Legal basis (permissions according to Art. 6 DS-GVO)
Article 6 I lit. a DS-GVO serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Article 6 I lit. b DS-GVO. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation by which a processing of personal data becomes necessary, such as for the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c DS-GVO. In rare cases, the processing of personal data might become necessary to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured on our premises and as a result his or her name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d DS-GVO. Finally, processing operations could be based on Art. 6 I lit. f DS-GVO. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden. Such processing operations are permitted to us in particular because they were specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47 sentence 2 DS-GVO).
Transfer to third countries
If we process data in a third country, i.e. outside the European Union (EU) or the European Economic Area (EEA), or if processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, bodies or companies, this will only be done in accordance with the statutory requirements.
Subject to express consent or a contractually or legally required transfer, we only process or have the data processed in third countries with a recognized level of data protection, a contractual obligation through so-called EU standard protection clauses, in the presence of certifications or binding internal data protection regulations in accordance with Art. 44 - 49 DS-GVO.
Duration of the data storage period
With regard to the storage period of your collected data, you will find more detailed information with the individual offers. If continued storage is required for legal reasons, we will restrict your data for further use until the expiry of these retention periods and delete it when the periods expire.
Obligation to provide personal data
We will indicate when we are required to provide personal information to third parties, such as government agencies or private entities.
Data collected
In this section you will find a description of the personal data collected in relation to the specific processing activities.
Recipients / categories of recipients
In this section you will find all the recipients of the personal data collected in relation to the specific processing activities.
Data subject rights
In this section you will find a description of your data subject rights in relation to the specific processing activities of your personal data. In this regard, you will find more information on the individual setting and contact options of the services offered.
Automated decision making and profiling
We will inform you within the framework of this data protection declaration as soon as we carry out procedures of automated decision-making, including profiling, and in doing so we will provide meaningful information about the logic involved as well as the scope and the intended effects of such processing for the data subject.
3. Functions and offers of our website
We offer various services that you can use if you are interested. For this purpose, you usually have to provide additional personal data that we use to provide the respective service and for which the aforementioned data processing principles apply.
In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
Personal data will not be disclosed to third parties, unless a permissible circumstance according to Art. 6 DS-GVO is fulfilled. For example, we may disclose your personal data to third parties if contract conclusions or similar services are offered by us together with partners. You will receive more information on this when you provide your personal data or below in the description of the offer.
3.1 Informational use of the website
If you only use our website for informational purposes (if you do not register or otherwise transmit information to us), we only collect the personal data that your browser transmits to our server (server log file). To enable core functions such as page navigation and access to protected areas, we continue to use functional cookies. Without these cookies, the website cannot function properly. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security.
Data collected
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Amount of data transferred
- Action performed
Processing purposes
cetacea uses the server logfile to control the technical operation of this website. The functional cookies are needed to provide you with our online offer without restrictions.
Legal basis
The legal basis for the use of the server log file and the functional cookies is our legitimate interest pursuant to Art. 6 (1) p. 1 lit. f DS-GVO.
Recipients / categories of recipients
The recipient of the collected data is cetacea GmbH.
Transfer to third countries
The personal data will not be transferred to third countries.
Duration of the data storage period
The storage period of the server log file is 14 days.
The storage period of functional cookies is the end of the session.
Data subject rights
If you do not want cookies to be stored on your computer, you are asked to disable the corresponding option in the system settings of your browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.
3.2 Analysis tool Matomo
The web analytics service Matomo used by us enables us to analyze the use of our website by means of statistics. This enables us to constantly improve our offer and make it more attractive for you as a user*.
We use Matomo with an extension to anonymize the IP addresses. Through an automated shortening of the IP address before further processing, a conclusion to a specific person is excluded, a combination with other data collected by us does not take place,
nor is it passed on to third parties.
If our website or individual pages are accessed, the following data is stored:
- two bytes of the IP address of the calling system (anonymized)
- your location (country)
- date and time of access
- operating system used
- type and version of the browser you are using
- the specific website you are visiting
- the website from which your visit originates (referrer URL), unless your browser prohibits this
- pages and files of our website
- the length of time you spend on our website
- the frequency with which our website is accessed or individual pages visited
- the website you visit after ours, if you follow an external link set by us.
If you have given us your consent to use the Matomo cookie (cookie content), we will also use this for our web analysis and place it on your computer. If, on the other hand, you have not consented to the use of the Matomo cookie, we will of course respect your decision and the tracking will then take place without setting the corresponding cookies.
The hosting and thus the storage and processing of collected data is carried out by us at Vautron AG in Regensburg, this exclusively in Germany on German servers.
Objection to the use of the anaslysetool Matomo
If you no longer agree to the anonymous storage and analysis of your visit data, you can object to the use and storage at any time by clicking on the following link.
By means of a so-called opt-out cookie (deactivation cookie), which is stored in your browser, it is technically ensured that no more session data is collected.
To prevent the further use of Matomo, you have the option of activating the aforementioned opt-out plug-in by removing the following checkmark:
3.3 Application
You can apply for advertised positions on our website via your e-mail program (apply(at)cetacea-gmbh.de).
By transferring the application to us, applicants agree to process their data for the application procedure under this privacy policy.
Please note that e-mails are generally not encrypted and that our customers must ensure on their own. We cannot take any responsibility for the transmission path of the inquiry between the sender and the reception on our server and therefore recommend using the postal method.
You will find further information in our Privacy Notice for candidates.
Objectives of the data processing
We will only use the data entered in the application process.
Suppose special categories of personal data within the meaning of Article 9 (1) GDPR are voluntarily provided within the application procedure. In that case, they will be processed under Article 9 (2) (b) GDPR (e.g., health data, such as severely disabled status or ethnic origin).
Legal Basis
The legal basis for the processing of the applicant data is the fulfillment of contractual measures within the meaning of Article 6 (1) (b) GDPR and Article 6 (1) (f) GDPR if the data processing becomes necessary for us, e.g., within the context of legal proceedings (in Germany, § 26 BDSG applies additionally).
Recipients / Category of recipients
The recipient of the data is cetacea GmbH.
Transmission to third countries
Personal data will not be transferred to third countries.
Storage duration
In the case of a successful application, the data provided by the applicants can be further processed by us for the employment relationship. Otherwise, the applicant’s data will be deleted. Applicant data will also be deleted if an application is withdrawn.
The deletion will occur after 12 months, subject to a justified revocation by the applicants so that we can meet our obligation to provide evidence under the Equal Treatment Act.
Data subjects’ rights specific to this processing activity
For questions regarding data storage, please contact the person responsible for data processing: cetacea GmbH, Telephone +49 89 599 455 8-0, E-mail: datenschutz(at)cetacea-gmbh.de.
3.4 Contacting by e-mail, telephone or fax
The visitors of our website https://www.cetacea-gmbh.de/ have several possibilities to send us inquiries via their e-mail program, by phone or by fax.
Please note that e-mails are generally not sent encrypted and our customers must ensure the encryption themselves. We can therefore not assume any responsibility for the transmission path of the request between the sender and the reception on our server and therefore recommend rather to use the postal way.
Data collected
- E-mail (mandatory) (e-mail inquiries)
- Phone number (phone inquiries)
- Fax number (fax requests)
- Message (mandatory) (all requests)
Processing purposes
We use the data entered only for the purpose of and within the scope of responding to your inquiry.
Legal basis
The legal basis for processing your contact request is your consent pursuant to Art. 6 para. 1 p.1 lit. a DS-GVO.
Recipients / categories of recipients
The recipient of the collected data is cetacea GmbH.
Transfer to third countries
The personal data will not be transferred to third countries.
Duration of data storage
If you have not agreed to further use, your data will be deleted by us after we have responded to your inquiry.
Data subject rights
For questions regarding data storage, please contact cetacea GmbH, phone +49 89 599 455 8-0, e-mail: datenschutz(at)cetacea-gmbh.de.
4. SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
5. Information, deletion, correction, restriction of processing, right to object, data portability
You have the following rights with respect to us regarding personal data concerning you:
- Right to information,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to object to processing,
- Right to data portability.
In this case, we ask you to contact the office responsible for data processing:
Address: cetacea GmbH
Bahnhofstraße 3, 82166 Gräfelfing, Germany
E-mail: datenschutz(at)cetacea-gmbh.de
6. Objection or revocation against the processing of your data
6.1.
If the processing of your personal data is based on consent, you have the right to revoke your consent at any time with effect for the future. Such a revocation affects the permissibility of the processing of your personal data after you have expressed it to us.
6.2.
Insofar as we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
6.3.
You may object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your advertising objection using the following contact data: cetacea GmbH, Bahnhofstraße 3, 82166 Gräfelfing, e-mail: datenschutz(at)cetacea-gmbh.de, (see our imprint).
7. Right of appeal
You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
8. Amendment of this privacy policy
We, cetacea GmbH, reserve the right to change or adapt this privacy policy as far as the continuous technical development in the field of IT and Internet requires it.