I. Name and contact details of the controller
Sdui GmbH
Universitätsstr. 3
56070 Koblenz
II. Contact details of the data protection officer
You can contact our data protection officer at datenschutz@sdui.de or by post at our address with the addition "Data Protection Officer".
III. Information on processing on and in connection with our website
Visiting our website
When you visit our website for informational purposes only, i.e. if you do not provide us with any other information, we only process the personal data that your browser transmits to us.
This includes:
IP address of your system
Date and time (including time zone) of your request
Type, content and protocol version of your request (specific page view)
Access status (HTTP status code) of our server
Size of our server response in bytes
Website from which the request originates (so-called "referrer")
Your user agent (type, version, operating system used)
the domain you accessed.
We also store this data in log files.
The aforementioned data is technically necessary for us to display our website, ensure stability and security, and optimise our offering.
The legal basis is Art. 6 (1) lit. f GDPR, whereby our legitimate interest arises from the purposes mentioned.
We delete this data after seven days at the latest. Any further storage only takes place if the personal data has been deleted or anonymised accordingly; in the case of IP addresses, for example, this is done by shortening them in accordance with data protection regulations.
We use a hosting service provider as a processor for the operation of our website, which also has access to the data.
Cookies
We use the following cookies on our website:
FPAU
Used by Google Analytics to assign a unique identifier to users in order to generate statistical data on how visitors use the website.
Storage period: Up to 2 years.
Recipient: Google LLC (Google Analytics)
Guarantees for transfers to third countries: Art. 45 GDPR in conjunction with the DPF
FPLC
Used by Google Analytics to record and update session information for statistical analysis purposes.
Storage period: Up to 1 year.
Recipient: Google LLC (Google Analytics)
Guarantees for transfers to third countries: Art. 45 GDPR in conjunction with the DPF
FPID
Used by Google Analytics to store a unique user identifier and enable recognition of returning users for analytical purposes.
Storage period: Up to 2 years.
Recipient: Google LLC (Google Analytics)
Guarantees for transfers to third countries: Art. 45 GDPR in conjunction with the DPF
_ga
Used by Google Analytics to distinguish users and collect anonymised statistical data on website usage.
Storage period: 2 years.
Recipient: Google LLC (Google Analytics)
Guarantees for transfers to third countries: Art. 45 GDPR in conjunction with the DPF
_ga_JLJ19QJRZF
Used by Google Analytics to maintain session state and analyse user interaction with the website.
Storage period: 2 years.
Recipient: Google LLC (Google Analytics)
Guarantees for transfers to third countries: Art. 45 GDPR in conjunction with the DPF
Cookies are small text files that are stored on your system and through which we receive certain information. When you visit our website, we draw your attention to the use of cookies by means of a cookie notice that refers to this privacy policy. There you can also consent to the use of cookies.
The legal basis for the use of technically necessary cookies is Art. 6 (1) lit. f GDPR and § 25 (2) No. 2 TDDDG. Our legitimate interest in the use of technically necessary cookies lies in being able to offer you a functional and user-friendly website. Cookies are also absolutely necessary in order to provide you with the telemedia service you have expressly requested.
The legal basis for the use of cookies that are not technically necessary is your consent in accordance with Art. 6 (1) (a) GDPR or Section 25 (1) TDDDG, which may also refer to transfers to third countries.
You can delete cookies at any time via your browser settings.
We use a processor for our cookie notice and consent management, which also has access to the data.
Newsletter
To subscribe to our newsletter, we use the so-called double opt-in procedure in the German, Austrian, and Swiss markets. This means that after you subscribe, we will send an email to the address you provided asking you to confirm that you wish to receive the newsletter. We also store the IP addresses used and the dates of registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to clarify any possible misuse of your personal data.
The mandatory information required to subscribe to the newsletter is your first and last name, email address, job title, and country of residence. After confirmation, we store this information in order to send you a newsletter tailored to your role and market.
The legal basis for sending the newsletter is your consent and thus Art. 6 para. 1 lit. a GDPR.
You may revoke your consent to receive the newsletter at any time and unsubscribe from it. You can revoke your consent by clicking on the link provided in each newsletter email. After unsubscribing, we will no longer send you any email communications.
We use Salesforce Germany (Account Engagement) as a processor for sending the newsletter, which also has access to the data. When processing by Salesforce, data transfer to the USA cannot be ruled out. Salesforce is certified under the EU-US Data Privacy Framework, so any transfer to the USA is justified by the relevant adequacy decision of the EU Commission (Art. 45 GDPR). We have also concluded the current EU standard contractual clauses with Salesforce as the legal basis for any transfer to a third country. Finally, we assume that your consent also applies to third-country transfers (Art. 49 GDPR). In this regard, we would like to point out that we do not know exactly how the data is processed by Salesforce and who (e.g. US authorities and intelligence services) has access to the data. In general, there is no adequate level of data protection in the US comparable to the GDPR, and enforcing your rights can be considerably more difficult, which is why risks cannot be completely ruled out.
We use our newsletter to evaluate your user behaviour. To do this, our newsletter contains so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluation, we link the data collected when you visit our website with your email address and an individual ID. Links contained in the newsletter may also contain this ID. We use this data to create a user profile in order to tailor the newsletter and our offerings to your individual interests. We record when you read the newsletter and which links you click on. We link all this data to the actions you take on our website.
You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact channel. The information is stored for as long as you are subscribed to the newsletter. After you unsubscribe, we process the data purely statistically and anonymously. Such tracking is also not possible if you have disabled the display of images in your email programme by default. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you display the images manually, the above-mentioned tracking will take place.
The legal basis for tracking is your consent and thus Art. 6 (1) (a) GDPR.
We store your data for as long as you are subscribed to the newsletter.
Contact Form
If you use our contact form, we will use the data you have provided to respond to your request.
The legal basis for data processing for the purpose of contacting us is Art. 6 (1) (b) GDPR, insofar as your enquiry concerns the execution or processing of contracts concluded with you or the initiation of a contract. In other cases, the legal basis is Art. 6 (1) lit. f GDPR, whereby our legitimate interest arises from the above-mentioned purposes.
Email Contact
If you contact us by e-mail, we will store the personal data you provide in order to respond to your enquiries.
In the course of transporting or delivering your email, log data is also regularly generated, which may also contain the IP address of the email server you are using. This log data is necessary to ensure the proper operation of our email server and also serves as evidence in the event of server problems or security incidents.
The legal basis is Art. 6 (1) lit. f GDPR, whereby our legitimate interest arises from the above-mentioned purposes. If the purpose of the contact is to conclude a contract or if the contact is made within the framework of an existing contractual relationship, the legal basis is Art. 6 (1) lit. b GDPR.
Applicant Data
If you send us your application, we will process the data you provide to fulfil our (pre-)contractual obligations within the framework of the application process. If your application is successful, we will continue to process the data for the purpose of implementing the employment relationship.
The legal basis for this is Art. 6 (1) (b) GDPR and § 26 BDSG. If you voluntarily provide us with special categories of personal data, such as health data or religious affiliation, the legal basis is additionally Art. 9 (2) (b) GDPR.
If your application is unsuccessful or you withdraw it, we will delete your data after six months at the latest. Until then, it will be stored for the purpose of responding to any enquiries regarding the application process and to fulfil our obligations under the AGG.
Google Services
This website uses the Google services described in more detail below, which are provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The information generated in connection with the use of the services may be transferred to a Google server in the United States and stored there. Google has certified itself under the EU-US Data Privacy Framework, so that any transfer to a third country, the United States, is justified by the relevant adequacy decision of the European Commission (Art. 45 GDPR). We have also concluded the current EU standard contractual clauses with Google as the legal basis for any third-country transfer that may take place. Finally, we assume that your consent also applies to third-country transfers (Art. 49 GDPR). In this regard, we would like to point out that we do not know exactly how the data is processed by Google and who (e.g. US authorities and intelligence services) has access to the data. In general, there is no adequate level of data protection in the USA comparable to the GDPR, and the enforcement of your rights can be considerably more difficult, which is why risks cannot be completely ruled out.
Google Tag Manager
We use Google Tag Manager to integrate code snippets into our website, e.g. for tracking mechanisms. Google Tag Manager itself does not store any data. However, it may also collect personal data and forward it to the analysis tools integrated via it.
The legal basis for the use of Google Tag Manager is your consent and thus Art. 6 (1) lit. a GDPR.
Google Analytics
This website uses Google Analytics, a web analytics service provided by that uses cookies (text files stored on your device) to analyse your use of our website and to continuously improve and make our offering more interesting.
We have activated IP anonymisation ("_anonymizeIp()") on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to a third country, in particular the USA. The truncation removes the personal reference. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google uses this information to evaluate the use of our website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage.
You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of our website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under this link.
You can also set a so-called Analytics opt-out cookie by clicking on [Link: javascript:gaoop_analytics_optout();], which prevents Google Analytics from collecting data when you use this website in the future.
The legal basis for the use of Google Analytics is your consent and thus Art. 6 (1) lit. a GDPR.
Google Ads
We use Google Ads to draw attention to our offers on external websites with the help of advertising media (e.g. ads) and to measure the success of these advertising media. In doing so, we pursue the interest of showing you advertising that is relevant to you, improving our website and achieving economic control of our advertising costs.
The advertising material is delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, which allow certain parameters for measuring success, such as the display of advertising material or clicks by users, to be measured. If you access our website via a Google ad, Google will store a cookie on your device in order to be able to carry out the aforementioned evaluations.
We ourselves do not collect or process any personal data in the aforementioned advertising and evaluation measures. We only receive statistical evaluations from Google. These evaluations enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.
Due to the advertising media used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected by Google and therefore inform you according to our state of knowledge: By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may store your IP address and merge it with other data.
The legal basis for the use of Google Ads and the setting of cookies is your consent and thus Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG.
IV. What are your rights?
You have the following rights:
Right to information (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Right to withdraw consent given to us at any time without affecting the lawfulness of processing based on consent before its withdrawal.app