Data Protection Notice
The following notice provides you with an overview of which personal data Formel D GmbH (hereinafter referred to as Formel D GmbH, or “we”) collects during your visit to our website, for what purpose and how this data is used.
Your personal data will be transmitted to salesforce.com, Inc. for support as a processor in the context of the use of a customer relationship management tool. A transfer will be made to a recipient in a third country.
Getting in Contact
Formel D GmbH offers you the opportunity to use the website for the following purposes, for example to obtain information or to contact us regarding various questions about Formel D GmbH. You have the option of contacting Formel D GmbH by phone. Alternatively, contact may be made via the supplied email address: info@formeld.com. In this case, the personal data transmitted by the user in the email will be stored. Without the provision of this information, we will not be able to process your request.
Processing of this data is carried out as part of pre-contractual measures required to provide the service offered, in accordance with Article 6 (1)(b) of the GDPR. If the contact does not concern either your own pre-contractual measure or a contract you have already concluded with Formel D GmbH, we will process your personal data in accordance with Article 6 (1)(f) of the GDPR pursuant to our legitimate interest in processing your request through this channel. The data will eventually be deleted, as long as the data is not still required to fulfill a contract or for pre-contract activities. If Formel D GmbH is obligated to archive your personal data due to legal obligations, e.g. compliance with the storage obligations according to HGB (German Commercial Code) and AO (German Tax Code), the data will be blocked for further processing. After expiration of the retention periods, the data will be deleted without further ado and in accordance with data protection regulations.
You can read about your existing rights towards us in the section “Rights of the data subject” below in the general principles of data processing.
Integration of Other Members of the Group
Insofar as the inquiry relates to the activities of subsidiaries, associated companies or companies managing the business of Formel D GmbH and it is necessary for efficient processing of the inquiry, your data may be passed on to subsidiaries of Formel D GmbH. The legal basis for this is Article 6 (1)(f) of the GDPR in conjunction with Recital 48, since we have a legitimate interest in the transfer for internal administrative purposes.
Application
You can apply on our site for an advertised position or send us an unsolicited application. For this purpose we need your personal data such as your name, your address, and your email address. If you want, you can upload your application to our applicant portal by clicking the corresponding button. We need the data to carry out the application procedure. This data is processed for the purposes of the employment relationship in accordance with § 26 (1)(1) of the BDSG (German Federal Data Protection Act). The data will be deleted at the latest six months after completion of the application process, unless the data is still needed for the execution of the employment relationship.
Your personal data will be transferred to eRecruiter GmbH for support as a processor. No transfer to a recipient in a third country will occur.
You can read about your additional existing rights in the section “Rights of the data subject” below in the general principles of data processing.
Use of the Formel D e-Report 3.0 app
In addition, there is the option of using our Formel D e-Report 3.0 app. This app is an online reporting platform of Formel D GmbH. It allows you to review your projects from any location by showing the development and shortcomings of the project.
You can download our app from the App Store to your mobile device. Below, we would like to give you an overview of the processing of your personal data in connection with this app.
Download of the App
When you download the app, the operator of the App Store processes the necessary information, such as email address, user name, customer number in the App Store, and individual device recognition. However, this personal data is not processed by us; therefore, we have no influence on the processing. The App Store operator is the responsible data controller.
When you download our app, we process the following data, which is required for this download to your device.
- IP address of the user
- Date and time of the request
- Access Status/HTTP Status Code
- Operating system of the user
The legal basis is our legitimate interest according to Article 6(1)(f) of the GDPR. Our legitimate interest is to ensure the security and stability of the app and to provide you with our services. Your personal data will be deleted after 12 months.
Newsletter and Newsletter Tracking
We send out newsletters with information about our products and our company.
The newsletters are sent by the mailing service provider Pardot, a newsletter mailing and marketing platform of the CRM (Customer Relationship Management) system provider Salesforce (Salesforce.com, Inc., 415 Mission Street, San Francisco, California, USA, “Salesforce”). The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from the server of the mailing service provider when the newsletter is opened. As part of this retrieval, information on your browser and your system, as well as your IP address and the time of retrieval are collected. This information is used for technical improvement of the services based on the technical data, your reading behavior, the retrieval locations (which can be determined by the IP address), or the access times. For statistical purposes, we also determine whether the newsletter is opened, when it is opened, and which links are clicked within it. The evaluations help us recognize the reading habits of our users and adapt our content to them or send different content based on the interests and time zone of our users.
The purpose of processing this data is to send the newsletter, which is based on your consent in accordance with Article 6 (1)(a) of the GDPR. Consent is obtained during the registration process with reference to this privacy policy. You can revoke your consent at any time. You will find a link to revoke your subscription to the newsletter at the end of each newsletter. If you withdraw your consent, the lawfulness of processing that took place by reason of consent until its withdrawal remains unaffected. If you select to revoke your declaration of consent, the data will be deleted, unless there is a need for further storage of the data, e.g. due to legal requirements.
Your personal data will be transferred to Salesforce.com, Inc. for support as a processor. A transfer will be made to a recipient in a third country.
You can read about your additional existing rights in the section “Rights of the data subject” below in the general principles of data processing. Whenever Formel D GmbH selects partners, they must meet the requirements for personal data transmission to a third country.
Processing by third parties
In addition to the service providers mentioned above, we use the following service providers who have access to personal data:
- Web host: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
- Agency: INCREON GmbH, Robert-Bürkle-Strasse 3, 85737 Ismaning, Germany
Log files
Every time a user accesses our homepage and every time a file is retrieved, data involving this process is automatically recorded and stored in a log file. Specifically, the following data record is stored about each access:
- Name of the accessed file;
- Date and time of access;
- Amount of transferred data;
- Notification whether the access was successful;
- Description of what type of web browser was used;
- Requesting domain.
The logged data is never merged with other data sources, especially data that allows assignment to a specific person.
The data is evaluated for statistical purposes so that we can optimize our internet presence and our offers. The legal basis for temporary storage of the data and the server log files is Article 6 (1)(b) of the GDPR. The data is stored in log files to ensure the functionality of the website. The data is deleted as soon as it is no longer required for the purpose for which it was collected. If data is collected for the provision of the website, the data is deleted when the respective session ends.
Use of Cookies and Other Technologies on our Website
Cookies:
The webpages use so-called cookies in several places. Cookies are small text files that are stored on your computer and saved by your browser. Among other things, they are used to determine the frequency of use and the number of users of the webpages and thus make the internet presence more user-friendly and effective. Our website uses so-called “session cookies”, which are only temporarily stored for the duration of your use of the webpages and then automatically deleted, and “persistent cookies”. The content of a persistent cookie is limited to an identification number to record information about users who repeatedly access a website. The purpose of such cookies is to recognize you as a user and, if necessary, to offer you optimized user guidance.
Cookies do not cause any damage to your computer and do not contain viruses. You can prevent the storage of cookies by setting your browser preferences accordingly. If you choose not to accept cookies, it may limit the functionality of the website.
Session Cookies:
The use of session cookies is necessary for us to make the website available to you. This represents a legitimate interest for us. The legal basis for processing your personal data when using session cookies is Article 6 (1)(f) of the GDPR. You can object to the use of session cookies, but please note that without cookies some functions of our website cannot be offered. Your personal data will only be stored for the duration of your use of the website and deleted afterwards. You can read about your additional existing rights in the section “Rights of the data subject” below in the general principles of data processing.
Persistent Cookies:
Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time. With the help of cookies, we are able to track your usage patterns and thereby improve our service to you. They should also optimize your surfing experience on our website. Persistent cookies are distinguished according to whether they are technically necessary or not. If this is true in individual cases, they must also be based on Article 6 (1)(f) of the GDPR. The use of technically unnecessary cookies requires your consent. These cookies are only set when you have actively given your consent. The legal basis for the data processing is Article 6 (1)(a) of the GDPR. You can revoke your consent at any time. If you withdraw your consent, the lawfulness of processing that took place by reason of consent until its withdrawal remains unaffected. You can configure your internet browser so that our cookies cannot be stored on your computer or so that cookies already stored are deleted. If you choose not to accept cookies, it may limit the functionality of the website.
With your consent, we also integrate cookies from third parties. In this case, the corresponding data packages from third parties are stored in your browser or transmitted to them. You can usually also prevent the use of third-party cookies by adjusting your browser settings accordingly. The legal basis for processing your personal data when using third-party cookies is Article 6 (1)(a) of the GDPR. In this case you can also revoke your consent at any time. If you withdraw your consent, the lawfulness of processing that took place by reason of consent until its withdrawal remains unaffected.
You can read about your additional existing rights in the section “Rights of the data subject” below in the general principles of data processing.
The button at the bottom left of your browser takes you to our cookie banner to change your most recent settings.
In the cookie descriptions “Your other existing rights” you can see the data protection information under “General principles of data processing”.
Integration of videos on the website
YouTube videos are embedded on our website. The operator of the YouTube video platform is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The videos on our website are embedded in such a way that setting of cookies is blocked until there is an active click on the playback button. By clicking on the play button, you consent to YouTube setting cookies on the device you are using, which may also be used to analyze user behavior for market research and marketing purposes. We have no influence on it. If you do not want Google to collect data about you and link it to your personal profile, you must log out of Google before visiting our website. You can find more details on the use of cookies by YouTube in Google’s cookie policy at https://policies.google.com/technologies/types?hl=de.
Integration of Google Maps
We use Google Maps on our website to display interactive maps and to provide directions. Google Maps is a mapping service operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. When you use Google Maps, information about the use of this website, including your IP address and the (starting point) address entered as part of the route planner feature, may be transmitted to Google in the USA.
When you visit the careers section of our website, which contains Google Maps, your browser establishes a direct connection with Google’s servers. Google transmits the map content directly to your browser, which in turn integrates it into the website. Therefore, we have no influence on the scope of the data collected by Google through this feature. To the best of our knowledge, it includes at least the following data:
- Date and time when the particular website was accessed,
- Internet address or URL of the accessed web page,
- IP address, (starting point) address entered as part of route planning.
The legal basis for the processing is your consent pursuant to Art. 6 (1)(a) of the GDPR. You can revoke your consent at any time with effect for the future.
We have no influence on the additional processing and use of the data by Google; therefore, we cannot assume any responsibility for it.
If you do not want Google to collect, process, or use data about you via our website, you can deactivate JavaScript in your browser settings. However, if you do that, you will not be able to use the map display.
To learn more about the purpose and scope of the data collection, the further processing and use of the data by the providers, as well as the relevant rights and setting options for privacy protection, please go directly to Google’s privacy notice (https://policies.google.com/privacy?hl=de).
Sharing function via social plugins (social media, email)
On our websites, you can share pages and posts via social media channels. It is based on our legitimate interests in effective user information and communication with users pursuant to Article 6 (1)(f) of the GDPR. We do not collect any personal data via social plugins or their use. To prevent data from being transferred to the service providers of the social media channels without the user’s knowledge, we use the Shariff plugin. This plugin ensures that initially no personal data is passed on to the providers of the individual social plugins when you visit our website. Data can only be transmitted to the service provider and stored there when you click on one of the social plugins. With the Shariff solution, we ensure the data protection interests of our visitors as much as is possible based on the current state of technology.
You can find more information about the Shariff solution directly on the website of the provider, Heise Medien GmbH & Co. KG:
https://m.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html
Security
Formel D GmbH cannot accept liability for the transfer of data over the internet. Transmissions via email are not encrypted. Disclosure to third parties can therefore not be ruled out. Therefore, it is recommended that confidential information is sent exclusively by mail.
Controller
Responsible persons in respect of the data protection regulations are:
Formel D GmbH
Schanzenstraße 6-20
Gebäude 2.08
DE-51063 Cologne
Deletion of Data / Duration of Storage
Your personal data will be deleted as soon as the purpose of storage no longer applies. The data may be stored for longer if such storage is provided for through the European or national legislature, in the form of directives under European Union law, statutes or other provisions to which Formel D GmbH is subject. Deletion of data will also take place once the given storage period under the stated standards has expired, unless further storage of the data is necessary to conclude or fulfill a contract.
Rights of the Data Subject
If your personal data is processed, you are a data subject within the meaning of the GDPR, and you are entitled to the rights described below.
In accordance with Article 15 of the GDPR, you may request information about your personal data processed by us. To make it easier for us to compile the necessary data, please specify your specific concern in your request for information.
If the information relating to you is not (or no longer) applicable, you may request correction in accordance with Article 16 of the GDPR. If your data is incomplete, you can request that it be supplemented.
You can demand the deletion of your personal data under the conditions of Article 17 of the GDPR.
Within the scope of the provisions of Article 18 of the GDPR, you have the right to demand that the processing of your data be restricted.
Pursuant to Article 21 of the GDPR, you have the right to object to the processing of data concerning you at any time for reasons arising from your particular situation (optional, if the processing of personal data is based on a legitimate interest of the controller/third party).
Within the scope of data transferability pursuant to Article 20 of the GDPR, you have the right to receive the personal data relating to you which you have made available to us in a structured, standard, and machine-readable format. No automated decision-making as defined in Article 22 of the GDPR takes place in the course of processing your personal data.
Our Presence in Social Media
Formel D GmbH maintains publicly accessible professional company profiles on various social networks. We use them to publish and distribute content, offers and product recommendations of our company. They also help us in other areas, for example, to promote direct exchange with our existing and prospective customers.
By using one of these networks, a large number of data processing operations are set in motion. This data is processed even if you do not maintain your own profile with this network. When you visit one of our profiles, your personal data is not only processed (and possibly stored) by us, but also by the operator of the respective network. Personal data includes your name, age, email address, photos, and other information that you have voluntarily shared in the networks, as well as information about your usage patterns and interactions with the contents of the respective company profile. Under certain circumstances, your IP address may also be collected. There is no obligation on your part to provide us with your personal data in order to visit our company profiles. However, it may be necessary in order to use individual functions of our profiles (such as commenting on articles, contacting us).
Formel D GmbH has no influence on the data processing triggered by the operators of the social networks as a result of your visit, which may vary between the individual networks and is not necessarily traceable by us (e.g. setting of cookies). For additional information regarding details on collection and storage of your personal data, as well as the purpose, type, and scope of processing, we would like to refer you to the privacy policies of the respective social network operators.
The privacy policy of Facebook, operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland, can be found at https://de-de.facebook.com/policy.php
The privacy policy of Xing, operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany, can be found at https://privacy.xing.com/de/datenschutzerklaerung
The privacy policy of LinkedIn, operated by LinkedIn Ireland Limited Company, Wilton Place, Dublin 2, Ireland, can be found at https://www.linkedin.com/legal/privacy-policy
If you use our profiles in social networks to contact us (e.g. through private messages, commenting/sharing contributions or reactions to such), we process the data you submit to us solely for the purpose of contacting you. We do not merge it with any other data available to us. The legal basis for the data collection is therefore Article 6 (1)(b) of the GDPR. If the contact does not concern either your own pre-contractual measure or a contract you have already concluded with Formel D GmbH, we will process your personal data in accordance with Article 6 (1)(f) of the GDPR pursuant to our legitimate interest in processing your request through this channel.
Your personal data will be deleted as soon as the purpose of the storage no longer applies or you request us to delete it. The data may be stored for longer if such storage is provided for through the European or national legislature, in the form of directives under European Union law, statutes or other provisions to which Formel D GmbH is subject. Deletion of data will also take place once the given storage period under the stated standards has expired, unless further storage of the data is necessary to conclude or fulfill a contract. For information on how long the operators of the social networks store your personal data, please refer to the respective privacy notices above.
Further Information about Facebook:
The social network Facebook is offered by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). As part of utilizing Page Insights, we are jointly responsible with Facebook for data processing on the Facebook fan page pursuant to Article 26 of the GDPR. We use the statistics provided by Facebook to make posts more attractive and effective. For example, the categorization by age and gender is used for correctly addressing users, and the users’ preferred visiting times are used for a time-optimized scheduling of the posts. Information about the type of end devices used by the visitors can be used to adapt the appearance and design of the posts to the respective device. The data processing as described above is carried out on the basis of the existing legitimate interests of Formel D GmbH according to Article 6(1)(f) of the GDPR. You can object to this data processing by Facebook at any time by no longer subscribing to our Facebook page (by selecting the functions “Unlike this page” and/or “Unfollow this page” you will remove the link between your user profile and our fan page).
If you wish to object to the individual data processing operations mentioned above, please go to: https://www.facebook.com/settings?tab=ads or http://www.youronlinechoices.com
Information on the agreement concluded with Facebook can be found at https://www.facebook.com/legal/terms/page_controller_addendum
For a summary of this agreement and more information on Facebook’s page views, please visit https://www.facebook.com/legal/terms/information_about_page_insights_data
Withdrawal of consent: You may at any time withdraw your declaration of consent under data privacy law. If you withdraw your consent, the lawfulness of processing that took place by reason of consent until its withdrawal remains unaffected.
No automated decision-making as defined in Article 22 of the GDPR takes place in the course of processing your personal data.
To exercise your rights, please contact the above referenced controller, as this is also where your rights will be applied. You can also contact the data protection officer directly, especially if your request demands a higher level of confidentiality:
The data protection officer of Formel D GmbH c/o migosens GmbH
Wiesenstr. 35
45473 Mülheim an der Ruhr
dsb-formeld@dsb24.net
Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial appeal, you have the right to appeal to a supervising authority, in particular to one in the member state in which you live or work, or in the place where the alleged infringement took place, if you are of the opinion that the processing of your personal data was in contravention of the GDPR.
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestr. 2-4
Helga Block
40213 Düsseldorf
Phone: +49(0)211/38424-0
poststelle@ldi.nrw.de