We process personal data (hereinafter generally referred to simply as “Data”) only where there is necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered on the website.
In accordance with Art. 4 (1) of the Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to simply as “GDPR”), “processing” is defined as any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
I. Information about us as the controller
II. Data protection officer
III. Rights of users and data subjects
IV. Information about data processing
II. Data protection officer
SYNAOS GmbH has appointed a data protection officer. You can contact this officer at any time by sending an e-mail to firstname.lastname@example.org.
III. Rights of users and data subjects
With a view to the data processing described in greater detail below, users and data subjects have the right
- to obtain confirmation as to whether or not their personal data are being processed, access to the personal data being processed and additional information concerning the data processing as well as copies of the data (see also Art. 15 GDPR);
- to obtain the rectification or completion of inaccurate or incomplete data (see also Art. 16 GDPR);
- to obtain erasure of the data concerning them without undue delay (see also Art. 17 GDPR); or alternatively, where continued processing is required in accordance with Art. 17 (3) GDPR, to obtain restriction of processing in accordance with Art. 18 GDPR;
- to receive the data concerning them and provided by them and to obtain the transfer of this data to a different provider/controller (see also Art. 20 GDPR);
- to lodge a complaint with a supervisory authority if they are of the opinion that the provider is processing their personal data in violation of the data protection regulations (see also Art. 77 GDPR).
In addition, the provider is obliged to inform all recipients to whom data is disclosed by the provider concerning any rectification or erasure of data or restriction of processing that occurs on the basis of Article 16, 17 (1) or 18 GDPR. However, this obligation does not apply if this notification is impossible or associated with an unreasonable expense. Without prejudice to this, the user has the right to obtain information concerning these recipients.
In accordance with Art. 21 GDPR, users and data subjects also have the right to object against future processing of their personal data if the data are processed by the provider in accordance with Art. 6 (1) letter f GDPR. In particular, data subjects may object against data processing for the purpose of data marketing.
IV. Information about data processing
Your data that is processed when you use our website will be erased or blocked as soon as the purpose of storage ceases to apply, there are no legal retention obligations which oppose the erasure of the data and no differing statements are made concerning specific processing operations in the following.
a) Session cookies
The processing of these cookies makes our website more user-friendly, effective and secure; for instance, processing makes it possible to display our website in multiple languages or provide a shopping cart function.
The legal basis for this processing is Art. 6 (1) letter b GDPR insofar as these cookies are used to process data for contract negotiation or contract performance.
If the purpose of processing is not contract negotiation or contract performance, our legitimate interest is in improving the functionality of our website. The legal basis in that case is Art. 6 (1) letter f GDPR.
These session cookies are erased when you close your internet browser.
b) Third-party cookies
Our website may also be used with cookies from partner companies with whom we collaborate for the purpose of advertising, analysis or to provide the functions of our website.
You can find the details in this context, particularly concerning the purpose and legal basis of processing for these third-party cookies, in the following information.
c) Option of removal
You can prevent or restrict the installation of cookies by changing the settings of your internet browser. You can also erase previously stored cookies at any time. However, the steps and actions required to do so depend on the specific internet browser you use. In case of questions, please use the help function or documentation for your internet browser or contact the browser’s provider or support service. For Flash cookies, however, processing cannot be prevented by changing your browser settings. Instead, you have to change the settings of your Flash player. Here as well, the steps and actions required to do so depend on the specific Flash player you use. In case of questions, please also use the help function or documentation for your Flash player or contact the relevant provider or support service.
If you prevent or restrict the installation of cookies, this may mean that not all features of our website can be used to their full extent.
We use Google Analytics on our website. This is a web analysis service offered by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
The Google Analytics service helps to analyze the usage behavior on our website. The legal basis is Art. 6 (1) letter f GDPR. Our legitimate interest lies in the analysis, optimization and commercial operation of our website.
Information related to usage and users, such as the IP address, location, time or frequency of visits to our website, will be transferred to a Google server in the USA and stored there. However, we use Google Analytics with the anonymization function. With this function, Google truncates the IP address within the EU or EEA.
Data collected in this way will be used by Google in order to provide us with analysis concerning visits to our website as well as usage activity on our website. This data may also be used to provide additional services related to the use of our website and the internet.
According to Google, they do not aggregate your IP address with other data. Additional information is provided by Google at https://www.google.com/intl/en/policies/privacy/partners concerning data protection, for example the options for preventing their use of data.
We use Google Fonts on our website to display external fonts. This is a service offered by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
Through its certification in accordance with the EU-US Privacy Shield agreement, https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Google guarantees that the data protection requirements for the EU will also be observed in the event of data processing in the USA.
In order to display certain fonts on our website, a connection is established with the Google server in the USA when you visit our website.
The legal basis is Art. 6 (1) letter f GDPR. Our legitimate interest lies in the optimization and commercial operation of our website.
Through the connection established with Google when you visit our website, Google can determine from which website your request was sent and to which IP address the displayed font is to be transmitted.
This website is hosted by an external service provider (host). Personal data that is collected on this website will be stored on the host’s servers. This data may include IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website accesses and other data that is generated via a website. The involvement of a host occurs for the purpose of contract fulfilment for our potential and existing customers (Art. 6 (1) letter b GDPR) and in the interest of secure, rapid and efficient provision of our online platform by a professional provider (Art. 6 (1) letter f GDPR). Our host will only process your data to the extent necessary in order to fulfil its service obligations, and is bound to follow our instructions with regard to your data.
Establishment of a data processing agreement
To ensure that processing is carried out in compliance with the data protection regulations, we have established a data processing agreement with our host.
Online job applications / Publication of job listings
We offer you the possibility of applying to work for us via our website. For these digital applications, we will collect and process your applicant and application data electronically in order to manage the application process.
The legal basis for this processing is section 26 (1) sentence 1 of the Federal Data Protection Act (BDSG) in conjunction with Art. 88 (1) of the GDPR.
If an employment contract is concluded after the application process, we will store the data you submitted when applying in your personnel file for the purpose of the normal organization and administration process – of course, in compliance with all additional legal obligations.
The legal basis for this processing is also section 26 (1) sentence 1 of the BDSG in conjunction with Art. 88 (1) of the GDPR.
If an application is rejected, we will automatically delete all data that is submitted to us 90 days after notification of rejection. However, erasure will not occur if the data must be retained due to legal requirements, for instance burden of proof under the General Equal Treatment Act (AGG), for a longer period of up to four months or until the conclusion of legal proceedings.
The legal basis in this case is Art. 6 (1) letter f GDPR and section 24 (1) no. 2 BDSG. Our legitimate interest lies in legal defense and enforcement.
If you expressly consent to a more extensive storage of your data, for instance to be included in our “talent pool”, processing of the data will continue based on your consent. The legal basis in that case is Art. 6 (1) letter a GDPR. Of course, you may withdraw your consent at any time with future effect in accordance with Art. 7 (3) GDPR by submitting a declaration to us.