Data protection

Data protection

1. Privacy policy

Thank you for visiting our website. In the following, we would like to inform you about the handling of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

Data controller

The controller responsible for the data collection and processing described below is the entity named in the Imprint.

Usage data

When you visit our websites, so-called usage data is temporarily stored on our web server as a log for statistical purposes in order to improve the quality of our websites. This data record consists of

  • the page from which the file was requested
  • the name of the file
  • the date and time of the request
  • the amount of data transferred
  • the access status (file transferred, file not found),
  • the description of the type of web browser used,
  • the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established.

The aforementioned log data is only stored in anonymized form.

2. Required cookies

We use cookies on our websites that are necessary for the use of our websites.

Cookies are small text files that are stored on your end device and can be read. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

We do not use these necessary cookies for analysis, tracking or advertising purposes.

Some of these cookies only contain information on certain settings and are not personally identifiable. They may also be necessary to enable user guidance, security and implementation of the site.

We use these cookies on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR.

You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. You can also delete cookies at any time via the corresponding browser setting and prevent the setting of new cookies. Please note that our websites may then not be displayed and some functions may no longer be technically available.

Provider

Purpose

Storage period

Adequate level of data protection

Usercentrics Consent Management Platform

Provision of our consent management service

service

Consent data: 3 years

Processing within the EU

Click here to change your privacy settings.

3. Tracking tools

Consent banner

We use a consent management platform (consent or cookie banner) on our websites. The processing in connection with the use of the consent management platform and the logging of the settings you have made is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, in our legitimate interest to display our content according to your preferences and to be able to prove your consent(s). The settings you have made, the consent you have given and parts of your usage data are stored in a cookie. This means that it is retained for subsequent page requests and your consent can still be tracked. You can find further information on this under the heading "Required cookies".

The provider of the consent management platform works for us as a strictly instruction-bound service provider (processor). An order processing contract in accordance with Art. 28 GDPR has been agreed.

Google Analytics

We use the web analysis tool "Google Analytics" to design our websites in line with requirements. Google Analytics creates user profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. In this way, we are able to recognize returning visitors and count them as such.

As part of the Google Analytics service, Google Ireland Limited supports us as a processor in accordance with Art. 28 GDPR. Data processing may also be carried out by Google outside the EU or the EEA (in particular in the USA). With regard to Google, an adequate level of data protection is guaranteed on the basis of the adequacy decision (EU-U.S. Data Privacy Framework). Google also undertakes to conclude standard contractual clauses with other sub-processors.

Data processing takes place on the basis of your consent, provided that you have given your consent via our banner. You can withdraw your consent at any time. To do so, please follow this link and make the appropriate settings via our banner.

Provider

Adequate level of data protection

Revocation of consent

Google

For transfers to the USA, an adequate level of data protection is

level is guaranteed on the basis of the adequacy decision (EU-U.S. Data Privacy

Framework) is guaranteed.

If you wish to withdraw your consent, please click here

and make the appropriate setting via our banner.


Matomo

We use Matomo for web analysis, a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, ("Matomo"). The protection of your data is important to us, which is why we have also configured Matomo so that your IP address is only recorded in abbreviated form. We therefore process your personal usage data anonymously. It is not possible for us to draw any conclusions about your person. You can find further information on Matomo's terms of use and data protection regulations at https://matomo.org/privacy/

4. Third-party tracking technologies for advertising purposes

We use cross-device tracking technologies so that you can be shown targeted advertising on other websites based on your visit to our websites and we can recognize how effective our advertising measures were.

Data processing takes place on the basis of your consent, provided you have given your consent via our banner. Your consent is voluntary and can be revoked at any time.

How does tracking work?

When you visit our websites, it is possible that the third-party providers mentioned below may retrieve recognition features for your browser or your end device (e.g. a so-called browser fingerprint), evaluate your IP address, store or read recognition features on your end device (e.g. cookies) or gain access to individual tracking pixels.

The individual features can be used by third-party providers to recognize your device on other websites. We can commission the relevant third-party providers to place advertisements based on the pages you visit on our website.

What does cross-device tracking mean?

If you log in to the third-party provider with your own user data, the respective recognition features of different browsers and end devices can be linked together. For example, if the third-party provider has created a separate feature for the laptop, desktop PC or smartphone or tablet you are using, these individual features can be assigned to each other as soon as you use a service of the third-party provider with your login data. In this way, the third-party provider can also target our advertising campaigns across different end devices.

Which third-party providers do we use in this context?

Below we list the third-party providers with whom we work for advertising purposes. If the data is processed in this context outside the EU or the EEA (in particular in the USA), we provide information on the level of data protection in the following table.


Provider

Adequate level of data protection

Revocation of consent

Meta (Facebook)

For transfers to the USA, an adequate level of data protection is ensured

level is guaranteed due to the provider's certification under the

the adequacy decision (EU-U.S. Data Privacy Framework).

guaranteed.

If you wish to withdraw your consent, please click here and make the appropriate

make the appropriate setting via our banner.

Google

For transfers to the USA, an appropriate level of data protection is guaranteed

level due to the certification of the provider under the adequacy

(EU-U.S. Data Privacy Framework) is guaranteed.

guaranteed.

If you wish to withdraw your consent, please click here and make the appropriate

make the appropriate setting via our banner.

LinkedIn

For transfers to the USA, an appropriate level of data protection is ensured

level due to the certification of the provider under the adequacy

(EU-U.S. Data Privacy Framework) is guaranteed.

guaranteed.

If you wish to withdraw your consent, please click here and make the appropriate

make the appropriate setting via our banner.


5. Retargeting

Google

By using our websites, you consent to the following data processing:

We use Google remarketing technologies

We use cross-device remarketing technologies from Google so that you can be shown targeted advertising on other websites based on your visit to our website. The data processing is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

How does remarketing work?

When you visit our websites, Google may retrieve recognition features for your browser or device (e.g. create a so-called browser fingerprint), evaluate your IP address or store a recognition feature in the form of a small text file on your device (e.g. a so-called third-party cookie). It is also possible that Google may link your visit to our website with one or more of these recognition features and store them in order to show you our advertising on other pages on the Internet.

The recognition features described above are designed as pseudonyms and can be used by Google to recognize your device on other websites. For example, if you visit a page that participates in Google's display advertising network (i.e. displays advertising on behalf of Google), Google can recognize your device and browser based on the above-mentioned features.

We can also add so-called "remarketing tags" to our websites. This means that we can include keywords in our web pages that contain statements about the content of the displayed page (such as product or service categories). The keywords we use do not contain any personal or sensitive information. Google receives and stores these keywords for the above-mentioned recognition features. So if you visit a page that we have tagged with a specific product category, Google stores this keyword and assigns it to your recognition features.

This allows us to commission Google to place advertisements on other websites based on the pages we have visited. If you visit another website that participates in Google's display advertising network, Google can use the recognition features and the keywords stored for these recognition features to recognize whether and, if so, which of our advertisements should be displayed to you.

You can find more information on how Google remarketing technologies work at https://www.google.com/policies/technologies/ads/.

What does cross-device remarketing mean?

If you log in to Google services with your own login data or use one or more of your own Google accounts, Google can link the recognition features of different browsers and end devices with each other. This means that if Google has created a unique identifier for the laptop, desktop PC, smartphone or tablet you are using, these identifiers can be assigned to each other as soon as you use or have used a Google service with your login data. In this way, Google can also target our advertising campaigns across devices. However, Google will only do this if you have given Google your consent to this data processing in the past.

You have the option of making settings for advertising

You can object to this form of advertising at any time. To do so, please visit this page https://support.google.com/ads/answer/2662922 and deactivate personalized advertising. Please note that these settings may not affect all end devices and browsers. You can also find more information at https://support.google.com/ads/answer/2662922.

6 Explanation of the security measures

Data security

We take technical and organizational measures to protect your data from unauthorized access as comprehensively as possible. We use an encryption process on our website. Your data is transmitted from your computer to our server and vice versa via the Internet using TLS encryption. You can recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.

7. Other processors

We pass on your data to service providers who support us in the operation of our websites and the associated processes as part of order processing in accordance with Art. 28 GDPR. These are, for example, hosting service providers. Our service providers are strictly bound by our instructions and contractually obligated accordingly.

Below we list the processors with whom we work, if we have not already done so in the above text of the privacy policy. If data is transferred outside the EU or the EEA in this context, we will provide information on the appropriate level of data protection.

Processor

Purpose

Adequate level of data protection

Microsoft, Inc (USA)

Web hosting

Processing within the EU

Usercentrics GmbH

Consent management platform

Processing within the EU

HRworks GmbH

Applicant management

Processing within the EU

Mailgun, Inc (USA)

SMTP mail relay

Processing within the EU

Jotform, Inc (USA)

Creation of forms

Processing within the EU

Typeform (USA)

Creation of forms

Processing within the EU

Captcha.eu

Optimization of our service performance and protection against cyber attacks

Processing within the EU

Cloudflare (USA)

Optimization of our service performance

Processing within the EU

Salesforce (USA)

Customer relationship management

Processing within the EU

Disqus (USA)

Service for commenting on content

Processing within the EU

Visme (USA)

Creation of presentations and data visualizations

Processing within the EU


8 Data transfer to recipients

We only transfer your data to third parties if this is permitted under data protection law in accordance with the above principles. We therefore sometimes transfer personal data to third parties in the context of order and contract processing.

We will neither sell your personal data to third parties nor market it in any other way.

9. Integration of other technical third-party content and functions

We use the technical functions and content of third-party providers listed below to display our websites.

When you access our pages, the content of the third-party provider that provides these functions and content is loaded. As a result, the third-party provider receives the information that you have accessed our site as well as the usage data technically required in this context.

We have no influence on further data processing by the third-party provider.

The data processing takes place on the basis of your consent, provided that you have previously given your consent via our banner solution.

Please note that the use of third-party content and functions may result in your data being processed outside the EU or the EEA (in particular in the USA). For transfers to the USA, an appropriate level of data protection is guaranteed on the basis of the adequacy decision (EU-U.S. Data Privacy Framework).

Processor

Purpose

Adequate level of data protection

Microsoft, Inc (USA)

Web hosting

Processing within the EU

Usercentrics GmbH

Consent management platform

Processing within the EU

HRworks GmbH

Applicant management

Processing within the EU

Mailgun, Inc (USA)

SMTP mail relay

Processing within the EU

Jotform, Inc (USA)

Creation of forms

Processing within the EU

Typeform (USA)

Creation of forms

Processing within the EU

Captcha.eu

Optimization of our service performance and protection against cyber attacks

Processing within the EU

Cloudflare (USA)

Optimization of our service performance

Processing within the EU

Salesforce (USA)

Customer relationship management

Processing within the EU

Disqus (USA)

Service for commenting on content

Processing within the EU

Visme (USA)

Creation of presentations and data visualizations

Processing within the EU


10. Rights of the user

Your rights as a user

When processing your personal data, the GDPR grants you certain rights as a website user:

1. right of access (Art. 15 GDPR):

You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR.

2. right to rectification and erasure (Art. 16 and 17 GDPR):

You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data.

You also have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued.

3. right to restriction of processing (Art. 18 GDPR):

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to processing, for the duration of any review.

4. right to data portability (Art. 20 GDPR):

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transmission of this data to a third party.

5. right to object (Art. 21 GDPR):

If data is collected on the basis of Art. 6 para. 1 sentence 1 lit. f (data processing to safeguard legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.

6. right to lodge a complaint with a supervisory authority

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you violates data protection regulations. The right to lodge a complaint can be exercised in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.

11. Contact details of the data protection officer

Our company data protection officer will be happy to provide you with information or suggestions on the subject of data protection:

DSN Holding GmbH

Konsul-Smidt-Straße 88

28217 Bremen

Web: http://www.dsn-group.de/

E-Mail: office@dsn-group.de

If you contact our data protection officer, please also indicate the responsible body named in the imprint.

12. Further contents of the privacy policy

12.1 Sweepstakes

We use the information you provide in the context of competitions exclusively to determine and contact the winners (Art. 6 para. 1 sentence 1 lit. f GDPR). The winners will be notified in writing. We do not use your data for advertising purposes. We will delete this data immediately after the prize has been awarded or if you object to the use of your data.

12.2 Contact form

You have the option of contacting us via a web form. To use our contact form and to check and respond to your request, we require the mandatory fields of the contact form. You can provide further information, but this is not mandatory. We use this data on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR to answer your request. In addition, you can decide for yourself whether you wish to provide us with further information. This information is provided voluntarily and is not mandatory for making contact. We process your voluntary information on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. We will only transfer your data to the relevant employees from the affiliated companies to process and respond to your request if this is necessary.

CONSENT

By sending the mail form, you agree that the data you provide will be collected electronically, stored and processed within the group of companies solely for the purpose of examining and responding to your request. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. a GDPR. We use your data exclusively to process your request. You can revoke your consent at any time, e.g. by sending an email to info@darboven.com.

12.3 Online applications

We process your personal data in accordance with the applicable data protection regulations on the basis of § 26 BDSG-new. We process the data that you disclose to us as part of your online application exclusively for the purpose of selecting applicants. Data will not be processed for any other purpose.

You yourself determine the scope of the data that you wish to transmit to us as part of your online application. Online applications are transmitted electronically to our HR department, where they are processed as quickly as possible. The transmission is encrypted. As a rule, applications are forwarded to the heads of the relevant specialist departments in our company. Your data will not be passed on beyond this. Your details will be treated confidentially in our company. If your application is unsuccessful, your documents will be deleted after 6 months.

In the event that we may also consider your application for other or future vacancies, please make a note to this effect on your application. We will then process your data on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR.

12.4 Facebook company page

We operate various Facebook pages on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. We do not collect, store or process personal data of our users on this page at any time. Furthermore, we do not carry out or initiate any other data processing. The data you enter on our Facebook page, such as comments, videos or images, will not be used or processed by us for any other purpose at any time.

Facebook uses so-called web tracking methods on this page. Please be aware that Facebook may use your profile data, for example to analyze your habits, personal relationships, preferences, etc. We have no influence whatsoever on the processing of your data. We have no influence whatsoever on the processing of your data by Facebook.

12.5 Webinars via Zoom

We process your personal data, which you provide when registering for our B2B information events, as part of the planning and implementation of the webinar on the basis of your previously given consent.voluntary consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. By registering, you consent to data processing. We process the data you provide to contact you, send you the consent data and evaluate the success of the webinar as well as to contact you later for any comparable webinars.

We use the service provider Zoom (Zoom Video Communications, Inc.) as a processor in accordance with Art. 28 GDPR, strictly in accordance with instructions. We do not pass on any data to third parties. You can withdraw your consent at any time by unsubscribing or by contacting us using the contact details provided. Your rights as a data subject are also available to you at any time.

13. Storage period

Unless we have already informed you in detail about the storage period, we delete personal data when it is no longer required for the aforementioned processing purposes and no statutory retention obligations prevent deletion.