In the following, we inform you about the processing of your personal data by us and the claims and rights to which you are entitled according to the data protection regulations.
This privacy policy informs you about the nature, scope and purpose of the processing of personal data within our website (hereinafter collectively referred to as the "website"). The privacy policy applies regardless of the domains, systems and devices used (e.g. desktop, mobile, etc.).
Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour. Which data is processed in detail and how it is used depends largely on the services used by us.
The responsible body is:
Wendero GmbH
Prinzenallee 74
13357 Berlin
Phone: +49 - 30 60 98 45 990
Fax: +49 - 30 60 98 45 991
E-mail address info@wendero.com
You can reach our company data protection officer at:
mip Consult GmbH
Lawyer Asmus Eggert
Alte Jakobstr. 77
10179 Berlin
Phone
privacy@wendero.com
www.sofortdatenschutz.de
We process personal data that we receive from you in the course of using our website and, if applicable, our business relationship.
In the case of purely informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. When you access our website, we collect the following access data, which is technically necessary for us to display our website to you and to ensure stability and security. The access data includes the IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (i.e. name of the specific website accessed), access status/HTTP status code, amount of data transferred in each case, referrer URL (previously visited page), operating system and its interface, language and version as well as type of browser software, notification of successful retrieval.
Furthermore, we receive your personal data if you contact us via contact form or e-mail. Personal data here are e.g. name, address, e-mail, telephone number (hereinafter referred to as "contact data").
We process personal data in accordance with the provisions of the European Data Protection Regulation (DS-GVO) and the German Federal Data Protection Act (BDSG) for the following purposes and on the basis of the following legal grounds:
If you have given us consent to process personal data for certain purposes, in particular for contacting you (e.g. via our contact form or by e-mail for processing and handling the enquiry, sending newsletters, addressing advertising by telephone, e-mail, SMS, etc.), this processing is lawful on the basis of your consent. Consent given can be revoked at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
Legal basis for this: Consent, Art. 6 para. 1a DS-GVO
When contacting us (via contact form or e-mail), your details will be processed in addition to any consent given for the purpose of processing the contact enquiry and handling it, also on the basis of the implementation of pre-contractual measures, Art. 6 para. 1b DS-GVO.
Legal basis for this: Implementation of pre-contractual measures at the request of the person, Art. 6 para. 1b DS-GVO.
We process your access data (see data listed above under point 2) to protect the legitimate interests of us or of third parties. In particular, we pursue the following legitimate interests:
Legal basis for this: Within the framework of the balancing of interests for the protection of legitimate interests, Art. 6 para. 1f DS-GVO
Within the company, those offices that need your data to fulfil our contractual and legal obligations will receive access to it.
Processors used by us (Art. 28 DS-GVO) may also receive data for the above-mentioned purposes. These are companies in the categories of IT services, logistics, printing services, telecommunications, debt collection, advice and consulting, and sales and marketing. Where we use processors to provide our services, we take appropriate legal precautions and corresponding technical and organisational measures to ensure the protection of personal data in accordance with the relevant statutory provisions.
Data is only passed on to third parties within the framework of legal requirements. We only pass on users' data to third parties if this is necessary, e.g. on the basis of Art. 6 para. 1 lit. b) DS-GVO for contractual purposes or on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f. DS-GVO in the economic and effective operation of our business or you have consented to the transfer of data. In the case of purely informational use of the website, we do not pass on any data to third parties as a matter of principle.
For security reasons (e.g. to clarify acts of abuse or fraud), log file information is stored for a maximum of seven days and then deleted (see point 2 above). Data whose further storage is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified.
As far as necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and processing of a contract via contact form or by e-mail.
In addition, we are subject to various storage and documentation obligations, which result from the German Commercial Code (HGB) and the German Fiscal Code (AO), among others. The retention and documentation periods specified there are two to ten years.
Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (BGB), usually amount to three years, but in certain cases can also be up to thirty years, whereby the regular limitation period is three years.
The data provided will be processed within the European Union as well as in the USA. Please note that we have agreed EU standard data protection clauses with recipients of your data for states without an adequacy decision by the Commission under Article 45 of the GDPR, as is the case with the USA (such as Google, Salesforce, Adobe).
Note: The protection of personal data in the US does not meet the level of data protection required by the EU. In particular, there is a lack of enforceable rights that safeguard the protection of your data against access by government agencies. There is therefore a risk that these government agencies can access the personal data without the data transmitter or the recipient being able to effectively prevent this.
Each data subject shall
Furthermore, you can revoke consent, in principle with effect for the future.
Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 DS-GVO in conjunction with § 19 BDSG).
In addition, we would like to point out your right of objection according to Art. 21 DS-GVO:
Information about your right to object pursuant to Art. 21 DS-GVO
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) DSGVO (data processing in the public interest) and Article 6(1)(f) DSGVO (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Article 4 no. 4 DS-GVO, which we use for questionnaire evaluation or for advertising purposes.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
In individual cases, we process your personal data in order to carry out direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection can be made without any formalities and no costs other than the transmission costs according to the basic rates are incurred.
The objection should, if possible, be addressed to:
Wendero GmbH
Prinzenallee 74
13357 Berlin
or by e-mail to:
widerspruch@wendero.com
In the context of accessing our website or contacting us by form or email, we do not use any fully automated decision-making processes pursuant to Article 22 of the GDPR. Should we use these procedures in individual cases, we will inform you about this separately if this is required by law. We do not process your data automatically with the aim of evaluating certain personal aspects (profiling).
Within the scope of our website, you must provide the personal data that is required for the use of our website for technical or IT security reasons. If you do not provide the aforementioned data, you will not be able to use our website.
When contacting us by form or e-mail, you only need to provide the personal data that is required to process your enquiry. Otherwise, we will not be able to process your request.
With the following information, we inform you about our newsletter as well as the registration, dispatch and evaluation procedure and inform you about your rights of objection. If you subscribe to our newsletter, you agree to receive the newsletter and the described procedures.
Newsletter content: We send newsletters, e-mails and other electronic notifications with promotional information (hereinafter "newsletter") only on the basis of the consent of the recipient or on the basis of a legal permission. If we specifically describe individual newsletters within the scope of the registration, this description is decisive for the consent of a newsletter subscriber. If no separate description is provided, our newsletters will contain information about our products, offers and promotions as well as information about our company.
Double opt-in: Registration for our newsletter is carried out using the so-called double opt-in procedure. This means that after you have registered for the newsletter, we will send you an e-mail in which we ask you to confirm your registration. This confirmation serves to ensure that only persons who have access to the specified e-mail address register for our newsletter. We log the registrations to the newsletter in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Changes to your data stored with the dispatch service provider are also logged.
The newsletter is sent using "MailChimp", a newsletter sending platform of the Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the mailing service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with the European level of data protection(https://www.privacyshield.gov/).
According to its own information, the mailing service provider uses the data in pseudonymous form, i.e. without assigning it to a user, to optimise or improve its own services. However, the service provider does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.
To register for the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to provide further details, such as first and last name, for the purpose of a personal address in the newsletter.
The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from the server of the dispatch service provider when the newsletter is opened. Within the scope of this retrieval, technical information, such as information on the browser and your system, as well as your IP address and the time of the retrieval are initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined with the help of the IP address) or the access times. Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention nor that of the dispatch service provider to observe individual users. The analyses serve us much more to recognise the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
The dispatch of the newsletter and the measurement of its success are based on the consent of the recipients in accordance with Art. 6 para. 1a, Art. 7 DSGVO in conjunction with § 7 para. 2 no. 3 UWG or on the basis of the legal permission in accordance with § 7 para. 3 UWG.
The logging of the registration process takes place on the basis of our legitimate interests pursuant to Art. 6 para. 1f DS-GVO and serves as proof of consent to receive the newsletter.
You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. If users have only subscribed to the newsletter and cancelled this subscription, their personal data will be deleted.
Cookies are pieces of information that are transmitted from our web server or third-party web servers to the users' web browsers and stored there for later retrieval. Cookies are small files or other types of information storage. Cookies are used for security purposes or are necessary for the operation of our website (e.g. for the optimal display of the website on different end devices) or to save your decision when you confirm our cookie banner.
We use "session cookies", which are only stored for the duration of the current visit to our website and partly enable the use of our website in the first place. A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. In addition, a cookie contains information about its origin and the storage period. Session cookies are deleted at the latest when you have finished using our website and close the browser.
We inform you about the use of cookies in the context of website tracking in the following sections.
If you do not want cookies to be stored on your computer, you can deactivate the corresponding option in the system settings of your browser. Stored cookies can be deleted in the system settings of the browser. Please note that the deactivation of cookies can lead to functional restrictions of this website.
You can object to the use of cookies used for website tracking and advertising purposes via the network advertising initiative http://optout.networkadvertising.org/ or the American website http://www.aboutads.info/choices or the European website http://www.youronlinechoices.com/uk/your-ad-choices/.
We use the web analytics service Google Analytics from Google Inc ("Google") on the basis of our legitimate interests, i.e. our interest in analysing and optimising our website. The Google Analytics web analysis service uses cookies. The information generated by this cookie about the use of our website is usually transmitted to a Google server in the USA and stored there.
Google is certified in accordance with the EU-US Privacy Shield Agreement and thus offers the guarantee of compliance with European data protection law(https://www.privacyshield.gov).
Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity. In doing so, pseudonymous usage profiles can be created from the processed data.
We use Google Analytics with IP anonymisation activated. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser will not be merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of the data generated by the cookie and the transmission to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Alternatively, you can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent future collection of your data when visiting this website: [Click here](javascript:javascript:__gaTrackerOptout()) to set the opt-out cookie for Google Analytics. This opt-out cookie only applies to the device on which you accessed this link and only as long as this cookie is not deleted.
For further information on data processing by Google, setting and objection options, please visit the Google website at https://www.google.de.
We use Hotjar, a web analytics tool provided by Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta ("Hotjar Ltd"), to record randomly selected individual visits with anonymised IP addresses. This creates a log of mouse movements and clicks with the intention of randomly replaying individual website visits and deriving potential improvements for the website. The information is not personally identifiable and will not be shared. You can find out how to avoid the collection of data by Hotjar via the following link: https://www.hotjar.com/opt-out
For the application process for one of our open job advertisements in the "Vacancies" section on our "Careers" subpage, we use the "Prescreen" application platform of Prescreen International GmbH, Mariahilfer Straße 17, 1060 Vienna (hereinafter "Prescreen"). On "Prescreen", companies can post job advertisements and receive and manage applications.
If you apply for a job in our company under the domain https://wendero.jobbase.io and create an applicant account, you will be referred to a separate data protection declaration by "Prescreen" by means of an opt-in query, which sets out the data protection of "Prescreen". If you have submitted your application in writing or by e-mail, your application data will be transferred to "Prescreen". In the course of these activities, "Prescreen" processes personal data on behalf of and for the purposes of the company with which you wish to contact in the context of your application.
In this context, Prescreen processes personal data exclusively on our behalf and in accordance with our instructions as a data protection processor within the meaning of Art. 4 No. 8 of the German Data Protection Regulation (DSGVO) and within the framework of the order processing agreement concluded with "Prescreen". Details on the handling of your personal data can be found at https://prescreen.io/de/policy/.
We use service offers from third-party providers on our website as part of our legitimate interests within the meaning of Art. 6 (1f) DSGVO, i.e. our interest in an optimal web presence. In doing so, the IP address of the user is transmitted to these third-party providers. The IP address is technically necessary so that the content can be displayed. Third-party providers may use so-called web pixels (invisible graphics, also known as "web beacons") for evaluation or marketing purposes. The web pixels can be used to analyse information such as visitor traffic to the using website. The third-party providers may store information in cookies on the users' device.
We use the following third-party providers on our website:
