Cookie Policy ID-ware Group
General information with regard to data processing of our website operations
We process data as part of our website operations. This also includes disclosure by transfer to third parties and, if applicable, to so-called third countries outside the European Union (‘EU’) and the European Economic Area (‘EEA’). Where we transfer data outside the EU or the EEA, we have labelled this accordingly below. The individual data concerned, processing purposes, legal bases, recipients and, if applicable, transfers to third countries are listed below.
Responsible for data processing
Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:
ID-ware Group B.V.
Rhone 30
2491 AP Den Haag
The Netherlands
Tel +31 (0) 70 337 15 00
info@idware.nl
KVK 77271920
For further information please see our Privacy Statement.
1. Website hosting
To provide our online presence, we use our own web server located in Frankfurt, Germany, which processes the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.
The legal basis for data processing is our overriding legitimate interest in the provision of our website in accordance with Art. 6 para. 1 f) GDPR.
2. Log file upon website visit
We log your website visit. In doing so, we process
Name(s) of our website(s) accessed,
the date and time of access
the amount of data transferred,
the browser type and version
the operating system you are using,
the referrer URL (the previously visited website),
your IP address,
the requesting provider.
The legal basis for data processing is our predominant legitimate interest in the continuous provision and security of our website in accordance with Art. 6 para. 1 f) GDPR.
The log file is deleted after seven days, unless it is required to prove or clarify specific legal violations that have become known within the retention period.
3. What are cookies and why do we use them
We use so-called cookies on our website. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser.
a) Purpose
We use technically necessary cookies to enable the optimal functionality of our website. These cookies make it possible, for example, to navigate the website or to offer other basic functions of the website.
We also use optional cookies that provide us with additional information, for example to analyse data traffic or for advertising and marketing purposes.
b) Lifespan
The cookies used remain on your end device for different periods of time:
Session cookies: These cookies are deleted from your end device immediately after you close your web browser.
Persistent cookies: These cookies remain on your device even after you close your web browser and enable us, for example, to recognise you the next time you visit our website.
4. Our cookies
Further information on the specific cookies used, the purposes pursued with them and their lifespan can be found in our cookie information (cookie banner, see below).
4.1 Revocation and objection
If data is processed on the basis of your consent, you can revoke this consent at any time with effect for the future (so-called ‘opt-out’). In the case of data processing based on our legitimate interest, you can object to further data processing with effect for the future.
You can access and revoke and/or change your consent to cookies at any time here.
4.2 Browser settings for cookies
In addition, you can prevent or restrict future data processing by cookies by selecting the appropriate browser settings and deactivating the use of cookies, for example. Cookies that have already been saved can be deleted in the browser settings.
Further information on the respective browser settings can be found under the following links:
Mozilla Firefox: https://support.mozilla.org/de/kb/
Internet Explorer: https://support.microsoft.com/de-de/help/17442/
Google Chrome: https://support.google.com/accounts/
Opera: http://www.opera.com/de/help
Safari: https://support.apple.com/kb/PH17191?
4.3 First-party cookies
Provider: ID-ware; Service: System cookies; Purpose: Saves the settings of the visitors selected in the cookie box opt-in; Lifespan: 30 days.
4.4 Third-party cookies
Provider: Google; Service: Google Maps; Cookie name: NID; Purpose: Used to unblock Google Maps content; Lifespan: 6 months.
Service provider: Vimeo; Service: Vimeo; Cookie name: vuid; Purpose: Used to unblock Vimeo content; Lifespan: 2 years.
Provider: YouTube; Service: YouTube; Cookie name: NID; Purpose: Used to unblock YouTube content; Lifespan: 6 months.
5. Cookie banner
To fulfil our obligations under data protection law, we use a cookie banner as an opt-in option. When you visit our website, your cookie preferences are requested via a banner. We then set a cookie in which data on consent given or revoked, cookie runtimes and versions, domain and path of the website accessed and a randomly generated ID are stored. The data processing is carried out based on our predominant legitimate interest in data processing on our website in accordance with Art. 6 para. 1 f) GDPR.
6. Establishment of contact with us via our website contact form
If you contact us via our website contact form, we will process the following data from you for the purpose of processing and handling your enquiry: Name, contact details – if provided by you – and your message.
The legal basis for data processing is our obligation to fulfil the contract and/or to fulfil our pre-contractual obligations pursuant to Art. 6 para. 1 b) GDPR and/or our overriding legitimate interest in processing your enquiry pursuant to Art. 6 para. 1 f) GDPR.
Your personal data that you transmit to us via our website will only be stored until the purpose for which it was transmitted to us has been fulfilled. Insofar as retention periods under commercial and tax law must be observed, the storage period for certain data may be up to 10 years.
7. TLS encryption (https://)
We protect the transmission of your data with a secure (AES 256-bit) TLS connection. TLS (Transport Layer Security) is a security technology that ensures that your personal data is transferred securely over the Internet and cannot be viewed by third parties. You can recognise TLS encryption by the fact that the URL begins with ‘https’ instead of ‘http’. The following data is encrypted: Personal data (name, address and other information transmitted via the contact forms).
8. Recruiting page (vacancies) and contacting us for applications
If you contact us to send us your job application, e.g. by e-mail or via a contact form, the data you provide (e.g. name, e-mail address, desired place of work, etc.), your message and the application documents sent will be processed exclusively for the purpose of processing and handling your application enquiry.
The legal basis for data processing is primarily § 26 BDSG. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted.
Should the data be necessary for legal prosecution after completion of the application process, data processing may be carried out to safeguard our legitimate interests in accordance with Art. 6 para. 1 f) GDPR, namely for the assertion and/or defence of claims.
By submitting an application on our recruiting page which is provided by the Personio platform, you express your interest in taking up employment with us. In this context, you provide us with personal data that we use and store exclusively for the purpose of your job search/application.
The data transmitted as part of your application will be transferred using TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers personnel administration and applicant management software. Personio is our processor in this context in accordance with Art. 28 GDPR. The basis for the processing is an order processing contract between us as the controller and Personio.
Responsible body
The controller within the meaning of data protection law is
Personio SE & Co. KG
Seidlstraße 3
80335 Munich
Phone: +49 (89) 1250 1004
Entry in the commercial register
Register number: HRA 115934
Register court: Munich Local Court
Data protection officer: privacy@personio.com
More information can be found in the privacy policy of Personio: https://www.personio.com/privacy-policy/
9. LinkedIn Social Media Profile
9.1 Joint responsibility for data processing
LinkedIn is a product provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Together with LinkedIn, we are jointly responsible for data processing in connection with our company profile, in particular in connection with the ‘Page Insights’ function in accordance with Art. 4 No. 7 GDPR. When you visit our company profile, personal data is processed by LinkedIn and us as data controllers.
LinkedIn has primary responsibility under the GDPR for the processing of Page Insights data, see also section bb) User analysis. LinkedIn therefore also assumes all obligations under the GDPR with regard to the processing of Page Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). LinkedIn remains solely responsible for the processing of such personal data in connection with Page Insights that is not covered by the existing Page Insights Joint Controller Addendum.
9.2 What data do we process via LinkedIn and for what purpose?
The purpose of operating our company profile on LinkedIn is initially to make contact with users and visitors to the LinkedIn social network and to engage in dialogue. In doing so, we provide direct information about our company and the associated offers.
As a LinkedIn profile user, we can process the data you provide as a LinkedIn member. This includes all information that you have stored in your profile, messages that you send us and interaction with our content. In particular, this happens when you share or recommend our content, comment on it, contact us or refer to our presence within LinkedIn.
The processing of personal data by us is based on our legitimate interests in an effective exchange with LinkedIn users and visitors to our profile, as well as in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. 6 para. 1 f) GDPR.
9.2.1 Applications
If you send us your application via LinkedIn, or if you signal your interest in a job offer that we send you, the data you provide (e.g. name, email address, desired location, data from your LinkedIn profile, etc.), your message and the application documents sent will be processed exclusively for the purpose of processing and handling your application enquiry.
We process personal applicant data on the basis of Section 26 (1) BDSG. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted.
Should the data be necessary for legal prosecution after completion of the application process, data processing may be carried out to safeguard our legitimate interests in accordance with Art. 6 para. 1 f) GDPR, namely for the assertion and/or defence of claims.
9.2.2 User analysis
With the ‘Page Insights’ service, LinkedIn provides us with various information about visits and visitors to our company page. This information is created by LinkedIn and enables us to manage the marketing of our activities in a better and more targeted manner. This is so-called aggregated data that cannot be used to identify you personally. Data processing as part of the ‘Pages Insights’ service is the sole responsibility of LinkedIn. We have no access to personal data, except in aggregated form.
The processing of personal data by us is based on our legitimate interests in an effective exchange with LinkedIn users and visitors to our profile, as well as in connection with communication with users on our social media profiles, including our company presentation in accordance with Art. 6 para. 1 f) GDPR.
9.3 Forwarding of data and data transfer to the USA
Data collected when you visit our company profile may be forwarded to the LinkedIn Corporation based in the USA and processed there. LinkedIn is certified under the EU-US Data Privacy Framework and is therefore covered by the EU adequacy decision for the USA.
We do not otherwise pass on data to third parties in the context of operating our company profile.
10. Leadfeeder
Our website also uses the services of lead generation tools from Leadfeeder, Kalevankatu 6, 00100 Helsinki, Finland. On the one hand, a lead is interested in our company or a product. On the other hand, their information is provided to us for further dialogue in order to establish contact.
Generating leads is an important part of acquiring new customers. The targeted generation of leads as a purpose of advertising is in our legitimate interest in data processing, whereby the rights of the data subject of lead data within the scope of the willingly provided and general data do not prevail. Leadfeeder accesses the list of IP addresses of website visitors provided in the analysis and links the list of IP addresses with information about the companies that can be found on the Internet under these IP addresses. As the IP addresses of website visitors have already been truncated, no direct personal reference is established. However, a personal reference may arise in individual cases when reviewing the linked company information.
Leadfeeder's privacy policy can be found at https://www.leadfeeder.com/privacy, information about Leadfeeder and compliance with the General Data Protection Regulation: https://www.leadfeeder.com/leadfeeder-and-gdpr/.
Legal basis: We carry out this processing on the basis of Art. 6 para. 1 lit. f) in the context of the balancing of legitimate interests as explained above and in particular in accordance with § 25 para. 1 TDDDG, Art. 6 para. 1 lit. a) EU GDPR by way of consent.
11. Font Awesome
Our website uses so-called web fonts provided by Fonticons, Inc. for the standardised display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to the servers of Fonticons, Inc. As a result, Fonticons, Inc. becomes aware that our website has been accessed via your IP address. The use of web fonts is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
Further information about Font Awesome can be found at https://fontawesome.com/help and in the Fonticons, Inc. privacy policy: https://fontawesome.com/privacy.
12. Your rights, information
Please see our Privacy Statement