DN Solutions

The protection of your private information when using our website is very important to us, DN Solutions Europe GmbH. In the following, we would like to provide you with information on the type, scope and purpose of the collection and use of personal data.

The data protection declaration (including legally required informational content) is divided into three parts:

Part 1: Information on data protection

Information on data protection regarding our processing under Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)

We take data protection very seriously and inform you herein how we process your data and what claims and rights you are entitled to under data protection regulations. Applicable from 01 July 2021.

1. Office responsible for data processing and contact data

2. Purposes and legal foundations upon which we process your data

We process personal data in accordance with the stipulations of the General Data-Protection Regulation (GDPR), the German Federal Data-Protection Act (Bundesdatenschutzgesetz - BDSG) and other applicable data-protection provisions (details are provided in the following). The details of which data are processed and how they are used depends largely on the services requested or agreed in each case. Further details or additions for the purposes of data processing can be found in the respective contract documents, forms, a declaration of consent and/or other information provided to you (e. g. in the context of the use of our website or our terms and conditions). In addition, this data protection information may be updated from time to time.

2.1 Purposes pursuant to fulfilment of an agreement or pre-contractual measures (Art. 6, section 1 b of the GDPR)

The processing of personal data is carried out for the performance of our contracts with you and the execution of your orders as well as to carry out measures and activities within the framework of pre-contractual relations, e. g. with interested parties. In particular, the processing thus serves to facilitate the performance of services in accordance with your orders and wishes and include the necessary services, measures and activities. This essentially includes contract-related communication with you, the verifiability of transactions, orders and other agreements as well as quality control by means of appropriate documentation, goodwill procedures, measures to control and optimize business processes as well as the fulfilment of general duties of care, control and supervision by affiliated companies (e. g. Parent company); statistical evaluations for corporate management, cost recording and controlling, reporting, internal and external communication, emergency management, accounting and tax assessment of operational services, risk management, assertion of legal claims and defence in the event of legal disputes; ensuring IT security ((inter alia system and plausibility tests) and general security, including building and plant security, securing and exercising domestic authority (e. g. by means of access controls); guaranteeing the integrity, authenticity and availability of data, preventing and investigating criminal offences; control by supervisory bodies or supervisory authorities (e. g. auditing).

2.2 Purposes within the framework of a legitimate interest on our part or of third parties (Art. 6, section 1 f of the GDPR)

Above and beyond the actual fulfilment of the (pre-) agreement, we process your data whenever this is necessary to protect legitimate interests of our own or of third parties, in particular for the following purposes:

- advertising or market and opinion research, as far as you have not objected to the use of your data;
- obtaining information and exchanging data with credit agencies where this goes beyond our economic risk;
- the examination and optimization of processes for needs analysis;
- the further development of services and products as well as existing systems and processes;
- the disclosure of personal data within the framework of due diligence in the course of company sale negotiations;
- for comparison with European and international anti-terrorist lists, insofar as this goes beyond the legal obligations;
- the enrichment of our data, e. g. by using or researching publicly accessible data;
- statistical evaluations or market analysis;
- of benchmarking;
- the assertion of legal claims and defense in legal disputes which are not directly attributable to the contractual relationship;
- the restricted processing of data, if a deletion is not possible or only possible with disproportionately high effort due to the special type of storage;
- the development of scoring systems or automated decision-making processes;
- the prevention and investigation of criminal offences, if not exclusively for the fulfilment of legal requirements;
- building and plant security (e. g. by means of access control and video surveillance), insofar as this goes beyond the general duties of care;
- internal and external investigations, safety reviews;
- any monitoring or recording of telephone conversations for quality control and training purposes;
- Preservation and maintenance of certifications of a private-law or official government nature;
- the seizure and exercise of domestic authority by means of appropriate measures as well as video surveillance for the protection of our customers and employees as well as for securing evidence in the event of criminal offences and the prevention thereof and also
- the involvement of service providers as independent or joint controllers to carry out activities for the performance of a contract or for pre-contractual measures (cf. clause 2.2) or for the purposes of the legitimate interests as listed above.

2.3 Purposes within the framework of your consent (Art. 6, section 1 a of the GDPR)

Your personal data can also be processed for certain purposes (e.g. use of company communication systems for private purposes; photographs/videos of you for publication in the Intranet/Internet) including as a result of your consent. As a rule, you can revoke this consent at any time. This also applies to the revoking of declarations of consent that were issued to us before the GDPR went into effect, i.e. prior to 25 May 2018. You shall be separately informed about the consequences of revocation or refusal to provide consent in the respective text of the consent.
Generally speaking, revocation of consent only applies to the future. Processing that takes place prior to consent being issued is not affected by such and remains lawful.

2.4 Purposes relating to adherence to statutory requirements (Art. 6, section 1 c of the GDPR) or in the public interest (Art. 6, section 1 e of the GDPR)

Just like any actor which takes part in business life, we are also subject to numerous legal obligations. These are primarily statutory requirements (e.g. commercial and tax laws), but also if applicable supervisory law or other requirements set out by government authorities. The purposes of processing may also include identity and age checks, prevention of fraud and money laundering (e.g. comparisons with European and international anti-terror lists), compliance with control and notification obligations under tax law as well as the archiving of data for the purposes of data protection and data security as well as for purposes of audits by tax advisors/auditors, fiscal and other government authorities. In addition, it may be necessary to disclose personal data within the framework of official government/court measures for the purposes of collecting evidence, law enforcement and criminal prosecution or the satisfaction of civil law claims.

3. The categories of data that we process as long as we do not receive data directly from you, and its origin

If necessary for the contractual relationship with you and the activities performed by you, we may process data which we lawfully receive from other offices or other third parties (e.g. credit agencies, address publishers). In addition, we process personal data that we have lawfully collected, received or acquired from publicly accessible sources (such as, for example, commercial registers and association registers, civil registers, the press, Internet and other media) if such is necessary and we are allowed to process this data in accordance with statutory provisions.

Relevant personal data categories may in particular be:

- personal data (name, date of birth, place of birth, nationality, marital status, occupation/trade and comparable data)
- contact data (address, e-mail address, telephone number and similar data)
- Address data (population register data and comparable data)
- payment confirmation/confirmation of cover for bank and credit cards
- information about your financial situation (creditworthiness data including scoring, i. e. data for assessing the economic risk)
- customer history
- data about your use of the telemedia offered by us (e. g. time of access to our websites, apps or newsletter, clicked pages/links of us or entries and comparable data)
- Video data

4. Recipients or categories of recipients of your data

At our company, your data is received by those internal offices or organisational units that need such to fulfil our contractual and statutory obligations or that require such data within the framework of processing and implementing our legitimate interests.
Your data is disclosed/passed on to external offices and persons solely

We shall moreover refrain from transmitting your data to third parties if we have not informed you of such separately. If we commission service providers within the framework of processing an order, your data will be subject there to the security standards stipulated by us in order to adequately protect your data. In all other cases, recipients may only use the data for purposes for which the data has been sent to them.

5. Length of time your data is stored

We process and store your data for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract.

Above and beyond this, we are subject to various retention and documentation obligations that emanate inter alia from the German Commercial Code (HGB) and the German Tax Code (AO). The periods and deadlines for retention and/or documentation stipulated therein are up to ten years beyond the end of the contractual relationship or the pre-contractual legal relationship.

Furthermore, special statutory provisions may require longer retention such as for example the preservation of evidence in connection with statutory time-barring provisions (statute of limitations). Under §§ 195 ff. of the German Civil Code (BGB), the regular time-barred period is three years, but time-barred periods of up to 30 years may also be applicable.

If the data is no longer required to meet contractual or statutory obligations and rights, it is regularly deleted unless its further processing - for a limited period - is necessary to fulfil the purposes listed under number 2.2 due to an overriding legitimate interest. Such an overriding legitimate interest is deemed to be the case, for example, if it is not possible to delete the data as a result of the special type of storage or such is only possible at an unreasonably great expense and processing for other purposes is excluded by appropriate technical and organisational measures.

6. Processing of your data in a third country or through an international organisation

Data is transmitted to offices in countries outside the European Economic Area EU/EEA (so-called third states) whenever such is necessary to meet a contractual obligation towards you (e.g. if you are despatched to another country), such is required by law (e.g. notification obligations under tax law), such is in the legitimate interest of us or a third party or you have issued us your consent to such.

At the same time, your data may be processed in a third country including in connection with the involvement of service providers within the framework of the processing of the order. If no decision has been issued by the EU Commission regarding the presence of a reasonable level of data protection for the respective country, we warrant that your rights and freedoms will be reasonably protected and guarantied in accordance with EU data-protection requirements through contractual agreements to this effect. We will provide you with detailed information on request.

You can request information on the suitable or reasonable guarantees and the possibility, how and where to receive a copy of these from the company data-protection officer or the human resources department in charge of you.

7. Your data-protection rights
If certain conditions are met, you can assert your data-protection rights against us

Whenever possible, your applications for the exercise of your rights should be sent in writing to the address stated above or addressed directly to our data-protection officer.

8. Scope of your obligations to provide us your data

You only need to provide data that is necessary for the commencement and performance of the business relationship or for a pre-contractual relationship with us or the collection of which we are required by law. Without this data, we are generally not able to conclude the agreement or continue to perform such. This may also relate to data that is required later within the framework of the contractual relationship. If we request data from you above and beyond this, you shall be informed about the voluntary nature of the information separately.

9. Presence of an automated decision made in individual cases (including profiling)

We do not use any purely automated decision-making procedure as set out in Article 22 of the GDPR. If we do institute such a procedure in individual cases in the future, we shall inform you pursuant hereto separately if this is required by law.

Under certain circumstances, we may process your data in part with the aim of evaluating certain personal aspects (profiling).
In order to provide you with targeted information and advice on products, we may use evaluation tools. These enable a needs-oriented product design, communication and advertising including market and opinion research.

Such procedures can also be used to assess your solvency and creditworthiness as well as to combat money laundering and fraud. "Score values" can be used to assess your creditworthiness and creditworthiness. In the case of scoring, the probability is calculated using mathematical methods with which a customer will meet his payment obligations in accordance with the contract. Such score values thus support us, for example, in assessing our creditworthiness, decision-making in the context of product deals and are incorporated into our risk management. The calculation is based on mathematically and statistically recognised and proven methods and is based on your data, in particular income, expenditure, existing liabilities, profession, employer, length of service, experience from the previous business relationship, repayment of previous loans in accordance with the contract and information from credit agencies.

Information on nationality and special categories of personal data according to Art. 9 GDPR are not processed.

Our privacy policy and the information on data protection about our data processing according to article 13, 14 and 21 GDPR may change from time to time. All changes will be published on this page.

Part 2: Supplementary Data protection declaration for our website

1. Responsible party

The responsible party for data collection, data processing and data use in connection with the use of our internet offering is DN Solutions Europe GmbH (DNSEU).

2. General information

The use of our website does not require prior registration except in the institutional login area. When you visit our website, we collect and process the information that you automatically share with us digitally (see Section 3) and/or personal data (see Section 4).

3. Usage data

When you visit our website or use our services, the device you are using and the internet browser you use to access our website automatically transmit log data to our server. This log data particularly includes the names of the files accessed (web pages), the volume of data transferred, the type and version of the web browser used, the operating system used (type and version), the date and time the website is accessed, the referrer URL (the website from which you were sent to our website via a link) and the IP address of the requesting computer. After it is no longer technically required for accessing the website, the IP address is stored for statistical evaluation exclusively in abbreviated (anonymised) form.

The automatically transmitted data described above is collected and evaluated exclusively for the purpose of the proper and optimal presentation of the information offered and for the purpose of statistical evaluations. It is not possible for us to assign the data automatically transmitted to the server to specific natural persons, i.e. it is fundamentally impossible to directly identify you based on the automatically transmitted data. We would like to inform you, however, of the fact that with the cooperation of your internet access provider, it could theoretically be possible to determine the holder of the internet connection through which you access our site over a specific period of time on the basis of the transmitted IP address. Information on the duration of the storage of used and assigned IP addresses by the internet access provider is provided by your internet access provider.

4. Type, scope and purpose of the collection and use of personal data

We collect, process and use personal data such as names, addresses, telephone numbers and email addresses on this website only for the purpose of contract execution and for the protection of our own legitimate business interests in regard to advice and support for our clients. Apart from this, we use your voluntarily provided data exclusively for the purpose for which you shared it with us. Your data will only be used for the additional purposes of further offers or marketing purposes if you provide us with your consent to use them for these purposes as well. Your personal data will be deleted as soon as knowledge of them is no longer necessary for fulfilling the purpose of storage, but no later than the complete execution of the contract and the expiration of the periods stipulated under tax and commercial law.

a) Contact form
You have the option of contacting us through the provided email address. As a matter of course, providing personal information in this manner is voluntary. The personal data you share in this context are used exclusively for handling your inquiry, insofar as you have not separately consented to the use of your data beyond this purpose.

b) Newsletter
With your consent we inform you in our email newsletter about our company’s and group company‘s special offers and promotions that may interest you. Your name is stored so that we can address you personally as the newsletter recipient. Before the first newsletter is sent to you, we send you a confirmation email to the email address you have provided with a link for you to click. Clicking on the link confirms your subscription to the newsletter. When you subscribe to our newsletter we also store data on the time of your subscription and your subscription confirmation as proof of your subscription and the proper subscription process

You will be notified of your statutory right to object to receiving advertising. Please contact us with your objection at the address or e-mail provided above. If you do not wish to receive any more newsletters you can click on the unsubscribe link in the newsletter.

c) Sharing with third parties
Personal data transmitted when using our website are only shared in consideration of the strict requirements of the GDPR and the German Federal Data Protection Act (BDSG), namely if you have given consent to the data being shared in advance, if we have the right to do so on the basis of statutory provisions and/or if we are obligated to share the data on the basis of laws, regulations or official or judicial orders. As a general principle, data are not shared with other third parties for advertising purposes.

d) Information, correction, locking, deletion
You have the right to request information on the personal data stored about you, the recipients or categories of recipients with whom these data are shared and the purpose of storage from us free of charge. In addition, you may potentially have a right to the correction, locking or deletion of personal data subject to the applicable legal requirements. Contact information can be found above in Part 1.

5. Cookies, tracking tools and social plugins

a) Cookies

Cookies are small text data files which are saved on the computer of the internet user. They serve the steering of the internet connection during your visit on our websites. At the same time we receive information via these cookies that allow us to analyze your use of the website in order to optimize our website with a view to the needs of our visitors. Cookies are partly saved by your browser only for the duration of your visit on the website (session cookies), but partly for a longer period (persistent cookies).

The session cookie which is set with each page view is only existent during your online session and becomes inactive as soon as you close your browser software. It is only needed for the technical communication between browser and webserver. When our website is accessed, and where it is required under data protection law, we ask for your consent to the use of cookies. You can revoke your cookie-consent at any time with effect for the future and you can individually adapt your cookie-settings (selection & deselection of cookies). To do this, on the respective website please click the button “Cookie-settings” or the symbol on the left bottom of the screen and make your choice. You can also view our websites – possibly with limited functionality - without cookies. You can also prevent the saving of cookies if you set this up in your browser settings. If you do not accept any cookies, this may, however, lead to a limitation of the functions of our offers.

If in the framework of the services described below a transfer of personal data to the USA might occur we point out that according to the European Court of Justice the data protection level of the USA does, actually, not fully reach the EU’s level of protection. There is, actually, no decision of the European Commission on the adequacy of the level of protection and there are no adequate guarantees. In particular, there is the risk or it cannot be excluded that within the respective applicable law public authorities may be able to access such data against which legal protection is limited.

b) Google Analytics

Provided that you have given us your voluntary consent, which can be revoked at any time, we use Google Analytics (https://marketingplatform.google.com/intl/de/about/analytics/) on this website, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland ("Google") with the involvement of the US parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, in order to analyze and regularly improve the use of this website and to be able to use the statistics obtained to make our offer more interesting for you as a user.

In exceptional cases, personal data may also be transferred to the USA and stored there. In principle, the USA has a level of data protection which, in the opinion of the ECJ, does not fully match the level of data protection existing in the EU. There is no adequacy decision by the European Commission or suitable guarantees. In particular, there is a risk, or it cannot be ruled out, that government authorities may also gain access to this data within the framework of the laws applicable there - with only limited legal protection options. There is a data protection agreement with Google including the EU Standard Contractual Clauses with Google LLC. Further information from Google at:
https://privacy.google.com/businesses/compliance/#!#gdpr

The legal basis for the use of Google Analytics is consent pursuant to Art. 6 para 1 sentence 1 lit. a DSGVO.

You can revoke your consent given to us at any time with effect for the future by preventing the storage of cookies through a corresponding setting in your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

In addition, you can revoke your consent given to us at any time with effect for the future as follows: To revoke a consent granted to us at any time or to individually adjust your cookie settings (incl. opting in & out of cookies), please click on the icon on the left below on our website and make the desired selection there.

In addition, you also have the option of preventing the collection of the data generated by the cookie and related to your use of the website (including the shortened IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de

The personal or pseudonymous data will be deleted or anonymized after 14 months.

For further details and information, please refer to Google's privacy information at https://support.google.com/analytics/answer/6004245?hl=de or Google's privacy policy at http://www.google.com/intl/de/policies/privacy as well as Google's advertising display settings at https://adssettings.google.com/authenticated.

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.

By activating IP anonymization on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The locations of Google's data centers can be found at:
https://www.google.com/about/datacenters/locations/index.html

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google unless you have permitted this in your Google account.

c) Google DoubleClick

Provided that you have given us your voluntary consent, which can be revoked at any time, we make use of the services of Google DoubleClick / Google Ads for the display and distribution of online advertising. These services are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). Google DoubleClick serves to detect your visit to our website and may serve to provide you with online advertising for our offers on other websites as well. An option to disable can be found at https://adssettings.google.de.

In addition, you can revoke your consent given to us at any time with effect for the future as follows: To revoke a consent granted to us at any time or to individually adjust your cookie settings (incl. opting in & out of cookies), please click on the icon on the left below on our website and make the desired selection there.

d) Google Tag Manager

Google Tag Manager is a solution that allows us to manage so-called ‘website tags’ through an interface (and to thus integrate Google Analytics and other Google marketing services into our online offering). The Tag Manager itself (which implements the tags) does not process any personal data of users. For information on the processing of users’ personal data, please refer to the following information on Google services. Use Policy: https://www.google.com/intl/de/tagmanager/use-policy.html.

e) YouTube

This website occasionally uses the YouTube service to embed videos. YouTube is operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. To integrate the YouTube videos, we use the "extended data protection mode", which only stores a cookie on the user's computer when the respective YouTube video is played. YouTube states that no personal cookie information is stored when embedded videos are played in extended data protection mode.

For more information about YouTube (Google)'s data processing and information about the privacy policy, see https://policies.google.com/privacy?hl=en-GB/. If you would like to ensure that YouTube does not receive any data from you, please do not click the embedded YouTube videos.

f) Vimeo

This website occasionally uses the YouTube service to embed videos. Vimeo is operated by Vimeo Inc., 555 West 18th Street New York, New York 10011, USA.
To integrate the Vimeo videos, we use the "Do-Not-Track" mode,

You can find further information on data processing and data protection by Vimeo under: https://vimeo.com/privacy. If you would like to ensure that Vimeo does not receive any data from you, please do not click the embedded Vimeo videos.

g) Google Maps

This website occasionally uses Google Maps of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland (“Google”). Google Maps is a web service for the display of interactive maps to visually depict geographic information. The use of this service makes it possible to show you our location and to facilitate a possible approach.

As soon as the sub-sides that are integrated into the map of Google Maps are called up, information of your use of our website (such as your IP address and location data) is transferred to servers of Google and saved there. This may also lead to a transfer to the servers of the parent company Google LLC. in the USA. This happens irrespective of whether Google provides a user account over which you are logged in or whether a user account even exists. If you are logged in at Google your data will be directly allocated to your account. If you do not wish for an allocation with your profile you have to log off before activating the button.

If you do not agree with the future transfer of your data to Google in the framework of the use of Google Maps you can also completely deactivate the web service of Google Maps by switching off JavaScript in your browser. Google Maps and thereby, the depiction of the map on this internet site, cannot be used. Detailed information on data protection in relation to the use of Google Maps are available on the internet site of Google: https://www.google.de/intl/de/policies/privacy/.

As far as legally required we have asked for your consent to the processing of your data as described above pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR. You can withdraw your given consent at any time with effect for the future.

6. Scope of application of the Data Protection Information

This Data Protection Information applies for all websites and services or offers for which DNSEU is responsible. This Data Protection Information does not apply to services which are subject to separate data protection information which do not encompass the present Data Protection Information.

In particular, our Data Protection Information does not apply for services that are offered by other companies or persons or other websites linked with our services. Our Data Protection Information does not encompass the handling of information by other companies or organisations that advertise our services and potentially use cookies, pixel tags or other technologies to offer and display relevant advertisements.

If you access an external website from our site (external link), the external provider will potentially receive information from your browser on which of our web pages you are coming from. The external provider is responsible for these data. We are unable to influence this process, as are all other website providers.

7. Security

DNSEU employs both technical and organisational security measures to protect the data you have provided from random or intentional manipulation, loss, destruction or access of unauthorised persons. Where personal data are collected and processed, the information is transferred in encoded form to prevent misuse of the data by third parties. Our security measures are continually updated in line with technological developments. Our employees are obligated to maintain confidentiality.

Part 3: Information on data protection for applicants

Information on data protection regarding our processing of applicants' data under Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)

1. Office responsible for data processing and contact data

2. 2. Purposes and legal foundations upon which we process your data

We process personal data in accordance with the stipulations of the General Data-Protection Regulation (GDPR), the German Federal Data-Protection Act (Bundesdatenschutzgesetz - BDSG) and other applicable data-protection provisions. Details are provided in the following. You will find further or additional details regarding the purposes of data-processing in the respective contractual documents, forms, a declaration of consent, and other information made available to you.

2.1 Purposes pursuant to fulfilment of an agreement or pre-contractual measures (Art. 6, section 1 b of the GDPR)

Personal data is processed in order to establish your application for a specific job advertisement or as an unsolicited application, in particular, for the following purposes. Checking and assessing your suitability for the position to be filled, performance and behavioural evaluation to the extent allowed by law if necessary for registration and authentication for application via our website, if necessary for drawing up the employment contract, traceability of transactions, orders and other covenants and agreements as well as for quality control through appropriate documentation, measures to fulfil general diligence obligations, statistical assessments pursuant to company steering; travel and event management, travel reservation and travel cost settlement, authorisation and identification administration, cost recording and controlling, reporting system, internal and external communication, accounting and tax assessment of company benefits (e.g. canteen meals), settlement of company credit card, occupational health and safety, contract-related communication (including appointments) with you, assertion of legal claims and defence in the event of legal disputes; ensuring IT security (inter alia system and plausibility tests) and general security, inter alia building and plant security, ensuring respect for company rules by means of appropriate measures, including if applicable video monitoring to protect third parties and our staff or to prevent criminal acts and to secure evidence in the event of criminal acts being committed; ensuring integrity, preventing and uncovering criminal acts; authenticity and availability of data, controls by supervisory bodies and control instances (e.g. auditing).

2.2 Purposes within the framework of a legitimate interest on our part or of third parties (Art. 6, section 1 f of the GDPR)

Above and beyond the actual fulfilment of the (pre-)agreement, we process your data whenever this is necessary to protect legitimate interests of our own or of third parties. Your data shall only be processed to the extent that you do not have any overriding interests against such processing such as in particular for the following purposes:
- Measures intended to further develop existing systems, processes and services;
- Comparisons with European and international anti-terror lists to the extent such go above and beyond statutory obligations;
- Enrichment of our data, inter alia through usage or research of publicly available data to the extent such is required;
- Benchmarking;
- Development of scoring systems or automated decision-making processes
- Building and plant security (e.g. through access controls and video monitoring) to the extent such go above general diligence obligations; internal and external investigations, safety tests;

2.3 Purposes within the framework of your consent (Art. 6, section 1 a of the GDPR)

Your personal data can also be processed for certain purposes (e.g. obtaining references from previous employers or using your data for subsequent vacancies) including as a result of your consent. As a rule, you can revoke this consent at any time. You shall be separately informed about the consequences of revocation or refusal to provide consent in the respective text of the consent.
Generally speaking, revocation of consent only applies to the future. Processing that takes place prior to consent being issued is not affected by such and remains lawful.

2.4 Purposes relating to adherence to statutory requirements (Art. 6, section 1 c of the GDPR) or in the public interest (Art. 6, section 1 e of the GDPR)

Just like any actor which takes part in business life, we are also subject to a large number of legal obligations. These are primarily statutory requirements (e.g. the German Industrial Relations Act (Betriebsverfassungsgesetz), the German Social Code, commercial and tax laws), but also if applicable supervisory law or other requirements set out by government authorities (e.g. employer's liability insurance association). The purposes of processing may also include identity and age checks, prevention of fraud and money laundering (e.g. comparisons with European and international anti-terror lists), company health management, ensuring occupational health and safety, compliance with control and notification obligations under tax law as well as the archiving of data for the purposes of data protection and data security as well as for purposes of audits by tax advisors/auditors, fiscal and other government authorities. In addition, it may be necessary to disclose personal data within the framework of official government/court measures for the purposes of collecting evidence, law enforcement and criminal prosecution or the satisfaction of civil law claims.

3. The categories of data that we process as long as we do not receive data directly from you, and its origin

If necessary for the contractual relationship with you and your pronounced application, we may process data which we lawfully receive from other offices or other third parties. In addition, we process personal data that we have lawfully collected, received or acquired from publicly accessible sources (such as, for example, commercial registers and association registers, civil registers, the press, Internet and other media) if such is necessary and we are allowed to process this data in accordance with statutory provisions.

Relevant personal data categories may in particular be:

- Address and contact data (notification and comparable data such as, for example, e-mail address and telephone number)
- Information about you on the Internet or social medias
- Video data

4. Recipients or categories of recipients of your data

At our company, your data is received by those internal offices or organisational units that need such to fulfil our contractual and statutory obligations (such as, executives and line managers who are looking for a new employee or who are involved in the decision on filling a vacancy, accounting, the company doctor, occupational health and safety, if applicable employee representatives, etc.) or that require such data within the framework of processing and implementing our legitimate interests. Your data is disclosed/passed on to external offices and persons solely

We shall moreover refrain from transmitting your data to third parties if we have not informed you of such separately. If we commission service providers within the framework of processing an order, your data will be subject there to the security standards stipulated by us in order to adequately protect your data. In all other cases, recipients may only use the data for purposes for which the data has been sent to them.

5. Length of time your data is stored

In principle, we process and store your data for the period of your application. This also includes the initiation of a contractual agreement (pre-contractual legal relationship).

Above and beyond this, we are subject to various retention and documentation obligations that emanate inter alia from the German Commercial Code (HGB) and the German Tax Code (AO). The periods and deadlines for retention and/or documentation stipulated therein are up to ten years beyond the end of the contractual relationship or the pre-contractual legal relationship. If you are not hired, your original application documents will be returned to you after six months. Electronic data will be deleted after six months accordingly. If we want to store your data longer for later vancancies or if you have entered your data in an applicant tool, the data will be deleted at a later date; Details will be provided in connection with the respective process.

If the data is no longer required to meet contractual or statutory obligations and rights, it is regularly deleted unless its further processing - for a limited period - is necessary to fulfil the purposes listed under number 2.2 due to an overriding legitimate interest on the part of our company. Such an overriding legitimate interest is deemed to be the case, for example, if it is not possible to delete the data as a result of the special type of storage or such is only possible at an unreasonably great expense. In these cases, we can also store your data and if applicable use it on a limited scale once the contractual relationship is over for a period of time that is compatible with the purposes. Generally speaking, deletion shall in such cases be replaced by a limitation on the processing. In other words, the data shall be blocked against the otherwise usual use by appropriate measures.

6. Processing of your data in a third country or through an international organisation

Data is transmitted to offices in countries outside the European Economic Area EU/EEA (so-called third states) whenever such is necessary to meet a contractual obligation towards you (e.g. application for a job in another country), such is in the legitimate interest of us or a third party or you have issued us your consent to such.

At the same time, your data may be processed in a third country including in connection with the involvement of service providers within the framework of the processing of the order. If no decision has been issued by the EU Commission regarding the presence of a reasonable level of data protection for the respective country, we warrant that your rights and freedoms will be reasonably protected and guarantied in accordance with EU data-protection requirements through contractual agreements to this effect. You can request information on the suitable or reasonable guarantees and the possibility, how and where to receive a copy of these from the company data-protection officer or the human resources department in charge of you.

7. Your data-protection rights
If certain conditions are met, you can assert your data-protection rights against us

Whenever possible, your applications for the exercise of your rights should be sent in writing to the address stated above or addressed directly to our data-protection officer.

8. Scope of your obligations to provide us your data

You only need to provide data that is necessary for processing your application or for a pre-contractual relationship with us or the collection of which we are required by law. Without this data, we are generally not able to continue the job application process or the selection procedure. If we request data from you above and beyond this, you shall be informed about the voluntary nature of the information separately.

9. Presence of an automated decision made in individual cases (including profiling)

We do not use any purely automated decision-making procedure as set out in Article 22 of the GDPR. If we do institute such a procedure in individual cases in the future, we shall inform you pursuant hereto separately if this is required by law.

Our data-protection information on our data-processing in accordance with Articles 13, 14 and 21 of the GDPR may change from time to time. We shall publish all changes on this site. We place older versions in an archive for your perusal.

Further information

Your trust is important to us. If you have any questions that this Data Protection Declaration could not answer for you or if you would like more detailed information on a specific point, please contact our data protection officer at any time. As a matter of course, we will fulfil your standardised right to information in this regard.

Contact details of our data protection officer:

HEC Harald Eul Consulting GmbH
Data Protection Officer DN Solutions Europe GmbH
Auf der Hoehe 34
50321 Bruehl
Datenschutz-dnseu@he-c.de

Occasional adjustments must be made to our data protection declaration in response to the continual development of the Internet. We reserve the right to make appropriate amendments at any time.

Last updated: 11 July 2022