DATA PROTECTION INFORMATION AND NOTES ON COOKIES

This data protection statement of wh-p GmbH Beratende Ingenieure, Curiestr. 2, 70563 Stuttgart, Germany, informs you about the processing of your personal data within our online offer at www.wh-p.de

I. Responsible body and data protection officer 

  1. This data protection information applies to data processing by:

wh-p GmbH Beratende Ingenieure

represented by the Managing Directors Dipl.-Ing. Karsten Held and Prof. Dipl.-Ing. Martin Stumpf

Curiestr. 2, 70563 Stuttgart, Germany

Phone: +49 711 9788 40

Fax: +49 711 9788 419

info@wh-p.de

  1. Contact data of the company data protection officer:

wh-p GmbH Beratende Ingenieure

Curiestr. 2, 70563 Stuttgart, Germany

Tel: +49 711-978840

info@wh-p.de

II. Information on the processing of personal data

  1. We process the following personal data related to you:

  • User related data, e.g. names, addresses;
  • Contact data, e.g. E-Mail, telephone numbers;
  • Usage data, e.g. websites visited, interest in content, access times;
  • Meta/Communication data, e.g. device information, IP-Addresses. 

  1. Processing is carried out for the following purposes:

  • Usage of our online offer including functions and contents;
  • Fulfilment of contract or in the pre-contractual sector;
  • Answering contact inquiries and communication with you as a user;
  • Inclusion in our applicant data bank;
  • Security measures;
  • Range measurement; 

  1. Legal bases on the basis of which we process personal data:

  • Obtaining consent is based on Art. 6 para. 1 item a and Art. 7 GDPR;
  • The processing of personal data for the fulfilment of our services and the execution of contractual measures as well as the execution of pre-contractual measures, e.g. the answering of inquiries, is based on Art. 6 para. 1 item b GDPR;
  • The legal basis for the processing of personal data to fulfil our legal obligations is based on Art. 6 para. 1 item c GDPR;
  • The processing of data for the protection of our legitimate interests is based on Art. 6 para. 1 item f GDPR. 

  1. Passing on your personal data to third parties

(1) If, in the course of our processing of personal data, we transmit personal data to third parties, disclose it to third parties or grant third parties access to the data, this is done on the basis of a contractual agreement with your consent, a legal obligation incumbent on us or on the basis of our legitimate interests (e.g. when using agents or web hosts).

(2) If we commission third parties to process data on the basis of a so-called "contract processing agreement", this is done on the basis of Art. 28 GDPR.

(3) If we are jointly responsible with another party for processing personal data, this is done on the basis of an agreement in accordance with Art 26 GDPR.

  1. Transfers of personal data to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this takes place within the scope of the use of third-party services or the disclosure or transfer of data to third parties, we will only disclose the data in a third country if the special requirements of Art. 44 et seq. GDPR are complied with. This means, for example, processing is carried out on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy Shield") or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").

  1. What rights do you have as the affected person?

(1) You have the right:

  • in accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us;
  • in accordance with Art. 16 GDPR, to demand the correction of incorrect, or the completion of personal data stored by us;
  • to request the deletion of your personal data stored with us in accordance with Art. 17 GDPR;
  • in accordance with Art. 18 GDPR, to restrict the processing of your personal data;
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible;
  • to complain to a supervisory authority pursuant to Art. 77 GDPR.

(2) If you have given us your consent to data processing, you can revoke this consent at any time (Art. 7 para. 3 GDPR). Consequently, we may no longer continue data processing based on this consent for the future.

(3) If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 item f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection to direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation. If you would like to make use of your right of revocation or objection, simply send an e-mail to info@wh-p.de 

  1. Deletion of data

The data processed by us will be deleted or its processing restricted as soon as it is no longer required for its intended purpose and there are no legal storage obligations to prevent deletion. If the data is not deleted because it is necessary for other and legally permissible purposes, its processing is restricted, e.g. by blocking. 

  1. Establishing contact

If you contact us (e.g. by E-Mail, telephone or via social media), your details will be processed regarding the contact inquiry and consequent dealings in accordance with Art. 6 para. 1 item b) or item f) GDPR. We will store your details for the duration of communication with you until your inquiry has been answered. We delete your inquiry and personal data if they are no longer necessary. We only deviate from this if another legal basis of Art 6 GDPR exists (e.g. your consent for further use).

  1. Personal data in the context of a job application

(1) If you send us an application, your details (name, address, title as well as certificates, curriculum vitae) will be processed for the purpose of administering the job application in accordance with Art. 6 Para. 1 b) as a measure to prepare for a contract. We use your personal data for the purposes of communication and legally compliant initiation of employment relationships to the extent required in each case. Data processing is carried out on the basis of the statutory provisions, primarily on the basis of:

  • Art. 6 para. 1 sentence 1 letter a GDPR ("Consent")
  • and/or according to Art. 6 para. 1 sentence 1 letter b GDPR ("implementation of pre-contractual measures for your inquiry"),

The processing may also be carried out by electronic means. This is particularly the case if an applicant submits relevant application documents to the person responsible for processing by electronic means, for example by E-Mail.

Essentially, the respective legal basis for the relevant processing of your personal data is determined as follows:

  • You consent to the processing of data concerning you for the above-mentioned purposes.

If you have not given your consent, your personal data will be processed as follows:

  •  The processing of your personal data is necessary as a result of the inquiry made by you due to pre-contractual measures.

Insofar as we do not offer you an employment relationship after completion of the application process:

  • The processing of personal data is for the protection of our legitimate interests in accordance with Art. 6 Para. 1 S.1 letter f GDPR. In particular, your personal data will be stored in order to be able to deal with any claims you may have on the basis of the General Equal Treatment Act or other statutory provisions. In this case our interests outweigh your interests or fundamental rights and freedoms.

In particular, the following personal data is processed, depending on the prerequisites and accordingly necessary disclosure for the respective employment:

  • First and last name including signature,
  • Address (both private and, where appropriate, business),
  • Telephone number (both private and business),
  • Job title,
  • Passport photo(s),
  • Nationality,
  • Date of birth,
  • Place of birth,
  • Residence permit,
  • Severely handicapped status,
  • High school diploma,
  • Education,
  • Title,
  • Marital status,
  • Denomination,
  • Driver's license data,
  • Type & period of training,
  • Other personal data such as references, certificates, self-assessment, references etc.,
  • information from your cover letter and your curriculum vitae.

If your application concerns a specific department, your personal data submitted in the context of your application will be forwarded to the respective department within which the corresponding position is vacant. 

The recipients of the data are obliged to process your personal data in accordance with the relevant data protection laws.

Your personal data will be deleted after six months. The deletion period begins with the end of the application procedure by the rejection for the vacant position.

(2) We will only deviate from the above if you have given us your consent for further use in our applicant database. Your details will be stored here for a maximum of one year and, if necessary, used for further communication with you. After that, the data will be deleted. You can revoke this consent for the future at any time. The same applies to any further information provided voluntarily. Your data will not be passed on to third parties.

  1. Data processing by host provider Domainfactory, Server Logfiles

(1) Our website www-wh-p.de  is hosted by the Internet provider Domainfactory. Their data protection regulations are available at https://www.df.eu/de/datenschutz/

(2) The hosting services used by us serve the operation of this online offer and thus the provision of the following services: Computing capacity, storage space, database services, technical security and maintenance.

(3) Domainfactory also creates server log files. These log the type of browser used to access this website, the pages accessed, the operating system, the host name of the accessing computer (IP address), the time the page was accessed and the referrer URL (referring page). This data cannot be assigned by us to specific persons.

  1. Cookies

(1) "Cookies" are small files that are stored on users' devices and can therefore store different information about the users of a website, e.g. if the behaviour of a user (e.g. viewing certain contents, using functions) is stored on individual websites in a user profile. Such profiles make it possible to display to users such content that corresponds to their interests and thus serve to improve our offer. “Cookies" are also understood to be other technologies that fulfil comparable functions (e.g. "user IDs" in the case of pseudonymous online identification). If we use cookies or "tracking" technologies, we will inform you separately in our privacy policy.

(2) Before we process or arrange for the processing of data within the scope of Cookie use for analysis and advertising purposes, we ask users for their consent, which can be revoked at any time (marked in the Cookie banner as "Statistics" and "Marketing"). Without this consent, Cookies may be used which are necessary for the operation of our online offer (marked in the Cookie banner as "essential"). Their use is based on our legitimate interest in the optimal functioning of our websites.

(3) If you want to prevent Cookies from being stored on your computer, you can deactivate the corresponding option in the system settings of your browser. Stored Cookies can be deleted in the system settings of your browser. 

  1. Cookies and Online Marketing

(1) For online marketing purposes, we process personal data, e.g. the presentation of advertising content (e.g.: advertisements) in accordance with the interests of the users or for the purpose of measuring their effectiveness. For this purpose, so-called user profiles are created and stored in a Cookie. This information includes, for example, content viewed, websites visited, online networks used or technical information such as the browser used and information on usage times. These Cookies can later also be extracted from other websites that use the same procedure, analysed for the purpose of displaying content and supplemented with further data and stored on the server of the online marketing procedure provider.

(2) In addition, the IP addresses of the users may be stored from time to time. As far as possible, we use IP masking procedures (pseudonymisation by shortening the IP address) to protect the users. Within the scope of the online marketing procedure, no clear names or clear data of the users (such as E-Mail addresses or names) are stored, just pseudonyms. As an exception, clear data can be assigned to profiles. This is the case, for example, if the users are members of a social network whose online marketing procedure we use and the network links the user's profiles with the data.

(3) Generally, we receive summary information about the success of our advertisements. Within the scope of so-called conversion measurements, we can track which of our online marketing procedures has led to the conclusion of a contract. The conversion measurement is used solely to analyse the success of our marketing measures.

 

4) We use the following services: 

*Google Analytics: For Online marketing, specifically visitor action evaluation, interest based and behaviour related marketing, profiling, conversion measurement, range measurement (e.g. access statistics),

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;

Website: https://marketingplatform.google.com/intl/de/about/analytics/;

Privacy statement: https://policies.google.com/privacy;

Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active;  (Opt-Out): Opt-Out-Plugin: http://tools.google.com/dlpage/gaoptout?hl=de

Settings for display of advertising pop-ups: https://adssettings.google.com/authenticated.

 

*Google Ads Conversion: For statistical purposes (analysis of anonymous visits to certain landing pages and link visits, and which keywords and ads users have responded to);

Service provider: Google Ireland Limited, see above for details;
Duration of data processing: recording of conversions up to 90 days.

 

*Google Ads Dynamic Remarketing: For Marketing, placing interest based advertisements;

Service provider: Google Ireland Limited, see above for details;
Duration of processing: up to 90 days after a visit to a website equipped with the Remarketing Pixel.


*Google Ads Audiences: For Marketing, placing interest based advertising for users with similar profiles;

Service provider: Google Ireland Limited, see above for details;
Duration of processing: up to 90 days after a visit to a website equipped with the Remarketing Pixel;

Further details: https://www.google.com/privacy/ads/ 

  1. Presence in social networks

  • We maintain online presences within social networks and platforms in order to communicate with interested parties and to inform them about our services. When calling up the respective networks and platforms, the terms and conditions and the data processing principles of the respective operator apply.
  • User data is usually processed by network providers for market research and advertising purposes, e.g. to create user profiles. The user profiles can be used to place advertisements inside and outside the networks. For these purposes cookies are stored on the users' computers (see above).
  • Our website contains references (links) to external social networks and are identified by the corresponding network logo.
  • So-called Social Plugins are not used on our site, i.e. if you do not explicitly follow the corresponding links, no data is transferred to Facebook or Instagram. If you follow these references (links), your browser will connect to the corresponding social network. In doing so, data such as your IP address is transmitted so that your visit to our site can be assigned to your existing social network user account, if any. You can prevent this assignment by logging out of your corresponding social network user account before clicking on the link.
  • For more detailed information on data processing, the settings options for the protection of your privacy and the opt-out rights, we refer you to the respective information of the network providers, which we have summarised for you below.

 *Instagram: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA;

Website: https://www.instagram.com;

Privacy statement: http://instagram.com/about/legal/privacy.

 

*Facebook: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA;

Website: https://www.facebook.com;

Privacy statement: https://www.facebook.com/about/privacy;

Privacy Shield:https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active;

Settings for advertising: https://www.facebook.com/settings?tab=ads;

Agreement on collaborative processing of personal data : https://www.facebook.com/legal/terms/page_controller_addendum;

Data protection information for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.

 

*Twitter:

Service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Data privacy statement: https://twitter.com/de/privacy, https://twitter.com/personalization;

Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active. 

  1. Plugins and embedded functions and content

  • We integrate functional and content elements from third parties into our websites, e.g. graphics or videos for the purpose of providing our online offer and for the user-friendliness of our websites. This integration means that the third party providers process the IP address of the users, as otherwise they would not be able to send the content to their browsers. 
  • Third party providers may also use so-called Pixel Tags (invisible graphics/"web beacons") for statistical or marketing purposes, e.g. to evaluate visitor traffic on the website.
  • The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information on the browser and the operating system, websites to be referred to, the time of visit and other information on the use of our online offer, as well as being linked to such information from other sources.
  • These are the following third-party elements:

 

*Google Maps: Google Ireland Limited, see above for further details

Opt-Out-Plugin: http://tools.google.com/dlpage/gaoptout?hl=de

Settings for display of advertising pop-ups: https://adssettings.google.com/authenticated.  

Status: December 2019

Up