1. Name and address of the responsible person
real media technic STAUDACHER GmbH
8 90471 Nuremberg, GER
is the responsible party within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws.
2. Name and address of the data protection officer
The data protection officer of the responsible party is:
60329 Frankfurt am Main
3. General information on data processing
3.1. Scope of the processing of personal data
As a matter of principle, we collect and use personal data of our homepage’s users – only to the extent that this is necessary for the provision of a functional website, our contents, and services.
In principle, the collection and use of our users’ personal data occurs only after their consent. An exception to this principle applies in cases where data processing is permitted by legal regulations or where obtaining prior consent is not possible for actual reasons.
3.2. Legal basis for the processing of personal data
Art. 6 para. 1 p. 1 lit. a GDPR when obtaining the consent of the data subject.
Art. 6 (1) sentence 1 lit. b GDPR for processing operations that serve to fulfil a contract to which the data subject is a party. Included here are processing operations that are necessary for the implementation of pre-contractual measures.
Art. 6 (1) sentence 1 lit. c GDPR for processing operations that are necessary for the fulfilment of a legal obligation.
Art. 6 (1) p. 1 lit. d GDPR if vital interests of the data subject or another natural person make processing of personal data necessary.
Art. 6 para. 1 p. 1 lit. f GDPR if the processing is necessary to protect a legitimate interest of our company or a third party. This also applies if the interests, fundamental rights, and freedoms of the data subject do not override the former interest. In order to be able to base the processing of personal data on a legitimate interest, an assessment is carried out in each case in consultation with the Data Protection Officer for each relevant process, whereby the following three conditions must be met:
- The controller or a third party has a legitimate interest in the processing of personal data.
- The processing is necessary to safeguard the legitimate interest.
- Interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, do not prevail.
3.3. Data deletion and storage period
The users’ personal data will be deleted or blocked as soon as the storage purpose no longer applies. Storage beyond this may take place if this has been provided for by the European or national legislator in Union regulations, laws, or other regulations to which the responsible party is subject. Blocking or deletion of data will also take place if a storage period prescribed by the aforementioned standards expires, unless there is a need for further data storage for the conclusion or performance of a contract.
4. Use of our website, general information
4.1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the user’s computer system. The following information is collected:
- The user’s IP address, date, and time of access.
The described data is stored in our system’s log files. This data is not stored together with other personal data of the user.
4.2. Purpose and legal basis for data processing
The temporary storage of the IP address by our system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
The storage in log files is done to ensure the website’s functionality. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 p. 1 lit. f GDPR.
The collection of their personal data for the provision of our website and the storage of the data in log files is mandatory for the website’s operation. An objection option of the user
4.3. Duration of storage
Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If your data is collected to ensure the provision of the website, the data will be deleted when the respective session has ended.
If your data is stored in log files, it will be deleted after seven days at the latest. Storage beyond this period is possible, in which case the users’ IP addresses are deleted or alienated. An assignment of the calling client is thus no longer possible.
Cookies are used by us to make our homepage more user-friendly. Some elements of our website require that the browser can be identified even after a page change.
The legal basis for the storage of cookies, device identifiers, and similar tracking technologies or for the storage of information in the end user’s terminal equipment, and access to this information is the European ePrivacy Directive in conjunction with the Telecommunications and Telemedia Data Protection Act(TTDSG).
Please note that the legal basis for the processing of personal data collected in this context then results from the GDPR (Art. 6 para. 1 p.1 GDPR). The relevant legal basis for the processing of personal data in each specific case can be found below the respective cookie or the respective processing itself.
The primary legal basis for the storage of information in the end user’s terminal equipment – in particular for the storage of cookies – is your consent, Section 25 (1) sentence 1 TTDSG. The consent is given when visiting our website – which of course does not have to be given – and can be revoked at any time in the cookie settings.
Pursuant to Section 25 (2) No. 2 TTDSG, consent is not required if the storage of information in the end user’s terminal equipment or access to information already stored in the end user’s terminal equipment is absolutely necessary for the provider of a tele-media service to be able to provide a tele-media service expressly requested by the user. You can see from the cookie settings which cookies are to be classified as absolutely necessary (often also referred to as “technically necessary cookies”). They therefore fall under the exception of Section 25 (2) TTDSG and do not require consent.
The following data is stored and transmitted:
- language setting.
The legal basis for the processing of personal data using cookies results from Art. 6 para. 1 p. 1 lit. f GDPR. The purpose of the use of technically necessary cookies is to simplify the use of our website.
We point out that isolated functions of our website can only be offered by using cookies.
We do not use user data collected through technically necessary cookies to create user profiles.
The legal basis for the processing of personal data using cookies for analysis and advertising purposes, if the user has given his consent in this regard, is Art. 6 para. 1 p. 1 lit. a GDPR.
5.2. Cookie consent with Borlabs
This website uses the provider Borlabs (Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany), which sets a technically necessary cookie (Borlabs cookie) to provide you with individual cookie settings and to document them in accordance with data protection laws. If our website is accessed, the following data is transmitted to Borlabs: Your consent or revocation of your consent to set cookies, a cookie set by Borlabs cookie in your browser, the cookie runtime and version, domain and path of the website, and the UID. The UID is a randomly generated ID and not personal information. Borlabs does not process any personal data.
The Borlabs cookie stores your consents that you gave when entering the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.
[borlabs-cookie type=”btn-cookie-preference” title=”Privacy settings” element=”link”/]
6. Your rights / rights of the person concerned
6.1. Right of access
You have the right to receive information from us, as the responsible party, as to whether and which personal data concerning you are processed by us, as well as further information in accordance with the legal requirements under Art. 13, 14 GDPR.
You could assert your right to information at: email@example.com.
6.2. Right to rectification
If the personal data processed by us and concerning you is incorrect or incomplete, you have a right to rectification and/or completion vis-à-vis us. The correction will be made without delay.
6.3. Right to restriction
You have the right to restrict the processing of personal data concerning you in accordance with the legal provisions (Art. 18 GDPR).
6.4. Right to deletion
If the reasons set out in Art. 17 GDPR apply, you may request that the personal data concerning you be deleted without delay.
We would like to point out that the right to erasure does not exist insofar as the processing is necessary for one of the exceptional circumstances mentioned in Art. 17 (3).
6.5. Right to information
If you have asserted the right to rectification, erasure or restriction of processing, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. Furthermore, you have the right to be informed about these recipients.
6.6. Right to data portability
According to the GDPR, you also have the right to receive the personal data concerning you that has been provided to us in a structured, common, and machine-readable format or to request its transfer to another controller.
6.7. Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. We would like to point out that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
6.8. Right of objection
Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 (1) sentence 1 lit. e or f GDPR.
6.9. Automated decision in individual cases including profiling
Under the EU General Data Protection Regulation, you also have the right to not be subjected to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.
6.10. Right to lodge a complaint with a supervisory authority
Finally, if you consider that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace, or the place of the alleged infringement.
7. Data transfer outside the EU
The GDPR ensures an equally high level of data protection within the European Union. When selecting our service providers, we therefore rely on European partners, wherever possible, if your personal data is to be processed. Only in exceptional cases will we allow data to be processed outside the European Union as part of the use of third-party services. We will only allow your data to be processed in a third country if the special requirements of Art. 44 et seq. GDPR are fulfilled. This means that the processing of your data may then only take place on the basis of special guarantees, such as the officially recognized determination by the EU Commission of a level of data protection corresponding to the EU or the observance of officially recognized special contractual obligations, the so-called “standard data protection clauses”.
8. Electronic contact
A contact form is available on our homepage, which you can use to contact us electronically. The data entered in the input mask will be transmitted to us and stored. These data are:
First name, e-mail address, message.
At the time the message is sent, the following data is also stored:
The user’s IP address, date and time of the sending process.
Furthermore, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored.
Your data will not be passed on to third parties in this context. The data will be used exclusively for processing the communication.
The legal basis for the processing of the contact request and its handling is regularly Art. 6 para. 1 p.1 lit. b GDPR.
If further personal data is processed during the sending process, this is only used to prevent misuse of the contact form and to ensure the security of our information technology systems.
Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Regarding personal data from the contact form’s input mask and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation has ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
9. Logging into the ScoopOS customer portal / to perceive our services
You have the possibility to log in to our B2B area on our homepage. For this possibility, it is necessary that you send a corresponding request to your contact person at our company. For this purpose, your first name, last name, and e-mail address will be processed. The data will not be passed on to third parties.
After registration, you have the option of using the B2B portal. With each login, your IP address as well as the date and time of the login are also stored.
The access option and the processing of the corresponding data listed above take place on the basis of the concluded contract (Art. 6 para. 1 p. 1 lit. b GDPR) between us and our customer.
A user login is necessary for the provision of certain content and services on our website, in particular for the use of the respective ScoopOS customer portal.
Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for the data collected during the registration process, when the registration on our website is cancelled or modified.
You have the possibility to cancel the registration on our homepage at any time. To do this, you can send an e-mail to your contact person at our company whenever you like.
10. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in a shortened form, thus excluding the possibility of personal references. Insofar as the data collected about you is related to a person, this is therefore immediately excluded, and the personal data is thus immediately deleted.
We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 (1) p. 1 lit. a GDPR.
Information of the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
User Terms: http://www.google.com/analytics/terms/de.html.
This website uses the web analytics service Matomo to analyse and regularly improve the use of our website. Matomo collects your anonymized IP address, your pseudo-anonymised location (based on the anonymised IP address), date and time, title of the accessed page, URL of the accessed page, URL of the previous page (if this allows), screen resolution, external links, duration of page load, main language of the browser, and the user agent of the browser.
In addition, Matomo creates so-called heatmaps and session recordings, in which your interactions with forms (but not their content), files that have been clicked on and downloaded, the movement of the mouse pointer, as well as the click and scroll behaviour are recorded.
The statistics obtained in this way allow us to improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is your consent, according to Art. 6 para. 1 p. 1 lit. a GDPR.
Cookies are stored on your computer for the evaluation. The information collected in this way is stored by the responsible party exclusively on its server in Germany. You can adjust your consent at any time via your cookie settings.
We use Matomo with the extension “AnonymizeIP”. This means that IP addresses are processed in a shortened form. A direct link to a person can be ruled out. The IP address transmitted by your browser via Matomo is not merged with other data collected by us.
Information from Matomo on data protection is available at https://matomo.org/privacy-policy/.
12. Social Media
12.1. Social Media Plattformen
Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA.
Pinterest Inc, 635 High Street, Palo Alto, CA, 94301, USA.
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany
12.2. Social media presence
We maintain fan pages within various social networks and platforms, with the aim of communicating with customers as well as interested parties / active users and informing them about our services.
We would like to point out that your personal data may be processed outside the European Union in the process, so that risks may arise for you in this regard (for example, when enforcing your rights under European / German law).
User data is usually processed for market research and advertising purposes. For example, usage profiles can be created from the usage behaviour and the users’ resulting interests. These usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the users’ interests. For these purposes, cookies are usually stored on the users’ computers, in which the users’ usage behaviour and interests are stored. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
The processing of the users’ personal data is based on our legitimate interests in effectively informing users and communicating with users pursuant to Art. 6 para. 1 p. 1 lit. f. GDPR. If the users are asked by the respective providers for consent to data processing (i.e., declare their consent, e.g., by ticking a checkbox or confirming a button), the legal basis of the processing is Art. 6 para. 1 p. 1 lit. a. GDPR.
For more information about the processing of your personal data and your objection options, please refer to the links of the respective provider listed below. The assertion of information and other rights of the data subjects can also be made against the providers. In that case, only they will have direct access to the users’ data and possess the corresponding information. Of course, we are available to answer any questions and to support you if you need assistance.
12.3. Google Maps
On this website, we use the offer of Google Maps. This allows us to display interactive maps directly on the website and enables you to comfortably use the map function.
By visiting the website, Google receives the information that you have called up on the corresponding sub-page of our website. In addition, the data mentioned in section IV of this declaration are transmitted to Google. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research, and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
The legal basis for the use of Google Maps is our legitimate interest pursuant to Art. 6 (1) p. 1 lit. f, which is to provide our users with the most extensive and appealing user experience possible.
13. Information obligations when collecting personal data from applicants (Art. 13, Art. 14 GDPR)
13.1. What categories of data do we use, and where do they come from?
- The categories of personal data processed include, in particular:
- Your master data (such as first name, last name, name affixes, nationality).
- Contact details (such as your home address, e-mail address, (mobile) phone number).
- Your professional curriculum vitae, training, school education.
- This may also include special categories of personal data, such as health data, if you include them in your resumé.
Your personal data is generally collected directly from you as part of the application process. In certain constellations, your personal data may also be collected from other bodies (in particular public authorities) due to legal requirements. In addition, we may have received data from third parties (e.g., job placement agencies).
If we do not collect your personal data directly from you in individual cases, we will inform you of this beforehand.
Processing may also take place electronically. This is particularly the case if an applicant submits corresponding application documents to us electronically, e.g., by e-mail or via a web form located on the website.
13.2. Legal basis and purpose of data processing
We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG-neu), and all other relevant laws (e.g., BetrVG, ArbZG, etc.).
Primarily, the collection and processing of data serves the purpose of handling the application process. The primary legal basis for this is Art. 6 (1) b) GDPR in conjunction with Section 26 (1) BDSG-neu.
Where necessary, we also process your data on the basis of Art. 6 (1) f) GDPR in order to protect legitimate interests of us or of third parties (e.g. authorities). This applies in particular to the investigation of criminal offences (legal basis § 26 para. 1 p. 2 BDSG) or in the group for purposes of corporate management, internal communication, as well as other administrative purposes. Your data will be collected for the purpose of filling positions in the entire group of companies (real media technic Staudacher GmbH, Reprotechnik Staudacher GmbH, and Magic Point GmbH). By sending your application by e-mail, you consent to the use of your data in all companies affiliated with the company. You can revoke this consent at any time with effect for the future and without giving reasons, by informing us of your revocation at firstname.lastname@example.org. In the event of a revocation, we will immediately delete your personal data.
Should we wish to process your personal data for a purpose not mentioned above, we will inform you in advance.
13.3 Data access
Within our company, only those persons and departments (e.g., HR department, works council, representatives of the severely disabled, department heads) receive your personal data who are responsible for processing the application procedure and who make the decisions regarding the application process.
13.4. Storage of your data
We will delete your personal data as soon as they are no longer required for the above-mentioned purposes.
If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.
If no employment contract is concluded with the applicant, the application documents will be automatically deleted no later than six months after notification of the rejection decision, provided that no other legitimate interests of the controller conflict with such deletion. Another legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).
13.5. Data transfer
If we transfer personal data to service providers or group companies outside the European Economic Area (EEA), the transfer will only take place if the EU Commission have confirmed the third country to have an adequate level of data protection or if other appropriate data protection guarantees (e.g., binding internal company data protection regulations or EU standard contractual clauses) are in place. You can request detailed information on this and on the level of data protection at our service providers in third countries, using the contact information above.
13.6 Obligation to provide data
As part of the application process, you must provide those personal data that are required for the establishment of the employment relationship or that we are legally obligated to collect. Without this data, we will not be able to execute the employment contract with you.