Data Protection Declaration
I. Introduction
We are pleased that you are visiting our website. We respect your privacy. Data protection and data security when using our website are very important to us. With this privacy policy, we would like to inform you about the extent to which data is collected when you use our website and the purposes for which we use this data. We would also like to inform you about your rights in this regard.
II. General information
Below we provide information in accordance with Art. 13 GDPR on the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.
The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is
Officium GmbH, Norisstraße 10, 91257 Pegnitz, e-mail: info@officium.gmbh
Imprint: https://www.officium.gmbh/en/impressum/.
You can reach our data protection officer at
Bugl & Kollegen Gesellschaft für Datenschutz und Informationssicherheit mbH, Alexander Bugl, Eifelstraße 55, 93057 Regensburg, Germany, e-mail: kontakt@buglundkollegen.de
III. Accessing our website
If you use the website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– Amount of data transferred in each case
– Website from which the request comes
– Browser
– Operating system and its interface
– Language and version of the browser software.
We may also use another service provider to display the privacy policy. An embedding code is used, via which your IP address is transmitted to said service provider (preeco GmbH).
We process your data for a limited time on the basis of our legitimate interest in order to initiate a derivation of personal data in the event of unauthorized access or attempted access to local servers, to be able to display the data protection declaration properly and to be able to load our fonts used from our own server (Art. 6 para. 1 lit. f GDPR).
IV. Hosting
The hosting services we use (services for the operation and provision of the website) serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services that we use for the purpose of operating this online offering.
We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in the efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with. Art. 28 GDPR (conclusion of order processing contract).
V. Your rights as a data subject
If your personal data is processed as a user, you are considered a data subject in accordance with the GDPR. Data subjects have the following rights vis-à-vis the controller:
- Right to information (Art. 15 GDPR)
- Right to rectification or erasure of personal data (Art. 16, 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to notification in connection with the rectification or erasure of your personal data or the restriction of processing (Art. 19 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to revoke declarations of consent. The legality of the data processing carried out until the revocation remains unaffected by the consent valid to date. (Art. 7 para. 3 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Contact details of the supervisory authorities in the individual countries
VI. Use of cookies
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk and assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). They are used to make the website more user-friendly and effective overall.
We distinguish between two categories of cookies: (a) essential cookies, without which the functionality of our website would be limited, and (b) optional cookies for website analysis and marketing purposes.
The use of optional cookies is based on your consent (Art. 6 para. 1 lit. a GDPR).
We describe the optional cookies used on this website in detail in our cookie banner.
VII. Use of Google Maps
a. Type and purpose of processing
We also use Google Maps on this website. Google Maps is operated by Google Cloud EMEA Ltd. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. You can find more information about data processing by Google in the Google privacy policy. You can also change your personal data protection settings there in the data protection center. When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be assigned to your Google profile, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
b. Legal basis for processing
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
c. Data categories
IP address, other device-related data
d. Recipients
Recipients of the data are internal employees of Officium GmbH and Google as a processor.
e. Storage periods
Data will only be processed in this context as long as the corresponding consent has been given. It will then be deleted, provided there are no statutory retention obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.
f. Legal / contractual requirement
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.
g. Third country transfer
Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be ruled out.
h. Revocation of consent
If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website, or only to a limited extent. You can revoke your consent to the storage of your personal data at any time with effect for the future.
i. Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VIII. Online presence on LinkedIn
a. Type and purpose of processing
Thank you for your interest in our presence on LinkedIn. We would like to give you an overview of what data we collect, use and store there.
Social networks can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence on LinkedIn triggers numerous data protection-relevant processing operations. In detail:
If you are logged into your LinkedIn account and visit our social media presence, LinkedIn can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account on LinkedIn. In this case, this data is collected, for example, via cookies that are stored on your device or by recording your IP address. With the help of the data collected in this way, LinkedIn can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside LinkedIn. If you have an account on LinkedIn, interest-based advertising may be displayed on all devices on which you are logged in or have been logged in. Please also note that we cannot track all processing operations on LinkedIn. Further processing operations may therefore be carried out by LinkedIn. For details, please refer to LinkedIn’s terms of use and privacy policy.
b. Legal basis of the processing
The processing is carried out in accordance with Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interest in being able to contact our customers. The analysis processes initiated by LinkedIn may be based on different legal bases to be specified by LinkedIn (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).
c. Data categories
Please refer to LinkedIn’s privacy policy to find out what specific data is collected and how it is used:
LinkedIn: https://www.linkedin.com/legal/privacy-policy
d. Recipient
- Employees of your own company
e. Storage periods
After the end of the purpose and the end of the use of LinkedIn by us, the data collected in this context will be deleted.
f. Legal / contractual requirement
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to the content and services we offer.
g. Third country transfer
Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be ruled out.
h. Right of objection
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. If you wish to exercise your right to object, simply send an email to the above contact address.
i. Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
IX. Making contact
a. Nature and purpose of the processing
Contact details such as addresses, telephone numbers and e-mail addresses are provided on our website to enable quick contact and direct communication with us and the contact persons working for us. When you contact us, we process the personal data that you provide to us, depending on the means of communication you choose. This may include your full name, your address, the telephone number used, the e-mail address used and other personal data that you provide to us in the course of communication.
b. Legal basis of the processing
Your personal data is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR). By providing the contact details, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your request and for possible follow-up questions. If you contact us to request a quote, the data provided will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
c. Data categories
Surname, first name, e-mail address, telephone number, other data that you send us unsolicited
d. Recipient
The recipients of the data are internal employees of Officium GmbH.
e. Storage periods
Data will be deleted no later than 6 months after processing the request. If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.
f. Legal / contractual requirement
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.
g. Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Objection option
You have the option to object to the processing of your personal data at any time. You can inform us of your objection at any time using the contact details provided at the beginning of this privacy policy.
i. Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
X. Newsletter
a. Type and purpose of processing
Your data will only be used to send you the newsletter you have subscribed to by email. Your name is provided in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject. To receive the newsletter, it is sufficient to provide your e-mail address. When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail about circumstances that are relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances). We require a valid e-mail address for effective registration. We use the “double opt-in” procedure to check that a registration is actually made by the owner of an e-mail address. For this purpose, we log the subscription to the newsletter, the sending of a confirmation email and the receipt of the requested reply. No further data is collected. The data will be used exclusively for sending the newsletter and will not be passed on to third parties.
b. Legal basis for processing
On the basis of your express consent (Art. 6 para. 1 lit. a GDPR, Art. 7 GDPR in conjunction with § 6 TTDSG), we will regularly send you our newsletter or comparable information by e-mail to the e-mail address you have provided.
c. Data categories
E-mail address
d. Recipients
The recipients of the data are internal employees of Officium GmbH.
e. Storage periods
The data will only be processed in this context for as long as the corresponding consent is available. Thereafter, they will be deleted.
f. Legal / contractual requirement
The provision of your personal data is voluntary, solely on the basis of your consent. Unfortunately, we cannot send you our newsletter without your consent.
g. Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Revocation of consent
You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation via the contact option provided at the end of this data protection notice.
i. Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
XI. Duty to provide information in the application process
a. Type and purpose of processing
We process applicant data only for the purpose and in the context of the application process in accordance with the legal requirements. Applicant data is processed to fulfill our (pre-)contractual obligations in the context of the application process, insofar as data processing becomes necessary for us, e.g. in the context of legal proceedings.
The application process requires applicants to provide us with applicant data. If we offer an online form, the necessary applicant data is marked, otherwise it is derived from the job descriptions and generally includes personal details, postal and contact addresses and the documents relating to the application, such as cover letter, CV and certificates. Applicants can also voluntarily provide us with additional information. By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the type and scope set out in this privacy policy. If provided, applicants can send us their applications using an online form on our website. The data is transmitted to us in encrypted form in accordance with the state of the art. Applicants can also send us their applications by e-mail to bewerbung@officium.gmbh. Please note, however, that e-mails are generally not sent in encrypted form and applicants must ensure that they are encrypted themselves. We therefore cannot accept any responsibility for the transmission path of the application between the sender and receipt on our server and therefore recommend using an online form or sending by post. The data provided by applicants may be further processed by us for the purposes of the employment relationship in the event of a successful application.
b. Legal basis for processing
The processing of your data primarily serves to establish the employment relationship in accordance with Art. 88 para. 1 GDPR in conjunction with Section 26 para. 1 BDSG.
c. Data categories
First name, surname, address, e-mail address, telephone number, CV, photo, references, certificates, documents that you send us without being requested to do so
Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily communicated as part of the application process, their processing is additionally carried out in accordance with Art. 9 para. 2 lit. b GDPR (e.g. health data, such as severely disabled status or ethnic origin).
d. Recipients
Recipients of the data are internal employees of Officium GmbH and the management
e. Storage periods
The deletion takes place, subject to a justified revocation of the applicants or after the completion of the selection process. However, at the latest after the expiry of a period of 6 month(s) so that we can answer any follow-up questions regarding the application and meet our obligations to provide evidence under the Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived in accordance with tax law requirements.
f. Legal / contractual requirement
The provision of your personal data beyond the storage period, e.g. in order to be included in our applicant pool, is voluntary and based solely on your consent. You can revoke this consent to the storage of your personal data at any time with effect for the future.
g. Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Withdrawal of consent
If the application for a job offer is not successful, the applicant’s data will be deleted. Applicants’ data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. You can revoke your consent to the storage of your personal data at any time beyond the storage period with effect for the future. You can inform us of your revocation at any time via the contact option given at the beginning of this data protection notice.
i. Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.