Privacy Policy
Here you can find the privacy policy. In it, we provide information about the processing of your personal data in connection with the use of this website.
1. name and address of the person responsible
The responsible party within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:X2E Aerospace Technologies GmbH
Große Ahlmühle 19
76865 Rohrbach
Phone: +49 6349 995 99 500
Fax: +49 6349 995 99 501
Website: www.x2e-at.de
Email: info@x2e-at.de
2. Name and address of the data protection officer
According to § 38 para. 1 S. 1 BDSG, we are currently not obliged to appoint and designate a data protection officer. Any data subject may at any time address any questions or suggestions relating to data protection directly to the person responsible at the above address.3. Definitions
The data protection notice of X2E Aerospace Technologies GmbH is based on the defined terms of the General Data Protection Regulation (DSGVO). Our data protection notice should be easy to read and understand. To ensure this, we explain the terms used in advance:3.1 Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.3.2 Person concerned
Data subject means any identified or identifiable natural person whose personal data are processed by the controller.3.3 Processing
Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.3.4 Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.3.5 Profiling
Profiling is any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person’s job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.3.6 Pseudonymisation
Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separate and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.3.7 Controller or person responsible for processing
Controller or data controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.3.8 Processors
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.3.9 Receiver
Recipient means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law shall not be considered as recipients.3.10 Third party
Third party means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.3.11 Consent
Consent shall mean any freely given indication of the data subject’s wishes for the specific case in an informed and unambiguous manner in the form of a statement or any other unambiguous affirmative act by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.4 General information on data processing; legal bases, purposes of processing, duration of storage, objection and possibility of elimination
4.1 General information on the legal basis
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (DSGVO) as the legal basis for the processing of personal data. In the case of processing of personal data which is necessary for the performance of a contract to which the data subject is a party, Article 6(6) of the Data Protection Act shall apply. 1 lit. b DSGVO as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures. Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c DSGVO as the legal basis. In the event that vital interests of the data subject or of another natural person make it necessary to process personal data, Article 6(2) of the Data Protection Act shall apply. 1 lit. d DSGVO as the legal basis. If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, then Art. 6 para. 1 lit. f DSGVO as the legal basis for the processing.4.2 General information on data deletion and storage period
The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ceases to apply. In addition, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.4.3 General information about processing on our website
Data protection, data security and protection of secrets have a high priority for us. The permanent protection of your personal data, your company data and your company secrets is particularly important to us. In principle, you can visit our website without providing any personal information. However, if you make use of our company’s services via our website, this makes it necessary to provide your personal data. As a rule, we use the data provided by you and collected by the website and stored during use exclusively for our own purposes, namely for the implementation and provision of our website and the initiation, implementation and processing of the services/offers offered via the website (contract fulfillment) and do not pass them on to outside third parties, unless there is an officially ordered obligation to do so. In all other cases, we will obtain your separate consent. Your personal data will be processed in accordance with the requirements of the General Data Protection Regulation and in compliance with the country-specific data protection regulations applicable to us. By means of this data protection notice, we would like to inform you about the type, scope and purpose of the personal data we process. Furthermore, we inform you about your rights by means of this data protection notice. We have implemented technical and organizational measures to ensure an adequate level of protection for personal data processed through this website. Nevertheless, internet-based data transmissions can have security gaps, so that no absolute protection can be guaranteed.5. Collection of general data and information
The website of the X2E Aerospace Technologies GmbH collects a series of general data and information every time a data subject or automated system calls up the website. This general data and information is stored in the server’s log files. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of an access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems. When using these general data and information, the X2E Aerospace Technologies GmbH does not draw any conclusions about the data subject. Rather, this information is needed to (1) correctly deliver the content of our website, (2) optimize the content of our website and the advertising for it, (3) ensure the long-term functionality of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. The X2E Aerospace Technologies GmbH therefore collects anonymous data and information on one hand for statistical purposes and on the other hand for the purpose of increasing the data protection and data security of our enterprise, with the ultimate aim of ensuring an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data provided by a data subject.| Date / Data | Legal basis | Purpose of storage | Storage period | Objection / Possibility of elimination |
| General system data | Art. 6 para. 1 lit. f DSGVO (legitimate interest) | The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. | The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. | No, because mandatory for operation of the website |
| Date / data | General system data |
| Legal basis | Art. 6 para. 1 lit. f DSGVO (legitimate interest) |
| Storage purpose | The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. |
| Storage duration | The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. |
| Objection / elimination option | No, since mandatory for operation of the website. |
6. Contact form and e-mail contact
A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. These data are (for example):- Form of address
- Name*
- E-mail address*
- Phone
- Address
- Country
- Company
- Department
- Subject*
- Message*
- The IP address of the user
- Date and time of dispatch
| Date / Data | Legal basis | Purpose of storage | Storage period | Objection / Possibility of elimination |
| Data from contact form and e-mail / telephone contact | The legal basis for the processing of data in the case of enquiries via the contact form and/or e-mail/telephone is generally Art. 6 para. 1 lit. b. GDPR (fulfillment of contract; pre-contractual measures); Art. 6 para. 1 lit. c. DSGVO (fulfillment of a legal obligation, e.g. answering questions about data protection) and otherwise Art. 6 para. 1 lit. f DSGVO (legitimate interest). | The processing of the personal data from the input mask/email serves us only for the treatment of the establishment of contact. This also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems. | The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it is clear from the circumstances that the matter in question has been conclusively clarified. The foregoing shall not apply if the correspondence is subject to a retention obligation under commercial law. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest. | The user has the possibility to object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. |
| Date / data | Data from contact form and e-mail/telephone contact |
| Legal basis | The legal basis for the processing of data in the case of enquiries via the contact form and/or e-mail/telephone is generally Art. 6 para. 1 lit. b. GDPR (fulfillment of contract; pre-contractual measures); Art. 6 para. 1 lit. c. DSGVO (fulfillment of a legal obligation, e.g. answering questions about data protection) and otherwise Art. 6 para. 1 lit. f DSGVO (legitimate interest). |
| Storage purpose | The processing of the personal data from the input mask/email serves us only for the treatment of the establishment of contact. This also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems. |
| Storage duration | The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it is clear from the circumstances that the matter in question has been conclusively clarified. The foregoing shall not apply if the correspondence is subject to a retention obligation under commercial law. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest. |
| Objection / Possibility of elimination | The user has the possibility to object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. |
7. Data protection in applications and in the application procedure
We collect and process personal data from applicants for the purpose of processing the application procedure. The processing may also be carried out by electronic means. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by e-mail. If we conclude an employment contract with you as an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents shall be automatically deleted six months after the notification of the rejection decision, provided that no other legitimate interests of the controller prevent such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).7.1 Contact form for the application
X2E Aerospace Technologies GmbH uses an additional contact form for questions regarding applications and application procedures. Here, interested parties can contact the responsible personnel employee directly and, in addition to the data from the contact form, also submit their application file as an electronic file (PDF). If a user takes advantage of this option, the data entered in the input mask as well as the application file will be transmitted to us and stored. These dates are:- Form of address
- First and last name*
- email*
- Phone number
- Message*
- Application portfolio
| Date / Data | Legal basis | Purpose of storage | Storage period | Objection / Possibility of elimination |
| Data from contact form and e-mail / telephone contact | The legal basis for the processing of data in the case of enquiries via the contact form and/or e-mail/telephone is generally Art. 6 para. 1 lit. b. DSGVO (Contract performance; Pre-contractual measures); Art. 6 para. 1 lit. c. DSGVO (compliance with a legal obligation, e.g. answering questions on data protection) and for the rest Art. 6 para. 1 lit. f DSGVO (legitimate interest). | The processing of the personal data from the input mask/email serves us only for the treatment of the establishment of contact. This also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems. | The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it is clear from the circumstances that the matter in question has been conclusively clarified. The foregoing shall not apply if the correspondence is subject to a retention obligation under commercial law. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest. | The user has the possibility to object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. |
| Date / data | Data for applications and in the application process |
| Legal basis | The legal basis for the processing of data in the case of enquiries via the contact form and/or e-mail is generally Art. 6 para. 1 lit. b. GDPR (fulfillment of employment contract; pre-employment contract measures); Art. 6 para. 1 lit. c. DSGVO (fulfillment of a legal obligation, e.g. answering questions about the application process) and otherwise Art. 6 para. 1 lit. f DSGVO (legitimate interest) as well as special legal authorization norms, such as collective bargaining agreement, company agreement, income tax law, etc. Supplementary reference is made to the Processing Directory Personnel/HR. |
| Storage purpose | If we conclude an employment contract with you as an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. |
| Storage duration | If the controller does not conclude an employment contract with the applicant, the application documents shall be automatically deleted six months after the notification of the rejection decision, provided that no other legitimate interests of the controller prevent such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG). |
| Objection / removal option | Only general objection and removal options. |
8. Cookies
8.1 Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when you return to the website. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The following data is stored and transmitted in the cookies:- Language settings
- Log-in information
- Entered search terms
- pageview frequency
- Use of website functions
- Name of the website that links to this page and through which you found this page
- clicked links on this website
- Duration of the visit to this website
- Date and time of the visit
- Web browser and version used
- Operating system used
- Screen resolution used
- IP address of the visitor (anonymized)
9. Use of analysis programs
9.1 Privacy policy on the use and application of Google Analytics (with anonymisation function)
We have integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analytics service. Web analytics is the collection, gathering, and evaluation of data on the behavior of website visitors. A web analytics service collects data, among other things, about which website a person came from to a website (so-called referrers), which subpages of the website were accessed, or how often and for what duration a subpage was viewed. Web analytics is primarily used for optimizing a website and for cost-benefit analysis of internet advertising. The operating company of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The controller uses the “_gat._anonymizeIp” extension for web analytics via Google Analytics. With this extension, Google truncates and anonymizes the IP address of the person’s internet connection when accessing our website from a member state of the European Union or another contracting state of the Agreement on the European Economic Area.The purpose of the Google Analytics component is to analyze visitor flows on our website. Google uses the data and information collected, among other things, to evaluate the use of our website, to compile online reports that show the activities on our website, and to provide other services related to the use of our website. Google Analytics sets a cookie on the information technology system of the affected person. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyze the usage of our website. Through each visit to one of the individual pages of this website, which is operated by the controller and on which a Google Analytics component has been integrated, the internet browser on the information technology system of the affected person is automatically prompted by the respective Google Analytics component to transmit data to Google for online analysis. In the course of this technical process, Google obtains knowledge of personal data, such as the IP address of the affected person, which Google uses, among other things, to track the origin of visitors and clicks, and subsequently enable commission settlements. Through the cookie, personal information such as the access time, the location from which access originated, and the frequency of visits to our website by the affected person are stored.
Each time our website is visited, these personal data, including the IP address of the internet connection used by the affected person, are transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may transfer these personal data collected through the technical process to third parties. The affected person can prevent the setting of cookies by our website at any time, as already explained above, through an appropriate setting of the internet browser used, thereby permanently objecting to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a cookie on the information technology system of the affected person. Additionally, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.
Furthermore, the affected person has the option to object to the collection of data generated by Google Analytics, related to the use of this website, as well as the processing of this data by Google and to prevent such collection. For this purpose, the affected person must install a browser add-on via this link. Link download and installation This browser add-on tells Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as an objection. If the information technology system of the data subject is deleted, formatted or reinstalled at a later point in time, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person within his or her sphere of control, it is possible to reinstall or reactivate the browser add-on. Further information and the applicable Google privacy policy can be found here.
9.2 Privacy policy on the use and application of Google Tag Manager
We use “Google Tag Manager” on our website, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). Google Tag Manager allows us as marketers to manage website tags through one interface. The Google Tag Manager tool that implements the tags is a cookie-less domain and does not collect any personal data itself. Google Tag Manager takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager. You can find more information on data protection at the following website.10 Use and application of other tools
10.1 Privacy policy on the use and application of Complianz
Our website uses the cookie consent technology of “Complianz GDPR/CCPA Cookie Consent” to obtain your consent to store certain cookies in your browser and to document this in a data protection compliant manner. The provider of this technology is Complianz B.V., Atoomweg 6b, 9743 AK Groningen, Netherlands (hereinafter Complianz). When you visit our website, a Complianz cookie is stored in your browser to record the consents you have given or revoked. The collected data will be stored until you request us to delete it or until you delete the Complianz cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. Details about Complianz’s data processing can be found at the following link. Complianz cookie consent technology is used to obtain and document legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 S. 1 lit. c GDPR.10.2 Privacy policy on the use and application of Google WebFonts
This site uses so-called web fonts provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) for the uniform display of fonts. When you access a page, your browser loads the necessary web fonts into its cache to display texts and fonts correctly. The web fonts are transferred to the browser’s cache upon accessing the page so they can be used for display purposes. If the browser does not support Google Web Fonts or blocks access to them, the text will be displayed in a standard font. No cookies are set on your device when you access the page. Data transmitted in connection with the page access is sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with any data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail. You can configure your browser to prevent fonts from being loaded from Google servers (e.g., by installing add-ons like NoScript or Ghostery for Firefox). If your browser does not support Google Fonts or you block access to Google servers, the text will be displayed in the system’s default font. X2E Aerospace Technologies GmbH is aware of the transmission of your personal data to a third country and has implemented appropriate safeguards in accordance with Article 46 of the GDPR to ensure lawful and secure processing of your personal data. For information on Google’s Web Fonts privacy conditions, please refer to this link. General information on data protection is available in the Google Privacy Center here.| Legal basis | Purpose of storage | Storage period | Objection / Possibility of elimination |
| Art. 6 para. 1 lit. f GDPR. (legitimate interest) | The purpose of the storage is the improvement of our website and in visual and functional level. | The data will be deleted as soon as our legitimate interest no longer exists or we are obliged to delete the data due to legal or statutory orders. | As a user, you have the possibility at any time to object to the processing of your data in accordance with the data protection laws. Clause 11.7 |
| Legal basis | Art. 6 para. 1 lit. f GDPR. (legitimate interest) |
| Purpose of storage | The purpose of storage is to improve our website, both visually and functionally. |
| Storage period | The data will be deleted as soon as our legitimate interest no longer exists or we are obliged to delete the data due to statutory or legal orders. |
| Objection / Possibility of elimination | As a user, you have the possibility at any time to object to the processing of your data in accordance with the data protection laws. Clause 11.7 |
10.3 Privacy policy on the use and application of Google Maps
On this website we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and enables you to use the map function comfortably. By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, only the technically necessary data is transmitted. This is done regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the design of its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right you must contact Google. X2E Aerospace Technologies GmbH is aware of the transfer of your personal data to a third country and has appropriate safeguards in place in accordance with the Data Protection Act. Art. 46 DSGVO to ensure lawful and secure processing of your personal data. For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. Here you will also receive further information about your rights in this regard and setting options for protecting your privacy.| Legal basis | Purpose of storage | Storage period | Objection / Possibility of elimination |
| Art. 6 para. 1 lit. f GDPR. (legitimate interest) | The purpose of the storage is the improvement of our offer, the visual and functional optimization of the website and the provision of a function that facilitates the location of places and our business. | The data will be deleted as soon as our legitimate interest no longer exists or we are obliged to delete the data due to legal or statutory orders. | As a user, you have the possibility at any time to object to the processing of your data in accordance with the data protection laws. Clause 11.7 |
| Legal basis | Art. 6 para. 1 lit. f GDPR. (legitimate interest) |
| Purpose of storage | The purpose of storage is to improve our offer, to visually and functionally optimize the website and to provide a function that makes it easier to find locations and our business. |
| Storage period | The data will be deleted as soon as our legitimate interest no longer exists or we are obliged to delete the data due to statutory or legal orders. |
| Objection / Possibility of elimination | As a user, you have the possibility at any time to object to the processing of your data in accordance with the data protection laws. Clause 11.7 |
10.4 Use of various social media plugins
10.4.1 Facebook
This website uses social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins can be recognized by one of the Facebook logos (white “f” on a blue tile or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of the Facebook social plugins can be viewed here. When a participant calls up a website of this offer that contains such a plugin, his browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser, which then integrates it into the website. The provider therefore has no influence on the scope of the data that Facebook collects with the help of this plugin and therefore informs the participants according to its level of knowledge (link): By integrating the plugins, Facebook receives the information that a participant has accessed the corresponding page of the offer. If the participant is logged into Facebook, Facebook can assign the visit to his Facebook account. When participants interact with the plugins, for example by clicking the Like button or leaving a comment, the corresponding information is transmitted from your browser directly to Facebook and stored there. If a participant is not a member of Facebook, there is still a possibility that Facebook will learn and store his or her IP address. According to Facebook, only an anonymized IP address is stored in Germany. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and settings options for protecting the privacy of the participants, can be found here in the privacy policy of Facebook (link). If a participant is a Facebook member and does not want Facebook to collect data about him or her via this offer and link it to his or her membership data stored on Facebook, he or she must log out of Facebook before visiting the website. It is also possible to block Facebook social plugins with add-ons for your browser, for example with the “Facebook Blocker“.10.4.2 Twitter
Functions of the Twitter service are integrated on our pages. These functions are offered by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter in the process. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Twitter. Further information on this can be found in Twitter’s privacy policy (link). You can change your data protection settings on Twitter in the account settings (link).10.4.3 LinkedIn
If you click on the LinkedIn “Recommend” button and are logged into your LinkedIn account at the same time, you have the option of linking content from our website to your LinkedIn profile page. In doing so, you enable LinkedIn to assign your visit to our websites to you or your user account. You must know that we do not gain any knowledge of the content of the transmitted data and its use by LinkedIn. For more details on the collection of data and your legal and hiring options, visit LinkedIn. You can change your privacy settings on Twitter in the account settings (link).10.4.4 Tumblr
There is also the function to share contributions and articles via the Tumblr platform. If you are logged into your Tumblr account at the same time, you have the direct option to share content from our website on your Tumblr profile page. In doing so, you enable Tumblr to associate your visit to our websites with you or your user account. We have no knowledge of the content of the transmitted data and its use by Tumblr. For more details on the collection of data and your legal options, as well as setting options, contact Tumblr. These are provided for you here.10.4.5 Further Social Media PlugIns
If we use other social media plug-ins, you will find further information on data protection in the respective data protection notices of these providers. If you do not find them, please contact us in confidence at info@x2e-at.de.| Date / Data | Legal basis | Purpose of storage | Storage period | Objection / Possibility of elimination |
| Data transfer through third-party cookies (Third-Party-Cookies) | Art. 6 para. 1 lit. f DSGVO (legitimate interest) | The purpose and legitimate interest in setting third-party cookies is to improve our offer for you by analysing your user behaviour. As a rule, only a pseudonymised data transfer to the third parties takes place. Incidentally, it is up to you to prevent the transmission of third-party cookies by selecting the appropriate settings in your Internet browser. Please compare in detail the information given in paragraphs 10 to 12. | Third-party cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of third-party cookies. | By changing the settings in your Internet browser, you can disable or restrict the transmission of third-party cookies. Third-party cookies that have already been stored can be deleted at any time. This can also be automated. The transmission of Flash cookies cannot be prevented via the settings of the browser, but by changing the settings of the Flash Player. |
| Date / data | Data transmission by third-party cookies (third-party cookies) |
| Legal basis | Art. 6 para. 1 lit. f DSGVO (legitimate interest) |
| Storage purpose | The purpose and legitimate interest in setting third-party cookies is to improve our offer for you by analysing your user behaviour. As a rule, only a pseudonymised data transfer to the third parties takes place. Incidentally, it is up to you to prevent the transmission of third-party cookies by selecting the appropriate settings in your Internet browser. Please compare in detail the information given in paragraphs 10 to 12. |
| Storage duration | Third-party cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of third-party cookies. |
| Objection / Possibility of elimination | By changing the settings in your Internet browser, you can disable or restrict the transmission of third-party cookies. Third-party cookies that have already been stored can be deleted at any time. This can also be automated. The transmission of Flash cookies cannot be prevented via the settings of the browser, but by changing the settings of the Flash Player. |
11.5 Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients by the controller.11.6 Right to data portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable and interoperable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that- the processing is based on consent pursuant to. Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to. Art. 6 para. 1 lit. b DSGVO and
- the processing is carried out with the aid of automated procedures.
11.7 Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1) of the Data Protection Act. 1 lit. e or f DSGVO; this also applies to profiling based on these provisions. The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.11.8 Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time and without giving reasons. In the event of revocation, we will immediately delete your personal data and no longer process it. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.11.9 Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision- is necessary for the conclusion or performance of a contract between you and the controller,
- is authorised by Union or Member State legislation to which the controller is subject and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or
- with your express consent.