Privacy Policy

Responsible body

The data processing controller on this website is:

Faktor Zehn GmbH
Friedenheimer Brücke 21
80639 München

Phone: +49 (0) 89 5203110
E-mail: info@faktorzehn.de

Our responsibility covers the general data protection regulation (hereinafter “GDPR”).

Group Data Protection

Faktor Zehn GmbH is a subsidiary of ConVista Consulting AG, which as our IT service provider receives and processes your data for our purposes and also provides the data protection officer.

Data protection officer

You can contact our data protection officer at

ConVista Consulting AG
Datenschutzbeauftragter
Im Zollhafen 15/17
50678 Köln

and at dpo@convista.com.

Processing of your data

The following section provides information on how we process your personal data (hereinafter also referred to as “your data”).

Access data

Your details

Every time you access a page from our website and every time you call up a file or send a form, your browser sends certain data to our server as part of its request. This data is used by the server, on an ad hoc basis, to provide the requested content and is stored in log files with server-side information about the (non-) fulfilment of the request.

The following data is processed in order to provide the requested content:

• Time (date and time) of the request
• URL of the requested content
• IP address
• Amount of data transmitted

The above information is saved in a log file with:

• Access status (file transferred, file not found, etc.)

Without the provision of this data, the use of the website is not possible.

Purposes of processing

The data are

• processed on an ad hoc basis to enable the use of the website, i.e. to provide  requested content, and
• stored in log files to allow:
• the website to operate, e.g. to detect and correct access errors, and
• to ensure the security of our IT systems, i.e. to be able to recognize security-relevant access and take countermeasures if necessary.

The access data is also evaluated for statistical purposes (see section “Analytics”).

Data is not passed to third parties, either for commercial or for non-commercial purposes.

Legal basis of the processing

The legal basis for the processing of access data is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR is for the purposes described above.

Storage period

After seven days, at the latest, the log files are deleted or anonymized. Insofar as there is a suspicion of a security breach, relevant data will be retained for the duration of the prosecution of the potential attack and, if necessary, countermeasures will be taken, particularly where a legal claim is enforced.

Input options

Your details

Within the framework of website, there is the option to enter personal or business data (e.g. e-mail address, name and/or address) in order to be able to use the services described (e.g. to request a callback).

The data transmitted in this way is stored for the purpose of providing the service described (e.g. on an e-mail server for sending requested material).

The provision of the data is voluntary. Depending on the service, however, certain data may be necessary to enable us to provide the service. This data is then marked accordingly.

Purposes of processing

The data is, without exception, used only to provide you with the service described in each case.

Legal basis of the processing

The legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.

If you have separately consented to the processing of certain of your data, we will process this data (also), on the basis of this consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Storage period

The data will be deleted or anonymized, at the latest, when you no longer require the service described in each case, provided that there are no legal retention obligations to the contrary and/or we process your data lawfully for other purposes.

Application

Your details

If you submit an application to our company, we will process the information we receive from you during the application process.

As a rule, this information includes your contact details, other information provided in your letter of application and CV, as well as certificates and other evidence of your qualifications and professional experience.

The provision of your data is voluntary. However, in order to be able to consider your application and assess your suitability for the position in question, we require in all cases your name, address, telephone number, and e-mail address, as well as an appropriate letter of application and your curriculum vitae, and, if applicable, evidence of the information provided, in particular references to your qualifications, work experience, and certifications.

We will only assess you according to your suitability for the position in question; you do not need to send us a photograph.

As a rule, we do not require any special categories of personal data as described in Art. 9 GDPR for the application process. In view of the sensitivity of such data, please do not send us this type of information. If, in exceptional cases, where such information is relevant to the application process, we will process it together with your other applicant data; for example, if you voluntarily provide us with information about a severe disability.

Purposes of processing

Your data will be processed, exclusively, for the purpose of carrying out the application procedure.

Legal basis of the processing

The legal basis for the processing is § 26 para. 1 S. 1 BDSG in conjunction with Art. 88 GDPR.

If you have separately consented to the processing of certain of your data, we process this data, on the basis of the consent pursuant to Art. 6 para. 1 lit. a) GDPR.

In the rare cases that we process special categories of your data, the legal basis for this processing is § 26 Abs. 3 BDSG in conjunction with Art. 88 GDPR.

Revocation of your consent

You can revoke your given consent at any time in text form (e.g. by e-mail to info@faktorzehn.com). We will not process your data any further after the revocation.

Storage period

If we are currently unable to offer you employment, we will delete or anonymize your data no later than six months after the end of the application process.

However, if there is a prospect that a suitable vacancy may arise in the future, we would like to include you in our talentpool. If you agree to this at our request, we will store your data for as long as there is a prospect of a vacancy, up to a maximum of 2 years.

If you receive cost reimbursements or other tax-relevant transactions, the relevant accounting documents will also be retained, to fulfil the relevant retention obligations.

Recipient of your data

At Faktor Zehn, only the human resources department, the responsible employees of the department of the vacant position and, if required, members of the management and/or the board of directors have access to your data. In case of cost reimbursements, the accounting department will also have access to your data.

In order to manage your data efficiently, we use the recruiting tool “Personio” of Personio GmbH, Rundfunkplatz 4, 80335 Munich, Germany.

In certain cases, we must disclose your personal data to third parties, for example to our bank, if you receive a reimbursement of costs or to the post office, if we communicate with you by letter.

Business contacts

Your details

If you provide us with your business contact data (e.g. first name, last name, company, position, address, e-mail address, telephone numbers) in the context of a business contact or if you provide this data in the context of corresponding forms on our websites, we will store this data in our global CRM system, indicating your presumed areas of professional interest.

The provision of your data is generally voluntary. In some cases, however, the provision of your personal data constitutes consideration for a service to be provided by us free of charge (e.g. for the provision of a white paper).

Purposes of processing

We and the other companies of the ConVista Group (see Recipients) use your contact data,

• for the fulfillment of contracts with you or your employer, e.g. in the context of the implementation of an IT project,
• upon your request for pre-contractual measures, e.g. for sending requested information about our range of services or an offer,
• for direct advertising of our own goods or services that are similar to the goods or services that you or your employer have requested or that we have provided to you or your employer. For example, by sending you specialist information on current topics, interesting service offers or offers for individual advice on your current professional and technical challenges,
• insofar as you have given us permission to process your contact data (e.g. for the Business Partner Program).

Legal basis for data processing

The legal basis for processing your data is as follows:

• Art. 6 para. 1 lit. b) Alt. 1 GDPR – insofar as we process your data to fulfil a contract, e.g. within the framework of a project
• Art. 6 para. 1 lit. b) Alt. 2 GDPR – insofar as we process your data, at your request, for pre-contractual measures, e.g. for sending requested information on our range of services or for making an offer
• Art. 6 para. 1 lit. f) GDPR – insofar as we use your data for direct advertising for our own goods or services, which are similar to the goods or services, which you have previously requested or, which we have provided to you. Our legitimate interest is to advertise our goods and services in terms of direct advertising.
• Art. 6 para. 1 lit. a) GDPR – insofar as you have given us your consent to the processing of your contact data.

Recipient

The CRM system is also operated by ConVista Consulting AG, Cologne for the other companies of the ConVista Group. These companies have access to your data and may process it for the purposes described above.

The ConVista Group includes all current and future companies affiliated with ConVista Consulting AG pursuant to §§ 15 ff. AktG or by means of far-reaching cooperation agreements. We will gladly provide the current list in each case upon request.

Objection / revocation of your consent

You can object to the use of your data for the aforementioned purposes at any time with future effect or revoke the consent you have given for this purpose.

Please send us your objections or revocation by e-mail to info@faktorzehn.de.

Storage period

The data will be deleted or anonymized at the latest if, and to the extent that, you have objected to the use of your data or revoked the consent you have given, unless storage obligations apply and/or we process your data for other lawful purposes.

Cookies

Your details

Cookies are small text files that are sent from our server to your computer and stored on your computer. They contain information that can be read by our server and enhanced with additional information during the current and future visits to the website.

We use the following cookies on various pages of our website:

Session cookie

When you visit the website, a so-called session cookie is stored on your computer. This contains a sequence of numbers, assigned to the cookie, which enables the settings you have selected on the website to be stored on the server for the duration of your browser session. This enables you, for example, to receive all (sub) pages of the website in the language version you have chosen without having to select the language again for each of these pages.

Persistent cookie

So you do not see our banner reference about the use of cookies, once you have closed the banner and are working within the website itself, a cookie containing the required information is stored, when the banner is closed.

Matomo

Please cross-reference this privacy policy information regarding the setting of cookies with the section about our analytics tool Matomo.

Google Analytics

Please cross-reference this privacy policy information regarding the setting of cookies with the section about our analytics tool Google Analytics.

There is also the option of using our website without enabling cookies. In your browser’s settings, you can determine whether you wish to accept the cookie settings.  In their default settings, most browsers automatically accept them. Should you wish to prevent the setting of cookies, you can do so by changing your browser’s settings by clicking, for example, “Do not accept cookies” or similar. These settings can often be found under a menu item “Privacy” or similar. In this case, we would like to point out that you may not be able to use all functions of our internet pages to their full extent.

Purposes of processing

We use cookies to make visiting our website appealing and simple, and to enable you to use certain functionality, e.g. the ability to select the language once and for this setting to be applied when you visit our website.

Legal basis of the processing

The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in data processing is in line with the purposes described in the previous paragraph.

Storage period

Session cookie

The session cookie, and data assigned to the server, are deleted once the browser session has ended.

Persistent cookie

This cookie remains on your computer until the expiry of the set expiry period, unless you delete it. This period is 365 days.

Matomo

Please cross-reference this privacy policy information regarding the setting of cookies with the section about our analytics tool Matomo.

Google Analytics

Please cross-reference this privacy policy information regarding the setting of cookies with the section about our analytics tool Google Analytics.

Google Analytics

Your details

Within the website’s framework, visitor access is evaluated using Google Analytics, a website analysis tool from Google, so that we can continuously improve our website.

The following information, in particular, is collected:

• IP address
• (sub)pages called up
• Your behaviour whilst using the website (for example clicks, scrolling behaviour and dwell time)
• Your approximate location (country and city)
• Technical information such as browser, internet provider, end device and screen resolution
• Source of your visit (i.e. via which website or advertising medium you came to us)

You can prevent the setting of cookies by adjusting your browser software accordingly, as described under “Cookies”.

Your IP address is recorded to ensure the security of the analysis service and to provide us with information about the country, region or city from which you are accessing the site. However, your IP address is shortened in the course of the collection even before storage and thus your data is pseudonymized.

Purposes of processing

We use Google Analytics to analyse the use of our website and to further optimize and develop the website and maintain its user-friendliness. In also helps to ensure the presentation of our website and our range of services are optimized.

Legal basis of the processing

The legal basis for the processing is your consent according to Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in this data is based the purposes described in the previous paragraph.

Storage period

Data from a one-off visit is deleted after 14 months.

Recipient of your data

Google Analytics is provided by Google LLC, USA This company receives your data in order to provide the analytics service to us.

Transfer to third countries

Your data will be transferred to the USA as described above in the section “Recipients of your data”; there is no data protection law there comparable to that of the EU. Data protection agreements including the so-called “standard contractual clauses” of the EU have been concluded with Google in this regard. In addition, your data will be pseudonymized (see section “Your data”).

Objection

If you are not in agreement with the analysis of the data gathered from your website visit, you can opt-out of this by preventing cookies, in the cookie settings within your browser, as described previously under the section “Cookies”. You also have the option of using a browser add-on to deactivate Google Analytics. You can download this here: tools.google.com/dlpage/gaoptout.

Please note that you need to implement these measures separately for each browser software and/or terminal device you use, if you so wish.

Matomo

Your details

Within the website’s framework, visitor access is evaluated using Matomo, an open source software, so that we can continuously improve our website. Matomo uses cookies and the transmitted access data (see “access data” section) to allow for an evaluation of your use of the website.

The following information is generated in relation to your use of the website:

• Your IP address, whereby this is truncated by the last byte immediately after processing, and before it is saved and is thus anonymized
• The country of origin of your internet provider
• The operating system and browser you are using and the selected resolution of your end device
• Whether you use a mobile or stationary device
• The (external) website from which you reached our website (referrer)
• The subpages of the website you have called up
• The time spent on (the subpages of) the website
• The frequency of accessing the (sub-pages of the) website

This creates a pseudonymous user profile, to which your visits are assigned. This information is stored on our server in Germany and is not passed to any third party. The information generated in the pseudonymous user profile is not used to personally identify the visitor of this website and is not merged with personal data about the bearer of the pseudonym.

You can prevent the setting of cookies by adjusting your browser software accordingly, as described under “Cookies”.

Purposes of processing

We use Matomo to analyze the use of our website and to further optimize and develop the website and maintain its user-friendliness.

Legal basis of the processing

The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in this data is based on the purposes described in the previous paragraph.

Storage period

Data gathered from the one-off visit is deleted after 12 months.

Objection

If you are not in agreement with evaluation of the data about your visit to the website, you can object. Once an objection has been raised, a cookie will be set on your computer. Please remember that if this or all cookies stored on your computer are then deleted, you would need declare a new objection if you still wish to object.

YouTube videos

Your details

On some pages of our website we have embedded videos from YouTube (a Google company). The videos are stored on www.YouTube.com and can be played directly from our website. (Only) If you click on the information window above the video, a connection to YouTube is established and the video is loaded. We have integrated the videos in the so-called “extended data protection mode” so that, according to YouTube, no cookies are set to collect user activity. Nevertheless, various personal data are transmitted directly to YouTube when the connection is established. We have no influence on the data transmission and the further use of your data.

If you activate the connection, YouTube receives, among other things, the information that you have accessed the corresponding subpage of our website. In addition, the data listed in the section “Access data” of this privacy policy will be transmitted. This occurs regardless of whether you are logged in to YouTube via a user account or whether no user account exists. If you are logged in to YouTube/Google, this and other data may be assigned directly to your account. YouTube/Google may store your data as usage profiles and use them, among other things, for the purposes of advertising, market research and/or demand-oriented design of its website.

For more information on data processing by YouTube/Google, please refer to their privacy policy(s): https://policies.google.com/privacy?hl=de.

Purposes of processing

The integration of the videos is done to offer you the possibility to perceive interesting information directly within our website.

Legal basis of the processing

The legal basis for the processing is your consent according to Art. 6 para. 1 lit. f) GDPR. You grant this consent by clicking on the information window above the video.

Storage period

We do not store any of the data mentioned here. Regarding our storage of usage and analytics data, please read the related points of the privacy policy.

Recipient of your data

YouTube is provided by YouTube LLC, USA a company of Google Inc, USA. These companies receive your data (only) when you activate the connection as described in the section “Your data”.

Transfer to third countries

Your data will be transferred as described above in the section “Recipients of your data” to the USA and, if applicable, to other third countries outside the EU/EEA in which no data protection law comparable to the EU exists.

Hosting

We are hosting the content of our website at the following provider:

All-Inkl
The Provider is the ALL-INKL.COM – Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (hereinafter “All-Inkl”). For details, please visit the privacy policy of All-Inkl: https://all-inkl.com/datenschutzinformationen/.
The use of All-Inkl is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable representation of our website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

Your Rights

As far as we process your data, you hold the following rights, as described below. We welcome any enquires by e-mail to info@faktorzehn.de.

You have a right to …

Information

On request, we will be pleased to inform you about any data we hold and process about you, and to what extent we process your data.

You can find out more about your right to information in Art. 15 GDPR.

Correction

If required, we will correct and/or complete your personal data.

The conditions under which this is made possible, and any other issues relating to your right to correction, can be found in Art. 16 GDPR.

Restriction of processing

You can ask us to limit the processing of your data.

The conditions under which this is made possible, and any other issues relating to your right to limit processing, can be found in Art. 18 GDPR.

Deletion

You can ask us to delete your data.

The conditions under which this is made possible, and any other issues relating to your right to have data deleted, can be found in Art. 17 GDPR.

Information in connection with the correction, restriction or deletion

On request, we would be happy to provide details on which parties receive your data and to whom we have communicated a correction, deletion or restriction of your data.

Anything else relating to your right to such information can be found in Art. 19 of the GDPR.

Objection

You can object to the processing of your data.

The conditions under which an objection is made possible can be found in Art. 21 GDPR.

Complaint to a supervisory authority

You have the right to make a complaint to a supervisory authority, if you believe that the processing of your data violates data protection law.

The supervisory authority responsible for our company is State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf.

If you have any questions or requests regarding data protection, you can contact us at any time at: dpo@convista.com.