Privacy Declaration

1. General information on data protection

  • General overview of data and processing operations
  • Information for website visitors

2. Information for applicants
3. Information for partners, customers and suppliers
4. Data subject rights
5. Status of the privacy policy

&nbs

1. General information on data protection

 

General information

Data protection is an important topic. In the following, we provide information about the collection and processing of personal data. Personal data is all data that can be related to you personally.

 

Person responsible according to Art. 4 para. 7 DSGVO

CANZLER GmbH
Alaunstraße 39
01099 Dresden
Germany
Phone: +49 351 8087-0
Fax.: +49 351 8087-200

 

Data Protection Officer

You can reach the personally appointed data protection officer of our company at the following address:

Herr Patrick Grihn
grihn@dsb.ruhr
DSB Ruhr
℅ nextindex GmbH & Co. KG
Grabenstr. 12
44787 Bochum

 

If you have any questions about processing, security or a request for information, you can contact them directly in confidence.

 

General overview of data and processing operations

We want to offer you the required clarity according to Art. 12 DSGVO. Therefore, the following overview of the processing operations:

 

Types of data processed:

  • Usage data or communication data (when accessing a website, IP address, device information, access time and access time, etc.)
  • Contact details when registering or entering data
  • Inventory data (name, company, address)
  • Communication data (if applicable, meta data on calls, e-mails)
  • Content data (especially when sending mails or exchanging data via provided collaboration tools)

 

 

Furthermore (internally) the following additional data for our customers, interested parties, suppliers and business partners for the provision of services in the area of offers and contracts, service and marketing, direct advertising and customer care:

  • Contract data
  • Customer inventory data (CRM)
  • Supplier data
  • Payment data
  • Order data and invoice data

 

Persons concerned (categories)

  • Users of this website (also called visitors)
  • Customers
  • Suppliers
  • Interested parties
  • Business partner

 

Purposes

  • Operation of the website and provision of information
  • Ensuring the operation of the website and our systems (e.g. firewall)
  • Communication with our customers
  • Answering inquiries
  • Website optimization and analysis
  • Providing information for our (potential) customers

 

2. Information for website visitorsData collection on our website

General data when calling the page
In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server in order to display our website to you and to ensure stability and security. The processing is based on Art. 6 para. 1 lit. f DSGVO (Legitimate Interest).

 

Log files
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. The processing is based on Art. 6 para. 1 lit. f DSGVO (Legitimate Interest).

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

 

Cookies
Internet pages of CANZLER GmbH do not use cookies - with the exception of the career portal and the collaboration tools used by Canzler. Further information on the cookies used there can be found under: III. Information for applicants and IV. Information for partners, customers and suppliers.


Social media
We are also present on social media. However, we do not directly integrate any platform. If you click on the icons of the corresponding portals, the usage and privacy policies of the respective portals apply.

At no time is there an obligation to register with one of these portals for information purposes or to contact us (the provider). Rather, various options for contacting us are available to you (telephone, mail, contact form).

 

3. Information for applicants

Persons concerned

  • Applicant
  • Visitors of the career page

 

Purposes and legal bases of processing
We process your personal data for the following purposes of handling the application process. In doing so, we process the personal data provided by you.

The processing is based on Art. 6 para. 1 lit. b DSGVO (contract performance or pre-contractual measures) and Art. 6 para. 1 lit. f DSGVO (legitimate interest).

 

Disclosure of data (recipient)
Your data will be processed and made available at the necessary points within the responsible bodies. In the course of defending legal claims, your data may be disclosed to third parties.

 

Storage duration
We store the personal data of applicants for as long as is necessary for the decision on your application and for the defense against possible legal claims. Subsequently, the data will be deleted. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.

 

Cookies
In addition to the aforementioned data, cookies may be stored on your computer when you use the careers site. Cookies are small text files through which certain information can flow to us.

We use technically necessary cookies for the purpose of security and technical implementation of the website. The processing is based on Art. 6 para. 1 lit. f DSGVO (Legitimate Interest).

These cookies are usually deleted after logging out or when closing the browser.

We also use cookies for the purpose of analyzing user behavior or for marketing purposes.

These cookies are deleted after a specified duration.

Unless otherwise stated in this Privacy Policy, the processing is based on Art. 6 (1) f DSGVO (Legitimate Interest), otherwise on the basis of consent pursuant to Art. 6 (1) a DSGVO.

You can delete the cookies stored on your computer at any time in the browser settings.

Furthermore, you can configure browsers to either delete cookies when closing the browser or to reject cookies in general.

Please note that you may not be able to use some features of our website properly without cookies.

 

Matomo
We use the open-source web analysis tool Matomo on our careers site for marketing and optimization purposes based on your consent pursuant to Art. 6 (1) lit. a DSGVO.

In order to form statistics of visitor flows, Matomo sets cookies on your terminal device to recognize you. The data we store include IP address, operating system, time of call, etc..

IP addresses are anonymized by six digits in our configuration and do not allow any conclusion about the actual connection.

The data will be deleted when they are no longer needed to achieve the processing purposes.

By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

You can find more information about the privacy settings of the Matomo software at the following link:

https://matomo.org/docs/privacy/.

 

Newsletter Job AlarmYou
have the option to subscribe to our newsletter "Job Alarm" on the website. When you subscribe, the data requested from the input mask will be transmitted to Canzler GmbH.

In addition, the following data is collected during registration:

  • IP address of the computer of the person logging in
  • Date and time of registration
  • Name of the website where you subscribed to our newsletter

As part of the registration process, consent is obtained through a so-called double opt-in procedure. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending us a corresponding message. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately.

Your personal data is protected against theft and misuse according to the most modern technical procedures. In the case of providing personal data, these are transmitted encrypted (TLS). Under no circumstances will we pass on your data to third parties.

The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 a) DSGVO if the user has given his consent.

The collection of the user's e-mail address serves to deliver the "Job Alarm" newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user's e-mail address will be stored as long as the subscription to the newsletter is active.

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, a corresponding link can be found in each newsletter.

 

Contact form and the e-mail contact
Our website contains a contact form that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.

The following data is also stored at the time the message is sent:

  • The IP address of the user
  • Date and time of registration

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored.

We process the respective personal data for the purpose of processing the conversation (contact, response) on the basis of legitimate interest pursuant to Art. 6. para. 1 lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. If the user has given his consent, we process the personal data on the basis of the consent pursuant to Art. 6 (1) lit. a DSGVO.


4. Information for partners, customers and suppliers

 

Persons concerned

  • Interested parties
  • Customers
  • Business partner
  • Suppliers

 

Purposes and legal bases of processing

  •  Making information available
  • Communication
  • Answering inquiries
  • Initiation and execution of contractual matters
  • Handling of business processes
  • Marketing

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) lit. d DSGVO serves as the legal basis.

Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) lit. a DSGVO serves as the legal basis.

 

Disclosure of data (recipient)
Your data will be processed and made available at the necessary points within the responsible offices. In the course of a request for information from a credit agency, the notification of a payment default, in the course of tax advice or the defense of rights, the data may be disclosed to third parties for appropriate purposes.
 

Storage duration
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected, unless they are required to fulfill legal retention obligations or to defend legal claims.

 

E-mail contact
You can contact us electronically via the e-mail addresses provided. In doing so, the personal data transmitted with the e-mail will be stored.

We process the respective personal data for the purpose of processing the conversation (contact, response) on the basis of legitimate interest pursuant to Art. 6. para. 1 lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. If the user has given his consent, we process the personal data on the basis of the consent pursuant to Art. 6 (1) lit. a DSGVO.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
 

Collaboration tools
The collaboration tools used on Canzler servers located in Germany collect the date and time, the IP address of the user's own computer, as well as the data that can be queried by the browser, such as browser name, browser version and the underlying operating system. The data is deleted after 7 days.

If you have received access data consisting of user name or e-mail address and password from us, these will also be stored for comparison during login and deleted after the end of the project.

To establish a connection, especially to the meeting server, it may be necessary to transmit the IP address of your own computer to another server.

Only technically necessary session cookies are stored for the use of the collaboration tools.
 

Encrypted and unencrypted data transmission
We offer encrypted transmission paths for the exchange of files. These transmission paths should be preferred.

If it is not possible for you to use an encrypted transmission path, it is also possible to use an unencrypted transmission path for the exchange of files. In this case, we point out the possibility that data can be intercepted and read by unauthorized third parties.

5. Information for visitors to our Facebook company page

In the following, we provide information about the collection and processing of personal data on the social media platform Facebook.

This information applies to all content on our fan page on the social media platform Facebook.

Person responsible according to Art. 4 para. 7 DSGVO

Responsible for the collection and processing of personal data are partly us, the entity named as responsible in this data protection declaration

and partly the platform operator Meta Platforms Ireland Ltd("Facebook").
 

Information about the processing operations
 

a) Processing by Facebook

Facebook collects and processes your personal data partly as an independent controller. We have no influence on these processing operations.

For more information and contact details, please refer to Facebook's data policy: https://www.facebook.com/privacy/explanation
 

b) Joint responsibility, Art. 26 DSGVO.

We have concluded a joint responsibility agreement with Facebook Ireland Ltd. pursuant to Art. 26 DSGVO.

Facebook creates so-called "page insights" for fan page operators. Page insights are information about how users use or interact with our fan page. There is joint responsibility for this processing.

The processing is carried out for the purpose of optimizing the Fanpage on the basis of Art. 6 (1) lit. f DSGVO (Legitimate Interest).

Information on the recipients or categories of recipients, the storage period or the criteria for determining the storage period, as well as the possibility of exercising your rights can be found in Facebook's data policy (https://www.facebook.com/privacy/explanation).
 

c) Processing operations by us.

Processing Purposes:

We process your personal data for the following purposes:

- Operating the Fanpage
- Providing information (e.g., about products, services, etc.)
- Communicating with our customers
- Answering inquiries
- Optimization and analysis of the Fanpage
 

Legal basis:

Processing for the above purposes is based on Art. 6 para. 1 lit. f DSGVO (Legitimate Interest) or Art. 6. para. 1 lit. b DSGVO (performance of a contract or pre-contractual measures).
 

Recipients / categories of recipients:

Your data will be processed and made available at the necessary points within the responsible entity.

Furthermore, depending on how you interact with our fan page, some data may be published on Facebook (e.g. in the case of comments, "Like" statements, images, videos, etc.). This data may be visible to other users of our Fanpage.
 

Storage period:

Data published by you on Facebook (e.g., comments, "like" mentions, images, videos, etc.) will remain indefinitely unless you or we delete such data. We reserve the right to delete public content if this should be necessary (e.g. in the case of illegal content).

All other data will be deleted if it is no longer needed to fulfill the processing purposes for which it was collected.

We have no influence on the deletion of data by Facebook. For more information, please refer to Facebook's data policy (https://www.facebook.com/privacy/explanation).

 

 

 


6. Data subject rights

You have the following rights with respect to us regarding personal data concerning you:

 

Short:

  • Right to information,
  • Right to rectification or deletion,
  • Right to restriction of processing,
  • Right to object to processing,
  • Right to data portability,
  • Right to lodge a complaint with the data protection supervisory authority about our processing of your personal data.

 

Detailed rights:

  • in accordance with Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
     
  • in accordance with Art. 16 DSGVO to immediately demand the correction of incorrect or completion of your personal data stored by us;
     
  • pursuant to Art. 17 DSGVO to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
     
  • to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
     
  • pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
     
  • to revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
     
  • to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
     

Exceptions:
The right to erasure does not exist insofar as the processing is necessary,

  • to exercise the right to freedom of expression and information;
  • for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO;
  • for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or
  • for the assertion, exercise or defense of legal claims


7. Status of the privacy policy

The privacy policy is occasionally adapted to comply with changes in the business process and the legal side. You will always find the latest version on the website.

Status: February 2022