Privacy

1. Privacy at a glance

General information

The following notes give a simple overview of what happens to your personal data when you visit our website. Personal data is all data that allows you to be personally identified. Detailed information on data protection can be found in our privacy policy.

Data collection on our website

Who is responsible for the data collection on this website?

The data processing on this website is carried out by the website operator. The website operator’s contact details can be found in the legal notice of this website.

How do we collect your data?

Your data will be collected on the one hand when you provide it to us. This may, for example, include the data you enter in a contact form. Other data is automatically collected when you visit the site through our IT systems. This includes above all technical data (e.g. Internet browser, operating system or time of the page request). The collection of this data occurs automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure flawless provision of the website. Other data can be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time free of charge to obtain information about the origin, recipients and purposes regarding your stored personal data. You also have a right to request the correction, blocking or deletion of this data. For this purpose, as well as for further questions about data protection you can contact us at any time at the address given in the legal notice. Furthermore, you have a right of appeal to the relevant regulatory authority. You also have the right to request, under certain circumstances, the restriction of the processing of your personal data. Details can be found in the privacy policy under “Right to restriction of processing”.

Analysis tools and third-party tools

When visiting our website, your surfing behaviour may be statistically evaluated. This happens especially with cookies and with so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; surfing behaviour cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. Detailed information about these tools and your opt-out options can be found in the privacy policy below.

2. General information and mandatory information

Data protection

The operator of these pages takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy. When you visit this website, various personal data is collected. Personal data is information that personally identifies you. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens. We point out that the transmission of data on the Internet (e.g. in the case of communication by e-mail) may have security gaps. Complete protection of the data from access by third parties is not possible.

Note regarding the responsible controller

The responsible controller for data processing on this website is:

HITS gGmbH
Schloss-Wolfsbrunnenweg 35
69118 Heidelberg
Germany
Phone: +49 6221 533 533
E-Mail: Webmaster@h-its.org

The responsible controller is the natural or legal person who, alone or in concert with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Statutory data protection officer

We have appointed a data protection officer for our company.

DEUDAT GmbH
Mario Arndt
Zehntenhofstraße 5b
65201 Wiesbaden
Phone: +49 611 950008-33
E-Mail: mario.arndt@deudat.de

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke given consent at any time. An informal message by e-mail to us is sufficient for this purpose. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and with regard to direct advertising (Art. 21 GDPR)

If the data processing occurs on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right, at any time, to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based is stated in this privacy policy. If you object, we will no longer process your personal data, unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or processing is necessary for the purpose of enforcing, pursuing or defending legal claims (Art 21 (1) GDPR). If your personal data is processed to operate direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct advertising. If you object, your personal data will no longer be used for the purpose of direct advertising (objection pursuant to Art. 21 (2) GDPR).

Right of appeal to the competent supervisory authority

In the event of violations of the GDPR, you are entitled to exercise your right of appeal to a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The right of appeal is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to have data submitted to us or to a third party, based on your consent or in the performance of a contract, provided to you in a standard, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done as far as technically feasible.

SSL or TLS encryption

This site uses, for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, an SSL or TLS encryption. You can recognise an encrypted connection by the changing of the address bar of the browser from “http: //” to “https: //” and the lock symbol in your browser line. If the SSL or TLS encryption is activated, the data that you send to us cannot be read by third parties.

Information, blocking, deletion and correction

Within the scope of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if necessary, the right to correct, block or delete this data. For this purpose as well as for further questions on the subject of personal data, you can always contact us at the address given in the legal notice.

Right to restriction of processing

You have the right to demand the restriction of the processing of your personal data. You can contact us at any time at the address given in the legal notice for this purpose. The right to restriction of the processing exists in the following cases: If you deny the accuracy of your personal data stored with us, we usually need time to check this. For the duration of the review, you have the right to request that your personal data be restricted. If the processing of your personal data is unlawful, you may request the restriction of data processing instead of deletion. If we no longer need your personal data but you require it for the purpose of exercising, defending or asserting legal claims, you have the right to demand, instead of the deletion, the restriction of the processing of your personal data. If you have filed an objection pursuant to Art. 21 (1) GDPR, a balance must be made between your and our interests. If it is not certain whose interests prevail, you have the right to demand that your personal data be restricted. If you have restricted the processing of your personal data, this data may only be used with your consent or for the assertion, processing or defence of legal rights or the protection of the rights of another natural or legal person or for the sake of a major public interest of the European Union or a Member State.

Objection to advertising emails

The use of contact data published in the context of the legal notice obligation for sending unsolicited advertising and information materials is hereby rejected. The site operators expressly reserve the right to take legal action in the event of unsolicited advertising such as spam e-mails.

Duration of storage

Personal data will be deleted after expiry of the statutory retention period, if it is no longer required for contract fulfilment or contract initiation.

Legal basis of processing

If you have given us consent to process your personal data for a specific purpose, the processing is performed based on Art. 6 (1) (a) GDPR. If such processing is necessary in order to fulfil or initiate a contract with you, the processing is based on Art. 6 (1) (b) GDPR. In some cases, for example, in order to fulfil tax obligations, we may be subject to a legal obligation to process personal data. The legal basis for this in such cases is Art. 6 (1) (c) GDPR. In rare cases, processing may also be done to protect vital interests of you or another natural person. In this exceptional case, processing takes place based on Art. 6 (1) (d) GDPR. Finally, processing operations can also be based on Art. 6 (1) (f) GDPR. This is the case if the processing is to safeguard a legitimate interest of our company or a third party, unless your interests, fundamental rights or fundamental freedoms prevail. Such a legitimate interest can already be assumed if you are a customer of ours. If the processing of personal data is based on Art. 6 (1) (f) GDPR, our legitimate interest is the performance of our business activities.

Security

We as the controller have taken technical and organisational security measures in accordance with Art. 32 GDPR. This includes in particular measures to ensure the confidentiality, integrity and availability of the data. In addition, we have established processes that ensure the protection of data subject rights, the deletion of personal data and an immediate response to the threat to such data. In addition, we ensure the protection of personal data already in the development and selection of hardware and software in accordance with the principles of Art. 25 GDPR. All our employees and persons involved in data processing are obliged to comply with the General Data Protection Regulation and other data protection laws and the confidential handling of personal data. In the case of the collection and processing of personal data, the information is transmitted in encrypted form in order to prevent misuse of the data by third parties. Our security measures are continually being revised in line with technological developments. However, Internet-based data transmissions can generally have security gaps such that absolute protection cannot be guaranteed.

Change of our privacy policy

We reserve the right to change our security and privacy practices to the extent required by technical developments. In these cases, we will also adapt our privacy policy accordingly. Please therefore take note of the current version of our privacy policy.

3. Data collection on our website

Cookies

The internet pages partly use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser. Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser the next time you visit. You can set your browser to notify you of the setting of cookies and to allow cookies only in individual cases, to allow the acceptance of cookies for specific cases or in general, as well as to undertake the automatic deletion of cookies when closing the browser. The deactivation of cookies may limit the functionality of this website. Cookies required to perform the electronic communication process or to provide certain functions desired by you (e.g. shopping cart function) are stored based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. As far as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these are treated separately in this privacy policy.

Cookie Preference

Please select an option. You can find more information about the consequences of your choice at Help. Privacy | Imprint

Your selection was saved!

More information

Help

To continue, you must make a cookie selection. Below is an explanation of the different options and their meaning.

  • Accept all cookies:
    All cookies such as tracking and analytics cookies.
  • Reject all cookies:
    No cookies except for those necessary for technical reasons are set. Borlabs Cookie already set a necessary cookie.

You can change your cookie setting here anytime: Privacy. Imprint

Back

Links

If you use external links offered within our website, this privacy policy does not extend to these links. Insofar as we offer links, we assure that at the time of the link setting no violations of the applicable law on the linked websites were identified. However, we have no influence on the compliance of other providers with privacy and security regulations. Therefore, please also inform yourself on the websites of the other providers about the privacy policies provided there.

Children and adolescents

Persons under the age of 16 should not submit any personal data to us without the consent of their parents or guardians. We do not request personal data from children and adolescents, do not collect it and do not disclose it to third parties.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes:

  • Browser type
  • Browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of server request
  • IP address


A combination of this data with other data sources does not occur. The collection of this data is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and the optimisation of its website, which requires the server log files to be recorded.

Inquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including any resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We will not disclose this data without your consent. The processing of this data is based on Art. 6 (1) (b) GDPR, if your request relates to the fulfilment of a contract or is required to carry out pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 (1) (a) GDPR) and/or on our legitimate interests (Art. 6 (1) (f) GDPR), as we have a legitimate interest in the effective processing of any inquiries addressed to us. The data you send to us via contact requests remains with us until you request us to delete it, you revoke your consent to the storage, or the purpose for data storage no longer applies (e.g. after completed processing of your concern). Compulsory statutory provisions – in particular statutory retention periods – remain unaffected.

4. Social media

Facebook Plugins (Like & Share Button)

On our pages, plugins of the social network Facebook, Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated. The Facebook plugins can be recognized by the Facebook logo or the “Like Button” (“Like”) on our site. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE

When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click on the Facebook “Like” button while logged into your Facebook account, you can link the contents of our pages to your Facebook profile. As a result, Facebook can assign the visit to our pages to your user account. We point out that we as the provider of the pages are not aware of the content of the transmitted data and its use by Facebook. For more information, see the Facebook Privacy Policy at: https://de-de.facebook.com/privacy/explanation

If you do not wish Facebook to associate your visit to your Facebook user account, please log out of your Facebook user account. The use of the Facebook plugins is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in having as much visibility as possible in social media.

Twitter plugin

Functions of the Twitter service are integrated on our sites. These features are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and shared with other users. This data is also transmitted to Twitter. We point out that we as the provider of the pages are not aware of the content of the transmitted data and its use by Twitter. For more information, see the privacy policy of Twitter at: https://twitter.com/de/privacy. The use of the Twitter plugin is based on Art. 6 (1) (f) GDPR. The website owner has a legitimate interest in having the widest possible visibility in social media. Your privacy settings on Twitter can be found in the account settings under https://twitter.com/account/settings.

Instagram plugin

Functions of the service Instagram are integrated on our site. These features are provided through Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the contents of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We point out that we as the provider of the pages do not receive any knowledge of the content of the transmitted data and its use by Instagram. The use of the Instagram plugin is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in having the widest possible visibility in social media. For more information, please refer to the privacy policy of Instagram: https://instagram.com/about/legal/privacy/

LinkedIn plugin

Our website uses features of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you visit one of our pages that includes LinkedIn features, you will be connected to LinkedIn servers. LinkedIn is informed that you have visited our website with your IP address. If you click LinkedIn’s “Recommend Button” and are logged in to your LinkedIn account, LinkedIn will be able to associate your visit to our website with you and your user account. We point out that we as the provider of the pages have no knowledge of the content of the transmitted data and its use by LinkedIn. The use of the LinkedIn plugin is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in having as much visibility as possible in social media. For more information, see the LinkedIn privacy policy at: https://www.linkedin.com/legal/privacy-policy

5. Analysis tools and advertising

Matomo (formerly Piwik)

This website uses the open source web analytics service Matomo. Matomo uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymised prior to storage. Matomo cookies remain on your device until you delete them. Matomo cookie storage and use of this analysis tool occurs based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the anonymous analysis of user behaviour in order to optimise its online offer. The information generated by the cookie about the use of this website will not be disclosed to third parties. You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to fully use all functions of this website.

If you disagree with the storage and use of your data, you can deactivate the storage and use.

6. Plugins and tools

YouTube

Our website uses plugins from the Google-powered YouTube page. The site is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. If you visit any of our sites equipped with a YouTube plugin, you will be connected to the servers of YouTube. The YouTube server is informed thereby of which of our pages you have visited. Furthermore, YouTube can store various cookies on your device. With the help of these cookies, YouTube can receive information about visitors to our website. This information is used, among other things, to capture video statistics, improve user-friendliness, and prevent fraud. The cookies remain on your device until you delete them. If you are logged in to your YouTube account, you allow YouTube to associate your browsing habits directly with your personal profile. This can be prevented by logging out of your YouTube account. The use of YouTube is in the interest of an attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. For more information on how user data is handled, please refer to the YouTube privacy policy: https://policies.google.com/privacy?hl=de.

Google Maps

This site uses the mapping service Google Maps via an API. The provider is the Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To use the features of Google Maps, it is necessary to save your IP address. This information is generally transmitted to and stored by Google on a server in the United States. The provider of this site has no control over this data transfer. The use of Google Maps is in the interest of an attractive representation of our online offers and easy findability of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. For more information on how user data is handled, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de.

7. Own services

Applications

We offer you the opportunity to apply with us (e.g. by e-mail, by post or via the online application form). In the following, we will inform you about the scope, purpose and use of your personal data collected during the application process. We guarantee that the collection, processing and use of your data will be in accordance with applicable data protection law and all other applicable laws and that your data will be kept strictly confidential.

Scope and purpose of the data collection

If you submit an application to us, we process your related personal data (such as contact and communication information, application materials, job interview notes, etc.) to the extent necessary to decide on the employment relationship. The legal basis for this is § 26 BDSG-new according to German law (initiation of an employment relationship), Art. 6 (1) (b) GDPR (general contract initiation) and – if you have given your consent – Art. 6 (1) (a) GDPR. The consent is revocable at any time. Your personal data will be passed on within our company exclusively to persons who are involved in the processing of your application. If the application is successful, the data submitted by you based on § 26BDSG-new and Art. 6 (1) (b) GDPR will be stored for employment purposes in our data processing systems.

Retention period for the data

If we cannot make you a job offer, if you reject a job offer, withdraw your application, revoke your consent to data processing or request us to delete the data, the data you provide, including any remaining physical application documents, will be stored for a maximum of 6 months after completion of the application process (retention period) in order to be able to clarify the details of the application process in the event of disagreement (Art. 6 (1) (f) GDPR). THIS STORAGE CAN BE DISPUTED TO THE EXTENT THAT YOU HAVE LEGAL INTERESTS THAT TAKE PRECEDENCE OVER OUR INTERESTS. After expiry of the retention period, the data will be deleted unless there is a statutory retention obligation or any other legal reason for further storage. If it is apparent that the retention of your data will be required after the expiry of the retention period (e.g. due to a pending or pending legal dispute), deletion will not take place until the data has become invalid. Other statutory storage obligations remain untouched.

As of 05/2019

Click here to go to the German home page.