Buben und Mädchen GmbH – Agentur für Sales Performance

Data privacy

1. Introduction

Protecting your privacy when you use our website is very important to us. That is why we would like to provide you with detailed information about how we collect anonymous and personal data. Personal data is collected, processed, and used exclusively within the scope permitted by law and includes all data that can be related to you personally, e.g., name, address, contact information, user behavior.

2. Responsible

Responsible for data processing within the meaning of Art. 4 No. 7 GDPR is

Buben & Mädchen GmbH

In der Dalheimer Wiese 20

55120 Mainz

Tel: 06131 97 200

Fax: 06131 97 2022

Email: info[at]bumg.de

Legal representative

Managing Directors: Holger J. Bub, Oliver Polke, Janet Zschieschang

3. Rights of data subjects

Your personal data is processed as part of our data processing activities. You have the rights set out in Chapter III of the GDPR vis-à-vis our company.

We respect your rights to information, correction, restriction of processing, deletion, or transferability of your personal data. You can assert these rights as follows:

Right to information

You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have the right to obtain access to this personal data and the following information:

a) the purposes of the processing;

b) the categories of personal data being processed;

c) the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations;

d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

e) the existence of the right to request from the controller rectification or erasure of personal data concerning you or restriction of processing or to object to such processing;

f) the existence of the right to lodge a complaint with a supervisory authority;

g) if the personal data is not collected from the data subject, any available information on the source of the data;

h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

If personal data is transferred to a third country or to an international organization, you have the right to be informed about the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.

We will provide you with a copy of the personal data that is being processed. For any further copies you request, we may charge a reasonable fee based on administrative costs. If you submit your request for information electronically, we must provide the information in a commonly used electronic format, unless you specify otherwise.

The right to receive a copy must not adversely affect the rights and freedoms of others.

Right to rectification

You also have the right to request the immediate rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

Right to erasure (“right to be forgotten”)

(1) You also have the right to request that we erase personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay if one of the following reasons applies:

a) The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

b) You withdraw your consent on which the processing was based in accordance with Article 6 I lit. a GDPR or Article 9 paragraph 2 letter a, and there is no other legal basis for the processing.

c) You object to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2).

d) The personal data has been processed unlawfully.

e) The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.

f) The personal data has been collected in relation to information society services offered in accordance with Article 8(1).

(2) If we have made the personal data public and are obliged to erase it in accordance with paragraph 1, we shall, taking into account the available technology and the implementation costs, take reasonable steps, including technical measures, to inform controllers who process the personal data that you have requested the erasure of any links to, or copies or replications of, that personal data. This shall not apply to the extent that processing is necessary a) for exercising the right of freedom of expression and information; b) for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; c) for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3); d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1), in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or e) for the establishment, exercise or defense of legal claims.

Right to restriction of processing

(1) You have the right to request that we restrict processing if

a) the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;

b) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;

c) we no longer need the personal data for the purposes of the processing, but you require it for the establishment, exercise, or defense of legal claims; or

d) you have objected to the processing pursuant to Article 21(1), pending verification whether our legitimate grounds override yours.

(2) Where processing has been restricted pursuant to paragraph 1, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. 4.5.2016 L 119/44 Official Journal of the European Union EN

(3) A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction is lifted.

Notification obligation regarding rectification or erasure of personal data or restriction of processing

We will communicate any rectification or erasure of personal data or restriction of processing pursuant to Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We will inform you of these recipients if you request it.

Right to data portability

(1) You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us to whom the personal data have been provided, provided that

a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) and

b) the processing is carried out by automated means.

(2) When exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

(3) The exercise of the right under paragraph 1 of this article shall not affect Article 17. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

(4) The right under paragraph 2 shall not adversely affect the rights and freedoms of others.

You also have the right to consult our data protection officer regarding the aforementioned rights and any questions relating to the processing of your personal data.

Right to lodge a complaint

You may also exercise your right to lodge a complaint with the competent supervisory authorities.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(e) or (f); this also applies to profiling based on this provision. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

4. Log files

When you use our website, connection information is stored in server log files.

This information includes:

  • IP address of the accessing system
  • Browser information such as operating system and screen resolution
  • Website accessed
  • Original website
  • Time of access

The web server logs are processed exclusively for security purposes.

We use the log data only for statistical evaluations for the purpose of operating, securing, and optimizing the website. However, we reserve the right to check the log data retrospectively if there are concrete indications of justified suspicion of illegal use.

5. Cookies

This website uses cookies. Cookies are text files that are stored on your device. Cookies can be read, transferred, and modified by the website when you visit it. We only use cookies with random, pseudonymous identification numbers. These identification numbers are used to evaluate your usage behavior on our website. At no time is the usage profile assigned to the name of a natural person. If you use special functions (such as the shopping cart or “stay logged in”) on our website, cookies are also used for these functions.

You can object to the setting of cookies at any time by changing the settings in your internet browser. Set cookies can be deleted. Please note that if you deactivate cookies, you may not be able to use all the functions of our website to their full extent.

6. etracker

The provider of this website uses services from etracker GmbH in Hamburg, Germany (www.etracker.com) to analyze usage data. Cookies are used to enable statistical analysis of the use of this website by its visitors and to display usage-related content or advertising. Cookies are small text files that are stored by the Internet browser on the user’s device. etracker cookies do not contain any information that enables a user to be identified.

The data generated by etracker is processed and stored exclusively in Germany on behalf of the provider of this website and is therefore subject to strict German and European data protection laws and standards. etracker has been independently tested and certified in this regard and has been awarded the ePrivacyseal data protection seal of approval.

Data processing is carried out on the legal basis of Art. 6 (1) lit. f (legitimate interest) of the EU General Data Protection Regulation (EU GDPR). Our legitimate interest lies in optimizing our online offering and our website. As the privacy of our visitors is particularly important to us, the IP address is anonymized by etracker as early as possible and login or device identifiers are converted by etracker into a unique key that is not assigned to a person. etracker does not use the data for any other purpose, combine it with other data, or pass it on to third parties.

You can object to the aforementioned data processing at any time, insofar as it relates to personal data. Your objection will not have any negative consequences for you.

Further information on data protection at etracker can be found here.

7. Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, length of stay, operating systems used, and the origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their end device.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this analysis tool is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If consent has been requested (e.g., consent to store cookies), processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR; consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymization

We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

We have entered into an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” feature of Google Analytics to display relevant advertisements to website visitors within the Google advertising network. This allows reports to be generated that contain information about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be attributed to any specific person. You can disable this feature at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection.”

Storage period

Data stored by Google at the user and event level that is linked to cookies, user IDs (e.g., user ID) or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) is anonymized or deleted after 26 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=de

8. Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on user data available to Google (e.g., location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively, for example by analyzing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

The use of Google Ads is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in marketing its services and products as effectively as possible.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

9. Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our website are clicked how often and which products are viewed or purchased particularly frequently. This information is used to compile conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information that allows us to personally identify the user. Google itself uses cookies or similar recognition technologies for identification.

The use of Google Conversion Tracking is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If consent has been requested (e.g., consent to store cookies), processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR; consent can be revoked at any time.

For more information about Google Conversion Tracking, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de.

10. Use of SalesViewer® technology

On this website, data is collected and stored for marketing, market research, and optimization purposes using SalesViewer® technology from SalesViewer® GmbH on the basis of the legitimate interests of the website operator (Art. 6 (1) (f) GDPR).

For this purpose, a JavaScript-based code is used to collect company-related data and information about its use. The data collected using this technology is encrypted using a non-reversible one-way function (known as hashing). The data is immediately pseudonymized and is not used to personally identify visitors to this website.

The data stored within the scope of SalesViewer® is deleted as soon as it is no longer required for its intended purpose and there are no legal retention obligations preventing its deletion.

You can object to the collection and storage of data at any time with future effect by clicking on this link https://www.salesviewer.com/opt-out to prevent SalesViewer® from collecting data on this website in the future. An opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you will need to click on this link again.

11. Contact form & applications

You have the option of sending us any data you wish via the contact form and the application form. The data is forwarded by our web server to our company’s email inbox. Please note that communication via the contact form is not encrypted. In your own interest, please use a secure communication channel for confidential communication.

12. Legal basis for processing

The legal basis for data processing within the framework of the EU General Data Protection Regulation is Art. 6 GDPR. Depending on the situation in which we process your data, different legal bases may apply.

Consent

If your consent has been obtained for the processing of personal data, Article 6 I a) GDPR is the legal basis for data processing. Consent that has been given can be revoked at any time with effect for the future.

Contract

When processing personal data that has been collected for the performance of a contract to which you are a party, Article 6 I b) GDPR is the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Legal obligation

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 I c) GDPR serves as the legal basis.

Vital interests

In the event that vital interests of you or another natural person require the processing of personal data, Article 6 I d) GDPR is the legal basis.

Legitimate interest:

If processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Article 6 I f) GDPR serves as the legal basis for processing. The legitimate interest of our company lies in the performance of our business activities.

12. Contact Data Protection Officer

Our data protection officer is provided by SICODA GmbH www.sicoda.de. You can contact the data protection officer at any time with questions regarding data protection:

SiCoDa GmbH

c/o DSB – Buben & Mädchen GmbH

Impekovener Str. 44

53347 Alfter

Tel: 0228 286 140-60

Email: datenschutz[at]bumg.de

Data protection for applicants

1. Introduction

We are delighted that you are interested in a position at our company.

Below, we would like to inform you about the processing of your personal data as part of the application process. We take data protection very seriously and strive to protect your data in the best possible way.

2. Responsible body and data protection contact

The responsible body within the meaning of Art. 4 No. 7 GDPR is

Buben & Mädchen GmbH

In der Dahlheimer Wiese 20

55120 Mainz

Email: info@bumg.de

Phone

You can contact our data protection officer at datenschutz@bumg.de

3. Data processing and legal basis for processing

You have the option of applying to us on your own initiative or for advertised positions. As part of your application, you will provide us with your general contact details as well as your resume, references, cover letter, a photo of yourself (if applicable), and other documents. The data you provide to us as part of the application process will be processed by us exclusively for the purpose of deciding whether to establish an employment relationship with you. As part of the application process, we also process information that we have obtained from personal interviews with you.

The legal basis for the processing of your personal data as part of the application process is Art. 88 GDPR in conjunction with § 26 BDSG.

4. Storage period

If we are unable to offer you a position based on your application, we will delete your data six months after the application process has been completed, unless you have given us your express consent in accordance with Art. 6 (1) (a) GDPR to continue storing your application and to contact you about positions that may be of interest to you. In this case, we will store your data until you revoke your consent.

If your application leads to employment in our company, we will store your data for the entire duration of the employment relationship.

5. Rights of data subjects

You have the rights set out in Chapter III of the GDPR. These include the right to information (Article 15 GDPR), the right to rectification (Article 16 GDPR), the right to erasure (Article 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), and the right to object to processing (Art. 21 GDPR).

You also have the right to lodge a complaint with the competent supervisory authority. You can contact the supervisory authority responsible for us at:

State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate

P.O. Box 30 40

55020 Mainz

or

Hintere Bleiche 34

55116 Mainz

Phone: 061 31/8920-0

Email: poststelle@datenschutz.rlp.de