MENU

Privacy policy for 42 Heilbronn gGmbH’s website

We are pleased about your visit to our website. In the following, we would like to inform you about how we handle your data in accordance with Art. 13 of the Basic Data Protection Regulation (GDPR).

You can change your privacy settings anytime in the privacy center.

Controller

Responsible for the data processing described below is

42 Heilbronn gGmbH
Bildungscampus 9
74076 Heilbronn
Tel.: 07131-27573-42

E-mail: datenschutz@42heilbronn.de

Usage data

When you visit our web pages, so-called usage data is temporarily evaluated on our web server, in form of a protocol, for statistical purposes and in order to improve the quality of our web pages. This data record consists of

  • the name and address of the requested content,
  • the date and time of the query,
  • the description of the web browser and operating system used,
  • the referral link, which indicates from which page you reached our page,
  • the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established.

The mentioned protocol data will only be evaluated anonymously.

Saving of IP-address for statistical purposes

In addition, we store the complete IP address transmitted by your web browser for a period of seven days to enable us to detect, limit and eliminate attacks on our website. After this period we delete or anonymise the IP address. The legal basis is Art. 6(1)(f) GDPR.

Data security

We take technical and organisational measures to protect your data as thoroughly as possible from unwanted access. We use an encryption procedure on our web pages. Your data is transferred from your computer to our server and vice versa via the Internet using TLS encryption. You can usually tell this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.

Communication by email / telephone / post

Purpose of data processing/legal basis: We will of course treat personal details provided by you by e-mail/phone/mail confidentially. We use your data exclusively for the purpose of processing your enquiry. The legal basis for data processing is Art. 6(1)(f) GDPR. The justified interest here arises from the interest in answering your enquiries and thus in maintaining and promoting customer satisfaction.

Recipients/categories of recipients: As a matter of principle, we do not pass on data to third parties outside 42 Heilbronn gGmbH. Exceptionally, data will be processed on our behalf by data processors. These have been carefully selected in each case, are audited by us and are contractually bound by Art. 28 GDPR.

Duration of storage/criteria for determining the duration of storage: All personal data which you send us in connection with enquiries will be deleted or anonymised by us, provided that this data is no longer necessary and there are no legal obligations to store such data.

If you assert your rights as a data subject, your personal data will be stored for 3 years after the final reply in order to prove that we have provided you with comprehensive information and that the legal requirements have been met.

Communication via our contact form ("Get in touch!")

You have the possibility to contact us via our contact form. To use our contact form we require the data that is marked as mandatory fields. The legal basis for the processing of this data is, in accordance with Art. 6(1)(f) GDPR, our legitimate interest in ensuring the successful processing of your enquiry and to further optimise our service. Your data will be deleted after the final processing of your enquiry, provided that there are no legal storage obligations. With regard to processing in accordance with Art. 6(1)(f) GDPR, you have the right to object at any time. To do so, please contact the e-mail address given in the imprint.

Newsletter registration and dispatch (subscription)

You can order a newsletter on our website. Please note that we require certain data, at least your e-mail address and first name, in order to register you for the newsletter. We need your email address to send you the newsletter and your first name to address you personally and to personalise our emails.

The newsletter will only be sent if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. After placing an order on our website, you will receive a confirmation e-mail to the e-mail address you have provided (so-called double opt-in). You can revoke your consent at any time. An easy way to revoke your consent is, for example, to use the unsubscribe link provided in every newsletter.

As part of the newsletter registration process, we store further data in addition to the data already mentioned, insofar as this is necessary for us to prove that you have ordered our newsletter. This may include the storage of the complete IP address at the time of ordering or confirmation of the newsletter, as well as a copy of the confirmation e-mail sent by us. The corresponding data processing is carried out on the basis of Art. 6(1)(f) GDPR and is carried out in the interest of being able to account for the lawfulness of the newsletter dispatch.  

Our service provider Mailchimp (The Rocket Science Group LLC, 675 Ponce de Leon Ave, NE Suite 5000 Atlanta, GA 30308 USA) supports us in sending the newsletter. The privacy policy of Mailchimp and The Rocket Science Group LLC can be found here [LINK].

 

PROVIDER TECHNICAL FUNCTION OR CONTENT

TRANSFERS TO THIRD COUNTRIES AS SPECIFIED BY THE PROVIDER AND ENSURING AN ADEQUATE LEVEL OF DATA PROTECTION

EXERCISE OF YOUR RIGHT OF OBJECTION
The Rocket Science Group LLC Dispatch of the newsletter Standard Contractual Clauses (SCC) If you wish to object to the processing by our service provider, unsubscribe from the newsletter using the link in the newsletter.

Applications

You have the opportunity to apply for the positions we have listed. To process your application, we need your first and last name, e-mail address, the position you are interested in, a short letter of motivation and, as an attachment, your CV and a letter of application. We process your personal data in accordance with the applicable data protection regulations on the basis of Art. 88 (1) GDPR in conjunction with § 26(1) FDPA. We process the data you provide us with in the context of your application exclusively for the purpose of selecting applicants. Data processing for other purposes will not be carried out.

Google Analytics

For the design of our websites, we use the web analysis tool "Google Analytics" from Google Ireland Limited (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4). Google Analytics creates user profiles on the basis of pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. This enables us to identify recurring visitors and register them as visitors.

Insofar as you have given your consent in accordance with Art. 6(1)(a) GDPR within the framework of the banner, we use cookies from Google Analytics to differentiate, identify and track visitors and to analyse user behaviour.

However, we have activated IP anonymisation on our websites, which means that, within the member states of the European Union, your IP address will be shortened before by Google.

NAME OF THE COOKIE CATEGORY (E.G. GENERALLY REQUIRED, ANALYSIS, SOCIAL MEDIA, ADVERTISING) MANUFACTURER / PROVIDER (E.G. GOOGLE, FACEBOOK) PURPOSE / DESCRIPTION (WHAT ARE THE COOKIES USED FOR?) STORAGE DURATION
_ga analysis Google Visitor tracking. The cookie collects anonymous information about how users use this website for analysis purposes. 2 years
_gid analysis Google The cookie is used in conjunction with _ga to differentiate users. 24 hours
_gat analysis Google Limiting the query rate to increase the efficiency of network traffic 10 minutes

 

You can revoke your consent at any time. Please follow this link and make the appropriate settings via our banner.  

You can read more about how to prevent data transmissions to Google here:

You have the possibility to prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

You can also prevent a detection by Google Analytics by clicking on the following link. An opt-out cookie is set, which permanently prevents the future collection of your data when visiting these websites:

<a href="javascript:gaOptout()"> Click here to object to the processing of your data by Google Analytics </a>

Google's terms of use: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html,  and the data protection declaration: http://www.google.de/intl/de/policies/privacy.

Within the framework of Google Analytics, Google supports us as a processor in accordance with Art. 28 GDPR. The data processing can also take place outside the EU or the EEA. With regard to Google, an appropriate level of data protection can be assumed in accordance with Art. 46(2)(c) GDPR through the use of EU standard contract clauses.

Google Tag Manager

On our web pages we integrate the "Google Tag Manager" of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In the European Union (EU) and European Economic Area (EEA), Google Tag Manager is offered as a service by Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tag management system (TMS) that allows us to integrate and manage additional website content in JavaScript or HTML code.

In particular, it can be used to integrate and manage so-called tags into our website. Tags are small code fragments or markings (web beacons, tracking pixels or similar markings) that enable services for website analysis or user tracking to differentiate or identify users.

The analysis of website visits or user tracking is not carried out by the Google Tag Manager, but by the services used for these purposes, such as Google Analytics or other third-party solutions. Rather, the Google Tag Manager is only used to integrate and manage the markers necessary for analysis or tracking on our website.

As the Google Tag Manager is provided by Google and is reloaded from its servers when the page is called up, the usage data technically required for calling up the page is also transmitted. In this respect, Google also receives your IP address, which for technical purposes, is required to retrieve the content.

The data processing is based on Art. 6(1)(f) GDPR. The purpose and our legitimate interest is to make the administration of our website content efficient. If you do not agree to this, you can object to the data processing under [Link].  

Data processing may also take place outside the EU or the EEA in third countries. We then take measures in accordance with Art. 44 GDPR to ensure an adequate level of data protection.

You can find further information on the handling of personal data by Google at https://policies.google.com/privacy?hl=de.

Google Remarketing

We use Google remarketing technologies from Google so that targeted advertising can be displayed on other websites based on your visit to our website. The data processing takes place on the basis of your consent in accordance with 6(1)(a) GDPR.

If you give your consent, you allow Google to obtain recognition features for your browser or end device (e.g. to create a so-called browser fingerprint), to evaluate your IP address or to save a recognition feature in the form of a small text file on your end device (e.g. a so-called third-party cookie).  It is also possible that Google may link your visit to our website to one or more of these recognition features and store them in order to display our advertising to you on other pages on the Internet. The recognition features described above are designed as pseudonyms and can be used by Google to recognise your end device on other Internet pages. For example, if you visit a page that participates in Google's display advertising network (i.e. displays advertising on behalf of Google), Google may recognise your end device and browser based on the above-mentioned features. We may also add so-called "remarketing tags" to our websites. This means that we can include keywords in our web pages that contain statements about the content of the page displayed (such as product or service categories). The keywords that we use do not contain any personal or sensitive information. Google receives and stores these keywords for the above-mentioned recognition features. This means that when you visit a page that we have tagged with a particular product category, Google stores that tag and associates it with your recognition features. This enables us to instruct Google to place advertisements on other websites based on the pages you visit on our site. So if you visit another website that is part of Google's display advertising network, Google can use the recognition features and the keywords stored for these recognition features to determine whether and, if so, which of our ads should be displayed to you. For more information on how Google remarketing technologies work, please visit https://www.google.com/policies/technologies/ads/.

Data processing may also take place outside the EU or the EEA in third countries. We take measures according to Art. 44 GDPR to ensure an adequate level of data protection.

In principle, we have no influence over further data processing by the third-party provider.

You have the option of selecting settings for advertising. You can object to this form of advertising at any time. To do so, please call up this page at https://support.google.com/ads/answer/2662922 and deactivate personalised advertising. Please note that these settings may not affect all end devices and browsers. Further information is also available at https://support.google.com/ads/answer/2662922.

Remarketing – Facebook Pixel

Within our website, so-called "Facebook pixels" of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), are used. However, this will only be done if you agree to this via the consent banner. In this case, the data processing associated with the pixel is based on your consent in accordance with Art. 6(1)(a) GDPR.

With the help of the Facebook pixel, Facebook is able to determine the visitors of our offering as a target group for the presentation of ads, so-called "Facebook ads". Accordingly, we use the Facebook Pixel in order to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our internet offer. In other words, with the help of the Facebook Pixel we want to ensure that our Facebook-Ads correspond to the potential interest of the users and do not appear bothersome. The Facebook Pixel also enables us to track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users have been directed to our website after clicking on a Facebook ad.

The Facebook pixel is integrated directly by Facebook when you call up our websites and can store a cookie on your device. If you then log in to Facebook or visit Facebook when logged in, the visit to our offer will be noted in your profile. The data collected about you is anonymous to us, so we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible. The processing of the data by Facebook is carried out within the framework of Facebook's Data Usage Policy. Correspondingly, you can obtain further information from the third party provider on how the remarketing pixel works and generally on the display of Facebook Ads: https://www.facebook.com/policy.php.

Data processing may also take place outside the EU or the EEA in third countries. We take measures according to Art. 44 GDPR to ensure an adequate level of data protection.

In principle, we have no influence over further data processing by the third-party provider.

You can revoke your consent to the collection of your personal data by the Facebook pixel and use of your data for the display of Facebook ads [here].

LinkedIn Insight-Tag

We use conversion tracking technology on our website and the retargeting feature of the LinkedIn Corporation. The LinkedIn Insight tag creates a unique LinkedIn browser cookie in a visitor's browser and allows the following information to be collected for that cookie: metadata such as IP address, timestamp and page events (e.g., page views). However, this only takes place if you agree to it via the consent banner. In this case, the data processing associated with the pixel is based on your consent in accordance with Art. 6(1)(a) GDPR.

You can find further information on this at: https://www.linkedin.com/help/linkedin/answer/65521.

This technology allows visitors to this website to receive personalised advertisements on LinkedIn. It also provides the ability to generate anonymous reports on ad performance and website interaction information. LinkedIn Insight tag is embedded in this website, which connects to the LinkedIn server when you visit this website and are logged into your LinkedIn account.

Data processing may also take place outside the EU/EEA in third countries.

We take measures according to Art. 44 GDPR to ensure an adequate level of data protection.

In principle, we have no influence over further data processing by the third-party provider.

Please refer to the LinkedIn Privacy Policy at https://www.linkedin.com/legal/privacy-policy for more information about data collection and use, and the choices and rights you have to protect your privacy. You can withdraw your consent to the collection of your personal information by using the Linkedin Insight tag [here].

Links

Our website may contain links to other websites over which we have no control. For example, there are links to Instagram, Facebook and Linkedin on various sub-pages. The link alone does not create a direct connection to your respective account.

Integration of other technical third-party content and functions

We use the font libraries of Adobe Fonts (Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe)) to display our web pages.

Calling up our pages leads to the downloading of content from the third-party providers who provide these functions and content. The third party provider is thereby informed that you have called up our site and receives the usage data that is required for technical purposes.

We have no influence over further data processing by the third-party provider.

The integration takes place on the basis of Art. 6(1)(f) GDPR and in the interest of making our site as attractive and informative as possible. If you wish to object to the processing, please do not use our site any longer.

PROVIDER

TECHNICAL FUNCTION OR CONTENT

TRANSFERS TO THIRD COUNTRIES AS SPECIFIED BY THE PROVIDER AND ENSURING AN ADEQUATE LEVEL OF DATA PROTECTION

EXERCISE OF YOUR RIGHT OF OBJECTION

Adobe Systems Incorporated

Adobe Fonts

Standard Contractual Clauses (SCC)

If you wish to object to the processing, please do not use our site anymore.

The data processing also takes place outside the EU or EEA. An adequate level of data protection in accordance with Art. 46(2(c) GDPR can be assumed through the use of EU standard contractual clauses. For further information please follow this link: https://www.adobe.com/privacy/eudatatransfers.html.

Storage period

Unless we have already informed you in detail about the storage period, we delete personal data if they are no longer required for the aforementioned processing purposes and no legal storage obligations prevent deletion.

Additional data processors / hosting service providers

We pass on your data to service providers who support us in the operation of our websites and related processes on the basis of a data processing agreement in accordance with Art. 28 GDPR. This concerns the hosting service provider Magmell GmbH (Magmell GmbH, Weipertstr. 8-10, 74076 Heilbronn) for our website. Our service providers are strictly bound by our instructions and are correspondingly also contractually bound to us.

PROCESSOR

PURPOSE

ADEQUATE LEVEL OF DATA PROTECTION

Magmell GmbH

Webhosting and support

Where processing also takes place outside the EU/EEA as part of subcontracting, EU standard contractual clauses have been concluded.

Data security

In order to protect your data as thoroughly as possible from unwanted access, we take technical and organisational security measures. In addition to securing the operating surroundings, we use an encryption procedure on our website. Your data is transferred from your computer to our server and vice versa via the Internet using TLS (Transport Layer Security) encryption and is checked for authenticity to prevent misuse of the data by third parties. You can tell this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with "https://".

Your rights as a data subject

When processing your personal data, the GDPR grants you, as a data subject, certain rights:

Right of access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to be informed of this personal data and to receive the information specified in Art. 15 GDPR.

Right to rectification (Art. 16 GDPR)

You have the right to request immediately the rectification of incorrect personal data concerning you and, if necessary, the completion of incomplete data.

Right to erasure (Art. 17 GDPR)

You have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR)

You have the right to demand that the processing be restricted if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have lodged an objection to the processing, for the duration of the examination by the controller.

Right to data portability (Art. 20 GDPR)

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transfer of such data to a third party.

Right of withdrawal (Art. 7(3) GDPR)

If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7(3) GDPR. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected by this.

Right to object (Art. 21 GDPR)

If data is collected on the basis of Art. 6(1)(f) GDPR (data processing to safeguard legitimate interests) or on the basis of Art. 6(1)(e) GDPR (data processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority) you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you is in breach of the GDPR. The right of complaint may be asserted in particular before a supervisory authority in the Member State of your habitual residence, your place of work or the place of the suspected infringement.

Exercise of your rights

Unless described otherwise above, please contact the department stated in the imprint to exercise your rights.

Contact details of the data protection officer

Our external data protection officer will be happy to provide you with information on data protection under the following contact details:

Datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg

Web: www.datenschutz-sued.de
E-mail: office@datenschutz-sued.de

If you contact our data protection officer, please also indicate the responsible office named in the imprint.