Data protection statement

1. Data protection — Overview

General information

The following information provides a basic overview of what may happen to your personal data when you visit this website. The term “personal data” means any data by which you can be personally identified. For detailed information on data protection, please refer to our data protection statement below this text.

Data collection on this website

Who is responsible for the collection of data on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the section “Note on the data controller” in this data protection statement.

What is the mechanism of data collection?

Firstly, some data is collected when you provide it to us. This kind of data may include, for example, information that you enter in a contact form.

Other data is collected automatically or upon your consent by our IT systems when you use our website. This is mainly technical data (e. g. internet browser, operating system or time of page access). This data is collected automatically as soon as you open this website.

What do we use your data for?

Part of the data is collected to ensure a flawless operation of the website. Other data may be used to analyse your user behaviour.

What are your rights with regard to your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time and free of charge. Additionally, you have a right to request that this data be corrected or erased. If you have given your consent to data processing, you can revoke this consent for any future processing at any time. In addition, you have the right to request that the processing of your personal data be restricted in certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

In regard to this or if you have any other question on the subject of data protection, you can contact us at any time.

Analysis tools and third-party tools

Your browsing behaviour may be analysed for statistical purposes when you visit this website. This is done mainly with so-called analysis tools.

For detailed information on these analysis tools, please refer to the following data protection statement.

2. Hosting and Content Delivery Networks (CDN)

External hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. This may include, but is not limited to, IP addresses, contact requests, metadata and communication data, contractual data, contact details, names, website traffic and other data generated on a website.

The commissioning of a host has the purpose of fulfilling our contract obligations with potential and existing clients (Art. 6 (1) b GDPR) and in the interest of a secure, fast and efficient provision of our online services by a professional provider (Art. 6 (1) f GDPR).

Our host will process your data only insofar as this is necessary for the fulfilment of its service obligations and will adhere to our instructions with regard to this data.

The host commissioned by us is as follows:

LightsOn GmbH
Karl-Drais-Straße 4c
86159 Augsburg

3. General notes and mandatory information

Data protection statement

The operator of this website takes the protection of your personal data very seriously. We shall observe confidentiality of your personal data and act in accordance with data protection laws and this data protection statement.

Upon use of this website, a number of personal data will be collected. The term “personal data” means any data by which you can be personally identified. This data protection statement outlines what data is collected and what it is used for. It also explains the means and purpose of this data collection.

Please note that data transmission over the Internet (e. g. communication by e-mail) may be subject to security vulnerabilities. Full data protection against unauthorised access by third parties cannot be guaranteed.

Note on the data controller

The data controller for this website is:

Ricarda Memel

TEAMWILLE GmbH
Walter-Gropius-Str. 21
80807 Munich, Germany

Managing Director: Ricarda Memel

Phone: +49 (0) 89 58803-1000

E-mail: anfrage@teamwille.com

A data controller is the natural or legal person who is individually or collectively with other persons responsible for determining the purposes and means of the processing of personal data (e. g. names, e-mail addresses, etc.).

Storage period

Unless a more specific storage period is stated within this data protection statement, your personal data will remain stored by us until the purpose for processing the data no longer applies. If you submit a justified request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally valid reasons for storing your personal data (e. g. retention periods required by tax or commercial law); in the latter case, the data will be deleted once these legal reasons no longer apply.

Data protection officer required by law

We have appointed a data protection officer for our company.

Gerhard Witte

Phone: +49 (0) 157 3949 6970

E-Mail: gerhard.witte@teamwille.com

TEAMWILLE GmbH
Walter-Gropius-Str. 21
80807 Munich, Germany

Managing Director: Ricarda Memel

Note on data transfer to the USA

Among others, our website includes tools from companies based in the USA. While these tools are in operation, your personal data may be transferred to the US servers of the corresponding companies. Please note that the USA is not a safe third country as defined by EU data protection law. US companies are under an obligation to hand over personal data to security authorities, and you as a data subject won't be able to take legal action against this data transfer. Therefore, it cannot be ruled out that US authorities (e. g. intelligence agencies) may process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no control over these data processing activities.

Withdrawal of your consent to data processing

Many data processing operations require your explicit consent. You may withdraw your given consent at any time. The legality of any data processing carried out prior to the withdrawal remains unaffected by the said withdrawal.

Right to object to the collection of data in particular cases and to processing for direct marketing purposes (Art. 21 GDPR)

You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you (Art. 6 (1) e or f GDPR), including profiling based on those provisions. For the relevant legal basis on which processing is based, please refer to this data protection statement If you object, we shall no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).

Where personal data are processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes (objection pursuant to Art. 21 (2) GDPR).

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.

Right to data portability

You shall have the right to receive your personal data, which you have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. If you request the direct transfer of data to another data controller, the data will be transmitted where technically feasible.

SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and in order to protect the transmission of confidential content, such as orders or enquiries that you send to us in our capacity as website operator. You will recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock sign in the address bar of your browser.

If you activate an SSL or TLS encryption, the data you transmit to us will be protected against access by third parties.

Right of access, erasure and rectification

According to the applicable legal provisions, you have the right to access your stored personal data, its source and recipient and the purpose of data processing free of charge at any time and, if appropriate, the right to request rectification or erasure of this data. In regard to this or if you have any other question regarding your data, you can contact us at any time.

Right to request restriction of data processing

You have the right to request that the processing of your personal data be restricted. Please contact us if you wish to do so. The right to restriction of data processing applies in the following cases:

• If you contest the accuracy of the personal data, well will most likely need a period of time to verify this. For the duration of this review, you have the right to request that the processing of your personal data be restricted.
• If the processing of your personal data is or was unlawful, you may request the restriction of data processing instead of erasure.
• If we no longer need your personal data, but you require them for the establishment, exercise or defence of legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
• If you have objected to processing pursuant to Article 21 (1) GDPR, it shall be verified whether our legitimate grounds override yours. As long as it has not been determined whose legitimate grounds prevail, you have the right to request that the processing of your personal data be restricted.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

4. Data collection on this website

Cookies

Our website uses so-called “cookies”. Cookies are small text files that do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your browsing session. Permanent cookies remain stored on your terminal device until you delete them yourself or until they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your terminal device when you access our website (third-party cookies). These cookies enable us or you to make use of specific third-party services (e. g. cookies for processing payment services).

Cookies have different functions. Many cookies are necessary for technical reasons, since certain website functions would not work otherwise (e. g. the shopping cart or video viewing). Other cookies are used to evaluate user behaviour or to display ads.

Cookies that are necessary for electronic communication (necessary cookies) or to provide specific functions requested by you (functional cookies, e. g. for the shopping cart function) or to optimise the website (e. g. cookies to measure the web audience) are stored in accordance with Art. 6 (1) f GDPR, provided that no other legal grounds are specified. The website operator has a legitimate interest in storing cookies to provide its services in a technically flawless and optimised manner. If consent to the storage of cookies has been requested, the storage of those cookies is based exclusively on this consent (Art. 6 (1) a GDPR); consent may be withdrawn at any time.

You can configure your browser to inform you about the storage of cookies and to allow cookies only in certain cases, to exclude the use of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the website's functionality may be impaired.

If cookies are used by third-party companies or for analysis purposes, we will notify you of this separately as part of this data protection statement and, if necessary, request your consent.

Server log files

The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically submits to us. Submitted information includes:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data will not be merged with other data sources.

The collection of this data is based on Art. 6 (1) f GDPR. The website operator has a legitimate interest to ensure the technically flawless display and optimisation of its website. The server log files must be collected for this purpose.

Contact form

If you send us an enquiry via the contact form, your details —including the contact details you provide in the form— will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. This data will not be passed on without your consent.

The processing of this data is based on Art. 6(1) b GDPR, insofar as your enquiry is related to the performance of a contract or in order to take steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6 (1) f GDPR) or on your consent (Art. 6 (1) a GDPR), provided this has been requested.

The data you enter in the contact form will remain stored in our system until you request us to delete it, withdraw your consent to store it or the purpose for storing the data no longer applies (e. g. after we have completed processing your request). Any mandatory legal provisions —in particular retention periods— remain unaffected.

Enquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry will be stored and processed by us for the purpose of processing your request, including all necessary personal data (name, enquiry). This data will not be passed on without your consent.

The processing of this data is based on Art. 6(1) b GDPR, insofar as your enquiry is related to the performance of a contract or in order to take steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6 (1) f GDPR) or on your consent (Art. 6 (1) a GDPR), provided this has been requested.

The data you enter in the enquiry form will remain stored in our system until you request us to delete it, withdraw your consent to store it or the purpose for storing the data no longer applies (e. g. after we have completed processing your request). Any mandatory legal provisions —in particular statutory retention periods— remain unaffected.

5. Social media

Social media plug-ins with Shariff

This website uses plug-ins from social media (e. g. Facebook, Twitter, Instagram, Pinterest, XING, LinkedIn, Tumblr).

You can usually recognise the plug-ins by the corresponding social media logos. To ensure privacy on this website, we use these plug-ins only in combination with the so-called “Shariff” solution. This application prevents the plug-ins embedded on this website from transmitting data to the associated provider when you first enter the page.

It is not until you activate the specific plug-in by clicking on the associated button that a direct connection to the provider's server is established (consent). As soon as you activate the plug-in, the corresponding provider is informed that you have accessed this website with your IP address. If, at the same time, you are logged into your corresponding social media account (e. g. Facebook), the provider in question can assign your website visit to your user account.

Activating the plug-in constitutes consent as defined in Art. 6 (1) a GDPR. You can withdraw this consent at any time for future events.

6. Analysis tools and advertising

Google Tag Manager

Our website uses Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool we use to embed tracking or statistical tools along with other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It is used solely for the administration and deployment of the tools integrated using it. However, Google Tag Manager collects your IP address, which may be transferred to Google's parent company in the United States.

The Google Tag Manager is used in accordance with Art. 6 (1) f GDPR. The website operator has a legitimate interest in a quick and straightforward embedding and management of different tools on its website. Insofar as consent has been requested, processing is carried out exclusively in accordance with Art. 6 (1) a GDPR; consent may be withdrawn at any time.

Google Analytics

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows the website operator to analyse the behaviour of website users. The website operator receives different usage data, such as page views, duration of visit, operating systems used and origin of the user. This data may be summarised by Google in a profile that is assigned to the corresponding user or their terminal device.

Google Analytics uses technologies to enable recognition of the user for the purpose of analysing user behaviour (e. g. cookies or device fingerprinting). The information collected by Google on the use of this website is usually sent to a Google server in the USA and stored on that server.

This analysis tool is used in accordance with Art. 6 (1) f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising service. Insofar as consent has been requested (e. g. consent to the storage of cookies), processing is carried out exclusively in accordance with Art. 6 (1) a GDPR; consent may be withdrawn at any time.

Data transfer to the USA relies on the standard contractual clauses of the EU Commission. For more details, see the following link: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymisation

The IP anonymisation function is activated on our website. As a result, your IP address is shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened at that point. On behalf of the operator of this website, Google will use this information to analyse your utilization of the website, to compile reports on website activities and to provide further services related to website and internet usage to the website operator. The IP address transmitted by your browser in connection with Google Analytics is not merged with other Google data.

Browser plug-in

You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics deals with user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data processing

We have concluded an order processing contract with Google and we fully implement the strict requirements of the German data protection authorities in our use of Google Analytics.

Demographics in Google Analytics

This website uses the “Demographics” function of Google Analytics to be able to display relevant advertisements to website users within the Google Ad Network. This function creates reports on age, gender and interests of the website users. This data originates from interest-based advertising from Google as well as user data from third-party providers. This data cannot be linked to a specific person. You can deactivate this function at any time in the ad settings in your Google account or generally disallow the collection of your data by Google Analytics as shown in section “Right to object to the collection of data”.

Storage period

User and event data stored by Google that is linked to cookies, user identifiers (e. g. user ID) or advertising IDs (e. g. DoubleClick cookies, Android advertising ID) is anonymised or deleted after 14 months. For more details, see the following link: https://support.google.com/analytics/answer/7667196?hl=de

Google Ads

The operator of this website uses Google Ads. Google Ads is an online advertising tool of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display ads in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted ads can be displayed based on the user data available at Google, e. g. location data and interests (target audience targeting). As the website operator, we can evaluate these data quantitatively, for instance by analysing which search terms resulted in the display of our ads and how many ads led to corresponding clicks.

Google Ads is used according to Art. 6 (1) f GDPR. The website operator has a legitimate interest in maximising the effective marketing of its services and products.

Data transfer to the USA relies on the standard contractual clauses of the EU Commission. For more details, see the following link: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

Google Remarketing

This website uses the functions of Google Analytics Remarketing. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Remarketing analyses your user behaviour on our website (e. g. clicks on specific products), to allocate certain target audiences to you and to subsequently display matching online material to you when you visit other online sites (remarketing or retargeting).

In addition, the target audiences created with Google Remarketing can be linked with Google's cross-device tracking. This allows interest-based, personalised advertising material customised to your previous usage and browsing behaviour on one device (e. g. mobile phone) to be displayed on another of your devices (e. g. tablet or PC).

If you have a Google account, you can object to personalised advertising using the following link: https://www.google.com/settings/ads/onweb/.

Google Remarketing is used in accordance with Art. 6 (1) f GDPR. The website operator has a legitimate interest in maximising the effective marketing of its services and products. Insofar as consent has been requested, processing is carried out exclusively in accordance with Art. 6 (1) a GDPR; consent may be withdrawn at any time.

For further information on Google and its privacy policy, please refer to Google's privacy policy at: https://policies.google.com/technologies/ads?hl=de.

Target audience creation with Custom Match

Among other tools, we use Google Remarketing's Custom Match to create target audiences. This requires us to transfer certain client data (e. g. e-mail addresses) from our client lists to Google. If the clients in question are Google users and logged into their Google account, they will receive targeted advertisements within the Google network (e. g. on YouTube, Gmail or in the search engine).

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Conversion Tracking enables Google and us to detect whether the user has performed certain actions. For example, we can analyse how often buttons on our website are clicked and which products are viewed or purchased particularly frequently. This information is used to create conversion statistics. This tool helps us find out the total number of users who have clicked on our ads and what actions they have taken. We do not obtain any information that allows us to personally identify the user. Google itself uses cookies or other similar technologies for identification purposes.

Google Conversion Tracking is used in accordance with Art. 6 (1) f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising service. Insofar as consent has been requested (e. g. consent to the storage of cookies), processing is carried out exclusively in accordance with Art. 6 (1) a GDPR; consent may be withdrawn at any time.

For more information on Google Conversion Tracking, please see Google's privacy policy: https://policies.google.com/privacy?hl=de.

7. Plug-ins and tools

MyFonts

This website uses so-called web fonts from MyFonts Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA (hereinafter: MyFonts). These are fonts that are loaded into your browser when you access our website in order to ensure a uniform appearance when displaying the website.

The fonts are installed locally. A connection to MyFonts servers is not established. We use these fonts based on our legitimate interest in a uniform appearance of our website (Art. 6 (1) f GDPR).

8. eCommerce and payment providers

Processing of data (client and contract data)

We collect, process and use personal data only insofar as they are necessary for the establishment, configuration or amendment of the legal relationship (inventory data). This is based on Art. 6 (1) b GDPR, which authorises the processing of data for the fulfilment of a contract or in order to take steps prior to entering into a contract. We collect, process and use personal data about the use of this website (usage data) only insofar as this is necessary to enable the user to access or charge the user for the service.

The collected client data will be deleted after completion of the order or termination of the business relationship. Any statutory retention periods remain unaffected.

9. Own services

Handling of personal data of applicants

You have the opportunity to apply for a job with us (e. g. by e-mail, post or via the online application form). Below you will find information on the scope, purpose and use of your personal data collected during the application process. Please be assured that the collection, processing and use of your data will be in accordance with applicable data protection law and all other legal requirements and that your data will be kept strictly confidential.

Scope and purpose of data collection

If you send us an application, we will process the personal data collected during that process (e. g. contact and communication data, application documents, notes taken during interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal grounds for this use of your data are Section 26 of the German Data Protection Act (Bundesdatenschutzgesetz , BDSG-neu) under German law (initiation of an employment relationship), Art. 6 (1) b GDPR (general contract initiation) and —provided you have given your consent— Art. 6 (1) a GDPR. Consent may be withdrawn at any time. Your personal data will be shared within our company only with personnel involved in the processing of your application.

If the application is successful, the data submitted by you will be stored in our data processing systems in accordance with Section 26 BDSG-neu and Art. 6 (1) b GDPR for the purpose of establishing the employment relationship.

Retention period of the data

If we are unable to offer you a job, if you reject a job offer or withdraw your application, we reserve the right to retain the data provided by you for up to 6 months after the application process has ended (rejection or withdrawal of the application) in accordance with our legitimate interests (Art. 6 (1) f GDPR). After that, the data is deleted and the physical application documents destroyed. In particular, the data storage shall serve as evidence in the event of a legal dispute. Insofar as it is evident that the data will be required after the expiry of the 6-month period (e. g. due to an imminent or pending legal dispute), we will retain the data until the purpose for continued storage no longer applies.

Additionally, we may extend the storage of your data if you have given your consent (Art. 6 (1) a GDPR) or if legal retention obligations prevent deletion.