Information on data protection
With this data protection notice we inform you about how we handle your personal data and about your rights under the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Helpling GmbH & Co. KG (hereinafter referred to as “we” or “us”) is responsible for data processing.
If you have any questions or suggestions regarding this information or would like to contact us to assert your rights, please address your request to:
Helpling GmbH & Co. KG
Keyword Data Protection
Jägerstraße 67, 10117 Berlin, Germany
Email: datenschutz@helpling.de
The term “personal data” in data protection law refers to all information that relates to a specific or identifiable person. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. We only process data on the basis of legal permission. We only process personal data with your consent (Section 15 Paragraph 3 of the Telemedia Act – Telemedia Act (“TMG”) or Article 6 Paragraph 1 Letter a of GDPR), to fulfill a contract to which you are a party, or at your request to carry out pre-contractual measures (Article 6 Paragraph 1 Letter b of GDPR), to fulfill a legal obligation (Article 6 Paragraph 1 Letter c of GDPR) or if processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data prevail (Article 6 Paragraph 1 Letter f of GDPR).
If you apply for a vacant position in our company, we will also process your personal data to decide whether to establish an employment relationship (Section 26 Paragraph 1 Sentence 1 BDSG).
Unless otherwise stated in the following information, we only store the data for as long as it is necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations. Such statutory retention periods can arise in particular from commercial or tax law regulations. From the end of the calendar year in which the data was collected, we will store such personal data contained in our accounting data for ten years and personal data contained in commercial letters and contracts for six years. In addition, we will store data in connection with consents that require proof and with complaints and claims for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to processing for this purpose.
4. Categories of recipients of the data
We use contract processors to process your data. The processing operations carried out by such contract processors include, for example, hosting, maintenance and support of IT systems, customer and order management, order processing, accounting and billing, marketing measures or file and data storage destruction. A contract processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the data controller. Contract processors do not use the data for their own purposes, but carry out data processing exclusively for the controller and are contractually obliged to ensure suitable technical and organizational measures for data protection. In addition, we may transmit your personal data to bodies such as postal and delivery services, your house bank, tax consultants/auditors or the tax authorities.
5. Data transfer to third countries
Visiting our website may involve the transfer of certain personal data to third countries, i.e. countries in which the GDPR is not applicable law. Such a transfer is permissible if the European Commission has determined that an adequate level of data protection is offered in such a third country. If such an adequacy decision by the European Commission is not available, personal data will only be transferred to a third country if suitable guarantees are in place in accordance with Art. 46 GDPR or if one of the requirements of Art. 49 GDPR is met.
Unless otherwise stated below, we use the EU standard contractual clauses for the transfer of personal data to processors in third countries as appropriate guarantees: https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX%3A32010D0087
If you consent to the transfer of personal data to third countries, the transfer will be carried out on the legal basis of Art. 49 Para. 1 Letter a of GDPR.
6. Processing when exercising your rights
If you exercise your rights in accordance with Articles 15 to 22 of the GDPR, we will process the personal data transmitted for the purpose of implementing these rights and in order to be able to provide evidence of this. We will process data stored for the purpose of providing information and preparing it only for this purpose and for the purposes of data protection control and will otherwise restrict processing in accordance with Article 18 of the GDPR.
This processing is based on the legal basis of Art. 6 Para. 1 Letter c GDPR in conjunction with Art. 15 to 22 GDPR and Section 34 Para. 2 BDSG.
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
- In accordance with Art. 15 GDPR and Section 34 BDSG, you have the right to request information as to whether or not we process personal data concerning you and, if so, to what extent.
- You have the right to request that we correct your data in accordance with Art. 16 GDPR.
- You have the right to request that we delete your personal data in accordance with Art. 17 GDPR and Section 35 BDSG.
- You have the right to have the processing of your personal data restricted in accordance with Art. 18 GDPR.
- In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transmit this data to another controller.
- If you have given us separate consent to data processing, you can revoke this consent at any time in accordance with Art. 7 Paragraph 3 GDPR. Such a revocation does not affect the legality of the processing that was carried out on the basis of the consent up to the revocation.
- If you believe that the processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
In accordance with Art. 21 Para. 1 GDPR, you have the right to object to processing based on the legal basis of Art. 6 Para. 1 Letter e or f GDPR for reasons arising from your particular situation. If we process personal data about you for the purpose of direct advertising, you can object to this processing in accordance with Art. 21 Para. 2 and Para. 3 GDPR.
You can reach our data protection officer using the following contact details:
Email: datenschutzanwalt@helpling.de
Herting Oberbeck Datenschutz GmbH
Hallerstr. 76, 20146 Hamburg
https://www.datenschutzkanzlei.de
II. Data processing on our website
When you use the website, we collect information that you provide yourself. In addition, when you visit the website, we automatically collect certain information about your use of the website. In data protection law, the IP address is also generally considered personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.
1. Processing of server log files
When using our website for purely informational purposes, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). This includes as standard: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 Paragraph 1 Letter f GDPR. This processing serves the technical administration and security of the website. The stored data is deleted after seven days unless there is reasonable suspicion of illegal use based on concrete evidence and further examination and processing of the information is necessary for this reason. We are not in a position to identify you as the data subject based on the stored information. Art. 15 to 22 GDPR therefore do not apply in accordance with Art. 11 Paragraph 2 GDPR, unless you provide additional information that enables your identification in order to exercise your rights set out in these articles.
2. Special information for users
In the following, we describe which data processing may occur when you book household-related services or building cleaning via our portal and commission service providers.
a. Booking of household services
To use our service (for brokerage), you must register and create a user profile. This profile is required to identify service providers who, based on their proximity to the place where the service is provided and their other information, may be considered as providers of household-related services to you.
We collect the following necessary information:
First name, last name, email address, telephone number, street, house number, additional address, postal code, city, information for the purpose of your identification if necessary, preferred payment method (hereinafter jointly referred to as “user profile data”); type of booked service and additional services as well as date, time and duration of the booked service in hours; information on whether the service is to be provided once or repeatedly (hereinafter jointly referred to as “booking data”); time of creation and updating of a user profile.
You also have the option of providing the following information voluntarily:
Presence of pets in your apartment, location for disposal of garbage, availability of parking spaces, your details of any special requirements (such as areas with special priority or rooms and areas to be omitted when providing the service), your requirements (if any) regarding cleaning products to be used, your details regarding how the partner will get into the apartment (key will be left or you will be at home).
We transmit the user profile data, booking data and all other additional information voluntarily provided by you for the purpose of arranging household-related services to the service providers you selected when booking. If no service provider is selected or none of the service providers you selected confirms the booking to provide the service at the desired location and at the desired time, we will forward your user profile data, your booking data and all other information voluntarily provided by you for the purpose of arranging household-related services to other service providers not selected by you who can accept your request.
If, as a result of our mediation, a contract for household-related services is concluded between you and a service provider, we will also process your user profile data for booking support, fulfillment, processing, billing and aftercare of the respective booked service as well as contracts including other related actions such as invoices, credit notes, complaints, cancellations, etc.
In addition, we use the user profile data, in particular the telephone number, to send an automatic message to notify and remind you of the upcoming service.
Furthermore, we use your booking data to the extent necessary to create invoices for the services provided by the partner and any subsequent support that may be required (e.g. in the event of inadequate service provision by the service provider) as well as to bill our commission to the service provider.
In addition, depending on the payment method you have chosen, we will transmit your credit card details (card number, validity period, security number) or your bank details (hereinafter also referred to as “payment data”), which we collect in connection with the booking, to the licensed payment service provider Stripe Payments Europe Limited, The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland (hereinafter referred to as “payment service provider”), which cooperates with us for the purposes of payment processing and which collects, processes and uses the payment data for the purposes of payment processing or collecting the debt from your account. We do not store this payment data any further.
As part of our service provision, we store the services you have booked and the services provided to you by a service provider, including any invoices created, in your user profile in order to enable you to access this information at a later date.
The data processing described is based on the legal basis of Art. 6 Para. 1 S. 1 b GDPR.
In the event that no service provider has been selected or none of the service providers you have selected has confirmed the booking, we will forward the data provided to other service providers not selected by you who can accept your request for the purpose of arranging the household-related services. This is done on the legal basis of Art. 6 Para. 1 Clause 1 f GDPR. The forwarding is done in the interest of the other service providers in order to offer you the household-related services you have requested.
b. Advertising consent for your user profile data
If you have given your consent to be contacted by us for advertising purposes, we will process and use your user profile data, booking data and additional information as well as your access times to your user profile in order to better understand your user habits and to send you information about other services that may be of interest to you. You can revoke your consent to the use of your data for advertising purposes (e.g. newsletter) at any time using the unsubscribe link in our email or by sending an email to datenschutz@helpling.de. The legal basis for this processing is Art. 6 Para. 1 Clause 1 a GDPR.
c. Change of your profile data / deletion
You can also change your additional information and user profile data in your user profile at any time. If you delete your user profile on the platform, we will block your data and then delete it.
d. Booking of building cleaning
Below we describe which data processing may occur if you would like to receive an offer for building cleaning via our portal. The service is provided by BAT Business Services GmbH, to whom your request from our form is forwarded. We transmit your specified contact details to BAT Business Services GmbH for the purposes of arranging building cleaning. You can then book the desired building cleaning on https://www.tigerfacilityservices.com/de-de, the website of BAT Business Services GmbH. The data processing described is based on the legal basis of Art. 6 Para. 1 Clause 1 b GDPR.
3. Special information for service providers
If you register as a service provider on the platform, we will process the following data from you in order to initiate and, if necessary, conclude a contract with you for the provision of your household-related services:
First name, last name, email address, street, house number, postcode, city, nationality, date of birth, telephone number and information for the purpose of identifying you if necessary (hereinafter jointly referred to as “partner profile data”), information on whether you have a business license and whether or not you have experience in the services you offer, information on the means of transport available to you, your bank account and your language skills, information on the possible geographical area of operation and the possible time scope of the activity and the possible contact with you (mobile phone, internet-enabled mobile phone, access to the internet). In addition, you can also insert / upload a photo and a short description about yourself.
We store your profile data and such information in a profile accessible to you for service providers that arise in the context of billing for services we arrange. Some of the stored profile data is also published on the platform, in particular your first name, photo and short description.
The profile data for service providers is used by us for the fulfillment, processing and invoicing of the booked service and contracts, including other related actions such as invoices, credit notes, complaints, cancellations, etc. and is stored in the respective profile.
In addition, we use the profile data of the cleaners, in particular the telephone number, to send an automatic message to notify and remind them of the upcoming cleaning.
The data processing is based on the legal basis of Art. 6 Para. 1 S. 1 b GDPR.
b. Change of your profile data / deletion
You can also change your partner profile data in your user profile at any time. If you delete your profile on the platform, we will first block your data and then delete it.
As a registered user or service provider, you have the opportunity to submit reviews on our platform. As a user, you can rate service providers on the household-related services they have provided. As a service provider, you can rate the customer relationship with users for whom you have provided household-related services.
The rating is given by awarding 1-5 stars. A comment can also be added. The ratings are displayed in the respective profile of the user or service provider.
The legal basis for the processing of personal data associated with the submission and publication of reviews is Art. 6 Para. 1 Clause 1 f GDPR. The processing serves our legitimate interest in creating the greatest possible transparency for users and service providers.
The reviews are generally processed until the profile used is deleted from the platform.
5. Communication via our platform
We offer users and commissioned service providers the opportunity to communicate with each other directly via our platform. In order to be able to offer this service, it is necessary for us to store and process the communication content. The service is part of the platform we provide. The legal basis for data processing is therefore Art. 6 Para. 1 Letter b GDPR. The use of this service is voluntary.
We treat this communication data confidentially. We generally do not take note of the content. However, we reserve the right to manually check the communication content in individual cases if there are indications that the service is being used to circumvent our platform or otherwise engage in fraudulent behavior or if the use otherwise violates our terms and conditions or legal regulations. In this case, the processing of the data by us is based on the legal basis of Art. 6 Para. 1 Letter f GDPR and serves our legitimate interest in preventing misuse of our platform.
The communication content is stored until the profile used is deleted from the platform.
If you send us a message via the contact email provided, we will process the transmitted data for the purpose of answering your request.
If your request is related to the conclusion or implementation of a contract with us, Art. 6 Para. 1 Letter b GDPR is the legal basis for data processing. Otherwise, we process the data based on our legitimate interest in contacting the person making the request. The legal basis for data processing is then Art. 6 Para. 1 Letter f GDPR.
a. Registration and deregistration
We offer the option of registering for our newsletter on our website. To register for the newsletter, you need a valid email address and your name. To verify your email address, you will first receive a registration email that you must confirm via a link (double opt-in).
We send you our newsletter based on your consent (Art. 6 Para. 1 Clause 1 a GDPR). You have the option of unsubscribing from the newsletter at any time or revoking your consent with effect for the future. To do so, simply use the unsubscribe link included in every email or one of the contact channels mentioned above (e.g. datenschutz@helpling.de).
When you register for the newsletter, we also save your IP address and the date and time of registration. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation to document your consent (Art. 6 Para. 1 c GDPR in conjunction with Art. 7 Para. 1 GDPR).
We also analyze the reading behavior and opening rates of our newsletter. For this purpose, we collect and process pseudonymized usage data, which we do not combine with your email address or IP address.
The legal basis for the analysis of our newsletter is Art. 6 Para. 1 Clause 1 f GDPR and the processing serves our legitimate interest in optimizing our newsletter. You can object to this at any time by contacting one of the contact channels listed above.
We use the newsletter service MailChimp from The Rocket Science Group, LLC 675 Ponce de, Leon Avenue NE, Suite 5000, Atlanta, GA 30308, USA (“MailChimp”). Mailchimp acts as a processor for us, is strictly bound by instructions and is contractually obliged to ensure adequate technical and organizational measures for data protection.
We offer a blog on our website in which we publish articles on various topics. Our blog has a comment function, the use of which requires the provision of personal information. If you leave a comment, it will be published with the user name you provided and associated with the respective article. We therefore recommend that you use a pseudonym when choosing your user name instead of your real name. To use the comment function, you must provide the user name you have chosen and your email address. All other information you provide is voluntary. The legal basis for data processing in this regard is Art. 6 Paragraph 1 Sentence 1 b) GDPR.
If you leave a comment, we will save your IP address in addition to the aforementioned data. The legal basis for storing your email address and IP address is Art. 6 Paragraph 1 Sentence 1 f GDPR. We will only use your email in the event that a third party reports a comment to us as illegal and we may need to investigate the incident. We save your IP address for the purpose of being able to defend ourselves against third-party claims in the event that you publish illegal content. We will save your email address as long as your comment is publicly visible. We will delete your IP address one week after you have published the comment.
As a general rule, we do not check submitted comments before publication. However, we expressly reserve the right to delete your comments if third parties object to them as being unlawful. You can object to this storage of the above data at any time. In this case, however, we would have to remove your comment from our website.
You have the opportunity to apply for open positions in our company via our website. To do this, we collect personal data from you, including in particular your name, CV, application letter and other content provided by you. To select our applications, we use Personio GmbH from Munich, Germany, as a software partner, which works for us solely and subject to instructions in accordance with the legal requirements for order processing. Please note the additional data protection provisions on the careers pages.
Your personal application data will be collected, stored, processed and used exclusively for purposes related to your interest in current or future employment with us and the processing of your application. Your online application will only be processed and acknowledged by the relevant contact persons at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data.
If we are unable to offer you employment, we will retain the data you have submitted for up to six months after the application process has been completed for the purpose of answering questions relating to your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly consented to longer storage.
The legal basis for data collection is Section 26 Paragraph 1 Sentence 1 of the Federal Data Protection Act (BDSG). If we keep your applicant data for a period of six months and you have expressly consented to this, we would like to point out that this consent can be revoked at any time in accordance with Article 7 Paragraph 3 of the GDPR. Such a revocation does not affect the legality of the processing that was carried out on the basis of the consent up to the revocation.
We use cookies and similar technologies (“cookies”) on our website. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser used and can be recognized by web servers. You have full control over the use of cookies through your browser. You can delete cookies at any time in the security settings of your browser. You can object to the use of cookies in general or in certain cases through your browser settings.
The use of cookies is partly technically necessary for the operation of our website and is therefore permitted without the consent of the user. We may also use cookies to offer special functions and content as well as for analysis and marketing purposes. These may also include cookies from third-party providers (so-called third-party cookies). We only use such technically unnecessary cookies with your consent in accordance with Section 15 Paragraph 3 of the Telemedia Act (TMG) or Article 6 Paragraph 1 Letter a of the GDPR. You can find further information on the storage period of individual cookies in the settings of our Consent Management Tool.
This website uses a consent management banner to control cookies. The consent banner enables users of our website to give consent to certain data processing procedures or to withdraw consent that has been given. By clicking the “I accept” button or by saving individual cookie settings, you agree to the use of the associated cookies. The legal basis for data protection is your consent within the meaning of Art. 6 Para. 1 Letter a of the GDPR.
The banner also helps us to provide evidence of the declaration of consent. To do this, we process information about the declaration of consent and other log data related to this declaration. Cookies are also used to collect this data.
The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation to document your consent (Art. 6 Para. 1 Letter c in conjunction with Art. 7 Para. 1 GDPR).
You can revoke your consent for cookies here .
We use the Google Analytics service provided by Google Ireland Limited (Google Ireland/EU) on our website.
Google Analytics is a web analytics service that helps us collect and analyze data about the behavior of visitors to our website. Google Analytics uses cookies to analyze the use of our website. Personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers, and information about interaction with our website is processed.
Some of this data is information that is stored on the device you are using. In addition, other information is also stored on the device you are using via the cookies used. Such storage of information by Google Analytics or access to information that is already stored on your device only takes place with your consent.
Google Ireland will process the data collected in this way on our behalf in order to evaluate the use of our website by users, to compile reports on the activities within our website and to provide us with other services related to the use of our website and the internet. Pseudonymous user profiles of the users may be created from the processed data.
Cookies are set and personal data is processed further as described here with your consent. The legal basis for data processing in connection with the Google Analytics service is therefore Art. 6 (1) (a) GDPR. You can revoke this consent at any time with effect for the future.
The personal data processed on our behalf to provide Google Analytics may be transferred to any country in which Google Ireland or Google Ireland’s subcontractors maintain facilities. The legal basis for this transfer is the standard contractual clauses for the transfer of personal data to processors in third countries pursuant to Art. 46 Para. 2 Letter c GDPR.
We only use Google Analytics with activated IP anonymization. This means that the user’s IP address will be shortened by Google Ireland within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. The IP address transmitted by the user’s browser will not be merged with other data.
We use the Google Universal Analytics variant. This enables us to assign interaction data from different devices and from different sessions to a unique user ID. This allows us to put individual user actions into context and analyze long-term relationships.
The data on user actions is stored for a period of 14 months and then automatically deleted. Data whose storage period has expired is automatically deleted once a month.
You can also prevent the collection of information generated by the cookie by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout .
We use the Hotjar service provided by Hotjar Ltd. (Malta/EU) on our website.
Using Hotjar, we can analyze movements on our website using so-called “heat maps.” This allows us to see, for example, how far users scroll and which buttons they click and how often. The tool also makes it possible to obtain feedback directly from website users. This gives us valuable information to make our website even faster and more user-friendly.
With Hotjar we can only track which buttons are clicked, the mouse path, how far is scrolled, the screen size of the device, device type and browser information. We also receive information about your geographical location (country) and the preferred language for displaying our website. Areas of the websites in which personal data from you or third parties is displayed are automatically hidden by Hotjar and are therefore never traceable by the tool.
Hotjar uses cookies and other technologies to collect data about the behavior of our users and their devices, in particular the device’s IP address (recorded and stored only in anonymized form during your website usage), screen size, device type (Unique Device Identifiers), information about the browser used, location (country only), preferred language for displaying our website.
Cookies are set and personal data is processed further as described here with your consent. The legal basis for data processing in connection with the Hotjar service is therefore Art. 6 (1) (a) GDPR. You can revoke this consent at any time with effect for the future.
For more information about the Hotjar service and Hotjar’s privacy policy, please visit Hotjar’s help page .
We use the Visual Website Optimizer (VWO) service on our website for optimization and personalization (primarily for conducting A/B tests). VWO is provided by Wingify Software Pvt Limited (Wingify/India).
VWO uses cookies and other technologies to collect data about the behavior of our users and their devices, in particular click paths, (anonymized) IP addresses, duration of the website visit, browser information, location, date and time of the visit, device operating system.
Cookies are set and personal data is processed further as described here with your consent. The legal basis for data processing in connection with the VWO service is therefore Art. 6 (1) (a) GDPR. You can revoke this consent at any time with effect for the future.
We use the online advertising program Google Ads from Google Ireland Limited (Ireland/EU), which we use to place advertisements on the Google search engine. When you access our website via a Google ad, Google places a cookie on your device (“conversion cookie”). Each Google Ads customer is assigned a different conversion cookie, so that the cookies are not tracked across the websites of different Ads customers. The information obtained using the cookie is used to create conversion statistics. This tells us the total number of users who have clicked on one of our Google ads. However, we do not receive any information that can be used to personally identify users.
Further information on these processing activities, the technologies used, stored data and the storage period can be found in the settings of our Consent Management Tool. Processing only takes place with your consent in accordance with Art. 6 Para. 1 Letter a of GDPR. You can revoke your consent via our Consent Management Tool.
We use the Facebook Pixel on our website, a Facebook Business tool from Facebook Ireland Limited (Ireland, EU). Information about the contact details of Facebook Ireland and the contact details of the data protection officer of Facebook Ireland can be found in the data policy of Facebook Ireland at https://www.facebook.com/about/privacy.
The Facebook pixel is a JavaScript code snippet that allows us to track the activities of visitors to our website. This tracking is called conversion tracking. The Facebook pixel collects and processes the following information (so-called event data):
- Information about the actions and activities of visitors to our website, such as searching for and viewing a product or purchasing a product;
- Specific pixel information such as the pixel ID and the Facebook cookie;
- Information about buttons clicked by visitors to the website;
- Information present in HTTP headers, such as IP addresses, information about the web browser, the location of the page and the referrer;
- Information about the status of deactivation/restriction of ad tracking.
Some of this event data is information that is stored on the device you are using. Cookies are also used via the Facebook pixel to store information on the device you are using. Such storage of information by the Facebook pixel or access to information that is already stored on your device only takes place with your consent.
Tracked conversions appear in our Facebook Ads Manager and Facebook Analytics dashboard. We may use tracked conversions there to measure the effectiveness of our ads, set custom audiences for ad targeting, run Dynamic Ads campaigns, and analyze the effectiveness of our website’s conversion funnels. The features we use through the Facebook pixel are described in more detail below.
a. Processing of event data for advertising purposes
The event data collected via the Facebook pixel is used to target our ads and improve ad delivery, personalize features and content, and improve and secure Facebook products.
For this purpose, event data is collected on our website using the Facebook pixel and transmitted to Facebook Ireland. This only happens if you have given your prior consent. The legal basis for the collection and transmission of personal data by us to Facebook Ireland is therefore Art. 6 Para. 1 Letter a of GDPR.
This collection and transmission of event data is carried out by us and Facebook Ireland as joint controllers. We have entered into an agreement with Facebook Ireland on processing as joint controllers, which sets out the distribution of data protection obligations between us and Facebook Ireland. In this agreement, we and Facebook Ireland have agreed, among other things,
- that we are responsible for providing you with all information in accordance with Art. 13, 14 GDPR regarding the joint processing of personal data;
- that Facebook Ireland is responsible for enabling the rights of data subjects pursuant to Art. 15 to 20 GDPR with regard to the personal data stored by Facebook Ireland after the joint processing.
You can access the agreement concluded between us and Facebook Ireland at https://www.facebook.com/legal/controller_addendum.
Facebook Ireland is solely responsible for the processing of the transmitted event data following transmission. For more information on how Facebook Ireland processes personal data, including the legal basis on which Facebook Ireland relies and the options for exercising your rights vis-à-vis Facebook Ireland, please see Facebook Ireland’s data policy at https://www.facebook.com/about/privacy.
b. Processing of event data for analysis purposes
We have also commissioned Facebook Ireland to prepare reports on the impact of our advertising campaigns and other online content (campaign reports) and to create analyses and insights about users and their use of our website, products and services (analyses) based on the event data collected via the Facebook pixel. For this purpose, we transmit personal data contained in the event data to Facebook Ireland. The personal data transmitted is processed by Facebook Ireland as our processor in order to provide us with the campaign reports and analyses.
Personal data will only be processed to create analyses and campaign reports if you have given your prior consent. The legal basis for this processing of personal data is therefore Art. 6 (1) (a) GDPR.
A transfer of data to Facebook Inc. in the USA cannot be ruled out. The legal basis for this transfer is the standard contractual clauses for the transfer of personal data to processors in third countries. Please note the information in the section “Data transfer to third countries”.
We use the Microsoft Advertising service from Microsoft Ireland Operations Limited (Ireland/EU) (formerly Bing Ads) on our website. Microsoft Advertising is an online marketing service that uses the Universal Event Tracking (UET) tool to help us target advertisements via the Microsoft Bing search engines. Microsoft Advertising uses cookies for this purpose. Personal data is processed in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers, and information about device and browser settings.
Microsoft Advertising collects data via UET that we can use to track target groups thanks to remarketing lists. When you visit our website, a cookie is stored on the device you are using. Microsoft Advertising can then recognize that our website has been visited and display an ad when you later use Microsoft Bing or Yahoo. The information is also used to create conversion statistics, i.e. to record how many users came to our website after clicking on an ad. This tells us the total number of users who clicked on our ad and were redirected to our website. However, we do not receive any information that can be used to personally identify users.
Microsoft Advertising is used to optimize the display of advertisements.
Processing will only take place with your consent in accordance with Section 15 Paragraph 3 of the Telemedia Act or Article 6 Paragraph 1 Letter a of the GDPR. You can revoke your consent using our Consent Management Tool.
For Microsoft services, a transfer of data to Microsoft Corp. in the USA cannot be ruled out. Please note the information in the section “Data transfer to third countries”. For more information on data protection at Microsoft, please see Microsoft’s privacy policy at https://privacy.microsoft.com/de-de/privacystatement .
We use the LinkedIn Insight Tag on our website, a marketing service provided by LinkedIn Ireland Unlimited Company (Ireland/EU). The LinkedIn Insight Tag is a JavaScript code snippet that is triggered by LinkedIn when you visit our website and stores a cookie on the device you are using.
We can perform various functions using the LinkedIn Insight Tag, which we describe in detail below.
LinkedIn Conversion Tracking is an analytics feature supported by the LinkedIn Insight Tag. The LinkedIn Insight Tag enables us to collect data about visits to our website, including URL, referrer URL, IP address, device and browser properties (user agent), and timestamps. IP addresses are shortened or hashed (if used to reach members across devices). LinkedIn does not provide us with any personal data, but only provides reports (in which you are not identified) on the website audience and ad performance. This allows us to measure the effectiveness of LinkedIn ads for statistical and market research purposes. LinkedIn removes members’ direct identifiers within seven days to pseudonymize the data. LinkedIn then deletes this remaining pseudonymized data within 180 days.
We also use LinkedIn Matched Audiences to target our advertising campaigns at specific target groups. Through LinkedIn Matched Audiences and associated data integrations, we can target advertising to specific target groups based on data that we make available to LinkedIn (e.g. company lists, hashed contact information, device identifiers or event data such as websites visited). This processing is carried out for the purpose of marketing our offers through the targeted display of advertising.
Further information on these processing activities, the technologies used, stored data and the storage period can be found in the settings of our Consent Management Tool. LinkedIn services are only used with your consent in accordance with Art. 6 Para. 1 Letter a of GDPR.
For LinkedIn services, a transfer of data to LinkedIn Inc. in the USA cannot be excluded. Please note the information in the section “Data transfer to third countries”. Further information on data protection at LinkedIn can be found in LinkedIn’s data protection information at https://www.linkedin.com/legal/privacy-policy .
19. Third-party services and content
We use services and content provided by third parties on our website (hereinafter referred to collectively as “content”). For such integration, processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to the respective third-party providers. This data processing is carried out to protect our legitimate interests in the optimization and economic operation of our website and is based on the legal basis of Art. 6 Para. 1 Letter f GDPR. You can object to this data processing at any time via the settings of the browser used or certain browser extensions. One such extension is the matrix-based firewall uMatrix for the Firefox and Google Chrome browsers. Please note that this may lead to functional restrictions on the website.
We have integrated content from the following third-party services into our website:
Services of Google Ireland Limited (Ireland/EU):
- “Google Maps” to display maps;
- “Google Web Fonts” for displaying fonts;
- “YouTube” to display videos
“Personio” by Personio GmbH (Germany/EU) for the integration of job advertisements;
“Amazon Cloudfront” of the third-party provider Amazon Web Services, Inc. (USA) for the provision of content;
“Cloudflare” by Cloudflare Inc (USA) for displaying content.
III. Data processing on our social media pages
We have a company page on several social media platforms. We would like to offer further opportunities to provide information about our company and to exchange ideas. Our company has company pages on the following social media platforms:
If you visit a profile on a social media platform or interact with it, personal data about you may be processed. The information associated with a social media profile used also regularly represents personal data. This also includes messages and statements made using the profile. In addition, when you visit a social media profile, certain information is often automatically collected, which may also represent personal data.
a. Facebook and Instagram page
When you visit our Facebook or Instagram page, on which we present our company or individual products from our range, certain information about you is processed. The sole controller for this processing of personal data is Facebook Ireland Ltd (Ireland/EU – “Facebook”). Further information on the processing of personal data by Facebook can be found at https://www.facebook.com/privacy/explanation . Facebook offers the option of objecting to certain data processing; relevant information and opt-out options can be found at https://www.facebook.com/settings?tab=ads .
Facebook provides us with statistics and insights for our Facebook and Instagram pages in anonymized form, which help us to gain insights into the types of actions that people perform on our page (so-called “page insights”). These page insights are created on the basis of certain information about people who have visited our page. This processing of personal data is carried out by Facebook and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions performed on our page and improving our page based on these insights. The legal basis for this processing is Art. 6 Para. 1 Letter f GDPR. We cannot assign the information obtained via the page insights to individual user profiles that interact with our Facebook and Instagram pages. We have entered into a processing agreement with Facebook as joint controllers, which sets out the distribution of data protection obligations between us and Facebook. Details about the processing of personal data to create page insights and the agreement concluded between us and Facebook can be found at https://www.facebook.com/legal/terms/information_about_page_insights_data . With regard to this data processing, you have the option of asserting your rights as a data subject (see “Your rights”) vis-à-vis Facebook. Further information on this can be found in Facebook’s privacy policy at https://www.facebook.com/privacy/explanation .
Please note that according to the Facebook data protection regulations, user data is also processed in the USA or other third countries. Facebook only transfers user data to countries for which there is an adequacy decision by the European Commission in accordance with Art. 45 GDPR or on the basis of suitable guarantees in accordance with Art. 46 GDPR.
LinkedIn Ireland Unlimited Company (Ireland/EU – “LinkedIn”) is solely responsible for the processing of personal data when you visit our LinkedIn page. Further information on the processing of personal data by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy .
When you visit, follow or engage with our LinkedIn company page, LinkedIn processes personal data to provide us with statistics and insights in an anonymized form. This gives us insights into the types of actions people perform on our page (so-called page insights). To do this, LinkedIn processes data that you have already made available to LinkedIn via the information in your profile, such as data on your role, country, industry, length of service, company size and employment status. In addition, LinkedIn will process information about how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page. With the page insights, LinkedIn does not provide us with any of your personal data. We only have access to the summarized page insights. Nor is it possible for us to draw conclusions about individual members from the information in the page insights. This processing of personal data as part of the page insights is carried out by LinkedIn and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions performed on our LinkedIn company page and improving our company page based on these findings. The legal basis for this processing is Art. 6 (1) (f) GDPR. We have entered into an agreement with LinkedIn on processing as joint controllers, which sets out the distribution of data protection obligations between us and LinkedIn. The agreement is available at: https://legal.linkedin.com/pages-joint-controller-addendum . The following then applies:
- LinkedIn and we have agreed that LinkedIn is responsible for enabling you to exercise your rights under the GDPR. You can contact LinkedIn online using the following link ( https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de ) or reach LinkedIn using the contact details in the privacy policy. You can contact the data protection officer at LinkedIn Ireland using the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO . You can also contact us using the contact details provided to exercise your rights in connection with the processing of personal data within the scope of Page Insights. In such a case, we will forward your request to LinkedIn.
- LinkedIn and we have agreed that the Irish Data Protection Commission is the lead supervisory authority overseeing processing for Page Insights. You always have the right to lodge a complaint with the Irish Data Protection Commission (see dataprotection.ie ) or any other supervisory authority.
Please note that in accordance with LinkedIn’s privacy policy, LinkedIn also processes personal data in the USA or other third countries. LinkedIn only transfers personal data to countries for which the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR or on the basis of appropriate guarantees pursuant to Art. 46 GDPR.
Twitter Inc. (USA) is solely responsible for the processing of personal data when you visit our Twitter profile. Further information on the processing of personal data by Twitter Inc. can be found at https://twitter.com/de/privacy .
Google Ireland Limited (Ireland/EU) is solely responsible for the processing of personal data when you visit our YouTube channel. Further information on the processing of personal data by YouTube or Google Ireland Limited can be found at https://policies.google.com/privacy .
2. Comments and direct messages
We also process information that you have made available to us via our company page on the respective social media platform. Such information can be the username used, contact details or a message to us. We process this data as the sole controller. We process this data based on our legitimate interest in getting in touch with enquiring persons. The legal basis for data processing is Art. 6 Para. 1 Letter f GDPR. Further data processing can take place if you have consented (Art. 6 Para. 1 Letter a GDPR) or if this is necessary to fulfill a legal obligation (Art. 6 Para. 1 Letter c GDPR).
Status: June 2021
Download version:
Privacy policy Helpling.de