Privacy Policy

Status August 2021

We, digitalSee GmbH, are delighted that you are visiting our website and social media channels and showing an interest in our company. The protection and security of your personal data is particularly important to us. Here you will find all the important information about data protection for our website, our company and our social media presence – so that you can feel well informed, safe and welcome at all times.

It is important to us that you know what personal data is collected when you make use of our offers and services and how we use it afterwards.

Data protection information for applicants

You can find our detailed data protection information for applicants here.

Data protection information for the company

The full data protection information for the company can be found here.

Relevant legal bases

In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not stated in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR, the legal basis for processing for the performance of our services and implementation of contractual measures as well as responding to inquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing to fulfil our legal obligations is Art. 6 para. 1 lit. c GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

Terminology used

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Processing” means any operation or set of operations which is performed on personal data, whether or not by automated means. The term is broad and covers practically any handling of data.

The “controller” is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Types of data processed

– Inventory data (e.g., names, addresses)
– Contact data (e.g., e-mail, telephone numbers)
– Application data
– Content data (e.g., text entries, photographs, videos)
– Usage data (e.g., websites visited, interest in content, access times)
– Meta/communication data (e.g., device information, IP addresses)

Purpose of the processing

– Provision of the online offer, its functions and content.
– Answering contact requests and communication with users.
– Processing of applications
– Security measures
– Reach measurement

Provision of our business-related services

We process the data of our customers, applicants, interested parties or other persons in accordance with Art. 6 para. 1 lit. b. GDPR if we offer them contractual services or act within the framework of an existing business relationship, e.g. with customers, or are ourselves recipients of services and benefits. Otherwise, we process the data of data subjects in accordance with Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interests, e.g. in the case of administrative tasks or public relations work.

The data processed, the type, scope and purpose and the necessity of their processing are determined by the underlying contractual relationship. This generally includes inventory and master data of the persons (e.g., name, address, etc.), as well as contact data (e.g., e-mail address, telephone, etc.), contract data (e.g., services used, content and information provided, names of contact persons) and, if we offer services or products subject to payment, payment data (e.g., bank details, payment history, etc.).

We delete data that is no longer required to fulfill our business purposes. This is determined according to the respective tasks and contractual relationships. In the case of business processing, we retain the data for as long as it may be relevant for business transactions and with regard to any warranty or liability obligations. The necessity of retaining the data is reviewed every three years; otherwise the statutory retention obligations apply.

Regular review

We ask you to inform yourself regularly about the content of our privacy policy. We will adapt the privacy policy as soon as changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.

Cooperation with processors and third parties

If we disclose data to other persons and companies (processors or third parties) as part of our processing, transfer it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if the transfer of data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR), you have given your consent, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

If we commission third parties with the processing of data on the basis of a so-called “order processing contract”, this is done on the basis of Art. 28 GDPR.

Transfer to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only take place if it is done to fulfill our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or have the data processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. This means, for example, that the processing takes place on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).

Hosting

The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this online offering.

We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in the efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of order processing contract). Art. 28 GDPR (conclusion of order processing contract).

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of order processing contract). Art. 28 GDPR (conclusion of order processing contract).

We, or our hosting provider, collect on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR. GDPR, we collect data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.

Log file information is stored for security reasons (e.g. to investigate misuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is required for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

Contact form

The website of the digitalsee GmbH contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a visitor to our website contacts us by email or via the contact form, the personal data transmitted by the data subject is automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller is stored for the purposes of processing or contacting the data subject. This personal data is not passed on to third parties.

We process and store your personal data only for the period required to process your contact or if we are required by law or regulation to store it for a longer period. We delete the requests if they are no longer required. We review the necessity every two years; the statutory archiving obligations also apply.

Application data

digitalSee will store and process the personal data provided by you and the documents uploaded as part of the application process on the basis of the statutory provisions in order to review and process your application.

Cookies

We use cookies in some areas to make our website more user-friendly for you and to tailor it optimally to your needs. A cookie is a small file that is stored locally on your computer as soon as you visit a website. If you visit the website again with the same end device, the cookie indicates, for example, that it is a repeat visit. Cookies also enable us to analyze the use of our website. The cookie does not contain any personal data and cannot be used to identify you on third-party websites, including the websites of analytics providers.

You can declare your consent to or rejection of cookies via the settings of your web browser. You can configure your browser so that the acceptance of cookies is refused in principle or you are informed in advance when a cookie is stored. In this case, however, the functionality of the website may be impaired. Your browser also offers a function to delete cookies (e.g. via Delete browser data). Further information on this can be found in the operating instructions or, as a rule, in the settings of your Internet browser.

Use of web fonts

We use script libraries and font libraries such as Google Webfonts(https://www.google.com/webfonts/) and Font Awesome(https://fontawesome.com/) on this website to display our content correctly and graphically appealing across all browsers. Google web fonts are transferred to your browser’s cache to avoid multiple loading. If the browser does not support Google web fonts or prevents access, content is displayed in a standard font.

Calling up script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible – although it is currently unclear whether and for what purposes – that operators of such libraries collect data. The use of Google Web Fonts is in the interest of an individual, uniform and appealing presentation of our online offer. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font will be used by your computer. You can find more information about Google Web Fonts at: https://developers.google.com/fonts/faq and Google’s privacy policy: https://www.google.com/policies/privacy/

Integration of social network plug-ins

Our website may use buttons for social networks in some cases

– facebook, Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA
– Google+, Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
– Twitter, Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA
– Xing, XING AG, Gänsemarkt 43, 20354 Hamburg, Germany
– YouTube, LLC, 901 Cherry Ave, San Bruno CA 94066, USA
– LinkedIn, Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

The buttons are marked with the logo of the respective social network. However, these are not the usual social plugins, but buttons with links. The buttons must be activated (clicked) separately by you. As long as these buttons are not clicked, no data is transmitted to the social networks. Only when you click on the buttons and thereby declare your consent to communication with the servers of the social network will the buttons become active and the connection be established.

Once clicked, the button corresponds to a so-called share plugin. The social network is provided with information about the page you have visited, which you can share with your contacts in your social network. If you want to “share” the information, you must be logged in. If you are not logged in, you will land on the login page of the social network you clicked on and you will no longer be on the pages of Jägerschaft Gifhorn e.V. If you are logged in, the information that you would like to recommend the respective article will be transmitted.

By activating the button, the social network then receives, among other things, the information that and when you have accessed the corresponding page of our website, as well as, for example, your IP address, information on the browser used and the language settings. If you click on the button, your click will be transmitted to the social network and used in accordance with its data usage guidelines.

When the button is activated, we have no influence on the data collected and data processing operations and are not responsible for this data processing and in this respect are not the controller within the meaning of the GDPR. We are also not aware of the full extent of the data collection, its legal basis, the purposes and the storage periods. Therefore, the information provided here is not necessarily complete.

The data is transmitted regardless of whether you actually have an account with the provider or are logged in there. If you are logged in with the provider, your data will be assigned directly to your account. The providers may also use cookies on your computer to track you.

To our knowledge, the provider stores this data in user profiles, which it uses for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right of objection, please contact the respective provider.

The purpose and scope of the data collection and the further processing and use of the data by the respective social network as well as your rights in this regard and setting options to protect your privacy can be found in the information:

facebook: http://www.facebook.com/about/privacy
Google: http://www.google.com/intl/de/policies/privacy
Twitter: http://twitter.com/privacy
Xing: https://www.xing.com/privacy
Youtube: http://www.youtube.com/t/privacy_at_YouTube
LinkedIn: https://de.linkedin.com/legal/privacy-policy

If you do not want the social network to receive data about you, you must not click on the button.

Privacy policy for our social media presence on LinkedIn

When you visit our LinkedIn page, operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, which is part of LinkedIn Corporation. 1000 W. Maude Ave, Sunnyvale, CA 94085, USA, LinkedIn processes the following data about you:

The provider sets cookies in your browser. If you are logged in to LinkedIn, your actions will be merged with other personal data already stored there and assigned to your profile. Information is collected about the fact that you have visited this page and when, as well as your approximate location for language settings, browser and device.

The data may also be processed on servers in the USA for this purpose. According to its own information, the data is processed in third countries on the basis of an order processing contract using the EU standard contractual clauses pursuant to Art. 46 para. 2 lit. c), d) GDPR. The provider has undertaken to comply with EU data protection standards.

Further information can be found in LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy

Standard deadlines for the deletion of data

The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

According to legal requirements in Germany, the retention period is 10 years in accordance with §§ 147 para. 1 AO, 257 para. 1 no. 1 and 4, para. 4 HGB (books, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and 6 years in accordance with § 257 para. 1 no. 2 and 3, para. 4 HGB (commercial letters).

Other uses of data

Further processing or use of your personal data will generally only take place if this is permitted by law or if you have consented to the data processing or use. In the event of further processing for purposes other than those for which the data was originally collected, we will inform you of these other purposes prior to further processing and provide you with further relevant information.

Your rights regarding the processing of personal data

Right to information

You have the right to request information from us at any time about the personal data concerning you that we process within the scope of Art. 15 GDPR. You can submit a request by post or email to the addresses below.

Right to rectification of inaccurate data

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you (Art. 16 GDPR). To do so, please use the contact addresses below.

Right to erasure

You have the right to the immediate erasure (“right to be forgotten”) of personal data concerning you if the legal grounds pursuant to Art. 17 GDPR apply. These exist, for example, if the personal data are no longer necessary for the purposes for which they were originally processed or if you have withdrawn your consent and if there is no other legal basis for the processing; the data subject objects to the processing (and there are no overriding reasons for processing – this does not apply to objections to direct marketing). To exercise your above right, please contact us at the addresses given below.

Right to restriction of processing

You have a right to restriction of processing if the conditions are met and in accordance with Art. 18 GDPR. According to this, the restriction of processing may be required in particular if the processing is unlawful and the data subject refuses to delete the personal data and instead requests the restriction of the use of the personal data or the data subject has objected to the processing pursuant to Art. 21 para. 1 GDPR, as long as it is not yet clear whether our legitimate reasons outweigh theirs. To assert your aforementioned right, please contact us at the addresses given below.

Right to data portability

You have a right to data portability in accordance with Art. 20 GDPR. You have the right to receive the data concerning you, which you have provided to us, in a commonly used, structured and machine-readable format and to transmit those data to another controller, such as another service provider. The prerequisite for this is that the processing is based on consent or on a contract and is carried out using automated procedures. To exercise the above right, please contact us at the addresses given below.

Revocation

If you have consented to the processing of personal data (see Art. 6 para. 1 lit. a GDPR), you can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based, inter alia, on point (e) or (f) of Article 6(1) GDPR pursuant to Article 21 GDPR. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims. To assert your aforementioned right, please contact us at the addresses given below.

Right to lodge a complaint with a supervisory authority

If you believe that the processing of personal data concerning you by us is unlawful, you have the right to lodge a complaint with the supervisory authority responsible for us, which you can contact as follows:

The State Data Protection Officer
The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
Phone 0511-120 4500
Fax 0511-120 4599
E-mail to contact person write.

Name and address of the controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is the:

digitalSee GmbH
Berliner Straße 52e
38104 Braunschweig
Phone +49 531 18050850
datenschutz@digitalsee.de

Our data protection officer is Ms. Johanna Feuerhake, attorney at law, feuerhake@anwaltskanzlei-feuerhake.de.