We take the protection and security of your personal data as well as compliance with data protection regulations very seriously. In the following we inform you which data is collected in the context of the use of our website and how we use it.
The name and address of the person responsible for the content:
Geggerle Projekte GmbH
Name and address of person responsible for data protection
1. Scope and processing of personal data
We collect and use the personal data of our users only to the extent necessary to provide a functional website and our content and services. If this is not the case, personal data will only be used with the user’s consent. An exception applies in those cases where prior consent cannot be obtained for actual reasons and the processing of the data is permitted by statutory provisions.
2. Legal basis for processing
Insofar as we obtain the consent of the data subject for the processing of personal data, Article 6(1)(a) of the EU Basic Data Protection Regulation (DSGVO) serves as the legal basis.
Article 6(1)(b) DSGVO serves as the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 paragraph 1 lit. c DSGVO serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) of the DS Block Exemption Regulation serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 paragraph 1 lit. f DSGVO shall serve as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities.
3. Routine deletion and blocking of personal data
We process and store the personal data of the person concerned only for as long as is necessary to achieve the storage purpose. In addition, personal data may be stored if provided for by European or national legislation in Union regulations, laws or other provisions to which the data controller is subject. As soon as the storage purpose no longer applies or a storage period prescribed by the aforementioned regulations expires, the personal data are routinely blocked or deleted.
4. Security of your data
We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
5.1 Description and scope of data collection
Each time you visit our website, we or the site provider (www.1und1.de) collect data and information through an automated system. These are stored in the log files of the server.
The following data can be collected in this context:
- Information about the browser type and the version used
- The user’s operating system
- The Internet service provider of the user
- The IP address of the user
- Date and time of access
- Websites from which the user’s system accesses our website (referrer)
- Websites accessed by the user’s system through our website
5.2 Legal basis for data processing
The legal basis for the temporary storage of log files is Art. 6 para. 1 lit. f DSGVO.
5.3 Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
The data is stored in log files in order to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes also include our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f DSG-VO.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which they were collected. Data collected for the purpose of preparing the website for optimal viewing will be deleted once the session is finished.
5.4 Duration of storage
if the data are stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or encrypted so that it is no longer possible to assign the calling client.
5.5 Possibility of opposition and removal
The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after closing your browser program. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognise your browser on your next visit.
You can set your browser so that you are; informed about the setting of cookies, cookies are only permitted in individual cases, the acceptance of cookies for certain cases or cookies are deactivated. The automatic deletion of cookies is activated when closing the browser. If cookies are deactivated completely, the functionality of this website may be restricted.
7 Contact with E-Mail
Data that you send us by e-mail for the purpose of establishing contact will be processed for the purpose of communication and data exchange in accordance with Art. 6 Para. 1 lit. a), b), c), f) DSGVO. This data is stored as long as the processing is necessary for the purpose or until the expiry of any subsequent storage periods.
8. Use of Google Fonts
External fonts, Google Fonts, are used on these Internet pages. Google Fonts is a service of Google Inc. (“Google”). These web fonts are integrated via a server call, usually a Google server in the USA. This will tell the server which of our Internet pages you have visited. The IP address of the browser of the terminal device of the visitor to these Internet pages is also stored by Google. You can find more detailed information in Google’s data protection notices, which you can access at www.google.com/fonts#AboutPlace:about and www.google.com/policies/privacy/ .
9. Disclosure of data
We only pass on your personal data to third parties if
- you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO,
- the disclosure pursuant to Art. 6 para. 1 S. 1 lit. f DSGVO is necessary to safeguard our legitimate interests and there is no reason to assume that you have a predominant legitimate interest in not disclosing your data,
- there is a legal obligation to pass on data pursuant to Art. 6 para. 1 S 1 lit. c DSGVO.
Your data will not be passed on to third parties for advertising purposes.
Data collected and purpose of their processing
During the application process, we process data from you that we need as part of the application process. This can be contact data, all data related to the application (e.g. curriculum vitae, certificates, qualifications, answers to questions, etc.) as well as bank details (to reimburse travel expenses). The legal basis for this is set out in § 26 BDSG-neu.
Your data will of course be treated confidentially. We do not pass them on to third parties. If necessary, we use strictly instruction-bound service providers who support us, for example, in the areas of EDP or the archiving and destruction of documents and with whom separate contracts for order processing are concluded to ensure the safe and lawful handling of your data.
Deletion of data
If there are no legal storage obligations, the data will be deleted as soon as storage of this data is no longer necessary. If no recruitment takes place, this is usually the case no later than six months after completion of the application procedure. In individual cases, individual data may be stored for a longer period of time (e.g. travel expense accounting). The duration of storage then depends on the tax retention periods. Furthermore, in the event that your application is unfortunately not, but in principle very interesting, we will contact you by e-mail and inquire about inclusion in our applicant pool.
11. Your rights
As a user of our website, you have various rights under the DS-GVO, in particular arising from Art. 15 to 18, 21 DS-GVO:
1) Right to information:
You can request information pursuant to Art. 15 DS-GVO about your personal data processed by us. In your request for information you should specify your concern in order to make it easier for us to compile the necessary data. Please note that your right to information may be restricted under certain circumstances in accordance with the statutory provisions (in particular § 34 BDSG and Art. 10 BayDSG).
2) Right to rectification:
If the information concerning you is (no longer) correct, you can request a correction in accordance with Art. 16 DS-GVO. If your data is incomplete, you can request it to be completed.
3) Right to cancellation:
You can request the deletion of your personal data under the conditions of Art. 17 DS-GVO. Your right to deletion depends, among other things, on whether we still need the data concerning you to fulfil our statutory duties.
4) Right to limitation of processing:
Within the framework of the provisions of Art. 18 DS-GVO, you have the right to demand that the processing of data concerning you be restricted.
5) Right of opposition:
Pursuant to Art. 21 DS-GVO, you have the right, for reasons arising from your particular situation, to object at any time to the processing of the data concerning you. However, we cannot always comply with this, e.g. if legal regulations oblige us to process data within the scope of our official duties.
6) Right to appeal:
If you are of the opinion that we have not observed data protection regulations when processing your data, you can contact us with a complaint.
12. Actuality and change of this data security explanation
Due to the further development of our website or due to changed legal or official requirements, it may become necessary to change this data protection declaration.
If you are not satisfied with our handling of your data, we ask you to contact us. However, you also have the right to complain to the responsible supervisory authority.