Privacy policy
1. General
Thank you for visiting our website. In the following, we would like to inform you about the handling of your data according to Art. 13 of the German Data Protection Regulation (DSGVO).
Responsible
The office named in the imprint is responsible for the data collection and processing described below.
2. Usage data
Usage data
When you visit our web pages, so-called usage data is temporarily stored on our web server as a log for statistical purposes in order to improve the quality of our web pages. This data record consists of
- the page from which the file was requested,
- the name of the file,
- the date and time of the query,
- the amount of data transferred,
- the access status (file transferred, file not found),
- the description of the type of the web browser used,
- the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established.
The named log data is only stored anonymously.
3. Personal data
At some points on our website, you will be asked to enter personal data in accordance with applicable data protection law. On the one hand, we would like to use this data to increase the usefulness of this website for you, and on the other hand, we would like to stay in contact with you after your visit to our homepage.
Contact form
You have the possibility to contact us via a web form. To use our contact form, we need your name and e-mail address and, if necessary, other data to be able to offer you the service. If the data is not provided, it is not possible to offer the services. You can provide additional information, but you do not have to. Your data will be deleted as soon as they are no longer required to fulfill the services and no legal or contractual retention periods exist.
CONSENT
By sending the mail form, you agree that the data you provide will be electronically recorded and stored. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. a DSGVO. We use your data exclusively for processing your request. Your consent can be canceled at any time towards us. The revocation does not affect the lawfulness of the data processing until the time of revocation.
4. Data transmission
Data transmission to third parties
Your personal data will not be disclosed to third parties without your express consent, unless we are legally obliged to do so (e.g. in the case of inquiries from investigative authorities) or authorized to do so (e.g. in the case of commissioned data processing) or such disclosure is necessary for the performance of a contractual relationship with you or in connection with events taking place outside our company for the provision of specific, expressly requested services, and is permitted by applicable data protection law. We transfer your data within the scope of order processing in accordance with Art. 28 GDPR to service providers who support us in the operation of our websites and the associated processes. Our service providers are strictly bound by our instructions and are contractually obliged to do so. We use the following service providers: Our hosting service provider is Alphahosting. Data transfer to third countries In some cases, we transfer personal data to a third country outside the EU. If the respective country does not have an adequate level of data protection (Art. 45 (1) GDPR), we have concluded EU standard contractual clauses with the service providers, Art. 46 (2) lit. c GDPR.
We use the following service providers:
- Website hosting service providers: Alphahosting and Hetzner
- Communication and data storage: Microsoft
- Customer management: Hubspot and Atlassian
- Order management: Moco and Atlassian
- Human resources and applicant management: Personio
- AI services: OpenAI
Data transfer to third countries
In some cases, we transfer personal data to a third country outside the EU. If the respective country does not have an adequate level of data protection (Art. 45 (1) GDPR), we have concluded EU standard contractual clauses with the service providers, Art. 46 (2) (c) GDPR.5. Cookies
Cookies
We use cookies on our websites. Cookies are small text files that can be stored and read on your device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. Cookies may contain data that enables the device used to be recognized. However, some cookies only contain information about certain settings that are not personally identifiable. In some cases, however, cookies only contain information about certain settings that cannot be linked to a specific person. We use cookies on our websites. The use of technically necessary cookies and similar technologies is based on Section 25 (2) of the German Telecommunications and Telemedia Data Protection Act (TTDSG). The subsequent data processing is based on Art. 6 (1) lit. f GDPR and in the interest of [optimizing or enabling user guidance and adapting the presentation of our website]. You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. You can also delete cookies at any time via the corresponding browser setting and prevent new cookies from being set. Please note that our websites may then not be displayed optimally and some functions may no longer be technically available.
Renew or change your cookie settings6. Trackingtools
Google Analytics
In order to tailor our websites to your needs, we use the web analysis tool “Google Analytics” to analyze your usage behavior. In doing so, we process your IP address, user interaction data, browser information, cookie ID, information about pages viewed, advertisements viewed, websites visited, search terms, device operating system, screen resolution, geographic location, click path, and date and time of visit. For this purpose, permanent cookies are stored on your device and read by us. This enables us to recognize and count returning visitors. Within the scope of Google Analytics, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) supports us as a processor within the meaning of Art. 28 GDPR. A corresponding data processing agreement has been concluded. The basis for the collection and processing of your personal data is your consent (Section 25 (1) TTDSG, Art. 6 (1) (a) GDPR), provided that you have given this via our consent banner. Your consent is voluntary and can be revoked at any time. Please make the appropriate settings via our banner. Data processing by Google may also take place outside the EU or the EEA (in particular in the USA). An adequate level of data protection is guaranteed for data transfers to Google due to the certification in accordance with the adequacy decision (EU-US Privacy Shield). Google is also obliged to conclude standard contractual clauses with other sub-processors. To ensure the security of your data, the IP anonymization settings have been activated. Your IP addresses are therefore usually truncated within the EU and transmitted to the US in truncated form.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by clicking on the link below (http://tools.google.com/dlpage/gaoptout?hl=de) to download and install the available browser plugin.
You can additionally prevent a collection by Google Analytics by clicking on the following link. An opt-out cookie will be set, which permanently prevents the future collection of your data when visiting this website:
Open cookie settings
7. Google Maps
We use the Google Maps API to visually display geographic information about Fink IT-Solutions locations and other places and to allow you to easily plan your route. When using Google Maps, Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, 94043) also collects, processes and uses data about the use of the Maps functions by visitors to the web pages.
By using the corresponding maps and the route planner, you consent to the collection, processing, and use of the automatically collected data as well as the data entered by you by Google, one of its representatives, or third-party providers.
You have the option to deactivate the Google Maps service in a simple way and thus prevent the transfer of data to Google: To do this, deactivate JavaScript in your browser. However, we would like to point out that in this case you will not be able to use the map display, the route planner and possibly other functions of the website.
You can find more detailed information about data processing by Google in Google's privacy policy, which you can access at http://www.google.com/privacypolicy.html.
8. Social media plug-ins
We enable you to use social plugins. For data protection reasons, however, we only integrate the social plugins we use in a deactivated form. When you visit our websites, no data is therefore transmitted to social media services. However, you have the option of activating and using the social plugins integrated on our websites. To do this, we use a solution that means that, in a first step, all data and functions required to display the social plugin are provided by our web server. Only when you decide to activate the respective social plugin and click on the corresponding preview image or icon will your browser establish a connection to the servers of the operator of the respective social media service in a second step. When you activate a plugin, the social media service receives your IP address in particular, as well as information about your visit to our websites (usage data). This occurs regardless of whether you have an account with the respective social media service. If you are logged in, the data can be directly assigned to your social media profile. Overall, we have no influence on whether and to what extent the respective social media service processes personal data after activation. However, it is likely that the social media service will create usage profiles from your data and use them for the purpose of personalized advertising. In addition, your data will be used to inform other users of the social media service about your activities on our websites. The embedding is based on your consent, provided that you have given your consent by clicking on the preview image. With regard to data processing by LinkedIn and Twitter, we would like to point out that data processing may also take place outside the EU/EEA, but that an adequate level of data protection cannot be guaranteed for these providers. For this reason, EU standard contractual clauses have been concluded with these service providers. If you no longer wish your personal data to be processed by the activated social plugins, you can prevent future processing by no longer clicking on the preview image or icon of the respective social plugin.
9. Explanation of the security measures
Data security
In order to protect your data from unwanted access as comprehensively as possible, we take technical and organizational measures. We use an encryption procedure on our pages. Your data is transferred from your computer to our server and vice versa via the Internet using TLS encryption. You can recognize this by the fact that the lock symbol is closed in the status bar of your browser and the address bar begins with https://.
10. Rights of the user
Your rights as a user
When processing your personal data, the GDPR grants you certain rights as a website user:
- Right of access (Art. 15 DSGVO):
- Right to rectification and erasure (Art. 16 and 17 DSGVO):
- Right to restriction of processing (Art. 18 DSGVO):
- Right to data portability (Art. 20DSGVO):
- Right of objection (Art. 21 DSGVO):
- Right of complaint to a supervisory authority
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Article 15 of the GDPR.
You have the right to request without undue delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data.
You also have the right to request that personal data concerning you be deleted without delay, provided that one of the reasons listed in detail in Article 17 of the DSGVO applies, e.g. if the data is no longer required for the purposes pursued.
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 DSGVO is met, e.g. if you have objected to the processing, for the duration of any review.
In certain cases, which are detailed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.
If data is collected on the basis of Art. 6 (1) p. 1 lit. f (data processing for the protection of legitimate interests), you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
The declaration can be revoked in whole or in part at any time with effect for the future. Please address your revocation to datenschutz@fink-its.de. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Pursuant to Art. 77 DSGVO, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection provisions. The right of complaint can be asserted in particular before a supervisory authority in the Member State of your residence, your place of work or the place of the alleged infringement.
11. Contact details of the data protection officer
Contact details of the data protection officer
Our company data protection officer will be happy to provide you with information or suggestions on the subject of data protection:
Dr. Christian Borchers
datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg
Web: www.datenschutz-nord-gruppe.de
E-Mail: office@datenschutz-sued.de
Telefon: 0931 304 976 0
12. Further contents of the privacy policy
12.1. Facebook company page
We operate an official Facebook page under the URL https://www.facebook.com/FinkItSolutionsGmbhCoKg on the basis of Art. 6 (1) p. 1 lit. f DSGVO. We do not collect, store or process any personal data of our users on this page at any time. Furthermore, no other data processing is carried out or initiated by us. The data you enter on our Facebook page, such as comments, videos or images, will not be used or processed by us for any other purpose at any time.
Facebook uses so-called web tracking methods on this site. Please be aware of this: It cannot be ruled out that Facebook uses your profile data, for example to evaluate your habits, personal relationships, preferences, etc.. We have no influence on the processing of your data by Facebook.
12.2. YouTube videos
Embedded YouTube videos
On some subpages we embed YouTube videos into our website. Calling up these sub-pages leads to YouTube content being reloaded. In this context, YouTube also receives your IP address, which is technically necessary to retrieve the content. In principle, we have no influence on the further processing by YouTube. However, when embedding the videos, we made sure to activate the extended data protection mode offered by YouTube.
13. Special functions of the website
13.1. Applicant form
The data entered by you in the form fields of the application form and uploaded, if applicable, will be processed to fulfill the purpose stated below.
Art. 6 para. 1 lit. b DSGVO (implementation of (pre)contractual measures)
Review and process the application materials you upload via the form.
The data is deleted as soon as the application has been processed and there is no longer a legitimate interest in storing the application data. Your application documents will therefore be deleted after 6 months at the latest if no employment relationship is established.
You may object to the processing at any time in accordance with Art. 21 DSGVO and request deletion of data in accordance with Art. 17 DSGVO.
The information in the application form is neither contractually nor legally required, but is necessary for sending and processing the application. If you do not fill in the existing mandatory fields or do not fill them in completely, the application you have requested cannot be sent or processed.
13.2. Contact form
We will process the data you enter in our contact form, such as telephone number and name, to fulfill the following purpose.
Art. 6 para. 1 lit. a DSGVO (consent through clear confirming action or behavior)
We will use the data recorded via our contact form or via our contact forms only for processing the specific contact request received through the contact form. Please note that in order to fulfill your contact request, we may also send you e-mails to the address provided. This has the purpose that you can receive a confirmation from us that your request has been correctly forwarded to us (double opt-in).
The deletion of the data takes place as soon as your request has been processed and the data is not needed in the context of legitimate interest, e.g. the preparation of offers, contracts, services, etc., unless there are legal retention periods.
The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law described below in this data protection declaration.
The use of the contact forms is on a voluntary basis and is neither contractually nor legally required. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our site. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not fill out the required information of the contact form, you can either not send the request or we can unfortunately not process your request.
13.3. Newsletter registration form
By registering for the newsletter on our website, we receive the e-mail address entered by you in the registration field and, if applicable, further contact data, provided that you communicate this to us via the newsletter registration form.
Art. 6 para. 1 lit. a DSGVO (consent through clear confirming action or behavior)
The data recorded in the registration mask of our newsletter will be used by us exclusively for sending our newsletter, in which we inform you about all our services and our news. After registration, we will send you a confirmation e-mail containing a link that you must click to complete the registration for our newsletter (double opt-in).
Our newsletter can be unsubscribed at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after unsubscribing, provided that there are no legal retention obligations. Likewise, your data will be deleted by us immediately in the event that your subscription is not completed. We reserve the right to delete without giving reasons and without prior or subsequent information.
The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law described below in this data protection declaration.
If you would like to use our newsletter, you must fill in the fields marked as mandatory and confirm the e-mail address by clicking on the double opt-in link. The newsletter registration information is neither necessary to enter into a contract with us nor legally binding. They are used exclusively for sending our newsletter. If you do not fill in the mandatory fields, we will unfortunately not be able to provide you with our newsletter service.