I. General information and legal basis
The following declaration informs you about what kind of personal data is collected for what purpose on this website by us as the responsible body and to what extent this data is made accessible to third parties.
1. Responsible entity:
AMANA consulting GmbH
Veronikastraße 36, 45131 Essen
Data Protection Officer
datenschutz nord GmbH
Kurfürstendamm 212, 10719 Berlin
2. Legal bases of the processing
The processing of personal data requires a legal basis, which we would like to present to you below.
In the case of processing of personal data for which we obtain the consent of the data subject, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) DSGVO serves as the legal basis. This also includes processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Article 6 (1) lit. c DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Article 6 (1) lit. f DSGVO serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities as well as in the analysis, optimisation and maintenance of the security of our online offer.
II. Log files, hosting
In the server statistics, data is automatically stored that the browser transmits to us as part of our legitimate interest in analysis and for security reasons (so-called "log files").
In detail, these are the following data:
- Language and version of the browser software
- Operating system used and its interface
- Referrer URL (the previously visited page)
- Host name of the accessing computer (IP address)
- Date and time of the server request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- data volume transferred
- Access status/ HTTP status code.
As a rule, we cannot assign this data to specific persons. This data is not merged with other data sources. The data is also deleted after a statistical evaluation within 100 days. Data whose further retention is required for evidentiary purposes is exempt from deletion until the respective incident is finally clarified.
We make use of hosting services. These serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services in order to maintain the operation of this online offer.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer.
III. Contractual processing
The personal data provided by you for contractual purposes in the case of quotation requests, for example, such as name, address or e-mail address, are only used internally to answer your queries, process your orders or provide you with access to certain contractual information.
IV. Contact, application data
When you contact us by e-mail or via the contact form, your details will be stored by us in order to answer your questions.
As a matter of principle, data will not be passed on to third parties unless applicable data protection regulations justify a transfer or we are legally obliged to do so. You can revoke your consent at any time with effect for the future. In the event of revocation, your data will be deleted immediately unless there is a legal exception for further processing. Your data will otherwise be deleted when we have processed your request or the purpose of storage has ceased to apply and there are no other legal exceptions to the contrary.
2. Application data
You can also apply to us in various ways, such as via our applicant portal or by e-mail.
We process the data you have sent us in connection with your application in order to assess your suitability for the position (or other open positions in our company, if applicable) and to carry out the application process.
The data provided will be processed and used exclusively for the purpose of selecting applicants.
By submitting your application, you agree to be contacted and informed in writing and / or by telephone as part of and for the purpose of the application process. Please note that your data will not be stored anonymously, but will be accessible to our human resources department and to the departments relevant to the position to be filled.
We wish to assess all applicants only on the basis of their qualifications, irrespective of race, ethnic origin, gender, religion or belief, disability, age or sexual identity. We therefore ask that you refrain from making such statements in your application if at all possible.
The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible.
Should the data be required for legal prosecution after the application process has been completed, data processing may be carried out on the basis of the requirements of Art. 6 DSGVO, in particular in order to safeguard legitimate interests pursuant to Art. 6 para. 1 lit. f) DSGVO. Our interest then consists in the assertion or defence of claims.
Data of applicants will be deleted after 6 months in case of rejection. In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after two years.
If you have been accepted for a position as part of the application process, the data will be stored permanently for the purpose of implementing the employment relationship that has then begun.
You can have your application changed or deleted at any time and revoke your consent. Contact our team for this purpose. You can also find your other rights under "Data subject rights".
We only set cookies that are not strictly necessary with your consent. You can revoke this consent at any time for future use.
Consent is voluntary and you can also use our website without accepting cookies. You can also configure your browser settings according to your wishes and, for example, refuse to accept third party cookies or all cookies or delete cookies that have already been stored. If you do not accept cookies, please note that in this case our website may not function properly. If we do not provide any other information on the individual topics mentioned in this data protection declaration or in the cookie banner, the lifetime of the cookies refers to 24 months.
If you would like to receive the newsletter offered on our website, we require a valid e-mail address from you that allows us to verify that you are the owner of the specified e-mail address or that the owner agrees to receive the newsletter.
After providing the e-mail address, we will send you a confirmation e-mail to the address provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm this within 24 hours, your data relating to the newsletter dispatch will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe from the newsletter.
We only send newsletters with your consent or legal permission.
We work together with a shipping service provider. According to its own information, the dispatch service provider can use this data in pseudonymous form, i.e. without assigning it to a user, to optimise or improve its own services, e.g. to technically optimise the dispatch and presentation of the newsletter or for statistical purposes to determine which countries the recipients come from. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.
The newsletter is sent by CleverReach GmbH & Co KG, Mühlenstr. 43, 26180 Rastede, Germany, referred to as the "dispatch service provider". You can view the data protection provisions of the dispatch service provider here: https://www.cleverreach.com/de/datenschutz/.
You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time. You will find a link to cancel the newsletter at the end of each newsletter. If users have only registered for the newsletter and cancelled this registration, their personal data will be deleted.
Our website offers you registration and login options for the download offers. The personal data entered during registration or login will be transmitted to the data controller. The data is stored by us exclusively for internal use.
When registering/logging in, the IP address of the user as well as the date and time are stored. This serves to prevent misuse of the services. The data is not passed on to third parties. An exception exists if there is a legal obligation to pass on the data.
The registration of data is necessary for the provision of content or services. Registered persons have the option of having the stored data deleted or amended at any time. The data subject may obtain information about the personal data stored about him or her at any time.
VIII. Our presences in social media
You can find us under online presences within social networks and platforms. We would like to use these presences to communicate with our customers, interested parties and users who are active there and to inform them about our services and our company in this way.
The processing of the personal data of the users active there is based on our legitimate interests in communicating and providing information to and with the users. If users have given their consent to data processing within the framework of the respective social platform, the processing is carried out on the basis of this consent.
If you visit one of our social media sites, we are jointly responsible with the operator of the social platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint, see the following point "Rights of the data subject") both against us and against the operator of the respective social platform.
We would like to point out that despite the joint responsibility, we do not have full influence on the data processing procedures of the social platform and, if necessary, forward the rights request to the respective operator for better processing of the data subject rights. Our options are basically based on the company policy of the respective provider.
Depending on the following named social platform, the data processing of users may also take place outside the area of the European Union. EU standard contractual clauses have been agreed with the US companies so that we have taken possible measures to ensure compliance with European data protection law.
User data is usually processed by the platforms for market research and advertising purposes. For example, usage profiles can be created from the usage behaviour and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies are usually stored on the users' computers, in which the usage behaviour and the interests of the users are stored. Data can also be stored in the user profiles independently of the devices used by the users. This occurs in particular if the users are members of the respective platforms and are logged in to them.
For a detailed presentation of the respective processing and the objection options, we refer to the information of the providers linked below.
- Facebook (pages, groups)
(Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
The basis is an agreement on joint processing of personal data: https://www.facebook.com/legal/terms/page_controller_addendum
- Google/ YouTube
(Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
(LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
(XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany)
IX. Disclosure of data to third parties: General and contractual purpose
We pass on data to third parties if this is necessary for the fulfilment of the contract and / or we are legally obliged and / or entitled to do so in individual cases.
X. Disclosure of data to third parties: tools for the economic operation of the website
In some cases, we use external service providers within the scope of your consent or our legitimate interests with regard to the analysis, optimisation and economic operation of the online offer. If you have given your consent for tools that are not necessary for the operation of the website, you can have these settings changed again at any time. We list our service providers below.
If your data is to be used for other purposes, we will inform you in advance and only use the data if you have previously given your express further consent.
1. Service provider Google
Within the scope of your consent, we use services for the optimisation and economic operation of our online offer for which Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") is responsible.
EU standard contractual clauses have been agreed with Google so that we have taken possible measures to ensure compliance with European data protection law.
a. Google AdWords and Conversion Tracking
We use the provider YouTube, a service from Google, to embed videos.
Through the YouTube cookies, we receive statistical values on the retrieval of individual videos embedded in the website without a reference to the respective user.
The embedded videos from YouTube are used within the scope of permitted use by YouTube, which all users must accept. If you see copyrights violated, please report this directly to YouTube. We use embedded YouTube videos in extended data protection mode. This means that YouTube does not store cookies for a user who views a website with an embedded YouTube video player, but does not click on the video to start playback. If the YouTube video player is clicked, YouTube may store cookies on the user's computer. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by YouTube. For more information on YouTube's official data protection policy, please visit https://www.google.de/intl/de/policies/privacy/ and https://support.google.com/youtube/answer/171780?hl=de.
Within the scope of your consent, we use services of the social network facebook.com, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), for the analysis, optimisation and economic operation of our online offer.
EU standard contractual clauses have been agreed with Facebook so that possible measures have been taken to ensure compliance with European data protection law.
a. Facebook Social Plugins
Our website uses social plug-ins ("plug-ins") from Facebook. The plug-ins are marked with a Facebook logo (white "f" on a blue tile, the terms "Like", "Like" or a "thumbs up" sign) or the addition "Facebook Social Plug- In".
When you call up a website on our website that contains such a plug-in, your browser establishes a direct connection with the Facebook servers.
The content of the plug-in is transmitted directly to your browser by Facebook and integrated into the website by it. This transmits personal information such as your IP address, URL, date and time as well as other browser-related information to Facebook and stores it in the USA, whereby according to Facebook in Germany only an anonymised IP is collected.
If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plug-ins, for example by clicking the "Like" button or leaving a comment, the corresponding information is transmitted directly from your browser to Facebook, stored there and, depending on your Facebook settings, shared with your Facebook contacts. If you do not wish this to happen, please log out of your Facebook account (before pressing the opt-in button).
You can additionally change your privacy settings on Facebook in your account settings.
Functions of the Twitter service are integrated on our pages. These functions are offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA ("Twitter"). EU standard contractual clauses have been agreed with Twitter so that possible measures have been taken to ensure compliance with European data protection law.
When you visit a website of ours that contains such a plug-in, your browser establishes a direct connection with the servers of Twitter.
Twitter only stores tailored content together with browser cookies or device IDs and separates this from other data, such as information on pages visited. After a maximum of 10 days, Twitter starts deleting, de-identifying or collecting this data.
By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter in the process. If you do not wish this to happen, please log out of your Twitter account (before pressing the opt-in button).
You can change your Twitter privacy settings in your account settings at http://twitter.com/account/settings.
The "XING Share Button" is used on this website. This function is operated by XING AG, Dammtorstr. 30, 20354 Hamburg ("XING").
If you click on the XING Share button on our website, you will be redirected to the XING homepage, where you can then - as soon as you are logged in - recommend the link to your page. This link will be inserted automatically. The current data protection information on the "XING Share Button" and supplementary information can be found on this website: https://dev.xing.com/plugins/share_button/privacy_policy
Plug-ins of the social network LinkedIn of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn"), are integrated on our pages. EU standard contractual clauses have been agreed with LinkedIn, so that possible measures have been taken to ensure compliance with European data protection law.
6. LinkedIn Retargeting
We use the retargeting tool and conversion tracking of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"). For this purpose, the LinkedIn Insight Tag is integrated on our website, which enables LinkedIn to collect statistical, pseudonymous data about your visit and use of our website and to provide us with corresponding aggregated statistics on this basis. As a rule, the following information, among others, is collected:
- LinkedIn User ID (Cookie ID)
- IP address
- Metadata of the website visit, e.g. browser type, website visited
In addition, this information is used to be able to show you interest-specific and relevant offers and recommendations after you have informed yourself about certain services, information and offers on the website. This information is stored in a cookie.
If you wish to prevent this tracking, you can do so via the privacy settings in our cookie banner.
In addition, this information is used to send you messages (InMail) that are individually adapted to you via LinkedIn.
If you do not wish to be contacted via LinkedIn, you can change and revoke your consent at any time in your LinkedIn settings: https://www.linkedin.com/help/linkedin/answer/87150/linkedin-marketing-solutions-und-die-datenschutz-grundverordnung-dsgvo-?lang=de
7. Matomo with cookie tracking
This website uses Matomo, an open-source software for the statistical analysis of accesses by visitors. The analysis tool Matomo uses so-called "cookies", which are text files that are stored on your computer and enable an analysis of your use of our website. The information generated by the cookie about your use of this website is stored on our server in Germany. This site uses Matomo with the extension "AnonymizeIP". This means that IP addresses are processed in abbreviated form, which means that direct personal references can be ruled out.
If you no longer agree to the storage and evaluation of the generated usage information, you can object to this in the cookies.
We use the consent management service Cookiebot, of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (Cybot). This enables us to obtain and manage consent from website users for data processing. Cookiebot offers us the possibility to provide a privacy compliant cookie notice to our website visitors. In addition, all cookies and tracking measures on our website are scanned and controlled by Cookiebot's technology. By using this function, data from you can be sent to Cookiebot or Cybot, stored and processed.
The processing is necessary for the fulfilment of a legal obligation (Art. 7 para. 1DSGVO) to which we are subject (Art. 6 para. 1 p. 1 lit. c DSGVO). For this purpose, the following data is processed with the help of cookies:
- IP address (in anonymised form, the last 3 digits are set to 0)
- Date and time of consent
- Website URL from which the consent was sent
- Technical browser data
- Anonymous, random and encrypted key
- the cookies you have allowed (as proof of consent)
You can find further information on data processing and notes on data protection at "Cookiebot" or Cybot under the following link: https://www.cookiebot.com/de/privacy-policy/.
When you register for webinars, the following data is mandatory to support the process:
- First and last name
- E-mail address
- Phone number
- Address, city and postcode
After the webinar, aggregated statistical data is transmitted to us. If you ask a question during the webinar, this is also visible to us.
When you register to attend, you will receive further information and reminders about the event by email during the event period. Insofar as you have provided us with personal data by registering for one of our webinars, we will only collect, process and use this data for the purposes of providing our website and the services and software solutions offered on it. The marketing communications, newsletters and e-mails refer exclusively to our products and services offered.
10. Friendly automate
XI. Rights of the data subject
You have a right to information about the personal data we have stored about you. According to the legal provisions, you also have the right to correct incorrect data, restrict processing, data portability and deletion of your personal data. To do this, send us an e-mail with the subject "Data protection".
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that any processing of personal data relating to you is in breach of the law.
For reasons arising from your particular situation, you may object at any time to us processing your personal data on the basis of Article 6 (1) (e) or (f); this also applies to profiling based on these provisions (Article 21 DSGVO). If the legal requirements are met, we will subsequently no longer process your personal data.
In the case of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is connected with such direct advertising.
Your objection has the effect that the personal data will no longer be processed for these purposes.
If you have given your consent, you have the right to revoke your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
XII. Storage period of the personal data
If we have not provided storage information on the specific points, the following applies: We store personal data for the duration of the respective statutory retention period or as long as the purpose of the collection exists. After expiry of the retention period, the data is routinely deleted unless it is necessary for the initiation or fulfilment of a contract. If user data is not deleted because it is required for other and legally permissible purposes, its processing is restricted as far as possible. Accordingly, the data will be blocked if possible and not processed for other purposes. This applies, for example, to user data that must be retained for reasons of commercial or tax law.
XIII. Safety information
We make every effort to process your personal data by taking all technical and organisational measures to comply with the provisions of data protection laws and thus to protect this data. Our website and communication with us via our website is encrypted via HTTPS.
This data protection declaration was provided by the Sieling law firm - Fachanwaltskanzlei für IT-Recht.
Code for Case 00891988 V OV CEOV1411131669: 0ftmy