1.1 Log files
Every time you access the website and depending on the use of certain functions on it, data such as the date and time of access, your IP address and the content accessed by your browser are transmitted to our server and stored in log files in order to provide you with the requested content and to ensure the functionality and security of our systems.
The log files are deleted or anonymized after seven days at the latest. If and as long as there is a suspicion of security-related access, the relevant data will be stored for the duration of the investigation of the potential attack and, if necessary, the implementation of countermeasures, in particular the enforcement of legal claims.
The legal basis for the aforementioned processing is our interest in a stable and secure website (Art. 6 para. 1 sentence 1 lit. f GDPR).
Specifically, the following data categories are processed in this context:
- Time (date and time) of the request
- URL of the requested content
- IP address
- Amount of data transferred
- Access status (e.g. “file transferred” or “file not found”)
The data mentioned will not be passed on to third parties.
Without the provision of this data, the use of the website is not possible.
1.2 Cookies
We use cookies to enable and optimize the use of our website. In addition to cookies that are necessary for session control, we use persistent cookies to store preferences (e.g. language settings). You can disable cookies in your browser, but this may affect the use of certain functions. Since cookies are used in various services on the website, we provide information about the respective processed data categories in the information on the respective service.
1.3 Borlabs Cookie
We use the consent management tool “Borlabs Cookie” from Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany. This tool enables us to record and manage our users’ consent to the use of cookies and similar technologies in a legally compliant manner.
When you visit our website, Borlabs Cookie stores a cookie in your browser to record and document the consent given or refused for the individual cookie categories. This cookie does not store any personal data, but only your consent (or refusal) to the use of certain cookies and an anonymized identification code, which on the one hand enables the assignment of consent and on the other hand avoids a new request as long as the settings are not changed.
We use Borlabs Cookie on the basis of our interest in operating a website with user-friendly consent management (Art. 6 para. 1 sentence 1 lit. f DSGVO) and are also obliged to provide evidence of data protection conformity (Art. 6 para. 1 sentence 1 lit. c DSGVO).
The consent data is stored for the legally required duration and then automatically deleted. You can change your cookie settings and consent at any time by clicking on the orange shield icon with the fingerprint in the lower right corner of this page and adjusting your preferences or revoking consent there.
Further information on data processing by Borlabs Cookie can be found in the privacy policy of Borlabs GmbH at https://borlabs.io/privacy/
You can voluntarily provide personal or business data to use certain services on our website (e.g. contact forms). This data is used exclusively to provide the respective service.
The legal basis for this is Art. 6 (1) (b) GDPR. The data will be deleted after the respective service has been provided, provided that there are no statutory retention requirements.
3.1 Matomo
Our website uses Matomo, an open-source software for analyzing visitor access. Your IP address will be shortened and anonymized. The pseudonymized user data generated will not be passed on to third parties and will be used exclusively to improve our website.
The processing is carried out on the basis of our legitimate interest in accordance with Art. 6 (1) point f GDPR.
3.2 Google Tag Manager
We use Google Tag Manager on our website. This is a tool from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), which allows us to centrally manage and execute certain tags and codes for tracking and analysis tools on our website.
Google Tag Manager itself does not process any personal data, but only allows the management of tags used by other services that may collect/process data.
Data transfer to Google servers in the US cannot be ruled out. Google is certified according to the EU-US Data Privacy Framework (adequacy decision of the EU Commission according to Art. 45 GDPR) and is also committed on the basis of the standard contractual clauses (SCC) of the European Commission (Art. 46 GDPR) to ensure an adequate level of data protection. For more information, please refer to Google’s privacy policy at https://policies.google.com/privacy.
The legal basis for the processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO, which you can declare and revoke via the consent management tool used on the website. You can adjust your privacy settings by clicking on the orange shield icon with the fingerprint in the lower right corner of this page.
3.3 Google Analytics
We use the “Google Analytics” analysis tool, a Google service, to evaluate visits to this website so that we can continuously optimize our website. The following information in particular is processed:
- IP address (truncated);
- (sub)pages accessed;
- visitor behavior on the pages (e.g. clicks, scrolling behavior and length of stay);
- the visitor’s approximate location (country and city);
- technical information such as the browser used, internet service provider, end device and screen resolution;
- the source of your visit (i.e. which website or advertising medium you came to us through);
You can prevent these cookies from being set by selecting the appropriate settings on your browser software, as described under “Cookies”.
We collect the IP address so that the analysis service can distinguish between different visitors and so that we can see which countries, regions and cities our visitors come from. However, we shorten the IP address during collection so that we cannot specifically identify you.
The legal basis for the processing is your consent in accordance with Art. 6 (1) 1 lit. a GDPR, which you can declare and revoke via our consent management tool.
Data from each individual visit is deleted 14 months after it is collected.
Google Analytics is provided by Google LLC, USA, which receives your data in order to provide us with the analysis service.
Your data will be transmitted to the USA as described. Google is certified according to the EU-US Data Privacy Framework (adequacy decision of the EU Commission according to Art. 45 GDPR) and is also committed to ensuring an adequate level of data protection on the basis of the standard contractual clauses (SCC) of the European Commission (Art. 46 GDPR). For more information, please refer to Google’s privacy policy at https://policies.google.com/privacy.
3.4 WPML (WordPress Multilingual Plugin)
We use the WordPress plugin “WPML” (“WordPress Multilingual Plugin”) from OnTheGoSystems Ltd, 22/F 3 Lockhart Road, Wanchai, Hong Kong, on our website to provide multilingual content and to enable our users to easily switch between language versions.
WPML sets functional cookies to store the selected language (preference) of a visitor. WPML does not store any user-related information.
The cookies for storing language preferences are stored for the duration of your visit or according to your browser settings and are then deleted. You can adjust or prevent the storage of cookies via your browser settings.
Further information on data processing by WPML and the OnTheGoSystems privacy policy can be found at https://wpml.org/documentation/privacy-policy-and-gdpr-compliance/.
3.5 Personio
The first time you visit this website, it loads job offers from our recruiting tool “Personio” from Personio GmbH, Rundfunkplatz 4, 80335 Munich, Germany, into a cookie in your browser that is deleted after 24 hours. No personal data is processed in this process; the cookie simply ensures that your browser does not have to repeatedly load the same information within 24 hours. If you wish to disable this cookie feature, please disable the cookies feature for the website in your browser.
Unless otherwise agreed with our business partners, we only process personal data of theirs for the purposes of the business relationship, e.g. for communication, processing enquiries, and rendering contractual services (legal basis: fulfilment of the contract pursuant to Art. 6 para. 1 lit. b GDPR), in the context of fulfilling our legal obligations (legal basis: legal obligation pursuant to Art. 6 para. 1 lit. c GDPR), and insofar as our interests justify data processing in individual cases (legal basis: balancing of interests in accordance with Art. 6 para. 1 lit. f GDPR, whereby our interests may be, e.g., the effective provision of our services, direct marketing or the security of our infrastructure).
The data is stored for as long as is necessary for the purposes mentioned or as long as we are legally obliged to do so, and third parties only receive data insofar as this is necessary to fulfil the contract with the respective business partner or if we are legally obliged to do so.
If you apply to us via our application portal (https://www.faktorzehn.com/de/karriere/jobs/), on our behalf operated by Personio SE & Co. KG Seidlstraße 3 80335 Munich, Germany) or by other means, e.g. by direct e-mail, all information provided to us is voluntary, but we naturally need meaningful information about your professional qualifications so that we can consider you for the position to be filled. We process the data provided to us during the application process for the purpose of handling this application process, which also includes passing on your data to other companies in the Convista Group if we believe that you are a better fit for a position at the respective company.
If we hire you, we will transfer your data to your personnel file. Otherwise, there are two options: Either we keep your application data for 180 days from the end of the application process (or, in the event of disputes regarding the legal conformity of the application process, for as long as necessary for clarification) in order to be able to answer follow-up questions, or – if you give us your consent – we include you in our talent pool, in which we store your data for 5 years from the end of your application process. We will be happy to delete your application documents earlier in both scenarios if you request us to do so, provided that there is no legal obligation to retain them.
The legal basis for processing your data for the usual application process is that it is necessary for carrying out the application process (Art. 6 (1) (b) GDPR), for inclusion in the talent pool it is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR), for the transfer of application data to other companies in the Convista Group, our interest in effective personnel development (Art. 6 para. 1 sentence 1 lit. f GDPR).
5.1 YouTube videos
Some pages of our website have embedded videos from the YouTube platform, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. These videos are embedded in what YouTube calls “privacy-enhanced mode”, which, according to YouTube, ensures that no information about visitors to our site is transferred to YouTube unless the videos are played.
As soon as you play an embedded YouTube video, a connection to the YouTube servers is established and YouTube receives the information that you have visited our website. In doing so, cookies and similar technologies may also be set, which YouTube uses to collect information about your user behavior. If you are logged in to YouTube or another Google service, Google may be able to link this information to your user account.
The legal basis for the data processing described above is your consent (Art. 6 (1) (a) GDPR), which you give by activating the videos.
Your data will also be transmitted to the USA in this process. Google is certified according to the EU-US Data Privacy Framework (adequacy decision of the EU Commission according to Art. 45 GDPR) and is also committed to ensuring an adequate level of data protection on the basis of the standard contractual clauses (SCC) of the European Commission (Art. 46 GDPR). For more information, please refer to Google’s privacy policy at https://policies.google.com/privacy. You can also find information there about the storage and deletion of the collected data. You can prevent the embedding of YouTube videos and the associated data processing by disabling the playback of videos on our website.
5.2 Vimeo videos
The website also embeds videos from the Vimeo platform, a service provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. We use Vimeo to make our website more attractive. As soon as you play an embedded Vimeo video on our website, a connection to the Vimeo servers is established and Vimeo receives the information that you have visited our website. Vimeo may also use cookies and similar technologies to collect information about user behavior. If you are logged in to Vimeo, Vimeo may be able to link this information to your user account. We do not store any of the data mentioned here.
The data processing mentioned is based on your consent (Art. 6 para. 1 sentence 1 lit. a DSGVO), which you give by activating the videos.
Vimeo is certified according to the EU-US Data Privacy Framework (adequacy decision of the EU Commission according to Art. 45 DSGVO) and is also committed on the basis of the standard contractual clauses (SCC) of the European Commission (Art.46 DSGVO) to ensure an adequate level of data protection. For more information, please see Vimeo’s privacy policy at https://vimeo.com/privacy.
The data collected by Vimeo is stored in accordance with their guidelines and can be influenced by the settings of your Vimeo account. You can prevent Vimeo from processing data by disabling the playback of videos or by blocking Vimeo cookies in your browser settings.
As a data subject, you have the right to:
- Information;
- Correction/deletion;
- Restriction of processing;
- Objection to processing;
- Data portability.
You also have the right to complain to a data protection supervisory authority about our processing of your personal data. If you have any questions regarding the processing of your data, please feel free to email us at dpo@convista.com or contact us at the above address.