DATA PROTECTION DECLARATION

This is a translation of ICON Vernetzte Kommunikation GmbH Datenschutzerklärung (Data Protection Declaration). Only the German version is legally valid. In case of any differences in wording, meaning, or interpretation between the German and English versions, the German version shall prevail.

Dear visitors,
We want you to feel safe and comfortable when visiting our website. Therefore, we documented our handling of your data.

Person responsible

ICON Vernetzte Kommunikation GmbH, Wilhelmitorwall 25, 38118 Braunschweig, Germany, is responsible for the processing of all personal data collected on this website.

Usage data

We temporarily store so-called usage data on the basis of Article 6(1)(f) of the General Data Protection Regulation from our visitors. We rely on the usage data for statistical purposes to improve the quality of our websites and Wfor security purposes. We also use this information to enable you to view our website, to control and administer our systems and to improve the design of the website. These purposes constitute the legitimate interest within the meaning of Article 6(1)(f) of the General Data Protection Regulation (DSGVO).

The data record consists of:

• the page from which the file was requested
• the name of the file
• the date and time of the request
• the amount of data transferred
• the access status (file transferred, file not found)
• the description of the type of web browser used
• the IP address of the requesting computer shortened by the last three digits

Google Analytics

In order to design our website based on needs, we create pseudonymous usage profiles on the basis of Article 6 (1) (f) General Data Protection Regulation (DSGVO) using Google Analytics. This is a product of Google Inc. ("Google"), Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about the usage of this website is usually transmitted to a Google server in the USA and stored there. However, as we have IP anonymisation activated on this website, your IP address is shortened by Google beforehand within the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google uses this information to evaluate the website usage for us. They compile further reports on website activity and provide other services related to website activity and internet usage to us. These purposes constitute the legitimate interest within the meaning of Article 6(1)(f) of the General Data Protection Regulation (DSGVO).

You can object to the creation of the pseudonymous usage profiles at any time. There are several ways to do this:

1. one way to object to web analysis by Google Analytics is to set an opt-out cookie, which instructs Google not to store or use your data for web analysis purposes. Please note that with this solution, web analytics will only not take place as long as the opt-out cookie is stored by the browser. If you would like to set the opt-out cookie now, please click here.

2. you can prevent the cookies from being stored by setting your browser software accordingly.

3. depending on the browser you use, you have the option of installing a browser plug-in that prevents tracking. To do this, please click here and install the browser plug-in available there.

Google Tag Manager

We also use Google Tag Manager on the basis of Article 6(1)(f) of the General Data Protection Regulation (DSGVO) in order to better evaluate user behaviour using pseudonymised user data. Google Tag Manager is a solution enabling the administration of website tags can be via an interface. In the process, a page load is detected by the Tag Manager. in line with its configuration, this loading of the website triggers a Google Analytics tag. The data from this tag is then sent back to the Google Analytics servers and a pseudonymised evaluation of user behaviour is carried out. This is done by integrating the Google Analytics code and by activating the IP anonymisation already described above. For more information on the terms of use and data protection, please visit https://marketingplatform.google.com/about/analytics/terms/us/ or https://support.google.com/analytics/answer/6004245?hl=en. We would like to point out that the code "_gaq.push (['_gat._anonymizeIp']);" has been added to Google Analytics on this website to ensure anonymised collection of IP addresses (so-called IP masking). No cookies are set by the Google Tag Manager and no personal data is collected.

Application

You have the option of sending us your application via e-mail. Your application will be received by the human resource department and is only forwarded to the department responsible for the respective position or to the persons entrusted with the processing of this application. We will use your application data only for the application process. We will delete your application six months after the application process has been completed. The legal basis for data processing is § 26 of the Federal Data Protection Act. If you granted us your consent to store your data beyond the current job offer, we will use your e-mail address to inform you of interesting future job offers. The legal basis is your consent, which you can revoke at any time with effect for the future.

Contact

You have the possibility to contact us via the contact template provided for this purpose. When using the contact template, we collect the following data as mandatory information: First name, last name, e-mail address and message. You can voluntarily provide us with the name of your company. We use this data to answer your message and to address you personally. The legal basis for the use of this data is Article 6(1)(f) DSGVO. We have a legitimate interest in being in contact with the users of the website and, if necessary, being able to answer questions asked or send information.

Use of service providers / processing of data in countries outside the European Economic Area

We use service providers to provide services and process your data. The service providers process the data exclusively on our request and are obliged to comply with the applicable data protection regulations. All vendors have been carefully selected and are only given access to your data to the extent and for the period required to provide the services.
Some of the service providers we use are based in the USA. Companies in the USA are subject to a data protection law that does not protect personal data in general to the same extent as it does in the member states of the European Union. We use contractual arrangements or other recognised instruments to ensure that your personal data is nevertheless adequately protected.

Duration of data storage

We only store your data for as long as it is required for the provision of our services unless there is a legal retention period preventing deletion.

Your rights as a user

As a user, you have the right to inquire what data we have stored about you and for what purpose. In addition, you can have incorrect data corrected or have such data deleted whose storage is inadmissible or no longer necessary. You have the right to data portability. You also have the right to complain to a regulatory authority about our data processing.

Information on your right to object

You have the right to object to the processing of your personal data on grounds relating to your particular situation. The prerequisite for this is that the data processing is based on a balancing of interests.

Newsletter

We offer you the possibility to subscribe to our newsletter in order to receive information about our work and to benefit from it. To do this, we need your e-mail address. We use this to send the newsletter. You can voluntarily give us your surname and first name. We use this data to address you personally. We also evaluate whether and when the newsletter is opened and which links are clicked. These evaluations help us to get knowledge about the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users. The legal basis for data processing is your consent, which you can revoke at any time with effect for the future. The data processing that took place until the withdrawal remains lawful.

In order to receive the newsletter offered on our website, you can register using our template. We use the so-called double opt-in procedure. In this case, a confirmation email is first sent to your specified email address with a request for confirmation. The registration only becomes effective after you clicked on the activation link contained in the confirmation email. We use your data transmitted to us exclusively for sending the newsletter, which may contain information or an offer.

We use Mailchimp to send our newsletter. Mailchimp is a newsletter software which has been carefully selected according to the requirements of the DSGVO and the BDSG.
Your data is transmitted to the newsletter software provider The Rocket Science Group. The Rocket Science Group is prohibited from using your data for purposes other than sending the newsletter. The Rocket Science Group is not permitted to pass on or sell your data.

You can withdraw your consent to the storage of data and its use for sending the newsletter at any time, e.g. via the unsubscribe link in the newsletter footer of the newsletter.

PRIVACY POLICY
FOR OUR SOCIAL MEDIA PAGES

In the following, we would like to inform you about the handling of your data in accordance with Art. 13 of the General Data Protection Regulation (DSGVO).

Responsible Person

We, ICON Vernetzte Kommunikation GmbH, Wilhelmitorwall 25, 38118 Braunschweig operate the following social media pages:

You can find our contact details in our Legal Notice.

In addition to us, the operator of the social media platform itself is also a responsible person who carries out data processing. However, we have only limited influence on his processes. Nevertheless, at those points where we can exert influence and parameterise data processing, we work within the scope of the possibilities available to us towards data protection-compliant handling of data by the operator of the social media platform. At many points, however, we cannot influence the data processing by the operator of the social media platform and also do not know exactly which data is processed. However, the operator will inform you about this in his respective data protection declaration.

Data processing by us

The data you enter on our social media pages, such as comments, videos, pictures, likes, public messages, etc., are published by the social media platform and are not used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. Where applicable, we share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis for this is Art. 6 para. 1 p. 1 lit. f General Data Protection Regulation (DSGVO). The data processing is carried out in the interest of our public relations and communication.

If you wish to object to certain data processing we control, please contact us using the contact details provided in the legal notice. We will then review your objection or forward it to the social media platform if necessary.

If you send us a request via social media platform: depending on the required response, we may refer you to other more secure communication channels guaranteeing confidentiality. You always have the option of sending us confidential enquiries to our address given in the legal notice.

As already explained, where the provider of the social media platform gives us the opportunity, we take care to design our social media pages to be as data protection-compliant as possible. In particular, this means that we do not use the demographic, interest-based, behaviour-based or location-based target audience definitions for advertising that the operator of the social media platform may make available to us. Overall, we do not use the social media platform for advertising purposes.

Use of Insights

Im Zusammenhang mit dem Betrieb dieser Facebook-Seite nutzen wir die Funktion Insights von Facebook, um statistische Daten zu den Nutzern unserer Facebook-Seite zu erhalten. Dies erfolgt auf Grundlage von Art. 6 Abs. 1 f DSGVO, basierend auf unserem Interesse, die Nutzung unseres Auftritts bei Facebook messen zu können.

On our Facebook page, we use the Insights function from Facebook to obtain statistical data on the users of our Facebook page. This is done on the basis of Art. 6 (1) f General Data Protection Regulation (DSGVO), in order to be able to measure the usage of our presence on Facebook (legitimate interest).

You can find out what information is used for this in the "Information about Page Insights Data", which you can access using the following link: https://www.facebook.com/legal/terms/information_about_page_insights_data

Here you will also find information on the joint responsibility of us and Facebook Ireland Ltd when using the Insights function. You will also find information on your data protection rights. We have reached an agreement with Facebook. In this agreement, we have agreed that Facebook is primarily responsible for providing you with information about the joint processing and enabling you to exercise your rights under the General Data Protection Regulation (DSGVO).

Data processing by the operator of the social media platform

The operator of the social media platform uses web tracking methods. The web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we unfortunately only have very limited influence on the web tracking methods of the social media platform. For example, we cannot switch it off.

Please be aware that it cannot be ruled out that the provider of the social media platform uses your profile and behavioural data, for example to evaluate your habits, personal relationships, preferences, etc. We have no influence on this. In this respect, we have no influence on the processing of your data by the provider of the social media platform.

For more information on data processing by the provider of the social media platform and further options to object, please refer to the provider's privacy policy:

Your rights as a user

When processing your personal data, the General Data Protection Regulation (DSGVO) grants you as a website user certain rights that you can exercise both against us and against Facebook:

1.) Right of information (Article 15 General Data Protection Regulation (DSGVO)):

You are entitled to request confirmation as to whether personal data relating to you is being processed; if this is the case, you have the right to be informed about this personal data and to receive the information listed in detail in Article 15 General Data Protection Regulation (DSGVO).

2.) Right to rectification and deletion (Articles 16 and 17 General Data Protection Regulation (DSGVO)):

You have the right to request without undue delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data.

You also have the right to request that personal data concerning you is deleted without delay if one of the reasons listed in detail in Article 17 of the General Data Protection Regulation (DSGVO) applies, e.g. if the data is no longer required for the purposes pursued.

3. Right to restriction of processing (Article 18 General Data Protection Regulation (DSGVO)):

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 General Data Protection Regulation (DSGVO) applies, e.g. if you have appealed against the processing, for the duration of any review.

4. Right to data portability (Article 20 General Data Protection Regulation (DSGVO)):

In certain cases, detailed in Article 20 General Data Protection Regulation (DSGVO), you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.

5. Right to object (Article 20 General Data Protection Regulation (DSGVO)):

If data is collected on the basis of Article 6 para. 1 p. 1 lit. f (data processing to protect legitimate interests), you have the right to object to the processing at any time for reasons that arise from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds worthy of further processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right of Appeal to a Supervisory Authority

According to Article 77 General Data Protection Regulation (DSGVO) you have the right of appeal to a supervisory authority if you believe that the processing of personal data concerning you is contrary to the data protection regulations. The right to appeal may in particular be exercised in the Member State where you reside, work or suspect infringement.

Contact details of the data protection officer

Our data protection officer will be happy to provide you with information and is open for suggestions on the subject of data protection:

Dr. Uwe Schläger
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Web: www.datenschutz-nord-gruppe.de
E-Mail: office@datenschutz-nord.de

Last modified on: 24th November 2020