Information on data protection
The following information on data protection clarifies the type, scope and purpose of the collection and use of personal data when using this website and your rights
I Controller for data processing (hereinafter: ‘we’)
RoTa Personalberatung UG (limited liability)
Am Alten See 1
60489 Frankfurt am Mai
Telephone number: 0175 751865
E-mail: info@rotapersonal.d
Further details can be found in our provider labelling (Imprint)
II. Personal data, purposes of processing and legal bases
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as ‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the identity of that natural person.
Personal data is processed on our website if this is necessary for the following purposes:
Further details on the processing of data can be found below under the corresponding headings:
1. access data/server log files
When you visit our website, the servers of our website host automatically save the information that your browser sends, so-called server log files. The information includes the following:
For data protection reasons, the host name or IP address of the client accessing our website is anonymised in the log files. In the log files, the entries for the host of the client or, if this cannot be determined, the IP address of the client are anonymised.
The temporary processing of this data by the system is necessary to enable the website to be delivered to your end device. In particular, the IP address must be processed for this purpose. This data is not merged with other data sources. The information is used exclusively to monitor our own website traffic and to maintain the technischen Betriebs der Server und des Netzwerkes unserer Hosters nebst Missbrauchsabwehr benutzt. Rechtsgrundlage hierfür ist Artikel 6 Absatz 1 Unterabsatz 1 Buchstabe f DSGVO. Weitere Informationen erhalten Sie von unserem Webhoster dort: https://www.strato.de/faq/vertrag/fragen-zur-auftragsverarbeitungsvertrag-avv-und-der-neuen-eu-datenschutzgrundverordnung-dsgvo/#verarbeitung und https://www.strato.de/faq/hosting/so-erfahren-sie-wie-oft-ihre-internet-seiten-besucht-worden-sind/
2. Cookies
Our website sometimes uses so-called cookies or other technologies, especially those that are absolutely necessary or functional cookies, so that we can provide you with the website and its functions, § 25 paragraph 2 number 2 Telecommunications Telemedia Data Protection Act (TTDSG), Article 6 paragraph 1 subparagraph 1 letter f GDPR. This includes, for example, our shopping basket function.
If you give your consent for optional services that do not require cookies, the legal basis is Section 25(1) TTDSG, Article 6(1)(1)(a) GDPR (consent). You can obtain further information on this and on the cookies or services used at any time from the consent management tool we use and revoke your consent freely and without detriment at any time without affecting the lawfulness of the processing until revocation. Please note that our website does not always function as intended without the cookies used.
Most browsers also have an option to restrict or completely prevent the storage of cookies. However, we would like to point out that the use and in particular the ease of use will be restricted without cookies.
Instructions for the most common browsers:
Mozilla Firefox: https://support.mozilla.org/de/kb/Cookies-blockieren
Google Crome: https://support.google.com/accounts/answer/61416?hl=de
Apple Safari: https://support.apple.com/de-at/HT201265
Microsoft Edge: https://support.microsoft.com/de-de/help/4468242/microsoft-edge-browsing-data-and-privacy-microsoft-privacy
3. contact via forms or by other means and applications
If you send us enquiries via e-mail, form enquiries or in any other way, your details (e.g. first/last name, telephone number, e-mail, message), including the data you provide there, will be processed for the purpose of processing the enquiry and, if necessary, in the event of follow-up questions.
The legal basis for this is point (b) of the first subparagraph of Article 6(1) GDPR.
If you send us job applications , we will process the personal data you provide in order to process your application and contact you.
The personal data concerning you will not be passed on to third parties without your express consent, unless we are legally obliged to do so, you have requested this or the data transfer is necessary for the initiation and execution of a contractual relationship with you or the application process.
The legal basis is Article 6 paragraph 1 subparagraph 1 letter a, b GDPR, Article 88 paragraph 1 GDPR, § 26 paragraph 1 Federal Data Protection Act (BDSG).
We delete applications no later than six months after completion of the application process.
Should the data be required for legal prosecution after completion of the application process, data processing may be carried out on the basis of the requirements of Article 6 GDPR, in particular to safeguard legitimate interests in accordance with Article 6(1)(1)(f) GDPR. Our legitimate interest then consists in the assertion or defence of claims.
If your application is successful, we will continue to process the personal data concerning you for the purposes of the employment relationship.
If you have expressly given your consent, you can revoke your declaration of consent at any time with effect for the future, so that we delete your data. The lawfulness of the processing carried out prior to revocation remains unaffected.
4. integration of services and content
It may happen that third-party content and services from other websites are integrated or loaded within our online offering. This always presupposes that the providers of this content recognise the IP address of the user. Without the IP address, they would not be able to send the content to the respective user's browser. The IP address is therefore required to display this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may store the IP address for statistical purposes, for example.
We partially integrate the following services and content from third parties, for which you can also view additional service providers and information at any time in our consent tool (icon at the bottom left) and revoke consent:
Consent manager
We use the consent tool of consentmanager AB, Håltegelvägen 1b, 72348 Västerås to manage any consents you may have given. You can find the data protection information there: https://www.consentmanager.de/datenschutz/
The following categories of data may be processed to verify your consent: Timestamp, IP address, user agent, language, website visited, time zone.
The legal basis is our legitimate interest in the consent management option, Article 6(1)(1)(f) GDPR.
Twitter emoji
Our website offers the use of graphics and fonts, so-called Twitter emojis.
This is a service provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, parent company: Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
For this purpose, the browser you are using must connect to the Twitter servers.
As a result, Twitter, Inc. becomes aware that our website has been accessed via your IP address. The use of web fonts is based on your consent and our interest in the enhanced functionality of our website for users; Article 6(1)(1)(a) GDPR (consent), Article 6(1)(1)(f) GDPR (legitimate interest).
Data protection information: https://twitter.com/de/privacy; (Settings) https://twitter.com/personalization
JavaScript libraries and CDN
We use local JavaScript libraries as well as local solutions of the Content Delivery Network (CDN), i.e. on our own server infrastructure, so that no external data streams are triggered.
III Recipients of personal data and third country transfers
Personal data is disclosed to the following categories of recipients
Our employees and our contract processors to the extent necessary, in particular the website and hosting provider of our website, STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin and, if applicable, its respective subcontracted processors and, if applicable, the services named under II.
In addition, the personal data concerning you will not be passed on to third parties without your express consent, unless we are legally obliged to do so or the transfer of data is absolutely necessary, for example to fulfil a contractual relationship.
A transfer to a third country is not intended.
We only process personal data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) if this is necessary to fulfil our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. The same applies to the processing by third parties on our behalf, the disclosure of personal data to third parties and their transfer to third parties. Furthermore, service providers who process personal data on our behalf in a third country are only used if an ‘adequacy decision’ of the European Commission (Article 45 GDPR) exists for this third country, ‘appropriate safeguards’ (Article 46 GDPR), ‘standard data protection clauses’ (Article 46(2)(c) GDPR) have been agreed and/or ‘internal data protection rules’ (Article 47 GDPR) are in place at the recipient. General information on adequacy decisions can be found at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_de, on appropriate safeguards at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_de, on standard data protection clauses at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_de and on internal data protection rules at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/binding-corporate-rules_de. For further information, please contact us.
IV. Duration of storage
We delete personal data after the purpose has been achieved and the legal basis no longer applies, as well as if there is no obligation to retain it.
Stored server log files and IP addresses are automatically deleted after seven days at the latest.
Session cookies are automatically deleted at the end of the session. In addition, cookies with an expiry dateare stored on your end device, and you also have control over the use and deletion of cookies, see above.
We process personal data from your enquiries via e-mail or form enquiries or enquiries by other means as well as from online orders until your enquiry has been fully processed and completed. The data will then be deleted if there is no legal obligation to retain it.
You can delete your customer account at any time.
Please note, however, that due to a legal transaction with you, certain data may be subject to retention obligations under commercial and tax law of at least six (§ 257 HGB) or ten (§ 147 AO) years, which may also apply to the content of contact enquiries and e-mails.
We deleteapplications no later than six months after completion of the application process. If your application is successful, we will continue to process your personal data for the purposes of the employment relationship. If you have expressly given your consent, you can revoke your declaration of consent at any time with effect for the future.
In all other respects - including with regard to all tools and services used - we check on an annual basis whether data can be deleted. This is the case if the purpose of processing and the requirements of the legal basis for processing no longer apply and there is no longer a legal obligation to retain the data.
V. Provision of personal data and rights of data subjects
You are not legally obliged to provide personal data. However, the provision of personal data may be necessary for the conclusion of a contract or for website functions. If you do not provide it, it may not be possible to offer a contract or a function on the website.
There is no automated decision-making on the website; profiling does not take place on our website.
The rights of data subjects arise in particular from Articles 15 to 23 and Article 77 GDPR and from Sections 32 to 37 of the new Federal Data Protection Act.
With regard to the personal data concerning you, you have the right to the following if the legal requirements are met
∙ Information, Article 15 GDPR,
∙ Rectification, Article 16 GDPR,
∙ erasure, Article 17 GDPR,
∙ Restriction of processing,Article 18 GDPR,
∙ portability,Article 20 GDPR.
If you have given your consent to the processing of personal data, you have the right of
∙ Revocation, Article 7 GDPR,
with effect for the future. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected.
You also have the right to object to the processing of personal data
∙ objection, Article 21 GDPR
see further information separately under VI.
Please address all enquiries, requests and notifications to us, see above under I.
If you believe that the processing of personal data concerning you infringes data protection law, you always have the
∙ right to lodge a complaint
with the competent supervisory authority, see Article 77 GDPR. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The contact details of the data protection officers in the federal states, the supervisory authorities for the non-public sector, broadcasting, churches, in Europe and in other countries as well as the Virtual Data Protection Office can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
VI Information on the right to object pursuant to Article 21 GDPR
1. you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of the first subparagraph of Article 6(1) GDPR (data processing on the basis of a balancing of interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
2. where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection can be made informally and should be addressed to us if possible, see above under I.
Version: 1.0
Status: 16/03/2023
Created by ITMR Rechtsanwälte
