HANNEKUM TRADING GMBH
Privacy Policy for this website and the social media presences of HT.
(1) Below we provide information on the processing of personal data when using our website. Personal data means all data that can be related to you personally, for example name, address, email addresses and user behaviour. In doing so, we wish to inform you about our processing operations and at the same time comply with our legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).
(2) The controller within the meaning of Article 4(7) GDPR is Kay Hannekum, Karl-Ferdinand-Braun-Straße 5, 28359 Bremen, email address: k.hannekum@ht-shops.com (see our legal notice).
(3) When you contact us by email or via a contact form, the data you provide (your email address and, where applicable, your name and telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context — if the enquiry relates to a contract, in accordance with the retention periods applicable to the term of the contract, otherwise once storage is no longer necessary — or we restrict processing where statutory retention obligations apply.
(4) Should we make use of commissioned service providers for individual functions of our offering or wish to use your data for advertising purposes, we will always select and monitor these service providers carefully and inform you in detail below about the respective operations. In doing so, we also state the criteria determined for the storage period.
(1) You have the following rights vis-à-vis a controller with regard to the personal data concerning you:
(2) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.
When using the website for information purposes only, i.e. merely viewing it without registering and without otherwise providing us with information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us in order to display our website to you and to ensure its stability and security, and must therefore be processed by us. The legal basis is Article 6(1)(1)(f) GDPR:
(1) In addition to the purely informational use of our website, we offer various services that you may use if you are interested, and we use further common functions for the analysis or marketing of our offerings, which are presented in more detail below. To do so, you will generally need to provide further personal data, or we process such further data that we use to carry out the respective services. The data processing principles set out above apply to all data processing purposes described here.
(2) In some cases we use external service providers to process your data. These are carefully selected by us, are bound by our instructions and are checked regularly.
(3) Furthermore, we may pass your personal data on to third parties where participation in promotions, prize draws, the conclusion of contracts or similar services are offered by us jointly with partners. Depending on the service, your data may also be collected by the partners on their own responsibility. You will receive further information when you provide your data or below in the description of the respective offerings.
(4) Where our service providers or partners are established in a country outside the European Economic Area (EEA), we inform you of the consequences of this in the description of the offering.
(1) If you have given consent to the processing of your data, you may withdraw it at any time. Such withdrawal affects the permissibility of processing your personal data after you have declared it to us. The lawfulness of the processing of your data up to the point of your withdrawal remains unaffected.
(2) Insofar as we base the processing of your personal data on a balancing of interests, you may object to the processing. This is the case in particular where the processing is not necessary for the performance of a contract with you, which is indicated by us in each case in the following description of the functions. When exercising such an objection, we ask you to set out the reasons why we should not process your personal data in the way we do. In the event of your objection, we will examine the situation and will either cease or adjust the data processing or set out to you our compelling legitimate grounds on the basis of which we continue the processing.
(3) You may of course object at any time to the processing of your personal data for the purposes of advertising and data analysis. You can best exercise your objection to advertising by using the contact details provided above.
(1) In addition to the data mentioned above, when you use our website we employ technical aids for various functions, in particular cookies, which may be stored on your terminal device. When you access our website, and at any time thereafter, you have the choice of whether to allow the setting of cookies in general or which individual additional functions you wish to select. You can make changes in your browser settings or via our consent manager. Below we first describe cookies from a technical perspective (2) before going into your individual options in more detail by describing technically necessary cookies (3) and cookies that you can freely opt in or out of (4).
(2) Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you use, so that certain information can flow to the entity that sets the cookie. Cookies cannot run programs or transmit viruses to your computer; rather, they primarily serve to make the internet offering faster and more user-friendly. This website uses the following types of cookies, whose function and legal basis we explain below:
(3) Mandatory functions technically necessary for displaying the website: The technical structure of the website requires us to use technologies, in particular cookies. Without these technologies, our website cannot be displayed (fully correctly) or the support functions could not be provided. These are generally transient cookies that are deleted after the end of your website visit, at the latest when you close your browser. You cannot opt out of these cookies if you wish to use our website. The individual cookies can be seen in the consent manager. The legal basis for this processing is Article 6(1)(1)(f) GDPR.
(4) Optional cookies subject to your consent: We only set various cookies after your consent, which you can select on your first visit to our website via the so-called cookie consent tool. The functions are only activated if you agree to them and may in particular serve to enable us to analyse and improve visits to our website, to make it easier for you to use it across different browsers or terminal devices, to recognise you on a visit, or to serve advertising (including, where applicable, to align advertising with interests, to measure the effectiveness of advertisements or to display interest-based advertising). The legal basis for this processing is Article 6(1)(1)(a) GDPR. You may withdraw your consent at any time, without this affecting the lawfulness of the processing carried out up to the point of withdrawal.
The functions we use, which you can each select and withdraw individually via the consent manager, are described below.
Visits to our website and the transmission of personal data or personal content of our users take place via SSL encryption. Please ensure that SSL encryption is enabled on your side. The use of encryption is easy to recognise: the display in your browser bar changes from „http://“ to „https://“ when SSL encryption is active. Data encrypted via SSL cannot be read by third parties. Therefore only transmit your confidential information when SSL encryption is active and contact us if in doubt.
We host our website on the Wix.com platform (Wix.com Ltd., 40 Hanamal Tel Aviv St., Tel Aviv 6350671, Israel). Wix.com provides us with the online platform and also sets its own cookies. You can find out exactly which cookies these are at the following link: https://support.wix.com/de/article/cookies-und-deine-website-bei-wix
Wix maintains servers worldwide. The head office of Wix.com Ltd. is in Israel. Israel is assessed by the European Commission as a country with an adequate level of protection for personal data in accordance with European requirements. You have the option at any time to update, rectify or delete your personal data. To do so, you can contact the data protection department at Wix at privacy@wix.com You can find a complete privacy policy from wix.com at: https://de.wix.com/about/privacy
For sending and receiving business emails we use the services of STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin. In this context, personal data such as names, email addresses and communication content are processed on STRATO's servers. The processing takes place solely for the purpose of electronic communication pursuant to Article 6(1)(f) GDPR or for the performance of contractual and pre-contractual obligations pursuant to Article 6(1)(b) GDPR. STRATO acts as our processor within the meaning of Article 28 GDPR. A corresponding data processing agreement has been concluded. The data processing takes place exclusively on servers within the European Union. You can find further information in STRATO's privacy policy at: https://www.strato.de/datenschutz/
(1) A contact form is available on our website which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input screen is transmitted to us and stored. This data is:
For the processing of the data, your consent is obtained as part of the sending process and reference is made to this privacy policy. Alternatively, contact is possible via the email address provided. In this case, the user's personal data transmitted with the email will be stored. No data is passed on to third parties in this context. The data is used exclusively for processing the conversation.
(2) Where the user's consent is present, the legal basis for processing the data is Article 6(1)(a) GDPR. The legal basis for processing data transmitted in the course of sending an email is Article 6(1)(f) GDPR. If the email contact is aimed at the conclusion of a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.
(3) The processing of the personal data from the input screen serves us solely to handle the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.
(4) The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
(5) The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form and that sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The personal data additionally collected during the sending process is deleted at the latest after a period of seven days. The user has the option at any time to withdraw their consent to the processing of their personal data. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
(1) The shipping of your order is handled by a shipping service provider or a haulage company. This may be, among others, the shipping service provider DHL or DPD Deutschland GmbH. You can find more information on data protection at DPD here: https://www.dpd.com/de/de/datenschutz/. You can find more information on data protection at DHL here: https://www.dhl.de/de/toolbar/footer/datenschutz.html
We use Calendly on our website for scheduling appointments. The provider of the service is the American company Calendly LLC, 271 17th St NW, Ste 1000, Atlanta, Georgia, 30363, USA.
Calendly also processes data in the USA. In the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. As things currently stand, Calendly is not a DPF-certified company (here is the official DPF list).
As the basis for data processing at recipients established in third countries, Calendly uses standard contractual clauses pursuant to Article 46(2) and (3) GDPR. Standard contractual clauses (SCC) are model templates provided by the EU Commission and are intended to ensure that your data also complies with European data protection standards when processed in third countries (such as the USA). By means of these clauses, Calendly undertakes to comply with the European level of data protection when processing your personal data, even if the data is processed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses, among other places, here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
You can find out more about data protection at Calendly here: https://calendly.com/privacy
We use Microsoft Teams on our website for holding online meetings. The provider of the service is the American company Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
The information collected is stored on Microsoft's servers, outside Europe primarily in the USA. Under the Data Privacy Framework for the secure transfer of data from the EU to the USA, the use of all US service providers that are certified under the DPF is legally secure (here is the official DPF list). As things currently stand, Microsoft is DPF-certified and thus officially complies with the data protection laws applicable to international data transfers. We have also agreed so-called standard data protection clauses with the providers, the purpose of which is to ensure an adequate level of data protection in the third country.
You can find out more about data protection at Microsoft here: https://privacy.microsoft.com/de-de/privacystatement
We use the cloud-based ERP software „weclapp“ from weclapp SE, Neue Mainzer Straße 66-68, 60311 Frankfurt am Main, for the administration and organisation of our business processes. In this context, personal data (e.g. master data of customers, suppliers and employees, contract and invoice data, communication content) is stored and processed in weclapp. The processing takes place exclusively for the performance of pre-contractual measures, for the performance of the contract and for internal organisation. In doing so, weclapp acts as a processor within the meaning of Article 28 GDPR. A corresponding data processing agreement has been concluded with weclapp SE, which ensures the protection of the data in accordance with the applicable data protection regulations. The data processing takes place exclusively on servers within the European Union. You can find further information on data processing by weclapp at: https://www.weclapp.com/de/datenschutz/
We use services of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (hereinafter „Microsoft“), as part of our business communication and data processing. This includes in particular applications such as Microsoft 365, Outlook, Teams, OneDrive and SharePoint.
The legal basis for the data processing in connection with this use is generally Article 6(1)(b) GDPR (performance of a contract) or Article 6(1)(f) GDPR (legitimate interest), provided that no explicit consent is required.
Microsoft acts for us as a processor pursuant to Article 28 GDPR. A corresponding data processing agreement (Data Processing Addendum, DPA) has been concluded. In it, Microsoft undertakes to comply with EU data protection standards.
Microsoft also processes data in part in third countries, in particular in the USA. To safeguard such transfers, Microsoft relies on the EU Commission's standard contractual clauses pursuant to Article 46(2)(c) GDPR. In addition, Microsoft Corporation in the USA is certified under the EU-U.S. Data Privacy Framework, which guarantees an adequate level of data protection (here is the official DPF list).
Microsoft contractually undertakes to extensive technical and organisational measures to protect personal data. You can find further information on Microsoft's data protection provisions at: https://privacy.microsoft.com/de-de/privacystatement
(1) This website uses Google Analytics, a web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). The purpose of our use of the tool is to enable the analysis of your user interactions on websites and in apps and, through the statistics and reports obtained, to improve our offering and make it more interesting for you as a user.
(2) We record the interactions between you as a user of the website and our website primarily by means of cookies, device/browser data, IP addresses and website or app activities. Google Analytics also records your IP addresses in order to ensure the security of the service and to give us, as the website operator, an indication of the country, region or place from which the respective user originates (so-called „IP geolocation“). For your protection, however, we of course use the anonymisation function („IP masking“), i.e. Google truncates the IP addresses by the last octet within the EU/EEA.
(3) Google acts as a processor and we have concluded a corresponding agreement with Google. Google also processes data in the USA. Under the Data Privacy Framework for the secure transfer of data from the EU to the USA, the use of all US service providers that are certified under the DPF is legally secure (here is the official DPF list). As things currently stand, Google is DPF-certified and thus officially complies with the data protection laws applicable to international data transfers. The use of Google Analytics on our website is based on your consent pursuant to Article 6(1)(a) GDPR. Where this consent is present, it constitutes the legal basis for the processing of personal data by Google. In addition, we have a legitimate interest in using Google Analytics to optimise our online service, based on Article 6(1)(f) GDPR. Nevertheless, Google Analytics is only used where your express consent is present.
(4) The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is the consent you have given (Article 6(1)(1)(a) GDPR). You may withdraw your consent at any time, without this affecting the lawfulness of the processing carried out up to the point of withdrawal. In apps, you can reset the advertising ID in the settings of Android or iOS. The easiest way to withdraw is via our consent manager or by installing Google's browser add-on, which is available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
(5) You can find more detailed information on the scope of services of Google Analytics at https://marketingplatform.google.com/about/analytics/terms/de/. Google provides information on data processing when using Google Analytics at the following link: https://support.google.com/analytics/answer/6004245?hl=de. General information on data processing which, according to Google, is also intended to apply to Google Analytics, can be found in Google's privacy policy at https://www.google.de/intl/de/policies/privacy/.
This website uses wix.com to record your behaviour on our website so that the settings of our website can be better adapted to your behaviour. The operator is (as already set out above under the point „Hosting“) the Israeli company Wix.com Ltd., based at 40 Hanamal Tel Aviv St., Tel Aviv 6350671, Israel.
You have the option at any time to object to tracking for analysis purposes and to limit your settings for the setting of cookies when visiting our website. The legal basis for the processing is your consent pursuant to Article 6(1)(a) GDPR. You can find further information on data protection at Wix.com here: https://de.wix.com/about/privacy
(1) We currently use the following social media plug-ins: Instagram, LinkedIn, which are only loaded if you have previously activated the function through your consent. Via the plug-ins we offer you the option of interacting with the social networks and other users. The legal basis for the use of the plug-ins is Article 6(1)(1)(a) GDPR, i.e. the integration only takes place after your consent.
(2) The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis takes place in particular (including for users who are not logged in) in order to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise it. The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us is assigned directly to your existing account with the plug-in provider. If you activate the enabled button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but in particular before activating the button, as this allows you to avoid being assigned to your profile with the plug-in provider.
(3) The information collected is stored on the providers' servers, in the case of international providers also outside Europe. Under the Data Privacy Framework for the secure transfer of data from the EU to the USA, the use of all US service providers that are certified under the DPF is legally secure (here is the official DPF list). As things currently stand, Meta is DPF-certified and thus officially complies with the data protection laws applicable to international data transfers. In the case of LinkedIn, no data transfer to a third country takes place if the data is processed exclusively by LinkedIn Ireland. However: LinkedIn belongs to the US corporation Microsoft, and it is possible that, in the context of certain services or support processes, personal data may also be transferred to the USA. Microsoft is certified under the Data Privacy Framework.
(4) You may withdraw your consent at any time, without this affecting the lawfulness of the processing carried out up to the point of withdrawal. The easiest way to withdraw is via our consent manager or via the functions of the social media providers.
(5) You can find further information on the purpose and scope of the data collection and its processing by the plug-in provider in the privacy policies of these providers set out below. There you will also find further information on your rights in this regard and options for settings to protect your privacy. Addresses of the respective plug-in providers and URL of the respective data protection notices:
(1) We have integrated YouTube videos into our online offering that are stored on YouTube.com and can be played directly from our website. These are all integrated in „extended data protection mode“, i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos is the data mentioned in paragraph (2) transmitted. We have no influence over this data transmission. The legal basis for displaying the videos is Article 6(1)(1)(a) GDPR, i.e. the integration only takes place after your consent.
(2) By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the basic data mentioned above, such as IP address and time stamp, is transmitted. This takes place regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in with Google, your data is assigned directly to your account. If you do not wish your data to be assigned to your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses it for the purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis takes place in particular (even for users who are not logged in) in order to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact YouTube to exercise it.
(3) The information collected is stored on Google's servers, including in the USA. Under the Data Privacy Framework for the secure transfer of data from the EU to the USA, the use of all US service providers that are certified under the DPF is legally secure (here is the official DPF list). As things currently stand, Google is DPF-certified and thus officially complies with the data protection laws applicable to international data transfers.
(4) You can find further information on the purpose and scope of the data collection and its processing by YouTube in the privacy policy. There you will also find further information on your rights and options for settings to protect your privacy: https://www.google.de/intl/de/policies/privacy
(1) We have various presences on social media platforms. We operate the presences with the following providers:
(2) For these information services we make use of the technical platform and services of the providers. We point out to you that you use our presences on social media platforms and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). When you visit our presences, the providers of the social media platforms record, among other things, your IP address as well as further information present in the form of cookies on your terminal device. This information is used to provide us, as the operator of the accounts, with statistical information about the interaction with us.
(3) The information collected is stored on the providers' servers, in the case of international providers also outside Europe. Under the Data Privacy Framework for the secure transfer of data from the EU to the USA, the use of all US service providers that are certified under the DPF is legally secure (here is the official DPF list). As things currently stand, Meta is DPF-certified and thus officially complies with the data protection laws applicable to international data transfers. We have also agreed so-called standard data protection clauses with the providers, the purpose of which is to ensure an adequate level of data protection in the third country. We are not aware in what way the social media platforms use the data from your visit to our account and your interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties. The data processing may differ depending on whether you are registered and logged in with the social network or visit the page as a non-registered and/or non-logged-in user. When accessing a post or the account, the IP address assigned to your terminal device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your terminal device can be used to track how you have moved around the internet. Via buttons integrated into websites, it is possible for the platforms to record your visits to these websites and assign them to your respective profile. On the basis of this data, content or advertising tailored to you can be offered. If you wish to avoid this, you should log out or deactivate the „stay logged in“ function, delete the cookies present on your device and restart your browser.
(4) Beyond this, we, as the provider of the information service, only process the data from your use of our service that you provide to us and that requires interaction. If, for example, you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing that we describe in this privacy policy. The legal basis for the processing of your data on the social media platform is Article 6(1)(1)(f) GDPR.
(5) To exercise your data subject rights, you can contact either us or the provider of the social media platform. Insofar as one party is not responsible for responding or must obtain the information from the other party, we or the provider will then forward your request to the respective partner. For questions about the profiling and processing of your data when using the website, please contact the operator of the social media platform directly. For questions about the processing of your interaction with us on our page, please write to the contact details provided by us above.
(6) The providers describe which information the social media platform receives and how it is used in their privacy policies (see link in the list above). There you will also find information on contact options as well as on the settings options for advertisements. You can also find further information on social networks and how you can protect your data at https://www.youngdata.de.
(1) We use the Google Ads offering in order to draw attention to our offerings with the help of advertisements. If you reach our website via a Google advertisement, a cookie is stored on your terminal device by Google Ads. The legal basis for the processing of your data is Article 6(1)(1)(a) GDPR, i.e. the integration only takes place after your consent.
(2) The advertising media are delivered by Google via so-called „ad servers“. For this purpose, we and other websites use so-called ad server cookies, by means of which certain parameters for measuring success, such as the display of advertisements or clicks by users, can be measured. Via the Google Ads cookies stored on our website, we can obtain information about the success of our advertising campaigns. These cookies are not intended to identify you personally. As analysis values, this cookie generally stores the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions) as well as opt-out information (a marker that a user no longer wishes to be addressed).
(3) The cookies set by Google enable Google to recognise your internet browser. If a user visits certain pages of the website of an Ads customer and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user clicked on the advertisement and was redirected to this page. A different cookie is assigned to each Ads customer, so that the cookies cannot be tracked across the websites of other Ads customers. Through the integration of Google Ads, Google receives the information that you have accessed the relevant part of our website or clicked on an advertisement of ours. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and store your IP address.
(4) Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. In the advertising measures mentioned, we ourselves do not independently collect personal data, but merely provide Google with the opportunity to collect the data. We are provided by Google only with statistical analyses that indicate which advertisements were clicked, how often and at what prices. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.
(5) You may withdraw your consent at any time, without this affecting the lawfulness of the processing carried out up to the point of withdrawal. The easiest way to withdraw is via our consent manager or via the following functions: a) by an appropriate setting of your browser software; in particular, suppressing third-party cookies means that you will not receive advertisements from third-party providers; b) by setting your browser so that cookies from the domain „www.googleadservices.com“ are blocked (https://www.google.de/settings/ads), whereby this setting is deleted if you delete your cookies; c) by deactivating the interest-based advertisements of the providers that are part of the „About Ads“ self-regulation campaign, via the link https://www.aboutads.info/choices, whereby this setting is deleted if you delete your cookies; d) by permanently deactivating it in your browsers Firefox, Internet Explorer or Google Chrome at the link https://www.google.com/settings/ads/plugin. We point out to you that in this case you may not be able to use all functions of this offering to their full extent.
(6) You can find further information on data protection at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.
(1) We use Google Ads with the additional application „Google Conversion Tracking“. This is a procedure with which we can check the success of our advertising campaigns. For this purpose, the advertisements are provided with a technical arrangement, e.g. an ID, with which we can determine how a user interacts after clicking on the advertisements and whether one of our services is actually used. In this way we receive, in statistical form, information about the total number of readers of our advertisements, which advertisements are particularly popular and, where applicable, further information about the consequences arising from the advertisement.
(2) The legal basis for the processing of your data is likewise Article 6(1)(1)(a) GDPR, i.e. the integration only takes place after your consent. You can prevent or no longer use the conversion tracking function in the same way as described above for Google Ads.
We use the instant messaging service WhatsApp. The service provider is the American company WhatsApp Inc., a subsidiary of Meta Platforms Inc. For the European area, the company WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible.
WhatsApp also processes your data, among other places, in the USA. Under the Data Privacy Framework for the secure transfer of data from the EU to the USA, the use of all US service providers that are certified under the DPF is legally secure (here is the official DPF list). As things currently stand, WhatsApp LLC is DPF-certified and thus officially complies with the data protection laws applicable to international data transfers.
We only include you in WhatsApp communication if you consent to this. If you contact us via WhatsApp, this contact is also deemed to be consent to communication via WhatsApp.
As the legal basis for the processing of data in third countries, WhatsApp uses standard contractual clauses. The standard contractual clauses are model templates provided by the European Commission that set out the EU standard for data security in the context of transfers to third countries. By this means, WhatsApp undertakes to comply with the European level of data protection when processing personal data. You can find information on this here: https://www.whatsapp.com/legal/business-data-transfer-addendum-20210927. You can find information on data processing at WhatsApp here: https://www.whatsapp.com/privacy.
All data that you provide to us via our homepage or as an application by any other means is processed solely for the purpose of carrying out the application and selection procedure and serves solely to assess your professional suitability and to contact you. This includes your form of address, first name, surname, address, telephone number, email address, your CV as well as data on your education and qualifications, Article 6(1)(b) GDPR, § 26 BDSG.
If, in the application letter or other documents submitted by you during the application procedure, you yourself disclose „special categories of personal data“ within the meaning of Article 9 GDPR, your consent also extends to this data. We ask you to refrain as far as possible from providing special categories of personal data in the application.
Your application documents are only passed on to those responsible for evaluating the application and, where applicable, for hiring.
Your applicant data is used exclusively for application procedures with us. The data and files transmitted by you are stored and used exclusively for purposes connected with the recording and processing of your application.
With your application, you simultaneously give your consent to the storage of your applicant data. Six months after the conclusion of the application procedure, your applicant data will be deleted. No separate notification will be given of this.
The principles set out also apply in the case of an unsolicited application, i.e. where you do not apply for a specific position, or where applicant data is sent by post or by email.