1. General Information
If you have any questions or suggestions regarding this information, or if you wish to contact us about asserting your rights, please send your request to endios GmbH
Steckelhörn 11, 20457 Hamburg
Tel.: + 49 (0)40 228 6802-0
b. General Information on data processing
When using this website, personal data may be processed. The term “personal data” as used in data protection law refers to all information that relates to a specific or identifiable individual.The IP address can also be such a personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data. When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place on the basis of a legal permission. When you use this website, we process personal data only with your consent (Art. 6(1)(a) GDPR), for the performance of a contract to which you are a party, or at your request for the performance of pre-contractual measures (Art. 6(1)(b) GDPR), for the performance of a legal obligation (Art. 6(1)(c) GDPR) or if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data override (Art. 6 para. 1 (f) GDPR). If you apply for a vacant position in our company, we will also process your personal data for the purpose of deciding whether to establish an employment relationship (Section 26 (1) S. 1 BDSG).
c. Duration of Storage
Unless otherwise stated in the following notes, we only store data for as long as is necessary to achieve the processing purpose or to fulfill our contractual or legal obligations. Such legal obligations to retain data may arise in particular from commercial or tax law regulations.
d. Technical Service Providers
Unless otherwise stated in the following information, the processing of data is carried out on the servers of technical service providers who have been commissioned by us for this purpose. These service providers process the data only in accordance with explicit instructions and are contractually obligated to guarantee sufficient technical and organizational measures for data protection.
2. Processing of Server-Log-Files
During the purely informative use of our website, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). This includes by default: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 (1) f) GDPR. This processing serves the technical administration and security of the website. The data stored in access log files about accesses to the website are deleted after sixty days, all other data stored in log files are deleted after seven days, unless there is a justified suspicion of unlawful use based on concrete indications and further examination and processing of the information is necessary for this reason.
3. Newsletter via Mailchimp
a. Subscription and unsubscription
On our website we offer the possibility to sign up for our newsletter. After registration, we will inform you regularly about the latest news on our offers. A valid e-mail address is required to register for the newsletter. To verify the e-mail address, you will first receive a registration e-mail, which you must confirm via a link (double opt-in). If you subscribe to the newsletter on our website, we process personal data such as your e-mail address and name based on the consent you have given us. The processing is based on the legal basis of Art. 6 (1) a) GDPR. You can revoke your consent at any time with effect for the future, for example via the “unsubscribe” link in the newsletter or by contacting us via the channels mentioned above. The legality of the data processing operations already carried out remains unaffected by the revocation. When registering for the newsletter, we also store the IP address and the date and time of registration. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation to document your consent (Art. 6 para. 1 lit. c)) in conjunction with. Art. 7 para. 1 GDPR).
We also analyze the reading behavior and opening rates of our newsletter. For this purpose, pseudonymized usage data is collected and processed by us, which we do not merge with your email address or your IP address. The legal basis for the analysis of our newsletter is Art. 6 (1) (f) GDPR and the processing serves our legitimate interest in optimizing our newsletter. You can object to this at any time by contacting one of the contact channels mentioned above.
c. Service provider MailChimp
For newsletter delivery, we use the MailChimp service of The Rocket Science Group LLC d/b/a MailChimp (675 Ponce De Leon Ave NE, Suite 5000 Atlanta, Georgia 30308, USA, “MailChimp”). The processing is based on the legal basis of Art. 6 (1) f9 GDPR and serves our legitimate interest in optimizing and economically sending our newsletter.If you do not want your data to be processed by MailChimp, you should not subscribe to or unsubscribe from the newsletter.
4. Application for vacancies
If you apply to our company, we process your application data exclusively for purposes related to your interest in current or future employment with us and the processing of your application. Your application will only be processed and noted by the relevant contacts at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. If we are unable to offer you employment, we will retain the data you have provided for up to six months after for the purpose of answering questions relating to your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly consented to longer storage. The legal basis for data processing is 26 para. 1 p. 1 BDSG. If we store your applicant data for longer than six months and you have expressly consented to this, we would like to point out that this consent can be revoked at any time in accordance with Art. 7 Para. 3 GDPR. Such a revocation does not affect the lawfulness of the processing that was carried out on the basis of the consent until the revocation.
6. Google Analytics
This offer uses Jetpack, a tool for statistical analysis of visitor traffic, operated by Automattic Inc. (132 Hawthorne Street San Francisco, CA 94107, USA, “Automattic”), using the tracking technology of Quantcast Inc. (201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA). WordPress.com-Stats uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is stored on a server in the USA. The IP address is anonymized immediately after processing and before it is stored. The legal basis for the data processing in connection with the Jetpack service is Art. 6 (1) (f) GDPR and the processing serves the legitimate interest of analyzing user behavior on our website and thus possible demand-oriented design. You can prevent the installation of cookies by selecting the appropriate settings on your browser software. You can object to the collection and use of data by Quantcast with effect for the future by setting a so-called opt-out cookie under the address http://www.quantcast.com/opt-out
through the selection “Opt Out”. If you delete all cookies on your computer, you must set the opt-out cookie again.
8. Your rights
- lesbaren Format zu erhalten, und diese Daten einem anderen Verantwortlichen zu übermitteln.
Sie haben nach Maßgabe des Art. 21 DSGVO das Recht, gegen jede Verarbeitung, die auf der Rechtsgrundlage des Art. 6 Abs. 1 Buchst. e) oder f) DSGVO beruht, Widerspruch einzulegen. Sofern durch uns personenbezogene Daten über Sie zum Zweck der Direktwerbung verarbeitet werden, können Sie gegen diese Verarbeitung gem. Art. 21 Abs. 2 und Abs. 3 DSGVO Widerspruch einlegen.
10. Widerruf der Einwilligung
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
- In accordance with Article 15 GDPR and Section 34 BDSG, you have the right to request information about whether and, if so, to what extent we are processing personal data relating to you or not.
- You have the right to demand that we correct your data in accordance with Art. 16 GDPR.
- You have the right, in accordance with Art. 17 GDPR and § 35 BDSG, to demand that we delete your personal data.
- You have the right to have the processing of your personal data restricted in accordance with Art. 18 GDPR.
- You have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller.
9. right of objection
In accordance with Art. 21 GDPR, you have the right to object to any processing based on the legal basis of Art. 6(1)(e) or (f) GDPR. If personal data about you is processed by us for the purpose of direct marketing, you may object to such processing pursuant to Art. 21 (2) and (3) GDPR.
10. Revocation of consent
If you have given us separate consent to data processing, you may revoke this consent at any time in accordance with Art. 7 (3) GDPR. Such a revocation does not affect the lawfulness of the processing that was carried out on the basis of the consent until the revocation.
11. Data protection officer
You can reach our data protection officer at the following contact details: firstname.lastname@example.org
12. Complaint to a supervisory authority
If you believe that a processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. Status: Oktober 2022