Privacy Policy / Terms of Use
Information pursuant to Art. 13 and 14 GDPR
We hereby inform you in line with the requirements of Art. 13 and 14 of the General Data Protection Regulation (GDPR) regarding the processing of your personal data that is collected, as well as your data protection rights in this context. To ensure that you are fully informed about the processing of your personal data, please make note of the following information.
1. Controller and data protection officer
The controller within the meaning of the GDPR for the processing of your personal data is
SysEleven GmbH
Boxhagener Straße 80
10245 Berlin, Germany
If you have questions or complaints regarding data protection, you can also reach our data protection officer at:
datenschutz@syseleven.de
2. Processing operations
The following explanations describe which data we process for which purposes, and on which legal basis the processing occurs.
Data processing in log file when visiting our website
When you visit our website, the browser you use automatically transfers the following information to the servers of our website, which is temporarily saved in a “log file”:
- IP address of the requesting computer
- Name of the requested file
- Date and time of request
- Access methods/functions preferred by the requesting computer
- Access status of the web server
- The URL from which the file was requested, and
- Operating system and browser type as well as browser settings.
By processing these data, we are pursuing the purpose of administrative website maintenance with regard to establishing a connection as well as system security and stability. The saved data are exclusively used for the purposes of identification and tracing of inadmissible access attempts/accesses to the web server, as well as for statistical analysis such as visitor numbers and website popularity. We have a legitimate interest in this regard pursuant to Art. 6 (1) Sentence 1 (f) GDPR. Please note that you may be entitled to a right of cancellation. The data will be erased once the purpose has been fulfilled. This is generally the case after seven days.
Consent Manager
We use a Consent Manager in order to optimally record and manage the consents obtained from our users in conjunction with cookies and other tracking mechanisms. In this process, other data is collected such as the IP address, consent status as well as device information. Session cookies are used for this purpose: these are small text files that your browser creates automatically and stores on your device (PC, laptop, tablet, smartphone) when you visit our website.
The legal basis for using the Consent Manager is Art. 6 (1) Sentence 1 (f) GDPR, as we have a legitimate interest in data protection-compliant documentation and collection of your consent in the scope of your choice.
Contact form and requests via e-mail, phone or fax
If you contact us via e-mail, phone or fax, your request including all personal data contained therein (name, request) will be saved and processed by us for the purpose of processing your request. We will not forward these data without your consent.
If you contact us via the contact form on our website, the IP address along with date and time that your message was sent will be saved along with the message. We also save the following personal data as mandatory information (marked with a “ * ” as a mandatory field): First name, last name, e-mail, phone number, postal code (address) and your message.
The processing of these data occurs on the basis of Art. 6 (1) Sentence 1 (b) GDPR as long as your request is associated with the performance of a contract or is required for measures taken prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effective processing of requests addressed to us (Art. 6 (1) Sentence 1 (f) GDPR) or on your consent (Art. 6 (1) Sentence 1 (a) GDPR), insofar as this was requested.
The data you transmit to us within the context of your request will be stored by us until you request erasure, withdraw your consent to storage or the purpose of data storage ceases to apply (e.g. after your request has been fully processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.
Creating a user or test account
If you create a user or test account for the purpose of use, we process information in order to guarantee use and to establish contact.
During the registration process on our website and the use of the specific account, various data are collected (divided into voluntary and required information). As a rule and depending on user behaviour, the following categories of data are involved: Name, company name, e-mail, phone number, postcode (address), message text, IP address along with date and time of registration, tax number, VAT ID, payment method and payment information. When using the account, information is processed regarding offers that are requested and issued, usage history and information about any credit provided.
The processing of these data occurs on the basis of Art. 6 (1) Sentence 1 (b) GDPR as long as your request is associated with the performance of a contract or is required for measures taken prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effective processing of requests addressed to us (Art. 6 (1) Sentence 1 (f) GDPR) or on your consent (Art. 6 (1) Sentence 1 (a) GDPR), insofar as this was requested.
The data you transmit to us within the context of your request will be stored by us until you request erasure, withdraw your consent to storage or the purpose of data storage ceases to apply (e.g. after the user deletes the account). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.
Web analysis services
In order to ensure needs-based design and ongoing optimization of our website as well as to adapt to the technical circumstances of our users, we use analysis tools. These tools collect information, for instance concerning user behaviour on our website and technical details, e.g. the percentage using new technologies and the reach of our services. This makes it possible to analyse your use of the website, compile reports about website activity and perform other services connected with the website use and Internet use for the purpose of market research and needs-based design of this website.
To do so, we engage service providers who may also aggregate data from their own separate sources together with your data and expressly reserve the right in some cases to further process these data for their own purposes. In such cases, we have no influence on the specific use and erasure of your data by the third-party provider that occurs as a result. You can prevent this by not consenting to the transfer of data to such tools in the Consent Manager we have installed, since any collection of your data for web analysis purposes occurs exclusively based on a consent granted by you in accordance with Art. 6 (1) Sentence (1)(a) GDPR. After granting consent, you can withdraw your consent at any time with future effect by calling up the Consent Manager again and rejecting all tracking technologies (cookies etc.).
The service providers we have engaged are Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland (Google Analytics), Hotjar Inc. with its registered office in Level 2, St. Julian’s Business Centre, 3, Elia Zammit Street, St. Julian’s STJ 1000, Malta (Hotjar) and SalesViewer GmbH, Huestraße 30, 44787 Bochum, Germany.
The
If you do not wish to allow the use of cookies in general, you can prevent this by changing the settings on your device accordingly.
Marketing
In order to show you advertisements tailored to your interests, we use cookies and tracking technologies on our websites and on the websites of our partners for marketing and social media.
These tracking and marketing technologies are able to detect by using cookies, for example, that the user clicked on our advert and was forwarded to this website and potentially used one of our services (known as “Conversion”). Additional information such as statistics regarding the total number of conversions can also be viewed using these technologies.
Collection of your data for marketing purposes occurs exclusively based on consent granted by you in accordance with Art. 6 (1) Sentence (1)(a) GDPR and is carried out by service providers who process such data on our behalf. After granting consent, you can withdraw your consent at any time with future effect by calling up the Consent Manager again and rejecting all tracking technologies (cookies etc.).
The service providers we have chosen are Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (Microsoft Advertising), Google Ireland Limited, Gordon House, Barrow Street Dublin 4 (Google Ads Conversion Tracking), Reddit Ireland Limited, Georges Quay Plaza, Floor 2 – 101, Dublin D02 F856 Ireland (Reddit Ads Targeting, Advertisement Measurement and Reddit Pixel), Momentive Europe UC (2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland (SurveyMonkey for surveys, competitions and prize drawings) and LinkedIn Ireland Limited, 77 Sir John Rogerson’s Quay, Dublin 2, Ireland (LinkedIn Plugin). Some of these providers may also transfer data to servers in the USA, a third country for which an adequacy decision has been passed by the EU Commission. The specific service providers are registered in the EU-US Data Privacy Framework, which guarantees a comparable level of data protection in accordance with Art. 45 GDPR.
Some of the providers whose tools we use expressly reserve the right to further processing for independent purposes. In such cases, we have no influence on the specific use and erasure of your data by the third-party provider that occurs as a result. You can prevent this by not consenting to the transfer of data to such tools in the Consent Manager we have installed.
Newsletter
If you would like to sign up for our newsletter, you thereby give us express consent to record your e-mail address that you communicate to us during registration. When you sign up for the newsletter, the data from the entry field is transmitted to us. In addition, the following data is collected during registration: IP address of the accessing computer and date and time of registration.
To verify your identity, we use the double opt-in method, which means that after obtaining your e-mail address, we send an automated e-mail to the e-mail address you have provided that contains a confirmation link. The registration process is only complete after you have confirmed your e-mail address. Apart from the e-mail address and information provided to confirm registration, we do not collect any other data. We hereby inform you that you can withdraw your consent at any time.
The purpose of data processing is exclusively for mailing the newsletter you have chosen to receive. The legal basis for this is Article 6 (1) Sentence 1 (a) GDPR (consent) as well as Article 6 (1) Sentence 1 (b) GDPR (contract performance). If you unsubscribe from the newsletter, we will erase the data you have provided subject to any existing obligations and rights.” The personal data collected during the registration process is generally deleted after a period of seven days.
HubSpot
As part of our marketing activities (including the chat function and newsletter) and customer management, we rely on the service provider HubSpot Inc., 25 First St 2nd Floor Cambridge, MA, USA and 1 Sir John Rogerson’s Quay, Dublin 2, Ireland (HubSpot).
HubSpot processes personal data on our behalf. In this context, the same principles apply as we previously described for marketing and the newsletter. This means that processing only occurs if you have granted your consent using the Consent Manager. After granting consent, you can withdraw your consent at any time with future effect by calling up the Consent Manager again and rejecting all tracking technologies (cookies etc.).
Social media
On our website, social media services are only embedded as links to external websites. If you click on that particular symbol, you will be forwarded to the website of that particular social media service. After you are forwarded, the social media provider may collect personal data directly depending on the circumstances. If you are logged into your user account for that particular social media service at this time, it is possible that information about your visit to our website will be attributed to your social media account. If you would not like this to occur, you have to log out of your social media profile before clicking on the embedded link.
Online services from other providers which are linked on our website are provided by third parties. Accordingly, we have no influence over the functionality of these services. We would like to inform you that the third-party services linked on our website may install their own cookies on your device if you access their service and leave our website. In case of doubt, please request information in advance directly from the social media providers.
Online tools
On our website, we use online tools which help in particular to improve user-friendliness when browsing our website.
The tools in question are provided by Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google Maps for displaying geographical maps and Google Tag Manager for managing our marketing tools), which may also aggregate data from other proprietary sources together with your data and in some cases also expressly reserve the right to engage in further processing for their own purposes. In such cases, we have no influence over the specific use involved as a result, or the erasure of your data by Google. You can prevent this by not consenting to the transfer of data to such tools in the Consent Manager we have installed, since any collection of your data for web analysis purposes occurs exclusively based on a consent granted by you in accordance with Art. 6 (1)(a) GDPR. After granting consent, you can withdraw your consent at any time with future effect by calling up the Consent Manager again and rejecting all tracking technologies (cookies etc.).
If you do not wish to allow the use of cookies in general, you can prevent this by changing the settings on your device accordingly.
Gravatar
We use the Gravatar plugin from the provider Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Gravatar displays profile pictures (known as “avatars”) if the user has a registered profile with Gravatar. This plugin transfers data to Automattic, compares these with any data that the user has stored, and Automattic processes these data according to their own Privacy Policy, which is described at https://automattic.com/privacy. In some cases, data may also be transferred to servers in the USA, a third country for which an adequacy decision has been passed by the EU Commission. Automattic Inc. is registered in the EU-US Data Privacy Framework, which guarantees a comparable level of data protection in accordance with Art. 45 GDPR.
We use Gravatar to improve the user experience on our website according to user requests which the user already communicated upon prior registration with Gravatar.
This use is activated if you have granted your consent (Art. 6 (1)(a) GDPR). After granting consent, you can withdraw your consent at any time with future effect by calling up the Consent Manager again and rejecting all tracking technologies (cookies etc.).
Personio / Applicant data
To handle the application process, we use the online tool offered by the service provider Personio SE & Co. KG Seidlstraße 3 80335, Munich, Germany (Personio) as contract processor.
If you would like to apply for a job with us, we require information regarding your qualifications and your contact data. The data provided will be processed for the purpose of conducting the application process. The legal basis for data processing is Section 26 BDSG in conjunction with Art. 88 GDPR, as well as Art. 6 (1) Sentence 1 (b) GDPR. Insofar as processing is necessary in order to defend against potential legal claims asserted against us resulting from the application process, this processing is based on Art. 6 (1)(f) GDPR. This legitimate interests consists in enabling us to provide evidence in such proceedings.
The storage period for data from unsuccessful applications is 6 months, or as long as we need the data for defence against legal claims.
In the context of the application process, you provide personal data on a voluntary basis if this is not necessary in order to establish the employment contract.
If we have not already provided more specific information about the following topics, the following principles of processing also apply:
3. Transfer of personal data and recipient categories
Apart from the cases explicitly mentioned in this Privacy Policy, we only transfer personal data internally or third parties if this is necessary for the stated purposes or required by law.
Categories of recipients: Our service providers (e.g. communication service providers, IT service providers, auditors, accountants or judicial authorities), social insurance providers and fiscal authorities.
4. Transfer to third countries
As a rule, we – or our service providers in the case of contract processing – process personal data only in countries within the EU or European Economic Area which are subject to the jurisdiction of the GDPR. In exceptional cases, personal data will be transferred to other countries (known as “third countries”) if an adequate level of data protection is guaranteed in accordance with Art. 44 GDPR, for instance
- if an “adequacy decision” has been passed by the European Commission,
- through the use of “EU standard contractual clauses”, or
- through other suitable guarantees for ensuring an adequate level of data protection in accordance with Art. 46 GDPR.
For example, transfer to a third country is permitted in accordance with Art. 49 (1) Sentence (1)(a) GDPR if you have expressly consented to data transfer after being informed of potential risks of such data transfer for you, without the existence of an adequacy decision and without suitable guarantees.
5. Duration of storage and erasure of personal data
As soon as we achieve the intended purpose of data processing, we erase your personal data.
Apart from this, we only save your data if legal exceptions and obligations exist, for instance pursuant to Art. 17 (3) GDPR. This is significant particularly in the context of fulfilling statutory retention obligations (Art. 17 (3)(b) GDPR) and the assertion, exercise or defence of legal claims (Art. 17 (3)(e) GDPR). Specific regional regulations are observed.
Statutory provisions regarding storage are derived particularly from the retention periods in the Commercial Code (Handelsgesetzbuch, HGB) or the Fiscal Code (Abgabenordnung, AO). According to these regulations, the retention period is between 6 and 10 years after conclusion of processing.
6. Rights of the data subject
If we process your personal data, you are entitled to the rights outlined below in principle and depending on the circumstances. If you would like to exercise one of these rights, you can contact us at any time using the contact details for our data protection officer.
6.1 Right to access information pursuant to Art. 15 GDPR
You have the right to obtain information about the personal data we process concerning you, at any time and free of charge.
6.2 Right to rectification pursuant to Art. 16 GDPR
You have the right to request that we promptly rectify or complete any inaccurate personal data concerning you.
6.3 Right to erasure pursuant to Art. 17 GDPR
You have the right to request that we promptly erase your personal data.
As a rule, personal data are only saved for the period in which the intended purpose applies, or to fulfil statutory retention periods.
6.4 Right to restriction of processing pursuant to Art. 18 GDPR
You have the right to request restriction of processing concerning your personal data at any time.
6.5 Right to data portability pursuant to Art. 20 GDPR
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format.
6.6 Right to objection pursuant to Art. 21 GDPR
You have the right, in various situations (processing on the legal basis of Art. 6 (1)(e) or (f) GDPR, profiling or direct marketing), to object against processing.
6.7 Right to lodge a complaint
You have the right to lodge a complaint regarding processing with the supervisory authority of your choice.
