Privacy policy

 

Hier klicken um die deutsche Version zu lesen

We are delighted that you have taken an interest in our website.

The protection of your personal data during its collection, processing and use in connection with your visit to our website is of great importance to us. Your data is protected in accordance with the relevant legal provisions.

Please take a moment to read the information below. This explains how we handle your personal data, how and for what purpose this data is used, to whom we disclose this data, and how we protect your personal data.

Your personal rights are our top priority, and we do our utmost to protect and safeguard these rights.

The data controller responsible for processing your personal data within the meaning of the European General Data Protection Regulation is:

Data at Work GmbH
Gewerbepark Rahlmühle 11
31848 Bad Münder
Telefon: +49 5042 5085 40
E-Mail: hallo@daw.gmbh

Data Protection Officer

con eco GmbH, Lindenallee 41, 50968 Cologne, email: info@con-eco.de

Collection and processing of data

Every visit to our website and every time a file stored on the website is accessed is logged. This data is stored for internal system-related and statistical purposes. The following are logged:

• Name of the file accessed,
• Date and time of access,
• Amount of data transferred,
• Confirmation of successful retrieval,
• operating system used,
• browser and browser type,
• the website from which the user was redirected,
• the internet service provider,
• pages visited and
• requesting

In addition, the IP addresses of the requesting computers are logged. However, the data controller does not use this information to identify any individual. This data is required solely to display the content of our website correctly, to optimise the content for you on an ongoing basis, and to assist with criminal prosecutions in the event of cyber-attacks. The data is processed on the basis of our legitimate interest in accordance with Article 6(1)(f) of the GDPR. The processing of the data is necessary for the operation of the website.

The data is stored for as long as it is required to fulfil the purpose and is subsequently deleted automatically. 

 

Data subjects’ rights 

In accordance with Article 15 of the GDPR, you have the right to obtain information regarding the processing of your personal data. Furthermore, you are free to exercise your rights to rectification, erasure or, where erasure is not possible, to restriction of processing and to data portability in accordance with Articles 16–18 and 20 of the GDPR. Should you wish to exercise this right, please contact our Data Protection Officer. You also have the right to lodge a complaint with the relevant supervisory authority at any time. If you believe that the processing of your personal data is not being carried out in compliance with data protection laws, we would kindly ask you to contact our Data Protection Officer. Furthermore, you have the right to object to the processing of your personal data at any time. 

 

Protection of stored data 

We employ technical and organisational security measures to protect the personal data you provide to us against manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved and adapted in line with the latest technological developments. It cannot be ruled out that data transmitted by you in unencrypted form may be viewed by third parties during transmission. Please note that, with regard to data transmission over the internet (e.g. when communicating by email), completely secure transmission cannot be guaranteed. Sensitive data should therefore either not be transmitted at all or only via a secure connection (SSL) over the internet.

 

Protection of minors

Consent to the processing of personal data may only be given by a person of legal age. For information society services, the consent of a child aged sixteen or over is permissible in accordance with Article 8 of the GDPR.

 

Contact form and registration form for consultancy

All your personal data and other information that you provide to us via the contact form and registration form on our website will be collected and processed solely for the purpose of processing and responding to your enquiries.

By contacting us, you give your consent to the processing of your data in accordance with Article 6(1)(a) of the GDPR.

Should you be interested in a quote, your personal data will be processed for the purpose of entering into a contract in accordance with Article 6(1)(b) of the GDPR.

Your data is forwarded to us via email by our provider. If you do not provide this data, we will unfortunately be unable to contact you or process your enquiry.

No automated decision-making takes place.

Your personal data will not be disclosed to external third parties.

The personal data you provide will not be transferred to a third country or an international organisation, nor are there any plans to do so.

You have the right to withdraw your consent at any time with effect for the future. The lawfulness of any data processing carried out prior to the withdrawal remains unaffected.

The personal data you provide to us via the contact form will be stored by us for the duration of the processing of your enquiry and retained until the expiry of the relevant statutory time limits.

 

Email contact

You can contact us via the email address provided on our website. If you choose to do so, the personal data transmitted in the email will be stored and processed solely for the purpose of handling and responding to your enquiry.

By contacting us, you consent to the processing of your data in accordance with Article 6(1)(a) of the GDPR.

Should you be interested in a quote, your personal data will be processed for the purpose of entering into a contract in accordance with Article 6(1)(b) of the GDPR. Unfortunately, if you do not provide this information, we will be unable to process your enquiry. No automated decision-making takes place.

Your personal data will not be disclosed to external third parties.

The personal data you provide will not be transferred to a third country or to an international organisation, nor are there any plans to do so.

You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing carried out up to the point of withdrawal remains unaffected.

The personal data you provide to us will be stored for the duration of the processing of your enquiry and retained until the expiry of the relevant statutory time limits.

 

Newsletter

If you subscribe to our electronic newsletter, your personal data will be processed solely for the purpose of sending our newsletter on a regular basis, in accordance with Article 6(1)(a) of the GDPR. Following your registration, we will send you a confirmation email, which allows us to verify your identity and reconfirm your consent.

The registration process is logged on the basis of our legitimate interests in accordance with Article 6(1)(f) of the GDPR and serves as proof of your consent to receive the newsletter.

Your data is forwarded to us via email by our provider. If you do not provide this data, we will unfortunately be unable to send you our newsletter, contact you or process your enquiry. No automated decision-making takes place.

Your personal data will not be disclosed to external third parties. The personal data you provide will not be transferred to a third country or an international organisation, nor are there any plans to do so.

You have the right to withdraw your consent at any time with future effect. The lawfulness of data processing up to the point of withdrawal remains unaffected.

The personal data you provide to us when subscribing to the newsletter will be stored by us until you withdraw your consent to receive the newsletter, after which it will be removed from the mailing list.

 

User log-in

All your personal data and other information that you provide to us when registering on our website and within the customer portal are collected and processed solely for the purpose of your registration and future log-ins, in accordance with Article 6(1)(b) of the GDPR. If you do not provide this information, you will unfortunately not be able to register on our website or use the customer portal.

No automated decision-making takes place.

Your personal data will not be disclosed to external third parties.

The personal data you provide will not be transferred to a third country or an international organisation, nor are there any plans to do so.

The personal data you provide to us via the registration process and on our customer portal will be stored by us until you log out or delete your user account or have it deleted, and, where applicable, in accordance with any statutory retention period.

 

Cookies for analysis (tracking cookies)

In addition to technical cookies, this website uses tracking cookies. Cookies are text

files stored on your computer that enable an analysis of your use of the website. However, these collect and store data exclusively in pseudonymous form. They are not used to identify you personally and are not linked to data relating to the bearer of the pseudonym. We use this information to assess the appeal of our website and to continuously improve its content.

The legal basis for the use of tracking cookies is the consent you have given in accordance with Section 25(1) of the TDDDG.

You have the right to withdraw your consent at any time with effect for the future. The lawfulness of data processing up to the point of withdrawal remains unaffected.

You can adjust your cookie settings at any time.

 

Further details regarding the cookies and analytics services used, as well as the purpose and legal basis of data processing, are set out in full in the privacy policy.

 

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter ‘Google’), which uses cookies. Cookies are text files that are stored on your computer and enable an analysis of your use of the website. Cookies usually transmit the information generated about your use of this website to a Google server in the European Union (EU) or the European Economic Area (EEA). However, as this website employs IP anonymisation, your IP address will first be truncated by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area.

In exceptional cases, the full IP address is transmitted to a Google server in the USA and truncated there. On our behalf, Google uses this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website usage and internet usage . The IP address transmitted by your browser as part of Google Analytics is not merged with other data held by Google.

Data collection within the scope of this service takes place only after you have given your express consent. The legal basis for this is Section 25(1) of the TDDDG. You have the right to withdraw your consent at any time with future effect. The lawfulness of the data processing up to the point of withdrawal remains unaffected.

The purpose of the data collection is to analyse the use of our website. Furthermore, by using Google Analytics, we can generate reports on website activity and thereby improve our website. In addition to us, Google is also a recipient of the data.

The data will be deleted as soon as it is no longer required for our record-keeping purposes. You may prevent the collection of your data by Google Analytics at any time, even after you have given your consent.

The transfer of data by Google to the USA is based on the EU Standard Contractual Clauses, details of which can be viewed here: https://privacy.google.com/businesses/controllerterms/mccs/. Further information can be found at: https://support.google.com/analytics/answer/6004245?hl=de

 

Google Tag Manager

Our website uses Google Tag Manager, a service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter ‘Google’). This enables us to manage website tags via a single interface. Google Tag Manager triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in effect for all tracking tags implemented using Google Tag Manager.

 

This data processing is carried out on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, provided that consent within the meaning of the TDDDG relates to the setting of cookies or access to information on your device. You have the right to withdraw your consent at any time with future effect. The lawfulness of the data processing up to the point of withdrawal remains unaffected.

It is possible that, in the course of using this Google service, personal data may be transferred to the USA to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Further information on the collection and processing of your data by Google, as well as your rights as a data subject in this regard, can be found in Google’s Privacy Policy at: https://policies.google.com/privacy?hl=de.

 

Google Maps

Our website uses Google Maps to display geographical information (location maps). Google Maps is operated by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: “Google”). This enables us to make it easier for you to find us or to provide specific directions to particular locations.

Google is therefore also to be named as a recipient of the data. When you use Google Maps, information about your use of our website is transmitted to a Google server in the USA and stored there. The information collected and transmitted includes your IP address and your location, provided that the settings on your device allow location tracking. When Google Maps is activated, Google Fonts are loaded into your browser cache so that the relevant text and fonts can be displayed as intended.

This data processing is carried out on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, insofar as consent within the meaning of the TDDDG relates to the setting of cookies or access to information on your device. You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing up to the point of withdrawal remains unaffected.

In connection with this processing, we cooperate with Google on the basis of a joint controller agreement in accordance with Article 26 of the GDPR. This can be accessed at: https://policies.google.com/privacy?hl=de.

The transfer of data to the USA involves risks under data protection law. If you do not wish your data to be transferred, you can withdraw your consent in the cookie settings. However, please note that in this case you will not be able to use the map display.

Further information on the collection and processing of your data by Google, as well as your rights as a data subject in this regard, can be found in Google’s Privacy Policy at http://www.google.com/policies/privacy/?hl=de and in the additional Terms of Service for Google Maps and Google Earth at https://www.google.com/intl/de_de/help/terms_maps.html.

 

Google reCAPTCHA

This website uses the Google reCAPTCHA service, operated by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: ‘Google’), which protects the website from spam and misuse.

The reCAPTCHA service is designed to prevent malicious activities carried out by automated software on the website. This is ensured by verifying whether the input actually originates from a human user.

For the purposes of this verification, data such as the address of the page on which the reCAPTCHA is used, the user’s IP address, the user’s input behaviour (e.g. answering the reCAPTCHA question, input speed into the form fields, the order in which input fields are selected, etc.), as well as the browser, browser size and resolution, browser plug-ins, date, language settings, the website’s styling instructions (CSS) and scripts (JavaScript), and mouse or touch events within the website are collected and processed. If the website user is signed in to Google, the Google account is also recognised and associated. In this case, cookies from other Google services such as Gmail, Search and Analytics are also read by Google. Data collected and stored in connection with the use of Google reCAPTCHA is sent to Google in encrypted form. Whether the CAPTCHA is displayed on the page as a tick box or via text input is determined by Google’s subsequent evaluation. No personal data is read or stored from the input fields of the relevant form.

The legal basis for the use of reCAPTCHA is Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, insofar as consent within the meaning of the TDDDG relates to the setting of cookies or access to information on your device. You have the right to withdraw your consent at any time with future effect. The lawfulness of data processing up to the point of withdrawal remains unaffected. The data will be deleted as soon as it leaves our website.

It is possible that, in the course of using this Google service, personal data may be transferred to the USA to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Further information on the collection and processing of your data by Google, as well as your rights as a data subject in this regard, can be found in Google’s Privacy Policy: https://www.google.com/intl/de/policies/privacy/.

 

Social media

We would like to get in touch with you and other interested parties, customers and users. To this end, we use various social media platforms. You can find out which specific social media platforms we use in the following section.

However, we would like to point out that, as a matter of principle, we have no influence over what data is collected. As a rule, however, this data is used for market research and advertising purposes. This is usually done by creating user profiles and identifying interests based on them. This makes it possible to display tailored advertising to you.

Consequently, cookies may also be set on your device when you use social media platforms.

Furthermore, we would like to point out that your data may also be processed outside the European Union, which means there is a risk that you may not be able to properly exercise your rights.

In principle, we wish to provide you with information in the simplest and quickest way possible or to give you the opportunity to share such information. Therefore, unless you have consented to data processing on the relevant platform, the legal basis is our legitimate interest in accordance with Article 6(1)(f) of the GDPR.

If you have given your consent on the relevant platform, your consent pursuant to Article 6(1)(a) of the GDPR forms the legal basis for the processing. You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing up to the point of withdrawal remains unaffected.

 

Facebook (link)

On our website, we use a link to our presence on the social network Facebook (Facebook fan page) in order to interact with Facebook users who visit the fan page. For this Facebook fan page, we are a joint controller with Facebook Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland; hereinafter: ‘Facebook’) in accordance with Article 26 of the General Data Protection Regulation (GDPR). The joint controller agreement can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

We hereby inform you of the nature and scope of the personal data processed when you use our Facebook fan page.

The purpose of processing your personal data is to provide visitors with a modern information platform and an opportunity to interact on Facebook. The legal basis for this processing is therefore our legitimate interest pursuant to Article 6(1)(f) of the GDPR. In doing so, the interests of users are always taken into account. Information on the legal basis for processing on Facebook can be found at http://www.facebook.com/about/privacy/legal_bases/.

When you visit our Facebook fan page, Facebook collects and processes personal data on the basis of its legitimate interest in accordance with Article 6(1)(f) of the GDPR. Some of this data is provided to us in summarised form via the so-called ‘Insights’ (Facebook user statistics). A cookie is stored on the user’s device for this purpose. This enables us to reuse this information at a later date. The cookie remains active for a period of two years unless it is deleted. Further information from Facebook on the use of cookies can be found in the Facebook Cookie Policy at https://de-de.facebook.com/policies/cookies/. These user statistics are transmitted exclusively in anonymised form, and we have no means of accessing the underlying data.

Whether Facebook transfers personal data to third parties is beyond our control. It is possible that Facebook Inc., which is based in the USA, may process personal data outside the European Union.

If you are already logged in to your personal Facebook account, information about your visit to our website will be automatically forwarded to Facebook. It is then possible that Facebook may associate your visit to the website with your account.

If you do not wish Facebook to collect and store your data, please log out of your Facebook account.

 

XING (Link)

On our website, we provide a link to our profile on the professional social network XING. This is a service provided by XING SE (Dammtorstraße 30, 20354 Hamburg; hereinafter: ‘XING’). Please note that we have no knowledge of the content of the data transmitted or how it is used by XING.

We have integrated features from the XING service into our website. When you visit the website, your web browser briefly connects to XING’s servers, through which the XING features are provided (e.g. calculation of the counter value). XING does not use cookies and does not store any personal data. Furthermore, your usage behaviour is not analysed. Please note that we have no knowledge of the content of the data transmitted or how it is used by XING. Further information can be found at: https://www.xing.com/app/share?op=data_protection.

 

LinkedIn (link)

On our website, we use a link to the social network LinkedIn, which is operated exclusively by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland); hereinafter referred to as ‘LinkedIn’. The link is identified by the LinkedIn logo (not a LinkedIn plug-in).

When you click on the LinkedIn logo, your browser establishes a direct connection to LinkedIn’s servers. If you are already logged in to your personal LinkedIn account, information about your visit to our website will be automatically forwarded to LinkedIn. It is then possible that LinkedIn may associate your visit to the website with your account. Please note that we have no knowledge of the content of the data transmitted or how it is used by LinkedIn. The following link leads to LinkedIn’s privacy policy: http://de.linkedin.com/legal/privacy-policy.

 

Instagram (link)

On our website, we provide a link to our page on the social network Instagram. This is a service provided by Facebook Inc. (Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland; hereinafter: “Facebook”)

Please note that we have no knowledge of the content of the data transmitted or how it is used by Facebook. Further information can be found at: https://help.instagram.com/51952212510787

 

RustDesk

We use the RustDesk software to carry out remote maintenance and provide technical support. The RustDesk server is operated exclusively on our own IT infrastructure and hosted by us. Connection data is not transferred to external service providers or third parties.

RustDesk is used only with the consent of the relevant user and serves the purposes of technical support, fault analysis and the maintenance of IT systems.

During a remote maintenance session, the screen content displayed on the connected system can be viewed and, subject to the user’s authorisation, operated. The session is not recorded.

No connection or usage logs are stored on our RustDesk server. In particular, access times, connection data or session information are not stored permanently.

The processing of personal data takes place exclusively for the purpose of providing remote maintenance and support services on the basis of Article 6(1)(f) of the GDPR (legitimate interest in efficient technical support) or Article 6(1)(b) of the GDPR, insofar as the processing is necessary for the fulfilment of contractual obligations.

 

NinjaOne

We use the NinjaOne platform to provide our IT services, support and managed services to our customers. NinjaOne is software provided by NinjaOne, LLC, Suite 200, 3687 Tampa Road, Oldsmar, Florida 34677, USA. The platform is used for remote maintenance, system monitoring, inventory management, documentation, patch management and the processing of support requests.

In doing so, technical information relating to the managed systems may be processed, such as device names, user IDs, operating system information, hardware and software inventory data, IP addresses, system logs and information about maintenance and support operations.

Where access to personal data is possible in the context of remote maintenance, this is carried out exclusively for the purpose of providing support and maintenance services and only to the extent necessary.

Personal data will be stored for the duration of the contractual relationship. Upon termination of the contractual relationship, the data will be deleted without delay, provided there are no statutory retention obligations or other legitimate grounds for further storage.

To regulate the processing of personal data on our behalf, we have entered into a Data Processing Addendum (data processing agreement pursuant to Article 28 of the GDPR) with NinjaOne.

The processing of personal data takes place exclusively for the purpose of providing remote maintenance and support services on the basis of Article 6(1)(f) of the GDPR (legitimate interest in efficient technical support) or Article 6(1)(b) of the GDPR, insofar as the processing is necessary to fulfil contractual obligations.

Further information on data protection at NinjaOne can be found at: https://www.ninjaone.com/privacy-policy/.

 

Microsoft Teams Facilitator

We use the Microsoft Teams Facilitator as part of our internal collaboration and, where applicable, during client meetings. This is an AI-powered feature within Microsoft Teams that can support meetings, for example by generating summaries, documenting meeting content, recording tasks or structuring the outcomes of discussions.

When using this feature, meeting content is processed. This includes, in particular, participant details, spoken contributions, chat messages, meeting notes, tasks and other information provided during a Teams meeting.

Personal data will be stored for the duration of the contractual relationship. Upon termination of the contractual relationship, the data will be deleted without delay, provided there are no statutory retention obligations or other legitimate grounds for further storage.

The processing is carried out for the purpose of conducting and documenting meetings, promoting efficient collaboration, and fulfilling contractual and organisational requirements. The legal basis for this is Article 6(1)(b) of the GDPR, insofar as the processing is necessary for the implementation of pre-contractual or contractual measures, and Article 6(1)(f) of the GDPR on the basis of our legitimate interest in the efficient organisation of work and business processes.

The processing takes place within the Microsoft 365 environment we use, via the integrated AI application Copilot. To regulate the processing of personal data on our behalf, we have entered into a Data Processing Addendum (data processing agreement pursuant to Article 28 of the GDPR) with Microsoft.

Meeting participants are informed about the recording, transcription or AI-assisted processing of meeting content prior to using the relevant functions and must give their active consent. The data is used in compliance with data protection regulations and exclusively for the intended purposes.

For further information on data protection at Microsoft, please visit: https://privacy.microsoft.com/de-de/privacystatement

 

Note on the handling of applicant data

We offer you the opportunity to apply to us by email.

If you send us an application, we will process your associated personal data (e.g. contact and communication details, application documents, notes taken during interviews, etc.) to the extent necessary to make a decision on and establish an employment relationship. The legal basis for this is Article 6(1)(b), (c) and (f) of the GDPR and, where you have given us your consent, Article 6(1)(a) of the GDPR. You may withdraw your consent at any time. You are entitled to all the rights set out under ‘Data subject rights’.

Your personal data will be shared within our company with those involved in processing your application.

If we do not make you a job offer, if you decline a job offer or if you withdraw your application, we reserve the right to retain the data you have provided on the basis of our legitimate interests (Article 6(1)(f) of the GDPR) for up to 12 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted. The retention of data serves, in particular, as evidence in the event of a legal dispute.