Information on data protection

Thank you for visiting our website and for your interest in our services. We attach the utmost importance to protecting your privacy as a user of our website and adhere strictly to data protection regulations when collecting, processing and using data. This applies in particular to the processing of your personal data.

Name and address of the person responsible

Responsible: it’s OWL Clustermanagement GmbH
Street: Zukunftsmeile 2
Zip code Place: 33102 Paderborn
Phone: +49 5251 297370
Fax: +49 5251 2973790
E-mail: info@its-owl.de

Representatives: Prof. Dr. Roman Dumitrescu, Günter Korder, Herbert Weber

Contact details of the data protection officer

Name: Viktor Pidde
Phone: +49 5251 688948-0
Fax: +49 5251 688948-4
E-mail: datenschutz@its-owl.de

the purposes for which the personal data are processed and the legal basis of the processing

If your personal data is required to protect the legitimate interests of the controller pursuant to Art. 6 para. 1 lit. f GDPR, the legitimate interests consist in permanently analyzing and improving the website and optimizing user-friendliness. If reach measurement techniques are used, you will be informed separately in this privacy policy and you will be given the opportunity to object. Our legitimate interest in measuring reach serves the analysis, optimization and economic operation of our website.

Categories of personal data that are processed

When using our website, the following data is processed for organizational and technical reasons:

• Log files (error log, access log)
• IP addresses of visitors
• Name of the pages accessed
• Date and time of access
• Name of the browser used
• Name of the operating system
• Name of the search engine or external link
• Name of the downloaded files

If you send us data via our online forms, the personal data you provide will be processed to fulfill the respective purpose.

Recipients of your personal data

Your personal data will only be passed on to third parties with your consent or on the basis of a legal permission. Your personal data will only be transferred to state institutions and authorities entitled to receive information within the framework of the relevant laws or if we are obliged to do so by a court decision. Our employees are obliged to maintain confidentiality and to comply with the provisions of data protection legislation. We have commissioned appropriate companies to process your personal data on our behalf for the technical implementation of the services provided. These are:

• DeteringDesign
  Service provided: Hosting of the website
• Data center located in Germany
  Service provided: Rental and operation of virtual servers as part of order processing in accordance with Art. 28 GDPR
• Google Ireland Ltd.
  Service provided: Web tracking with Google
• Mailchimp
  Service provided: Sending of e-mail newsletters as part of order processing in accordance with Art. 28 GDPR

Subscription to the newsletter

If you have subscribed to our newsletter, we will use your e-mail address and the information you have voluntarily provided to send you our newsletter on a regular basis. To receive our newsletter, it is sufficient to enter your e-mail address.

At the end of each newsletter there is a link that you can use to edit your subscription data or unsubscribe from the newsletter at any time. You can also cancel your subscription by notifying us using the contact details provided in the legal notice. If you register for the newsletter with an e-mail address that is not already registered to receive our newsletter, a double opt-in e-mail will be sent to confirm the subscription. The subscription is only activated after confirmation of the subscription by clicking on a link in this confirmation e-mail. This procedure is carried out for legal reasons to ensure that the owner of the e-mail address has commissioned the subscription as the data subject.

When you subscribe to the newsletter, we save the date of registration. This is necessary for verification purposes in the event of possible misuse of the e-mail address used for registration.

The newsletters are individualized so that we can recognize whether a newsletter has been opened by a recipient and whether and one of the articles contained in the newsletter has been accessed. The personal data collected in this way is stored and evaluated in order to optimize our offer and to be able to adapt the content of future newsletters even better to the interests of the subscribers.

Applications

If you send us applications in electronic form, the collection of the personal data contained in the application documents from you as the data subject is subject to the information provided in this data protection declaration and the additional information provided below in accordance with Art. 12 / 13 GDPR:

Purpose(s) of the data processing:
Decision on the establishment of an employment relationship

Legal basis(s) for data processing:
§ Section 26 para. 1 P. 1 BDSG

Recipient of the personal data:
The application documents will not be forwarded to third parties.

Duration of storage of the personal data or criteria for this:
If your application is rejected, your application documents will be stored for 6 months after this decision.

Is the provision of personal data required by law or contract or necessary for the conclusion of a contract or is the data subject obliged to provide the personal data? What would be the consequences of not providing it?
Yes. The application procedure cannot be carried out without the application documents.

Use of cookies

This website uses so-called cookies. These are small text files that are sent from our web server to your browser and stored on your computer’s hard disk. No personal data is stored, only an individual pseudonym. This information is used, for example, to recognize you when you navigate our website and to make navigation easier for you.

You can set your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you. Alternatively, you can also view this website without cookies. You can preset this in your browser. Please note that some functions of the website may then no longer be available in part or in full. You can find a list of the cookies used here.

Use of the Google Tag Manager

We use the Google Tag Manager tool on our website, which is offered and operated by Google LLC.

The business address of Google LLC: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The imprint of Google LLC with further information can be found at the following link: https://www.google.com/intl/de_de/+/policy/imprint.html

The business address of the responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The imprint of Google Ireland Limited with further information can be found at the following link: https://www.google.de/intl/de/contact/impressum.html

We use the Google Tag Manager service to integrate various website tags from Google into our website (e.g. website analysis products).

In programming language, tags are parts of code that are used to track the activities of visitors to a website. The word ‘tag’ comes from the English language and refers to a label, a marker or a tag and is used to mark a dataset with certain (additional) information. Depending on the type of activity tracked and the function of the respective tag, a distinction is made in particular between so-called counter tags, conversion tags, remarketing tags and container tags.

Counter tags can be used, for example, to determine how many times a user has accessed the website.

A conversion tag is used in particular to determine how many sales, newsletter registrations, downloads and other events triggered by the website visitor, which are referred to as ‘conversions’.

Remarketing tags are used in particular to identify website visitors who visit a website several times so that they can be addressed in a more targeted manner.

A container tag offers an easy way to manage multiple tags centrally.

We use the Google Tag Manager tool on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. f GDPR, in particular to make our advertising measures more cost-effective and efficient.

As a processor, Google Ireland Limited processes your personal data on our behalf. For this purpose, we have concluded an order processing contract with Google in accordance with Art. Art. 28 GDPR concluded. Google is entitled to commission subcontractors within the scope of order processing. A list of approved subcontractors can be found at: https://privacy.google.com/businesses/subprocessors/. In addition to Google LLC, which is based in the USA, the US authorities may also have access to the data stored by Google.

Insofar as data is processed in the context of the use of Google Tag Manager, the data processing by Google is described in detail under the following link:
https://support.google.com/tagmanager/answer/9323295.

Google only processes the IP address of the website visitor, which is necessary to run the Google Tag Manager. The IP address is stored for 14 days in order to maintain the service and to enable troubleshooting.

According to Google, Google Tag Manager can be used to collect aggregated tag triggering data to monitor the stability and performance of the system. This data does not contain any IP addresses or other user-specific identifiers that could be assigned to a specific person. Google Tag Manager does not collect, store or share information about visitors to the respective website. This also applies to the URLs of visited pages.

To find out more about Google’s data protection provisions in general, you can access these provisions at the following link:
https://policies.google.com/privacy?hl=de#infocollect.

Traffic analysis GoogleAnalytics

We use the Google Analytics tool on our website, which is offered and operated by Google LLC. This provides us with statistics on, for example Number of visitors and pages visited.

The business address of Google LLC: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The imprint of Google LLC with further information can be found at the following link: https://www.google.com/intl/de_de/+/policy/imprint.html

The business address of the responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The imprint of Google Ireland Limited with further information can be found at the following link: https://www.google.de/intl/de/contact/impressum.html

We will only use the tool if you have consented to the use of this service.

The Google Analytics tool is used to analyze the use of our websites by you (web analysis service).

In order to be able to carry out the analyses and ensure the function of the tool, we have implemented the code that ensures the function of Google Analytics on our website that you visit.

On our behalf, Google will use the information collected on the website to evaluate your (generally pseudonymous) use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website.

We also use Google Analytics to analyze the success of our marketing campaigns.

Google Analytics uses cookies to analyze your use of our website. Cookies are small text files that are sent to your browser and stored on the data carrier of your device.

To protect your privacy, we anonymize the IP addresses that are transmitted to Google by using the ‘anonymizeIP’ function (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

As a processor, Google Ireland Limited processes your personal data on our behalf. For this purpose, we have concluded an order processing contract with Google in accordance with Art. Art. 28 GDPR concluded. Google is entitled to commission subcontractors within the scope of order processing. A list of approved subcontractors can be found at: https://privacy.google.com/businesses/subprocessors/. In addition to Google LLC, which is based in the USA, the US authorities may also have access to the data stored by Google.

Insofar as cookies are used in the context of the use of Google Analytics, these are described in detail by Google.

General information on the cookies used can be found at: https://policies.google.com/technologies/types?hl=de

Detailed information on the cookies used, in particular The information on the personal data processed in this context, the storage period of the individual cookies and their purposes can be found at:
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=de

To find out more about Google’s data protection provisions in general, you can access these provisions at the following link:
https://policies.google.com/privacy?hl=de#infocollect

The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. Your consent can be revoked at any time with effect for the future by changing the cookie settings. The cookie settings open again when you click on the red bar at the bottom left of our website.

You can prevent the collection of data generated by the cookie and related to your use of the website by not giving your consent to the setting of the corresponding cookie or by installing the browser add-on to deactivate Google Analytics. This is available at:
https://tools.google.com/dlpage/gaoptout?hl=de

You can also prevent the setting of cookies by configuring your browser to refuse all cookies. In this case, however, the functionalities on this and other websites may be restricted.

Insofar as the data collected regarding user activities is transmitted by Google Ireland Limited to Google LLC (parent company in the USA), the transmission is also based on your consent in accordance with Art. 6 para. 1 lit. f GDPR. Art. 49 para. 1 lit. a DS-GVO in conjunction with. Art. 6 para. 1 lit. a) GDPR

Spam protection through Google reCAPTCHA

We use the reCAPTCHA service from Google LLC to ensure sufficient data security when submitting forms. The service will only be used with your explicit consent.
This is primarily used to distinguish whether the input is made by a natural person or abusively by machine and automated processing. When you visit one of our websites in which reCAPTCHA is integrated, your personal data such as IP address, screen and window resolution, language set in the browser, time zone, installed browser plug-ins and any other data required by Google for reCAPTCHA are collected and transmitted to Google. The data protection provisions of Google LLC apply here.
For more information about Google LLC’s privacy policy, please visit http://www.google.de/intl/de/privacy [externer Link] or https://www.google.com/intl/de/policies/privacy/ [externer Link].

Our social media presence

On the social networks listed below, we provide you with opportunities to find out about us and our offers and to get in touch with us via so-called fan pages (e.g. on Facebook) or accounts or channels.

Below you will find information about which of your data we or the respective social network or social media service process in connection with your access and use of the respective website.

Which of your data do we process?

If you contact us via the respective social network, we regularly process your user name via which you contact us and, if necessary, store further data provided by you insofar as this is necessary to process/answer your request.

The legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. f GDPR (protection of our legitimate interests).

We may receive automated statistics relating to our accounts from the operators of the social media platforms on which we have a presence. These statistics include the following data in particular:

• Number of page views,
• Information on the ‘Like’ function,
• Information on page activities and post interactions, reach,
• Information on video views,
• Information on the proportion of men and women among visitors to our social media presence.

However, these statistics are limited to aggregated and non-personal data only, so that you would not be identifiable to us from the data contained in the statistics.

Which of your data do the social networks or platform operators process?

You do not need to be a member of the respective social network to view our social media presence. No user account is required for the respective social network.

In addition to the data of (logged-in) members of the respective network, the platform operators also collect and process data from visitors to the respective social media website who do not have a user account and are not logged in. This may include, for example, technical data in order to be able to display the website to you. In addition, cookies and similar technologies may also be used by the platform operators, over which we have no influence.

Details regarding your personal data processed by the respective social media platform can be found in the privacy policy of the respective social network. The corresponding links to the data protection provisions of the individual platform operators can be found in this data protection information, depending on the provider, insofar as provider-specific information is provided by us below.

If you wish to use the functions offered on the respective social media presence (e.g. comment function, sharing content, like function, messenger function, etc.), this is only possible if you have registered with the respective social network and provided your personal data.

We have no influence on the data processing by the social networks in the context of your use.

According to our information, your data is processed by the social networks, in particular for the analysis of user behavior using cookies and similar technologies, in order to present you with advertising based on your interests both within and outside the respective social network on the basis of these analyses. In this context, it cannot be ruled out that your data will also be stored by the social networks outside the EU/EEA and passed on to third parties (e.g. foreign authorities and other public bodies).

Information on the exact scope and purposes of the processing of your personal data, the storage period and deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use of the social networks can be found in the data protection notices and cookie guidelines of the social networks. In it you will find, among other things, information on your rights and revocation and objection options.

Our presence on Facebook

The following link will take you to our Facebook page, for which we are jointly responsible with Facebook Ireland Ltd. for certain functions (see below) in accordance with Art. 26 GDPR:

https://www.facebook.com/itsOWL.Cluster/

Facebook Ireland Ltd. is a subsidiary of Facebook Inc. based in Menlo Park, California, USA (Facebook).

When you visit our Facebook page mentioned above, Facebook collects, among other things, your IP address and other information that Facebook stores on your PC in the form of cookies in order to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page.

Facebook provides more detailed information on data processing in this context at the following link: https://de-de.facebook.com/help/pages/insights.

In joint responsibility with Facebook in accordance with Art. 26 GDPR, we analyze how you use our fan page (Page Insights function). The information to be provided in accordance with the GDPR on data processing in the context of Page Insights is available on Facebook at the following link: https://www.facebook.com/privacy/explanation.

Facebook also provides you with the relevant contents of the agreement concluded between Facebook and us on processing under joint responsibility in accordance with Art. 26 GDPR at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

Facebook Ireland has agreed to assume primary responsibility under the GDPR for the processing of Insights data and to fulfill all obligations under the GDPR with regard to the processing of Insights data. This applies in particular to Art. 12 and 13 GDPR, Art. 15 to 22 GDPR and Art. 32 to 34 GDPR.

The statistical information transmitted to us does not (or no longer) constitute personal data for us, so that it is not possible for us to identify you on the basis of this data. We only use statistical data to better understand the interests of our users in order to improve our online presence and ensure the quality of our online services.

Insofar as we collect your personal data via our Facebook page (e.g. your name, nickname, content of messages sent to us, comment content and the profile information you provide ‘publicly’) only in order to communicate and interact with you.

Your personal data is generally processed by us for the purpose of communication and interaction on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. f DS-GVO processed. Our legitimate interest is that we pursue our business objectives through our information and communication offers on the Facebook page.

Insofar as we carry out processing operations in connection with the operation of our Facebook page for which your consent is required (e.g. participation in a competition, prize draw, sending a newsletter, etc.), we will obtain this separately in each case. In this case, your personal data will be processed on the basis of Art. 6 para. 1 lit. a in conjunction with. Art. 7 GDPR.

Insofar as the social network Facebook collects your data for its own purposes for which consent is required (e.g. evaluation of user behavior), this is also done on the basis of Art. 6 para. 1 lit. a in conjunction with. Art. 7 GDPR. In this case, the required consent is obtained by the social network itself.

Due to the joint responsibility of Facebook and us for the processing of personal data on our Facebook presence, you can assert your data subject rights both with us and directly with Facebook.

As Facebook is responsible for most of the data processing that takes place as a service provider, our ability to access your data is very limited. Only the service provider has full access to your data in accordance with the terms of use of the network. For this reason, only the provider of the social network can usually take and implement the necessary measures to fulfill your rights as a data subject (e.g. right to information, deletion, objection, etc.). The most effective way to assert such rights is therefore directly against the network provider.

Please note that personal data is also processed by Facebook in the USA.

Use of YouTube videos (external videos)

We use videos on our website that are stored on the Internet video portal YouTube (available at: https://www.YouTube.com).

The internet video portal YouTube is provided by a US company, YouTube LLC (LLC stands for Limited Liability Company). The business address of YouTube LLC: 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube LLC is itself a subsidiary of Google Ireland Limited, a company based in Ireland. The business address of Google Ireland Limited: Gordon House, Barrow Street, Dublin 4, Ireland (Google).

The videos are used by embedding a video on our website by integrating an external video player from YouTube. When you click on the video, it is played directly on our site.

By using this technology, personal data is transmitted to YouTube LLC as described below.

The videos are integrated on our website in such a way that no personal data is transferred to YouTube LLC if you have not given your consent to the use of this service.

When you access the video on the YouTube video portal, YouTube LLC processes your personal data (e.g. your IP address, location data of your device, sensor data from your device, Wi-Fi access points, etc.) in accordance with its own privacy policy, which you can access at the following link: https://policies.google.com/privacy?hl=de&gl=de.

When you watch the videos embedded on our site, the service provider YouTube uses cookies to make ads more appealing to users and more valuable to publishers and advertisers. Cookies are usually used to select user-relevant ads, to improve campaign performance reporting or to prevent a user from seeing the same ads more than once.

YouTube may also collect such data from visitors to this website who are not logged in or registered with YouTube. As a rule, YouTube uses and processes user data for market research and advertising purposes, as explained above. For example, user profiles can be created from the usage behavior and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements inside and outside YouTube that correspond to the presumed interests of the users. For these purposes, cookies are usually stored on the user’s computer, in which the user’s usage behavior and interests are stored.

Cookies are small text files that are sent to your browser and stored on the data carrier of your device. These cookies enable the YouTube or Google service to store your user data (e.g. your IP address). B. URL, referrer URL, IP address, device and browser properties (user agent) and timestamp) with the data of your Google account, if applicable.

Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users are YouTube members and are logged in to the YouTube page).

The data collected by YouTube is anonymous to us as users of the service and cannot be viewed. This data is only used by YouTube for the purposes described in YouTube’s privacy policy, e.g. to display advertisements. The following information is made available to us as service users by YouTube, for example: Followers, reach, user demographics. These statistics do not allow any conclusions to be drawn about individual users. Information about personal data can therefore only be requested directly from YouTube. For our part, we can only view the public information of the users, which has been defined by the respective YouTube user in the private account settings. Registered users also have the option of actively hiding likes or unfollowing our channel.

If you are a registered YouTube member and have logged in to the YouTube site, your data will be automatically assigned to your user account by YouTube when you visit our site.

Further information on the possible account settings on YouTube can be found at the following link: https://www.youtube.com/account_privacy.

In particular, if you do not have a YouTube account, you can also prevent the setting of cookies by configuring your browser to reject all cookies. In this case, however, the functionalities on this and other websites may be restricted.

Insofar as cookies are used by YouTube or Google in the context of the use of YouTube, these are described by YouTube or Google in a detailed table, which you can call up under the following link:

https://policies.google.com/technologies/types

Registered and logged-in YouTube members have the opportunity to contact us publicly via the video comment function. This is done by means of a public comment on our YouTube company channel. Personal contact is based on a voluntary decision by the respective user and is always initiated by the respective user.

The legal basis for the use of the YouTube service is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Insofar as the data collected regarding user activities is transmitted to the USA by the service provider YouTube LLC, the transmission is also based on your consent in accordance with Art. 6 para. 1 lit. f GDPR. Art. 49 para. 1 lit. a DS-GVO in conjunction with. Art. 6 para. 1 lit. a) GDPR.

Our YouTube company page

YouTube LLC or its parent company Google Ireland Limited is the sole controller for the processing of personal data on our YouTube company page. Further information about the processing of personal data by YouTube LLC or Google can be found at https://policies.google.com/privacy?hl=de&gl=de.

When you visit our YouTube company page, YouTube processes personal data in order to provide us with anonymized evaluations. We do not receive any personal data from you, but only have access to the aggregated content. Even if we have no influence on the type and scope of the processing of your personal data by YouTube, this processing of personal data takes place within the framework of joint responsibility in accordance with Art. 26 GDPR. The processing serves the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to obtain information about the actions on our YouTube company page.

In the case of requests for information and the assertion of user rights, it is pointed out that these can be asserted most effectively directly against Google, because only Google has access to the user’s data and can take appropriate measures and provide information directly.

Please note that personal data is also processed by YouTube LLC in the USA.

Our presence on Twitter

The following link will take you to our Twitter page, for which we are jointly responsible with the service provider (Twitter) for certain functions (see below) in accordance with Art. 26 GDPR:

https://twitter.com/itsowl_cluster?lang=en

The Twitter information service we use is provided by a US company, Twitter Inc. The business address of Twitter Inc. is 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Twitter International Company is responsible for the processing of personal data of persons living outside the USA. The business address of Twitter International Company: One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.

The services may include content such as images, videos, buttons that allow you to use Twitter services interactively (e.g. the ‘Share’ and ‘Rate’ functions). If you are a member of the Twitter platform, it is possible for Twitter to assign the use of the above-mentioned Twitter services to the respective member profile.

You can find detailed information about which data is processed by Twitter and for what purposes in Twitter’s privacy policy at the following link:

https://twitter.com/de/privacy.

You can object to the individualization of your personal data by Twitter by clicking on the following link:

https://twitter.com/personalization.

We have no influence on the way in which Twitter processes data.

Data processing by us only takes place to the extent that we may ‘re-tweet’ your tweets or reply to these messages or write tweets from us that contain information about your account. In this way, data you have made public can be made accessible to our followers.

Our Twitter page can be used directly via the Twitter platform or by clicking on one of the direct links on our website. When you click on the link, you will be redirected to our company profile on Twitter. No personal data is transmitted to Twitter during forwarding, as no Twitter plug-ins are used on our site that tell the operator which of our pages you have visited.

Twitter International Company or the parent company Twitter Inc. is generally responsible for the processing of personal data on our Twitter company page. solely responsible.

When you visit our Twitter company page, the service provider Twitter processes personal data in order to provide us with anonymized evaluations. We do not receive any personal data from you, but only have access to aggregated content. Even if we have no influence on the type and scope of the processing of your personal data by Twitter, this processing of personal data takes place within the framework of joint responsibility in accordance with Art. 26 GDPR. The processing serves the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, to receive information about the actions on our Twitter company page.

In the case of requests for information and the assertion of user rights, it is pointed out that these can be asserted most effectively directly against Twitter, because only the service provider has access to the user’s data and can take appropriate measures and provide information directly.

Where we collect your personal data via our Twitter page (e.g. your name, nickname, content of messages sent to us, comment content and the profile information you provide ‘publicly’) only to communicate and interact with you.

Your personal data is generally processed by us for the purpose of communication and interaction on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. f GDPR is processed. Our legitimate interest lies in the fact that we pursue our business objectives through our information and communication offers on the Twitter page.

Insofar as we carry out processing operations in connection with the operation of our Twitter page for which your consent is required (e.g. participation in a competition, prize draw, sending a newsletter, etc.), we will obtain this separately in each case. In this case, your personal data will be processed on the basis of Art. 6 para. 1 lit. a in conjunction with. Art. 7 GDPR.

Insofar as the service provider Twitter collects your data for its own purposes for which consent is required (e.g. evaluation of user behavior), this is also done on the basis of Art. 6 para. 1 lit. a in conjunction with. Art. 7 GDPR. In this case, the required consent is obtained by the social network itself.

Due to the joint responsibility of Twitter and us for the processing of personal data on our Twitter page, you can assert your data subject rights both with us and directly with Twitter.

As Twitter is responsible for most of the data processing that takes place as a service provider, our ability to access your data is very limited. Only the service provider has full access to your data in accordance with the terms of use of the network. For this reason, only the provider of the service can usually take and implement the necessary measures to fulfill your rights as a data subject (e.g. right to information, deletion, objection, etc.). The most effective way to assert such rights is therefore directly against the network provider.

Please note that personal data is also processed by Twitter (service provider) in the USA.

Our presence on LinkedIn

The following link will take you to our LinkedIn page, for which we are jointly responsible for certain functions (see below) with LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland (LinkedIn) in accordance with Art. 26 GDPR:

https://www.linkedin.com/company/itsowl

LinkedIn Ireland Unlimited Company is a subsidiary of LinkedIn Inc. based in Sunnyvale, California, USA.

You can use our company profile on LinkedIn directly via the LinkedIn platform or by clicking on one of the direct links on our website. When you click on the link, you will be redirected to our company profile on LinkedIn. No personal data is transmitted to LinkedIn during forwarding, as no LinkedIn plugins are used on our site that tell the operator which of our pages you have visited.

When you visit our company profile on LinkedIn, LinkedIn processes your personal data (e.g. your IP address, location data of your device, etc.) in accordance with its own privacy policy, which you can access at the following link:

LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

In principle, LinkedIn Ireland Unlimited Company (Ireland/EU – “LinkedIn”) is solely responsible for the processing of personal data on our LinkedIn company page. Further information on the processing of personal data by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy.

When you visit our LinkedIn company page, LinkedIn processes personal data in order to provide us with anonymized evaluations. This provides us with information about the actions you take on our LinkedIn company page (called LinkedIn Page Insights). We do not receive any personal data from you via the Page Insights, but only have access to the aggregated content. Even if we have no influence on the type and scope of the processing of your personal data by LinkedIn, this processing of personal data is carried out within the framework of joint responsibility in accordance with Art. 26 GDPR. The processing serves the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, to receive information about the actions on our LinkedIn company page. LinkedIn provides an agreement on processing as joint controllers, which defines the distribution of data protection obligations between us and LinkedIn. The agreement is available at https://legal.linkedin.com/pages-joint-controller-addendum.

Where we collect your personal data via our LinkedIn page (e.g. your name, nickname, content of messages sent to us, comment content and the profile information you provide ‘publicly’) only to communicate and interact with you.

Your personal data is generally processed by us for the purpose of communication and interaction on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. f GDPR is processed. Our legitimate interest lies in the fact that we pursue our business objectives through our information and communication offers on the LinkedIn page.

Insofar as we carry out processing operations in connection with the operation of our LinkedIn page for which your consent is required (e.g. participation in a competition, prize draw, sending a newsletter, etc.), we will obtain this separately in each case. In this case, your personal data will be processed on the basis of Art. 6 para. 1 lit. a in conjunction with. Art. 7 GDPR.

Insofar as the social network LinkedIn collects your data for its own purposes for which consent is required (e.g. evaluation of user behavior), this is also done on the basis of Art. 6 para. 1 lit. a in conjunction with. Art. 7 GDPR. In this case, the required consent is obtained by the social network itself.

Due to the joint responsibility of LinkedIn and us for the processing of personal data on our LinkedIn presence, you can assert your data subject rights both with us and directly with LinkedIn.

As LinkedIn is responsible for most of the data processing that takes place as a service provider, our ability to access your data is very limited. Only the service provider has full access to your data in accordance with the terms of use of the network. For this reason, only the provider of the social network can usually take and implement the necessary measures to fulfill your rights as a data subject (e.g. right to information, deletion, objection, etc.). The most effective way to assert such rights is therefore directly against the network provider.

Please note that personal data is also processed by LinkedIn in the USA.

Use of Google Maps

We use the map service ‘Google Maps’ from Google Ireland Limited on our website. The business address of Google Ireland Limited: Gordon House, Barrow Street, Dublin 4, Ireland (Google). The parent company of Google Ireland Limited is Google LLC (registered office: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

The service is used by embedding an element for displaying the map on our website by integrating an external map display.

By using this technology, personal data is transmitted to the service provider as described below.

The maps are integrated on our website in such a way that no personal data is transferred to Google if you have not given your consent to the use of this service.

When you view Google’s maps, Google processes your personal data (e.g. your IP address, location data from your device, sensor data from your device, Wi-Fi access points, etc.) in accordance with its own privacy policy, which you can access at the following link: https://policies.google.com/privacy?hl=de&gl=de. The service provider Google uses cookies as part of the integration of the maps.

Google may also collect such data from visitors to this website who have consented to the use of Google Maps and who are not logged in or registered with Google. As a rule, Google uses and processes the data of users of the service for market research and advertising purposes. For example, user profiles can be created from the usage behavior and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements within and outside Google that correspond to the presumed interests of the users. For these purposes, cookies are usually stored on the user’s computer, in which the user’s usage behavior and interests are stored.

Cookies are small text files that are sent to your browser and stored on the data carrier of your device. These cookies enable the service provider Google to recognize your user data (e.g. your IP address). B. URL, referrer URL, IP address, device and browser properties (user agent) and timestamp) with the data of your Google account, if applicable.

Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users have a Google account and are logged in to the Google page).

The data collected by Google is anonymous to us as users of the service and cannot be viewed. This data is only used by Google for the purposes described in Google’s privacy policy, e.g. to display advertisements. Insofar as statistics are made available to us as service users by Google, these statistics do not allow any conclusions to be drawn about individual users. Information on personal data can therefore only be requested directly from Google. For our part, we can only view the public information of the users which has been defined by the respective Google user in the private account settings. Registered users also have the option of adjusting settings relating to the use of Google Maps.

If you are a registered Google user and have logged in to the Google site, your data will be automatically assigned to your user account by Google when you visit our site, provided you have consented to the use of Google Maps.

Further information on the possible account settings with regard to the Google Maps service can be found at the following link: https:%253Dde%

In particular, if you do not have a Google account, you can also prevent the setting of cookies by configuring your browser accordingly so that all cookies are rejected. In this case, however, the functionalities on this and other websites may be restricted.

Insofar as cookies are used by Google in the context of the use of Google Maps, these are described by Google in a detailed table, which you can call up under the following link:

https://policies.google.com/technologies/types

The legal basis for the use of the Google Maps map service is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Insofar as the data collected regarding user activities is transmitted to the USA by the service provider Google, the transmission also takes place on the basis of your consent in accordance with. Art. 49 para. 1 lit. a DS-GVO in conjunction with. Art. 6 para. 1 lit. a) GDPR.

In principle, Google Ireland Limited or its parent company Google Ireland Limited is solely responsible for the processing of personal data in connection with Google Maps. Further information about the processing of personal data by Google can be found at https://policies.google.com/privacy?hl=de&gl=de.

If you use the map service and have our maps displayed, Google processes personal data in order to provide us with anonymized evaluations. We do not receive any personal data from you, but only have access to the aggregated content. Even if we have no influence on the type and scope of the processing of your personal data by Google, this processing of personal data takes place within the framework of joint responsibility in accordance with Art. 26 GDPR. The processing serves the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to obtain information about the relevant data for the use of the map service.

In the case of requests for information and the assertion of user rights, it is pointed out that these can be asserted most effectively directly against Google, because only Google has access to the user’s data and can take appropriate measures and provide information directly.

Please note that personal data is also processed by Google in the USA.

Our presence on XING

The following link will take you to our XING page, for which we are jointly responsible with the service provider (XING) for certain functions (see below) in accordance with Art. 26 GDPR:

https://www.xing.com/companies/itsowlclustermanagementgmbh

The service is provided by New Work SE (SE stands for Societas Europaea; European Company). The business address of New Work SE: Dammtorstraße 30, 20354 Hamburg, Germany.

XING is a service with numerous applications. The applications of the XING service include, in particular, the social network for which the user can purchase a membership, an event platform, an employer evaluation platform and a platform to promote employee engagement. Some of the XING applications may appear under other brand names or using other XING websites (e.g. kununu, kununu engage, HalloFreelancer, XING TalentManager, XING TalentpoolManager, XING AdCreator, FreelancerManager).

You can use our company profile on XING directly via the XING platform or by clicking on one of the direct links on our website. When you click on the link, you will be redirected to our company profile on XING. No personal data is transmitted to XING during forwarding, as no XING plugins are used on our site that tell the operator which of our pages you have visited.

When you access our company profile on XING, XING processes your personal data in accordance with its own privacy policy, which you can access at the following link:

Privacy policy of the service provider: https://privacy.xing.com/de/datenschutzerklaerung

In principle, New Work SE is solely responsible for the processing of personal data on our XING company page.

When you visit our XING company page, XING processes personal data in order to provide us with anonymized evaluations. As our XING company profile is also published on the kununu web platform (as already mentioned, ‘kununu’ is a brand of New Work SE, which can be accessed via the following link: https://www.kununu.com/). As part of the evaluation function on kununu, we receive information about the evaluation of us as an employer by our former employees or applicants. However, we do not regularly receive any personal data from you from the service provider New Work SE, but only have access to the aggregated content. Even if we have no influence on the type and scope of the processing of your personal data by XING, this processing of personal data takes place within the framework of joint responsibility in accordance with Art. 26 GDPR. The processing serves the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, to receive information about the actions on our XING company page.

In the case of requests for information and the assertion of user rights, it is pointed out that these can be asserted most effectively directly against the service provider (New Work SE), because only the service provider has access to the user’s data and can take appropriate measures and provide information directly.

Insofar as we collect your personal data via our XING page (e.g. your name, content of messages sent to us, comment content and the profile information you have provided ‘publicly’) only in order to communicate and interact with you.

Your personal data is generally processed by us for the purpose of communication and interaction on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. f DS-GVO processed. Our legitimate interest is that we pursue our business objectives through our information and communication offerings on the XING page.

Insofar as we carry out processing in connection with the operation of our XING page for which your consent is required (e.g. participation in a competition, prize draw, sending a newsletter, etc.), we will obtain this separately in each case. In this case, your personal data will be processed on the basis of Art. 6 para. 1 lit. a in conjunction with. Art. 7 GDPR.

Insofar as the social network XING collects your data for its own purposes for which consent is required (e.g. evaluation of user behavior), this is also done on the basis of Art. 6 para. 1 lit. a GDPR. 1 lit. a in conjunction with. Art. 7 GDPR. In this case, the required consent will be obtained by the social network itself if necessary.

Due to the joint responsibility of XING and us for the processing of personal data on our XING presence, you can assert your data subject rights both with us and directly with New Work SE.

As New Work SE is responsible for most of the data processing that takes place as a service provider, our ability to access your data is very limited. Only the service provider has full access to your data in accordance with the terms of use of the network. For this reason, only the provider of the social network can usually take and implement the necessary measures to fulfill your rights as a data subject (e.g. right to information, deletion, objection, etc.). The most effective way to assert such rights is therefore directly against the network provider.

Please note that personal data is also processed by XING (service provider) in third countries (e.g. the USA), insofar as XING processes personal data in particular in the USA. subcontractors in the third countries.

Links to other websites

Our website contains links to other websites. We have no influence on whether their operators comply with data protection regulations. Despite careful control of the content, we assume no liability for the content of external links. The operators of the linked pages are solely responsible for their content.

Your security

We use technical and organizational measures to protect your data from unauthorized access, loss, manipulation or destruction. Our security measures are constantly updated in line with technological developments. All communication between your device and our servers is encrypted. This applies both to the download of documents or information that we offer you via our website and to information that you provide to us via the contact form or the application form.

Duration of storage

The personal data that you have made available to us will be automatically deleted if the purposes of the processing no longer apply and there are no statutory retention obligations. The following retention periods apply in detail:

Rights of data subjects / right to lodge a complaint

In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data processed by you, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of the rights to rectification, erasure, restriction of processing or objection, the existence of a right of appeal to a supervisory authority, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details.

In accordance with Art. 16 GDPR, you have the right to demand the immediate correction of incorrect or the completion of your personal data stored by us.

In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless there is a legal basis that entitles or obliges us to continue storing the data.

In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if

• the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data,
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead,
• we no longer need the personal data for the purposes of the processing, but you require the data for the establishment, exercise or defense of legal claims,
• you object to the processing pursuant to Article 21 para. 1 GDPR, as long as it is not yet clear whether our legitimate reasons outweigh your reasons.

In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you is in breach of the GDPR.

Right to withdraw consent

Pursuant to Art. 7 para. 3 GDPR, you have the right to revoke your consent to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.

Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR on grounds relating to your particular situation.

Provision of your personal data

Personal data is information about your identity. This includes, for example, information such as name, address, telephone number or e-mail address. It is not necessary for you to disclose personal data in order to use this website. In certain cases, however, we need your name and address and other details so that we can provide the requested services.

This applies, for example, to the use of our contact form or the sending of information to answer individual questions. Where this is necessary, we will inform you accordingly. In addition, we only store and process data that you provide voluntarily or automatically. If you make use of consulting services, we generally only collect the data required to provide the services. If we ask you for further data, this is voluntary information. The personal data provided by you will be processed exclusively for the purposes communicated and explained to you.

Amendment of the data protection provisions

We reserve the right to change the security and data protection measures at any time, in particular if this becomes necessary due to technical developments. In these cases, we may also adapt this data protection notice accordingly. Please therefore note the current version of this privacy policy.

Questions, suggestions, complaints

If you have any further questions about the information on data protection and the processing of your personal data, you can contact our data protection officer directly using the contact details given above.

Status: April 2024