§ 1 Information concerning collection of personal data
(1) Below, we will inform you about collection of personal data when you use our website. Personal data are any data that permit a conclusion to you personally, e.g. your name, address, email addresses, user behaviour.
(2) The controller in accordance with Article 4(7) EU General Data Protection Regulation (“GDPR”) shall be Stupidly Simple GmbH & Co. KG, Podbielskistrasse 11, D-30163 Hanover, Germany (see our imprint). You can reach our data protection officer Robert Albrecht at [email@example.com] or our postal address with the addition “The data protection officer”.
(3) When you contact us by email or through a contact form, the data disclosed by you (your email address, possibly your name and phone number) will be stored by us in order to answer your questions. We will erase the data arising in this context after six (6) months, after storage is no longer required, or we shall restrict processing if there are any legal archiving obligations.
(4) If we use any charged service providers for individual functions of our offer, or if we want to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also indicate the specified criteria for the storage duration in this context.
§ 2 Your rights
(1) You have the following rights towards us regarding the personal data concerning you:
Right of access
Right to rectification or erasure
Right to restriction of processing
Right to object to processing
Right to data portability
(2) You also have the right to lodge a complaint with a data protection supervisory authority about processing of your personal data by us.
(a) This website uses the following types of cookies, the scope and function of which are explained below:
Transient cookies, see (b)
Persistent cookies, see (c)
Third-party cookies, see (d)
(b) Transient cookies are automatically deleted when you close the browser. This specifically includes the session cookies. They store a session ID with which various queries of the browser can be assigned to a shared session. This makes it possible to recognise your computer when you return to our website. The session cookies will be deleted when you log out or close the browser.
(c) Persistent cookies are deleted automatically after a specified duration that may differ depending on cookie. You may delete the cookies in the safety settings of your browser at any time.
(d) We cooperate with various third-party providers who support us to show advertisements that are relevant for you online. These third-party providers may also store cookies on the hard disc of your computer (third-party cookies). You may delete the cookies in the safety settings of your browser at any time.
(e) You may configure your browser settings according to your wishes and, e.g., refuse the acceptance of third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.
§ 4 Objection to or withdrawal of processing of your data
(1) If you have consented to processing of your data, you can withdraw this consent at any time. This withdrawal will influence the admissibility of processing of your personal data after you have issued it towards us.
(2) As far as we base processing of your personal data on consideration of interests, you may object to processing. This is the case if processing in particular is not necessary for the performance of a contract with you, which is presented by us in the following description of the functions. When exercising such an objection, please present the reasons why we should not process your personal data as performed by us. In case of your justified objection, we will review the situation and shall either cease data processing or adjust it, or explain our compelling legitimate grounds to you based on which we continue to process the data.
(3) Of course, you may object to processing of your personal data for advertisements and data analysis at any time. You may inform us about your objection to advertisements under the following contact details: firstname.lastname@example.org.
§ 5 Web Analytics
(1) Use of Google Analytics
(a) This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, i.e. text files that are stored on your computer and that permit analysis of your use of the website. As a rule, the information generated by the cookie through your use of this website is sent to a Google server in the USA and stored there. If IP address anonymization was activated on this website, your IP address will be abbreviated by Google, however, within the Member States of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptions will your full IP address be transferred to a server of Google in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, in order to compile reports on the website activities and to render further services connected to website use and internet use vis-à-vis the website operator.
(b) The IP address transmitted by your browser in the scope of Google Analytics will not be combined with any other data of Google.
(c) You may prevent saving of the cookies by making the corresponding settings in your browser software; however, note that you may be unable to fully use all functions of the website in such a case. You may furthermore prevent recording of the data generated by the cookie and referring to your use of the website (including your IP address) and processing of these personal data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
(d) This website uses Google Analytics with the extension “_anonymizeIp()”. This causes IP addresses to be abbreviated before further processing; reference to a person can be prevented by this. As far as the data collected concerning you have a personal reference, this reference is excluded immediately and the personal data are erased at once this way.
(e) We use Google Analytics in order to analyse use of our website and regularly improve it. The statistics acquired enable us to improve our offer and to make it more interesting for you as the user. For exceptions in which personal data are transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for using Google Analytics is Article 6(1)(1)(f) GDPR [sic].
(f) Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User terms and conditions: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, and the data protection statement: http://www.google.de/intl/de/policies/privacy.
[(7) This website also uses Google Analytics for device-comprehensive analysis of visitor flows that is performed via a user ID. In your customer account, under “My data”, “Personal data”, you can deactivate device-comprehensive analysis of your use.]
§ 6 Social media
(1) Use of social media plug-ins
(a) We currently use the following social media plug-ins: Facebook, Google+, Twitter, Instagram, Pinterest. We use the so-called two-click solution for this. This means that when you visit our page, personal data generally will not be passed on to the providers of the plug-ins initially. The provider of the plug-in is indicated by the mark on the box above its first letter or the logo. We enable you to communicate directly with the provider of the plug-in using the button. Only if you click the marked field and activate it this way will the plug-in provider be informed that you have called the corresponding website of our online offer. The data mentioned in § 3 of this statement will be transferred as well. In case of Facebook, the IP address will be anonymized at once after collection within Germany according to the information of the respective providers. Activation of the plug-in will therefore transfer personal data concerning you to the respective plug-in provider, where they will be stored (in the USA for US providers). Since the plug-in provider collects data in particular using cookies, we recommend that you delete all cookies via the safety settings of your browser before clicking the greyed-out box.
(b) We cannot influence the collected data and data processing operations, and we do not know the full scope of data collection, purpose of processing, storage periods. We also have no information on erasure of the data collected by the plug-in provider.
(c) The plug-in provider stores the data collected concerning you in usage profiles and uses them for the purpose of advertising, market research and/or demand-oriented design of its website. Such evaluation shall specifically take place in order to display demand-oriented advertisements and in order to inform other users of the social network of your activities on our website. You have a right to object to the generation of these user profiles. In order to exercise this right, you must contact the respective plug-in provider. With these plug-ins, we enable you to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for using the plug-ins is Article 6(1)(1)(f) GDPR [sic].
(d) Data will be transmitted independently of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your account with the plug-in provider. If you click the activated button and, e.g., link the page, the plug-in provider will also store this information in your user account and publicly disclose it to your contacts. We recommend that you regularly log out after using a social network, in particular before activating the button, since this prevents assignment to your profile with the plug-in provider.
(e) Further information on the purpose and scope of data collection and processing by the plugin provider is available in the following data protection statements of these providers. It also contains further information on your rights in this respect and setting options for protecting your privacy.
(f) Addresses of the respective plug-in providers and URL with their data protection notices:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; more information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA; https://help.instagram.com/155833707900388.
§ 7 Newsletter
(1) With your consent, you can subscribe to our newsletter in which we will inform you about our current interesting offers. The advertised goods and services are designated in the declaration of consent.
(2) We use the so-called double opt-in procedure for our newsletter. This means that we send an email to your indicated email address after your subscription, in which we ask you to confirm that you desire to receive the newsletter. If you do not confirm your subscription within 24 hours, your information will be blocked and erased automatically after one (1) month. Beyond this, we store the IP addresses used by you from time to time and both the times of subscription and confirmation. The purpose of the proceedings is to document your subscription and to investigate any possible abuse of your personal data.
(3) The only mandatory information for receiving the newsletter is your email address. Indication of further, separately marked data is voluntary and used in order to contact you personally. After you confirm this, we will store your email address for the purpose of sending you the newsletter. The legal basis shall be Article 6(1)(1)(a) GDPR [sic].
(4) You may withdraw your consent to receiving the newsletter at any time and unsubscribe from the newsletter. You can withdraw your consent by clicking the link provided in each newsletter email, via this https://hermanns.us14.list-manage.com/unsub_confirm.html of the website, by email to email@example.com or by sending a message to the contact details indicated in the imprint.
(5) Please note that we will evaluate your user behaviour when we send you the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels that are one-pixel picture files stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons to your email address and an individual ID. Links contained in the newsletter contain this ID as well. We use the data collected this way to compile a user profile in order to customise the newsletter to your individual interests. In the scope of this, we will record when you read our newsletters, which links you click in them, and we will conclude from this to your personal interests. We will link these data to your actions taken on our website.
You can object to this tracking at any time by clicking the separate link provided in each email or by informing us on any other contact channel. The information will be stored for as long as you have subscribed to the newsletter. After unsubscription, we will store the data purely statistically and anonymously. Such tracking is also not possible when you have deactivated display of pictures in your email program by default. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you have the pictures displayed manually, the above tracking will take place.
§ 8 Online advertisement
(1) Facebook Remarketing
We use the application Facebook Remarketing. This is a procedure with which we want to contact you again. This application makes it possible to show you our ads as you continue to use the internet after visiting our website. This is done with cookies stored in your browser, through which your user behaviour when you visit various websites is recorded and evaluated by Google. This way, Google can determine your earlier visit to our website. Google will not combine the data collected in the scope of remarketing with your personal data that may be stored by Google according to its statements. In particular, Google states that it uses pseudonymisation for remarketing.
§ 9 Data protection in case of applications and the application procedure
We collect and process personal data of applicants for the purpose of the application proceedings (the legal basis is Article 6(1)(1)(b) or (f) GDPR [sic]). Processing may also take place electronically. This is specifically the case if an applicant transmits the corresponding application documents to us electronically, e.g. by email or via a web form on the website. If we enter into an employment contract with an applicant, the transmitted data will be stored for the purpose of the employment, under observation of the legal requirements. If we do not enter into an employment contract with the applicant, the application documents will be deleted automatically 6 months after disclosure of the negative decision if deletion is not opposed by any other legitimate interests on our side. Other legitimate interests in this meaning shall include the burden of proof in proceedings under the Allgemeines Gleichbehandlungsgesetz (the general law on equal treatment).