Information after Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR) and others Privacy laws
1./ Who is responsible for data processing and who can I contact?
Name: novomind messaging GmbH, Sylvia Tantzen, Frank Wulf
Adress: Bramfelder Chaussee 45, 22177 Hamburg
Telephone: +49 (040) 80 80 71-0
2./ What do we use to process your data and on what legal basis? / Can you deny the survey?
Our website collects a series of general data and information with each call made by you or an automated system. This general data and information is stored in the log files of our server. The browser types and versions used, the operating system used by the accessing system, the website from which an accessing system accesses our website, the sub-web pages accessed via an accessing system on our website, the date and time of access to the Internet site, an Internet Protocol (IP) address, the accessing system’s Internet service provider and other similar data and information that may be used in the event of attacks on our IT systems. When using this general data and information, we draw no conclusions about the person concerned. Rather, this information is needed in order to correctly deliver the contents of our website, to optimize the content of our website and to promote it, to ensure the continued functioning of our IT systems and the technology of our website, and to prosecute law enforcement authorities in the event of a cyberattack provide necessary information. This anonymously collected data and information is therefore statistically evaluated by us on the one hand and furthermore with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by an affected person.
2.1 For the fulfillment of contractual obligations / On the basis of consent
We use personal data (eg name, address, e-mail address, telephone number, nationality, company name, legitimacy data, customer number), which you voluntarily provide in connection with the conclusion of a contract or the initiation of a contract (eg via our Day test form, for the application, to contact via e-mail), due to the associated consent (Article 6 paragraph 1 a DSGVO). These data are then processed by us in consideration of the legal regulations (for example of the BDSG, the TMG and the DSGVO). The personal data that is transferred to the data controller results from the respective input mask used for registration or contact or from your decision as to which information you wish to provide to us.
We process the data required to fulfill a contract or to carry out pre-contractual measures (for example to answer your questions about the product or a financing option) (Article 6 (1) (b) GDPR).
You have the opportunity to register on our website for a 30-day test and create a user profile. After registering on our website, we collect and process the following data in addition to the data transmitted to you by your internet browser:
- Date and time of registration
- Your first name and last name
- A freely selectable portal name
- Your email address
In this context, you will also be asked to give a password to ensure the security of your account and the legitimacy of your order.
Without providing the personal data, we can not fulfill our contractual obligations (for example, shipping the ordered goods, invoicing, providing our guidance, asserting and / or defending against claims, correspondence with you). Nor can we answer your inquiries.
2.2 In the context of balance of interests(Art. 6 Abs.1 f DSGVO)
In the context of balance of interestsIf necessary, we process your data beyond the actual fulfillment of the contract for the protection of legitimate interests of us or third parties (for example):
- Review and optimization of requirements analysis and direct customer approach procedures;
- Advertising or market and opinion research, as far as you have not objected to the use of your data;
- Asserting legal claims and defense in legal disputes;
- Address checks, detection of typos;
- Ensuring the IT security and IT operations of our company;
- Prevention and investigation of criminal offenses;
- For the operation of our website (including the integration of social plugins);
- Video surveillance serves the collection of evidence in criminal cases or for proof of dispositions and deposits z. B. at ATMs. They thus serve the protection of customers and employees as well as the exercise of the house right;
- Measures for business management and further development of services and products.
This processing of your aforementioned data is necessary for the protection of the legitimate interests of us (in accordance with Article 6 paragraph 1 f of the GDPR) and is justified by a balance of interests in our favor. Without the use of this data, we can not provide you with direct mail. We only use your direct marketing data for our services if you have agreed to it (or have not objected to it) and your consent has not been revoked. We also make sure through the chosen communication channels for advertising (for example, post, e-mail) that they mean the least possible disruption to you.
3./ Who works with the data?
The personal data will be used exclusively by the parties involved in the execution of the contract; These are employees in our company.
Our processors (Article 28 GDPR, basis for this: Art. 6 (1) (a) and (b) GDPR) may also receive data for these purposes (eg hosters). These are companies in the categories IT Services, Logistics, Printing Services, Telecommunications, Legal & Tax Advice, Accountants, Debt Collection, Consulting & Consulting, Sales & Marketing. We store the received data predominantly on our in-house servers, in parts however also on servers of here specialized service providers within Germany.
There is no disclosure of data to third parties who are not involved in the contract. In particular, no transfer of personal data to a third country or international organization takes place.
4./ How long will your data be stored?
If necessary, we process and store your personal data only for the period necessary to achieve the purpose of the storage or as provided by the European directives and regulations or any other legislator in laws or regulations, which is subject to the controller has been. In § 147 AO, for example, a ten-year storage obligation is regulated.
If you have given your consent to the processing of personal data (Article 6 paragraph 1 a GDPR), we delete your personal data at the latest, as soon as you revoke your consent and if there is no other legal basis for processing.
If the storage purpose is omitted or if a storage period prescribed by the European directives and regulations or any other relevant legislature expires, the personal data will be routinely and in accordance with the statutory provisions blocked or deleted, if they are no longer required to fulfill the contract or to initiate a contract.
In addition, we are subject to various statutory storage and documentation obligations, which result, inter alia, from the HGB *, the AO *, the KWG *, and the AMLA *.
5./ Is there an automated processing?
We do not make a decision within the meaning of Art. 22 GDPR that is based solely on automated processing – including profiling – and / or that has legal effect on you or that affects it in a similar manner.
6./ Data protection for applications and in the application process
We collect and process the personal data of applicants for the purpose of processing the application process (Art. 6 (1) a and b DSGVO). The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents by electronic means, for example by e-mail, to the controller. If you enter into an employment relationship with us, the transmitted data will be stored for the purpose of the employment relationship in compliance with the legal requirements. If no employment contract is concluded with the applicant, the application documents will be automatically deleted two (2) months after the announcement of the rejection decision, provided that deletion does not prejudice any other legitimate interests of the controller. Other legitimate interest in this sense, for example, a burden of proof in a procedure under the General Equal Treatment Act (AGG).
7./ Which data protection rights do you have?
You have a right to information under Art. 15 GDPR, the right to a correction under Art. 16 GDPR, the right to cancellation under Art. 17 DSGVO, the right to restriction of processing under Art. 18 GDPR, the right of data transferability from Art 20 DSGVO and the right under Art. 21 GDPR to object to the processing of your data. A consent granted for the processing of data can be revoked at any time (Art. 7 GDPR).
In addition, you have a right of appeal to a data protection supervisory authority (Art. 77 GDPR), in comparison to Section 8. /.
The revocation / your request should be sent to:
Name: novomind messaging GmbH, Sylvia Tantzen, Frank Wulf
Adress: Bramfelder Chaussee 45, 22177 Hamburg
Telephone: +49 (040) 80 80 71-0
8./ Right of appeal
You have the right to complain to a regulator, particularly in the country where you are currently located or where your job is or where a suspected breach has been committed, if you believe the processing concerns you personal data violates the GDPR.
The responsible supervisory authority for Hamburg is:
The Hamburg Commissioner for Data Protection and Freedom of Information
Klosterwall 6 (Block C), 20095 Hamburg
Tel.: (040) 4 28 54 – 40 40
E-Fax: (040) 4 279 – 11811
10./ Use of Google Analytics
In view of the discussion concerning the use of analytics tools with complete IP addresses, please note that this website uses Google Analytics with the extension “_anonymizeIp()” so that your IP address will be further processed only in a truncated form to exclude any direct connection to the user’s personal identity.
11./ Google Plus
If you are a Facebook member and do not want Facebook to collect data about you via our website and link it to your member data stored on Facebook, you must log out of Facebook before visiting our website.
Our website uses social plugins (“Xing-Plugins”) of the social network xing.com (“Xing”), which is operated by XING AG, Hamburg. The Xing plugins are recognizable by one of the Xing logos or are marked with the addition “Xing”.
If you visit a website of our website that contains such a Xing plugin, your browser establishes a direct connection to the Xing servers. The content of the plugin is transmitted by Xing directly to your browser and incorporated by him into the website.
By integrating the Xing plugins, Xing receives the information that you have accessed the corresponding page of our website. If you are logged in to Xing, Xing can assign the visit to your Xing account. The purpose and scope of the data collection and the further processing and use of the data by Xing, as well as your rights and options to protect your privacy can be viewed at https://www.xing.com/privacy.
If you are a Xing member and do not want Xing to collect data about you via our website and associate it with your member data stored on Xing, you must log out of Xing before visiting our website.
15./ Google AdWords
We use the online advertising program “Google AdWords” and conversion tracking in the context of that program. Google conversion tracking is an analytical service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you click on an advert placed by Google, a cookie for conversion tracking is stored on your computer. These cookies expire after 30 days, do not contain any personal data and are, therefore, not used to identify you personally.
If the cookie has not yet expired when you visit certain pages of our website, Google and we will recognise that you clicked on the advert and were transferred to that page.
Each Google AdWords advertiser receives a different cookie. It is, therefore, impossible for AdWords advertisers to track cookies via their websites. The information collected by the conversion cookie is intended to provide conversion statistics to AdWords advertisers who have opted for conversion tracking. This provides the advertisers with information on the total number of users who have clicked on their advert and were transferred to a page connected with a conversion tracking tag. However, advertisers will not obtain any information that can identify users personally.
If you wish to opt out of tracking, you can prevent the installation of cookies by selecting the appropriate setting on your browser (disable option). Then, you will not be included in the conversion tracking statistics.
Our website uses YouTube’s social plug-ins (“YouTube plug-in”) operated by Google Inc., San Bruno, California, USA.
If you visit a page of our website that contains such a Youtube plugin, your browser connects directly to the servers of Youtube. The content of the Youtube plugin is transmitted by Youtube directly to your browser and integrated into the page. Youtube will be informed, which special page of our website you visited, even if you do not have a Youtube profile or are currently not logged in to Youtube. This information (including your IP address) is transmitted from your browser directly to a Youtube server in the USA and stored there. If you are logged in to Youtube, Youtube can immediately assign your visit to our website to your account. If you are also logged in to your YouTube account, YouTube would allow you to associate your browsing experience directly with your personal profile.
If you are a Youtube member and do not want Youtube to collect data about you via our website and link it to your member data stored on Youtube, you must log out of Youtube before visiting our website.
This website also uses Instagram social plugins (“Instagram Plugins”) operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).
If you do not want Instagram to directly map the data collected through our website into your Instagram account, you’ll need to log out of Instagram before visiting our website.
Our website also uses social plugins from the social network of Twitter. Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103. When you visit our pages with Twitter plug-ins, a connection is established between your browser and Twitter’s servers, with data already being posted to Twitter be transmitted. If you have a Twitter account, this data can be linked to it. If you do not wish to associate this information with your Twitter account, please log out of Twitter before visiting our page. Interactions, especially clicking on a “re-tweet” button will also be shared with Twitter. Find out more at https://twitter.com/privacy.
Our website uses social plugins (“LinkedIn plugins”) from the social network linkedin.com (“LinkedIn”), which is operated by the LinkedIn Ireland Unlimited Company, Ireland. The LinkedIn plug-ins are recognizable by one of the LinkedIn logos or are marked with the addition “LinkedIn”. When you visit a website on our website that contains such a LinkedIn plug-in, your browser establishes a direct connection to the LinkedIn servers. The content of the plugin is transmitted by LinkedIn directly to your browser and integrated by this into the website. By integrating the LinkedIn plugins LinkedIn receives the information that you have accessed the corresponding page of our website. If you are logged in to LinkedIn, Xing can associate the visit with your LinkedIn account. The purpose and scope of the data collection and the further processing and use of the data by LinkedIn, as well as your rights and options to protect your privacy can be viewed at https://www.linkedin.com/legal/privacy-policy?_l=en_EN.
If you are a LinkedIn member and do not want LinkedIn to collect information about you through our website and associate it with your membership information stored on LinkedIn, you must log out of LinkedIn before visiting our website.