Data privacy statement

1. Overview of data privacy

 General information

Below is a simple overview of what happens to your personal data when you visit this website. Personal data refers to all data that can be used to identify you personally. You can find more detailed information on data privacy in our data privacy policy below this data privacy statement.

Data collection on this website

Who is responsible for data collection on this website?

It is the website operator who handles data processing on this website. You will find their contact details in the section Information about the controller in this data privacy statement.

How do we collect your data?

First of all, we collect the data that you provide to us. This might be any data that you enter into a contact form, for example.

Other data is automatically collected by our IT systems or after you give your consent when you visit our website. These primarily include technical data, such as your web browser, operating system or time of website access. This data is collected automatically as soon as you access this website.

What do we use your data for?

 Some of your data is collected to ensure that the website is fully available without any errors. Other data may be used to analyse your user behaviour.

What are your rights with respect to your data?

 You have the right to receive information on the source, recipient and intended use of your stored personal data free of charge at all times. You also have the right to request rectification or erasure of this data. If you have given your consent to process your data, you have the right to withdraw this consent for the future at any time. You also have the right to demand limited processing of your personal data under certain circumstances. Moreover, you also have a right of appeal to the competent supervisory authority.

You may contact us at any time for further information on this subject or matters related to data privacy.

Analysis tools and third-party providers’ tools

Your browsing behaviour may be subject to statistical analysis during visits to this website. What are known as analysis programs mainly perform such analyses.

You will find detailed information on these analysis programs in the data privacy statement below.

2. Hosting

We host the contents of our website through the following provider:

External hosting

This website is hosted externally. Personal data which is collected on this server is saved on the hosting service provider’s/providers’ servers. This may include especially IP addresses, contact enquiries, metadata, communication data, contract details, contact details, names, website visits and other data which are generated via a website.

A professional provider supplies external hosting for the purpose of fulfilling contracts for our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interests of secure, fast, efficient provision of our website (Art. 6 (1) (f) GDPR). If relevant consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) German Telecommunications Telemedia Data Protection Act (TTDSG) if the consent includes storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) as specified in TTDSG. Consent can be revoked at any time.

Our hosting service provider(s) will only process your data in the way required to fulfil their service obligations and will follow our instructions regarding this data.

We use the following hosting service provider:

jweiland.net
Echterdinger Strasse 57
70794 Filderstadt bei Stuttgart
Germany

Order processing

We have concluded an order processing agreement to use the aforementioned service. This is a contract required under data protection legislation, which ensures that the provider only processes our website visitors’ personal data in accordance with our instructions and in compliance with the GDPR.

3. General information and mandatory information

 Data protection

The operators of these pages take the protection of your personal data very seriously. We will treat your personal data as confidential and in accordance with statutory data privacy regulations and this data privacy statement.

When you use this website, we collect a variety of personal data. Personal data refers to data that can be used to identify you as a person. This data privacy statement explains what data we collect and what we use it for. It also describes how this is carried out and why.

Please also note that data transmission over the Internet – by email, for example – may be susceptible to security vulnerabilities. It is not possible to fully protect data from unauthorised access.

Controller

The controller responsible for data processing on this website is:

IoT Venture GmbH

Hilpertstr. 31

64295 Darmstadt

Germany

Phone: +49 800 0060751

Email: info@iot-venture.com

The controller refers to a natural person or legal entity who alone or jointly with others determines the purposes and means of personal data processing (e.g. names, email addresses and similar).

Period of storage

Unless a more specific storage period has been specified within this data privacy statement, your personal data will remain with us until the purpose for processing the data ceases to exist. If you make a justified request for deletion or revoke consent to data processing, your data will be deleted provided that we do not have any other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial legislation); in the latter case, the data will be deleted once these reasons cease to apply.

General information on the legal basis for data processing on this website

If you have given your consent for processing of your data, we will process your personal data in compliance with Art. 6 (1) (a) GDPR, or Art. 9 (2) (a) GDPR if special data categories are being processed as specified in Art. 9 (1) GDPR. In the case of express consent for the transmission of personal data to third countries, data will also be processed in compliance with Art. 49 (1) (a) GDPR. If you have given your consent to the storage of cookies or retrieval of information on your terminal device (e.g. using device fingerprinting), the data will also be processed in compliance with Section 25 (1) TTDSG. Consent can be revoked at any time. If your data is required to fulfil a contract or take steps prior to entering into a contract, we also process your data in compliance with Art. 6 (1) (b) GDPR. Moreover, we will process your data in accordance with Art. 6 (1) (c) GDPR if they are required to comply with a legal obligation. Data may also be processed for reasons of our legitimate interest as specified in Art. 6 (1) (f) GDPR. Information on the relevant legal basis for each individual case is provided in the following paragraphs of this data protection statement.

Data Protection Officer

We have appointed a Data Protection Officer.

Email: datenschutz@iot-venture.com

Data transfer to the US and other third countries

Among other things, we use tools provided by companies based in the US or other third countries that are not secure in terms of data protection legislation. If these tools are active, your personal data may be transferred to these third countries and processed there. We’d like to point out that a level of data protection comparable to that provided in the EU cannot be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal steps against such action. As a result, it cannot be excluded that US authorities, such as intelligence services, will process, evaluate and permanently store your data located on US servers. We have no control over such processing activities.

Withdrawal of consent for data processing

Many data processing operations are only possible if your express consent has been obtained. You may withdraw consent that you have given at any time. Withdrawal of consent has no impact on the legality of data processing up to the point in time when consent was revoked.

Right to object to data collection in specific cases

 IF DATA IS PROCESSED ON THE BASIS OF ART. 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA DUE TO REASONS RELATED TO YOUR SPECIFIC CIRCUMSTANCES AT ANY TIME; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU WILL FIND THE RELEVANT LEGAL BASIS ON WHICH YOUR PERSONAL DATA IS PROCESSED IN THIS DATA PRIVACY STATEMENT. IF YOU LODGE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE ARE ABLE TO DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR PROCESSING SERVES TO ESTABLISH, ASSERT OR DEFEND LEGAL CLAIMS (OBJECTION AS PER ART. 21 (1) GDPR).

Right of appeal to competent supervisory authority

In the event of infringements of the GDPR, the data subject has the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the place where the alleged infringement took place. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process with your consent or process with the aim of fulfilling an order sent to you or to a third party in a customary machine-readable format. If you request direct transfer of data to another controller, this will only be performed if technically possible.

Information, erasure and rectification

Under the applicable provisions of the law, you have at all times the right to request access – free of charge – about your stored personal data, its source and the recipient, the purpose of its processing, and, where applicable, a right to rectification or erasure of this data. You may contact us at any time for further information on this subject or matters related to data privacy.

Right to restriction of processing

You have the right to demand limited processing of your personal data. You may contact us at any time for this purpose. The right to restriction of processing exists in the following cases:

• If you wish to dispute the accuracy of the personal data that we store on you, we generally need time to check this. You have the right to demand limited processing of your personal data while we make this check.
• If your personal data has been/is being processed in an unlawful way, you may request that data processing is restricted instead of erasure.
• When we no longer need your personal data but you need them to exercise, defend or assert legal claims, you have the right to require that processing of your personal data be restricted instead of erasure.
• If you lodge an objection as per Art. 21 (1) GDPR, there needs to be a balance between your interests and ours. You have the right to demand limited processing of your personal data if it has not yet been determined whose interests predominate.

If you have restricted processing of your personal data, this personal data, irrespective of whether it is stored or not, may only be processed with your consent or to establish, assert, or defend legal claims, or to protect the rights of another natural person or legal entity, or for reasons of important public interest in the European Union or a Member State.

SSL or TLS encryption

This site uses SSL and/or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries, that you send to us as the site owners. You can easily recognise an encrypted connection because the address line in the browser changes from http:// to https:// and also displays a padlock icon.

The data that you provide to us cannot be read by third parties if SSL and/or TLS encryption is active.

4. Data collection on this website

Server log files

The provider of the pages automatically collects and stores information in what are known as server log files, which your browser automatically transmits to us. These comprise:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the computer accessing the site
• Time of the server request
• IP address

This data is not combined with any other data sources.

This data is collected in accordance with Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in technically flawless display and the optimisation of their website. Server log files need to be collected for this purpose.

Contact form

If you send us an enquiry using our contact form, we will store the information you entered into the form, including contact details, to handle your enquiry and deal with any follow-up questions. We will not disclose this data without your permission.

This data is processed in accordance with Art. 6 (1) (b) GDPR provided that your enquiry is related to the fulfilment of a contract or completion of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; consent can be revoked at any time.

The data you enter into the contact form will remain with us until you ask us to delete it, revoke your consent to store it or the reason for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory statutory provisions, especially retention periods, remain unaffected.

Enquiry by email, telephone or fax

If you contact us by email, telephone or fax, your request, including all personal data provided in it (name, request), will be stored and processed in our systems in order to process your enquiry. We will not disclose this data without your permission.

This data is processed in accordance with Art. 6 (1) (b) GDPR provided that your enquiry is related to the fulfilment of a contract or completion of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; consent can be revoked at any time.

The data you transmit to us in requests for contact will remain with us until you ask us to delete it, revoke your consent to store the data or the reason for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory statutory provisions, especially statutory retention periods, remain unaffected.

5. Analysis tools and advertising

 Google Analytics

This website uses functions provided by the Google Analytics website analysis service. The provider is Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the website visitor’s behaviour. In doing so, the website operator obtains a variety of usage data, such as site visits, visit duration, the operating systems used and the user’s origin. This data is correlated with the user’s terminal device. It is not correlated with a user ID.

Google Analytics uses technologies that make it possible to recognise the user for the purposes of analysing user behaviour (e.g. cookies or device fingerprinting). The information that the cookie generates during usage of this website is generally transferred to a Google server in the US and stored there.

This service is used based on your consent in compliance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG. Consent can be revoked at any time.

Data transfer to the US is in compliance with the EU Commission’s standard contractual clauses. You will find the details here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymization

We have enabled the IP anonymization function on this website. This means that Google shortens the user’s IP address within a Member State of the European Union or within another state which has signed the European Economic Area Agreement. A full IP address is transferred to a Google server in the US and shortened there in exceptional cases only. Google will use this information to evaluate your usage of the website, compiling reports on website activity for this website’s operator and providing other services relating to website activity and Internet usage to the website operator. Under no circumstances will the IP address that your browser provides for Google Analytics be linked to other Google data.

Browser plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

You will find more information on how Google Analytics handles your user data in Google’s data privacy statement: https://support.google.com/analytics/answer/6004245?hl=en.

Demographic features at Google Analytics

This website uses the Google Analytics Demographic features function to show website visitors suitable online ads within the Google advertising network. This function can be used to produce reports to obtain information on website visitors’ ages, gender and interests. This data comes from interest-based advertising by Google and visitor data from third-party providers. This data cannot be correlated with a specific person. You can disable this function at any time in your Google account ad settings or prohibit collection of your data by Google Analytics in general as indicated under Objection to data collection.

Order processing

We have concluded an order processing agreement with Google and fully meet the German data protection authorities’ strict requirements when using Google Analytics.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising platform provided by Google Ireland Limited (Google), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters specific search terms into Google (keyword targeting). Moreover, targeted advertisements can be shown based on the user data available from Google, such as location data and interests (target group targeting). As the website operator, we can evaluate this data quantitatively by analysing items such as what specific search terms have resulted in our advertisements being displayed and how many times users have clicked on these advertisements.

This service is used based on your consent in compliance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG. Consent can be revoked at any time.

Data transfer to the US is in compliance with the EU Commission’s standard contractual clauses. You will find the details here:
https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

7. Own services

Handling of applicant data

You may submit a job application to us (e.g. by email, post or using the online application form). You will find information about the scope, purpose and usage of your personal data that we collect as part of the application process below. We assure you that your data will be collected, processed and used in compliance with applicable data protection legislation and all other statutory provisions and that your data will be treated in strict confidence.

Scope and purpose of data collection

If you send an application to us, we will process the related

personal data that you provide (e.g. contact and communication data, application documents, notes taken during interviews and similar) if this information is required to make a decision on whether to enter into an employment contract with you or not. The legal basis for such usage is Section 26 Federal Data Protection Act (BDSG: Data processing for employment-related purposes), Art. 6 (1) (b) GDPR (preparing contracts in general) and, if consent has been given, Art. 6 (1) (a) GDPR. Consent can be revoked at any time. Your personal data will only be passed on to people within our company who are involved with processing your application.

If your application is successful, the data that you submitted will be stored in our data processing systems to establish the employment relationship in compliance with Section 26 BDSG and Art. 6 (1) (b) GDPR.

Data retention period

If we are unable to offer you a position, you reject a job offer or you withdraw your application, we reserve the right to retain the data that you have provided for up to 6 months after the application process ended (rejection or withdrawal of the application) based on our legitimate interest (Art. 6 (1) (f) GDPR). The data will then be erased and the physical application documents destroyed. Documents are retained in particular as evidence in the event of a legal dispute. If it becomes evident that the data will be required after the six-month period expires (e.g. due to threatened or pending litigation), the data will not be erased until there is no longer a reason to retain it.

It can be retained for a longer period of time if you have given appropriate consent (Art. 6 (1) (a) GDPR) or if legal obligations to retain such data excludes erasure.

Inclusion in the recruitment database

If we do not make you a job offer, there is the option of including you in our recruitment database where applicable. If you are included, all documents and details you provided in your application will be added to the recruitment database so that we may contact you if suitable vacancies arise.

You are only included in the recruitment database if you give your express consent (Article 6 (1) (a) GDPR). You give consent voluntarily and it has no bearing on the ongoing application process. The data subject may withdraw their consent at any time. In such a case, the data is irrevocably erased from the recruitment database unless there are legal reasons to retain the data.

Data will be irrevocably erased from the recruitment database two years after consent is given at the latest.