Protection des données


Data protection declaration for the website of corporate benefits GmbH

The information in this declaration applies to the processing of personal data on or via our website and is intended in particular to inform you of the scope of processing, the purposes of processing, the recipient, legal bases, storage periods and your rights. Personal data is all information relating to an identified or identifiable natural person, i.e. a person (hereinafter also referred to as "data subject"), including for example your name, your address or your e-mail address. "Processing" of personal data means in particular the collection, storage, use and transmission of such data.

I. Name and address of the responsible party

The responsible party within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the EU Member States as well as other data protection regulations is:

corporate benefits GmbH
Schiffbauerdamm 40
10117 Berlin
Germany

Tel: +49 30 - 206 21 66 0
Fax: +49 30 - 206 21 66 20

E-mail: info@cb-gmbh.com
Web: https://www.corporate-benefits.de

II. Contact information of the data protection officer

TÜV Informationstechnik GmbH
TÜV NORD Group of Companies
Data Protection Agency
IT Security
Business Security & Privacy
Phone: +49 30 60902920
E-mail: datenschutzbeauftragter@cb-gmbh.com

III. General information on data processing

1. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 Para. 1 (a) EU General Data Protection Regulation (GDPR) serves as legal basis.

In processing personal data necessary for performance of a contract to which the data subject is a party, Art. 6 Para. 1 lit. b GDPR applies as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR applies as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Para. 1 (f) GDPR applies as the legal basis for processing.

2. Data deletion and storage duration

The data subject's personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the accessing device (computer, smartphone, tablet, etc.).

The following data is collected:

(1) Information about the browser type, the version used, installed plugins and the set language
(2) The operating system of the accessing device and its version
(3) The IP address of the accessing device
(4) Date and time of access and duration of stay on the site
(5) Loading time of the pages (average value for all pages visited during the session)
(6) Websites from which the system of the accessing device accesses our website
(7) Sites accessed by the accessing device's system through our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for temporary storage of data and log files is Art. 6 para. 1 (f) of the GDPR.

3. Purpose of data processing

Temporary storage of IP address by the system is necessary to enable delivery of the website to the user's computer. To this end, the user's IP address shall remain stored for the duration of the session. The data is stored in log files to ensure the website's functionality.

The data is also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context.

These purposes also encompass our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f GDPR.

4. Duration of retention

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for provision of the website, this will be undertaken once the respective session has ended.

If the data is stored in log files, this will be undertaken after 7 days at the latest. Further storage is possible. In this case, the user's IP addresses will be deleted or altered so that a tracing back to the accessing client would no longer be possible.

V. Language setting cookies

1. Description and scope of data processing

Our website uses cookies to store the user's language settings. Cookies are text files that are stored in the Internet browser or by the internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again.

The following data is stored and transmitted in the cookies:

- Language settings (of website and operating system)

b) Legal basis for the data processing

The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f GDPR.

c) Purpose of the data processing

We use these cookies for the adaptation of language settings. This is also our legitimate interest in the processing of personal data.

Duration of retention

Cookies are stored on the device with which you visit our website, and the device in turn transmits said information to our site. As a user, you have control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's features. If you do not change your cookie settings, the language setting cookie will be stored on your device for 12 months.

VI. Contact by e-mail or through the contact form

1. Description and scope of data processing

You can contact us via the e-mail addresses provided on our website. In this case, the user's personal data that is transmitted along with the email will be stored.

There is also a contact form on our website where you can send us enquiries or request offers.

With this form we collect the data for the respective form fields, e.g.:

(1) Name of your company
(2) Name
(3) Email address
(4) Town/city

In addition, the data that you may transmit to us in an optional personal message.

2. Legal basis for data processing

The legal basis for the processing of data transmitted in the course contact via e-mail or via the contact form is Art. 6 Para. 1 lit. f GDPR. If the contact is aimed at concluding a contract, the additional legal basis for the processing is art. 6 para. 1 lit. b of the GDPR.

3. Purpose of data processing

The processing of personal data is only carried out for the purpose of processing this contact request. This is also the necessary legitimate interest in the processing of the data.

4. Duration of retention

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data sent by e-mail or contact form, this is the case when the conversation with you has ended. The conversation will have ended when it is evident from the circumstances that the matter at hand has been conclusively resolved.

In the event of rejection, applicant data will be deleted no later than three months after notification of the rejection to the applicant.

If, in the course of e-mail communications, data is accumulated that we are obliged to store due to tax regulations, commercial law or other regulations, deletion will only take place after expiry of the respective statutory retention or storage periods. The legal basis for this storage is Art. 6 para. 1 lit. c, GDPR.

VII. Use of Google services

1. Web analysis by Google Analytics

a. Scope of personal data processing

Our website uses Google Universal Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Universal Analytics uses "cookies", which are text files stored on your computer that analyse how you use a website. The information generated by the cookie about the use of this website by the user is generally transmitted to and stored in a Google server in the USA. IP anonymisation has been enabled on this website, whereby a user's IP address will be truncated in advance by Google within Member States of the European Union, or other States party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, for compiling reports on website activity, and for providing to the website operator other services relating to the website activity and internet activity. The IP address transmitted by your browser as part of Google Universal Analytics will not be merged with any other data held by Google.

In addition, a so-called "user ID" is used. This is not assigned to a specific device, but to a specific user. The user ID itself is a unique, permanent and non-personalized string of characters. This allows for the behavior of the respective user on different end devices (smartphone, tablet, notebook, etc.) to be recorded. The user ID is assigned to a user if we can uniquely identify a user. This is usually only possible if they use a personalized area (e.g. login area). As soon as a user logs in for the first time, we will assign them a unique user ID. This user ID is transmitted to Google in connection with Google Universal Analytics and used as a pseudonym for communications with Google. Subsequently, the online behavior and the user ID are transferred to Google together where they are aggregated into profiles. Google only receives the user ID and not the information from the linked profile or other personal data of the user. The user profiles created in this way are made available to us in summarized form. We do not merge the user profiles submitted to us for a user ID with other personal data of the user.

b. Legal basis for processing personal data

The legal basis for processing the personal data of users is Art. 6 para. 1 lit. f GDPR.

c. Purpose of data processing

The processing of the data by Google Analytics enables us to analyse the surfing behavior of our users. We are in a position to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, our legitimate interest also lies in the processing of personal data. through anonymization of the IP address, users' interest in protecting their personal data is sufficiently taken into account.

d. Duration of storage and possibility of objection

Cookies are stored on the user's device and transmitted to our site. As a user, you have control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's features.

You can object to the data collection described above at any time with effect for the future by using the deactivation add-on for browsers from Google Analytics at http://tools.google.com/dlpage/gaoptout?hl=en

You can also prevent data collection by Google Universal Analytics by clicking this link . This sets an opt-out cookie which prevents any future collection of your data when visiting this website. The opt-out cookie applies only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

More information on Terms of Use and the Privacy Policy can be found at

http://www.google.com/analytics/terms/de.html or under

http://www.google.com/intl/de/analytics/privacyoverview.html and

https://support.google.com/analytics/answer/2838718?hl=en&ref_topic=2790009

e. Recipient of data and transfer to a third country

The recipient of the data is Google. For the cases in which personal data is transferred to the USA, a transfer to Google as a third country for the purpose of the GDPR is permissible according to Art. 44, 45 GDPR, as an appropriate level of statutory data protection exists for the USA with respect to this company.

On the basis of Art. 25 para. 6 EU Data Protection Dirctive (1995), the EU Commission has issued an adequacy decision in the form of the so-called EU-US Privacy Shield. The EU-US Privacy Shield is an intergovernmental agreement between the United States and the European Union. This agreement regulates the protection of personal data transferred from a member state of the European Union to the USA. A self-certification procedure by the companies under the supervision of the US authorities ensures that only companies that respect data protection standards equivalent to those of the EU may process personal data from the EU in the USA. Google has certified itself according to the requirements of the EU-US Privacy Shield. This ensures an adequate level of protection with respect to the designated recipients despite the lack of an adequacy resolution by the EU Commission for the purpose of Art. 45 GDPR. You can view the current certifications here: https://www.privacyshield.gov/list

2. DoubleClick by Google

a. Scope of personal data processing

We use DoubleClick by Google. This is a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Doubleclick by Google uses cookies to present advertisements that are relevant to you. For this your browser receives a pseudonymous identification number (ID). This is used to check which advertisements have been displayed or accessed with your browser. DoubleClick cookies only allow Google and its partner sites to display ads that are relevant to you based on your previous visits to our website or others on the Internet. The information generated by the cookies is transmitted by Google to a server in the USA for analysis and is stored there. Google will not merge this data with other data collected by Google.

b. Legal basis for processing personal data

The legal basis for processing the personal data of users is Art. 6 para. 1 lit. f GDPR.

c. Purpose of data processing

We use DoubleClick and the data processed in this context for advertising purposes, in particular to be able to show you targeted advertising. For these purposes, our legitimate interest also lies in the processing of personal data.

d. Duration of storage and possibility of objection

Cookies are stored on the user's device and transmitted to our site. As a user, you have control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's features.

You can also prevent Google from collecting the data generated by the cookies and relating to your use of the website and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://www.google.com/settings/ads/plugin

For more information about Google's privacy policies, please visit

https://www.google.com/intl/de/policies/privacy/

e. Recipient of data and transfer to a third country

The recipient of the data is Google. For the cases in which personal data is transferred to the USA, a transfer to Google as a third country for the purpose of the GDPR is permissible according to Art. 44, 45 GDPR, as an appropriate level of statutory data protection exists for the USA with respect to this company (cf. 1) e)).

3. Google AdWords Conversion Tracking

a. Scope of personal data processing

We use the Google AdWords conversion tracking. This is an analysis service of Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; "Google"). When you click an ad delivered by Google, a cookie for conversion tracking is stored on your computer. These cookies expire after 30 days and are not used for personal identification.

If you now visit our website and the cookie has not yet expired, we and Google can recognize that you clicked on the ad and were forwarded to our page.

In this context, we receive information about the total number of users who clicked on our ads and were redirected to that respective page. However, advertisers do not obtain any information that can be used to personally identify users.

b. Legal basis for processing personal data

The legal basis for processing the personal data of users is Art. 6 para. 1 lit. f GDPR.

c. Purpose of data processing

We use the data to compile statistics from which the success of AdWords campaigns can be inferred. For these purposes, our legitimate interest also lies in the processing of personal data.

d. Duration of storage and possibility of objection

Cookies are stored on the user's device and transmitted to our site. As a user, you have control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's features.

If you wish to deactivate cookies for conversion tracking, you can set your browser to block cookies from the following domain: "googleadservices.com".

For more information about Google's privacy policies, please visit

https://www.google.com/intl/de/policies/privacy/

e. Recipient of data and transfer to a third country

The recipient of the data is Google. For the cases in which personal data is transferred to the USA, a transfer to Google as a third country for the purpose of the GDPR is permissible according to Art. 44, 45 GDPR, as an appropriate level of statutory data protection exists for the USA with respect to this company (cf. 1) e)).

4. Google Maps

a. Scope of personal data processing

We use Google Maps on our website to display our location. Google Maps is operated by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; "Google"). When you access our contact page in which "Google Maps" is integrated, Google stores a cookie on your device in order to process user settings and data for display on Google Maps when displaying the page and the associated functions of Google Maps.

Furthermore, by using Google Maps, information about the use of this website including your IP address and the (starting) address entered in the route planner function could be transmitted to Google in the USA. When you visit our contact page, which contains Google Maps, your browser connects directly to Google's servers. The map content is transmitted by Google directly to your browser and integrated into the website. To the best of our knowledge, Google will collect the following data in this context:

  • The and time of the visit to the website concerned,
  • Internet address or URL of the website accessed,
  • IP address, (starting) address entered during route planning.

b. Legal basis for processing personal data

The legal basis for processing the personal data of users is Art. 6 para. 1 lit. f GDPR.

c. Purpose of data processing

We use Google Maps to show our location. For these purposes, our legitimate interest also lies in the processing of personal data.

d. Duration of storage and possibility of objection

Cookies are stored on the user's device and transmitted to our site. As a user, you have control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's features.

If you do not want Google to collect, process or use data about you via our website using Google Maps, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display.

For the purpose and scope of data collection and the further processing and use of the data by Google as well as your rights and setting options for the protection of your privacy, please refer to the data protection information from Google https://policies.google.com/privacy?hl=en.

e. Recipient of data and transfer to a third country

The recipient of the data is Google. For the cases in which personal data is transferred to the USA, a transfer to Google as a third country for the purpose of the GDPR is permissible according to Art. 44, 45 GDPR, as an appropriate level of statutory data protection exists for the USA with respect to this company (cf. 1) e)).

VIII. Other categories of recipients of personal data

For the provision of our website and the contact possibilities offered, we make use of various service providers, including host providers and e-mail providers, who process the data retained by them exclusively on our behalf as contract processors in the European Union in accordance with Art. 28 DSGVO.

IX. Rights of the data subject

If your personal data is processed, you are a data subject for the purpose of the DSGVO and you are entitled to the following rights vis-à-vis the person responsible (if applicable, provided other conditions regulated in the relevant regulations are met):

  • The right to information according to Art. 15 GDPR
  • The right to correction under Art. 16 GDPR
  • The right to cancellation ("right to be forgotten") according to Art. 17 GDPR
  • The right to restriction of processing according to Art. 18 GDPR
  • The right to information under Art. 19 GDPR
  • The right to data portability according to Art. 20 GDPR
  • The right of objection under Art. 21 GDPR
  • The right not to be subject to an automated decision according to Art. 22 GDPR
  • The right to revoke consent to the processing of personal data according to Art. 7 para. 3, GDPR

To assert these rights, please use the contact details provided at the beginning.

Without prejudice to any other administrative or judicial remedy, you also have the right to appeal to the competent supervisory authority if you believe that the processing of personal data concerning you is contrary to the GDPR.

 
Contactez-nous