Thank you for your interest in our website. The protection of your privacy is very important to us. In accordance with Art. 13 DS-GVO, we inform you in detail below about the processing of your data that takes place when you use our website and its functionalities.
The controller of the data processing carried out through the website www.oraylis.de is:
ORAYLIS GmbH
Werkstraße 10 | 40670 Meerbusch
Tel: 0211 179456-0 | E-Mail: info@oraylis.de
Data Protection Officer of the company:
Prof. Thomas Jäschke, DATATREE AG
Heubesstraße 10 | 40597 Düsseldorf
Tel. 0211 931 907 00 | E-Mail: dsb@datatree.eu
You can visit our website without providing any personal information. During your visit, we store the following access data in so-called server log files without your intervention:
- IP address of the requesting computer
- Website from which the access was made (referrer URL)
- Browser type and version as well as other information transmitted by the browser (such as the operating system of your computer)
According to Art. 6 (1) lit. f. DS-GVO (legitimate interest), this data processing is carried out to ensure the trouble-free operation of the pages, e.g. to guarantee a smooth connection setup of the website, to evaluate the system security and stability, to detect and prevent attacks on our website, and others.
The information is stored in the log files for a period of 7 days and then deleted, unless further storage is necessary for the purpose of preserving evidence until final clarification.
The provision of our website, maintenance, adaptations and servicing is ensured via a service provider who accordingly processes your data on our behalf (order processing in accordance with Art. 28 DS-GVO). If further service providers are involved or data is transferred to third parties in other ways, you will find this listed separately in the corresponding §.
Our site offers you a function with contact forms, when using which personal data is collected, processed and stored by us. In the following, we explain what happens with this data: The data recorded via our contact forms (mandatory data: surname, first name, e-mail, telephone number, request) are used (within the scope of your consent, for contract performance, due to legitimate interest – Art. 6 para. 1 lit. a, b and f) DSGVO) only for the processing of requests received through the forms. Further information in the contact form (company, position) on your part is voluntary. In order to process your inquiry, we record your contact data in our CRM and also contact you by mail if we believe we have an offer that is of interest to you. The legal basis is our legitimate interest in establishing contacts in a B2B environment and using contact data received in connection with the contact forms for this purpose (Art. 6 para. 1 lit. f) DSGVO). We store the personal data collected via our contact form for the duration of the conducted communication and processing of your request. If there are no legal retention periods, your data will be deleted when the purpose is fulfilled. You can object to this data processing at any time by sending us an email to: info@oraylis.de. Should further communication result from contacting us, e.g. an offer or order, the data processing including the storage period is based on the procedures specified there. Furthermore, there are storage obligations in accordance with § 257 of the German Commercial Code (HGB) in the context of the conclusion of a contract.
Newsletter
Furthermore, there is the possibility that you subscribe to our newsletter. With this newsletter we inform you about our company, our products and services. If you would like to receive the newsletter, we process according to your consent (Art. 6 para. 1 lit a) DSGVO) your e-mail address, title and last name (mandatory information). Further details (company, title, first name) are voluntary. Furthermore, for reasons of proof (Art. 6 para. 1 lt. F) DSGVO), we store the IP address and time of registration and confirmation of this registration.
Your details will be stored in our CRM system. They are only used for sending the newsletter. For this purpose, your data is transmitted to servers of the company CleverReach. The servers are located in Germany and Ireland. You can find more information about this at www.cleverreach.de/security. You can unsubscribe from the newsletter at any time via a link in the newsletter tool. With your objection, your data will be deleted immediately, unless you have deposited them with us in another context (e.g. for application) and they may be subject to legal retention obligations.
We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluations, we link data and the web beacons with your e-mail address and an individual ID. The data mentioned in the previous sentence includes the IP address, the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (specific page); the access status/HTTP status code; the amount of data transferred in each case; the website from which the request came, the browser; the operating system and its interface and the language and version of the browser software. Links received in the newsletter also contain this ID.
Blog
You have the option of commenting on our articles in our blog. The data stored there will only be used in the context of publishing the comment. Since we, as the operator of the website, are responsible for the content, we store the IP address when a comment is left on the basis of our legitimate interests (Art. 6 para. 1 DSGVO) in order to trace any comments that may contain insults, polemics, racist or similar unlawful content. The comments themselves are published and stored until revoked. You can object to this data processing and the publication of your comment at any time by sending us an email to: info@oraylis.de.
Registration for events (face-to-face events, webinars, strategy talks, etc.)
If you register for an event via our website, we will process your data (mandatory data: first name, last name, company, e-mail address) in accordance with your consent (Art. 6 para. 1 lit. a) DSGVO in order to ensure your participation in the event, e.g. inclusion in the list of participants, sending of the booking confirmation, etc. If we hold the events in cooperation with another company or with the support of a service provider (e.g. event hotel, software provider of a webinar tool, …), the data you entered will be passed on to the cooperation partner or service provider so that they can process your data for the purpose of holding the event. The subject of the contract with our cooperation partners or service providers is also a data protection compliant handling of personal data, so that the security of your data is our top priority. Please note that some events are not carried out by us, but you then enter your data directly on the site of the respective cooperation partner. In this case, you can obtain information relevant to data protection in the privacy policy of the respective cooperation partner or service provider.
We use the GoToWebinar software of the provider LogMeIn Ireland Limited to conduct webinars. In the course of registration on the infrastructure of the company LogMeIn (Bloodstone Building Block C70 Sir John Rogerson’s Quay Dublin 2, Ireland), personal data is collected/stored. In particular, this involves the surname, first name, company, telephone number and e-mail address. The legal basis for the data processing is the fulfillment of the contract pursuant to Art. 6 Abs. 1 lit. b) DSGVO for the implementation of the webinar. We have concluded an order processing agreement with the company LogMeln Ireland Limited in accordance with Art. 28 DSGVO. The data is processed in Germany, the European Union and the USA to the extent permitted by law. For data processing in the USA, an appropriate level of protection has been established by agreeing the EU standard contractual clauses. In this context, please also note the data protection regulations of the company LogMeIn: https://www.logmeininc.com/de/gdpr/gdpr-compliance.
To promote our events and webinars and to implement the registration form, we use Mobile Funnel (hereinafter: Funnel). Detailed information about this provider and how it works can be found in the section below on the use of Mobile Funnel. As an alternative to Mobile Funnel, you can also register for the webinars on our website via a contact form or via LinkedIn. If you enter your data via the Funnel and register for events, or alternatively use our contact form or register via LinkedIn, we will include your contact details in our CRM and contact you by mail if we believe we have an offer of interest to you. The legal basis for this is our legitimate interest in establishing contacts in a B2B environment and using contact data that we have received in connection with our events for this purpose (Art. 6 para. 1 lit. f) DSGVO). If there are no legal retention periods, your data will be deleted when the purpose is fulfilled. You can object to this data processing at any time by sending us an email to: info@oraylis.de. If further communication results from the contact, e.g. an offer, job interview or commissioning, the data processing including the storage period is based on the procedure specified there.
Download of the career magazine
When you request our career magazine, we need your first name and e-mail address. We use this information to send you a link to the magazine in accordance with your consent (legal basis: Art. 6 para. 1 lit. a) DSGVO). Furthermore, we use your data to track whether you have already been in contact with us when applying for a vacancy or to contact you when a suitable vacancy arises. The legal basis for this is our legitimate interest (Art. 6 para. 1 lit. f) DSGVO) in establishing and maintaining contacts in a B2B environment. If there are no legal retention periods, your data will be deleted once the purpose has been fulfilled. You can object to this data processing at any time by sending us an email to: info@oraylis.de . If further communication should result from the establishment of contact, e.g. an application procedure, the data processing including the storage period is based on the procedures specified there.
Download our whitepapers
For the implementation of the download and for the promotion of our whitepapers we use perspective Mobile Funnel (hereinafter: Funnel). You can find detailed information about this provider and how it works in the section below on the use of Mobile Funnel. As an alternative to Mobile Funnel, you can also request our whitepapers on our website via a contact form or via LinkedIn. If you enter your data via the Funnel or use our contact form or LinkedIn and download our whitepaper, we will record your contact data (mandatory information: first name, last name, company, position, email address) in our CRM and contact you by mail if we think we have an offer that might be of interest to you. The legal basis is our legitimate interest in establishing contacts in a B2B environment and using contact data that we have received in connection with the download for this purpose (Art. 6 para. 1 lit. f) DSGVO). If there are no legal retention periods, your data will be deleted when the purpose is fulfilled. You can object to this data processing at any time by sending us an email to: info@oraylis.de. If further communication results from the contact, e.g. an offer or order, the data processing, including the storage period, is based on the procedures specified there.
Use of Mobile Funnel
We use mobile funnels (hereinafter: funnels) to advertise our offers such as job vacancies, white papers, webinars, events, and to implement forms. Among other things, we use ads on social media or social media posts to draw attention to these offers. The processing of your data through the forms in the Funnel for the purpose of sending you the information you requested is based on your consent (Art. 6 para. 1 lit. a) DSGVO).
Furthermore, we record your contact data (mandatory data: first name, last name, company, position, e-mail address) in our CRM and contact you by mail if we believe that we have an offer of interest to you. The legal basis is our legitimate interest in establishing contacts in a B2B environment and using contact data that we have received in connection with the download for this purpose (Art. 6 para. 1 lit. f) DSGVO). If there are no legal retention periods, your data will be deleted when the purpose is fulfilled. You can object to this data processing at any time by sending us an email to: info@oraylis.de. If further communication results from the contact, e.g. an offer or order, the data processing including the storage period is based on the procedure specified there.
The software for creating Mobile Funnel is provided by Perspective Software GmbH, a company based in Germany. There is an agreement with Perspective on commissioned processing pursuant to Art. 28 (3) DSGVO. The data entered as part of the use of Mobile Funnel is transmitted via SSL encryption and stored in a database. In addition to the data you collect for your registration, general log data, so-called server logs, are collected with each access to the Funnel. These data are usually pseudonyms and therefore do not allow any conclusions to be drawn about a natural person. Without this data, it would not be technically possible in part to deliver and display the contents of the software. In addition, the processing of this data is mandatory for security reasons, in particular for access, input and transfer and storage control. Furthermore, the anonymous information can be used for statistical purposes as well as for the optimization of the offer and the technology. In addition, the log files can be subsequently controlled and evaluated in the event of suspicion of illegal use of the software.
The legal basis for this is found in Art. 6 para. 1 lit. f) DSGVO and § 25 para. 2 No. 2 TTDSG. Data such as the domain name of the website, the web browser and web browser version, the operating system and the timestamp of access to the software are generally collected. The IP address of the user is not stored. However, the user is assigned a so-called session ID. The storage period of these access logs is up to 7 days. All data entered by the user when using the Funnel (e.g. answering form fields; using interactive components) are assigned to the user by means of a session ID and made available to us.
So-called cookies are used in the Funnel. The cookies used are either absolutely necessary (ensuring security when visiting the website) or are used to implement certain functionalities such as default language settings or to improve the user experience or performance on the website. Through their use, default settings can be implemented, such as the language, storage of given answers even in case of poor internet connection or analysis of the performance of a funnel and the used channel through which a user has reached these funnels. The use of cookies is mandatory for the provision of our services and is therefore based on Art. 6 para. 1 lit. f) DSGVO and § 25 para. 2 No. 2 TTDSG. Storage period: Up to 1 month or until the end of the browser session. Please note that deactivating cookies may result in limited or completely disabled functionality of the Funnel. In addition, YouTube videos are sometimes embedded in our mobile funnels, which set cookies (storage period up to 18 months). Through the cookie banner used in the Funnel, you can decide whether you agree to this. Only if this is the case, you can watch the video.
Signature
We use mailtastic, a service provided by NETSTAG GmbH (NETSTAG GmbH, Große Bleiche 10, 55116 Mainz), to advertise our content in our signature. If you receive an e-mail from us and click on the banner contained in the signature, you will be redirected to a corresponding subpage of our website or to a perspective funnel (for more on perspective funnels, see the section above). When you click on the banner, NETSTAG collects the IP address that results from the call and anonymises it when it is written to the log file. This data processing gives us an overview of how often the individual banners in our signature have been called up and clicked on. This data processing serves our legitimate interest (Art. 6 para. 1 lit f.) DSGVO) to measure the success of the signature banner and to align our content with the interest of the users.
You can apply for open positions via our website or send us your unsolicited application. Please only use the application platform provided for this purpose. We can then guarantee that your application will only be processed by the appropriately authorized persons in our company.
For the automated processing of your application, we process the following data from you:
- First name, last name, e-mail and, if applicable, address/city, date of birth, title, telephone number, citizenship, and, if applicable, other data relevant to the position (e.g. driver’s license).
- Data from your motivation letter and CV, in particular information on professional experience and education, skills (e.g. Photoshop, MS Office), qualifications, awards and language skills
- Application photo, references, letters of recommendation, other documents you may upload
- We store the written, electronic communication that takes place between you and us. Furthermore, we process comments that are written about you in the course of your application process.
The data is stored for the purpose of processing your application and establishing an employment relationship Art. 6 para. 1 lit. b DSGVO. After receipt, your application will first be pre-sorted by the HR department and, if you are interested, forwarded to the relevant managers of the specialist department. If you receive a rejection, your documents will be deleted/destroyed in the specialist departments. For reasons of verifiability (contractual obligations, if applicable, personnel service providers, proof with regard to possible claims based on the General Equal Treatment Act), your data will be stored for a maximum of 12 months and then deleted. If we store your application for a longer period of time in order to contact you again at a later date about career prospects with our company, this will only happen if you give us your consent to do so (Art. 6 Para. 1 lit. a DSGVO). You can revoke your consent to data processing at any time and without giving reasons with effect for the future by sending us an e-mail to info@oraylis.de.
We use the e-recruiting system “Onlyfy” (Onlyfy International GmbH, Mariahilfer Straße 17, 1060 Vienna) to receive and process applications, so your data is hosted in the systems of Onlyyfy. An agreement on order processing according to Art. 28 para. 3 DSGVO is available.
In order to provide its services, Onlyfy commissions further subcontractors for the provision of IT services. In such a case, Onlyfy contractually obligates the order processors to comply with the applicable data protection provisions. For more information on the purpose and scope of data collection and its processing by Onlyfy, please refer to the privacy policy of Onlyfy International GmbH: https://onlyfy.io/de/datenschutzerklaerung/.
To generate applicants, we also use Mobile Funnel from Software perspective. You can find all information about this in § 3 “Use of Mobile Funnel”.
Cookies
In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and allow us to recognize your browser the next time you visit (persistent cookies). If you visit our site again in order to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again. As a rule, these are deleted after a maximum of 365 or 790 days.
We use the following cookies:
_ga Storage period: 28 months _gid Storage period: 28 months
cookieconsent_status Storage period: 12 months
As part of third-party tools, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see below). These analysis and tracking cookies allow us to automatically recognize that you have already been with us when you visit our site again. Most browsers accept these cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your end device or that a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website. You can prevent the use of pixels on our pages by using appropriate tools or browser add-ons (e.g. the “AdBlock” add-on for the Firefox browser).
Furthermore, we use Mobile Funnel (hereinafter: Funnel) for the technical implementation of various forms. The use of this tool also sets cookies, about which you can find more information in § 3 (section on the use of Mobile Funnel).
The use of cookies takes place according to Art. 6 para. 1 lt. a DSGVO in conjunction with. § 25 Abs.1 TTDSG, only in the case where you have given us your consent via the selection in our Consentbanner. If you have not consented, no data processing will take place.
1.1 Cookie revocation option
You can revoke your consent at any time pursuant to Art. 7 (3) DSGVO by clicking on the “Privacy Settings” button below and thus calling up the Consent banner. You can then use the banner to make a new selection.
Furthermore, you have the option to restrict or prevent the installation of cookies via the settings of your browser. Furthermore, you can delete already stored cookies at any time. The respective steps and measures, how you delete the cookies, depends on your specifically used internet browser.
Use of Google reCAPTCHA
We use Google reCAPTCHA
on our website, a service provided by Google Ireland Limited with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. Google reCAP-TCHA attempts to distinguish whether a particular action is performed by a human or a computer program or “bot”. During the verification by Google reCAPTCHA, the following personal data, among others, is transmitted to Google:
- the page that embeds Google reCAPTCHA
- Your IP address
- Your set language in the browser
- Screen and window resolution information
- the time zone
- Browser plugin installation
In addition, Google reCAPTCHA checks whether a cookie has already been created in your browser. If this is not the case, a cookie is set by Google reCAPTCHA.
In addition, we would like to point out that Google Fonts is part of the Google reCAPTCHA tool and is also loaded as a necessary sub-function within this service.
For details about the collection and storage of your personal data as well as the type, scope and purpose of its use by Google reCAPTCHA, please refer to Google’s privacy policy: https://policies.google.com/technologies/partner-sites?hl=de.
Use of Google Analytics for web analysis
We use Google Analytics on our website, a service provided by Google Ireland Limited with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. This is a web-based analytics tool that allows us to analyze the use of our website and make our web presence more relevant to your interests. During your visit to our website, Google Analytics places a cookie on your terminal device that allows your browser to be recognized and your behavior to be analyzed. If subpages of our website are called up, the following personal data, among other things, is collected by Google Analytics:
- Your IP address
- the called subpage and time of the call
- Source of origin of your visit (i.e. which website you came to us from).
- technical information (information about browser, internet provider, terminal device and screen resolution)
- the achievement of “website goals” (e.g. contact requests, newsletter sign-ups)
The use of Google Analytics is based on your consent pursuant to Art. 6 para. 1 lit. a DSGVO in conjunction with. § Section 25 (1) TTDSG only in the event that you have given us your consent via the selection in our cookie banner. We would like to inform you that you can revoke your consent in accordance with Art. 7 (3) DSG-VO at any time and without giving reasons with effect for the future by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the Consent Banner. You can then use the banner to make a new selection. Alternatively, Google provides a deactivation add-on that can be installed on standard Internet browsers. You can find the link to the deactivation add-on at: https://tools.google.com/dlpage/gaoptout?hl=de. This add-on ensures that the information of your visit to our website is not transmitted to Google Analytics.
We cannot rule out the possibility that personal data may be transferred outside the legal area of the European Union, e.g. to servers located in the USA. Furthermore, we expressly point out that no equivalent level of data protection can be guaranteed for the USA.
For details on the collection and storage of your personal data as well as on the type, scope and purpose of its use by Google Analytics, please refer to Google’s privacy policy: https://policies.google.com/technologies/partner-sites?hl=de.
Google AdWords
We use Google Adwords (Google Ireland Limited, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland) to
advertise our website. Google AdWords is an Internet advertising service that allows advertisers to place ads in Google’s search engine results as well as in the Google advertising network. Google AdWords allows an advertiser to specify certain keywords in advance, by means of which an ad is displayed in Google’s search engine results exclusively when the user retrieves a keyword-relevant search result using the search engine. In the Google advertising network, the ads are distributed to topic-relevant web pages by means of an automatic algorithm and in compliance with the previously defined keywords.
If a data subject accesses our website via a Google ad, a so-called conversion cookie is stored by Google on the data subject’s information technology system. The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and a display of third-party advertising on our website. A conversion cookie loses its validity after 30 days and is not used to identify the data subject. The conversion cookie is used to track whether certain sub-pages on our website have been called up, provided that the cookie has not yet expired. Through the conversion cookie, both we and Google can track how a data subject who arrived at our website via an AdWords ad acted, e.g. ordered a newsletter or not.
The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future or to make our web presence more interest-oriented. The use of Google AdWords is based on your consent pursuant to Art. 6 para. 1 lit. a DSGVO in conjunction with. § 25 para. 1 TTDSG only in the case where you have given us your consent via the selection in our cookie banner. You can revoke your consent at any time pursuant to Art. 7 (3) DSGVO and without giving reasons with effect for the future by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the consent banner. Based on the banner, you can then make a new selection. In addition, you can object to interest-based advertising by Google by calling up www.google.de/settings/ads under the Internet browser you use and making the desired settings there.
We cannot rule out the possibility that personal data may be transferred outside the legal area of the European Union, e.g. to servers located in the USA. Furthermore, we expressly point out that no equivalent level of data protection can be guaranteed for the USA. For details on the collection and storage of your personal data as well as the type, scope and purpose of its use by Google AdWords, please refer to Google’s privacy policy: https://policies.google.com/technologies/partner-sites?hl=de.
Google Tag Manager
We use Google Tag Manager on our website, a service provided by Google Ireland Limited with its registered office in Gordon House, Barrow Street, Dublin 4, Ireland. This is an organizational tool that allows us to manage our analytics tags through one interface. In doing so, Google Tag Manager collects data on our website and forwards it to our connected analytics tools. The connected analysis tools store and evaluate this data. The Google Tag Manager itself does not set any cookies and does not store any personal data. The organization tool only collects data on how individual tags are used.
The Google Tag Manager is used in accordance with Art. 6 para. 1 lit. a DSGVO in conjunction with. § Section 25 (1) TTDSG only in the event that you have given us your consent via the selection in our cookie banner. You can revoke your consent at any time pursuant to Art. 7 (3) DSGVO and without giving reasons with effect for the future by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the consent banner. You can then use the banner to make a new selection.
We cannot rule out the possibility that personal data may be transferred outside the legal area of the European Union, e.g. to servers located in the USA. Furthermore, we expressly point out that no equivalent level of data protection can be guaranteed for the USA. For more information about the Google Tag Manager, please visit https://support.google.com/tagmanager/answer/9323295?hl=de. For details on the collection and storage of your personal data as well as the type, scope and purpose of its use through the use of Google Tag Manager, please refer to Google’s privacy policy: https://policies.google.com/privacy.
Zapier
We use Zapier on our website, a service provided by Zapier Inc. located at 548 Market St #62411, San Francisco, California 94104, USA. Zapier is a web service that allows us to link actions between different tools, thus synchronizing the applications with each other. During the use of Zapier, the following personal data may be collected, among others:
- Names,
- E-mail addresses,
- IP address,
- Website visit details
Zapier is used in accordance with Art. 6 para. 1 lit. a DSGVO in conjunction with. § Section 25 (1) TTDSG only if you have given us your consent via the selection in our Consent Banner. Unless you have consented, Zapier will not be used.
You can revoke your consent at any time pursuant to Art. 7 (3) DSGVO and without giving reasons with effect for the future by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the Consent banner. You can then use the banner to make a new selection.
The personal data transmitted to Zapier is only used for technical processing and the administration of our services. Furthermore, we expressly point out that no equivalent level of data protection can be guaranteed for the USA. For details about the collection and storage of your personal data as well as the type, scope and purpose of its use by Zapier, please refer to Zapier’s privacy policy: https://zapier.com/privacy.
Surfer SEO
We use the analysis tool Surfer SEO, a service of Surfer Sp. z o.o., in Plac Solny 14/3, 50-062 Wrocław, Poland. Surfer SEO shows us conspicuousness of our website and helps us to use the right keywords to optimize our texts in the best possible way for search engines.
The use of Surfer SEO takes place according to Art. 6 para. 1 lit. a DSGVO in conjunction with. § 25 para. 1 TTDSG only in the case where you have given us your consent via the selection in our Consent Banner. Unless you have consented, Zapier will not be used.
You can revoke your consent at any time pursuant to Art. 7 (3) DSGVO and without giving reasons with effect for the future by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the Consent banner. You can then use the banner to make a new selection.
For details on the collection and storage of your personal data as well as on the type, scope and purpose of its use by Surfer SEO, please refer to Surfer SEO’s privacy policy: https://surferseo.com/privacy-policy/.
Hello Bar
We use Hellobar on our website, a service provided by Hello Bar LLC, located at 450 B Street #775, San Diego, CA 92101, USA. With the help of Hello Bar we generate leads and can display banners on our website.
The use of Hello Bar takes place according to Art. 6 para. 1 lit. a DSGVO in conjunction with. § 25 para. 1 TTDSG only if you have given us your consent via the selection in our Consent Banner. Unless you have consented, Zapier will not be used.
You can revoke your consent at any time pursuant to Art. 7 (3) DSGVO and without giving reasons with effect for the future by clicking on the “Privacy Settings” button integrated in the footer of our website and thus calling up the Consent banner. You can then use the banner to make a new selection.
Furthermore, we expressly point out that no equivalent level of data protection can be guaranteed for the USA. For details about the collection and storage of your personal data as well as the type, scope and purpose of its use by Hello Bar, please refer to Hello Bar’s privacy policy: https://www.hellobar.com/privacy-policy/.
In the event that Recaptcha is included via the banner, you can use this wording.
If Recaptcha is also used without consent via the Consent banner, the old text remains. This unfortunately represents a legal risk (especially with regard to possible warnings, analogous to Google Fonts).
Social Plug Ins
Through the use of the plug-ins named below, we offer you the opportunity to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f DS-GVO. We use the so-called Shariff solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can identify the provider of the plug-in by marking the box with its initial letter or logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only when you click on the marked box and thereby activate it, does the plug-in provider receive the information that you have accessed the corresponding website of our online offer
You have the option of interacting with the social network by clicking on the button. Please note that even without interaction on your part, your data will be collected by the provider of the social network. To the best of our knowledge, we inform you as follows:
By using the plug-in, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In addition, the IP address, the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (specific page); the access status/HTTP status code; the respective amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and the language as well as the version of the browser software are transmitted.
According to the providers, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data may be transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the greyed-out box.
The plug-in provider stores the data collected about you as a usage profile and uses it for the purposes of advertising, market research and/or designing its website to meet your needs. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right.
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected from us will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you to avoid an assignment to your profile with the plug-in provider.
We have no influence on the data collected and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.
Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers communicated below. There you will also receive further information on your rights in this regard and setting options for protecting your privacy.
Facebook privacy policy
http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Privacy policy Twitter
Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Privacy policy LinkedIn
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn hat sich dem EU-US-Privacy-Shield unterworfen, https://www.privacyshield.gov/EU-US-Framework.
Privacy policy Xing
Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.
Integration of widgets from the providers kununu and glassdoor
We have integrated so-called “widgets” from the providers kununu and glassdoor on our careers page. The integration of these widgets means that if the overall rating of our company changes in these forums, this change is automatically adjusted on our website.
When you call up the page, kununu or glassdoor receives the information that you have called up the corresponding sub-page of our website. In addition, the IP address, date, time, content (specific page) of the request; the access status/HTTP status code; the respective amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and the language as well as the version of the browser software are transmitted. This takes place regardless of whether the provider of the respective widget provides a user account via which you are logged in or whether no user account exists. If you are logged in to the respective provider, your data will be directly assigned to your account. If you do not wish to have your data associated with your profile, you must log out before accessing the provider’s site. We assume that the respective provider uses the data received for the purposes of advertising, market research, creation of user profiles or similar, but we cannot provide you with any concrete information on this.
The provider Glassdoor Inc. is certified under the E.U.-U.S. Privacy Shield agreement and, according to its own statement, processes the data in the function of the data controller. Please contact the respective provider for further information on the purpose and scope of the processing of the data as well as your rights and settings options in this regard:
- Privacy policy kununu: kununu GmbH, Neutorgasse 4-8, Top 3.02, A-1010 Wien,
https://privacy.xing.com/de/datenschutzerklaerung - Privacy policy glassdoor: Glassdoor, Inc., 100 Shoreline Highway, Building A, Mill Valley, California, 94941, USA, https://www.glassdoor.com/about/privacy.htm, https://help.glassdoor.com/Privacy_Request/en_US
Integration of YouTube videos (extended data protection mode)
We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transmission.
By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the IP address, the date and time of the request; the time zone difference to Greenwich Mean Time; the content of the request (specific page); the access status/HTTP status code; the respective amount of data transferred; the website from which the request comes, the browser; the operating system and its interface and the language as well as the version of the browser software are transmitted. This takes place regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
For more information on the purpose and scope of data collection and its processing by YouTube, please see the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Our company operates the following company presences in the social networks:
- YouTube
- kununu
- glassdoor
Joint responsibility and legal basis
As operators of these company presences, we jointly process personal data with the respective provider of the social network (joint responsibility pursuant to Art. 26 DS-GVO). By creating and publishing our company presences, we have accepted the terms of use of the respective social network, which regulate the conditions of use of the site and the resulting data processing.
The legal basis for the data processing is our legitimate interest (Art. 6 (1) lit. f DS-GVO) to present our company in common communication media and to offer applicants, interested parties and other persons a form of communication with our company that they prefer and that is common in today’s world.
We would like to point out that the use of social media by you, in particular the interactions with the networks such as posting and sharing, is at your own responsibility and that you can alternatively contact us via the contact form on the website or by mail/letter/phone.
Data processing during a visit to one of our company presences on social networks
According to our state of knowledge, we inform you as follows about the data processing that arises from the use of our appearances in social media.
When you visit one of our company websites on a social network, the provider of the social network receives information about you, your surfing and usage behaviour, your interactions and your respective location by collecting your IP address and using cookies, pixels and web beacons. From this information, the social network provider forms a user profile. We cannot exclude that data stored in the user profiles are stored across devices and/or that the user profile is linked to your data stored in the network.
The social network uses the information about you collected in this way to compile statistics about the use and user structure of the network and to place interest-based advertising within and outside the network. The advertising models of social networks also provide that the social networks transmit data about your usage behaviour to third parties (advertising partners) outside the network or receive data from them about your surfing/usage behaviour from outside the network.
The social networks provide advertisers with anonymised statistical data with their offers such as “Facebook Insights” or “LinkedIn Website Demographics”, e.g. information on page views, activities, proportion of men/women, professional position, company sector and much more (see https://www.facebook.com/iq/tools-resources/audience-insights and https://www.linkedin.com/help/lms/answer/82351). We have no influence on the data processing that takes place for this purpose, cannot prevent it and also do not have access to the underlying data.
We use these offers to better understand the structure of our users and their interests and to design our site accordingly. Furthermore, we and the providers of the social networks can better target advertising in this way because we learn, for example, information about the demographic and geographical distribution or about the gender of the users. In this way, we can recognise trends in our users from the statistics and show them more relevant content.
When using the services Facebook, Instagram, Twitter, YouTube, LinkedIn and glassdoor, data is transferred to the USA. These providers are certified under the Privacy Shield agreement and are obliged to comply with EU data protection standards.
Your rights as a data subject
From the terms of use, which we accepted when creating our company websites, it is regulated that you contact the respective provider of the social network regarding your rights as a data subject to information, objection, correction, restriction of processing, transferability and deletion, as only this provider has access to your data. You can find the information on the data protection of the providers here:
- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland): https://www.facebook.com/about/privacy/, https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com,
- Instagram (Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA) http://instagram.com/about/legal/privacy, https://help.instagram.com/155833707900388
- Twitter (Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA) https://twitter.com/privacy; https://twitter.com/personalization
- YouTube (Google Ireland Limited, Sitz in Gordon House, Barrow Street, Dublin 4, Irland) https://policies.google.com/privacy, https://adssettings.google.com/authenticated
- LinkedIn (LinkedIn Ireland, Wilton Place, Dublin 2, Irland) https://www.linkedin.com/legal/privacy-policy
- Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland) – Datenschutzerklärung/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.
- kununu (Kununu GmbH, Neutorgasse 4-8, Top 3.02, A-1010 Wien) https://privacy.xing.com/de/datenschutzerklaerung
- glassdoor (Glassdoor, Inc., 100 Shoreline Highway, Building A, Mill Valley, 94941, USA), https://www.glassdoor.com/about/privacy.htm, https://help.glassdoor.com/Privacy_Request/en_US
You have the following rights with regard to the functions of our website explained in the section “Information on data processing” and the purposes of data processing described there:
Right to information (Art. 15 DSGVO)
We must provide you with information as to whether we are processing data relating to you. In the case of such processing, we must, among other things, explain the purposes for which the processing takes place, which categories of personal data are processed, to whom data may be transferred and for how long the data will be stored.
Correction (Art. 16 DSGVO), objection (Art. 21 DSGVO), restriction of processing (Art. 18 DSGVO)
If you discover that we are processing personal data that is incorrect or incomplete, you may of course request rectification. You may also object to the processing for specific reasons and, if justified, request the restriction of processing.
Deletion (Art. 17 DSGVO) and data portability (Art. 20 DSGVO)
In the event that personal data is processed by us, inter alia, without justification or after the purpose has ceased to apply, you may request its erasure. Please note that deletion may not always be possible due to the existence of legal obligations to provide proof/retention. Furthermore, you have the right to receive from us all information that you have provided to us in a structured, common and machine-readable format. For a better understanding and easier readability of the personal rights, we have summarised them here in parts. If required, please inform yourself in the (original text: link to http://eur-lex.europa.eu/legal-con-tent/de/TXT/?uri=CELEX%3A32016R0679) or contact our data protection officer directly. You can exercise your data protection rights at any time and without incurring any costs. Please use the following contact option for your request: info@oraylis.de.
Right to complain to a supervisory authority
You have the right to contact the supervisory authority for data protection regarding compliance with data protection and to lodge a complaint in this regard. The authority responsible for us is:
North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information (LDI NRW).
Kavalleriestr. 2-4 | 40213 Düsseldorf
Telephone: 0211 384 24-0 | E-Mail: poststelle@ldi.nrw.de
