Privacy

1. Access and Hosting

You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which includes, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access.

This access data is evaluated exclusively for the purpose of ensuring the smooth operation of the site and improving our offering. This serves to safeguard our legitimate interests in the correct presentation of our offering, which prevail within the framework of a balancing of interests in accordance with Art. 6 (1) sentence 1 lit. f GDPR. All access data is deleted no later than seven days after the end of your visit to the site.

Hosting services by a third-party provider
Within the scope of processing on our behalf, a third-party provider provides us with services for hosting and displaying the website. This serves to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in the correct presentation of our offering. All data collected as part of the use of this website or in forms provided for this purpose in the online shop, as described below, is processed on its servers. Processing on other servers only takes place within the scope explained here. This service provider is located within a country of the European Union or the European Economic Area.

2. Data collection and use for contract processing and when opening a customer account

We collect personal data when you voluntarily provide it to us as part of your order, when contacting us (e.g. via contact form or email), or when opening a customer account. Mandatory fields are marked as such, as in these cases we require the data to process the contract, handle your inquiry, or open the customer account. Without this information, you will not be able to complete the order and/or account registration or send your inquiry. The data collected can be seen from the respective input forms.

We use the data you provide in accordance with Art. 6 (1) sentence 1 lit. b GDPR for contract processing and handling your inquiries. After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the expiry of tax and commercial retention periods, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, as permitted by law and explained in this declaration.

You can delete your customer account at any time, either by sending a message to the contact option described below or via a designated function in your customer account.

3. Datatransfer

For the performance of the contract in accordance with Art. 6 (1) sentence 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for delivering the ordered goods.

Depending on which payment service provider you select during the ordering process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, where applicable, to payment service providers engaged by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. The privacy policy of the respective payment service provider applies in this regard.

We use a payment service provider that is based in a country outside the European Union. Personal data is transferred to this company only to the extent necessary for the performance of the contract.

Transfer of data to shipping service providers
If you have given us your explicit consent during or after your order, we will, on the basis of this consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR, pass on your email address and telephone number to the selected shipping service provider so that they can contact you prior to delivery for the purpose of delivery notification or coordination.

You may revoke your consent at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address provided below. After revocation, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this where permitted by law and as explained in this declaration.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn

4. E-Mail-Newsletter and Mailads

Email advertising with newsletter subscription
If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR.

The newsletter is sent as part of processing on our behalf by the service provider ActiveCampaign, Inc., 1 N Dearborn, 5th Floor, Chicago, Illinois 60602, to whom we pass on your email address for this purpose.

This service provider is located in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed there. Based on this agreement between the USA and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.

Postal advertising and your right to object
Furthermore, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, for example to send you interesting offers and information about our products by post. This serves to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in addressing our customers with advertising in accordance with Art. 6 (1) sentence 1 lit. f GDPR.

The advertising mailings are carried out as part of processing on our behalf by a service provider to whom we pass on your data for this purpose.

You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.

5. Cookies and Webanalysis

To make visiting our website more attractive and to enable the use of certain functions, to display suitable products, or for market research purposes, we use so-called cookies on various pages. This serves to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in an optimized presentation of our offering in accordance with Art. 6 (1) sentence 1 lit. f GDPR. Cookies are small text files that are automatically stored on your device.

Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). You can find the duration of storage in the overview of the cookie settings in your web browser. You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.

You can find instructions for the respective browsers at the following links:
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox™: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™: http://help.opera.com/Windows/10.20/de/cookies.html

If cookies are not accepted, the functionality of our website may be limited.

This website also uses the so-called DoubleClick cookie as part of Google Analytics (see below), which enables your browser to be recognized when visiting other websites. This serves to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in the optimal marketing of our website in accordance with Art. 6 (1) sentence 1 lit. f GDPR. The information automatically generated by the cookie about your visit to this website is transferred to a Google server in the USA and stored there.

The IP address is shortened by activating IP anonymization on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser within the scope of Google Analytics is not combined with other Google data.

Google will use this information to compile reports on website activity and to provide other services related to website usage. This serves to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in the optimal marketing of our website. Google may also transfer this information to third parties where required by law or where such third parties process the data on Google’s behalf. Once the purpose no longer applies and we stop using Google DoubleClick, the data collected in this context will be deleted.

Google DoubleClick is an offering of Google LLC (www.google.de).
Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed there. Based on this agreement between the USA and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.

You can deactivate the DoubleClick cookie via the following link. You can also obtain information about the setting of cookies and adjust your settings via the Digital Advertising Alliance. Finally, you can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.

Use of Google (Universal) Analytics for web analysis
This website uses Google (Universal) Analytics, a web analytics service provided by Google LLC (www.google.de), to analyze website usage. This serves to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in an optimized presentation of our offering in accordance with Art. 6 (1) sentence 1 lit. f GDPR. Google (Universal) Analytics uses methods that enable analysis of your use of the website, such as cookies.

The automatically collected information about your use of this website is generally transferred to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser within the scope of Google Analytics is generally not combined with other Google data.

Once the purpose no longer applies and we stop using Google Analytics, the data collected in this context will be deleted.
Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed there. Based on this agreement between the USA and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.

You can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as from processing this data, by downloading and installing the browser plugin available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de

6. Marketing-Networks

Google AdWords Remarketing
We use Google AdWords to advertise this website in Google search results and on third-party websites. For this purpose, a so-called remarketing cookie from Google is set when you visit our website. This cookie automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. This serves to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in the optimal marketing of our website in accordance with Art. 6 (1) sentence 1 lit. f GDPR. Once the purpose ceases to apply and we stop using Google AdWords Remarketing, the data collected in this context will be deleted.

Any further data processing only takes place if you have agreed with Google that your web and app browsing history may be linked to your Google account and that information from your Google account may be used to personalize ads you see on the web. In this case, if you are logged into Google while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form target groups.

Google AdWords Remarketing is a service of Google LLC (www.google.de). Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed there. Based on this agreement between the USA and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.

You can deactivate the remarketing cookie via the following link. You can also obtain information about the setting of cookies and adjust your settings via the Digital Advertising Alliance.

Facebook
The Facebook Pixel is a service provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. It enables us to define target groups for advertisements on Facebook (“Facebook Ads”) based on visits to our website and user browsing behavior. We also use this pixel to measure the effectiveness of our online marketing measures by tracking user actions after they have seen and/or clicked on a Facebook ad and subsequently placed an order.

When you access our website, the pixel is integrated directly by Facebook and may store a cookie on your device. If you subsequently log in to Facebook or are already logged in, your visit to our website will be recorded in your profile. The collected user data is anonymous to us and does not allow us to draw conclusions about user identity. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible. Data processing by Facebook is carried out in accordance with Facebook’s data usage policy. If you are not a Facebook member, you are not affected by this data processing. To deactivate the Facebook Pixel, please use the corresponding opt-out option.

Unidesq Remarketing
Through our advertising partner Unidesq GmbH, Lichtstraße 49, 50825 Cologne, we promote this website on third-party websites. When you visit our website, a cookie from these providers or their partners is automatically set. This cookie enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. This serves to safeguard our legitimate interests in the optimal marketing of our website in accordance with Art. 6 (1) sentence 1 lit. f GDPR. Once the purpose ceases to apply and we stop using Unidesq retargeting, the data collected in this context will be deleted.

You can deactivate the remarketing cookie by clicking the following link: https://www.unidesq.com/datenschutz/
Alternatively, you can disable the use of cookies by third-party providers by visiting the opt-out page of the Network Advertising Initiative.

LinkedIn
On our website, we use cookies from the LinkedIn network on the basis of Art. 6 (1) sentence 1 lit. f GDPR in order to display targeted advertising to potential interested parties. LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. This service allows us to track user activities on our website when they arrive via LinkedIn ads.

If you access our website via such an ad, a cookie is set on your computer. A LinkedIn cookie is integrated on our website. This is a code that, in conjunction with the cookie, stores certain non-personal data about website usage, such as time spent on the site, pages visited, and which advertisement led users to the site. No information about your identity is collected.

You can deactivate the remarketing function in your account settings at: https://www.linkedin.com/psettings/advertising (you must be logged into LinkedIn).
If you do not have a LinkedIn account, you can disable usage-based advertising via the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/

Hotjar
This website uses the tracking tool Hotjar on the basis of Art. 6 (1) sentence 1 lit. f GDPR to record randomly selected individual visits (only with anonymized IP addresses). This creates a log of mouse movements and clicks with the aim of replaying individual visits on a sample basis and deriving potential improvements for the website. The information is not personal and is not shared with third parties.

If you do not wish to be recorded, you can deactivate this on all websites that use this tool via the corresponding opt-out option.

Bing Ads
On this website, data is collected and stored using Bing Ads technologies on the basis of Art. 6 (1) sentence 1 lit. f GDPR, from which usage profiles are created using pseudonyms. This is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

This service allows us to track user activities on our website when they arrive via Bing Ads advertisements. If you access our website via such an ad, a cookie is set on your computer. A Bing UET tag is integrated on our website, which stores certain non-personal data about website usage in conjunction with the cookie, such as time spent on the website, pages accessed, and which advertisement led users to the site. No information about your identity is collected.

The collected information is transferred to Microsoft servers in the USA and stored there for a maximum of 180 days. You can prevent the collection of data generated by the cookie and related to your use of the website, as well as the processing of this data, by disabling cookies. This may limit the functionality of the website.

Additionally, Microsoft may track your usage behavior across multiple devices through so-called cross-device tracking and is therefore able to display personalized advertising on Microsoft websites and apps. You can deactivate this at: http://choice.microsoft.com/de-de/opt-out

Further information about Bing Ads analytics services can be found on the Bing Ads website: https://help.bingads.microsoft.com/#apex/3/de/53056/2
Further information about data protection at Microsoft and Bing can be found in Microsoft’s privacy policy: https://privacy.microsoft.com/de-de/privacystatement

7. Web Fonts

This website uses so-called web fonts provided by Google to ensure a consistent display of fonts. When you access a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 (1) sentence 1 lit. f GDPR.

Further information about Google Web Fonts can be found at: https://developers.google.com/fonts/faq
and in Google’s privacy policy: https://www.google.com/policies/privacy/

8. Social Media PlugIns

Use of social plugins from Facebook, Google, Twitter, Pinterest

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Facebook, Google, Twitter, or Instagram. The content of the plugin is transmitted directly from the respective provider to your browser and integrated into the page.

Through this integration, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider (possibly in the USA) and stored there.

If you are logged into one of the services, the providers may directly associate your visit to our website with your profile in the respective social network. If you interact with the plugins, for example by clicking the “Like” or “Share” button, the corresponding information is also transmitted directly to a server of the providers and stored there. The information is also published in the social network and shown to your contacts.

This serves to safeguard our legitimate interests in the optimal marketing of our offering, which prevail within the framework of a balancing of interests in accordance with Art. 6 (1) sentence 1 lit. f GDPR.

The purpose and scope of data collection and the further processing and use of the data by the providers, as well as contact options and your rights and settings options for protecting your privacy, can be found in the privacy policies of the providers:

http://www.facebook.com/policy.php
https://twitter.com/privacy
http://www.google.com/intl/de/+/policy/+1button.html
https://about.pinterest.com/de/privacy-policy

If you do not want social networks to directly assign the data collected via our website to your profile in the respective service, you must log out of the respective service before visiting our website. You can also completely prevent the loading of plugins using browser add-ons, e.g. with the script blocker “NoScript” (http://noscript.net/).

9. Review reminders via E-Mail

Review reminder via eKomi

If you have given us your explicit consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR during or after your order, we will transmit your email address to eKomi Ltd., Markgrafenstraße 11, 10969 Berlin (http://www.ekomi.de/), so that they can send you a review reminder by email.

This consent can be revoked at any time by sending a message to the contact option described below or directly to eKomi Ltd.

10. Contact & Rights

As a data subject, you have the following rights:

In accordance with Art. 15 GDPR, you have the right to request information, to the extent described therein, about your personal data processed by us.

In accordance with Art. 16 GDPR, you have the right to request the immediate correction of inaccurate personal data concerning you or the completion of your personal data stored by us.

In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless further processing is necessary:
– for exercising the right of freedom of expression and information;
– for compliance with a legal obligation;
– for reasons of public interest; or
– for the establishment, exercise, or defense of legal claims.

In accordance with Art. 18 GDPR, you have the right to request the restriction of processing of your personal data where:
– you contest the accuracy of the data;
– the processing is unlawful, but you oppose its deletion;
– we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or
– you have objected to the processing pursuant to Art. 21 GDPR.

In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request the transfer of this data to another controller.

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual residence, place of work, or our company headquarters.

For questions regarding the collection, processing, or use of your personal data, for information, correction, blocking, or deletion of data, as well as for withdrawal of consent or objection to a specific use of data, please contact:

Data Protection Officer of the FOND OF Group
Vitalisstraße 67
50827 Cologne
Germany
+49 221 9567 3227
datenschutz@fondof.de

11. Privacy rights for Applicants

FOND OF GmbH – Notice of information pursuant to Art. 13 GDPR
Transmission of application documents

Thank you very much for submitting your personal data (hereinafter “personal data”) by sending us your application documents. We handle your application documents in compliance with data protection regulations. With this document, we provide you with the information required under Art. 13 GDPR regarding the handling of your personal data submitted as part of the application process. We use the terminology from Art. 4 GDPR.

The controller (hereinafter also “we”) is FOND OF GmbH, Vitalisstraße 67, 50827 Cologne, Tel.: +49 221 956 73 227, E-mail: info@fondof.de

Data Protection Officer of the FOND OF Group, Vitalisstraße 67, 50827 Cologne, +49 221 9567 3227, datenschutz@fondof.de

Types or categories of data are the data relating to you that you have submitted in the application documents or provided in connection with their submission, i.e. title, job title, surname, first name, address, date of birth, contact details such as landline telephone number, mobile number, email address, and possibly related data, individual contents of your CV including any photo, information about your education, copies of certificates, etc. In case of doubt, we treat your entire application as a compilation of personal data. If you communicate with us regarding this application or if an interview or other selection procedure takes place, we also consider data obtained in this communication or procedure to be personal data, insofar as it can be assigned to you.

The controller will process the personal data exclusively for the application selection process, i.e. for the purpose of making a decision on your employment or non-employment, including any economic processing of this pre-contractual relationship that may arise.

The legal basis for processing, since it concerns the establishment of an employment relationship, is either Art. 6 (1) lit. b GDPR or Section 26 of the German Federal Data Protection Act (BDSG), depending on the type of employment relationship.

Your data is generally stored on servers within the EU/EEA. In exceptional cases, personal data may also be transferred to countries outside the EU/EEA, in particular the USA. The USA is considered by the European Court of Justice to have an inadequate level of data protection according to EU standards. Due to the absence of an adequacy decision and suitable safeguards, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without legal remedies.

To ensure an adequate level of protection when transferring personal data to such so-called third countries, data is only transferred if appropriate safeguards (e.g. EU-US standard contractual clauses, adequacy decisions, binding corporate rules, etc.) ensure an adequate level of data protection. In addition, we maintain communication with service providers where possible to ensure the protection of your personal data through additional measures if necessary. Furthermore, application documents submitted in paper form or printed versions of electronically submitted documents are always kept under lock and key.

We will delete your personal data three months after the date on which we informed you that your application was not successful. This does not apply if you have expressly consented to longer storage at our request because we wish to include you in a talent pool (Art. 7 GDPR); in this case, deletion takes place after the period stated in the consent or upon your withdrawal of consent. Deletion is subject to any retention rights under Art. 17 (3) GDPR or applicable provisions of the BDSG. If the decision is positive, your application will be assigned to your personnel file created upon commencement of employment and treated as part of it under data protection law.

You have the following rights under the GDPR, subject to applicable legal requirements and possibly under the BDSG:

• In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data, the recipients or categories of recipients, the planned storage period, and the existence of the rights described in this section.
• In accordance with Art. 16 GDPR, you have the right to request the immediate correction of inaccurate or completion of your personal data stored by us.
• In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless processing is necessary for freedom of expression and information, legal obligations, public interest, or the establishment, exercise, or defense of legal claims.
• In accordance with Art. 18 GDPR, you have the right to request restriction of processing if you contest the accuracy of the data, the processing is unlawful but you oppose deletion, we no longer need the data but you require it for legal claims, or you have objected under Art. 21 GDPR.
• In accordance with Art. 20 GDPR, you have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request transfer to another controller.
• In accordance with Art. 7 (3) GDPR, you may withdraw any consent given at any time. This means we will no longer continue processing based on that consent in the future.
• In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, typically at your place of residence, workplace, or the controller’s registered office (here: North Rhine-Westphalia).

If personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object under Art. 21 GDPR on grounds relating to your particular situation, or if the objection concerns direct marketing, in which case you have a general right to object without stating a specific situation, which we will implement.

To exercise these rights, please contact the offices listed in sections 1 or 2.