Website
Data privacy

Data protection

1. Information about the collection of personal data

(1) In the following we inform you about the collection of personal data when using our website. Personal data is data that can be connected to you personally, e.g. Name, address, e-mail addresses, user behavior.

(2) The person responsible according to Art. 4 Para. 7 General Data Protection Regulation (GDPR) is:

Foxxum UG
Westring 453 (Neufeldt Haus)
24118 Kiel
Mail: dataprivacy@foxxum.com
Phone: +49 431 260 4105 0

(3) When you contact us, the data you provide (your e-mail address, your name and telephone number if applicable) will be saved by us in order to answer your questions. We delete the data that arises in this context after the storage is no longer necessary, or we restrict the processing if there are statutory retention requirements.
This data is processed on the basis of Art. 6 Para. 1 lit. b) GDPR, if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries sent to us (Art. 6 Paragraph 1 f) GDPR) or on your consent (Art. 6 Paragraph 1 a) GDPR) if this was requested.

(4) If we use contracted service providers for individual functions of our offering or use your data for other purposes, we will inform you and inform you in detail about the respective processes.

2. Your rights

(1) You have the following rights vis-à-vis us with regard to your personal data:

• right to information,
• right to correction or deletion,
• right to restriction of processing,
• right to object to processing,
• right to withdraw consent to processing if you have given your consent,
• right to data portability.

(2) You also have the right to complain to a data protection supervisory authority (see below) about the processing of your personal data.

3. Collection of personal data when you visit our website

(1) When using the website for informational purposes only, i.e. if you do not provide us with any other information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status / HTTP status code
• Amount of data transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software

The storage period is 14 days. The legal basis is Art. 6 Paragraph 1 f) GDPR; Our legitimate interest is to ensure the stability and security of our systems.

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the place that sets the cookie.

(3) This website uses the following types of cookies, the scope and functionality of which are explained below:
Transient cookies are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. The session cookies are deleted when you log out or close the browser.

Cookie settings for this website

4. Inclusion of Social Media

We use websites in social networks to communicate with customers, interested parties and active users active and to be able to inform them about us. It is possible that user data may also be processed outside the European Union. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. This could result in risks for users, for example, because it could make it more difficult to enforce their rights. Furthermore, users’ data may be processed for analysis purposes. Thus, profiles can be created from the user behavior and the interests of the users derived from it. These profiles can be used, for example, to place advertisements within and outside the platforms that probably correspond to the interests of the users. For these purposes, cookies may be stored on the users’ computers to save the usage pattern, the interests of the users and/or the length of stay. In the case of requests for information and the assertion of user rights, we would like to point out that these can most effectively be asserted with the respective providers. Only the providers have access to the respective user data and can take appropriate measures and provide concrete information. For a detailed presentation of the respective processing, we refer to the following information on the respective providers.

Facebook

On our pages are links of the social network Facebook, provider Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland integrated.
For more information, please refer to the Facebook privacy policy at: https://de-de.facebook.com/policy.php.
If you do not want Facebook to be able to assign visits to our pages to your Facebook user account, please log out of your Facebook user account first.
For information on the internal processing of INSIGHTS at Facebook, please read the regulations at https://www.facebook.com/legal/terms/page_controller_addendum.
These are briefly summarized below:
Rights of data subjects can be asserted with Facebook Ireland as well as with us, but Facebook has the primary responsibility according to the DSGVO for the processing of Insights data. We do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 DSGVO, including legal basis, identity of the person responsible and storage period of cookies on user terminals. Facebook fulfils all obligations under the DSGVO with regard to the processing of Insights data. Facebook Ireland makes the essential part of the Page Insights supplement available to the persons concerned.

Data processing during direct visits to our Facebook site

In this section, we provide you with more detailed information about how we process personal data when you use our Facebook and Instagram services.
Facebook Ireland Ltd. processes personal data when using Facebook products – including when visiting Instagram pages – even from people who are not logged in to any of the Facebook services. What (personal) data this is in detail, how, for what purposes and on what legal basis it is processed is described by Facebook in its data privacy policy (https://www.facebook.com/about/privacy/update), which applies to all Facebook products. There you can also find information about how to contact Facebook and about the settings for advertisements, cookies, etc.
We process personal data ourselves via our Facebook account (see below under 2.), at the same time a data processing by Facebook takes place (see below under 1.). Facebook and our company are “joint responsible parties” in the sense of Art. 26 DSGVO.
1. Data processed by Facebook.
The regulations regarding the internal processing of INSIGHTS at Facebook can be found at https://www.facebook.com/legal/terms/page_controller_addendum.
We do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 DSGVO, including the legal basis, identity of the person responsible and storage period of cookies on user devices.
2. Data processed by us.
We may use Page Insights to anonymously measure reach, page views, time spent on video, actions (likes, comments, sharing), age, gender and location (as provided by users in their respective Facebook or Instagram profiles). Settings can be made for the evaluation of the reach or appropriate filters can be set with regard to the selection of a time period, the viewing of a specific post and the demographic groupings (e.g. female, 20-30 years old). This data is anonymized, aggregated and abstracted. These settings therefore do not allow us to draw conclusions about individuals. The evaluation is used to optimize the offer on the Facebook and Instagram pages for public relations purposes.

In addition, it is possible for you to interact with us via our account. For example, by marking posts with “Like”, sharing or commenting on them or by writing to us directly.
In these cases, we will inevitably process your data, since you will make your account visible to us and you will provide us with personal data. This includes your user name, your profile picture, the date and time of the interaction. In this case, the legal basis for processing is Art. 6, Para. 1, S.1 b) DSGVO. We use your data to fulfill the interaction you have requested.

Instagram

Instagram (Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland).
Instagram is used by us to provide information about our company and related events.
Privacy Policy: https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc

Linkedin

We have integrated a link to the network platform LinkedIn on our pages.
Provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
For details on how LinkedIn handles your personal information, please refer to the LinkedIn Privacy Policy: https://www.linkedin.com/legal/privacy-policy.

Twitter

Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
In our Twitter offer linked on our website, we present our own content such as news or event information.
Privacy policy: https://twitter.com/de/privacy.
Opt-Out: https://twitter.com/personalization.

Xing

XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany
Xing is used by us to inform about our company and related events.
Privacy policy / Opt-out: https://privacy.xing.com/de/datenschutzerklaerung.

5. Automated decision making

Automated decision-making is not used here.

6. Liability of content

The contents of our pages were created with great care. However, we cannot however take any liability for the correctness, completeness and topicality of the content. As a service provider, we are responsible for our own content on these pages in accordance with general law in accordance with Section 7, Paragraph 1 of the German Telemedia Act. According to §§ 8 to 10 TMG, as a service provider, we are not obliged to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information in accordance with general law remain unaffected. Liability in this regard is only possible from the point in time at which we become aware of a specific legal violation. As soon as we become aware of such legal violations, we will remove this content immediately.

7. Liability for links

Our pages may contain links to external third-party websites over whose content we have no influence. Therefore, we cannot take any liability for this third-party content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time they were linked. No illegal content was found at the time the link was created. Permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of legal violations, we will remove such links immediately.

8. Applications

The person responsible for the processing, collects and processes the personal data of applicants for the purpose of handling the application process. This data is processed on the basis of Section 26 Paragraph 1 Sentence 1 BDSG (decision on the establishment of an employment relationship). If the person responsible for processing does not conclude an employment contract with the applicant, the application documents are automatically deleted five months after receipt of the application, provided that deletion does not conflict with any other legitimate interests of the person responsible for processing. Other legitimate interests according to Art. 6 Para. 1 f) GDPR could, for example, represent a burden of proof in proceedings under the General Equal Treatment Act (AGG).

9. Data security

We use suitable technical and organizational measures to secure our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorized persons. Despite regular controls, however, complete protection against all dangers is not possible.

Our website uses the industry standard SSL/TLS (Secure Sockets Layer) for encryption. This ensures the confidentiality of your personal information over the Internet. You can tell whether an encrypted transmission is taking place from the closed key or lock symbol in your browser. We point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is technically not possible.

10. Transfer of data

Your personal data will only be passed on to third parties

• if you have given your express consent to this in accordance with Art. 6 Paragraph 1 a) GDPR;
• if the transfer is necessary for the fulfillment of contractual obligations according to Art. 6 Para. 1 b) GDPR;
• if we are legally obliged to pass on the data i.S.d. Art. 6 Para. 1 c) GDPR;
• if the transfer of the data is in the public interest i.S.d. Art. 6 Para. 1 e) GDPR is or;
• if the transfer of the data according to Art. 6 Para. 1 f) GDPR is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests in the protection of your data outweigh this.

11. Categories of recipients

Data Processors

We use IT service providers who work exclusively on our behalf and bound by instructions (order processing) to provide the service offered, e.g. B. hosting this website or operating our IT. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.

Third party recipients

In order to be able to process your concerns satisfactorily, we may have to pass on your personal data to third-party recipients. Third-party recipients can be our suppliers, transport and logistics partners and our trading partners.

12. Duration of storage of personal data

Your data will be stored by us for as long as it is required for the purposes on which the processing is based. In addition, we only save data insofar as we are legally obliged to do so, e.g. B. due to statutory retention requirements.

13. Detailed information on the right to object

An objection to the processing of personal data concerning you on the basis of Article 6 Paragraph 1 e) (data processing in the public interest) or f) (data processing to safeguard legitimate interests on the basis of a balance of interests) is possible at any time in accordance with Article 21 GDPR. In the event of an objection, the personal data will no longer be processed, unless there are compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject or the processing serves to assert, exercise or defend legal claims.

Please address your objection to the responsible body named under point 1.

14. Detailed information on the right of withdrawal

If you have given us your consent to the processing of personal data, you can revoke this at any time. Of course, this also applies to declarations of consent given to us before May 25, 2018 (before the GDPR came into force). The revocation of a consent can only be applied in the future. The legality of the processing is not retroactively removed by a revocation.

Please send your revocation to the responsible body named under point 1.

15. Validity

This data protection declaration was last updated on September 29th, 2020. It is the current and valid version of our data protection declaration.
However, we would like to point out that from time to time, due to actual or legal changes, a revision of this data protection declaration may be necessary. Please send your revocation to the responsible body named under point 1.

16. Controlling authority

The address of the supervisory authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein
Holstenstraße 98
24103 Kiel
Tel.: +49 431 988-1200, Fax: +49 431 988-1223
E-Mail: mail@datenschutzzentrum.de
Homepage: www.datenschutzzentrum.de

17. Data protection offer

If you have any questions about data protection, please do not hesitate to contact our data protection officer:

Oliver Volk
c/o Vater Solution GmbH
Boschstraße 5
24118 Kiel
E-Mail: dataprivacy@foxxum.com