HANNEKUM TRADING GMBH
Privacy policy for this website and for HT's social media profiles.
(1) In the following, we provide information on the processing of personal data when you use our website. Personal data is any data that can be related to you personally, e.g. name, address, email addresses, user behaviour. In doing so, we wish to inform you about our processing operations and, at the same time, comply with our legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).
(2) The controller pursuant to Art. 4 (7) GDPR is Kay Hannekum, Karl-Ferdinand-Braun-Straße 5, 28359 Bremen, email address: k.hannekum@ht-shops.com (see our legal notice).
(3) When you contact us by email or via a contact form, the data you provide (your email address and, where applicable, your name and telephone number) is stored by us in order to answer your questions. We delete the data arising in this context — where the enquiry is assigned to a contract, in accordance with the periods relating to the contract term, otherwise once storage is no longer necessary — or we restrict processing where statutory retention obligations apply.
(4) Should we use commissioned service providers for individual functions of our offering or wish to use your data for advertising purposes, we will always select and monitor these service providers carefully and will inform you in detail below about the respective operations. We also state the defined criteria for the storage period.
(1) You have the following rights vis-à-vis a controller with regard to the personal data concerning you:
(2) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.
When you use the website for information purposes only, i.e. merely view it without registering and without otherwise providing us with information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us in order to display our website to you and to ensure stability and security, and must therefore be processed by us. The legal basis is Art. 6 (1) sentence 1 lit. f GDPR:
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested, and we use other common functions for analysing or marketing our offerings, which are described in more detail below. To do so, you generally have to provide further personal data, or we process such further data that we use to deliver the respective services. The principles on data processing set out above apply to all data processing purposes described here.
(2) In some cases we use external service providers to process your data. These are selected carefully by us, are bound by our instructions and are checked regularly.
(3) Furthermore, we may pass on your personal data to third parties where campaign participations, prize draws, contract conclusions or similar services are offered by us jointly with partners. Depending on the service, your data may also be collected by the partners under their own responsibility. You will receive further information when providing your data or below in the description of the respective offerings.
(4) Where our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this in the description of the offering.
(1) If you have given consent to the processing of your data, you may withdraw it at any time. Such a withdrawal affects the permissibility of processing your personal data from the point at which you declare it to us. The permissibility of the processing of your data up to the time of your withdrawal remains unaffected.
(2) Insofar as we base the processing of your personal data on a balancing of interests, you may object to the processing. This is the case where processing is in particular not necessary for the performance of a contract with you, which we set out in each case in the description of the functions below. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data in the way we do. In the event of your objection, we will examine the situation and will either discontinue or adjust the data processing or set out to you our compelling legitimate grounds on the basis of which we will continue the processing.
(3) You may of course object at any time to the processing of your personal data for advertising and data analysis purposes. You can best exercise your objection to advertising by using the contact details given above.
(1) In addition to the data mentioned above, when you use our website we use technical aids for various functions, in particular cookies, which may be stored on your end device. When you access our website, and at any time thereafter, you have the choice of whether to allow cookies to be set in general or which individual additional functions you wish to select. You can make changes in your browser settings or via our consent manager. Below we first describe cookies from a technical point of view (2) before going into your individual options in more detail by describing technically necessary cookies (3) and cookies that you can voluntarily select or deselect (4).
(2) Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you use, so that certain information can be passed to the entity that sets the cookie. Cookies cannot run programs or transfer viruses to your computer; they primarily serve to make the online offering faster and more user-friendly. This website uses the following types of cookies, whose functioning and legal basis we explain below:
(3) Mandatory functions that are technically necessary to display the website: the technical structure of the website requires us to use technologies, in particular cookies. Without these technologies, our website cannot be displayed (fully correctly) or support functions could not be enabled. These are generally transient cookies that are deleted at the end of your website visit, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The individual cookies can be viewed in the consent manager. The legal basis for this processing is Art. 6 (1) sentence 1 lit. f GDPR.
(4) Optional cookies subject to your consent: we set various cookies only after your consent, which you can select via the so-called cookie consent tool on your first visit to our website. The functions are only activated if you agree and may in particular serve to enable us to analyse and improve visits to our website, to make it easier for you to use it across different browsers or end devices, to recognise you on a visit, or to display advertising (including, where applicable, to align advertising with your interests, to measure the effectiveness of ads or to show interest-based advertising). The legal basis for this processing is Art. 6 (1) sentence 1 lit. a GDPR. You may withdraw your consent at any time without this affecting the permissibility of the processing up to the withdrawal.
We describe below the functions we use, each of which you can select and withdraw again individually via the consent manager.
Visits to our website and the transmission of personal data or personal content of our users take place via SSL encryption. Please make sure that SSL encryption is activated on your side. The use of encryption is easy to recognise: the display in your browser bar changes from “http://” to “https://” when SSL encryption is activated. Data encrypted via SSL cannot be read by third parties. Therefore only transmit your confidential information when SSL encryption is activated, and contact us if in doubt.
We host our website on the Wix.com platform (Wix.com Ltd., 40 Hanamal Tel Aviv St., Tel Aviv 6350671, Israel). Wix.com provides us with the online platform and also sets its own cookies. You can find out exactly which cookies these are via the following link: https://support.wix.com/de/article/cookies-und-deine-website-bei-wix
Wix maintains servers worldwide. The headquarters of Wix.com Ltd. is in Israel. Israel is deemed by the European Commission to be a country with an adequate level of protection for personal data according to European requirements. You have the option at any time to update, rectify or delete your personal data. To do so, you can contact the data protection department at Wix at privacy@wix.com. You can find the complete privacy policy of wix.com at: https://de.wix.com/about/privacy
We use the services of STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, to send and receive business emails. In this context, personal data such as names, email addresses and communication content is processed on STRATO's servers. Processing takes place exclusively for the purpose of electronic communication pursuant to Art. 6 (1) lit. f GDPR, or for the performance of contractual and pre-contractual obligations pursuant to Art. 6 (1) lit. b GDPR. STRATO acts as our processor within the meaning of Art. 28 GDPR. A corresponding data processing agreement has been concluded. Data processing takes place exclusively on servers within the European Union. Further information can be found in STRATO's privacy policy at: https://www.strato.de/datenschutz/
(1) A contact form is available on our website which can be used to get in touch electronically. If a user takes up this option, the data entered in the input mask is transmitted to us and stored. This data is:
Your consent to the processing of the data is obtained as part of the sending process, with reference to this privacy policy. Alternatively, you can get in touch via the email address provided. In this case, the user's personal data transmitted with the email is stored. In this context, the data is not passed on to third parties. The data is used exclusively for processing the conversation.
(2) The legal basis for processing the data is Art. 6 (1) lit. a GDPR where the user has given consent. The legal basis for processing data transmitted in the course of sending an email is Art. 6 (1) lit. f GDPR. Where the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR.
(3) The processing of the personal data from the input mask serves us solely to handle the contact request. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.
(4) The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
(5) The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and the data sent by email, this is the case when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter concerned has been conclusively clarified. The personal data additionally collected during the sending process is deleted after a period of seven days at the latest. The user has the option to withdraw their consent to the processing of personal data at any time. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
(1) The shipment of your order is handled by a shipping service provider or a freight forwarder. This may include the shipping service provider DHL or DPD Deutschland GmbH. You can find more information on data protection at DPD here: https://www.dpd.com/de/de/datenschutz/. You can find more information on data protection at DHL here: https://www.dhl.de/de/toolbar/footer/datenschutz.html
We use Calendly on our website for scheduling appointments. The provider of the service is the American company Calendly LLC, 271 17th St NW, Ste 1000, Atlanta, Georgia, 30363, USA.
Calendly also processes data in the USA. In the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. As things stand, Calendly is not a DPF-certified company (here you can access the official DPF list).
As the basis for data processing by recipients based in third countries, Calendly uses standard contractual clauses pursuant to Art. 46 (2) and (3) GDPR. Standard contractual clauses (SCCs) are model templates provided by the EU Commission and are intended to ensure that your data also complies with European data protection standards when processed in third countries (such as the USA). Through these clauses, Calendly undertakes to comply with the European level of data protection when processing your personal data, even if the data is processed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses, among other places, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
You can find out more about data protection at Calendly here: https://calendly.com/privacy
We use Microsoft Teams on our website for holding online meetings. The provider of the service is the American company Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
The information collected is stored on Microsoft's servers, outside Europe primarily in the USA. Under the Data Privacy Framework for the secure transfer of data from the EU to the USA, the use of all US service providers certified under the DPF is legally secure (here you can access the official DPF list). As things stand, Microsoft is DPF-certified and therefore officially complies with the data protection laws applicable to international data transfers. We have also agreed so-called standard data protection clauses with the providers, the purpose of which is to ensure an adequate level of data protection in the third country.
You can find out more about data protection at Microsoft here: https://privacy.microsoft.com/de-de/privacystatement
We use the cloud-based ERP software “weclapp” from weclapp SE, Neue Mainzer Straße 66-68, 60311 Frankfurt am Main, to administer and organise our business processes. In this context, personal data (e.g. master data of customers, suppliers and employees, contract and invoice data, communication content) is stored and processed in weclapp. Processing takes place exclusively for carrying out pre-contractual measures, for the performance of contracts and for internal organisation. In doing so, weclapp acts as a processor within the meaning of Art. 28 GDPR. A corresponding data processing agreement has been concluded with weclapp SE which ensures the protection of the data in accordance with the applicable data protection provisions. Data processing takes place exclusively on servers within the European Union. Further information on data processing by weclapp can be found at: https://www.weclapp.com/de/datenschutz/
We use services of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (hereinafter “Microsoft”) as part of our business communication and data processing. These include in particular applications such as Microsoft 365, Outlook, Teams, OneDrive and SharePoint.
The legal basis for data processing in the course of this use is generally Art. 6 (1) lit. b GDPR (performance of a contract) or Art. 6 (1) lit. f GDPR (legitimate interest), unless explicit consent is required.
Microsoft acts for us as a processor pursuant to Art. 28 GDPR. A corresponding data processing agreement (Data Processing Addendum, DPA) has been concluded. In it, Microsoft undertakes to comply with EU data protection standards.
Microsoft also processes data in part in third countries, in particular in the USA. To safeguard such transfers, Microsoft relies on the standard contractual clauses of the EU Commission pursuant to Art. 46 (2) lit. c GDPR. In addition, Microsoft Corporation in the USA is certified under the EU-U.S. Data Privacy Framework, which guarantees an adequate level of data protection (here you can access the official DPF list).
Microsoft contractually undertakes to implement extensive technical and organisational measures to protect personal data. Further information on Microsoft's data protection provisions can be found at: https://privacy.microsoft.com/de-de/privacystatement
(1) This website uses Google Analytics, a web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose of our use of the tool is to enable the analysis of your user interactions on websites and in apps and, through the statistics and reports obtained, to improve our offering and make it more interesting for you as a user.
(2) We record the interactions between you as a user of the website and our website primarily by means of cookies, device/browser data, IP addresses and website or app activities. Google Analytics also records your IP addresses in order to ensure the security of the service and to give us as the website operator information about the country, region or place the respective user comes from (so-called “IP geolocation”). For your protection, however, we naturally use the anonymisation function (“IP masking”), i.e. Google truncates the last octet of IP addresses within the EU/EEA.
(3) Google acts as a processor and we have concluded a corresponding agreement with Google. Google also processes data in the USA. Under the Data Privacy Framework for the secure transfer of data from the EU to the USA, the use of all US service providers certified under the DPF is legally secure (here you can access the official DPF list). As things stand, Google is DPF-certified and therefore officially complies with the data protection laws applicable to international data transfers. The use of Google Analytics on our website is based on your consent pursuant to Art. 6 (1) lit. a GDPR. Where such consent is given, this constitutes the legal basis for the processing of personal data by Google. In addition, we have a legitimate interest in using Google Analytics to optimise our online service, based on Art. 6 (1) lit. f GDPR. Nevertheless, Google Analytics is only used where your explicit consent has been given.
(4) The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is the consent you have given (Art. 6 (1) sentence 1 lit. a GDPR). You may withdraw your consent at any time without this affecting the permissibility of the processing up to the withdrawal. In apps, you can reset the advertising ID in the Android or iOS settings. The easiest way to withdraw consent is via our consent manager, or you can install Google's browser add-on, which is available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de
(5) Further information on the scope of Google Analytics is available at https://marketingplatform.google.com/about/analytics/terms/de/. Google provides information on data processing when using Google Analytics at the following link: https://support.google.com/analytics/answer/6004245?hl=de. General information on data processing, which according to Google is also intended to apply to Google Analytics, can be found in Google's privacy policy at https://www.google.de/intl/de/policies/privacy/.
This website uses wix.com to record your behaviour on our website so that the settings of our website can be better adapted to your behaviour. The operator is (as already described above under “Hosting”) the Israeli company Wix.com Ltd., based at 40 Hanamal Tel Aviv St., Tel Aviv 6350671, Israel.
You have the option at any time to object to tracking for analysis purposes and to limit your cookie settings when visiting our website. The legal basis for the processing is your consent pursuant to Art. 6 (1) lit. a GDPR. Further information on data protection at Wix.com can be found here: https://de.wix.com/about/privacy
(1) We currently use the following social media plug-ins: Instagram, LinkedIn, which are only loaded if you have previously activated the function by giving your consent. Via the plug-ins we offer you the opportunity to interact with the social networks and with other users. The legal basis for the use of the plug-ins is Art. 6 (1) sentence 1 lit. a GDPR, i.e. integration takes place only after your consent.
(2) The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation takes place in particular (also for users who are not logged in) in order to display needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise it. The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data collected from you on our site is assigned directly to your existing account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and communicates it publicly to your contacts. We recommend that you log out regularly after using a social network, but in particular before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.
(3) The information collected is stored on the providers' servers, in the case of international providers also outside Europe. Under the Data Privacy Framework for the secure transfer of data from the EU to the USA, the use of all US service providers certified under the DPF is legally secure (here you can access the official DPF list). As things stand, Meta is DPF-certified and therefore officially complies with the data protection laws applicable to international data transfers. In the case of LinkedIn, no data transfer to a third country takes place where the data is processed exclusively by LinkedIn Ireland. However: LinkedIn belongs to the US group Microsoft, and it is possible that personal data may also be transferred to the USA as part of certain services or support processes. Microsoft is certified under the Data Privacy Framework.
(4) You may withdraw your consent at any time without this affecting the permissibility of the processing up to the withdrawal. The easiest way to withdraw consent is via our consent manager or via the functions of the social media providers.
(5) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy policies of these providers stated below. There you will also find further information on your related rights and setting options for protecting your privacy. Addresses of the respective plug-in providers and URLs of their respective privacy notices:
(1) We have integrated YouTube videos into our online offering which are stored on YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos is the data mentioned in paragraph 2 transferred. We have no influence on this data transfer. The legal basis for displaying the videos is Art. 6 (1) sentence 1 lit. a GDPR, i.e. integration takes place only after your consent.
(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the basic data mentioned above, such as IP address and time stamp, is transmitted. This takes place regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in with Google, your data is assigned directly to your account. If you do not wish it to be assigned to your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) in order to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact YouTube to exercise it.
(3) The information collected is stored on Google's servers, including in the USA. Under the Data Privacy Framework for the secure transfer of data from the EU to the USA, the use of all US service providers certified under the DPF is legally secure (here you can access the official DPF list). As things stand, Google is DPF-certified and therefore officially complies with the data protection laws applicable to international data transfers.
(4) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options for protecting your privacy: https://www.google.de/intl/de/policies/privacy
(1) We maintain various profiles on social media platforms. We operate these profiles with the following providers:
(2) For these information services we rely on the technical platform and the services of the providers. We point out that you use our profiles on social media platforms and their functions under your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). When you visit our profiles, the providers of the social media platforms record, among other things, your IP address as well as further information present on your end device in the form of cookies. This information is used to provide us as the operator of the accounts with statistical information about interaction with us.
(3) The information collected is stored on the providers' servers, in the case of international providers also outside Europe. Under the Data Privacy Framework for the secure transfer of data from the EU to the USA, the use of all US service providers certified under the DPF is legally secure (here you can access the official DPF list). As things stand, Meta is DPF-certified and therefore officially complies with the data protection laws applicable to international data transfers. We have also agreed so-called standard data protection clauses with the providers, the purpose of which is to ensure an adequate level of data protection in the third country. We are not aware of the manner in which the social media platforms use the data from your visit to our account and your interaction with our posts for their own purposes, how long this data is stored or whether data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in with the social network or visit the page as a non-registered and/or non-logged-in user. When accessing a post or the account, the IP address assigned to your end device is transmitted to the provider of the social media platform. If you as a user are currently logged in, a cookie on your end device can be used to track how you have moved around the internet. Via buttons integrated into websites, the platforms are able to record your visits to these websites and assign them to your respective profile. On the basis of this data, content or advertising can be tailored to you. If you wish to avoid this, you should log out or deactivate the “stay logged in” function, delete the cookies present on your device and restart your browser.
(4) Beyond this, we as the provider of the information service only process the data from your use of our service that you provide to us and that requires an interaction. If, for example, you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing which we describe in this privacy policy. The legal basis for the processing of your data on the social media platform is Art. 6 (1) sentence 1 lit. f GDPR.
(5) To exercise your data subject rights, you can contact either us or the provider of the social media platform. Insofar as one party is not responsible for the response or has to obtain the information from the other party, we or the provider will forward your request to the respective partner. For questions about profiling and the processing of your data when using the website, please contact the operator of the social media platform directly. For questions about the processing of your interaction with us on our page, please write to the contact details we have given above.
(6) The providers describe in their privacy policies what information the social media platform receives and how it is used (see the links in the list above). There you will also find information on contact options and on the setting options for advertisements. Further information on social networks and how you can protect your data can also be found at https://www.youngdata.de.
(1) We use the Google Ads service in order to draw attention to our offerings by means of advertisements. If you reach our website via a Google ad, a cookie is stored on your end device by Google Ads. The legal basis for the processing of your data is Art. 6 (1) sentence 1 lit. a GDPR, i.e. integration takes place only after your consent.
(2) The advertising media are delivered by Google via so-called “ad servers”. To this end, we and other websites use so-called ad server cookies, by means of which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. Via the Google Ads cookies stored on our website, we can obtain information about the success of our advertising campaigns. These cookies are not intended to identify you personally. The analysis values usually stored for this cookie are the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information (a marker that a user no longer wishes to be addressed).
(3) The cookies set by Google enable Google to recognise your internet browser. If a user visits certain pages of the website of an Ads customer and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer, so that the cookies cannot be tracked via the websites of other Ads customers. Through the integration of Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, there is the possibility that the provider may find out and store your IP address.
(4) Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. In the advertising measures mentioned, we ourselves do not collect personal data independently, but merely provide Google with the opportunity to collect the data. We only receive statistical evaluations from Google which provide information about which ads were clicked how often and at what prices. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.
(5) You may withdraw your consent at any time without this affecting the permissibility of the processing up to the withdrawal. The easiest way to withdraw consent is via our consent manager or via the following functions: a) by configuring your browser software accordingly — in particular, suppressing third-party cookies means that you will not receive any ads from third-party providers; b) by setting your browser so that cookies from the domain “www.googleadservices.com” are blocked (https://www.google.de/settings/ads), whereby this setting is deleted if you delete your cookies; c) by deactivating the interest-based ads of providers that are part of the “About Ads” self-regulation campaign, via the link https://www.aboutads.info/choices, whereby this setting is deleted if you delete your cookies; d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome via the link https://www.google.com/settings/ads/plugin. We point out that in this case you may not be able to use all functions of this offering to their full extent.
(6) Further information on data protection at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, can be found here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.
(1) We use Google Ads with the additional application “Google Conversion Tracking”. This is a procedure with which we can check the success of our advertising campaigns. To this end, the ads are provided with a technical mechanism, e.g. an ID, with which we can determine how a user interacts after clicking on the ads and whether one of our services is actually used. This gives us information in statistical form about the total number of readers of our ads, which ads are particularly popular and, where applicable, further information about the consequences of the ad.
(2) In this respect too, the legal basis for the processing of your data is Art. 6 (1) sentence 1 lit. a GDPR, i.e. integration takes place only after your consent. You can prevent or stop using the conversion tracking function in the same way as described above for Google Ads.
We use the instant messaging service WhatsApp. The service provider is the American company WhatsApp Inc., a subsidiary of Meta Platforms Inc. For the European region, WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible.
WhatsApp also processes your data in the USA, among other places. Under the Data Privacy Framework for the secure transfer of data from the EU to the USA, the use of all US service providers certified under the DPF is legally secure (here you can access the official DPF list). As things stand, WhatsApp LLC is DPF-certified and therefore officially complies with the data protection laws applicable to international data transfers.
We only include you in WhatsApp communication if you consent to this. If you contact us via WhatsApp, this contact also counts as consent to communication via WhatsApp.
As the legal basis for the processing of data in third countries, WhatsApp uses standard contractual clauses. The standard contractual clauses are model templates provided by the European Commission which set the EU standard for data security in the context of transfers to third countries. Through them, WhatsApp undertakes to comply with the European level of data protection when processing personal data. You can find information on this here: https://www.whatsapp.com/legal/business-data-transfer-addendum-20210927. You can find information on data processing at WhatsApp here: https://www.whatsapp.com/privacy.
All data that you provide to us via our homepage or as an application by other means is processed solely for the purpose of carrying out the application and selection procedure and serves solely to assess your professional suitability and to contact you. This includes your form of address, first name, surname, address, telephone number, email address, your CV and data on your education and qualifications, Art. 6 (1) b) GDPR, § 26 BDSG (German Federal Data Protection Act).
If you yourself disclose “special categories of personal data” pursuant to Art. 9 GDPR in your application letter or in other documents submitted by you during the application procedure, your consent also extends to this data. We ask you to refrain as far as possible from providing special categories of personal data in your application.
Your application documents are only passed on to those responsible for assessing the application and, where applicable, for making the appointment.
Your applicant data is used exclusively for application procedures with us. The data and files you transmit are stored and used exclusively for purposes connected with the recording and processing of your application.
With your application you also give your consent to the storage of your applicant data. Six months after completion of the applicant procedure, your applicant data will be deleted. No separate notification will be given about this.
The principles set out also apply to a speculative application, i.e. if you are not applying for a specific position, or if applicant data is sent by post or by email.