information from Google by means of which the data subject could be identified.

We use the conversion tracking of Google AdWords for marketing and optimization purposes, in particular to place relevant and interesting ads for you on Google and the Google partner network and thus improve our offer. This is also our legitimate interest in processing the above data in accordance with Art. 6 (1) lit. f DSGVO.

Mittels des Conversion-Cookies werden personenbezogene Informationen, beispielsweise Ihre besuchten Internetseiten, gespeichert. Bei jedem Besuch unserer Internetseiten werden demnach personenbezogene Daten, einschließlich der IP-Adresse an Google in den Vereinigten Staaten von Amerika übertragen. Diese personenbezogenen Daten werden durch Google in den Vereinigten Staaten von Amerika gespeichert.

You can prevent the setting of cookies by our website and by the domain " googleadservices.com", as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of you the data subject. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programs. Furthermore, it is possible to object to interest-based advertising by Google. To do this, you must call up the link www.google.de/settings/ads and make the desired settings there.

Alternatively, we offer users on our website the option of opting out of the analysis process. To do this, you must follow this link . An opt-out cookie with a validity of 180 days will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete all cookies in this browser, you must set the opt-out cookie again.

Zweck der Verarbeitung: Messung des Erfolgs unserer Google Ads Werbekampagnen.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. a DSGVO

Datenkategorien: Nutzungsdaten, Verbindungsdaten

Empfänger der Daten: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Irland

Beabsichtigte Drittlandübermittlung: Im Einzelfall USA(gemäß Standarddatenschutzklauseln der EU-Kommission, Art. 46 Abs. 2 Buchst. c DSGVO)

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Ja (Einzelheiten hierzu finden Sie in der Übersicht am Ende dieser Erklärung)

18.5 Use and application of Google Remarketing

We have integrated Google Remarketing services on this website. The operating company of the Google Remarketing services is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google Remarketing is a function of Google AdWords that enables a company to display advertisements to Internet users who have previously visited the company's website. The integration of Google Remarketing thus allows a company to create user-related advertising and consequently to display interest-relevant advertisements to the Internet user.

The purpose of Google Remarketing is to display interest-relevant advertising. Google Remarketing enables us to display advertisements via the Google advertising network or to have them displayed on other Internet pages that are tailored to the individual needs and interests of Internet users. To do this, Google AdWords must first form target groups based on the visitors recorded with the cookies, to whom an advertisement can then be played out in the Google advertising network. Furthermore, with the help of these target groups, "similar target groups" can be formed in Google AdWords, which have similar characteristics to the visitors.

Google Remarketing sets a cookie on the information technology system of you the data subject. What cookies are has already been explained above. By setting the cookie, Google is enabled to recognize the visitor to our website when the visitor subsequently calls up websites that are also members of the Google advertising network. Each time a website is accessed on which the Google Remarketing service has been integrated, the internet browser automatically identifies itself to Google. Within the scope of this technical procedure, Google obtains knowledge of personal data, such as the IP address or the user's surfing behavior, which Google uses, among other things, to display interest-relevant advertising.

We use Google Remarketing for marketing and optimization purposes, in particular to display relevant and interesting ads for you in the Google partner network and thus to improve our offer and make it more interesting for you. This is also our legitimate interest in processing the above data in accordance with Art. 6 (1) lit. f DSGVO.

Every time you visit our website, personal data, including your IP address, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google has submitted to and certified the Privacy Shield Agreement concluded between the European Union and the USA. Google thereby undertakes to comply with the standards and regulations of European data protection law. You can find more information in the entry linked https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

You can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system. In addition, a cookie already set by Google can be deleted at any time via the Internet browser or other software programs. If you do not wish to use Google's remarketing function, you can also deactivate it in principle by making the appropriate settings at http://www.google.com/settings/ads. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

Alternatively, we offer users the option of opting out of the analytics process on our website. To do so, you must follow this link. An opt-out cookie with a validity of 180 days will be set, which will prevent the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete all cookies in this browser, you must set the opt-out cookie again.

Zweck der Verarbeitung: Ausspielung personalisierter Werbeeinblendungen im Google Werbenetzwerk auf Basis Ihres pseudonymisiert aufgezeichneten Surfverhaltens. Rechtsgrundlage: Art. 6 Abs. 1 Buchst. a DSGVO

Datenkategorien: Nutzungsdaten, Verbindungsdaten

Empfänger der Daten: Google Ireland Ltd., GordonHouse, Barrow Street Dublin 4 Irland

Beabsichtigte Drittlandübermittlung: Im Einzelfall USA(gemäß Standarddatenschutzklauseln der EU-Kommission, Art. 46 Abs. 2 Buchst. cDSGVO)

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Ja (Einzelheiten hierzu finden Sie in der Übersicht am Ende dieser Erklärung)

18.6 Deployment and use of Microsoft Clarity

This website uses the web analytics service Microsoft Clarity from Microsoft Corporation ("Microsoft"), One Microsoft Way, Redmond, WA 98052 USA.

Microsoft Clarity analyzes the user behavior of our website. The legal basis for this is Art. 6 para. 1 lit. f) DSGVO. We have a legitimate interest in the analysis, optimization and economic operation of our website.

In the course of the analysis, usage and user-related information such as IP address, location, time and website visits are transmitted to a Microsoft server in the USA and stored. However, we use the service with an anonymization function so that Microsoft already shortens the IP address within the EU or EEA.

Zweck der Verarbeitung: Statistische Auswertung; Optimierung und bedarfsgerechte Gestaltung unserer Website.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. f DSGVO

Datenkategorien: Nutzungsdaten, Verbindungsdaten

Empfänger der Daten: T-Systems International GmbH, Hahnstr. 43, 60528 Frankfurt (Data Trustee)

Beabsichtigte Drittlandübermittlung: Nein

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Ja (Einzelheiten hierzu finden Sie in der Übersicht am Ende dieser Erklärung)

18.7 Deployment and use of Facebook Tracking Pixel

We have integrated components of the company Facebook on this website. Facebook is a social network. The operating company of Facebook is Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. If you live outside the USA or Canada, the controller of personal data is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

We use a "visitor action pixel" within our website, called the "Facebook pixel". Thereby, so-called tracking pixels are integrated on our pages. With its help, we can track the actions of users after they have seen or clicked on a Facebook ad. This allows us to record the effectiveness of the Facebook ads for statistical and market research purposes. In addition, the use of the pixel makes it possible to create anonymous target groups ("Custom Audience") on Facebook, to which interest-based ads can be played as part of remarketing activities on Facebook. The pixel is used without "Advanced Matching". No CRM data is used to create Custom Audiences.

The collected data is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, this data is stored and processed by Facebook. Facebook can link this data to your Facebook account and also use it for its own advertising purposes. They can enable Facebook as well as its partners to place advertisements on and off Facebook.

We use Facebook Pixel for marketing and optimization purposes, in particular to place relevant and interesting ads for you on Facebook and thus to improve our offer and make it more interesting for you. This is also our legitimate interest in processing the above data according to Art. 6 (1) lit. f DSGVO.

Each time you visit our website, personal data, including the IP address, is transmitted to Facebook in the United States of America. This personal data is stored by Facebook in the United States of America. In addition, Facebook has submitted to the Privacy Shield agreement concluded between the European Union and the USA and has certified itself. In this way, Facebook undertakes to comply with the standards and regulations of European data protection law. You can find more information in the entry linked https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

The data policy published by Facebook, which can be accessed at https://de-de.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. It also explains which setting options Facebook offers to protect the privacy of data subjects. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used to suppress data transmission to Facebook. The "Custom Audiences" remarketing function can be deactivated at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. This requires logging in to Facebook. Usage-based advertising from Facebook can also be deactivated on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

Alternatively, we offer users the option of opting out of the analysis process on our website. To do this, you must follow this link . An opt-out cookie will be set with a validity of 180 days, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete all cookies in this browser, you must set the opt-out cookie again.

Further information on Facebook Pixel can be found at the following link: https://www.facebook.com/business/help/651294705016616.

Zweck der Verarbeitung: Ausspielung personalisierter Werbeeinblendungen im Facebook Werbenetzwerk (Facebook Ads) auf Basis Ihrer Daten, die wir an Facebook über den Modus „erweiterter Abgleich“ übermitteln (unabhängig davon, ob Sie einen Facebook-Account besitzen) und auf Basis Ihres pseudonymisiert aufgezeichneten Surfverhaltens durch die Facebook Pixel-Technologie.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. a DSGVO

Datenkategorien: Stammdaten, Kontaktdaten,Nutzungsdaten und Verbindungsdaten.

Empfänger der Daten: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland

Beabsichtigte Drittlandübermittlung: Im Einzelfall USA (gemäß Standarddatenschutzklauseln der EU-Kommission, Art. 46 Abs. 2 Buchst. c DSGVO) Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Ja (Einzelheiten hierzu finden Sie in der Übersicht am Ende dieser Erklärung)

19. data protection during applications and in application processes

We collect and process the personal data of applicants for the purpose of handling the application process. The processing may also take place electronically. This is particularly the case if an applicant submits relevant application documents to us electronically, for example by e-mail. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be deleted nine months after notification of the rejection decision, provided that no other legitimate interests prevent deletion. Other legitimate interests in this sense include, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

Diese Website nutzt Sendgrid für den Versand von automatisierten System-Mails. Anbieter ist Sendgrid, 1801 California Street Suite 500, Denver, CO 80202

Sendgrid ist ein Dienst, mit dem E-Mails verschickt und analysiert werden können. Wenn Sie Daten zum Zwecke der Accounterstellung eingeben, werden ihr Name und ihre Mail-Adresse auf den Servern von SendGrid gespeichert.

Datenanalyse durch Sendgrid
Zum Zwecke der Analyse enthalten die mit Sendgrid versandten E-Mails ein sog. “Tracking-Pixel”, dass sich beim Öffnen der E-Mail mit den Servern von Sendgrid verbindet. Auf diese Weise kann festgestellt werden, ob eine Mail-Nachricht geöffnet wurde.

Des Weiteren können wir mit Hilfe von Sendgrid ermitteln, ob und welche Links in der Mailnachricht angeklickt werden. Bei allen Links in der E-Mail handelt es sich um sogenannte Tracking-Links, mit denen Ihre Klicks gezählt werden können.

Die Datenverarbeitung erfolgt auf Grundlage Ihrer Einwilligung (Art. 6 Abs. 1 lit. a DSGVO). Sie können diese Einwilligung jederzeit widerrufen, indem Sie uns kontaktieren. Die Rechtmäßigkeit der bereits erfolgten Datenverarbeitungsvorgänge bleibt vom Widerruf unberührt.

Die von Ihnen zum Zwecke des Mailversands bei uns hinterlegten Daten werden von uns bis zu Ihrer Account-Löschung gespeichert und sowohl von unseren Servern als auch von den Servern von Sendgrid gelöscht.

SendGrid verfügt über eine Zertifizierung nach dem “EU-US-Privacy-Shield”. Der “Privacy-Shield” ist ein Übereinkommen zwischen der Europäischen Union (EU) und den USA, das die Einhaltung europäischer Datenschutzstandards in den USA gewährleisten soll.

Näheres entnehmen Sie den Datenschutzbestimmungen von SendGrid unter: https://sendgrid.com/resource/general-data-protection-regulation/

19.2 Sleekplan

Wir nutzen für die Verfolgung, Weiterentwicklung und Mitgestaltung unserer Produkte das Feedback-Tool „Sleekplan“, angeboten von der Sleekplan GmbH, Georgenstrasse 66, 80799 München, welche auch als Auftragsverarbeiter fungiert. Gewisse Anwender haben in diesem Tool die Möglichkeit eigenes Feedback oder Ideen anonymisiert zu teilen oder zu kommentieren. Zudem können Feedbackbeiträge abonniert werden, um automatisch über Fortschritte informiert zu werden. Für die automatisierte Benachrichtigungen genutzt werden folgende Daten: Name, E-Mail-Adresse.

Solche auf freiwilliger Basis von einer betroffenen Person an den für die Verarbeitung Verantwortlichen übermittelten personenbezogenen Daten werden für Zwecke der Bearbeitung oder der Kontaktaufnahme mit dem Nutzer gespeichert. Der Nutzer hat jederzeit die Möglichkeit das erstellte Konto über die Profileinstellungen zu löschen.

Weitere Informationen übernehmen Sie bitte den Datenschutzhinweisen von Sleekplan:
https://sleekplan.com/privacy/

19. data protection during applications and in application processes

Wir erheben und verarbeiten die personenbezogenen Daten von Bewerbern zum Zwecke der Abwicklung des Bewerbungsverfahrens. Die Verarbeitung kann auch auf elektronischem Wege erfolgen. Dies ist insbesondere dann der Fall, wenn ein Bewerber entsprechende Bewerbungsunterlagen auf dem elektronischen Wege, beispielsweise per E-Mail an uns übermittelt. Schließe wir einen Anstellungsvertrag mit einem Bewerber, werden die übermittelten Daten zum Zwecke der Abwicklung des Beschäftigungsverhältnisses unter Beachtung der gesetzlichen Vorschriften gespeichert. Wird kein Anstellungsvertrag mit dem Bewerber geschlossen, so werden die Bewerbungsunterlagen neun Monate nach Bekanntgabe der Absageentscheidung gelöscht, sofern einer Löschung keine sonstigen berechtigten Interessen entgegenstehen. Sonstiges berechtigtes Interesse in diesem Sinne ist beispielsweise eine Beweispflicht in einem Verfahren nach dem Allgemeinen Gleichbehandlungsgesetz (AGG).

Zweck der Verarbeitung: Bearbeitung Ihrer Bewerbung und Durchführung des Bewerbungsverfahrens; Berücksichtigung Ihrer Bewerbung bei zukünftigen Bewerbungsverfahren sofern hierfür eine ausdrückliche Einwilligung vorliegt.

Rechtsgrundlage: Art. 6 Abs. I lit. b DSGVO, Art. 88 Abs. 1 DSGVO i.V.m. ; für die Speicherung für zukünftige Bewerbungsverfahren Art. 6 Abs. 1 Buchst. a DSGVO in Verbindung mit Art. 7DSGVO

Datenkategorien: Stammdaten, Kontaktdaten, Inhaltsdaten, Vertragsdaten, ggf. Verbindungsdaten, ggf. Nutzungsdaten und ggf. besondere Kategorien personenbezogener Daten i.S. des Art. 9 Abs. 1 DSGVO (abhängig von der konkreten Ausschreibung; es werden ausschließlich die Daten zu Ihrer Bewerbung gespeichert, die Sie uns mitteilen und die wir im Kontext von Bewerbungen verarbeiten dürfen)

Empfänger der Daten: Keine

Zugriffsrechte auf die Bewerberdaten werden im Rahmen eines Berechtigungskonzepts beschränkt. Nur Personen, die über die Einstellung entscheiden, haben Zugriff auf die Bewerberdaten. Keinesfalls werden die Daten in einem allgemein zugänglichen Ordner abgelegt, oder per E-Mail an die bei der Einstellung zu beteiligenden Personen weitergeleitet.

Beabsichtigte Drittlandübermittlung: Keine

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

21. Externe Seiten der Shirtigo GmbH

YouTube Channel

Zweck der Verarbeitung: Wir haben auf der Plattform"YouTube" der Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Irland ("Google") einen Video-Kanal eingerichtet. Wenn Sie diese Seite aufrufen, verarbeitet Google personenbezogene Daten von Ihnen. Wir erhalten Statistiken über die Nutzung dieser Seite, die aus diesen Daten abgeleitet werden.

Rechtsgrundlagen: Art. 6 Abs. 1 Buchst. f DSGVO.

Datenkategorien: Stammdaten, Kontaktdaten, Inhaltsdaten, Nutzungsdaten, Verbindungsdaten

Empfänger der Daten: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Irland

Beabsichtigte Drittlandübermittlung: Im Einzelfall USA( gemäß Standarddatenschutzklauseln der EU-Kommission, Art. 46 Abs. 2 Buchst. c DSGVO)

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

Facebook

Zweck der Verarbeitung: Wir haben auf der Plattform „Facebook“ eine Seite zu unserem Unternehmen („Facebook Seite“) eingerichtet. Wenn Sie diese Seite aufrufen, verarbeitet Facebook personenbezogene Daten von Ihnen. Wir erhalten Statistiken über die Nutzung dieser Seite, die aus diesen Daten abgeleitet werden.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. f DSGVO.

Datenkategorien: Stammdaten, Kontaktdaten, Inhaltsdaten, Nutzungsdaten, Verbindungsdaten

Empfänger der Daten: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland („Facebook“) (als gemeinsam Verantwortlicher, Art. 26 DSGVO – das Wesentliche der Vereinbarung kann unter https://www.facebook.com/legal/terms/page_controller_addendum abgerufen werden)

Beabsichtigte Drittlandübermittlung: Im Einzelfall USA (gemäß Standarddatenschutzklauseln der EU-Kommission, Art. 46 Abs. 2 Buchst. c DSGVO)

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

Betroffenenrechte: Für die Umsetzung Ihrer Betroffenenrechte ist Facebook verantwortlich. Über Ihre Betroffenenrechte informiert Facebook Sie unter https://www.facebook.com/legal/terms/information_about_page_insights_data. Sie können Ihre Rechte auch uns gegenüber geltend machen, wir werden ihre Anfrage dann umgehend an Facebook weiterleiten.

LinkedIn

Zweck der Verarbeitung: Wir haben auf der Plattform „LinkedIn“ eine Seite zu unserem Unternehmen eingerichtet. Wenn Sie diese Seite aufrufen, verarbeitet LinkedIn personenbezogene Daten von Ihnen. Wir erhaltenStatistiken über die Nutzung dieser Seite, die aus diesen Daten abgeleitet werden.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. f DSGVO

Datenkategorien: Stammdaten, Kontaktdaten, Inhaltsdaten, Nutzungsdaten, Verbindungsdaten

Empfänger der Daten: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland (als gemeinsam Verantwortlicher, Art.26 DSGVO – das Wesentliche der Vereinbarung kann unter https://legal.linkedin.com/pages-joint-controller-addendum abgerufen werden)

Beabsichtigte Drittlandübermittlung: Im Einzelfall USA (gemäß Standarddatenschutzklauseln der EU-Kommission, Art. 46 Abs. 2 Buchst. c DSGVO)

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

Betroffenenrechte: Für die Umsetzung Ihrer Betroffenenrechte ist LinkedIn verantwortlich. Über Ihre Betroffenenrechte informiert LinkedIn Sie unter https://www.linkedin.com/legal/privacy-policy. Sie können Ihre Rechte auch uns gegenüber geltend machen, wir werden ihre Anfrage dann umgehend an LinkedIn weiterleiten.

Instagram

Zweck der Verarbeitung: Wir haben auf der Plattform "Instagram" der Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland („Facebook") eine Seite zu unserem Unternehmen („Instagram Seite“) eingerichtet. Wenn Sie diese Seite aufrufen, verarbeitet Facebook personenbezogene Daten von Ihnen.

Rechtsgrundlage: Art. 6 Abs. 1 Buchst. f DSGVO

Datenkategorien: Stammdaten, Kontaktdaten, Inhaltsdaten, Nutzungsdaten, Verbindungsdaten

Empfänger der Daten: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland („Facebook“) (als gemeinsamVerantwortlicher, Art. 26 DSGVO – das Wesentliche der Vereinbarung kann unter https://www.facebook.com/legal/terms/page_controller_addendum abgerufen werden)

Beabsichtigte Drittlandübermittlung: Im Einzelfall USA (gemäß Standarddatenschutzklauseln der EU-Kommission, Art. 46 Abs. 2 Buchst. c DSGVO)

Speicherung von Daten auf Ihrem Endgerät auf Grundlage einer Einwilligung: Nein

Betroffenenrechte: Für die Umsetzung Ihrer Betroffenenrechte ist Facebook verantwortlich. Über Ihre Betroffenenrechtei nformiert Facebook Sie unter https://www.facebook.com/legal/terms/information_about_page_insights_data. Sie können Ihre Rechte auch uns gegenüber geltend machen, wir werden ihre Anfrage dann umgehend an Facebook weiterleiten.

20. up-to-dateness and amendment of this data protection declaration

Diese Datenschutzerklärung ist aktuell gültig und hat den Stand 09.06.2022. Durch die Weiterentwicklung unserer Internetseiten und Angebote oder aufgrund geänderter gesetzlicher beziehungsweise behördlicherVorgaben kann es notwendig werden, diese Datenschutzerklärung anzupassen.

Sources used:

This data protection declaration was created in cooperation with our lawyers and with the help of the following sources: