Privacy Policy

Responsible body

The protection of your personal data is important to us. Our address is:

Faktor Zehn GmbH
Friedenheimer Brücke 21
80639 München

Our responsibility covers the general data protection regulation (hereinafter "GDPR").

Group Data Protection

Faktor Zehn GmbH is a subsidiary of ConVista Consulting AG, which as our IT service provider receives and processes your data for our purposes and also provides the data protection officer.

Data protection officer

You can contact our data protection officer at

ConVista Consulting AG
Datenschutzbeauftragter
Im Zollhafen 15/17
50678 Köln

and at dpo@convista.com.

Processing of your data

The following section provides information on how we process your personal data (hereinafter also referred to as "your data").

Your details

Every time you access a page from our website and every time you call up a file or send a form, your browser sends certain data to our server as part of its request. This data is used by the server, on an ad hoc basis, to provide the requested content and is stored in log files with server-side information about the (non-) fulfilment of the request.

The following data is processed in order to provide the requested content:

• Time (date and time) of the request
• URL of the requested content
• IP address
• Amount of data transmitted

The above information is saved in a log file with:

• Access status (file transferred, file not found, etc.)

Without the provision of this data, the use of the website is not possible.

Purposes of processing

The data are

• processed on an ad hoc basis to enable the use of the website, i.e. to provide  requested content, and
• stored in log files to allow:
• the website to operate, e.g. to detect and correct access errors, and
• to ensure the security of our IT systems, i.e. to be able to recognize security-relevant access and take countermeasures if necessary.

The access data is also evaluated for statistical purposes (see section "Matomo").

Data is not passed to third parties, either for commercial or for non-commercial purposes.

Legal basis of the processing

The legal basis for the processing of access data is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR is for the purposes described above.

Storage period

After seven days, at the latest, the log files are deleted or anonymized. Insofar as there is a suspicion of a security breach, relevant data will be retained for the duration of the prosecution of the potential attack and, if necessary, countermeasures will be taken, particularly where a legal claim is enforced.

Your details

Within the framework of website, there is the option to enter personal or business data (e.g. e-mail address, name and/or address) in order to be able to use the services described (e.g. to request a callback).

The data transmitted in this way is stored for the purpose of providing the service described (e.g. on an e-mail server for sending requested material).

The provision of the data is voluntary. Depending on the service, however, certain data may be necessary to enable us to provide the service. This data is then marked accordingly.

Purposes of processing

The data is, without exception, used only to provide you with the service described in each case.

Legal basis of the processing

The legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.

If you have separately consented to the processing of certain of your data, we will process this data (also), on the basis of this consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Storage period

The data will be deleted or anonymized, at the latest, when you no longer require the service described in each case, provided that there are no legal retention obligations to the contrary and/or we process your data lawfully for other purposes.

Your details

If you submit an application to our company, we will process the information we receive from you during the application process.

As a rule, this information includes your contact details, other information provided in your letter of application and CV, as well as certificates and other evidence of your qualifications and professional experience.

The provision of your data is voluntary. However, in order to be able to consider your application and assess your suitability for the position in question, we require in all cases your name, address, telephone number, and e-mail address, as well as an appropriate letter of application and your curriculum vitae, and, if applicable, evidence of the information provided, in particular references to your qualifications, work experience, and certifications.

We will only assess you according to your suitability for the position in question; you do not need to send us a photograph.

As a rule, we do not require any special categories of personal data as described in Art. 9 GDPR for the application process. In view of the sensitivity of such data, please do not send us this type of information. If, in exceptional cases, where such information is relevant to the application process, we will process it together with your other applicant data; for example, if you voluntarily provide us with information about a severe disability.

Purposes of processing

Your data will be processed, exclusively, for the purpose of carrying out the application procedure.

Legal basis of the processing

The legal basis for the processing is § 26 para. 1 S. 1 BDSG in conjunction with Art. 88 GDPR.

If you have separately consented to the processing of certain of your data, we process this data, on the basis of the consent pursuant to Art. 6 para. 1 lit. a) GDPR.

In the rare cases that we process special categories of your data, the legal basis for this processing is § 26 Abs. 3 BDSG in conjunction with Art. 88 GDPR.

Storage period

If we are currently unable to offer you employment, we will delete or anonymize your data no later than six months after the end of the application process.

However, if there is a prospect that a suitable vacancy may arise in the future, we would like to include you in our talent pool. If you agree to this at our request, we will store your data for as long as there is a prospect of a vacancy, up to a maximum of 10 years.

If you receive cost reimbursements or other tax-relevant transactions, the relevant accounting documents will also be retained, to fulfil the relevant retention obligations.

Recipient of your data

At Faktor Zehn, only the human resources department, the responsible employees of the department of the vacant position and, if required, members of the management and/or the board of directors have access to your data. In case of cost reimbursements, the accounting department will also have access to your data.

In order to manage your data efficiently, we use the recruiting tool "Personio" of Personio GmbH, Rundfunkplatz 4, 80335 Munich, Germany.

In certain cases, we must disclose your personal data to third parties, for example to our bank, if you receive a reimbursement of costs or to the post office, if we communicate with you by letter.

Your details

If you wish, we will inform you by e-mail about interesting job offers from us.

To do so, we need your title, first name, surname and e-mail address as well as information on the subject areas that interest you.

Purposes of processing

Your data will only be processed for the purposes of sending you information by e-mail about our job advertisements that may be of interest to you.

Legal basis of the processing

The legal basis for the processing is your consent (Art. 6 para. 1 lit. a) GDPR).

Revocation of your consent

You can revoke your given consent at any time in text form (e.g. by e-mail to info@faktorzehn.de). We will not process your data any further after the revocation.

Storage period

We will delete your data if you revoke your consent.

Your details

When you register for or purchase tickets for an event on our website, we collect certain information to enable you to attend the event. These are usually: title, first name, last name, company affiliation, position, business address, business email address, payment details.

The provision of the data is voluntary. However, depending on the event, certain data may be necessary to enable your participation in the event. We will then mark this data accordingly.

Purpose of processing

The data is processed in order to prepare, follow up and carry out the respective event and to enable your participation, i.e. generally to

• to plan the event,
• to settle the participation fee,
• to control your access authorization,
• to display name badges,
• to provide you with the services you have booked (such as a presentation stand) and
• to be able to provide information material before and after the event.

If you agree to this separately, we will keep a list of participants accessible to all participants, stating your title, first name, surname, company affiliation and position.

We also process your data to inform you about other events and other similar goods and services (see also the section "Business contacts").

Legal basis of the processing

The legal basis for the processing of your data in order to carry out the event is Art. 6 para. 1 lit. b) GDPR.

If, in addition, you have separately consented to the processing of certain of your data, we will process these data based on this consent in accordance with Art. 6 para. 1 lit. a) GDPR.

The legal basis for the processing of your data for the purposes of direct advertising is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the advertising of our goods and services for the purposes of direct advertising.

Objection / Revocation

You can object to the use of your data for advertising purposes at any time with effect for the future.

You can revoke your consent at any time with effect for the future.

You are welcome to inform us of your objection or revocation by e-mail to info@faktorzehn.de.

Storage period

Your data will be stored for the purpose of the event for up to six months after the end of the event. Billing data (invoice, etc.) will be stored in accordance with the statutory storage obligations.

Your data will also be stored for the purposes of direct advertising. If you object to this, your data will be deleted or anonymized.

Recipient of the data

If necessary, providers whose tools we use to handle the registration process or the purchase of corresponding tickets, e.g. "Eventbrite", will receive your data. If we use such tools, we will indicate this accordingly at the point. You can find information on the data protection of the respective providers on their websites; for Eventbrite, for example, here: https://www.eventbrite.de/support/articles/de/Troubleshooting/datenschutzrichtlinien-von-eventbrite?lg=de

If we use such a tool and you do not wish to use it, you can contact us by e-mail at info@faktorzehn.de.

Your details

If you provide us with your business contact data (e.g. first name, last name, company, position, address, e-mail address, telephone numbers) in the context of a business contact or if you provide this data in the context of corresponding forms on our websites, we will store this data in our global CRM system, indicating your presumed areas of professional interest.

The provision of your data is generally voluntary. In some cases, however, the provision of your personal data constitutes consideration for a service to be provided by us free of charge (e.g. for the provision of a white paper).

Purposes of processing

We and the other companies of the ConVista Group (see Recipients) use your contact data,

• for the fulfillment of contracts with you or your employer, e.g. in the context of the implementation of an IT project,
• upon your request for pre-contractual measures, e.g. for sending requested information about our range of services or an offer,
• for direct advertising of our own goods or services that are similar to the goods or services that you or your employer have requested or that we have provided to you or your employer. For example, by sending you specialist information on current topics, interesting service offers or offers for individual advice on your current professional and technical challenges,
• insofar as you have given us permission to process your contact data (e.g. for the Business Partner Program).

Legal basis for data processing

The legal basis for processing your data is as follows:

• Art. 6 para. 1 lit. b) Alt. 1 GDPR - insofar as we process your data to fulfil a contract, e.g. within the framework of a project
• Art. 6 para. 1 lit. b) Alt. 2 GDPR - insofar as we process your data, at your request, for pre-contractual measures, e.g. for sending requested information on our range of services or for making an offer
• Art. 6 para. 1 lit. f) GDPR - insofar as we use your data for direct advertising for our own goods or services, which are similar to the goods or services, which you have previously requested or, which we have provided to you. Our legitimate interest is to advertise our goods and services in terms of direct advertising.
• Art. 6 para. 1 lit. a) GDPR - insofar as you have given us your consent to the processing of your contact data.

Recipient

The CRM system is also operated by ConVista Consulting AG, Cologne for the other companies of the ConVista Group. These companies have access to your data and may process it for the purposes described above.

The ConVista Group includes all current and future companies affiliated with ConVista Consulting AG pursuant to §§ 15 ff. AktG or by means of far-reaching cooperation agreements. We will gladly provide the current list in each case upon request.

Objection / revocation of your consent

You can object to the use of your data for the aforementioned purposes at any time with future effect or revoke the consent you have given for this purpose.

Please send us your objections or revocation by e-mail to info@faktorzehn.de.

Storage period

The data will be deleted or anonymized at the latest if, and to the extent that, you have objected to the use of your data or revoked the consent you have given, unless storage obligations apply and/or we process your data for other lawful purposes.

Your details

Cookies are small text files that are sent from our server to your computer and stored on your computer. They contain information that can be read by our server and enhanced with additional information during the current and future visits to the website.

We use the following cookies on various pages of our website:

Session cookie

When you visit the website, a so-called session cookie is stored on your computer. This contains a sequence of numbers, assigned to the cookie, which enables the settings you have selected on the website to be stored on the server for the duration of your browser session. This enables you, for example, to receive all (sub) pages of the website in the language version you have chosen without having to select the language again for each of these pages.

Persistent cookie

So you do not see our banner reference about the use of cookies, once you have closed the banner and are working within the website itself, a cookie containing the required information is stored, when the banner is closed.

Matomo

Please cross-reference this privacy policy information regarding the setting of cookies with the section about our analytics tool Matomo.

Google Analytics

Please cross-reference this privacy policy information regarding the setting of cookies with the section about our analytics tool Google Analytics.

There is also the option of using our website without enabling cookies. In your browser’s settings, you can determine whether you wish to accept the cookie settings.  In their default settings, most browsers automatically accept them. Should you wish to prevent the setting of cookies, you can do so by changing your browser’s settings by clicking, for example, "Do not accept cookies" or similar. These settings can often be found under a menu item "Privacy" or similar. In this case, we would like to point out that you may not be able to use all functions of our internet pages to their full extent.

Purposes of processing

We use cookies to make visiting our website appealing and simple, and to enable you to use certain functionality, e.g. the ability to select the language once and for this setting to be applied when you visit our website.

Legal basis of the processing

The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in data processing is in line with the purposes described in the previous paragraph.

Storage period

Session cookie

The session cookie, and data assigned to the server, are deleted once the browser session has ended.

Persistent cookie

This cookie remains on your computer until the expiry of the set expiry period, unless you delete it. This period is 365 days.

Matomo

Please cross-reference this privacy policy information regarding the setting of cookies with the section about our analytics tool Matomo.

Google Analytics

Please cross-reference this privacy policy information regarding the setting of cookies with the section about our analytics tool Google Analytics.

Your details

Within the website’s framework, visitor access is evaluated using Matomo, an open source software, so that we can continuously improve our website. Matomo uses cookies and the transmitted access data (see "access data" section) to allow for an evaluation of your use of the website.

The following information is generated in relation to your use of the website:

• Your IP address, whereby this is truncated by the last byte immediately after processing, and before it is saved and is thus anonymized
• The country of origin of your internet provider
• The operating system and browser you are using and the selected resolution of your end device
• Whether you use a mobile or stationary device
• The (external) website from which you reached our website (referrer)
• The subpages of the website you have called up
• The time spent on (the subpages of) the website
• The frequency of accessing the (sub-pages of the) website

This creates a pseudonymous user profile, to which your visits are assigned. This information is stored on our server in Germany and is not passed to any third party. The information generated in the pseudonymous user profile is not used to personally identify the visitor of this website and is not merged with personal data about the bearer of the pseudonym.

You can prevent the setting of cookies by adjusting your browser software accordingly, as described under "Cookies".

Purposes of processing

We use Matomo to analyze the use of our website and to further optimize and develop the website and maintain its user-friendliness.

Legal basis of the processing

The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in this data is based on the purposes described in the previous paragraph.

Storage period

Data gathered from the one-off visit is deleted after 12 months.

Objection

If you are not in agreement with evaluation of the data about your visit to the website, you can object. Once an objection has been raised, a cookie will be set on your computer. Please remember that if this or all cookies stored on your computer are then deleted, you would need declare a new objection if you still wish to object.

Your details

Within the website’s framework, visitor access is evaluated using Google Analytics, a website analysis tool from Google, so that we can continuously improve our website.

The following information, in particular, is collected:

• IP address
• (sub)pages called up
• Your behaviour whilst using the website (for example clicks, scrolling behaviour and dwell time)
• Your approximate location (country and city)
• Technical information such as browser, internet provider, end device and screen resolution
• Source of your visit (i.e. via which website or advertising medium you came to us)

You can prevent the setting of cookies by adjusting your browser software accordingly, as described under "Cookies".

Your IP address is recorded to ensure the security of the analysis service and to provide us with information about the country, region or city from which you are accessing the site. However, your IP address is shortened in the course of the collection even before storage and thus your data is pseudonymized.

Purposes of processing

We use Google Analytics to analyse the use of our website and to further optimize and develop the website and maintain its user-friendliness. In also helps to ensure the presentation of our website and our range of services are optimized.

Legal basis of the processing

The legal basis for the processing is your consent according to Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in this data is based the purposes described in the previous paragraph.

Storage period

Data from a one-off visit is deleted after 14 months.

Recipient of your data

Google Analytics is provided by Google LLC, USA This company receives your data in order to provide the analytics service to us.

Transfer to third countries

Your data will be transferred to the USA as described above in the section "Recipients of your data"; there is no data protection law there comparable to that of the EU. Data protection agreements including the so-called "standard contractual clauses" of the EU have been concluded with Google in this regard. In addition, your data will be pseudonymized (see section "Your data").

Objection

If you are not in agreement with the analysis of the data gathered from your website visit, you can opt-out of this by preventing cookies, in the cookie settings within your browser, as described previously under the section "Cookies". You also have the option of using a browser add-on to deactivate Google Analytics. You can download this here: tools.google.com/dlpage/gaoptout.

Please note that you need to implement these measures separately for each browser software and/or terminal device you use, if you so wish.

Your details

On some pages of our website we have embedded videos from YouTube (a Google company). The videos are stored on www.YouTube.com and can be played directly from our website. (Only) If you click on the information window above the video, a connection to YouTube is established and the video is loaded. We have integrated the videos in the so-called "extended data protection mode" so that, according to YouTube, no cookies are set to collect user activity. Nevertheless, various personal data are transmitted directly to YouTube when the connection is established. We have no influence on the data transmission and the further use of your data.

If you activate the connection, YouTube receives, among other things, the information that you have accessed the corresponding subpage of our website. In addition, the data listed in the section "Access data" of this privacy policy will be transmitted. This occurs regardless of whether you are logged in to YouTube via a user account or whether no user account exists. If you are logged in to YouTube/Google, this and other data may be assigned directly to your account. YouTube/Google may store your data as usage profiles and use them, among other things, for the purposes of advertising, market research and/or demand-oriented design of its website.

For more information on data processing by YouTube/Google, please refer to their privacy policy(s): https://policies.google.com/privacy?hl=de.

Purposes of processing

The integration of the videos is done to offer you the possibility to perceive interesting information directly within our website.

Legal basis of the processing

The legal basis for the processing is your consent according to Art. 6 para. 1 lit. f) GDPR. You grant this consent by clicking on the information window above the video.

Storage period

We do not store any of the data mentioned here. Regarding our storage of usage and analytics data, please read the related points of the privacy policy.

Recipient of your data

YouTube is provided by YouTube LLC, USA a company of Google Inc, USA. These companies receive your data (only) when you activate the connection as described in the section "Your data".

Transfer to third countries

Your data will be transferred as described above in the section "Recipients of your data" to the USA and, if applicable, to other third countries outside the EU/EEA in which no data protection law comparable to the EU exists.

Your details

On some pages of our website we have embedded videos from Vimeo. The videos are stored on www.vimeo.com and can be played directly from our website. (Only) If you click on the information window above the video, a connection to Vimeo is established and the video is loaded. We have integrated the videos in such a way that, according to Vimeo, no cookies are set to collect user activity. Nevertheless, when the connection is established, various personal data are transmitted directly to Vimeo. We have no influence on the data transmission and the further use of your data.

If you activate the connection, Vimeo receives, among other things, the information that you have accessed the corresponding subpage of our website. In addition, the data listed in the section "Access data" of this privacy policy will be transmitted. This occurs regardless of whether you are logged in to Vimeo via a user account or whether (k)a user account exists. If you are logged in to Vimeo, this and other data may be assigned directly to your account. Vimeo may store your data as usage profiles and use them, among other things, for the purposes of advertising, market research and/or demand-oriented design of its website.

For more information on data processing by Vimeo, please see their privacy policy(s): vimeo.com/privacy.

Purposes of processing

The integration of the videos is done to offer you the possibility to perceive interesting information directly within our website.

Legal basis of the processing

The legal basis for the processing is your consent according to Art. 6 para. 1 lit. f) GDPR. You grant this consent by clicking on the information window above the video.

Storage period

We do not store any of the data mentioned here. Regarding our storage of usage and analytics data, please read the related points of the privacy policy.

Recipient of your data

Vimeo is provided by Vimeo LLC, USA. This company receives your data (only) when you activate the connection as described in the section "Your data".

Transfer to third countries

Your data will be transferred as described above in the section "Recipients of your data" to the USA and, if applicable, to other third countries outside the EU/EEA in which no data protection law comparable to the EU exists.

Your details

As part of the website, we use the live chat Tidio. This tool allows users to contact selected Faktor Zehn employees directly.

To contact us via the chat tool, we need your e-mail address and a name. We also receive the information you enter into the chat tool.

You can prevent the tool from working by adjusting your browser software settings or by turning off the tool in our cookie settings. If you would like to contact us in another way than via the chat tool, please click on the menu item "Contact" in the lower website area.

Purposes of processing

We use Tidio to allow our users to submit a direct support request to us in real time and to get in direct contact with interested parties of any kind.

Legal basis of the processing

The legal basis for the processing is your consent according to Art. 6 para. 1 lit. f) GDPR.

Storage period

Your request will be deleted after three months.

Recipient of your data

The chat tool is provided by Tidio LLC, San Fransisco.

A direct connection to the services is established. At least the IP address and device-related information is collected and used. If applicable, Tidio sets cookies on your device. Read here how Tidio handles your data.

Transfer to third countries

Your data will be transferred as described above in the section "Recipients of your data" to the USA and, if applicable, to other third countries outside the EU/EEA in which no data protection law comparable to the EU exists.

Objection

You can revoke your consent at any time with effect for the future. To do so, simply deactivate the chat tool in our cookie query.