Privacy Policy
Mit diesen Datenschutzhinweisen informieren wir Sie über unseren Umgang mit Ihren personenbezogenen Daten und über Ihre Rechte nach der Europäischen Datenschutz-Grundverordnung (DSGVO) und dem Bundesdatenschutzgesetz (BDSG). Verantwortlich für die Datenverarbeitung ist die urban connect GmbH (nachfolgend als „wir“ oder „uns“ bezeichnet).
General Information
Contact
If you have any questions or comments regarding this information, or if you would like to contact us to exercise your rights, please direct your inquiry to
Urban connect GmbH
Hauptstraße 1, 66571 Eppelborn
Phone: 06806 914080
Email: info@pe-komenda.de
Legal
basis
The data protection term “personal data” refers to any information relating to an identified or identifiable individual. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. We process data only on the basis of a legal authorization. We process personal data only with your consent (Section 25(1) TDDDG or Article 6(1)(a) GDPR), to fulfill a contract to which you are a party or, at your request, to take steps prior to entering into a contract (Art. 6(1)(b) GDPR), to fulfill a legal obligation (Art. 6(1)(c) GDPR), or if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data take precedence (Art. 6(1)(f) GDPR). When you apply for a job opening at our company, we also process your personal data to make a decision regarding the establishment of an employment relationship (Section 26(1), sentence 1 of the German Federal Data Protection Act (BDSG) or Article 6(1)(b) of the General Data Protection Regulation (GDPR)).
Duration of storage
Unless otherwise specified in the following information, we store data only for as long as is necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations. Such legal retention obligations may arise, in particular, from commercial or tax law provisions. Starting at the end of the calendar year in which the data was collected, we will retain personal data contained in our accounting records for ten years and personal data contained in business correspondence and contracts for six years. In addition, we will retain data related to consent requiring documentation, as well as complaints and claims, for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to its processing for this purpose.
Categories of data recipients
We use data processors in connection with the processing of your data. The processing operations carried out by such data processors include, for example, hosting, sending emails, maintenance and support of IT systems, marketing activities, and the destruction of files and data storage media. A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller. Processors do not use the data for their own purposes but carry out data processing exclusively on behalf of the controller and and are contractually obligated to ensure appropriate technical and organizational measures for data protection. In addition, we may transfer your personal data to entities such as our primary bank, tax advisory/auditing firms, or tax authorities. Additional recipients may be identified in the following notices.
Data
transfer to third countries
Our data processing activities may involve the transfer of certain personal data to third countries, i.e., countries where the GDPR is not applicable. Such a transfer is permissible if the European Commission has determined that an adequate level of data protection is ensured in that third country. If no such adequacy decision has been issued by the European Commission, personal data will only be transferred to a third country if appropriate safeguards are in place in accordance with Article 46 of the GDPR or if one of the conditions set forth in Article 49 of the GDPR is met. Unless an adequacy decision is in place and unless otherwise specified below, we use the EU Standard Data Protection Clauses as appropriate safeguards for the transfer of personal data to third countries. You have the option to receive a copy of these EU Standard Data Protection Clauses or to review them. To do so, please contact us at the address listed under “Contact.” If you consent to the transfer of personal data to third countries, such transfer will be based on Article 49(1)(a) of the GDPR.
Processing in connection with the exercise of your rights
When you exercise your rights under Articles 15 through 22 of the GDPR, we process the personal data you provide for the purpose of fulfilling these rights and to be able to provide evidence thereof.
Your rights
-
As a data subject, you have the right to exercise your data subject rights with us. In particular, you have the following rights:
-
Pursuant to Article 15 of the GDPR and Section 34 of the BDSG, you have the right to request information regarding whether we process personal data about you and, if so, to what extent.
-
You have the right to request that we correct your data in accordance with Article 16 of the GDPR.
-
You have the right to request that we erase your personal data in accordance with Article 17 of the GDPR and Section 35 of the BDSG.
-
You have the right to restrict the processing of your personal data in accordance with Article 18 of the GDPR.
-
You have the right, in accordance with Article 20 of the GDPR, to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and to transmit this data to another controller.
-
If you have provided us with separate consent to the processing of your personal data, you may revoke this consent at any time in accordance with Article 7(3) of the GDPR. Such revocation does not affect the lawfulness of the processing carried out on the basis of your consent prior to the revocation.
Right to object
Pursuant to Article 21(1) of the GDPR, you have the right to object to processing based on the legal grounds of Article 6(1)(e) or (f) of the GDPR on grounds relating to your particular situation. If we process your personal data for the purpose of direct marketing, you may object to such processing pursuant to Article 21(2) and (3) of the GDPR.
Data Protection
Officer
You can contact our Data Protection Officer using the following contact information:
Email: jk@pe-komenda.de
Jule Komenda-Gölzenleuchter
Hauptstraße 1, 66571 Eppelborn
Data Processing on Our Websites
Data
processing
When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website. Under data protection law, an IP address is generally considered personal data. An IP address is assigned to every device connected to the internet by the internet service provider so that it can send and receive data.
Processing of Server Log Files
When you use our website for informational purposes only, general information that your browser transmits to our server is initially stored automatically (i.e., without registration). By default, this includes: browser type and version, operating system used, page accessed, previously visited page (referrer URL), IP address, date and time of the server request, and HTTP status code.
This processing is carried out to safeguard our legitimate interests and is based on the legal basis of Article 6(1)(f) of the GDPR. This processing is carried out for the purposes of technical administration and website security. The stored data will be deleted after seven days, unless there are concrete grounds for a reasonable suspicion of unlawful use, in which case further review and processing of the information is necessary for that reason. We are unable to identify you as a data subject based on the information we have stored. Articles 15 through 22 of the GDPR therefore do not apply pursuant to Article 11(2) of the GDPR, unless you provide additional information that allows us to identify you in order to exercise the rights set forth in those articles.
Contact
Information and Inquiries
Our website contains contact forms that you can use to send us messages. Your data is transmitted in encrypted form (as indicated by “https” in the browser’s address bar). All data fields marked as required are necessary to process your request. Failure to provide this information means we will be unable to process your request. Failure to provide this information means that we will be unable to process your request. The provision of additional data is voluntary. Alternatively, you can also send us a message via the contact email address. We process the data for the purpose of responding to your inquiry. If your inquiry relates to the conclusion or performance of a contract with us, the legal basis for data processing is Article 6(1)(b) of the GDPR. Otherwise, we process the data based on our legitimate interest in contacting individuals who submit inquiries. In such cases, the legal basis for data processing is Article 6(1)(f) of the GDPR.
Registration and Login
You have the option to create a customer account on our website. The information required for this is listed on the registration form. We will store the data you provide and process it for the purpose of providing our services. Upon completion of the registration, you will receive an email with a confirmation link. Otherwise, we process the data based on our legitimate interest in making the web application available to the employees of our contractual partner. The legal basis for the data processing is then Article 6(1)(f) of the GDPR.
If confirmation is not received within seven days, we will delete the data provided during registration.
If you are our contractual partner, the processing is based on the legal basis of Article 6(1)(b) of the GDPR.
Newsletter
On our website, we offer the option to subscribe to our newsletter. Once you have subscribed, we will keep you regularly updated on the latest news regarding our offerings. A valid email address is required to subscribe to the newsletter. To verify your email address, you will first receive a registration email that you must confirm by clicking on a link (double opt-in). When you subscribe to the newsletter on our website, we process personal data such as your email address and your name based on the consent you have provided. The processing is based on the legal basis of Article 6(1)(a) of the GDPR. You may revoke the consent you have given at any time with future effect, for example by clicking the “Unsubscribe” link in the newsletter or by contacting us through the channels listed above. The lawfulness of any data processing that has already taken place remains unaffected by the revocation. When you subscribe to the newsletter, we also store your IP address as well as the date and time of your subscription. The processing of this data is necessary to provide proof of your consent. The legal basis for this is our legal obligation to document your consent (Art. 6(1)(c) in conjunction with Art. 7(1) of the GDPR). We also analyze the reading behavior and open rates of our newsletter. We evaluate the data generated when our emails are delivered and accessed in an aggregated and anonymized form (delivery rate, open rate, click-through rate, unsubscribe rate, bounce rate, visits, conversions) to measure the usage and success of the emails.
We use the anonymous and personal data we collect to provide you with personalized content and tailored information in our promotional emails and on related websites.
The legal basis for data processing in connection with emails is Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect, for example by clicking the “Unsubscribe” link in the newsletter or by contacting us through the channels listed above.
Cookies
We use cookies and similar technologies (“cookies”) on our website. Cookies are small data files that are stored by your browser when you visit a website. This identifies the browser being used and allows it to be recognized by web servers. You have full control over the use of cookies through your browser.
You can delete cookies at any time in your browser’s security settings. You can generally opt out of the use of cookies through your browser settings, or do so in specific cases.
The use of cookies is, in part, technically necessary for the operation of our website and is therefore permitted without the user’s consent. In addition, we may use cookies to provide special features and content, as well as for analytical and marketing purposes. This may include third-party cookies. We use such non-essential cookies only with your consent in accordance with Section 25(1) of the German Telemedia Act (TDDDG) and, where applicable, Article 6(1)(a) of the General Data Protection Regulation (GDPR). Information regarding the purposes, providers, technologies used, data stored, and retention periods of individual cookies can be found in the cookie settings of our consent management tool.
Consent-Management-Tool
This website uses the Usercentrics consent management tool provided by Usercentrics GmbH (Germany, EU) to manage cookies and the processing of personal data.
The consent banner allows users of our website to give consent to specific data processing activities or to withdraw previously given consent.
By clicking the “I Accept” button or by saving your individual cookie settings, you consent to the use of the associated cookies.
The legal basis for data protection is your consent within the meaning of Art. 6(1)(a) GDPR.
In addition, the banner helps us to provide proof of your consent. To this end, we process information regarding the declaration of consent and other log data related to this declaration. Cookies are also used to collect this data. The processing of this data is necessary to be able to prove that consent has been given. The legal basis stems from our legal obligation to document your consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). You can revoke your consent to cookies here: Privacy Settings
We use the Google Analytics service provided by Google Ireland Limited (Ireland, EU) on our website.
Google Analytics is a web analytics service that allows us to collect and analyze data about user behavior on our website. Google Analytics enables us to measure interaction data from various devices and across different sessions.
This allows us to place individual user actions in context and analyze long-term relationships.
To do this, Google Analytics uses cookies that enable us to analyze how our website is used. In addition, personal data in the form of IP addresses, device identifiers, and information about interactions with our website is processed. Some of this data consists of information stored on the device you are using. In addition, cookies are used to store further information on the device you are using. Google Ireland will process the data collected on our behalf to analyze how users interact with our website, to compile reports on activity within our website, and to provide us with other services related to the use of our website and internet usage. In doing so, pseudonymous user profiles may be created from the processed data. The use of cookies and the further processing of personal data described here is based on your consent. The legal basis for data processing in connection with the Google Analytics service is therefore Article 6(1)(a) of the GDPR. You may revoke this consent at any time with future effect via our Consent Management Tool. We use Google Analytics only with IP anonymization enabled. This means that the IP addresses of users are truncated by Google Ireland within member states of the European Union or in other signatory states to the Agreement on the European Economic Area.
The IP address transmitted by the user’s browser is not combined with any other data. The IP address is truncated on servers located in the EU.
Data regarding user actions is stored for a period of 2 months and then automatically deleted. Data whose retention period has expired is automatically deleted once a month. For more information on how Google uses data from websites or apps for advertising purposes, please see Google’s privacy policy at: www.google.com/policies/technologies/ads/.
External media and third-party services
Data
processing
When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website. Under data protection law, an IP address is generally considered personal data. An IP address is assigned to every device connected to the internet by the internet service provider so that it can send and receive data.
Youtube
We use the YouTube service provided by Google Ireland Limited (Ireland, EU) on our website to embed videos. For this embedding to work, it is technically necessary to process your IP address so that the content can be sent to your browser. Your IP address is therefore transmitted to Google, and Google may set its own cookies.
We use YouTube in “enhanced privacy mode,” which means that YouTube does not set any cookies to track user behavior.
Your data is processed based on your consent pursuant to Art. 6(1)(a) GDPR. Your consent is managed through our consent management system and can be revoked at any time via that system. When using this service, the transfer of your data to the United States cannot be ruled out. Please refer to the information in the section “Data Transfer to Third Countries.” For more information about Google’s privacy practices, please see Google’s Privacy Policy at https://www.google.com/policies/privacy.
Vimeo
We use the Vimeo service provided by Vimeo, Inc. (USA) on our website to embed videos. For this embedding, processing your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Vimeo, and Vimeo may set its own cookies.
The processing of your data is based on your consent pursuant to Article 6(1)(a) of the GDPR. Your consent is managed through our consent management system and may be revoked at any time via that system.
When using the service, the transfer of your data to the United States cannot be ruled out. Please refer to the information in the section titled “Data Transfer to Third Countries.” For more information about data protection at Vimeo, please see Vimeo’s Privacy Policy at https://vimeo.com/privacy.
Data processing on our social media pages
Data
processing
We maintain company pages on several social media platforms. Through these, we aim to provide additional opportunities to learn about our company and engage with us. Our company has pages on the following social media platforms:
Facebook, operated by Meta Platforms Ireland Limited (Ireland, EU), hereinafter “Meta”;
Instagram, operated by Meta Platforms Ireland Limited (Ireland, EU), hereinafter “Meta”;
LinkedIn, operated by LinkedIn Ireland Unlimited Company (Ireland, EU), hereinafter “LinkedIn”;
XING, a subsidiary of NEW WORK SE (Germany, EU), hereinafter referred to as “XING”.
When you visit or interact with a profile on a social media platform, personal data about you may be processed. The information associated with a social media profile also regularly constitutes personal data. This also includes messages and statements made using the profile. In addition, when you visit a social media profile, certain information about it is often collected automatically, which may also constitute personal data.
Visiting a social media page
When you visit our social media page, where we showcase our company or specific products from our range, certain information about you is processed. The operators of the social media platforms are solely responsible for this processing of personal data.
For further information regarding the processing of personal data, please refer to their privacy policies, which are linked below:
Meta (https://www.facebook.com/privacy/explanation). Meta offers the option to object to certain data processing activities; Information on this and opt-out options can be found at https://www.facebook.com/settings?tab=ads;
LinkedIn (https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy)
XING (https://privacy.xing.com/de/datenschutzerklaerung/druckversion) The operators of social media platforms collect and process event data and profile data, and provide us with statistics and insights for our pages in anonymized form, which help us gain insights into the types of actions people take on our page (so-called “Page Insights”). These site insights are generated based on specific information about individuals who have visited our site. This processing of personal data is carried out by the social media operators and us as joint controllers. For details on the processing of personal data for the purpose of generating Page Insights and the agreement entered into between us and the operators, please visit the following links:
Meta (https://www.facebook.com/legal/terms/information_about_page_insights_data);
LinkedIn (https://legal.linkedin.com/pages-joint-controller-addendum);
You also have the option to exercise your rights with the platform operators. For more information, please visit the following links:
Meta (https://www.facebook.com/privacy/explanation);
LinkedIn (https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de);
XING (https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen). We have agreed with Meta and LinkedIn that the Irish Data Protection Commission is the lead supervisory authority responsible for overseeing the processing of Page Insights. You always have the right to file a complaint with the Irish Data Protection Commission (see www.dataprotection.ie) or with any other supervisory authority.
Communication via social media platforms
We also process information that you have provided to us via our company page on the respective social media platform. Such information may include your username, contact details, or a message sent to us. We act as the sole controller in this processing. We process this data based on our legitimate interest in contacting individuals who have submitted inquiries. The legal basis for data processing is Article 6(1)(f) of the GDPR. Additional data processing may take place if you have given your consent (Article 6(1)(a) of the GDPR) or if it is necessary to comply with a legal obligation (Article 6(1)(c) of the GDPR).
Additional data processing
Applications
When you apply for a position at our company, we process your application data solely for purposes related to your interest in current or future employment with us and the processing of your application. Your application will be reviewed and processed only by the relevant personnel at our company. All employees entrusted with data processing are required to maintain the confidentiality of your data. If we are unable to offer you a position, we will retain the data you have provided for up to six months after any rejection for the purpose of answering questions related to your application and rejection.
This does not apply if legal provisions prevent deletion, if further storage is necessary for evidentiary purposes, or if you have expressly consented to longer-term storage.
The legal basis for data processing is Section 26(1) sentence 1 of the Federal Data Protection Act (BDSG) or Article 6(1)(b) of the General Data Protection Regulation (GDPR). If we retain your applicant data for longer than six months and you have expressly consented to this, please note that this consent may be freely revoked at any time in accordance with Article 7(3) of the GDPR. Such a revocation does not affect the lawfulness of the processing carried out on the basis of your consent prior to the revocation.
Contact
Contact us via email
If you send us a message via the contact email address provided, we will process the data you provide for the purpose of responding to your inquiry. We process this data based on our legitimate interest in communicating with individuals who contact us.
The legal basis for data processing is Article 6(1)(f) of the GDPR.
is required to comply with a legal obligation (Article 6(1)(c) of the GDPR).
Use of the Email Address for Marketing Purposes
We may use the email address you provided during registration or when placing an order to inform you about similar products and services we offer. The legal basis is Article 6(1)(f) of the GDPR in conjunction with Section 7(3) of the German Unfair Competition Act (UWG). You may object to this at any time without incurring any costs other than the standard transmission charges. To do so, simply click the unsubscribe link included in every email.
