Privacy policy of the Join GmbH

    The purposes of data processing:

• Logfiles and technical cookies: operation of the website, evaluation of malfunctions
• Analysis Cookie: Improvement of the quality and content of the website by evaluating your usage

    Legal basis:

• The legal basis for the processing of personal data using technically necessary cookies is Art. 6 Sect. 1 lit. f GDPR.
• The legal basis for the processing of personal data using cookies for analysis purposes is, if the user has given his consent to do so, Art. 6 Sect. 1 lit. a GDPR.

    Recipient of the data:

• Logfiles and technical cookies: None
• Analysis Cookies: Third country: The information generated by the cookie about your use of this website will generally be transferred to a Google server in the U.S. and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google in advance within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened.

    Retention period:

• Logfiles and technical cookies: The data are deleted as soon as they are no longer required for the purpose of their collection. In the case of the collection of data to provide the website, this is the case when the session in question has ended. In the case of the storage of data in log files, this is the case after seven days at the latest. A storage going beyond this is possible. In this case the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
• Analysis cookie: 3 months

    Revocation:

• Logfiles: The collection of data for the provision of the website and the storage of data in logfiles is mandatory for the operation of the website. There is therefore no possibility for you to object.
• Technical cookies are stored on your computer and transmitted from this to our site. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that all functions of the website can no longer be used to their full extent.
• Analysis of cookies: You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en). As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie is set to prevent your information from being collected in the future when you visit this website. The opt-out cookie applies only to this browser and only to our website and is placed on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=en).

2a.  WP Statistics

On this website we use the plugin WP Statistics for website analysis. With this plugin we get simple statistics about website usage.

Personal data:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• date and time of server request
• website access (duration of visit, sub-pages visited)
• anonymized IP address

No cookies are set, nor is it possible to identify individual users. The data collected with WP Statistics is stored exclusively on our web server and is not passed on to third parties.

Purposes of processing:

• Analysis of the flow of visitors to our website
• Evaluation of website usage

Legal basis:

• Art. 6 Sect. 1 lit. f GDPR for the protection of legitimate interests (analysis and evaluation of website use). 

Retention period:

The data is stored for 426 days (14 months)

2b. Cookie Script

This cookie is used by the Cookie-Script.com service to store consent settings for visitor cookies. The data is collected anonymously.

Personal data:

• anonymous key
• the choice (accept or reject)
• IP address (last digits after “.” are set to 0)
• date and time of consent/rejection
• page on which the consent was given/revoked
• browser agent

Processing purposes:

The key, along with the consent status, is stored in the browser as a first-party cookie called “CookieScriptConsent” in JSON-encoded form. This information is later used by the service to remember the selection. The key can also be used as a proof of consent. The key is not considered personally identifiable information.

Legal basis:

Art. 6 sect. 1 lit. f GDPR for the protection of legitimate interests

Recipient:

Objectis Ltd, Laisves st. 60, LT-05120 Vilnius, Lithuania.

Retention period:

The data is stored for 30 days

3. Service providers, suppliers and customers:

Most of our service providers, suppliers and customers name one of their employees as contact person. The contact details of these contacts are processed by us as follows:

    Personal data:

• Name
• Company, company address
• Role, activity
• Phone number, fax number
• E-mail address

    The purposes of data processing:

• Agreements on commissioned services/deliveries

    Legal basis:

• Art. 6 Sect. 1 lit. f GDPR

    Origin of the data:

• Communicated by the contact person himself
• Communication by another body of the service provider/supplier/customer

    Recipient of the data:

• Management and internal departments

    Retention period:

• Once the order has been fulfilled, the data is archived.
• The data in the archive is deleted after 10 years.
• There is no obligation to transmit this data. The processing is also not absolutely necessary for the service/delivery. The expenditure for arrangements would be disproportionately high without fixed partners, however. In addition the danger of misunderstandings would be very large. Therefore, there is a justified interest in this processing.

4. Job applicants:

You can send us your application on paper or by e-mail. If you apply to us, we will process the following data from you:

    Personal data:

• Data you send with your application

    The purposes of data processing:

• Decision on employment

    Legal basis:

• Art. 88 GDPR in conjunction with §26 BDSG (Federal Data Protection Act)
• Art. 6 Sect. 1 lit. a GDPR (Consent to longer storage of documents)

    Recipient of the data:

• Management and internal departments, if necessary passing on to further branches

    Retention period:

• when hired: 10 years after the end of your employment with us
• in case of rejection: 6 months after rejection (if you do not agree to longer storage)
• Data processing is required for checking a setting. The conclusion of an employment contract is not possible without the provision of this data.

5. Children:

Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people, do not collect them and do not pass them on to third parties.

6. Video surveillance:

Visitors to Join GmbH can be monitored by video in the entrance area.

    Personal data:

• Video recordings

    Purpose of data processing:

• Video surveillance is carried out for your protection, primarily to prevent criminal acts and to exercise the householder’s rights. If necessary, to support the prosecution of crimes committed by law enforcement authorities.

    Legal basis:

• Art. 6 Sect. 1 Satz 1 lit. f GDPR
• § 4 Sect. 1 Satz 1 Nr. 2, 3 BDSG (Federal Data Protection Act)

    Recipient of the data:

• authorized employees
• authorities entitled to information after prior written request

    Retention period:

• 7 days, in the case of detected criminal offences data are kept until the end of the prosecution.

7. Facebook

Responsible for our Facebook page is together with us the Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you visit our Facebook page, your personal data is processed by us and Facebook as follows:

    Personal data:

• No personal data is processed by us when you visit our Facebook page. In particular, we do not operate the servers on which the contents of the page and the associated communication are stored and processed.
• If you communicate with us via the Facebook page, we will receive your message including your user name.
• The categories of personal data that Facebook processes can be found here: https://www.facebook.com/privacy/explanation.

     Purposes of processing:

• To present the content published on the Page,
• Communication between us and the users of the site, e.g. by clicking “Like”, commenting or sharing the content,
• Linking to other online content that may be of interest to the users of the site

    Legal basis:

• Art. 6 Sect. 1 lit. f GDPR.

    Receiver of the data:

• No personal data is transmitted by us.
• The recipients to whom Facebook transfers data can be found here: https://www.facebook.com/policy.php

    Retention period:

• We delete the messages transmitted in connection with our Facebook page as soon as the purpose of storage is fulfilled, users request us to delete them or the purpose for storage no longer applies. Messages that are subject to the retention periods under commercial or tax law are retained for 6 years.
• The storage period for data processed by Facebook can be found here: https://www.facebook.com/policy.php

 Processing of page insights:

Facebook provides us with statistics and insights for our Facebook page in anonymized form, which help us gain insight into the types of actions that people take on our page (so-called “page insights”). We are not able to assign the information obtained through the Page-Insights to individual Facebook profiles. This processing of personal data is carried out by Facebook and us as joint controllers.

    Purpose of the processing:

• The processing serves our legitimate interest to evaluate the visit to our site and to improve our site based on these insights.

    Legal basis:

• Art. 6 Sect. 1 lit. f GDPR.

We have entered into an agreement with Facebook on processing as jointly responsible parties, in which the distribution of data protection obligations between us and Facebook is laid down. Details on the processing of personal data to create Page Insights and the main contents of the agreement concluded between us and Facebook can be found here.

8. Instagram

Responsible for our Instagram account is together with us the Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you visit our Instagram account, your personal data is processed by us and Facebook as follows:

    Personal data:

• No personal data is processed by us when you visit our Instagram account. In particular, we do not operate the servers on which the contents of the profile and related communications are stored and processed.
• If you communicate with us via the Instagram page, we will receive your message including your user name.
• The categories of personal data that Facebook processes can be found here: https://help.instagram.com/519522125107875

    Purposes of Processing:

• To present the content published on the account,
• Communication between us and the users of the site, e.g. by clicking “Like”, commenting or sharing the content,
• Linking to other online content that may be of interest to the users of the site

    Legal basis:

• Art. 6 Sect. 1 lit. f GDPR.

    Receiver of the data:

• No personal data is transmitted by us.
• The recipients to whom Facebook transfers data can be found here: https://help.instagram.com/519522125107875

    Retention period:

• We will delete messages sent in connection with our Instagram account as soon as the purpose for storing the data is fulfilled, users request us to delete the data, or the purpose for storing the data no longer applies. Messages that are subject to the retention periods under commercial or tax law are retained for 6 years.
• The storage period for data processed by Facebook can be found here: https://help.instagram.com/519522125107875

Processing of page insights:

Facebook provides us with statistics and insights for our Instagram account in anonymous form that help us gain insight into the types of actions that people take on our site (known as “page insights”). We cannot associate the information obtained through the Page-Insights with individual Instagram accounts. This processing of personal data is done by Facebook and us as jointly responsible parties.

    Purpose of Processing:

• The processing serves our legitimate interest to evaluate the visit of our account and to improve our account based on these findings.

    Legal basis:

• Art. 6 Sect. 1 lit. f GDPR.

We have concluded an agreement with Facebook on processing as jointly responsible parties, which defines the distribution of the data protection obligations between us and Facebook. Details on the processing of personal data to create Page Insights and the main contents of the agreement concluded between us and Facebook can be found here.

9. Xing

Responsible for our Xing profile is together with us the News Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. When you visit our Xing profile, your personal data is processed by us and Xing as follows:

    Personal data:

• No personal data is processed by us when you visit our Xing profile. In particular, we do not operate the servers on which the contents of the profile and the associated communication are stored and processed.
• If you communicate with us via Xing, we will receive your message including your profile.
• The categories of personal data that Xing processes can be found here: https://privacy.xing.com/en/privacy-policy.

    Purpose of processing:

• Presentation of the content published on the profile,
• Communication between us and users, e.g. by clicking on “thumbs up”, commenting or sharing content,
• Linking to other online content that may be of interest to the users of the site

    Legal basis:

• Art. 6 Sect. 1 lit. f GDPR.

    Receiver of the data:

• No personal data is transmitted by us.
• The recipients to whom Xing transfers data can be found here: https://privacy.xing.com/en/privacy-policy.

    Retention period:

• We delete the messages transmitted in connection with our Xing profile as soon as the purpose of storage has been fulfilled, users request us to delete the data or the purpose for storage no longer applies. Messages that are subject to the retention periods under commercial or tax law are retained for 6 years.
• The storage period for the data processed by Xing can be found here: https://privacy.xing.com/en/privacy-policy

10. Twitter

Responsible for our Twitter account is together with us the Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland. When you visit our Twitter account, your personal data will be processed by us and Twitter as jointly responsible parties as follows

    Personal data:

• No personal data is processed by us when you visit our Twitter account. In particular, we do not operate the servers on which the contents of the account and the associated communication are stored and processed.
• If you communicate with us via your Twitter account, we will receive your message including your user name.
• The categories of personal data that Twitter processes can be found here: https://twitter.com/en/privacy.

    Purpose of processing:

• Presentation of the content published on our account,
• Communication between us and the users of the account, e.g. by following the account, commenting or sharing the content,
• Linking to other online content that may be of interest to users.

    Legal basis:

• Art. 6 Sect. 1 lit. f GDPR.

    Receiver of the data:

• No personal data is transmitted by us.
• The recipients to whom Twitter transfers data can be found here: https://twitter.com/en/privacy

    Retention period:

• We delete the messages transmitted in connection with our Twitter account as soon as the purpose of storage is fulfilled, users request us to delete the messages or the purpose of storage no longer applies. Messages that are subject to the retention periods under commercial or tax law are retained for 6 years.
• The storage period for data processed by Twitter can be found here: https://twitter.com/en/privacy

11. YouTube

Responsible for our YouTube channel is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube LLC belongs to the Google Group and is represented by Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you visit our YouTube channel, your personal data will be processed by us and YouTube or Google as jointly responsible parties as follows:

    Personal data:

• No personal data is processed by us when you visit our YouTube channel. In particular, we do not operate the servers on which the contents of the channel and the associated communication are stored and processed.
• If you communicate with us via the YouTube channel, we will receive your message including your user name.
• The categories of personal data that YouTube processes can be found here in Google’s privacy policy: https://policies.google.com/privacy?hl=en&gl=de.

    Purposes of processing:

• To present the content published on our channel,
• Communication between us and the users of the channel, e.g. by following the channel, commenting or sharing the content,
• Linking to other online content that may be of interest to the users of the site

    Legal basis:

• Art. 6 Sect. 1 lit. f GDPR.

    Receiver of the data:

• No personal data is transmitted by us.
• The recipients to whom YouTube and Google transmit the data can be found here: https://policies.google.com/privacy?hl=en&gl=de.

    Retention period:

• We delete the messages transmitted in connection with our YouTube channel as soon as the purpose of storage has been fulfilled, users request us to delete the messages, or the purpose of storage no longer applies. Messages that are subject to the retention periods under commercial or tax law are retained for 6 years.
• The storage period for the data processed by YouTube and Google can be found here: https://policies.google.com/privacy?hl=en&gl=de.

12. LinkedIn

The LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is in principle solely responsible for the processing of personal data when you visit our LinkedIn site.

When you visit our LinkedIn site, your personal data is processed by LinkedIn as follows:

    Personal data:

• We do not process personal data when you visit our LinkedIn site. In particular, we do not operate the servers on which the profile content and related communications are stored and processed.
• If you communicate with us via LinkedIn, we will receive your message including your profile.
• The categories of personal data that LinkedIn processes can be found here: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

    Purpose of processing:

• Presentation of the content published on the site
• Communication between us and the users
• Linking to other online content that may be of interest to the users of the site

    Legal basis:

• Art. 6 Sect. 1 lit. f GDPR.

    Receiver of the data:

• No personal data is transmitted by us.
• The recipients to whom LinkedIn transfers data can be found here: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

    Retention period:

• We delete the messages transmitted in connection with our LinkedIn site as soon as the purpose of storage has been fulfilled, users request us to delete them or the purpose of storage no longer applies. Messages that are subject to the retention periods under commercial or tax law are retained for 6 years.
• The storage period for data processed by LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

Processing of page insights:

When you visit, follow, or interact with our LinkedIn site, LinkedIn provides us with statistics and insights on our site in an anonymous form that help us understand the types of actions that people take on our site (known as “site insights”). We do not receive any personal data through the Page-Insights, nor can we assign the information received to individual accounts. This processing of personal data is done by LinkedIn and us as jointly responsible parties.

    Purpose of the processing:

• The processing serves our legitimate interest to evaluate the visit of our site and to improve our site based on these insights.

    Legal basis:

• Art. 6 Sect. 1 lit. f GDPR.

We have concluded an agreement with LinkedIn on processing as jointly responsible parties, which defines the distribution of the data protection obligations between us and LinkedIn. Details about the processing of personal data for the creation of page views and the main contents of the agreement concluded between us and LinkedIn can be found here.

13. Newsletter

If you wish to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you agree to the owner of the e-mail address provided and to receive the newsletter.

We use the so-called double opt-in procedure to ensure that the newsletter is sent out in an agreed manner. In the course of this, the potential recipient can be included in a mailing list. Subsequently, the user receives a confirmation e-mail to confirm the registration in a legally secure manner. Only if the confirmation takes place, the address is taken up actively in the distributor.

We use these data exclusively for the dispatch of the requested information and offers. Newsletter2Go is used as newsletter software. Your data will be transmitted to Newsletter2Go GmbH. Newsletter2Go is forbidden to sell your data and to use it for other purposes than the dispatch of newsletters. Newsletter2Go is a German, certified supplier, which was selected after the requirements of the data security basic regulation and the Federal Law for Data Protection.

Further information can be found here: https://www.sendinblue.com/information-for-email-recipients/

14. Your rights

You have the following rights with regard to this processing of your personal data:

• Information about your stored personal data (Art. 15 GDPR)
• Correction of inaccurate data (Art. 16 )
• Deletion, if permitted by law (Art. 17 )
• Restriction of processing (Art. 18 )
• Preservation of your data in a structured, common and machine-readable format (Art. 20 )
• Objection to the processing (Art. 21 ) by e-mail to: kontakt@join.de
• Complaint to a supervisory authority (Art. 77 )
• Some processing is based on your consent (e.g. for the processing of a request). In these cases, you have the right to revoke your consent at any time with effect for the future.

Last Update: August 2020