PRIVACY POLICY.
Thank you for your interest in our website. The protection of your privacy when processing personal data as well as the security of all business data is important to us, which we take into account in our business processes. Here we provide you with detailed information about how we handle your data.
Responsible according to Art. 4 Para. 7 EU General Data Protection Regulation (GDPR)
zet: project.GmbH
Schelmenwasenstr. 39
70567 Stuttgart
Phone: +49 711 914 016 - 00
Fax: +49 711 914 016 - 99
Email: info@zet-project.de
Data protection officer of the person responsible
The data protection officer can be reached at datenschutz@zet-project.de
1. Rights of the data subject (Art. 15. GDPR)
In the following, we will inform you about your rights as a data subject. You can exercise these rights at any time and therefore contact us directly. If you claim these rights against us, we will examine them in detail, taking into account the associated legal requirements and conditions. We may ask you for further information on this. We will explain the results of our examination as well as our procedure for fulfilling your request in detail. It is possible that we cannot fully meet your wishes in the way you want.
This should not prevent you from asserting your rights against us or from asking us about them. We will be happy to answer your data protection queries.
a) Right to information (Art. 15 GDPR)
Accordingly, you have the right to request information from us at any time as to whether and which personal data we are processing. This also includes information on the purposes of the processing, possibly on recipients to whom we have disclosed your data, the planned storage period and, if applicable, information on the origin of this data, unless we have collected it directly from you. In addition, you have the right to a one-time free copy of your personal data stored by us.
b) Right to correction (Art. 16 GDPR)
You have the right to request that we correct inaccurate data that we have stored about you. This also includes the right to have incomplete personal data completed.
c) Right to deletion (Art. 17 GDPR)
You have the right to request that we delete any data that we have stored about you. If we should have published your data, this also includes our obligation to delete all links to this data as well as copies or To forward replications of this data to other persons responsible for processing this published personal data.
d) Right to restriction of processing (Art. 18 GDPR)
You have the right to demand that we restrict the processing of data that we have stored about you. After that, processing of this data is only possible with your consent or for a few legally defined purposes.
e) Right to object to processing (Art. 21 GDPR)
If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case, in particular, if the processing is not necessary to fulfill a contract with you, which we describe in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue processing.
You can of course object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your objection to advertising using the contact channels listed above.
f) Right to withdraw consent under data protection law (Art. 7 GDPR)
If you have given your consent to the processing of your data, you can revoke this at any time in accordance with Art. 7 Para. 3 GDPR. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.
g) Right to data portability (Art. 20 GDPR)
You have the right to receive data about you that you have provided to us in a structured, common and machine-readable format for the purpose of transferring it to another person responsible. At your request and taking into account the existing technical possibilities, this also includes the direct transfer from us to the other person responsible.
h) Right to lodge a complaint with a supervisory authority (Art. 13 GDPR)
You have the right to complain to a data protection supervisory authority about our processing of your personal data at any time. You can contact the responsible supervisory authority at:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Postfach 10 29 32, 70025 Stuttgart
i) Automated decision-making including profiling (Art. 22 GDPR)
You have the right to information about the existence of automated decision-making including profiling in accordance with Art. 22 Para. 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for to get the data subject.
2. Legal basis for the processing of personal data (Art. 6 GDPR)
(1) Insofar as we obtain the consent of the data subject for the processing of personal data, this is done on the legal basis of Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR).
(2) When processing personal data that is required to fulfill a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
(3) Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 (1) (c) GDPR serves as the legal basis.
(4) In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.
(5) If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis for the Processing.
3. Information about the collection of personal data
(1) In the following we inform you about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. B. Name, address, email addresses, user behavior.
(2) When you contact us by e-mail or using a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be saved by us in order to answer your questions. We delete the data that arises in this context after it is no longer required to store it, or we restrict processing if there are statutory retention requirements.
(3) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We also state the specified criteria for the storage period.
Collection of personal data when you visit our website
​
In the case of simple informational use of the website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (the legal basis for this is Art. 6 Para. 1 S. 1 lit. GMO):
- IP address
- host name
- date and time of the request
- time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- access status / HTTP status code
- amount of data transferred in each case
- website from which the request comes (referrer)
- the specific pages of our website that you have called up
- browser: type, version and set language
- operating system: type and version
Also with activated JavaScript:
- screen resolution
- color depth
- size of the browser window
- installed browser plugins
Applications
If you apply for a job offer or send us an unsolicited application, we process the data you provide in order to process your application. As a rule, your documents contain special categories of personal data (e.g. information on marital status; information on health; a photo that allows conclusions to be drawn about your ethnic origin and, if applicable, sight and/or religion; similarly sensitive data within the meaning of Art. 9 DSGVO).
The legal basis for the processing of applicant data is Art. 88 (1) DSGVO in conjunction with. § Section 26 BDSG, as the processing is necessary for the decision on the establishment of an employment relationship.
In the event of an unsuccessful application, you have the option of having your personal data that was provided during the entire application process (e.g. in cover letters, resumes, certificates, applicant questionnaires, applicant interviews) stored beyond the end of the specific application process. This gives us the opportunity to contact you at a later date for positions that may come up in the future. The legal basis for this would be your consent pursuant to Art. 6 para. 1 lit. a as well as Art. 9 para. 2 lit. a DSGVO.
Otherwise, in the event of a rejection, your data will be deleted 6 months after the end of an unsuccessful application process.
4. Data deletion and storage duration
(1) The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies.
(2) Storage can also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject.
(3) The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
5. Use of cookies
Cookies are small files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the place that sets the cookie. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.
Technically necessary cookies (required cookies)
Cookie name
AWSALBCORS
Provider
instafeed.codev.wixapps.net
Purpose
Registers which server cluster is serving the visitor. This is used in the context of load balancing to optimize the user experience.
Duration
6 days
Cookie name
hs
Provider
zet-project.com
Purpose
Ensures browsing security for visitors by preventing cross-site request forgery. This cookie is essential for the security of the website and the visitor.
Duration
Session
Cookie name
ssr-caching
Provider
zet-project.com
Purpose
This cookie is required for the cache function . A cache is used by the website to optimize the response time between the visitor and the website. The cache is usually stored in the visitor's browser.
Duration
1 day
Cookie name
TS#
Provider
zet-project.com
Purpose
Used to ensure website security and fraud detection .
Duration
Session
Cookie name
XSRF-TOKEN
Provider
zet-project.com
Purpose
Ensures browsing security for visitors by preventing cross-site request forgery. This cookie is essential for the security of the website and the visitor.
Duration
Session
Cookies for marketing purposes
Cookie name
svSession
Provider
zet-project.com
Purpose
Tracks a visitor across all wix.com web pages. The information collected can be used to make advertising more relevant to the visitor.
Duration
2 years
Statistics cookies
Cookie name
fedops.logger.sessionId
Provider
zet-project.com
Purpose
Registers statistical data about the behavior of visit er on the website. Used by webmaster for internal analysis.
Duration
persistent
6. Further functions and offers on our company website
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you usually have to provide additional personal data that we use to provide the respective service and for which the aforementioned data processing principles apply. Mandatory information is marked with an asterisk. Information in fields not marked in this way is purely voluntary.
(2) When you contact the service provider by e-mail, your e-mail address and, if you indicate this, your name, your telephone number and […] will be saved by us in order to answer your questions.
(3) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the implications of this fact in the description of the offer.
7. Web Analysis & Third Party Services
The legal basis for the use of locally used web analysis tools is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR, i.e. safeguarding our legitimate interests in balancing the interests of our website visitors. We are interested in the analysis of the use of our website by our website visitors in order to improve our offer using the statistics obtained and to make it more interesting for you as a user. If the analysis tool used also serves other purposes or if we use it for other interests of ours, we will inform you about this directly in the explanations for the respective analysis tool.
The legal basis for the use of third-party providers to carry out web analysis is based on Article 6, Paragraph 1, Sentence 1, Letter a.
a) YouTube
(1) We have integrated YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website
(2) The legal basis for the use of the plug-in is your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.
(3) When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This happens regardless of whether YouTube provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on YouTube, you must log out before activating the button. YouTube saves your data as a usage profile and uses it for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other social network users about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise this right.
(4) Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the data protection declaration. There you will also find further information on your rights and setting options to protect your privacy: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066,
USA, represented by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy.
b) Google Web Fonts
(1) This page uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts takes place in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning and purpose of Art. 6 Para. 1 lit.f GDPR.
(2) If your browser does not support web fonts, a standard font will be used by your computer. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq/ and in Google's data protection declaration at: https://www.google.com/policies/privacy/.
8. Special forms of use of websites
a) Facebook fan page
(1) The use of our Facebook fan page requires the collection of personal data. Some are also collected in the event of an unannounced visit. More specific are metadata (frequency, duration, location from which the "likes" information were made, when are users online, which posts reach fans, which fans have interacted with posts, information about the device used), personal data (Gender, age, place of residence, language and other demographic data) obtained from Facebook. These personal data are used here for statistical purposes. The legal basis for the benefit is Art. 6 Paragraph 1 f of the GDPR.
(2) As a user, you can exercise your rights in accordance with Art. 12-23 GDPR. You can see a detailed list of your rights under 1. Rights of the data subject.
(3) Further information on Facebook's data policy is available at https://www.facebook.com/about/privacy/, as well as information on the insight data at https://www.facebook.com/legal/terms/information_about_page_insights_data (4) According to Art. 26 GDPR there is a joint responsibility between us and Facebook. This can be found in the form of a contract at https://www.facebook.com/legal/terms/page_controller_addendum.
9. Terminology
a) Personal data
All information that relates to an identified or identifiable natural person (hereinafter "Data subject"); A natural person is regarded as identifiable who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
b) Processing
Any process or series of processes carried out with or without the help of automated processes in connection with personal data such as the collection, recording, organization, ordering, storage, adaptation or modification, reading, querying, use, disclosure through transmission, distribution or any other form of provision, comparison or linking, restriction, deletion or destruction.
c) Restriction of processing
The marking of stored personal data with the aim of restricting their future processing.
d) Profiling
Any type of automated processing of personal data that consists of this personal data being used to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, personal preferences, interests to analyze or predict the reliability, behavior, whereabouts or change of location of this natural person.
e) Pseudonymization
The processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organizational measures that ensure that the personal data is not identified or identifiable natural person.
f) Responsible
The natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data; if the purposes and means of this processing are specified by Union law or the law of the member states, the person responsible or the specific criteria for his or her appointment can be provided for in accordance with Union law or the law of the member states.
g) Processors
A natural or legal person, authority, institution or other body that processes personal data on behalf of the person responsible.
h) Third party
A natural or legal person, authority, institution or other body, apart from the data subject, the person responsible, the processor and the persons who are authorized to process the personal data under the direct responsibility of the person responsible or the processor.
i) Consent
The person concerned is given any voluntary, informed and unambiguous declaration of intent in the form of a declaration or other unambiguous affirmative act with which the person concerned indicates that he/she agrees to the processing of the personal data concerning him/her.
Status as of June 17, 2021