Privacy Policy

Data protection is not only a legal necessity for us, but a matter of course. With the following information, we would like to inform you, in accordance with the legal requirements, about what happens to your personal data when you visit our website.

Personal data is any data that can be attributed to you as an identified or identifiable person. Responsible for the processing of personal data in connection with your visit to these Internet pages is:

Media plan Agentur für Kommunikations- und Mediadienstleistungen GmbH

Hermann-Sielcken-Straße 60

76530 Baden-Baden

datenschutz@media-plan.de

The contact details of our company data protection officer are:

HABEWI GmbH & Co KG

Represented by HABEWI Beteiligungs- GmbH, which is represented by the Managing Director Arne Platzbecker.

Palmaille 96, 22767 Hamburg

Phone: 040/ 460 089 66

Fax: 040/ 460 089 77

a.platzbecker@habewi.de

This data protection declaration applies to the website via which it is made available for retrieval. Different information may apply to other offers and presences.

When you use our website, various personal data are processed:

1. provision of the website and creation of log files

Each time you visit our website, our system automatically collects data and information from the calling computer:

• Information about the browser type and version used
• The operating system of the user
• The HTTP Response Code
• The number of bytes transmitted
• The IP address of the user
• Date and time of access
• Websites from which the user’s system accesses our website
• Websites that are accessed by the user’s system via our website

The temporary storage of the IP address is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The storage in log files serves the functionality of the website. In addition, we use the data to optimise these internet offers and to ensure the security of our information technology. An evaluation of the data for marketing purposes does not take place in this context.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case at the end of the usage process. In the case of storage of data in log files, this is the case after fourteen days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.

The legal basis for the temporary storage of the data and the log files is Art. 6 (1) lit. f GDPR, whereby our legitimate interest is the proper provision of the functions of this website, the evaluation of access information with the aim of eliminating and preventing technical faults and the prevention and tracking of security incidents.

In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

Cookies
This website uses cookies and similar technologies. Cookies are small text files that are stored by the internet browser on the user’s terminal device. A cookie usually contains a characteristic string of characters that enables
the browser to be uniquely identified when the website
is called up again. Cookies are used to make the website more user-friendly, to optimise the functions and services of the website and to provide you with content tailored to you.

The purpose of using technically necessary cookies is to enable and simplify the use of the website. Some functions of this website cannot be offered without the use of cookies.

The user data collected through technically necessary cookies are not used to create user profiles. In addition, with your separate consent, cookies may be used to provide external media, such as films and maps, and to analyse the use of the website.

The user data collected in this way is pseudonymised by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not merged with other personal data of the user.

By changing the settings in your internet browser, you can deactivate or restrict the use of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for the website, it may no longer be possible to use all the functions of the website to their full extent.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f GDPR, whereby the legitimate interest of the controller is the secure, stable, efficient provision of the functions of the website and the information that can be accessed via it. If the controller fulfils a contractual obligation towards you with the respective function, the legal basis is Art. 6 (1) lit. b GDPR. If we use cookies for the provision of functions or for other purposes that are not technically necessary, the legal basis for the processing of personal data in connection with these cookies is Art. 6 (1) lit. a GDPR in conjunction with your consent and Section 25 TTDSG. If we use cookies to fulfil our legal obligations, for example to manage your consents, the legal basis for the management of personal data in this respect is Art. 6 (1) lit. c GDPR in conjunction with Section 25 TTDSG.

3. plugins and tools

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de .

This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in a shortened form, which means that personal references can be ruled out. If the data collected about you is related to a person, this is immediately excluded and the personal data is deleted immediately.

We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user.

The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. a GDPR in conjunction with your consent.

Information of the third party provider: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html , as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy .

For the possible cases in which personal data is transferred to the USA, Google complies with the data protection requirements for data transfer to third countries pursuant to Art. 44 et seq. GDPR. For this purpose, so-called EU standard contractual clauses have been concluded. You can view these here: https://policies.google.com/privacy/frameworks?hl=de

Google Adwords Conversion

On this website, we use the Google Adwords offer from Google Ireland Limited, Gordon House Barrow Street Dublin 4, Ireland (“Google”), in order to draw attention to our offers with the help of advertising media (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

These advertisements are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your computer. The unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognise your internet browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on his computer has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked across Adwords customers’ websites. The Ad Server cookies usually lose their validity after 30 days and are not intended to identify you personally.

We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify the users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Adwords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on the advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in to a Google service, it is possible that the provider may obtain and store your IP address.

You can prevent participation in this tracking process in several ways: a) by setting your browser software accordingly – suppressing third-party cookies will result in you not receiving third-party ads; b) by disabling conversion tracking cookies by setting your browser to block cookies from the domain www.googleadservices.com (https://www.google.de/settings/ads), this setting being deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign “About Ads” via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies; d) by permanently deactivating them in your browsers Firefox, Internetexplorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.

The legal basis for the processing of your data is the consent you have given via the cookie consent tool (Art. 6 para. 1 sentence 1 lit. a) GDPR).

Information of the third party provider: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html , as well as the data protection declaration: http://www.google.de/intl/de/policies/technologies/ads

For the possible cases in which personal data is transferred to the USA, Google complies with the data protection requirements for data transfer to third countries pursuant to Art. 44 et seq. GDPR. For this purpose, so-called EU standard contractual clauses have been concluded. You can view these here: https://policies.google.com/privacy/frameworks?hl=de

Google Analytics Remarketing

In addition to Google Analytics, our website uses the Google Analytics Remarketing application of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland. Through this application, our advertisements can be displayed to you after a visit to our website in your subsequent internet use. A so-called “cookie” is stored in the browser of the website visitor, which makes it possible to recognise the visitor when he or she visits websites that belong to Google’s advertising network. On these pages, the visitor may be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google’s remarketing function.

According to Google’s own statements, the data collected within the scope of Google Remarketing is not merged with your personal data that may be stored by Google (e.g. because you have registered for a Google service such as GMail). According to Google, pseudonymisation is used in remarketing.

The legal basis for the processing of your data is the consent you have given via the cookie consent tool (Art. 6 para. 1 sentence 1 lit. a) GDPR).

For more information on the purpose and scope of data collection and its processing, as well as further information on your rights in this regard and setting options for protecting your privacy, please refer to Google’s data protection conditions for advertising: http://www.google.de/intl/de/policies/technologies/ads

Google Maps

Google Maps, a service of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, is integrated on our website for you.

[optional for 2-click implementation] In order for you to retain control over your data, we use the data protection-friendly so-called two-click solution for the integration. This ensures that no connection is established with Google’s servers when you simply call up our website and that your data is not transmitted to Google. The integration is initially deactivated by default and is only activated and loaded from the platform after you click on the button. After activating the link, your personal data about the use will be automatically processed by the platform as if you were visiting the platform directly. The platform is solely responsible for this processing.

If you have agreed to the display of maps from the Google Maps platform and call up a page on our website that embeds maps from the Google Maps platform, your browser will establish connections to Google servers in the USA in order to load map data and embedded fonts. In the process, your IP address, the address of the visited page and information on the browser and operating system used are transmitted. Google also stores a cookie with a unique identifier in your browser at the time of embedding maps from the Google Maps platform, which is used by Google to recognise your browser and apply user settings, as well as for advertising purposes. As part of this connection, various information is transferred to Google and can be evaluated there within user profiles, even if the user is not logged into an existing Google account. Google’s terms of use and the additional terms of use for the Google-Maps service apply to the use of the map content provided by Google on the Google-Maps platform. In this respect, visitors enter into a direct usage relationship with Google when using Google Maps. Further information can be found on the Google pages:

Information of the third party provider: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

The legal basis for the processing of personal data with Google Maps, which takes place under our responsibility, is Art. 6 para. 1 lit. a GDPR, § 25 TTDSG, insofar as your consent is obtained, and otherwise Art. 6 para. 1 lit. f GDPR in connection with our legitimate interests in providing user-friendly and up-to-date map functions.

For the purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy, please refer to Google’s privacy policy at https://www.google.com/policies/privacy/partners/?hl=de .

For the possible cases in which personal data is transferred to the USA, Google complies with the data protection requirements for data transfer to third countries pursuant to Art. 44 et seq. GDPR. For this purpose, so-called EU standard contractual clauses have been concluded. You can view these here: https://policies.google.com/privacy/frameworks?hl=de

SalesViewer®

This website uses SalesViewer®, a web analysis system from SalesViewer GmbH. A javascript-based tracking code is used on the website, with the help of which company-related data (name, origin and industry of the visiting company, source/referrer of the visiting company, keyword and visitor behaviour) are determined. No targeted access is made to any information stored in the end device of the website visitor that is not already transmitted when the website is called up, nor are cookies or similar files stored in the end device. Instead, the visiting company is identified by means of the comparison with generally accessible information described below. For this purpose, the online identifier of the website visitor is encrypted via a non-reversible one-way function (so-called hashing) and, after a pre-selection by means of which private accesses are filtered out, is transmitted to SalesViewer GmbH in pseudonymised form. These online identifiers are matched by SalesViewer GmbH with a database limited to company-related data.

Insofar as company-related accesses can be identified within the scope of this procedure, the website operator is provided with corresponding company-related data of the website visit via a secure and encrypted login area of SalesViewer GmbH, on which it is also possible to research further generally accessible data (e.g. address and contact data) about the visiting companies.

SalesViewer® is designed to identify companies visiting the website, thus only collecting and processing company data. Otherwise, visitor data is only collected and processed in pseudonymised form. Even if personal data were collected, such data processing is lawful on the basis of the general interest balancing clause Art. 6 (1) lit. f GDPR. The marketing, market research and optimisation purposes pursued by the website operator constitute legitimate interests within the meaning of Art. 6 (1) lit. f GDPR.

Links

Our website contains links to third-party websites. The respective data protection declarations and data protection notices of the respective operators of the linked websites apply, for example:

Xing: https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

Facebook: https://www.facebook.com/about/privacy/

Instagram: https://help.instagram.com/519522125107875?helpref=page_content

We would like to point out that we are not responsible for the data processing practices on third-party platforms outside our own sphere of influence.

6. requests/ transactions

In addition to the purely informative use of our offers, you can send us questions and messages or provide them. For this purpose, you will usually have to provide further personal data which we process in order to deal with your request, to answer your enquiries, to fulfil contracts concluded with you, to assert and realise our claims and, if necessary, to respond to your message and to which the aforementioned data processing principles apply. In addition, we use personal data insofar as we have to in order to fulfil our legal obligations, for example to comply with our documentation and storage obligations under tax or commercial law.

Data is only passed on to third parties if and to the extent that this is necessary to fulfil our contractual obligations towards you (Art. 6 para. 1 p. 1 lit. b GDPR). In addition, we pass on personal data if this is necessary for the processing of payments. If necessary, personal data may also be exchanged to the extent required in each case with our service partners, whose services we use, for example, to deal with technical or legal questions or questions within the scope of customer support.

If consent has been given, the legal basis for processing your data is Art. 6 (1) lit. a GDPR. If the processing serves the fulfilment of a contract to which the data subject is a party or the implementation of pre-contractual measures, the legal basis for the processing of the data is Art. 6 (1) lit. b GDPR. If we process personal data in order to deal with non-contract-related concerns or enquiries or to respond appropriately to reviews, we do so for the purpose of optimal and efficient communication with you as well as for the appropriate evaluation and commenting on reviews and for the improvement of our customer service, for the optimisation and needs-based design of our offers, for the maintenance of the customer relationship and furthermore for the clarification and rectification of technical problems. The aforementioned purposes are our legitimate interests within the meaning of the legal basis of Art. 6 (1) lit. f GDPR. If we fulfil a legal obligation incumbent upon us by processing your personal data, the legal basis is Art. 6 para. 1 lit. c GDPR.

In addition, we reserve the right in individual cases to process personal data if this is necessary, for example, for the purpose of prosecuting abusive or fraudulent acts, for tracking and remedying functional or security problems. The above purposes then constitute our legitimate interest within the meaning of the legal basis of Art. 6 (1) lit. f GDPR.

7. storage period
   Unless otherwise stated in the respective individual information, we process personal data in accordance with the statutory provisions only for the purposes outlined here in each case and only for as long as personal identification of the data subject is required for the respective purpose. Subsequently, the data will be deleted or neutralised/anonymised in accordance with data protection.
8. SSL or TLS encryption
   In the case of unencrypted data transmissions on the Internet (e.g. in the case of unencrypted communication by e-mail), the confidentiality of the transmitted data cannot be fully guaranteed. For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL or TLS encryption.

You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

You have the right at any time

• revoke their consent given to us for the processing of your personal data at any time or object to the processing of your data.
• to receive information about your data stored with us.
• that incorrect data about you is corrected with us.
• that data about you that is no longer required will be deleted from us.
• that under certain conditions the processing of your data is restricted; this may be the case, for example, if deletion is not possible but the data may not be processed further.
• that your data is transferable; this right applies in particular if you have given your consent to the processing of your data or if the processing of the data is necessary to fulfil a contract. The right to data portability does not apply if your data is not processed automatically.

To exercise your rights, please contact us using the contact details set out in the introduction to this privacy statement.

If you are of the opinion that the processing of your data violates the legal requirements, you can also complain about this to the supervisory authority responsible for us.

We would like to point out that in certain cases we may request additional information from you in order to establish your identity. This is the only way we can ensure that information is not given to unauthorised persons, for example when providing information.

We process the personal data of applicants for the purpose of handling the application procedure. The processing may also take place electronically. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by e-mail or via a web form on the website. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted four months after notification of the rejection decision, provided that no other legitimate interests of the data controller conflict with such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG). The legal basis for the processing of personal data of applicants is Section 26 of the Federal Data Protection Act (BDSG) in conjunction with Art. 6 (1) lit. b, 88 GDPR, furthermore, insofar as the processing is carried out to fulfil legal requirements, Art. 6 (1) lit. c GDPR and, insofar as consent of the data subject is the basis of the processing, Art. 6 (1) lit. a GDPR in conjunction with Section 26 BDSG.

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.

The legal bases for the processing of personal data in this context are Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.