Data privacy

Here you can edit your cookie settings

 

3. Your rights as the data subject of the processing of your data

3.1 General 

You have the right
 

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us
• in accordance with Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller
• in accordance with Art. 7 para. 3 GDPR, to revoke your consent given to us at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent in the future and
• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the registered office of our company https://datenschutz-berlin.de.

3.2 Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of cancellation or objection, simply send an email to info@dewiback.de or to our data protection officer named above.
 

4. Collection and processing of personal data

4.1 Visiting our website

If you only use our website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. 

When you visit our website, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a log file. The following information is collected without any action on your part and stored until it is automatically deleted
 

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which the access was made (referrer URL),
• browser used and, if applicable, the operating system of your computer and the name of your access provider.

The aforementioned data is processed by us for the following purposes
 

• Ensuring a smooth connection to the website,
• Ensuring a comfortable use of our website,
• analysing system security and stability and
• for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

We also use cookies and analysis services when you visit our website. You can find more detailed explanations on this in sections 4 and 5 of this privacy policy.

4.2 Contact form

If you have questions of any kind, we offer you the opportunity to contact us using a form provided on the website. It is necessary to provide a valid e-mail address so that we know who sent the enquiry and can respond to it. Further information can be provided voluntarily.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be automatically deleted after your enquiry has been dealt with.

4.3 Opening a DewiBack customer account 

If you wish to open a DewiBack customer account, we ask you to give us your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. In this case, we will then use your data for the purpose of opening a customer account and storing your data for future orders on our website. It is possible to delete your customer account at any time and can be done either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

4.4 Applications

4.4.1 General 

You can apply to our company electronically, in particular by e-mail or web form. We will of course only use your details to process your application and will not pass them on to third parties. Please note that e-mails sent unencrypted are not protected against unauthorised access.

The following data or data categories are processed to carry out the application process:
 

• Applicant master data (first name, surname, title, e-mail address, telephone number, address, date of birth, citizenship)
• Qualification data (cover letter, letter of motivation, CV, previous activities, professional qualifications and competences)
• Voluntary information, such as an application photo, information on severe disability or other information that you voluntarily provide us with in your application or upload voluntarily
• additional questions depending on the respective job advertisement (e.g. driving licence, citizenship)
• Communication between you and us as well as comments and evaluations written about you in the course of your application process
• Special categories of personal data: If you provide information in your application documents that contains special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. information that allows conclusions to be drawn about your sexual orientation; information about your health; information that allows conclusions to be drawn about your ethnic origin or religion), we will only process this data to the extent permitted by law.

Nevertheless, we ask you to avoid information that falls into the special category of personal data when sending us your application documents. Data of this type is not relevant for the application.

If you have applied for a specific position and it has already been filled or we consider you to be equally or even more suitable for another position, we would like to forward your application within the company. Your application will only be forwarded if you have given your prior consent.

Your personal data will be deleted after a maximum of six months following completion of the application process, unless you have expressly given us your consent to store your data for a longer period or a contract has been concluded. The legal basis is Art. 6 para. 1 a, b and f GDPR and § 26 Federal Data Protection Act (BDSG).

4.4.2 Use of onlyfy one (by XING)

We use the onlyfy one (by XING) service to process applications.

We would like to point out that onlyfy one is part of the comprehensive service of the XING platform of New Work SE, which pursues the purpose of contributing to the improvement and simplification of the professional life of users through a variety of different applications (onlyfy one as well as the social network XING, kununu etc.) and making the working world more fulfilling for the individual and at the same time making companies even more successful.

onlyfy one, as part of the comprehensive XING service, is an online platform that brings talents and companies together. Companies can use onlyfy one to publish job adverts, identify interesting talents (including from the XING professional network), receive and manage applications and exchange information with talents and applicants. New Work SE supports this coming together of talents and companies on or via onlyfy one. This is done, among other things, by recommending talents and displaying them in the customer's company account as well as by generating and providing recruiting-relevant information and analyses based on data that New Work SE processes in onlyfy one and, if applicable, in other XING applications or outside.

With regard to data processing for New Work SE, you can find more detailed information in XING's privacy policy, [https://privacy.xing.com/de/datenschutzerklaerung]. There you will also find the contact details of New Work SE and the company data protection officer of New Work SE.
 

5. Use of cookies 

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our website more convenient for you. For example, we use session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognised that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These cookies enable us to automatically recognise that you have already visited our website when you visit it again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is required for the purposes mentioned to safeguard our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

You can use our cookie banner to decide for yourself whether and, if so, what type of cookies you want to use.
 

6. Analysis tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimisation of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

We mainly use analysis tools from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Any data transfer by Google to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: 
https://privacy.google.com/businesses/controllerterms/mccs/.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

6.1 Google Analytics

If you have given your consent when visiting our website, Google Analytics is used on this website.

Google Analytics uses cookies that enable your use of our website to be analysed.

We use the "anonymiseIP" function (so-called IP masking): Due to the activation of IP anonymisation on this website, your IP address will be shortened by Google within member states of the European Union (EU) or in other contracting states of the Agreement on the European Economic Area (EEA). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The following data is collected during your visit to the website
 

• the pages you visit, your "click path"
• Achievement of "website goals" (conversions, e.g. newsletter registrations, downloads, purchases)
• Your user behaviour (e.g. clicks, dwell time, bounce rates)
• Your approximate location (region)
• Your IP address (in truncated form)
• Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• Your internet provider
• the referrer URL (via which website/advertising medium you came to this website)

Purpose of the processing

On behalf of the operator of this website, Google will use this information to analyse your pseudonymous [ use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

Recipient

The recipient of the data is

•    Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

as the processor. We have concluded a data processing agreement with Google for this purpose. Google LLC, based in California, USA, and, if applicable, US authorities can access the data stored by Google.

Transmission to third countries

A transfer of personal data to the USA cannot be ruled out. In the USA, your personal data is not subject to the same high standards as those provided for the processing of personal data in the EU. Personal data will only be transferred to the USA if you have given your consent to the use of the service.

Storage period

The data sent by us and linked to cookies is automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.

You can also prevent the collection and transmission of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by
 

• not giving your consent to the setting of the cookie or
• downloading and installing the browser add-on to deactivate Google Analytics HERE.

You can also prevent the storage of cookies by configuring your browser software accordingly. However, if you configure your browser to reject all cookies, this may restrict the functionality of this and other websites.

Legal basis and cancellation option

The legal basis for the processing of your personal data is your consent, Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future by changing the cookie settings.

You can find more information on the terms of use of Google Analytics and data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com.

6.2 Google Maps

Our website uses Google Maps to display interactive maps and to provide directions. Google Maps is a map service from Google. 
When you access a page on our website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser, which integrates it into the website. We therefore have no influence on the scope of the data collected by Google in this way. To the best of our knowledge, this is at least the following data
 

• Date and time of the visit to the website in question,
• Internet address or URL of the website accessed,
• IP address, (start) address entered as part of route planning.

We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for this. 

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings.

In this case, however, you will not be able to use the map display. 

6.3 Google reCAPTCHA 

We use "Google reCAPTCHA" (hereinafter referred to as "reCAPTCHA") to increase the security of our website.

The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is made by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM.

6.4 Google Tag Manager 

Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google's parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
 
7. Social media plug-ins

We use social plug-ins from various social networks on our website on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR in order to publicise our company and inform our customers. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation must be guaranteed by the respective provider.

The legal basis for the processing of your data is therefore basically our legitimate interest in effective communication with you in accordance with Art. para. 1. f GDPR. We process data that we receive within these online presences by users writing us messages or otherwise communicating with us within these social networks in accordance with this privacy policy.

Cookies are usually stored on your computer so that the platforms can provide their services to you. The providers of the online presences also regularly process the data for market research and advertising purposes. For this purpose, cookies are stored on your computer in order to create user profiles and thus to place adverts tailored to you. In addition to session cookies, which are deleted when you close your browser, persistent cookies are often used, which remain on your computer until they expire or until you delete them. In your browser settings, you can make general settings regarding how or whether your browser allows cookies at all.

7.1. Facebook

You can recognise the Facebook plugins by the Facebook logo on this website. You can find an overview of the Facebook plugins here:
https://developers.facebook.com/docs/plugins/?locale=de_DE.

When you visit this website, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thereby receives the information that you have visited this website with your IP address. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook's privacy policy at: https://de-de.facebook.com/privacy/explanation.
 
If you do not want Facebook to be able to associate your visit to this website with your Facebook user account, please log out of your Facebook user account.

The Facebook plugins are used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the widest possible visibility in social media. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum.

According to this agreement, we are responsible for providing the data protection information when using the Facebook tool and for the secure implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here:

https://www.facebook.com/legal/EU_data_transfer_addendum,
https://de-de.facebook.com/help/566994660333381 and
https://www.facebook.com/policy.php.
 
7.2. Instagram

Plugins from the social network Instagram are integrated on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Instagram, the data collected is also transferred to the USA and other third countries.

You can recognise the Instagram plugins by the Instagram logo on this website. You can find an overview of the Instagram plugins here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When you visit this website, a direct connection is established between your browser and the Instagram server via the plugin. Instagram thereby receives the information that you have visited this website with your IP address. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Further information on this can be found in Instagram's privacy policy at: https://de-de.facebook.com/privacy/explanation.

If you do not want Instagram to be able to associate your visit to this website with your Instagram user account, please log out of your Instagram user account.

The Instagram plugins are used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the widest possible visibility in social media. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Insofar as personal data is collected on our website using the tool described here and forwarded to Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Instagram. The processing carried out by Instagram after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum.
 
According to this agreement, we are responsible for providing the data protection information when using the Instagram tool and for the secure implementation of the tool on our website in accordance with data protection law. Instagram is responsible for the data security of Instagram products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Instagram directly with Instagram. If you assert your data subject rights with us, we are obliged to forward them to Instagram.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here:

https://www.facebook.com/legal/EU_data_transfer_addendum, 
https://privacycenter.instagram.com/policy/ and
https://privacycenter.instagram.com/policy/.

7.3. YouTube

We use the video portal "YouTube" of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google") on our website (videos). The implementation is based on Art. 6 para. 1 sentence 1 lit. f GDPR, whereby our interest lies in the smooth integration of the videos and the appealing design of our website.

We use the "extended data protection mode" option provided by Google.

When you call up a page that has an embedded video, a connection is established to the Google servers and the content is displayed on the website by notifying your browser.

According to Google, in "extended data protection mode" your data - in particular which of our websites you have visited and device-specific information including the IP address - is only transmitted to the YouTube server in the USA when you watch the video. By clicking on the video, you consent to this transmission.

If you are logged in to Google at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.
 
In some cases, information is transmitted to the parent company Google Inc. based in the USA, to other Google companies and to external Google partners, some of which may be located outside the European Union. Google uses standard contractual clauses approved by the European Commission and relies on the adequacy decisions issued by the European Commission regarding certain countries.

Further information on data protection in connection with YouTube can be found in Google's privacy policy.

7.4. WhatsApp

We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the so-called "business version" of WhatsApp for this purpose.

If you contact us via WhatsApp on the occasion of a specific transaction (for example, an order placed), we will store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6 para. 1 lit. b. GDPR to process your enquiry. GDPR to process and respond to your request. On the same legal basis, we may ask you to provide further data (order number, customer number, address or e-mail address) via WhatsApp in order to be able to assign your enquiry to a specific process.

If you use our WhatsApp contact for general enquiries (e.g. about the range of services, availability or our website), we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the efficient and timely provision of the requested information.

Your data will only ever be used to respond to your request via WhatsApp. Your data will not be passed on to third parties.

Please note that WhatsApp Business receives access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact data of those users who have contacted us via WhatsApp.
 
This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 para. 1 lit. a GDPR when using the app on their device for the first time by accepting the WhatsApp terms of use. The transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded in this respect.

The purpose and scope of the data collection and the further processing and use of the data by WhatsApp as well as your rights in this regard and setting options to protect your privacy can be found in WhatsApp's data protection information: https://www.whatsapp.com/legal/?eea=1#privacy-policy.
 

8. Duration of the storage of personal data

The duration of the storage of personal data is determined by the respective statutory retention period (e.g. retention periods under commercial and tax law). After expiry of the period, the corresponding data is routinely deleted, provided it is no longer required for contract fulfilment or contract initiation and/or we no longer have a legitimate interest in further storage.
 

9. Data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

If you are of the opinion that your personal data is not adequately protected or that there are indications of misuse, please contact us or our data protection officer.
 

10. Updating and amending this privacy policy

This privacy policy is currently valid and was last updated in November 2023.

It may become necessary to amend this privacy policy as a result of the further development of our website and services or due to changes in legal or official requirements. You can access and print out the current privacy policy at any time on the website.