Comprehensive data protection is our concern

We are pleased about your interest in our company and our products and services and would like you to feel safe when visiting our Internet pages, also with regard to the protection of your personal data. We take the protection of your personal data very seriously and regard it as a good worth protecting. Compliance with the provisions of the Federal Data Protection Act and the DSGVO is a matter of course for us.

We believe that you should know when we collect what information and how we use it. We have taken technical and organisational measures to ensure that the data protection regulations are observed both by us and by external service providers.

Personal data

Personal data is all the information that determines your identity. This includes, for example, information such as name, address, telephone number and e-mail address. In order to use our website, it is not necessary for you to disclose personal data. In some cases, however, we do need your name and address and other information so that we can provide the requested services.

Should you make use of such services, as a rule only such data is collected as is absolutely necessary for us to provide the services. If we ask you for further data, this is voluntary information. The processing of personal data is carried out exclusively to provide the requested service and to protect our own legitimate business interests.

Purpose of the personal data

The personal data you provide us with will be used by us to answer your inquiries, process your orders or to provide you with access to specific information or offers. We will neither sell your personal data to third parties nor market it in any other way.

Intended use

We will collect, process and use the personal data you provide online only for the purposes you have been informed about. Your personal data will not be disclosed to third parties without your necessary consent. The collection of personal data and its transmission to state institutions and authorities entitled to receive information will only take place within the framework of the relevant laws or if we are obliged to do so by a court decision. Our employees and the service companies commissioned by us are obliged by us to maintain secrecy and to comply with the provisions of the Federal Data Protection Act and the GDPR.

Non-personal data collected automatically

When using our internet pages, the following data is stored for organisational and technical reasons: the names of the pages called up, the browser and operating system used, date and time of access, search engines used, names of downloaded files and your IP address. We evaluate these technical data anonymously and only for statistical purposes in order to constantly optimize our Internet presence and make our Internet offers even more attractive. This anonymous data is stored separately from personal information on secure systems and does not allow any conclusions about an individual person. Your personal data and your privacy are therefore protected at all times.

External hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated by a website.

The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our hoster will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions with regard to this data.

Conclusion of a contract for order processing

In order to guarantee data protection compliant processing, we have concluded a contract for order processing with our hoster.

Note on data transfer to the USA

Among other things, our website includes tools from companies based in the USA. If these tools are active, your personal data may be transferred to the US servers of these companies. We would like to point out that the USA is not a safe third country in terms of EU data protection law. US companies are obliged to release personal data to security authorities without you as the affected party being able to take legal action against this. Therefore, it cannot be excluded that US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.

Cookies

When you visit one of our websites, we may store information on your computer in the form of a cookie. Cookies are small text files that are sent to your browser from a web server and stored on your computer’s hard drive. No personal data of the user is stored, only the internet protocol address. This information is used to automatically recognize you the next time you visit our websites and to make navigation easier for you. Cookies allow us, for example, to adapt a website to your interests or to store your password so that you do not have to enter it again each time.

Most of the cookies we use are so-called “session cookies”. These are automatically deleted at the end of your visit. Other cookies remain stored on the terminal device until you delete them. These cookies enable us to recognize your browser on your next visit.

Of course you can also view our websites without cookies. If you do not want us to recognize your computer, you can prevent cookies from being stored on your hard drive by selecting “do not accept cookies” in your browser settings. Please refer to the instructions of your browser manufacturer for details of how this works. If you do not accept cookies, however, this can lead to functional restrictions of our offers.

Server log-files

The provider of the site automatically collects and stores information in the so-called server log files, which your browser automatically sends to us. These are:

  • browser type and browser version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of the server request

These data cannot be assigned to specific persons. A consolidation of the data with other data sources is not carried out. We reserve the right to check this data subsequently if we become aware of concrete indications of illegal use.

Online – Application process

To process your online application, we collect, process and use your personal data. Your online application data will be sent by e-mail directly to the personnel department and will of course be treated confidentially. Suitable technical and organizational measures ensure that your personal data is treated confidentially within the legal requirements. When filling out your online application, please note that the data is transmitted unencrypted by e-mail and that the data may be accessed or falsified by unauthorized persons. You are welcome to send us your documents by post. If you have applied for a specific position and this position has already been filled, or if we consider you equally or even better suited for another position, we would be happy to forward your application within our company. Please inform us if you do not agree with this procedure. At the end of the application process, but after 9 months at the latest, your personal data will be automatically deleted, unless you expressly agree to storage for a longer period of time.

Forms

When collecting personal data, we observe the principle of data avoidance and data economy, i.e. when contacting us, for example via a corresponding form, personal data is only collected and stored to the extent necessary. The collection of personal data is only carried out with your prior consent. Your data will be stored exclusively for the establishment, execution or termination of a contractual or quasi-contractual business relationship and will be used for the agreed purpose and scope. You can revoke your consent at any time, with effect for the future. After revocation we will delete the data concerned.

Insofar as personal data (name, address, e-mail addresses, etc.) is collected on our website, for example via contact forms, this is done on a voluntary basis. The collected data will not be passed on or sold to third parties without your express consent. You can send your revocation to the operator of these websites mentioned in the imprint under the provider identification.

Comment function on this website

For the comment function on this page, in addition to your comment, information about when the comment was created, your e-mail address and, if you are not posting anonymously, the user name you have chosen are stored.

Storage of the IP address

Our comment function stores the IP addresses of users who post comments. Although we check comments on our site before they are activated, we need this data to be able to take action against the author in case of legal violations such as insults or propaganda.

Subscribe to comments

As a user of the site, you can subscribe to comments after logging in. You will receive a confirmation email to verify that you are the owner of the email address you entered. You can unsubscribe from this function at any time via a link in the info mails.

SSL encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of your browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL encryption is activated, the data you send to us cannot be read by third parties.

GoogleMaps™ map service

This website uses Google Maps, which is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When using this plugin, personal data may be transmitted to Google under certain circumstances. To prevent this, it is necessary that you completely deactivate Javascript. However, this may result in parts of the website no longer being usable.

You can find further information in the terms of use for Google Maps at https://maps.google.com/help/terms_maps.html

You can find detailed information in the data protection center of google.dehttps://policies.google.com/privacy/update?hl=de&gl=de. Here you can also stop the data processing by Google.

OpenStreetMap

We use the map service of OpenStreetMap (OSM). Provider is the Open-Street-Map Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

When you visit a Web site that includes OpenStreetMap, your IP address and other information about your behavior on that Web site will be forwarded to OSMF. OpenStreetMap may store cookies in your browser or use similar recognition technologies.

Your location may also be recorded if you have allowed this in your device settings, such as on your cell phone. The provider of this site has no influence on this data transfer. For details, please refer to the OpenStreetMap privacy policy at the following link: https://wiki.osmfoundation.org/wiki/Privacy_Policy.

OpenStreetMap is used in the interest of an attractive presentation of our online offers and easy findability of the locations we have indicated on the website. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

YouTube

We integrate the videos from the “YouTube” platform of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Personal data can be transferred to YouTube or Google by clicking on the embedded videos. A privacy policy can be found here: https://www.google.com/policies/privacy/. If you wish to opt-out of this transmission, you can find an opt-out here: https://adssettings.google.com/authenticated.

Newsletter data

If you would like to receive the newsletter offered on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data will not be collected or only on a voluntary basis. We use these data exclusively for sending the requested information and do not pass them on to third parties.

The data entered in the newsletter registration form will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address as well as its use for sending the newsletter at any time, e.g. via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you have provided us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you have cancelled your subscription. Data that has been stored by us for other purposes remains unaffected.

After you have been removed from the newsletter distribution list, your e-mail address may be stored in a blacklist by us or the newsletter service provider to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in compliance with the legal requirements when sending newsletters (legitimate interest in the sense of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

Google Web Fonts

This site uses so-called web fonts, which are provided by Google, for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google servers.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in the Google privacy policy: https://policies.google.com/privacy?hl=de.

Safety and security

We have taken technical and organizational security measures to protect your personal data from loss, destruction, manipulation and unauthorized access. All our employees and all third parties involved in data processing are bound to the Federal Data Protection Act and the confidential handling of personal data. Our security measures are continuously revised in line with technological developments.

Changes to our privacy policy

We will update this policy from time to time to protect your personal information. You should review this policy from time to time to stay informed about how we protect your information and continually improve the content of our website. If we make material changes in the way we collect, use and/or share the personal information you provide to us, we will notify you by placing a prominent notice on the website. By using the website, you agree to the terms and conditions of this privacy policy. If you have any questions regarding these data protection regulations, please contact us via our privacy@interface-projects.de data protection officer.

Links

If you use external links that are offered within the framework of our Internet pages, this data protection declaration does not extend to these links. If we offer links, we make every effort to ensure that these also comply with our data protection and security standards. However, we have no influence on the compliance with data protection and security regulations by other providers. Therefore, please also inform yourself on the websites of the other providers about the data protection declarations provided there.

Your rights and appeal possibilities

You have the following rights against us with regard to the data concerning you:

  • right to information,
  • right to rectification or deletion,
  • right to limit the processing,
  • right to revoke your consent,
  • right to object to the processing
  • right to data transferability.

You can exercise all of these rights by contacting our data protection officer. You can reach him at:

interface projects GmbH
c/o Certificate OK
Datenschutzbeauftragter
Zwinglistraße 11/13
01277 Dresden

or send an e-mail to our data protection officer: info@certificateok.de

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

Responsible body

Responsible for data processing within the meaning of data protection law is the:

interface projects GmbH
c/o Certificate OK
Zwinglistraße 11/13
01277 Dresden
E-Mail: info@certificateok.de

Questions, suggestions, complaints

If you have further questions about our information on data protection and the processing of your personal data, you can also contact our data protection officer directly

interface projects GmbH
c/o Certificate OK
Zwinglistraße 11/13
01277 Dresden
E-Mail: info@certificateok.de

or send an e-mail to info@certificateok.de. He is also available as a contact person in case of requests for information, suggestions or complaints regarding data protection.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke a previously given consent at any time. The legality of the data processing that took place up to the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU SHALL HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR SPECIFIC SITUATION, INCLUDING PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVE THAT THERE ARE COMPELLING REASONS FOR PROCESSING WHICH ARE WORTHY OF PROTECTION AND WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR UNLESS THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING, INCLUDING PROFILING, INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).

Right of appeal to the competent supervisory authority

In the event of violations of the GDPR, the persons concerned have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the suspected violation. This right of appeal is without prejudice to other administrative or judicial remedies.

Right to data transferability

You have the right to have data, which we process automatically on the basis of your consent or in fulfilment of a contract, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent technically feasible.

Information, deletion and correction

Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correct or delete this data. For this purpose, as well as for further questions regarding personal data, you can contact us at any time at the address given in the imprint.

Right to limit processing

You have the right to request that the processing of your personal data be restricted. To do so, you can contact us at any time at the address given in the imprint. The right to restrict processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the review, you have the right to demand the restriction of the processing of your personal data.
  • If the processing of your personal data was/is unlawful, you can demand the restriction of the data processing instead of deletion.
  • If we no longer need your personal data, but you need it for the exercise, defence or assertion of legal claims, you have the right to demand the restriction of the processing of your personal data instead of deletion.
  • If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to demand the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state.

Opposition to advertising e-mails

The use of contact data published within the scope of the imprint obligation for the transmission of not expressly requested advertisement and information materials is hereby contradicted. The operators of the site expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as through spam e-mails.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your inquiry including all personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), provided that the inquiry was made.

The data sent to us by you via contact inquiries will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for which it was stored no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular legal retention periods – remain unaffected.

Source: Excerpts from e-recht24.de