1. Data protection at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For more detailed information on data protection, please refer to our privacy policy listed below this text.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find his contact details in the imprint of this website.

How do we collect your data?

On the one hand, your data is collected by you providing it to us. This can be, for example, data that you enter in a contact form. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. Internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have a right to request the correction or deletion of this data. For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time at the address given in the imprint. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You also have the right to request the restriction of the processing of your personal data under certain circumstances. For details, please refer to the privacy policy under "Right to restriction of processing".

Analysis tools and third-party tools

When visiting this website, your surfing behavior may be statistically analyzed. This is done primarily with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you.

You can object to this analysis or prevent it by not using certain tools. Detailed information about these tools and about your objection options can be found in the following privacy policy.

2. Hosting

External hosting

This website is hosted by an external service provider (hoster). Personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO).

Our hoster will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.

Conclusion of a contract for commissioned processing

To ensure data protection-compliant processing, we have concluded an order processing contract with our hoster.

3. General notes and obligatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Note on the responsible entity

The responsible party for data processing on this website is:

water IT Security GmbH
Adlerstr. 72
40211 Düsseldorf

Phone: +49 681 9833360 10
E-mail: hello@water-security.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Data protection officer required by law

We have appointed a data protection officer for our company.

Regina Stoiber
Datenbeschützerin GmbH
Unterer Sand 9
94209 Regen

E-Mail: info@datenbeschuetzerin.de

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, INCLUDING PROFILING BASED ON THESE PROVISIONS. YOU CAN FIND THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE PURPOSE OF ASSERTING, EXERCISING, OR DEFENDING LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 (1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED TO OPERATE DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING, INCLUDING PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSES OF DIRECT ADVERTISING (OBJECTION PURSUANT TO ART. 21 (2) GDPR).

Right to lodge a complaint with a supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries, that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, deletion, and correction

Within the scope of the applicable legal provisions, you have the right to obtain information free of charge about your stored personal data, their origin and recipients and the purpose of data processing, and, if applicable, a right to correct or delete this data. For this purpose, as well as for further questions regarding personal data, you can contact us at any time at the address given in the imprint.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time at the address given in the imprint.

4. Data Collection on this Website

Cookies

The websites partly use so-called cookies. Cookies do not harm your computer and do not contain viruses. They serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.
Cookies that are required for electronic communication or to provide certain functions that you have requested (e.g. shopping cart function) are stored based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of his services. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
If other cookies (e.g. cookies for analyzing your browsing behavior) are stored, they will be treated separately in this privacy policy.

Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: • Browser type and browser version • Operating system used • Referrer URL • Hostname of the accessing computer • Time of the server request • IP address
These data will not be combined with other data sources.
The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - for this purpose, the server log files must be recorded.

Contact Form

If you send us inquiries via the contact form, your data from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, insofar as your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after we have completed processing your inquiry). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Request by email, phone, or fax

If you contact us by email, phone, or fax, your request including all personal data (name, request) arising from it will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, insofar as your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and/or on our legitimate interests (Art. 6 para. 1 lit. f GDPR), since we have a legitimate interest in effectively processing the requests addressed to us.
The data you send us via contact requests will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after completion of processing your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

hCaptcha

We use hCaptcha (hereinafter "hCaptcha") on this website. The provider is Intuition Machines Inc 2211 Selig Dr, Los Angeles, CA 90026, United States (hereinafter "IMI").

The purpose of hCaptcha is to check whether the data input on this website (e.g. in a contact form) is made by a human being or by an automated programme. For this purpose, hCaptcha analyses the behaviour of the website visitor on the basis of various characteristics.

This analysis begins automatically as soon as the website visitor enters a website with activated hCaptcha. For the analysis, hCaptcha evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to IMI. If hCaptcha is used in "invisible mode", the analyses run completely in the background. Website visitors are not notified that an analysis is taking place.

The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TDDDG. The consent can be revoked at any time.

The data processing is based on the Standard Contractual Clauses (SCC) contained in the Data Processing Addendum to IMI's General Terms and Conditions or the Data Processing Contracts.

For more information about hCaptcha, please see the Privacy Policy and Terms of Use at the following links: https://www.hcaptcha.com/privacy and https://hcaptcha.com/terms.

Cookiebot

We use the consent management service Cookiebot, from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (Usercentrics). This enables us to obtain and manage the consent of website users for data processing. The processing is necessary to fulfil a legal obligation (Art. 7 para. 1 GDPR) to which we are subject (Art. 6 para. 1 sentence 1 lit. c GDPR). For this purpose, the following data is processed with the help of cookies

Your IP address (the last three digits are set to ‘0’). Date and time of consent. Browser information URL from which the consent was sent. An anonymous, random and encrypted key Your consent status of the end user, as proof of consent

The key and consent status are stored in the browser for 12 months using the ‘CookieConsent’ cookie. This retains your cookie preference for subsequent page requests. The key can be used to prove and track your consent.

The functionality of the website is not guaranteed without the processing.

Usercentrics is the recipient of your personal data and acts as a processor for us.

The processing takes place in the European Union. Further information on objection and removal options vis-à-vis Usercentrics can be found at: https://www.cookiebot.com/de/privacy-policy/

Your personal data will be deleted continuously after 12 months or immediately after cancellation of the contract between us and Usercentrics.

Please note our general information on the deletion and deactivation of cookies above.

Google Tag Manager

We use this service on our website.

The service enables us as marketers to manage website tags via an interface. The tool that implements the tags is a cookie-free domain and does not itself collect any personal data. The service triggers other tags, which in turn may collect data. The service does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with the service.

YouTube with enhanced data protection

This website embeds videos from the website YouTube. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode has the effect that YouTube does not store any information about visitors to this website before they view the video. watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. however, is not necessarily excluded. Thus, regardless of whether you watch a video or not, YouTube establishes a connection to the Google DoubleClick. video, YouTube will connect to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection is established to the servers of YouTube servers. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to associate your surfing behaviour directly with your personal profile. to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube may save various cookies on your terminal device or use comparable recognition technologies (e.g. device fingerprinting). In this way YouTube can obtain information about visitors to this website. This information is used, among other things to collect video statistics, improve the user experience and prevent fraud. prevent fraud attempts.

If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control. over which we have no control.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Further information on data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.

The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the USA. Any company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https:/ /www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000001L5AAI&status=Active

Vimeo without tracking (Do-Not-Track)

This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with Vimeo videos, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. However, we have set Vimeo in such a way that Vimeo will not track your user activities and will not set any cookies.

The use of Vimeo is in the interest of an appealing presentation of our online offers.

This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on "legitimate business interests". Details can be found here: https://vimeo.com/privacy.

Further information on the handling of user data can be found in Vimeo's privacy policy at: https://vimeo.com/privacy.

5. Analysis tools and advertising

Matomo

This website uses the open source web analytics service Matomo.

With the help of Matomo, we are able to collect and analyse data about the use of our website by website visitors. This enables us to find out, among other things, when which page views were made and from which region they came. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.

IP anonymisation

We use IP anonymisation for the analysis with Matomo. This means that your IP address is shortened before analysis so that it can no longer be clearly assigned to you.

Hosting

We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.

LinkedIn Insight Tag

Our website uses the ‘LinkedIn Insight Tag’ conversion tool from LinkedIn Ireland Unlimited Company. This tool creates a cookie in your web browser that enables the collection of the following data, among others: IP address, device and browser characteristics and page events (e.g. page views). This data is encrypted, anonymised within seven days and the anonymised data is deleted within 90 days. LinkedIn does not share any personal data, but offers anonymised reports on the website target group and display performance. LinkedIn also offers the option of retargeting via the Insight Tag. We can use this data to display targeted advertising outside its website without identifying you as a website visitor. You can find more information on data protection at LinkedIn in the LinkedIn privacy policy.

6. Own services

Handling of applicant data

We offer you the opportunity to apply to us (e.g. by email, postal mail, or via an online application form). The following provides you with information on the scope, purpose, and use of the personal data collected from you during the application process. We assure you that the collection, processing, and use of your data is carried out in accordance with applicable data protection laws and all other legal regulations and that your data will be treated strictly confidentially.

Scope and purpose of data collection

If you submit an application to us, we process the personal data associated with it (e.g. contact and communication data, application documents, notes from application interviews, etc.) to the extent necessary to make a decision regarding the establishment of an employment relationship. The legal basis for this is § 26 BDSG-new under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation), and – if you have given consent – Art. 6 para. 1 lit. a GDPR. The consent can be revoked at any time. Your personal data will only be disclosed within our company to persons involved in the processing of your application. If the application is successful, the data you have submitted will be stored in our data processing systems on the basis of § 26 BDSG-new and Art. 6 para. 1 lit. b GDPR for the purpose of carrying out the employment relationship.

Retention period of the data

If we cannot offer you a job, you reject a job offer, or withdraw your application, we reserve the right to retain the data you have transmitted to us on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months after the end of the application process (rejection or withdrawal of the application). Afterwards, the data will be deleted and the physical application documents will be destroyed. The retention serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period (e.g. due to a pending legal dispute), deletion will only take place when the purpose for further retention no longer exists.
A longer retention period may also take place if you have given corresponding consent (Art. 6 para. 1 lit. a GDPR) or if legal retention obligations prevent deletion.

Inclusion in the applicant pool

If we cannot offer you a job, there may be a possibility of including you in our applicant pool. In the event of inclusion, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.

Inclusion in the applicant pool is solely based on your express consent (Art. 6 para. 1 lit. a GDPR). Giving consent is voluntary and not related to the ongoing application process. The data subject can revoke their consent at any time. In this case, the data from the applicant pool will be irrevocably deleted, unless there are legal retention reasons.

The data from the applicant pool will be irrevocably deleted no later than two years after the consent has been given.